last executing test programs: 1m30.404705085s ago: executing program 3 (id=3248): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc3, 0x80, 0x34325241, 0x0, [0x2], [0x80ffff], [], [0x80000001, 0x0, 0x0, 0x4]}) 1m30.237731555s ago: executing program 3 (id=3253): r0 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='uid', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) 1m30.030610157s ago: executing program 3 (id=3258): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x2) 1m29.822062715s ago: executing program 3 (id=3264): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m29.490489993s ago: executing program 3 (id=3270): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x13d8, 0x3, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1}}}}) 1m28.891042668s ago: executing program 3 (id=3282): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b20, &(0x7f0000000400)={'wlan1\x00'}) 1m28.42502934s ago: executing program 32 (id=3282): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b20, &(0x7f0000000400)={'wlan1\x00'}) 4.466290849s ago: executing program 2 (id=4532): r0 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000000500)={[{@dots}, {@nodots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@nfs}, {@dots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x359}}, {@dots}, {@fat=@discard}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {}, {@fat=@tz_utc}, {@nodots}, {@fat=@debug}, {@dots}, {@nodots}, {@dots}]}, 0x0, 0x1fe, &(0x7f0000001c80)="$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") getdents64(r0, &(0x7f00000002c0)=""/189, 0xbd) 4.256193564s ago: executing program 2 (id=4535): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000003d7940c71a010019cc0102030109021b0001000000000904000001932cf400090588"], 0x0) 3.43574418s ago: executing program 0 (id=4548): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88043, 0x1fe) 2.92537583s ago: executing program 4 (id=4557): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)) 2.803420961s ago: executing program 4 (id=4561): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) 2.666505652s ago: executing program 2 (id=4562): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0x5}], 0x10}}], 0x1, 0x24002010) 2.536575852s ago: executing program 1 (id=4565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03316844268cb89614f086dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.386422855s ago: executing program 1 (id=4567): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_fd={0x2b3, 0x4, 0x4, 0x4000, 0x3, {}, {0x4, 0x8, 0x1, 0x7, 0x3, 0xf, "7baabf50"}, 0xfff, 0x4, {0x0}, 0x7}) 2.385939615s ago: executing program 2 (id=4568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) 2.361118991s ago: executing program 0 (id=4569): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) 2.219258066s ago: executing program 4 (id=4570): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x0, 0x2, 0x0, 0x4}}, 0x26) 2.21867786s ago: executing program 1 (id=4571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x80, 0xbf, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x4040800) 2.144611491s ago: executing program 2 (id=4572): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5952, &(0x7f0000005c80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.109848545s ago: executing program 0 (id=4573): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000029000000040000002b50"], 0x30}}], 0x1, 0x44040) 2.016498974s ago: executing program 1 (id=4574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1.896408853s ago: executing program 0 (id=4576): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='cramfs\x00', 0x2008000, 0x0) 1.81657713s ago: executing program 4 (id=4577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) 1.799768543s ago: executing program 1 (id=4578): syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x9, 0x0, 0x1, 0x6}) 1.675258818s ago: executing program 0 (id=4580): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b000100000000090400000103010200090503"], 0x0) 1.674573192s ago: executing program 4 (id=4581): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x44242, 0x0) 1.505554278s ago: executing program 4 (id=4582): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) 900.589977ms ago: executing program 5 (id=4584): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) 591.293819ms ago: executing program 5 (id=4585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 441.179463ms ago: executing program 5 (id=4586): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) 292.645935ms ago: executing program 5 (id=4587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 223.107216ms ago: executing program 1 (id=4588): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 160.855278ms ago: executing program 5 (id=4589): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 141.637014ms ago: executing program 2 (id=4590): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1a, 0x1, 0x0, 0xfffffffe, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 19.867466ms ago: executing program 5 (id=4591): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000340)=0x57) 0s ago: executing program 0 (id=4592): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d2828"], 0xe0}], 0x1}, 0x40040) kernel console output (not intermixed with test programs): 5] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.506181][ T5165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.508019][ T5165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.509890][ T5165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.510562][ T5165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.838238][T13938] loop2: detected capacity change from 0 to 32768 [ 314.956030][T13977] loop4: detected capacity change from 0 to 2048 [ 315.002615][T13977] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 315.045491][T13977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.163917][T13938] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 315.163943][T13938] allowing incompatible features above 0.0: (unknown version) [ 315.163955][T13938] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 315.331503][T13938] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 315.354813][T13938] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 315.368211][T13938] bcachefs (loop2): Version upgrade required: [ 315.368211][T13938] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 315.368211][T13938] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 315.368211][T13938] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 315.443556][T13938] bcachefs (loop2): dropping and reconstructing all alloc info [ 315.469425][T13938] bcachefs (loop2): accounting_read... done [ 315.475925][T13938] bcachefs (loop2): alloc_read... done [ 315.491561][T13938] bcachefs (loop2): snapshots_read... done [ 315.882935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.899783][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.913967][ T12] bond0 (unregistering): Released all slaves [ 315.937182][ T12] bond1 (unregistering): Released all slaves [ 315.964207][ T12] bond2 (unregistering): Released all slaves [ 316.011393][ T12] bond3 (unregistering): Released all slaves [ 316.040454][ T12] bond4 (unregistering): Released all slaves [ 316.277050][T14012] loop4: detected capacity change from 0 to 512 [ 316.376039][T14012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.389081][T14012] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.448288][ T30] audit: type=1326 audit(1752670384.513:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14018 comm="syz.0.3322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f670938e929 code=0x0 [ 316.478571][T14012] Quota error (device loop4): do_check_range: Getting block 262146 out of range 1-5 [ 316.503590][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'. [ 316.534857][T14012] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 316.546576][T14012] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3321: Failed to acquire dquot type 0 [ 316.582506][ T5854] Bluetooth: hci4: command tx timeout [ 316.592748][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 316.603783][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 316.656873][T14023] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3323'. [ 316.676089][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.063291][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.077936][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.436175][T14057] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3335'. [ 317.547731][ T5859] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 317.613205][ T12] hsr_slave_0: left promiscuous mode [ 317.637818][ T12] hsr_slave_1: left promiscuous mode [ 317.645384][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.743542][ T5859] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 317.762459][ T5859] usb 5-1: config 0 has no interface number 0 [ 317.791775][ T5859] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 317.816832][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 317.837707][ T5859] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 317.852953][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.895090][ T5859] usb 5-1: config 0 descriptor?? [ 317.956713][ T5859] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input21 [ 318.167703][ T5859] usb 5-1: USB disconnect, device number 16 [ 318.640373][ T12] team0 (unregistering): Port device team_slave_1 removed [ 318.661325][ T5854] Bluetooth: hci4: command tx timeout [ 318.690589][ T12] team0 (unregistering): Port device team_slave_0 removed [ 319.289928][T13959] chnl_net:caif_netlink_parms(): no params data found [ 319.301038][T14070] bridge_slave_1: left allmulticast mode [ 319.306809][T14070] bridge_slave_1: left promiscuous mode [ 319.313311][T14070] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.331878][T14070] bridge_slave_0: left allmulticast mode [ 319.337546][T14070] bridge_slave_0: left promiscuous mode [ 319.346009][T14070] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.427855][ T5927] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 319.598719][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 319.618013][ T5927] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 319.637262][ T5927] usb 5-1: config 0 has no interface number 0 [ 319.655415][ T5927] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 51986, setting to 1024 [ 319.686209][ T5927] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 319.710966][ T5927] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 319.726715][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.736148][ T5927] usb 5-1: Product: syz [ 319.740598][ T5927] usb 5-1: Manufacturer: syz [ 319.745326][ T5927] usb 5-1: SerialNumber: syz [ 319.788878][ T5927] usb 5-1: config 0 descriptor?? [ 319.798829][T14103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.852246][T14122] loop0: detected capacity change from 0 to 64 [ 320.009960][T14122] Trying to free block not in datazone [ 320.027802][ T5927] ath6kl: Failed to submit usb control message: -71 [ 320.036905][T14122] Trying to free block not in datazone [ 320.052707][T14126] loop1: detected capacity change from 0 to 1024 [ 320.054866][ T5927] ath6kl: unable to send the bmi data to the device: -71 [ 320.069153][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3363'. [ 320.073236][ T5927] ath6kl: Unable to send get target info: -71 [ 320.087546][ T5927] ath6kl: Failed to init ath6kl core: -71 [ 320.121646][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.134417][ T5927] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 320.153623][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.167389][T14126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.168059][T13959] bridge_slave_0: entered allmulticast mode [ 320.188351][ T5927] usb 5-1: USB disconnect, device number 17 [ 320.265818][T13959] bridge_slave_0: entered promiscuous mode [ 320.318778][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.325909][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.364002][T14126] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 320.404846][T13959] bridge_slave_1: entered allmulticast mode [ 320.413217][T13959] bridge_slave_1: entered promiscuous mode [ 320.539751][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.678862][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.738009][ T5854] Bluetooth: hci4: command tx timeout [ 320.839088][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3372'. [ 320.889993][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.209413][T13959] team0: Port device team_slave_0 added [ 321.221636][T14171] netlink: 'syz.0.3377': attribute type 7 has an invalid length. [ 321.250869][T13959] team0: Port device team_slave_1 added [ 321.265660][T14171] netlink: 'syz.0.3377': attribute type 8 has an invalid length. [ 321.291777][T14175] netlink: 636 bytes leftover after parsing attributes in process `syz.1.3378'. [ 321.322581][T14174] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 321.528235][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.565096][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.641235][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.665136][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.675923][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.706868][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.924407][T13959] hsr_slave_0: entered promiscuous mode [ 321.939215][T13959] hsr_slave_1: entered promiscuous mode [ 321.961720][T13959] debugfs: 'hsr0' already exists in 'hsr' [ 321.975425][T13959] Cannot create hsr debugfs directory [ 322.650386][T14225] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 322.821370][ T5854] Bluetooth: hci4: command tx timeout [ 322.844768][T13959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.871445][T13959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.899109][T14235] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3404'. [ 322.913648][T13959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.927807][T14235] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3404'. [ 322.958828][T13959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.096653][T14206] loop2: detected capacity change from 0 to 32768 [ 323.097764][ T1213] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 323.124313][T14250] loop1: detected capacity change from 0 to 1024 [ 323.149808][T14206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3393 (14206) [ 323.185628][T14249] loop4: detected capacity change from 0 to 1024 [ 323.264487][T14206] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.268443][ T1213] usb 1-1: Using ep0 maxpacket: 16 [ 323.278370][T13959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.308801][T14206] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 323.315645][ T1213] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.338270][T14206] BTRFS info (device loop2): using free-space-tree [ 323.364888][ T1213] usb 1-1: config 0 has no interface number 0 [ 323.376204][T13959] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.390999][T14249] hfsplus: extend alloc file! (8192,63991,0) [ 323.422763][ T1213] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 323.442688][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.449855][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.470181][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.477333][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.485837][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.537774][ T1213] usb 1-1: Product: syz [ 323.542056][ T1213] usb 1-1: Manufacturer: syz [ 323.579822][ T1213] usb 1-1: SerialNumber: syz [ 323.585398][T14206] BTRFS info (device loop2): rebuilding free space tree [ 323.603730][ T1213] usb 1-1: config 0 descriptor?? [ 323.616442][ T1213] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 323.691274][T14269] loop1: detected capacity change from 0 to 1024 [ 323.751839][T14269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.797977][T14274] loop4: detected capacity change from 0 to 2048 [ 323.801471][T14269] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.863831][T14269] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.866018][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.888118][T14269] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.914676][T14274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.955107][T14269] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 3: comm syz.1.3408: lblock 3 mapped to illegal pblock 3 (length 1) [ 324.036704][ T1213] gspca_spca1528: reg_w err -71 [ 324.062557][T14269] Quota error (device loop1): write_blk: dquota write failed [ 324.077940][ T1213] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 324.121522][T14269] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 324.146543][ T1213] usb 1-1: USB disconnect, device number 18 [ 324.220218][T14269] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 324.301058][T14269] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3408: Failed to acquire dquot type 0 [ 324.325451][T13959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.349975][T14269] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 3: comm syz.1.3408: lblock 3 mapped to illegal pblock 3 (length 1) [ 324.427353][T14269] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 324.472457][T14269] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3408: Failed to acquire dquot type 0 [ 324.531146][T14292] : renamed from bond_slave_0 (while UP) [ 324.549053][T14269] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.3408: Freeing blocks not in datazone - block = 0, count = 4096 [ 324.594364][T14269] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 3: comm syz.1.3408: lblock 3 mapped to illegal pblock 3 (length 1) [ 324.741265][T14269] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 324.790685][T14269] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3408: Failed to acquire dquot type 0 [ 324.843871][T14269] EXT4-fs (loop1): 1 orphan inode deleted [ 324.868983][T14269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.034125][T14269] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3408: iget: bad extended attribute block 6 [ 325.223985][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.304139][T14317] bridge2: entered promiscuous mode [ 325.515638][T13959] veth0_vlan: entered promiscuous mode [ 325.580397][T13959] veth1_vlan: entered promiscuous mode [ 325.774268][T13959] veth0_macvtap: entered promiscuous mode [ 325.892026][T13959] veth1_macvtap: entered promiscuous mode [ 325.976951][T13959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.012220][T14352] loop0: detected capacity change from 0 to 512 [ 326.101614][T14352] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 326.114027][T13959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.151254][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.167811][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.176766][T14352] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 326.188617][T14352] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3426: Failed to acquire dquot type 1 [ 326.227660][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.227743][ T4545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.229644][T14352] EXT4-fs (loop0): 1 truncate cleaned up [ 326.231216][T14352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.231309][T14352] ext4 filesystem being mounted at /700/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.272492][T14352] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 326.272708][T14352] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 326.272888][T14352] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3426: Failed to acquire dquot type 1 [ 326.381802][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.527430][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.527453][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.686381][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.686401][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.907084][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3284'. [ 326.977802][ T5859] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 327.080003][T14353] loop2: detected capacity change from 0 to 32768 [ 327.108674][T14353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3425 (14353) [ 327.158015][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 327.181782][ T5859] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 327.211131][ T5859] usb 5-1: config 0 has no interface number 0 [ 327.239772][ T5859] usb 5-1: config 0 interface 244 altsetting 2 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 327.253720][T14353] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.293717][ T5859] usb 5-1: config 0 interface 244 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.302560][T14353] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 327.329952][T14353] BTRFS info (device loop2): using free-space-tree [ 327.337237][ T5859] usb 5-1: config 0 interface 244 has no altsetting 0 [ 327.374622][ T5859] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 327.384595][ T1213] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 327.427233][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.446062][ T5859] usb 5-1: Product: syz [ 327.463251][ T5859] usb 5-1: Manufacturer: syz [ 327.479114][ T5859] usb 5-1: SerialNumber: syz [ 327.505183][ T5859] usb 5-1: config 0 descriptor?? [ 327.556151][ T5859] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 327.563070][ T1213] usb 1-1: Using ep0 maxpacket: 16 [ 327.584456][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.594567][ T1213] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 327.603919][ T24] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 327.641786][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.681534][ T1213] usb 1-1: Product: syz [ 327.695989][ T1213] usb 1-1: Manufacturer: syz [ 327.706282][ T1213] usb 1-1: SerialNumber: syz [ 327.725000][ T1213] usb 1-1: config 0 descriptor?? [ 327.775494][ T5859] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 327.798073][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.811317][ T1213] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 327.830951][ T5859] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 327.843024][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.858008][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 327.870759][ T5859] snd_usb_toneport 5-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 327.899399][ T24] usb 6-1: string descriptor 0 read error: -22 [ 327.907816][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.936442][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.954305][ T1213] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 327.977558][ T1213] visor 1-1:0.0: probe with driver visor failed with error -5 [ 328.015215][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.030601][ T5859] usb 5-1: USB disconnect, device number 18 [ 328.052023][ T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 328.063676][ T24] usb 6-1: MIDIStreaming interface descriptor not found [ 328.078960][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.106402][ T43] usb 2-1: Product: syz [ 328.138200][ T43] usb 2-1: Manufacturer: syz [ 328.173335][ T43] usb 2-1: SerialNumber: syz [ 328.197897][ T24] usb 6-1: USB disconnect, device number 2 [ 328.211681][ T5928] usb 1-1: USB disconnect, device number 19 [ 328.233308][ T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 328.271095][ T5913] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 328.558181][ T5905] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 328.743851][ T5905] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 328.779755][ T5905] usb 3-1: config 0 has no interface number 0 [ 328.785907][ T5905] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.807948][ T24] usb 2-1: USB disconnect, device number 20 [ 328.874682][ T5905] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 328.911467][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.961697][ T5905] usb 3-1: Product: syz [ 328.980524][ T5905] usb 3-1: Manufacturer: syz [ 329.004909][ T5905] usb 3-1: SerialNumber: syz [ 329.038672][ T5905] usb 3-1: config 0 descriptor?? [ 329.147390][T14450] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3448'. [ 329.269988][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 329.287991][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 329.295363][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 329.308078][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 329.315434][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 329.324706][ T5905] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 329.337038][ T5905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 329.351330][ T5905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 329.377722][ T5905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 329.382497][ T5913] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 329.422367][ T5905] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 329.430161][ T5913] ath9k_htc: Failed to initialize the device [ 329.463795][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 329.503822][ T5905] usb 3-1: USB disconnect, device number 12 [ 329.551586][ T5905] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 329.597102][ T5905] keyspan 3-1:0.133: device disconnected [ 329.807867][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 329.985736][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.017976][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.052833][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.082161][ T24] usb 2-1: config 1 interface 0 has no altsetting 1 [ 330.106998][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.129529][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.159100][ T24] usb 2-1: Product: syz [ 330.163280][ T24] usb 2-1: Manufacturer: syz [ 330.206347][ T24] usb 2-1: SerialNumber: syz [ 330.251340][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 330.285796][ T24] cdc_ncm 2-1:1.0: bind() failure [ 330.429889][T14497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3464'. [ 330.482045][ T5928] usb 2-1: USB disconnect, device number 21 [ 330.491252][T14502] loop4: detected capacity change from 0 to 256 [ 331.192556][T14529] binder: 14527:14529 ioctl c018620c 200000000080 returned -22 [ 331.205490][T14533] loop2: detected capacity change from 0 to 64 [ 331.393276][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'. [ 331.399211][T14540] netlink: 'syz.0.3483': attribute type 21 has an invalid length. [ 331.427688][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'. [ 331.455067][T14542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.477842][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 331.592137][T14549] kAFS: Can only specify source 'none' with -o dyn [ 331.674673][ T24] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 331.680719][T14551] loop4: detected capacity change from 0 to 128 [ 331.692522][ T24] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 331.744158][ T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 331.776863][ T24] usb 2-1: config 8 has no interface number 0 [ 331.798179][ T24] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 331.838034][T14557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.845371][T14557] IPv6: NLM_F_CREATE should be set when creating new route [ 331.847815][ T24] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.904733][ T24] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 331.914252][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.945214][ T24] usb 2-1: Product: syz [ 331.972583][ T24] usb 2-1: Manufacturer: syz [ 331.990083][ T5913] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 332.003979][ T24] usb 2-1: SerialNumber: syz [ 332.172407][ T5913] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 332.186776][ T5913] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 332.222079][ T5913] usb 3-1: config 0 has no interface number 1 [ 332.239279][ T5913] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.280530][ T24] usb 2-1: USB disconnect, device number 22 [ 332.307831][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 332.315168][T14572] IPv6: sit1: Disabled Multicast RS [ 332.340066][ T5913] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 332.358231][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.394905][ T5913] usb 3-1: Product: syz [ 332.411243][ T5913] usb 3-1: Manufacturer: syz [ 332.415865][ T5913] usb 3-1: SerialNumber: syz [ 332.440106][ T5913] usb 3-1: config 0 descriptor?? [ 332.450467][ T5913] usb-storage 3-1:0.127: USB Mass Storage device detected [ 332.505210][ T5913] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 332.609360][T14581] loop5: detected capacity change from 0 to 64 [ 332.634611][ T5913] usb-storage 3-1:0.0: USB Mass Storage device detected [ 332.699105][ T5913] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 332.709908][T14554] loop2: detected capacity change from 0 to 1024 [ 332.796946][T14554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.827857][ T892] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 332.995257][ T892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.032279][ T5913] usb 3-1: USB disconnect, device number 13 [ 333.040467][ T892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.063870][ T892] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.112689][ T892] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 333.132254][ T892] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 333.155403][ T892] usb 1-1: Product: syz [ 333.175304][ T892] usb 1-1: Manufacturer: syz [ 333.182885][ T892] usb 1-1: SerialNumber: syz [ 333.191289][T14599] loop4: detected capacity change from 0 to 1024 [ 333.222995][T14599] EXT4-fs: inline encryption not supported [ 333.242557][T14599] EXT4-fs: Ignoring removed i_version option [ 333.258170][ T892] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 333.275575][T14601] loop1: detected capacity change from 0 to 64 [ 333.308180][T14599] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.360770][T14599] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3503: lblock 2 mapped to illegal pblock 2 (length 1) [ 333.384235][T14599] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 333.448864][T14599] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3503: lblock 0 mapped to illegal pblock 48 (length 1) [ 333.471638][T14599] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 333.529719][T14599] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3503: Failed to acquire dquot type 0 [ 333.557223][T14599] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6337: Corrupt filesystem [ 333.604225][T14599] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3503: mark_inode_dirty error [ 333.623637][T14599] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 333.639364][T14599] EXT4-fs (loop4): 1 orphan inode deleted [ 333.649822][ T5913] usb 1-1: USB disconnect, device number 20 [ 333.650735][T14599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.675669][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.686471][ T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 333.734194][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 333.748073][ T5913] appletouch 1-1:1.0: input: appletouch disconnected [ 333.761449][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 333.794902][T14599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.841370][T14599] EXT4-fs error (device loop4): __ext4_get_inode_loc:4864: comm syz.4.3503: Invalid inode table block 1 in block_group 0 [ 333.875918][T14599] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6337: Corrupt filesystem [ 333.890422][T14599] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.3503: mark_inode_dirty error [ 334.116574][T14625] netlink: 'syz.2.3513': attribute type 3 has an invalid length. [ 334.145015][T14625] netlink: 'syz.2.3513': attribute type 1 has an invalid length. [ 334.183867][T14625] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3513'. [ 334.410450][ T892] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 334.582332][ T892] usb 5-1: Using ep0 maxpacket: 16 [ 334.593165][ T892] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 334.612437][ T892] usb 5-1: config 0 has no interface number 0 [ 334.644987][ T892] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 334.685197][ T892] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 334.708552][ T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.735232][ T892] usb 5-1: Product: syz [ 334.746757][T14654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3527'. [ 334.776602][ T892] usb 5-1: Manufacturer: syz [ 334.781662][ T892] usb 5-1: SerialNumber: syz [ 334.787949][T14654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3527'. [ 334.801726][ T892] usb 5-1: config 0 descriptor?? [ 335.054491][T14664] netlink: 'syz.0.3533': attribute type 2 has an invalid length. [ 335.231456][ T892] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 335.269728][ T892] usb 5-1: USB disconnect, device number 19 [ 335.464778][ T30] audit: type=1326 audit(1752670403.533:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa598e929 code=0x7ffc0000 [ 335.509951][ T30] audit: type=1326 audit(1752670403.533:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa598e929 code=0x7ffc0000 [ 335.580899][ T30] audit: type=1326 audit(1752670403.573:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7faaa598e929 code=0x7ffc0000 [ 335.658264][ T30] audit: type=1326 audit(1752670403.573:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa598e929 code=0x7ffc0000 [ 335.720878][ T30] audit: type=1326 audit(1752670403.573:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.5.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa598e929 code=0x7ffc0000 [ 335.822004][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'. [ 335.861372][T14695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.900407][T14702] usb usb7: usbfs: process 14702 (syz.5.3549) did not claim interface 0 before use [ 336.025303][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 336.138435][ T892] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 336.217384][T14713] netlink: 'syz.1.3556': attribute type 1 has an invalid length. [ 336.273990][T14719] loop0: detected capacity change from 0 to 512 [ 336.299620][T14719] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.311769][ T892] usb 5-1: Using ep0 maxpacket: 8 [ 336.336779][ T892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 336.352845][T14719] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.3559: inode #13: comm syz.0.3559: iget: illegal inode # [ 336.376155][ T892] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 336.396897][ T892] usb 5-1: config 0 has no interface number 0 [ 336.401180][T14719] EXT4-fs (loop0): Remounting filesystem read-only [ 336.419359][ T892] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 336.436538][T14719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.438471][ T892] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 336.466735][ T5928] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.519239][ T892] usb 5-1: config 0 interface 88 has no altsetting 0 [ 336.538611][ T892] usb 5-1: language id specifier not provided by device, defaulting to English [ 336.568896][ T892] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 336.573209][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.600671][ T892] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 336.612125][ T892] usb 5-1: Product: syz [ 336.617868][ T892] usb 5-1: SerialNumber: syz [ 336.639591][ T892] usb 5-1: config 0 descriptor?? [ 336.671927][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.685208][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.727677][ T5928] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 336.751525][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.761197][T14727] loop1: detected capacity change from 0 to 2048 [ 336.771011][ T5928] usb 6-1: config 0 descriptor?? [ 336.815123][T14727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.856854][T14700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.883674][ T30] audit: type=1800 audit(1752670404.953:100): pid=14727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3562" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 336.955537][ T892] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input24 [ 336.998876][ T5928] usbhid 6-1:0.0: can't add hid device: -71 [ 337.004871][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 337.021604][T14725] loop2: detected capacity change from 0 to 32768 [ 337.031607][ T892] usb 5-1: USB disconnect, device number 20 [ 337.045727][T14725] btrfs: Deprecated parameter 'usebackuproot' [ 337.073919][ T5928] usb 6-1: USB disconnect, device number 3 [ 337.090723][T14725] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 337.149057][T14725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3561 (14725) [ 337.218938][T14725] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 337.249870][T14725] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 337.284452][T14725] BTRFS info (device loop2 state S): disk space caching is enabled [ 337.286407][T14740] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3568'. [ 337.307289][T14725] BTRFS warning (device loop2 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 337.347937][T14725] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 337.374363][T14725] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 337.451043][T14725] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 337.538548][T14752] usb usb8: usbfs: process 14752 (syz.0.3570) did not claim interface 0 before use [ 337.577776][T14725] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 337.658750][T14725] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 337.687049][T14760] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 337.699443][T14725] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 337.714241][T14760] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709547521) [ 337.728471][T14760] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 337.754907][T14765] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3572'. [ 337.764008][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3572'. [ 337.773489][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3572'. [ 337.775493][T14725] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 337.782807][T14765] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3572'. [ 338.171053][T14725] btrfs: Deprecated parameter 'usebackuproot' [ 338.201732][T14787] loop0: detected capacity change from 0 to 1024 [ 338.206005][T14725] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 338.217533][T14789] loop1: detected capacity change from 0 to 764 [ 338.224183][T14725] BTRFS warning (device loop2 state MCS): remount supports changing free space tree only from RO to RW [ 338.252489][T14787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.261054][ T5913] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 338.268710][T14725] BTRFS info (device loop2 state MCS): enabling free space tree [ 338.268734][T14725] BTRFS info (device loop2 state MCS): force clearing of disk cache [ 338.268751][T14725] BTRFS info (device loop2 state MCS): trying to use backup root at mount time [ 338.268771][T14725] BTRFS info (device loop2 state MCS): disabling disk space caching [ 338.323721][T14789] rock: directory entry would overflow storage [ 338.337401][T14787] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.347878][T14789] rock: sig=0x4654, size=5, remaining=4 [ 338.353707][T14789] isofs: Unable to find the ".." directory for NFS. [ 338.379911][ T5856] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 338.397041][T14787] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 338.445759][T14787] EXT4-fs (loop0): orphan cleanup on readonly fs [ 338.508957][ T5913] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.541820][T14787] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 3: comm syz.0.3579: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.560868][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.601088][T14787] Quota error (device loop0): write_blk: dquota write failed [ 338.628065][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.636517][T14787] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3 [ 338.667060][ T5913] usb 5-1: config 1 has no interface number 0 [ 338.678540][ T5913] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 338.687151][T14787] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 338.710093][ T5913] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 338.723797][T14787] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3579: Failed to acquire dquot type 0 [ 338.742716][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.785530][T14787] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 3: comm syz.0.3579: lblock 3 mapped to illegal pblock 3 (length 1) [ 338.787915][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.845500][T14787] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 338.855465][ T5913] usb 5-1: Product: syz [ 338.855482][ T5913] usb 5-1: Manufacturer: syz [ 338.855496][ T5913] usb 5-1: SerialNumber: syz [ 338.927948][T14787] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3579: Failed to acquire dquot type 0 [ 338.955652][T14787] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3579: Freeing blocks not in datazone - block = 0, count = 4096 [ 339.033738][T14787] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 3: comm syz.0.3579: lblock 3 mapped to illegal pblock 3 (length 1) [ 339.089324][T14787] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 339.112710][T14787] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3579: Failed to acquire dquot type 0 [ 339.133533][T14810] netlink: 'syz.1.3589': attribute type 1 has an invalid length. [ 339.148728][T14787] EXT4-fs (loop0): 1 orphan inode deleted [ 339.155601][T14808] loop5: detected capacity change from 0 to 1764 [ 339.194505][T14787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.248990][T14813] program syz.2.3590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.292677][T14787] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.3579: iget: bad extended attribute block 6 [ 339.293701][ T1213] usb 5-1: USB disconnect, device number 21 [ 339.405271][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.456553][T14816] loop1: detected capacity change from 0 to 4096 [ 339.491912][ T5913] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 339.511362][T14816] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 339.635477][T14816] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 339.682552][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.704839][ T5913] usb 6-1: config 3 has an invalid interface number: 8 but max is 3 [ 339.728858][ T5913] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 339.757644][ T5913] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 339.769214][ T5913] usb 6-1: config 3 has no interface number 0 [ 339.776857][ T5913] usb 6-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 339.803828][ T5913] usb 6-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.839172][ T5913] usb 6-1: config 3 interface 8 has no altsetting 0 [ 339.892999][ T5913] usb 6-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 339.919628][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.951859][ T5913] usb 6-1: Product: syz [ 339.956045][ T5913] usb 6-1: Manufacturer: syz [ 339.965028][T14829] loop0: detected capacity change from 0 to 256 [ 339.973970][T14832] __nla_validate_parse: 1 callbacks suppressed [ 339.973985][T14832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3600'. [ 339.986394][ T5913] usb 6-1: SerialNumber: syz [ 340.012378][T14829] exfat: Deprecated parameter 'namecase' [ 340.112665][T14829] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 340.287959][ T5913] appledisplay 6-1:3.8: Error while getting initial brightness: -71 [ 340.329184][ T5913] appledisplay 6-1:3.8: probe with driver appledisplay failed with error -71 [ 340.386469][ T5913] usbhid 6-1:3.8: can't add hid device: -22 [ 340.395734][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3608'. [ 340.397739][ T5913] usbhid 6-1:3.8: probe with driver usbhid failed with error -22 [ 340.470968][ T5913] usb 6-1: USB disconnect, device number 4 [ 340.639706][T14855] netlink: 'syz.2.3612': attribute type 5 has an invalid length. [ 340.836119][T14864] loop2: detected capacity change from 0 to 256 [ 340.873875][T14864] exfat: Deprecated parameter 'utf8' [ 340.914452][T14864] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa943978a, utbl_chksum : 0xe619d30d) [ 341.006996][T14864] overlay: filesystem on ./file0 not supported [ 341.024878][T14872] overlayfs: overlapping lowerdir path [ 341.415992][T14892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3629'. [ 341.690922][ T30] audit: type=1326 audit(1752670409.763:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 341.767826][ T30] audit: type=1326 audit(1752670409.763:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 341.790214][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.890579][ T30] audit: type=1326 audit(1752670409.803:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 341.957669][ T30] audit: type=1326 audit(1752670409.803:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 342.067744][ T30] audit: type=1326 audit(1752670409.803:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.4.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 342.090092][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.461236][T14920] loop0: detected capacity change from 0 to 4096 [ 342.496335][T14920] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 342.534128][T14933] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.541997][T14878] loop5: detected capacity change from 0 to 40427 [ 342.569558][T14878] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 342.624171][T14878] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 342.701593][T14920] ntfs3(loop0): ino=19, mi_enum_attr [ 342.737480][T14920] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 342.745908][T14878] F2FS-fs (loop5): invalid crc value [ 342.814380][T14920] ntfs3(loop0): failed to convert "c46c" to maccyrillic [ 342.838263][T14920] ntfs3(loop0): ino=20, mi_enum_attr [ 342.841292][T14944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3650'. [ 342.903316][T14944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3650'. [ 342.963064][T14944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3650'. [ 343.104001][T14951] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 343.121889][T14878] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.187267][T14954] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 343.215915][T14954] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.240301][T14878] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 343.268927][T14878] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 343.419013][T14878] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 343.761373][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 343.938222][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 343.982185][ T5913] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 344.010520][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.068736][ T5913] usb 3-1: config 0 descriptor?? [ 344.146029][T14986] loop0: detected capacity change from 0 to 4096 [ 344.197716][T14986] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 344.264279][T14965] loop4: detected capacity change from 0 to 32768 [ 344.297361][ T5913] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 344.430338][T14965] ERROR: (device loop4): diNewExt: no free extents [ 344.430338][T14965] [ 344.474600][T14965] ialloc: diAlloc returned -5! [ 344.498803][ T5913] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 344.557713][ T5913] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 344.600006][ T5913] asix 3-1:0.0: probe with driver asix failed with error -71 [ 344.634001][ T5913] usb 3-1: USB disconnect, device number 14 [ 344.753918][T15002] loop1: detected capacity change from 0 to 2048 [ 344.821597][T15002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.086904][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.507160][T15027] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3677'. [ 345.690655][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'. [ 346.049470][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'. [ 346.107704][T15055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3690'. [ 346.437174][T15077] kAFS: No cell specified [ 346.509485][T15078] loop0: detected capacity change from 0 to 1024 [ 346.680959][T15078] hfsplus: xattr searching failed [ 347.051941][T15093] loop1: detected capacity change from 0 to 4096 [ 347.106660][T15093] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 347.266550][T15107] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 347.296020][T15107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.597921][T15116] loop2: detected capacity change from 0 to 2048 [ 347.665076][T15116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.705707][T15123] loop4: detected capacity change from 0 to 1024 [ 347.730564][T15124] loop1: detected capacity change from 0 to 1024 [ 347.766392][T15119] loop5: detected capacity change from 0 to 1024 [ 347.855892][T15124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.947940][T15124] ext4 filesystem being mounted at /800/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.177069][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.201213][T15133] netlink: 'syz.4.3720': attribute type 4 has an invalid length. [ 348.244937][T15135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.261732][T15133] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3720'. [ 348.338670][T15133] : renamed from bond0 (while UP) [ 348.385729][T15101] loop0: detected capacity change from 0 to 32768 [ 348.518184][T15101] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 348.554174][T15146] autofs4:pid:15146:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.33), cmd(0xc0189375) [ 348.648656][T15146] autofs4:pid:15146:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 348.672021][ T30] audit: type=1800 audit(1752670416.743:106): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3708" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 348.692619][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.859831][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 348.883739][T15163] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3732'. [ 349.387822][ T1213] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 349.557908][T15180] loop4: detected capacity change from 0 to 4096 [ 349.575822][T15180] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 349.592104][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 349.623527][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.678089][ T1213] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 349.708291][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.720031][ T1213] usb 3-1: Product: syz [ 349.724243][ T1213] usb 3-1: Manufacturer: syz [ 349.736044][T15180] ntfs3(loop4): ino=19, mi_enum_attr [ 349.776043][ T1213] usb 3-1: SerialNumber: syz [ 349.787025][T15180] ntfs3(loop4): failed to convert "c46c" to macinuit [ 349.812764][ T1213] usb 3-1: config 0 descriptor?? [ 349.836705][T15180] ntfs3(loop4): ino=20, mi_enum_attr [ 349.859484][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3742'. [ 350.036204][ T1213] usb 3-1: USB disconnect, device number 15 [ 350.215091][T15176] loop5: detected capacity change from 0 to 32768 [ 350.248358][T15176] btrfs: Deprecated parameter 'usebackuproot' [ 350.264904][T15176] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 350.304752][T15176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3736 (15176) [ 350.363962][T15176] BTRFS info (device loop5 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 350.395319][T15176] BTRFS info (device loop5 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 350.435697][T15176] BTRFS info (device loop5 state S): disk space caching is enabled [ 350.447085][T15210] netlink: 'syz.0.3747': attribute type 7 has an invalid length. [ 350.470725][T15176] BTRFS warning (device loop5 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 350.488326][T15210] netlink: 'syz.0.3747': attribute type 5 has an invalid length. [ 350.504361][T15210] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3747'. [ 350.523876][T15176] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 350.596477][T15176] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 350.689266][T15176] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 350.741702][T15176] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 350.742924][T15182] loop1: detected capacity change from 0 to 40427 [ 350.816362][T15182] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 350.835309][T15176] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 350.856540][T15182] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.898875][T15176] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 351.013391][T15176] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 351.246121][T15247] loop0: detected capacity change from 0 to 1024 [ 351.281275][T15176] btrfs: Deprecated parameter 'usebackuproot' [ 351.287389][T15176] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 351.348253][T15182] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 351.393574][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 351.417968][T15176] BTRFS warning (device loop5 state MCS): remount supports changing free space tree only from RO to RW [ 351.418754][T15182] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 351.462474][T15176] BTRFS info (device loop5 state MCS): enabling free space tree [ 351.496896][T15182] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 351.507096][T15176] BTRFS info (device loop5 state MCS): force clearing of disk cache [ 351.567745][T15176] BTRFS info (device loop5 state MCS): trying to use backup root at mount time [ 351.577438][T15176] BTRFS info (device loop5 state MCS): disabling disk space caching [ 351.652390][ T36] hfsplus: b-tree write err: -5, ino 4 [ 351.704643][T15262] netlink: 'syz.2.3758': attribute type 6 has an invalid length. [ 351.790822][T13959] BTRFS info (device loop5 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 351.881005][T15269] loop0: detected capacity change from 0 to 128 [ 351.928816][T15269] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.777028][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3775'. [ 352.953065][T15308] loop2: detected capacity change from 0 to 128 [ 353.046252][T15308] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 353.068745][T15308] FAT-fs (loop2): Filesystem has been set read-only [ 353.075950][T15312] loop4: detected capacity change from 0 to 512 [ 353.095463][T15308] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 353.118845][T15312] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 353.148200][T15308] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 353.193759][T15312] EXT4-fs (loop4): 1 truncate cleaned up [ 353.239908][T15312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.383123][T15312] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 353.560706][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.100234][T15315] loop1: detected capacity change from 0 to 32768 [ 354.137739][T15315] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3762 (15315) [ 354.188859][T15315] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 354.234277][T15315] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 354.319328][T15315] BTRFS info (device loop1): disk space caching is enabled [ 354.326563][T15315] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 354.376435][ T30] audit: type=1326 audit(1752670422.443:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622958e929 code=0x7ffc0000 [ 354.530480][ T30] audit: type=1326 audit(1752670422.443:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622958e929 code=0x7ffc0000 [ 354.603606][ T30] audit: type=1326 audit(1752670422.483:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f622958e929 code=0x7ffc0000 [ 354.626204][ T30] audit: type=1326 audit(1752670422.483:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622958e929 code=0x7ffc0000 [ 354.648700][ T30] audit: type=1326 audit(1752670422.483:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.2.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622958e929 code=0x7ffc0000 [ 354.826960][T15315] BTRFS info (device loop1): rebuilding free space tree [ 354.873658][T15315] BTRFS info (device loop1): disabling free space tree [ 354.917774][T15315] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.927459][T15315] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 355.231065][ T5847] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 355.396007][T15422] loop0: detected capacity change from 0 to 256 [ 355.624460][T15422] FAT-fs (loop0): Directory bread(block 64) failed [ 355.672394][T15422] FAT-fs (loop0): Directory bread(block 65) failed [ 355.711936][T15422] FAT-fs (loop0): Directory bread(block 66) failed [ 355.778388][T15422] FAT-fs (loop0): Directory bread(block 67) failed [ 355.825586][T15422] FAT-fs (loop0): Directory bread(block 68) failed [ 355.858244][T15422] FAT-fs (loop0): Directory bread(block 69) failed [ 355.897228][T15422] FAT-fs (loop0): Directory bread(block 70) failed [ 355.921653][T15422] FAT-fs (loop0): Directory bread(block 71) failed [ 355.942493][T15422] FAT-fs (loop0): Directory bread(block 72) failed [ 355.963078][T15422] FAT-fs (loop0): Directory bread(block 73) failed [ 355.983357][T15444] loop5: detected capacity change from 0 to 512 [ 356.003150][T15444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.090850][T15444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 356.144543][T15444] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33261: comm syz.5.3820: invalid block [ 356.178419][ T5928] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 356.187054][T15447] ALSA: mixer_oss: invalid OSS volume '' [ 356.207275][T15444] EXT4-fs (loop5): Remounting filesystem read-only [ 356.207700][T15447] ALSA: mixer_oss: invalid OSS volume 'Ü?ü×Ó%‰$ U¥!¾ÿ=À,>Qw¦½e~«v×ù' [ 356.242639][T15447] ALSA: mixer_oss: invalid OSS volume '¹…~X›;èÐo«Ö…­ŸãB@§%hq¤az8' [ 356.247275][T15444] EXT4-fs (loop5): 1 truncate cleaned up [ 356.264307][T15447] ALSA: mixer_oss: invalid OSS volume 'B”ñ7ëD`^ÑV›®()(zÍP«ä÷|‘—? l' [ 356.296446][T15447] ALSA: mixer_oss: invalid OSS volume 'Ò0»'r' [ 356.305665][T15447] ALSA: mixer_oss: invalid OSS volume '½ºÏÇ_µÑ}\ÜCbÒs°RDp’=OpŽ™‘ûSZà”ü' [ 356.313896][T15444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.325908][T15447] ALSA: mixer_oss: invalid OSS volume '£Ùm5‹àõ"Ú›g+çòæ½y' [ 356.334462][T15447] ALSA: mixer_oss: invalid OSS volume 'VÀÇt[´\h A2O:õÁ‹³L±âí' [ 356.346735][T15447] ALSA: mixer_oss: invalid OSS volume '…@¢íÈ•ûN+ºû­¸©á™%.§ås_ö¶Ê' [ 356.356937][T15447] ALSA: mixer_oss: invalid OSS volume '&õ' [ 356.365537][T15447] ALSA: mixer_oss: invalid OSS volume '­EºIŽ²]a¸Çg³LKèŸRmrð¥ÝN{ûšk' [ 356.374090][T15447] ALSA: mixer_oss: invalid OSS volume 'àH}+S<1›œüˆ“b|Ÿá&èznF%ŸþíìE' [ 356.397871][T15444] EXT4-fs warning (device loop5): ext4_empty_dir:3086: inode #2: comm syz.5.3820: directory missing '.' [ 356.408823][ T5928] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.417188][ T5928] usb 5-1: config 0 has no interface number 0 [ 356.418213][T15447] ALSA: mixer_oss: invalid OSS volume '±Îßûl2/>ŠX‚‰¾«?Ë' [ 356.430685][ T5928] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 356.430713][ T5928] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.430749][ T5928] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.430771][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.470933][ T5928] usb 5-1: config 0 descriptor?? [ 356.483332][ T5928] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 356.493826][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 356.509266][T15447] ALSA: mixer_oss: invalid OSS volume '1gE' [ 356.571871][T13959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.663434][ T5927] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 356.683917][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.709394][T15443] iowarrior 5-1:0.1: Error -90 while submitting URB [ 356.717927][ T5927] usb 3-1: Product: syz [ 356.722120][ T5927] usb 3-1: Manufacturer: syz [ 356.726725][ T5927] usb 3-1: SerialNumber: syz [ 356.770761][ T5928] usb 5-1: USB disconnect, device number 22 [ 356.784297][ T5927] usb 3-1: config 0 descriptor?? [ 356.959594][T15469] loop1: detected capacity change from 0 to 128 [ 356.979386][T15469] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 357.018212][ T5927] hso 3-1:0.0: Failed to find BULK IN ep [ 357.048707][ T5927] usb-storage 3-1:0.0: USB Mass Storage device detected [ 357.088247][ T1213] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 357.250951][ T5927] usb 3-1: USB disconnect, device number 16 [ 357.287691][ T1213] usb 6-1: Using ep0 maxpacket: 8 [ 357.304197][ T1213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.330546][ T1213] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 357.370927][ T1213] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 357.398446][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.417050][ T1213] usb 6-1: Product: syz [ 357.430787][ T1213] usb 6-1: Manufacturer: syz [ 357.445534][ T1213] usb 6-1: SerialNumber: syz [ 357.458637][ T1213] usb 6-1: config 0 descriptor?? [ 357.617822][ T5905] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 357.734300][T15482] loop1: detected capacity change from 0 to 32768 [ 357.796495][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.843764][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.878228][ T5905] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.908871][ T5905] usb 5-1: config 1 interface 0 has no altsetting 1 [ 357.917795][T15500] autofs4:pid:15500:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 357.928402][ T1213] usb 6-1: USB disconnect, device number 5 [ 357.942444][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 357.999162][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.007407][ T5905] usb 5-1: Product: syz [ 358.013975][ T5905] usb 5-1: Manufacturer: syz [ 358.026153][ T5905] usb 5-1: SerialNumber: syz [ 358.040885][ T5905] smsusb:smsusb_probe: board id=8, interface number 0 [ 358.063564][T15482] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 358.063590][T15482] allowing incompatible features above 0.0: (unknown version) [ 358.063603][T15482] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 358.087369][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.121335][T15482] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 358.129746][T15482] bcachefs (loop1): initializing new filesystem [ 358.223182][T15482] bcachefs (loop1): going read-write [ 358.274336][ T5905] smsusb:smsusb_probe: Device initialized with return code -19 [ 358.348456][T15482] bcachefs (loop1): initializing freespace [ 358.486684][ T5905] usb 5-1: USB disconnect, device number 23 [ 358.501345][T15523] netlink: 'syz.0.3850': attribute type 8 has an invalid length. [ 358.815504][T15534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.822776][T15534] IPv6: NLM_F_CREATE should be set when creating new route [ 358.830080][T15534] IPv6: NLM_F_CREATE should be set when creating new route [ 358.923393][ T5847] bcachefs (loop1): clean shutdown complete, journal seq 16 [ 359.204558][T15552] loop5: detected capacity change from 0 to 256 [ 359.237198][T15552] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 359.320450][T15555] loop4: detected capacity change from 0 to 128 [ 359.345791][T15555] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.398951][T15559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3869'. [ 359.419523][T15555] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.447003][T15559] netlink: 'syz.2.3869': attribute type 2 has an invalid length. [ 359.686261][T15569] loop4: detected capacity change from 0 to 256 [ 359.699823][T15563] loop0: detected capacity change from 0 to 4096 [ 359.711364][T15563] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 359.814734][T15563] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 359.844090][T15569] FAT-fs (loop4): Directory bread(block 64) failed [ 359.879299][T15569] FAT-fs (loop4): Directory bread(block 65) failed [ 359.885909][T15569] FAT-fs (loop4): Directory bread(block 66) failed [ 359.940472][T15569] FAT-fs (loop4): Directory bread(block 67) failed [ 359.961443][T15569] FAT-fs (loop4): Directory bread(block 68) failed [ 359.981284][T15569] FAT-fs (loop4): Directory bread(block 69) failed [ 359.996585][T15569] FAT-fs (loop4): Directory bread(block 70) failed [ 360.004256][T15569] FAT-fs (loop4): Directory bread(block 71) failed [ 360.011234][T15569] FAT-fs (loop4): Directory bread(block 72) failed [ 360.025696][T15569] FAT-fs (loop4): Directory bread(block 73) failed [ 360.330369][T15585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.521671][T15595] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 360.695649][T15601] loop2: detected capacity change from 0 to 2048 [ 360.720750][ T30] audit: type=1326 audit(1752670428.783:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 360.753942][ T30] audit: type=1326 audit(1752670428.783:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 360.777395][T15601] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 360.789726][T15601] NILFS (loop2): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 360.816488][ T30] audit: type=1326 audit(1752670428.793:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 360.842891][T15601] kAFS: No cell specified [ 360.850593][T15605] loop0: detected capacity change from 0 to 1764 [ 360.901262][T15605] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 360.916832][ T30] audit: type=1326 audit(1752670428.793:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 361.027741][ T30] audit: type=1326 audit(1752670428.793:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.4.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 361.385437][T15625] tmpfs: Bad value for 'mpol' [ 361.404106][T15627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.838243][T15639] loop4: detected capacity change from 0 to 1024 [ 362.019937][T15649] loop2: detected capacity change from 0 to 64 [ 362.342899][T15659] loop0: detected capacity change from 0 to 2048 [ 362.422945][T15668] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.033819][T15688] xt_TCPMSS: Only works on TCP SYN packets [ 363.399662][T15672] loop2: detected capacity change from 0 to 32768 [ 363.475514][T15678] loop0: detected capacity change from 0 to 32768 [ 363.497923][T15678] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3927 (15678) [ 363.577091][T15678] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 363.617906][T15678] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 363.667953][T15678] BTRFS info (device loop0): using free-space-tree [ 364.078305][T15736] fuse: Invalid rootmode [ 364.147197][T15740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.203372][T15740] batadv_slave_0: entered promiscuous mode [ 364.237779][T15740] batadv_slave_0: entered allmulticast mode [ 364.279791][ T5842] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 364.876297][T15767] loop2: detected capacity change from 0 to 16 [ 364.914808][T15767] erofs (device loop2): mounted with root inode @ nid 36. [ 365.273568][T15786] xt_bpf: check failed: parse error [ 365.431691][T15792] netlink: 'syz.1.3975': attribute type 6 has an invalid length. [ 365.465993][T15794] loop5: detected capacity change from 0 to 128 [ 365.539518][T15794] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.571836][T15800] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 365.608196][T15800] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.021724][T15820] mmap: syz.0.3988 (15820): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 366.043769][T15817] bond2: entered promiscuous mode [ 366.068220][T15817] bond2: entered allmulticast mode [ 366.088232][T15817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.255121][T15830] loop1: detected capacity change from 0 to 1024 [ 366.426709][ T12] hfsplus: b-tree write err: -5, ino 4 [ 366.496441][T15841] loop0: detected capacity change from 0 to 256 [ 366.569513][T15841] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d) [ 366.761151][T15851] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 366.816047][T15807] loop4: detected capacity change from 0 to 32768 [ 366.817827][T15853] ALSA: mixer_oss: invalid OSS volume 'u' [ 366.830023][T15851] CIFS mount error: No usable UNC path provided in device string! [ 366.830023][T15851] [ 366.848607][T15851] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 367.905119][T15867] loop1: detected capacity change from 0 to 32768 [ 367.985635][T15867] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.128130][T15867] XFS (loop1): Ending clean mount [ 368.300123][ T5847] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.430111][T15925] loop2: detected capacity change from 0 to 128 [ 368.468875][T15925] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.529317][T15925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.578586][T15925] ext4 filesystem being mounted at /772/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.662081][T15925] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.4037: No space for directory leaf checksum. Please run e2fsck -D. [ 368.679261][T15925] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.4037: checksumming directory block 0 [ 368.766046][ T5856] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.779396][ T5927] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 368.884636][T15941] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4044'. [ 368.925616][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4044'. [ 368.950306][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'. [ 368.969748][ T5927] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 368.989447][ T5927] usb 2-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 369.025076][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.036182][ T5927] usb 2-1: config 1 has no interface number 0 [ 369.043534][ T5927] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 369.054605][ T5927] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 369.106434][ T5927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.125812][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.142287][ T5927] usb 2-1: Product: syz [ 369.147131][ T5927] usb 2-1: Manufacturer: syz [ 369.155964][ T5927] usb 2-1: SerialNumber: syz [ 369.160887][T15953] netlink: 'syz.0.4049': attribute type 10 has an invalid length. [ 369.175905][T15953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4049'. [ 369.185486][ T1213] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 369.185703][ T5927] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 369.214888][ T5927] cdc_ncm 2-1:1.1: bind() failure [ 369.222062][T15953] team0: entered promiscuous mode [ 369.227109][T15953] team_slave_0: entered promiscuous mode [ 369.247975][T15953] team_slave_1: entered promiscuous mode [ 369.264058][T15953] geneve0: entered promiscuous mode [ 369.284300][T15953] team0: entered allmulticast mode [ 369.294240][T15953] team_slave_0: entered allmulticast mode [ 369.316616][T15953] team_slave_1: entered allmulticast mode [ 369.332765][T15953] geneve0: entered allmulticast mode [ 369.350213][T15953] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.369689][ T1213] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 369.378215][ T1213] usb 3-1: config 0 has no interface number 0 [ 369.392077][ T1213] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=cd.d2 [ 369.415128][ T5927] usb 2-1: USB disconnect, device number 23 [ 369.430864][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.476772][ T1213] usb 3-1: config 0 descriptor?? [ 369.583014][T15967] loop5: detected capacity change from 0 to 16 [ 369.600006][T15967] erofs (device loop5): mounted with root inode @ nid 36. [ 369.702143][ T1213] usb 3-1: string descriptor 0 read error: -71 [ 369.723857][ T1213] usb 3-1: Found UVC 0.00 device (1bcf:0b40) [ 369.738802][ T1213] usb 3-1: Forcing UVC version to 1.0a [ 369.744309][ T1213] usb 3-1: No valid video chain found. [ 369.770239][ T1213] usb 3-1: USB disconnect, device number 17 [ 369.857536][ T30] audit: type=1326 audit(1752670437.923:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.4.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 369.882546][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4060'. [ 369.913496][T15975] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4060'. [ 369.922786][ T30] audit: type=1326 audit(1752670437.973:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.4.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 369.991765][ T30] audit: type=1326 audit(1752670437.973:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.4.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 370.069137][ T30] audit: type=1326 audit(1752670437.973:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.4.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a78e929 code=0x7ffc0000 [ 370.451042][T16001] vlan0: entered promiscuous mode [ 370.520054][T16004] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4073'. [ 370.701175][T16012] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 370.859904][T16018] loop4: detected capacity change from 0 to 64 [ 370.922634][T15996] loop5: detected capacity change from 0 to 32768 [ 371.099458][T16026] loop2: detected capacity change from 0 to 16 [ 371.118726][T16026] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 371.350446][T16035] loop4: detected capacity change from 0 to 128 [ 371.414932][T16035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 371.667234][ T5843] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.705382][T16051] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 371.748972][T16052] netlink: 'syz.1.4094': attribute type 1 has an invalid length. [ 371.756831][T16052] netlink: 'syz.1.4094': attribute type 2 has an invalid length. [ 372.032561][T16068] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 372.083149][T16068] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 372.482465][T16088] dvmrp0: entered allmulticast mode [ 373.480882][T16141] loop0: detected capacity change from 0 to 256 [ 373.505498][T16144] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.4140'. [ 373.642234][T16141] FAT-fs (loop0): Directory bread(block 64) failed [ 373.680812][T16141] FAT-fs (loop0): Directory bread(block 65) failed [ 373.687440][T16141] FAT-fs (loop0): Directory bread(block 66) failed [ 373.747100][T16141] FAT-fs (loop0): Directory bread(block 67) failed [ 373.775284][T16141] FAT-fs (loop0): Directory bread(block 68) failed [ 373.802846][T16141] FAT-fs (loop0): Directory bread(block 69) failed [ 373.835213][T16141] FAT-fs (loop0): Directory bread(block 70) failed [ 373.873699][T16156] loop5: detected capacity change from 0 to 4096 [ 373.884133][T16141] FAT-fs (loop0): Directory bread(block 71) failed [ 373.911636][T16141] FAT-fs (loop0): Directory bread(block 72) failed [ 373.931163][T16141] FAT-fs (loop0): Directory bread(block 73) failed [ 373.944797][T16156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.048799][T16156] Quota error (device loop5): do_check_range: Getting block 65282 out of range 1-5 [ 374.097764][T16156] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 374.150361][T16156] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4146: Failed to acquire dquot type 0 [ 374.336208][T13959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.511607][T16176] loop4: detected capacity change from 0 to 64 [ 374.588051][T16176] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 374.635832][T16176] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 374.939482][T16168] loop1: detected capacity change from 0 to 32768 [ 374.965036][T16168] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4151 (16168) [ 375.057157][T16168] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.097781][T16168] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 375.106389][T16168] BTRFS info (device loop1): using free-space-tree [ 375.286648][T16168] BTRFS info (device loop1): rebuilding free space tree [ 375.300051][T16212] loop4: detected capacity change from 0 to 164 [ 375.386127][T16212] ISOFS: unable to read i-node block [ 375.409660][T16212] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 375.580383][ T5847] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.905522][T16229] loop1: detected capacity change from 0 to 512 [ 376.094776][T16229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.168188][T16229] ext4 filesystem being mounted at /858/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.260666][T16229] EXT4-fs error (device loop1): ext4_xattr_block_find:1869: inode #15: comm syz.1.4169: corrupted xattr block 33: invalid ea_ino [ 376.333216][T16229] EXT4-fs (loop1): Remounting filesystem read-only [ 376.463918][ T1159] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 376.469171][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.520380][ T1159] Quota error (device loop1): write_blk: dquota write failed [ 376.554687][ T1159] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 376.569173][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4180'. [ 376.594769][ T1159] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 376.607064][T16248] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 376.639217][ T1159] Quota error (device loop1): write_blk: dquota write failed [ 376.666930][ T1159] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 376.697492][ T1159] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 376.714548][ T1159] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 376.894224][T16235] loop0: detected capacity change from 0 to 32768 [ 376.919682][T16235] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4175 (16235) [ 376.994025][T16235] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 377.026216][T16256] loop4: detected capacity change from 0 to 1764 [ 377.042671][T16235] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 377.101015][T16235] BTRFS info (device loop0): disk space caching is enabled [ 377.137731][T16235] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 377.302159][T16235] BTRFS info (device loop0): rebuilding free space tree [ 377.382231][T16235] BTRFS info (device loop0): disabling free space tree [ 377.406586][T16235] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 377.454294][T16235] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 377.628654][T16284] Unknown options in mask 5 [ 377.700600][ T5842] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 377.747440][T16252] loop5: detected capacity change from 0 to 32768 [ 377.923718][T16252] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 378.054814][T16252] XFS (loop5): Ending clean mount [ 378.070331][T16304] xt_hashlimit: max too large, truncated to 1048576 [ 378.288108][T13959] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 378.445565][T16315] loop4: detected capacity change from 0 to 512 [ 378.503122][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.512844][T16315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.522002][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.537783][T16317] netlink: 'syz.1.4201': attribute type 15 has an invalid length. [ 378.627669][ T30] audit: type=1326 audit(1752670446.673:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16318 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670938e929 code=0x7ffc0000 [ 378.737865][T16315] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 378.745828][T16315] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 378.748074][ T30] audit: type=1326 audit(1752670446.673:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16318 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670938e929 code=0x7ffc0000 [ 378.815572][T16315] System zones: 0-1, 15-15, 18-18, 34-34 [ 378.853312][T16315] EXT4-fs (loop4): orphan cleanup on readonly fs [ 378.888023][ T30] audit: type=1326 audit(1752670446.703:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16318 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f670938e929 code=0x7ffc0000 [ 378.908251][T16315] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 378.964879][T16315] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 379.002817][ T30] audit: type=1326 audit(1752670446.703:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16318 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f670938e929 code=0x7ffc0000 [ 379.035175][T16315] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 379.065483][T16315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4202: bg 0: block 40: padding at end of block bitmap is not set [ 379.172991][T16315] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 379.211183][T16315] EXT4-fs (loop4): 1 truncate cleaned up [ 379.244227][T16315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.316151][T16339] loop5: detected capacity change from 0 to 16 [ 379.356211][T16315] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 379.366792][T16339] erofs (device loop5): mounted with root inode @ nid 36. [ 379.383276][T16315] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 379.526649][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.538723][T16345] loop2: detected capacity change from 0 to 1024 [ 379.651766][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'. [ 379.932966][T16361] netlink: 'syz.1.4222': attribute type 7 has an invalid length. [ 380.127992][T16370] tmpfs: Group quota block hardlimit too large. [ 380.160475][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4230'. [ 380.174759][T16376] loop1: detected capacity change from 0 to 64 [ 380.235920][T16377] loop5: detected capacity change from 0 to 512 [ 380.320478][T16377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.356062][T16377] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.584756][T13959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.733960][T16371] loop2: detected capacity change from 0 to 32768 [ 380.816030][T16396] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 381.120073][T16371] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 381.120103][T16371] allowing incompatible features above 0.0: (unknown version) [ 381.120115][T16371] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 381.218040][T16419] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4246'. [ 381.372568][T16371] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 381.410390][T16371] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 381.438661][T16371] bcachefs (loop2): Version upgrade required: [ 381.438661][T16371] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 381.438661][T16371] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 381.438661][T16371] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 381.529259][T16371] bcachefs (loop2): dropping and reconstructing all alloc info [ 381.660279][T16371] bcachefs (loop2): accounting_read... done [ 381.715114][T16371] bcachefs (loop2): alloc_read... done [ 381.755149][T16371] bcachefs (loop2): snapshots_read... done [ 381.782077][T16371] bcachefs (loop2): check_allocations... done [ 381.937578][T16371] bcachefs (loop2): going read-write [ 381.944660][T16449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4261'. [ 382.007740][T16371] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 382.412555][ T5856] bcachefs (loop2): unclean shutdown complete, journal seq 13 [ 382.624409][T16481] netlink: 'syz.4.4276': attribute type 46 has an invalid length. [ 383.150730][T16509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.178602][T16508] loop1: detected capacity change from 0 to 256 [ 383.227785][T16508] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 383.271989][T16508] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 383.327719][T16508] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 383.603604][T16525] netlink: 'syz.1.4297': attribute type 10 has an invalid length. [ 383.670263][T16525] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4297'. [ 383.713963][T16531] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 383.716156][T16525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 383.848686][T16534] loop5: detected capacity change from 0 to 512 [ 383.879598][T16534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.969525][T16534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.043707][T16534] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 384.064512][T16515] loop0: detected capacity change from 0 to 32768 [ 384.079707][T16515] XFS: noikeep mount option is deprecated. [ 384.096502][T16534] EXT4-fs: Cannot change journaled quota options when quota turned on [ 384.142257][T13959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.169199][T16515] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 384.295688][T16557] loop1: detected capacity change from 0 to 128 [ 384.375113][T16515] XFS (loop0): Ending clean mount [ 384.423788][T16515] XFS (loop0): Quotacheck needed: Please wait. [ 384.512308][T16515] XFS (loop0): Quotacheck: Done. [ 384.604295][T16566] netlink: 'syz.5.4312': attribute type 1 has an invalid length. [ 384.626703][T16565] netlink: 'syz.1.4313': attribute type 24 has an invalid length. [ 384.682710][ T5842] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 384.866927][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'. [ 385.622479][T16600] loop2: detected capacity change from 0 to 16 [ 385.649150][T16600] erofs (device loop2): mounted with root inode @ nid 36. [ 385.741183][T16575] loop4: detected capacity change from 0 to 32768 [ 385.797227][T16575] ERROR: (device loop4): diAllocAG: error reading iag [ 385.797227][T16575] [ 385.849141][T16575] ialloc: diAlloc returned -5! [ 385.957284][ T1213] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 386.120093][ T1213] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 386.134591][ T1213] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 386.175748][ T1213] usb 6-1: config 220 has no interface number 2 [ 386.195998][ T1213] usb 6-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 386.212458][ T1213] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 386.228393][ T1213] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 386.255296][ T1213] usb 6-1: config 220 interface 0 has no altsetting 0 [ 386.281496][ T1213] usb 6-1: config 220 interface 76 has no altsetting 0 [ 386.290779][ T1213] usb 6-1: config 220 interface 1 has no altsetting 0 [ 386.298524][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 386.322104][ T1213] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 386.347653][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.396416][ T1213] usb 6-1: Product: syz [ 386.402593][ T1213] usb 6-1: Manufacturer: syz [ 386.417437][ T1213] usb 6-1: SerialNumber: syz [ 386.480525][ T5927] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 386.500758][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.518126][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 386.520994][ T5927] usb 3-1: Product: syz [ 386.540952][ T5927] usb 3-1: Manufacturer: syz [ 386.545576][ T5927] usb 3-1: SerialNumber: syz [ 386.570322][ T5927] usb 3-1: config 0 descriptor?? [ 386.594014][ T5927] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 386.615299][T16633] loop4: detected capacity change from 0 to 4096 [ 386.657543][ T1213] usb 6-1: selecting invalid altsetting 0 [ 386.678283][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 386.687551][ T24] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 386.700394][ T1213] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 386.706763][ T1213] usb 6-1: No valid video chain found. [ 386.727348][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.756755][ T24] usb 2-1: Product: syz [ 386.762025][T16638] loop0: detected capacity change from 0 to 16 [ 386.765895][ T1213] usb 6-1: selecting invalid altsetting 0 [ 386.784987][ T1213] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 386.788153][T16638] erofs (device loop0): mounted with root inode @ nid 36. [ 386.796989][ T24] usb 2-1: Manufacturer: syz [ 386.836029][ T24] usb 2-1: SerialNumber: syz [ 386.846062][ T1213] usb 6-1: USB disconnect, device number 6 [ 387.060132][ T5905] usb 3-1: USB disconnect, device number 18 [ 387.100267][ T24] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 387.150142][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 387.188178][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 387.357059][ T24] usb 2-1: USB disconnect, device number 24 [ 387.363914][T16650] loop4: detected capacity change from 0 to 64 [ 387.398281][T16652] netlink: 'syz.5.4355': attribute type 1 has an invalid length. [ 387.406344][T16652] netlink: 15 bytes leftover after parsing attributes in process `syz.5.4355'. [ 387.416191][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 387.435103][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 387.454447][ T24] visor 2-1:1.0: device disconnected [ 387.699477][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4359'. [ 387.734988][T16660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4359'. [ 388.242720][T16684] loop0: detected capacity change from 0 to 8 [ 388.275030][T16687] tmpfs: Bad value for 'mpol' [ 388.282583][T16684] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 388.324135][ T7630] udevd[7630]: incorrect cramfs checksum on /dev/loop0 [ 388.422153][ T7630] udevd[7630]: incorrect cramfs checksum on /dev/loop0 [ 388.563661][T16699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4377'. [ 388.688087][T16701] loop5: detected capacity change from 0 to 1024 [ 388.746034][T16709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4383'. [ 388.801587][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 388.887688][ T5927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 388.913020][T16711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4384'. [ 388.928924][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4386'. [ 389.089975][ T5927] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 389.129000][T16721] program syz.0.4389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.138397][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 389.147974][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4390'. [ 389.158445][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 389.200466][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57923, setting to 1024 [ 389.222013][ T5927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 389.248011][ T5927] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 389.267799][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.287857][ T5927] usb 3-1: Product: syz [ 389.308751][ T5927] usb 3-1: Manufacturer: syz [ 389.313370][ T5927] usb 3-1: SerialNumber: syz [ 389.327178][ T5927] usb 3-1: config 0 descriptor?? [ 389.352519][T16703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.369135][ T5927] usb 3-1: ucan: probing device on interface #0 [ 389.375414][ T5927] usb 3-1: ucan: invalid endpoint configuration [ 389.413452][T16734] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4396'. [ 389.425823][ T5927] usb 3-1: ucan: probe failed; try to update the device firmware [ 389.622579][ T5927] usb 3-1: USB disconnect, device number 19 [ 389.951421][T16758] Cannot find del_set index 2 as target [ 390.423327][T16772] loop5: detected capacity change from 0 to 4096 [ 390.467688][T16772] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 390.568143][T16772] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 390.732724][T16791] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4422'. [ 390.827395][T16794] loop0: detected capacity change from 0 to 1024 [ 390.998138][ T1005] hfsplus: b-tree write err: -5, ino 4 [ 391.304526][T16812] loop1: detected capacity change from 0 to 2048 [ 391.363408][T16812] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 391.412503][T16819] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.780064][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 391.841066][T16834] openvswitch: netlink: Message has 4 unknown bytes. [ 391.883438][T16801] loop4: detected capacity change from 0 to 32768 [ 391.970060][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 392.001519][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.042712][ T24] usb 3-1: config 0 descriptor?? [ 392.270132][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 392.327938][ T5927] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 392.471592][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 392.513498][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 392.549582][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.559230][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 392.591266][ T24] [drm] Initialized udl on minor 2 [ 392.615152][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.626063][T16860] ieee802154 phy0 wpan0: encryption failed: -90 [ 392.629810][ T5927] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 392.660715][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.676180][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 392.692739][ T5927] usb 5-1: Product: syz [ 392.697003][ T5927] usb 5-1: Manufacturer: syz [ 392.702732][ T5927] usb 5-1: SerialNumber: syz [ 392.710689][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.718421][ T5927] usb 5-1: config 0 descriptor?? [ 392.736349][ T5927] usb 5-1: bad CDC descriptors [ 392.740448][ T24] usb 3-1: USB disconnect, device number 20 [ 392.757969][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 392.758779][ T5927] usb 5-1: unsupported MDLM descriptors [ 392.956701][T16872] loop5: detected capacity change from 0 to 256 [ 392.962173][ T5927] usb 5-1: USB disconnect, device number 24 [ 393.025249][T16872] FAT-fs (loop5): Directory bread(block 64) failed [ 393.032211][T16872] FAT-fs (loop5): Directory bread(block 65) failed [ 393.039265][T16872] FAT-fs (loop5): Directory bread(block 66) failed [ 393.046094][T16872] FAT-fs (loop5): Directory bread(block 67) failed [ 393.069795][T16872] FAT-fs (loop5): Directory bread(block 68) failed [ 393.076568][T16870] loop0: detected capacity change from 0 to 4096 [ 393.091024][T16872] FAT-fs (loop5): Directory bread(block 69) failed [ 393.108588][T16876] loop2: detected capacity change from 0 to 512 [ 393.114883][T16870] ntfs3(loop0): It is recommened to use chkdsk. [ 393.122153][T16872] FAT-fs (loop5): Directory bread(block 70) failed [ 393.129886][T16876] EXT4-fs: Ignoring removed orlov option [ 393.138505][T16872] FAT-fs (loop5): Directory bread(block 71) failed [ 393.145850][T16872] FAT-fs (loop5): Directory bread(block 72) failed [ 393.154151][T16876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.163116][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 393.171298][T16872] FAT-fs (loop5): Directory bread(block 73) failed [ 393.182026][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 393.191187][T16876] EXT4-fs (loop2): orphan cleanup on readonly fs [ 393.217408][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 393.225590][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 393.234467][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 393.242946][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 393.250888][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 393.251473][T16876] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4464: bg 0: block 248: padding at end of block bitmap is not set [ 393.259447][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 393.281399][T16870] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 393.303569][T16876] __quota_error: 1 callbacks suppressed [ 393.303584][T16876] Quota error (device loop2): write_blk: dquota write failed [ 393.375472][T16876] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 393.405892][T16876] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4464: Failed to acquire dquot type 1 [ 393.453106][T16876] EXT4-fs (loop2): 1 truncate cleaned up [ 393.471354][T16876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.666685][T16876] EXT4-fs: Ignoring removed orlov option [ 393.687878][T16876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.696596][T16885] netlink: 'syz.4.4470': attribute type 10 has an invalid length. [ 393.722135][T16885] team0: Device ipvlan1 failed to register rx_handler [ 393.756054][T16876] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 393.870073][T16876] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4464: Abort forced by user [ 393.921681][T16876] EXT4-fs (loop2): Remounting filesystem read-only [ 393.965082][T16899] loop0: detected capacity change from 0 to 256 [ 393.971406][T16876] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 394.012627][T16903] loop1: detected capacity change from 0 to 256 [ 394.012838][T16876] ext4 filesystem being remounted at /816/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.149846][T16903] FAT-fs (loop1): Directory bread(block 64) failed [ 394.156423][T16903] FAT-fs (loop1): Directory bread(block 65) failed [ 394.181574][T16903] FAT-fs (loop1): Directory bread(block 66) failed [ 394.197949][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.213920][T16903] FAT-fs (loop1): Directory bread(block 67) failed [ 394.254629][T16903] FAT-fs (loop1): Directory bread(block 68) failed [ 394.297660][T16903] FAT-fs (loop1): Directory bread(block 69) failed [ 394.304280][T16903] FAT-fs (loop1): Directory bread(block 70) failed [ 394.352907][T16903] FAT-fs (loop1): Directory bread(block 71) failed [ 394.381436][T16903] FAT-fs (loop1): Directory bread(block 72) failed [ 394.414010][T16903] FAT-fs (loop1): Directory bread(block 73) failed [ 394.502759][T16909] loop0: detected capacity change from 0 to 1764 [ 394.958094][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 395.127703][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 395.137088][ T43] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 395.153553][ T43] usb 3-1: config 0 has no interface number 0 [ 395.160022][ T43] usb 3-1: config 0 interface 54 has no altsetting 0 [ 395.178780][ T43] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 395.209025][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.223060][ T43] usb 3-1: Product: syz [ 395.238500][ T43] usb 3-1: Manufacturer: syz [ 395.243121][ T43] usb 3-1: SerialNumber: syz [ 395.335656][ T43] usb 3-1: config 0 descriptor?? [ 395.610450][ T43] ums_eneub6250 3-1:0.54: USB Mass Storage device detected [ 395.617803][T16948] __nla_validate_parse: 2 callbacks suppressed [ 395.617820][T16948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4498'. [ 395.653690][T16951] MTD: Couldn't look up '': -22 [ 395.786697][ T43] usb 3-1: USB disconnect, device number 21 [ 395.987202][T16966] loop5: detected capacity change from 0 to 256 [ 396.058800][T16966] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 396.343930][T16981] netlink: 'syz.2.4514': attribute type 11 has an invalid length. [ 396.400184][T16986] loop5: detected capacity change from 0 to 256 [ 396.463635][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 396.525704][T16986] FAT-fs (loop5): Directory bread(block 64) failed [ 396.543571][T16986] FAT-fs (loop5): Directory bread(block 65) failed [ 396.566037][T16986] FAT-fs (loop5): Directory bread(block 66) failed [ 396.576269][T16993] xt_hashlimit: overflow, rate too high: 0 [ 396.585984][T16986] FAT-fs (loop5): Directory bread(block 67) failed [ 396.593274][T16986] FAT-fs (loop5): Directory bread(block 68) failed [ 396.617020][T16986] FAT-fs (loop5): Directory bread(block 69) failed [ 396.627254][T16986] FAT-fs (loop5): Directory bread(block 70) failed [ 396.639712][T16986] FAT-fs (loop5): Directory bread(block 71) failed [ 396.648579][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 396.662184][T16986] FAT-fs (loop5): Directory bread(block 72) failed [ 396.690113][T16986] FAT-fs (loop5): Directory bread(block 73) failed [ 396.698357][ T5928] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 396.711679][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.731822][ T5928] usb 5-1: Product: syz [ 396.746407][ T5928] usb 5-1: Manufacturer: syz [ 396.754339][ T5928] usb 5-1: SerialNumber: syz [ 396.782617][ T5928] usb 5-1: config 0 descriptor?? [ 396.802232][ T5928] s2255 5-1:0.0: Could not find bulk-in endpoint [ 396.822910][ T5928] Sensoray 2255 driver load failed: 0xfffffff4 [ 396.839073][ T5928] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 397.018397][ T5928] usb 5-1: USB disconnect, device number 25 [ 397.029786][T17008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.216447][T17017] loop2: detected capacity change from 0 to 256 [ 397.417868][ T1213] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 397.593575][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 397.606105][ T1213] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 397.636864][ T1213] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.659644][ T1213] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.672754][ T1213] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.681877][ T1213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.712662][ T1213] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.719939][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 397.748772][ T1213] usb 6-1: invalid MIDI out EP 0 [ 397.899392][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 397.931846][ T24] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 397.957296][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.996520][ T7630] udevd[7630]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.006146][ T1213] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 398.015702][T17043] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 398.021903][ T24] usb 3-1: Product: syz [ 398.040885][ T24] usb 3-1: Manufacturer: syz [ 398.045502][ T24] usb 3-1: SerialNumber: syz [ 398.053610][ T1213] usb 6-1: USB disconnect, device number 7 [ 398.079884][ T24] usb 3-1: config 0 descriptor?? [ 398.120017][ T24] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 398.333328][ T5928] usb 3-1: USB disconnect, device number 22 [ 398.784246][T17049] loop0: detected capacity change from 0 to 32768 [ 398.825152][T17049] JBD2: Ignoring recovery information on journal [ 398.983750][T17049] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 399.112361][T17077] loop4: detected capacity change from 0 to 8192 [ 399.184321][T17077] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 399.266947][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 399.676400][T17104] netlink: 'syz.1.4574': attribute type 1 has an invalid length. [ 399.995883][T17116] loop5: detected capacity change from 0 to 256 [ 400.093080][T17116] FAT-fs (loop5): Directory bread(block 64) failed [ 400.112849][T17116] FAT-fs (loop5): Directory bread(block 65) failed [ 400.158326][T17116] FAT-fs (loop5): Directory bread(block 66) failed [ 400.164873][T17116] FAT-fs (loop5): Directory bread(block 67) failed [ 400.185139][T17116] FAT-fs (loop5): Directory bread(block 68) failed [ 400.193112][T17116] FAT-fs (loop5): Directory bread(block 69) failed [ 400.200189][T17116] FAT-fs (loop5): Directory bread(block 70) failed [ 400.206866][T17116] FAT-fs (loop5): Directory bread(block 71) failed [ 400.213880][T17116] FAT-fs (loop5): Directory bread(block 72) failed [ 400.221437][T17116] FAT-fs (loop5): Directory bread(block 73) failed [ 400.297723][ T5905] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 400.355471][T17098] loop2: detected capacity change from 0 to 32768 [ 400.407708][ T1213] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 400.451820][T17128] loop5: detected capacity change from 0 to 256 [ 400.467906][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 400.482353][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.509986][ T5905] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 400.527923][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.546195][ T5905] usb 1-1: Product: syz [ 400.550545][ T5905] usb 1-1: Manufacturer: syz [ 400.550659][T17098] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 400.555144][ T5905] usb 1-1: SerialNumber: syz [ 400.589634][ T5905] usb 1-1: config 0 descriptor?? [ 400.608530][ T1213] usb 5-1: Using ep0 maxpacket: 32 [ 400.613948][ T5905] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 400.636451][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.658783][T17098] allowing incompatible features above 0.0: (unknown version) [ 400.704566][ T1213] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 400.713454][T17112] loop1: detected capacity change from 0 to 32768 [ 400.724320][T17098] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 400.738602][T17112] XFS: ikeep mount option is deprecated. [ 400.756793][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.777676][ T1213] usb 5-1: Product: syz [ 400.777701][T17098] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 400.781856][ T1213] usb 5-1: Manufacturer: syz [ 400.802734][ T1213] usb 5-1: SerialNumber: syz [ 400.805953][T17098] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 400.828150][T17112] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 400.838666][T17098] bcachefs (loop2): Version upgrade required: [ 400.838666][T17098] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 400.838666][T17098] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 400.838666][T17098] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 400.917284][T17098] bcachefs (loop2): dropping and reconstructing all alloc info [ 400.944890][T17098] bcachefs (loop2): accounting_read... [ 400.955835][ T5928] usb 1-1: USB disconnect, device number 21 [ 400.978987][T17098] done [ 400.981801][T17098] bcachefs (loop2): alloc_read... done [ 401.003444][T17098] bcachefs (loop2): snapshots_read... done [ 401.019666][T17098] bcachefs (loop2): check_allocations... [ 401.094124][T17112] XFS (loop1): Ending clean mount [ 401.115411][T17098] done [ 401.121985][T17112] XFS (loop1): Quotacheck needed: Please wait. [ 401.136629][ T1213] usb 5-1: config 0 descriptor?? [ 401.169563][T17098] bcachefs (loop2): going read-write [ 401.204353][T17112] XFS (loop1): Quotacheck: Done. [ 401.209091][ T1213] usb 5-1: bad CDC descriptors [ 401.227390][T17098] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 401.250919][ T1213] usb 5-1: unsupported MDLM descriptors [ 401.309157][T17098] bcachefs (loop2): inode 4098:4294967295 has wrong backpointer: [ 401.309212][T17098] got 0:32 [ 401.309222][T17098] should be 4096:189491840996961599, fixing [ 401.355264][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 401.463323][ T1213] usb 5-1: USB disconnect, device number 26 [ 401.481441][ T5856] bcachefs (loop2): hash table key at wrong offset: should be at 6053843396831044271 [ 401.481481][ T5856] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: ÿÿÿÿ1 -> 536870912 type reg, fixing [ 401.588813][ T5856] ------------[ cut here ]------------ [ 401.598954][ T5856] kernel BUG at arch/x86/mm/physaddr.c:23! [ 401.617989][ T5856] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 401.624277][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 401.635927][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.645988][ T5856] RIP: 0010:__phys_addr+0x17b/0x180 [ 401.651189][ T5856] Code: 50 fe fa 8d 48 89 de 4c 89 f2 e8 80 15 8b 03 e9 4d ff ff ff e8 e6 32 4b 00 90 0f 0b e8 de 32 4b 00 90 0f 0b e8 d6 32 4b 00 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 401.670786][ T5856] RSP: 0018:ffffc9000414f068 EFLAGS: 00010293 [ 401.676882][ T5856] RAX: ffffffff817473fa RBX: 000000007ffffffc RCX: ffff88803339da00 [ 401.684853][ T5856] RDX: 0000000000000000 RSI: 000000007ffffffc RDI: 000000001fffffff [ 401.692818][ T5856] RBP: 0000000000000002 R08: fffffffffffffffc R09: fffffffffffffffc [ 401.700810][ T5856] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000414f5f0 [ 401.708809][ T5856] R13: fffffffffffff774 R14: 000000007ffffffc R15: dffffc0000000000 [ 401.716771][ T5856] FS: 000055558b78b500(0000) GS:ffff888125be2000(0000) knlGS:0000000000000000 [ 401.725695][ T5856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.732271][ T5856] CR2: 00007faaa66e56c0 CR3: 000000005d5d6000 CR4: 00000000003526f0 [ 401.740235][ T5856] Call Trace: [ 401.743505][ T5856] [ 401.746431][ T5856] ? bch2_printbuf_exit+0x6f/0xb0 [ 401.751454][ T5856] kfree+0x77/0x440 [ 401.755263][ T5856] ? bch2_str_hash_repair_key+0x2b57/0x4030 [ 401.761157][ T5856] bch2_printbuf_exit+0x6f/0xb0 [ 401.766005][ T5856] bch2_str_hash_repair_key+0xf2b/0x4030 [ 401.771641][ T5856] ? stack_depot_save_flags+0x429/0x900 [ 401.777187][ T5856] ? kasan_save_track+0x4f/0x80 [ 401.782039][ T5856] ? kasan_save_track+0x3e/0x80 [ 401.786891][ T5856] ? kasan_save_free_info+0x46/0x50 [ 401.792086][ T5856] ? __kasan_slab_free+0x62/0x70 [ 401.797021][ T5856] ? kfree+0x18e/0x440 [ 401.801088][ T5856] ? bch2_printbuf_exit+0x6f/0xb0 [ 401.806108][ T5856] ? __bch2_fsck_err+0xe25/0x10b0 [ 401.811126][ T5856] ? __bch2_str_hash_check_key+0x93a/0xd60 [ 401.816923][ T5856] ? bch2_readdir+0x11cd/0x1700 [ 401.821768][ T5856] ? bch2_vfs_readdir+0x4d0/0x6c0 [ 401.826784][ T5856] ? iterate_dir+0x396/0x570 [ 401.831379][ T5856] ? __se_sys_getdents64+0xe4/0x260 [ 401.836570][ T5856] ? do_syscall_64+0xfa/0x3b0 [ 401.841238][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.847303][ T5856] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 401.853397][ T5856] ? kasan_quarantine_put+0xdd/0x220 [ 401.858675][ T5856] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.863870][ T5856] ? bch2_printbuf_exit+0x6f/0xb0 [ 401.868890][ T5856] ? kfree+0x18e/0x440 [ 401.872950][ T5856] ? bch2_trans_log_str+0x279/0x3c0 [ 401.878149][ T5856] ? bch2_printbuf_exit+0x6f/0xb0 [ 401.883169][ T5856] ? __bch2_fsck_err+0xe25/0x10b0 [ 401.888190][ T5856] ? __pfx___bch2_fsck_err+0x10/0x10 [ 401.893470][ T5856] ? bch2_prt_printf+0x5a2/0x740 [ 401.898424][ T5856] ? bch2_dirent_to_text+0x83a/0xd20 [ 401.903718][ T5856] __bch2_str_hash_check_key+0xa85/0xd60 [ 401.909348][ T5856] ? bch2_path_put+0xaa0/0x15d0 [ 401.914191][ T5856] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 401.920350][ T5856] ? __asan_memset+0x22/0x50 [ 401.924943][ T5856] ? SipHash_End+0x47f/0x550 [ 401.929529][ T5856] ? __pfx___bch2_subvolume_get_snapshot+0x10/0x10 [ 401.936023][ T5856] ? __bch2_subvolume_get_snapshot+0x15c/0x550 [ 401.942166][ T5856] ? bch2_readdir+0x651/0x1700 [ 401.946947][ T5856] bch2_readdir+0x11cd/0x1700 [ 401.951627][ T5856] ? __pfx_bch2_readdir+0x10/0x10 [ 401.956659][ T5856] ? bch2_readdir+0x23e/0x1700 [ 401.961453][ T5856] bch2_vfs_readdir+0x4d0/0x6c0 [ 401.966295][ T5856] ? __pfx_bch2_vfs_readdir+0x10/0x10 [ 401.971668][ T5856] ? down_read_killable+0x1d1/0x350 [ 401.976869][ T5856] iterate_dir+0x396/0x570 [ 401.981287][ T5856] __se_sys_getdents64+0xe4/0x260 [ 401.986305][ T5856] ? __pfx___se_sys_getdents64+0x10/0x10 [ 401.991930][ T5856] ? exc_page_fault+0x76/0xf0 [ 401.996597][ T5856] ? __pfx_filldir64+0x10/0x10 [ 402.001354][ T5856] ? do_user_addr_fault+0xc8a/0x1390 [ 402.006639][ T5856] ? do_syscall_64+0xbe/0x3b0 [ 402.011314][ T5856] do_syscall_64+0xfa/0x3b0 [ 402.015814][ T5856] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.021011][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.027082][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 402.031766][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.037653][ T5856] RIP: 0033:0x7f62295c1293 [ 402.042069][ T5856] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 402.061667][ T5856] RSP: 002b:00007fffd6665cb8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 402.070073][ T5856] RAX: ffffffffffffffda RBX: 000055558b7a6600 RCX: 00007f62295c1293 [ 402.078054][ T5856] RDX: 0000000000008000 RSI: 000055558b7a6600 RDI: 0000000000000005 [ 402.086047][ T5856] RBP: 000055558b7a65d4 R08: 0000000000000000 R09: 0000000000000000 [ 402.094019][ T5856] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 402.101982][ T5856] R13: 0000000000000010 R14: 000055558b7a65d0 R15: 00007fffd6667f70 [ 402.109973][ T5856] [ 402.112989][ T5856] Modules linked in: [ 402.117159][ T5856] ---[ end trace 0000000000000000 ]--- [ 402.143355][ T5856] RIP: 0010:__phys_addr+0x17b/0x180 [ 402.150192][ T5856] Code: 50 fe fa 8d 48 89 de 4c 89 f2 e8 80 15 8b 03 e9 4d ff ff ff e8 e6 32 4b 00 90 0f 0b e8 de 32 4b 00 90 0f 0b e8 d6 32 4b 00 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 402.170185][ T5856] RSP: 0018:ffffc9000414f068 EFLAGS: 00010293 [ 402.176323][ T5856] RAX: ffffffff817473fa RBX: 000000007ffffffc RCX: ffff88803339da00 [ 402.223002][ T5856] RDX: 0000000000000000 RSI: 000000007ffffffc RDI: 000000001fffffff [ 402.241974][ T5856] RBP: 0000000000000002 R08: fffffffffffffffc R09: fffffffffffffffc [ 402.260645][ T5856] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000414f5f0 [ 402.276883][T17160] loop1: detected capacity change from 0 to 2048 [ 402.291106][ T5856] R13: fffffffffffff774 R14: 000000007ffffffc R15: dffffc0000000000 [ 402.300605][T17160] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 402.320443][ T5856] FS: 000055558b78b500(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000 [ 402.329521][ T5856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.330047][T17160] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 402.336164][ T5856] CR2: 00007fb183971d60 CR3: 000000005d5d6000 CR4: 00000000003526f0 [ 402.349881][T17160] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 402.355129][ T5856] Kernel panic - not syncing: Fatal exception [ 402.364946][ T5856] Kernel Offset: disabled