last executing test programs: 2m27.229122008s ago: executing program 0 (id=68): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x0, 0x0, 0x4, 0x5d11, 0x9, 0x2, 0xe], [0x8, 0x0, 0x0, 0x9, 0x3a3], [0x7, 0x0, 0x7f, 0x0, 0x5]], '\x00', [{0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {}, {0x0, 0x1}, {0xfffffffe, 0x802}, {0x0, 0xfffffffe}, {0x0, 0xbd0}, {0x8000000, 0x2}], '\x00', 0x1000}) 2m26.938002272s ago: executing program 0 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7a) 2m26.71428082s ago: executing program 0 (id=78): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x20, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d"}}) 2m26.421516474s ago: executing program 0 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 2m26.156414315s ago: executing program 0 (id=86): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$eJzskr9rFEEUx7+zO3fuaUIOORBFEDVoLJLbbDT+KBRsDCoIohADgsfdJS5u/JE90DsOXKsUNoIiJIiFIElhIf4DLqiN2CgEuxBJnSKFjSSsvNm3mwnY28ynuO/NvLfvve/M3A4fhDsAbK5360AZhEQF338JSAAHhNpCw07VYb3MWuT4BSvVmPUP6+bJzvgEIPxDy6NWvKdxUJTRU/n9dQV19N3E6deX3v24WnixtHvt7UfKv3i9/QHiaKPvzav3z87P9ary4saEXseO9887VAjA843x5RW5165ktfxoiVoXkPFyEsKddwAMfR6cO+v2PrW4Ztju3KkFQXMmPPfEwppq9XO9W6c/twAkBPsbA6DnkP1FzqG9fRK4BsBGkudIbFFtTd+vhu3OoD9dm2pONe963sioe9x1T3jVST9ouvQLcDf1OZ8gSI8BoGsq0QhCxXdRbINzdmI7VIfmivK496XE45fQrRe1qxs4jHRb65fZylQgZluOmgPKKlk+Ajrah5HQdvtVFQllbAwCNi+GpTZf2stRgaFP94LGLMgbf7YAmdcYXkUhX3j6YuRU5hCzrP3YujFigXWVNXvR2UuVqoLF73kgAop4VGu1kiR5jMUeXPmWRmhvxivm/8qRfmDUtWxvN3fG/setGAwGg8FgMBgMBsN/4m8AAAD//4Hjlpw=") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m25.070168513s ago: executing program 0 (id=104): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) 2m9.948207843s ago: executing program 32 (id=104): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) 2.97653558s ago: executing program 4 (id=2110): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000140)={0x7, 0x8, [0x3, 0x5dfe23db]}) 2.695128751s ago: executing program 4 (id=2113): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) 2.369307935s ago: executing program 4 (id=2119): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) socket$unix(0x1, 0x1, 0x0) 1.334380171s ago: executing program 3 (id=2135): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newtaction={0x70, 0x13, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x8, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffa, 0xd, 0x4, 0x6, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20094) 1.304768704s ago: executing program 5 (id=2136): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x4e24, 0xfffb, 0x4e22, 0xfffd, 0xa, 0x80, 0xc0, 0x3c}, {0x34, 0x7fff, 0x1, 0x200000000000009, 0x5, 0xd, 0x0, 0x12000000000}, {0xf, 0xa0f, 0xe, 0x1}, 0x83b, 0x6e6bb7, 0x1, 0x1, 0x1, 0x6f23e161ad6863d4}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x3504, 0x4, 0x3, 0x74, 0x3, 0x7fffffff, 0x755f}}, 0xe4) 1.21070882s ago: executing program 1 (id=2137): r0 = syz_open_dev$sg(&(0x7f0000002a00), 0x0, 0x40500) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003d00)={0x53, 0xfffffffffffffffe, 0xfd, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f0000003ac0)="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", 0x0, 0xfffffff8, 0x10026, 0xffffffffffffffff, 0x0}) 1.193839302s ago: executing program 2 (id=2138): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x49400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x288b}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x44}}, 0x0) 1.122920707s ago: executing program 5 (id=2139): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) 1.059869862s ago: executing program 3 (id=2140): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 1.021761565s ago: executing program 2 (id=2141): r0 = gettid() rt_sigqueueinfo(r0, 0x3, &(0x7f0000000280)={0x19, 0x100, 0x2}) 945.4965ms ago: executing program 1 (id=2142): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 865.222356ms ago: executing program 2 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xffffffff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x20000000) 863.342026ms ago: executing program 5 (id=2144): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204, 0x0, 0x0, 0x1000}}, @prinfo={0x18}], 0x48}], 0x1, 0x0) 854.345147ms ago: executing program 3 (id=2145): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) 737.222755ms ago: executing program 1 (id=2146): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xc8, 0x7, 0x2}) 689.246929ms ago: executing program 3 (id=2147): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 646.350692ms ago: executing program 2 (id=2148): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014000000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 604.406035ms ago: executing program 5 (id=2149): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r0, 0x5410, 0xffffffffffffffff) 556.494889ms ago: executing program 1 (id=2150): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000009"], 0x48) 555.410119ms ago: executing program 4 (id=2151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 467.908085ms ago: executing program 3 (id=2152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@allocspi={0x10c, 0x16, 0x401, 0x40000000, 0x0, {{{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x4d3, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x4}, {0x101, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x400}, 0x70bd2a, 0x3502, 0xa, 0x0, 0xff, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x0, 0xfffff329}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 329.182386ms ago: executing program 1 (id=2153): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget$private(0x0, 0x0) 319.849736ms ago: executing program 5 (id=2154): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000001cc0)={0xa, 0xffec, 0x0, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11000000000000002900000004"], 0x20}}], 0x1, 0x0) 269.96272ms ago: executing program 3 (id=2155): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 237.428912ms ago: executing program 4 (id=2156): r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 235.986982ms ago: executing program 2 (id=2157): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fchmod(r0, 0xb) 61.645956ms ago: executing program 5 (id=2158): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 49.719476ms ago: executing program 1 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) 33.580087ms ago: executing program 4 (id=2160): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:s}'], 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 0s ago: executing program 2 (id=2161): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x90, 0x4}}], 0x2, 0x4000050) kernel console output (not intermixed with test programs): 706][ T4437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.738699][ T4439] erofs: (device loop2): mounted with root inode @ nid 36. [ 87.743538][ T4441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26'. [ 87.935836][ T4419] loop0: detected capacity change from 0 to 32768 [ 87.981596][ T4419] ======================================================= [ 87.981596][ T4419] WARNING: The mand mount option has been deprecated and [ 87.981596][ T4419] and is ignored by this kernel. Remove the mand [ 87.981596][ T4419] option from the mount to silence this warning. [ 87.981596][ T4419] ======================================================= [ 88.294989][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 90.982166][ T4544] loop2: detected capacity change from 0 to 256 [ 91.619099][ T4564] loop0: detected capacity change from 0 to 8 [ 91.756787][ T4570] netlink: 'syz.3.89': attribute type 12 has an invalid length. [ 91.855153][ T4572] netlink: 'syz.4.90': attribute type 7 has an invalid length. [ 91.888148][ T4564] SQUASHFS error: Failed to read block 0x106: -5 [ 91.915171][ T4572] netlink: 'syz.4.90': attribute type 8 has an invalid length. [ 92.256335][ T4588] binder: 4585:4588 ioctl c018620c 200000000000 returned -22 [ 92.478234][ T26] audit: type=1800 audit(1755257372.016:2): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.86" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 92.676793][ T4597] loop4: detected capacity change from 0 to 64 [ 92.686552][ T4601] netlink: 'syz.1.105': attribute type 3 has an invalid length. [ 92.814754][ T4598] xt_connbytes: Forcing CT accounting to be enabled [ 92.827798][ T4598] xt_NFQUEUE: number of total queues is 0 [ 93.215021][ T4592] loop2: detected capacity change from 0 to 32768 [ 93.374490][ T4612] netlink: 116 bytes leftover after parsing attributes in process `syz.1.110'. [ 93.538507][ T26] audit: type=1326 audit(1755257373.086:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.4.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cd498ebe9 code=0x0 [ 93.676539][ T4622] tc_dump_action: action bad kind [ 93.989256][ T4629] raw_sendmsg: syz.4.117 forgot to set AF_INET. Fix it! [ 94.552963][ T4620] loop1: detected capacity change from 0 to 32768 [ 94.681499][ T4644] loop2: detected capacity change from 0 to 4096 [ 94.782942][ T4620] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 94.937502][ T4620] (syz.1.114,4620,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 94.962247][ T4620] (syz.1.114,4620,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 94.980640][ T4620] (syz.1.114,4620,1):ocfs2_symlink:2065 ERROR: status = -117 [ 95.142485][ T4266] (syz-executor,4266,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 95.246765][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 95.384715][ T4661] befs: (nullb0): No write support. Marking filesystem read-only [ 95.425162][ T4661] befs: (nullb0): invalid magic header [ 95.757187][ T4650] loop3: detected capacity change from 0 to 32768 [ 95.866348][ T4650] XFS (loop3): Mounting V5 Filesystem [ 96.094719][ T4650] XFS (loop3): Ending clean mount [ 96.149824][ T4650] XFS (loop3): Quotacheck needed: Please wait. [ 96.238398][ T4650] XFS (loop3): Quotacheck: Done. [ 96.530840][ T4265] XFS (loop3): Unmounting Filesystem [ 96.763789][ T4701] loop2: detected capacity change from 0 to 512 [ 96.905165][ T4701] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.146: bg 0: block 248: padding at end of block bitmap is not set [ 96.997865][ T4701] Quota error (device loop2): write_blk: dquota write failed [ 97.028172][ T4701] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 97.077950][ T4701] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.146: Failed to acquire dquot type 1 [ 97.147914][ T4701] EXT4-fs (loop2): 1 truncate cleaned up [ 97.153672][ T4701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.198073][ T4701] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.220961][ T4715] mmap: syz.3.150 (4715) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.503558][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 97.530559][ T56] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 97.547568][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:4: Failed to release dquot type 1 [ 97.717378][ T4725] loop1: detected capacity change from 0 to 164 [ 97.759309][ T4729] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.800320][ T4725] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.903952][ T4725] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.952291][ T26] audit: type=1326 audit(1755257377.496:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 98.026900][ T26] audit: type=1326 audit(1755257377.496:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 98.131347][ T26] audit: type=1326 audit(1755257377.496:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 98.219469][ T26] audit: type=1326 audit(1755257377.496:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 98.384352][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 98.422722][ T4737] loop4: detected capacity change from 0 to 4096 [ 98.440044][ T4746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 98.477797][ T4737] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 98.554418][ T33] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.693064][ T4737] ntfs3: loop4: failed to convert "c46c" to iso8859-5 [ 98.777579][ T33] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 98.816083][ T33] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.816435][ T4754] Cannot find del_set index 0 as target [ 98.836604][ T33] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.866214][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.916502][ T33] usb 4-1: Product: syz [ 98.925409][ T33] usb 4-1: Manufacturer: syz [ 98.933500][ T33] usb 4-1: SerialNumber: syz [ 98.967072][ T33] usb 4-1: config 0 descriptor?? [ 99.050832][ T33] usb 4-1: selecting invalid altsetting 0 [ 99.250851][ T3599] usb 4-1: USB disconnect, device number 2 [ 99.837842][ T4779] loop2: detected capacity change from 0 to 1024 [ 100.048759][ T46] hfsplus: b-tree write err: -5, ino 4 [ 100.192940][ T4789] loop2: detected capacity change from 0 to 1764 [ 100.307067][ T4793] loop4: detected capacity change from 0 to 256 [ 100.348245][ T4268] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.387985][ T4268] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.652805][ T4801] loop1: detected capacity change from 0 to 2048 [ 100.740057][ T4805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.802246][ T4801] syz.1.191: attempt to access beyond end of device [ 100.802246][ T4801] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 100.823288][ T4801] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 100.869339][ T4801] syz.1.191: attempt to access beyond end of device [ 100.869339][ T4801] loop1: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 100.900581][ T4801] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 100.932539][ T4801] NILFS (loop1): error -5 truncating bmap (ino=16) [ 101.266613][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.355163][ T4821] IPv6: sit1: Disabled Multicast RS [ 101.508874][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.552028][ T4830] loop2: detected capacity change from 0 to 47 [ 101.717888][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 101.727244][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.749653][ T126] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 101.758857][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.783510][ T126] usb 2-1: config 0 descriptor?? [ 101.813711][ T126] xbox_remote_probe: Unexpected endpoint_in [ 101.845980][ T126] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 101.981347][ T4838] loop2: detected capacity change from 0 to 4096 [ 102.006793][ T4838] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 102.037052][ T126] usb 2-1: USB disconnect, device number 2 [ 102.076748][ T4838] ntfs3: loop2: failed to convert "c46c" to iso8859-5 [ 102.909363][ T4866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 102.911087][ T4865] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 102.959390][ T4865] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.220'. [ 103.605836][ T4878] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 103.616649][ T4864] loop1: detected capacity change from 0 to 40427 [ 103.635255][ T4878] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 103.680745][ T4864] F2FS-fs (loop1): invalid crc value [ 103.715155][ T4864] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.833263][ T4864] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 103.879068][ T4864] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 103.898431][ T4864] F2FS-fs (loop1): Start checkpoint disabled! [ 103.966895][ T4864] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 104.407667][ T7] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 104.630584][ T7] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.649240][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.675259][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.696299][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.748317][ T7] usb 3-1: Product: syz [ 104.758188][ T7] usb 3-1: Manufacturer: syz [ 104.768588][ T7] usb 3-1: SerialNumber: syz [ 104.791137][ T7] usb 3-1: config 0 descriptor?? [ 104.818373][ T7] usb 3-1: selecting invalid altsetting 0 [ 104.840157][ T4901] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.061648][ T7] usb 3-1: USB disconnect, device number 2 [ 105.806378][ T4925] loop1: detected capacity change from 0 to 256 [ 105.855050][ T4925] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 106.293402][ T4939] capability: warning: `syz.4.254' uses deprecated v2 capabilities in a way that may be insecure [ 106.889025][ T4931] loop2: detected capacity change from 0 to 40427 [ 106.931687][ T4931] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 106.977455][ T4931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 107.011611][ T4931] F2FS-fs (loop2): invalid crc value [ 107.043219][ T4931] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.165298][ T4931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.172470][ T4931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 107.803506][ T4972] loop3: detected capacity change from 0 to 1024 [ 107.991573][ T4977] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 108.078742][ T11] hfsplus: bad catalog file entry [ 108.589508][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.601335][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.617858][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.626693][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.634597][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.647761][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.998398][ T4990] chnl_net:caif_netlink_parms(): no params data found [ 109.280410][ T5007] loop1: detected capacity change from 0 to 4096 [ 109.296532][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.314197][ T5007] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 109.342079][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.368633][ T4990] device bridge_slave_0 entered promiscuous mode [ 109.409059][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.411365][ T5007] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 109.426200][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.437888][ T4979] loop2: detected capacity change from 0 to 40427 [ 109.448786][ T4990] device bridge_slave_1 entered promiscuous mode [ 109.456399][ T5007] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 109.503556][ T4979] F2FS-fs (loop2): invalid crc value [ 109.557174][ T4979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.581413][ T4990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.611461][ T5007] ntfs: volume version 3.1. [ 109.639655][ T4990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.746569][ T4979] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 109.831879][ T4990] team0: Port device team_slave_0 added [ 109.838923][ T4979] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 109.857140][ T4990] team0: Port device team_slave_1 added [ 109.863184][ T4979] F2FS-fs (loop2): Start checkpoint disabled! [ 109.906146][ T4979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 110.015781][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.070311][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.168943][ T4990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.219405][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.226449][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.320432][ T4990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.570048][ T4990] device hsr_slave_0 entered promiscuous mode [ 110.643070][ T4990] device hsr_slave_1 entered promiscuous mode [ 110.692857][ T4990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.708042][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 110.749610][ T4990] Cannot create hsr debugfs directory [ 110.825174][ T5034] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.294'. [ 111.164404][ T4990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.228139][ T4990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.281588][ T4990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.330793][ T4990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.671562][ T4990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.703515][ T4990] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.733593][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.762011][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.814771][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.832504][ T5074] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 111.870413][ T5074] netlink: 228 bytes leftover after parsing attributes in process `syz.1.310'. [ 111.871583][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.889949][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.897099][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.907567][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.924164][ T5077] netlink: 'syz.4.309': attribute type 49 has an invalid length. [ 111.932925][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.951811][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.979107][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.986312][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.072949][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.102074][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.129460][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.158996][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.202146][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.255475][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.296066][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.322935][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.349433][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.381552][ T4990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.420099][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.429406][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.464421][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.797869][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 113.264474][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 113.326811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.340117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.372949][ T4990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.146920][ T5143] loop2: detected capacity change from 0 to 2048 [ 114.263826][ T5143] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.816160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.824917][ T5162] loop2: detected capacity change from 0 to 4096 [ 114.858491][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.870249][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 114.899506][ T5162] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 114.914239][ T4990] device veth0_vlan entered promiscuous mode [ 114.941820][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.967017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.019410][ T5162] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 115.031590][ T4990] device veth1_vlan entered promiscuous mode [ 115.074704][ T5170] loop3: detected capacity change from 0 to 1024 [ 115.077343][ T5162] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 115.082411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.129744][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.131287][ T5162] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.148817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.198460][ T5170] hfsplus: invalid xattr key length: 0 [ 115.206103][ T5162] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.277222][ T5162] ntfs: volume version 3.1. [ 115.279856][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.298009][ T5162] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 115.308917][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.327929][ T5162] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 115.355542][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.371494][ T5162] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 115.401035][ T4990] device veth0_macvtap entered promiscuous mode [ 115.405387][ T5162] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 115.430288][ T4990] device veth1_macvtap entered promiscuous mode [ 115.476450][ T5162] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 115.490183][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.547551][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.590004][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.631042][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.674466][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.703229][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.725994][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.744751][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.765767][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.800518][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.839171][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.868574][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.876911][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.918685][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.956213][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.049519][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.087753][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.114722][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.167157][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.194247][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.227813][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.265967][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.287655][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.327497][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.356048][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.430724][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.478669][ T4990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.496834][ T4990] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.520195][ T4990] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.538548][ T4990] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.560694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.585329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.809064][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.814542][ T5210] loop2: detected capacity change from 0 to 4096 [ 116.817204][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.929804][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.947575][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 116.956752][ T5217] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.984066][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.989724][ T5218] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 117.024798][ T5210] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 117.039490][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.065563][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.088722][ T5210] Remounting filesystem read-only [ 117.362126][ T5229] netlink: 176 bytes leftover after parsing attributes in process `syz.5.270'. [ 117.739300][ T5243] netlink: 'syz.3.384': attribute type 21 has an invalid length. [ 117.767350][ T5243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.384'. [ 118.449338][ T5267] loop3: detected capacity change from 0 to 2048 [ 118.536701][ T5267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.876243][ T5284] xt_hashlimit: invalid interval [ 119.340407][ T5297] loop3: detected capacity change from 0 to 4096 [ 119.465092][ T5306] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.498345][ T5297] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 119.549500][ T5297] Remounting filesystem read-only [ 120.429674][ T5344] SET target dimension over the limit! [ 120.714173][ T5352] loop1: detected capacity change from 0 to 2048 [ 120.810381][ T5352] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.821987][ T5352] UDF-fs: Scanning with blocksize 512 failed [ 120.832100][ T5356] netlink: 920 bytes leftover after parsing attributes in process `syz.2.441'. [ 120.853459][ T5352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.862773][ T5356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'. [ 121.124417][ T5366] loop3: detected capacity change from 0 to 64 [ 121.371089][ T5373] netlink: get zone limit has 4 unknown bytes [ 121.779207][ T5387] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 122.170791][ T5402] netlink: 'syz.2.463': attribute type 39 has an invalid length. [ 122.442867][ T5414] loop5: detected capacity change from 0 to 16 [ 122.551878][ T5414] erofs: (device loop5): mounted with root inode @ nid 36. [ 122.707825][ T5420] loop1: detected capacity change from 0 to 1024 [ 122.787819][ T5426] netlink: 'syz.2.473': attribute type 21 has an invalid length. [ 122.795790][ T5426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.473'. [ 122.878754][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.933915][ T5433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.479'. [ 122.987222][ T5420] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.472: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 123.046031][ T5420] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 123.148724][ T5441] loop3: detected capacity change from 0 to 128 [ 123.230425][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 123.253899][ T5441] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 123.282886][ T5441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.588813][ T5449] loop1: detected capacity change from 0 to 2048 [ 123.649557][ T5449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.909733][ T4283] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 123.918760][ T4283] Bluetooth: hci3: Injecting HCI hardware error event [ 123.928222][ T4281] Bluetooth: hci3: hardware error 0x00 [ 124.336223][ T5478] x_tables: duplicate underflow at hook 4 [ 124.367566][ T33] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.407714][ T3599] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.567738][ T33] usb 6-1: Using ep0 maxpacket: 16 [ 124.575121][ T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3233, setting to 64 [ 124.619653][ T33] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 124.627777][ T3599] usb 3-1: Using ep0 maxpacket: 8 [ 124.636487][ T3599] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.653658][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.664407][ T33] usb 6-1: Product: syz [ 124.684060][ T33] usb 6-1: Manufacturer: syz [ 124.689327][ T33] usb 6-1: SerialNumber: syz [ 124.695323][ T3599] usb 3-1: config 179 has no interface number 0 [ 124.707836][ T3599] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 124.717940][ T33] usb 6-1: config 0 descriptor?? [ 124.746108][ T3599] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 124.767820][ T5491] capability: warning: `syz.1.505' uses 32-bit capabilities (legacy support in use) [ 124.787641][ T3599] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.799562][ T3599] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.810343][ T3599] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.824181][ T3599] usb 3-1: config 179 interface 65 has no altsetting 0 [ 124.827928][ T33] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 124.831574][ T3599] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 124.850227][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.890743][ T3599] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 125.019501][ T2975] usb 6-1: Failed to submit usb control message: -71 [ 125.027281][ T33] usb 6-1: USB disconnect, device number 2 [ 125.038900][ T2975] usb 6-1: unable to send the bmi data to the device: -71 [ 125.059485][ T2975] usb 6-1: unable to get target info from device [ 125.116881][ T2975] usb 6-1: could not get target info (-71) [ 125.142547][ T4330] usb 3-1: USB disconnect, device number 3 [ 125.146586][ T2975] usb 6-1: could not probe fw (-71) [ 125.148945][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.224167][ T4330] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 125.432265][ T5509] netlink: 'syz.1.514': attribute type 12 has an invalid length. [ 125.990295][ T4281] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 126.997090][ T5570] loop3: detected capacity change from 0 to 256 [ 127.143448][ T5570] FAT-fs (loop3): Directory bread(block 64) failed [ 127.183158][ T5570] FAT-fs (loop3): Directory bread(block 65) failed [ 127.206507][ T5570] FAT-fs (loop3): Directory bread(block 66) failed [ 127.235926][ T5570] FAT-fs (loop3): Directory bread(block 67) failed [ 127.254261][ T5570] FAT-fs (loop3): Directory bread(block 68) failed [ 127.287086][ T5570] FAT-fs (loop3): Directory bread(block 69) failed [ 127.327742][ T5570] FAT-fs (loop3): Directory bread(block 70) failed [ 127.334358][ T5570] FAT-fs (loop3): Directory bread(block 71) failed [ 127.344437][ T5581] netlink: 'syz.2.549': attribute type 29 has an invalid length. [ 127.367200][ T5570] FAT-fs (loop3): Directory bread(block 72) failed [ 127.377575][ T5581] netlink: 'syz.2.549': attribute type 29 has an invalid length. [ 127.390477][ T5570] FAT-fs (loop3): Directory bread(block 73) failed [ 128.255581][ T5617] device batadv0 entered promiscuous mode [ 128.437330][ T5625] loop1: detected capacity change from 0 to 64 [ 128.668556][ T5629] loop4: detected capacity change from 0 to 128 [ 128.743576][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.575'. [ 128.789446][ T5633] netlink: 60 bytes leftover after parsing attributes in process `syz.5.575'. [ 128.810251][ T5633] device vlan0 entered promiscuous mode [ 128.933291][ T5639] loop2: detected capacity change from 0 to 64 [ 129.089604][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 129.969298][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.597'. [ 130.015248][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 130.030966][ T5678] netlink: 5 bytes leftover after parsing attributes in process `syz.5.597'. [ 130.248949][ T5686] netlink: 2 bytes leftover after parsing attributes in process `syz.1.602'. [ 130.328020][ T5693] netlink: 204 bytes leftover after parsing attributes in process `syz.4.605'. [ 131.898949][ T5743] overlayfs: missing 'lowerdir' [ 132.023903][ T5748] process 'syz.3.632' launched './file0' with NULL argv: empty string added [ 132.909706][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.916503][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286030][ T5790] loop5: detected capacity change from 0 to 1024 [ 133.336414][ T5790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 133.347357][ T5795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.653'. [ 133.380035][ T5790] EXT4-fs error (device loop5): ext4_get_first_dir_block:3605: inode #11: comm syz.5.652: directory missing '..' [ 133.509365][ T5803] loop2: detected capacity change from 0 to 8 [ 133.792752][ T5812] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 133.825997][ T4990] EXT4-fs (loop5): unmounting filesystem. [ 133.920424][ T5812] team0: Device veth1_macvtap failed to register rx_handler [ 134.027470][ T33] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 134.222573][ T33] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 134.255607][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.273778][ T33] usb 2-1: Product: syz [ 134.313083][ T33] usb 2-1: Manufacturer: syz [ 134.338577][ T33] usb 2-1: SerialNumber: syz [ 134.356405][ T33] usb 2-1: config 0 descriptor?? [ 134.392408][ T33] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 134.496820][ T5834] device erspan1 entered promiscuous mode [ 134.590871][ T5836] device vlan0 entered promiscuous mode [ 134.809794][ T33] gspca_stk1135: reg_w 0x0 err -71 [ 134.827744][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.834155][ T33] gspca_stk1135: Sensor write failed [ 134.871937][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.879819][ T33] gspca_stk1135: Sensor write failed [ 134.885190][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.892179][ T33] gspca_stk1135: Sensor read failed [ 134.900573][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.907128][ T33] gspca_stk1135: Sensor read failed [ 134.928325][ T33] gspca_stk1135: Detected sensor type unknown (0x0) [ 134.935161][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.942630][ T33] gspca_stk1135: Sensor read failed [ 134.948850][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.955821][ T33] gspca_stk1135: Sensor read failed [ 134.961905][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 134.968721][ T33] gspca_stk1135: Sensor write failed [ 134.974204][ T33] gspca_stk1135: serial bus timeout: status=0x00 [ 135.004577][ T33] gspca_stk1135: Sensor write failed [ 135.011318][ T33] stk1135: probe of 2-1:0.0 failed with error -71 [ 135.044048][ T33] usb 2-1: USB disconnect, device number 3 [ 135.090241][ T5850] xt_ipcomp: unknown flags B [ 135.358655][ T5860] loop5: detected capacity change from 0 to 2048 [ 135.394289][ T5860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.511740][ T5862] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 135.532977][ T5862] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 135.591881][ T5867] netlink: 'syz.2.687': attribute type 21 has an invalid length. [ 135.644037][ T5867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.687'. [ 135.822295][ T5874] device veth3 entered promiscuous mode [ 135.864638][ T5878] loop4: detected capacity change from 0 to 1024 [ 136.016626][ T46] hfsplus: b-tree write err: -5, ino 4 [ 136.202069][ T5882] loop4: detected capacity change from 0 to 2048 [ 136.268395][ T5882] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.310181][ T5882] UDF-fs: Scanning with blocksize 512 failed [ 136.318107][ T5886] loop2: detected capacity change from 0 to 4096 [ 136.349599][ T5886] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 136.360677][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.731565][ T5896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.701'. [ 137.140199][ T5908] loop2: detected capacity change from 0 to 256 [ 137.166386][ T5908] FAT-fs (loop2): Directory bread(block 64) failed [ 137.212589][ T5908] FAT-fs (loop2): Directory bread(block 65) failed [ 137.238194][ T5908] FAT-fs (loop2): Directory bread(block 66) failed [ 137.244818][ T5908] FAT-fs (loop2): Directory bread(block 67) failed [ 137.277514][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.297987][ T5908] FAT-fs (loop2): Directory bread(block 68) failed [ 137.304584][ T5908] FAT-fs (loop2): Directory bread(block 69) failed [ 137.333990][ T5908] FAT-fs (loop2): Directory bread(block 70) failed [ 137.343616][ T5908] FAT-fs (loop2): Directory bread(block 71) failed [ 137.357083][ T5908] FAT-fs (loop2): Directory bread(block 72) failed [ 137.372152][ T5908] FAT-fs (loop2): Directory bread(block 73) failed [ 137.472499][ T7] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 137.497551][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.545417][ T7] usb 2-1: Product: syz [ 137.557468][ T7] usb 2-1: Manufacturer: syz [ 137.572465][ T7] usb 2-1: SerialNumber: syz [ 137.601278][ T7] usb 2-1: config 0 descriptor?? [ 137.626423][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 137.653158][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 137.677352][ T7] f81232 2-1:0.0: f81534a converter detected [ 137.677814][ T33] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.694838][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.713'. [ 137.734296][ T5924] NILFS (nullb0): couldn't find nilfs on the device [ 137.818574][ T7] usb 2-1: f81534a converter now attached to ttyUSB0 [ 137.887573][ T33] usb 4-1: Using ep0 maxpacket: 16 [ 137.897177][ T33] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.924977][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.951376][ T33] usb 4-1: Product: syz [ 137.965851][ T33] usb 4-1: Manufacturer: syz [ 137.978459][ T33] usb 4-1: SerialNumber: syz [ 138.043951][ T33] r8152-cfgselector 4-1: config 0 descriptor?? [ 138.080134][ T5932] loop4: detected capacity change from 0 to 512 [ 138.147932][ T7] usb 2-1: USB disconnect, device number 4 [ 138.167228][ T5932] __quota_error: 6 callbacks suppressed [ 138.167247][ T5932] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 138.212586][ T7] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 138.220885][ T5932] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 138.257474][ T5932] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.719: Failed to acquire dquot type 1 [ 138.262360][ T7] f81232 2-1:0.0: device disconnected [ 138.327874][ T5932] EXT4-fs (loop4): 1 truncate cleaned up [ 138.368477][ T5932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.402479][ T5932] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.497571][ T33] r8152-cfgselector 4-1: Unknown version 0x0000 [ 138.504416][ T33] r8152-cfgselector 4-1: bad CDC descriptors [ 138.546467][ T33] r8152-cfgselector 4-1: Unknown version 0x0000 [ 138.587748][ T33] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 138.644386][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 138.943319][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'. [ 138.957575][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'. [ 138.992560][ T5959] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 139.682958][ T5981] loop5: detected capacity change from 0 to 256 [ 139.704048][ T5981] exfat: Deprecated parameter 'namecase' [ 139.721351][ T5981] exfat: Deprecated parameter 'namecase' [ 139.734616][ T5979] loop1: detected capacity change from 0 to 4096 [ 139.776912][ T5979] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 139.800960][ T5981] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 140.056822][ T5989] loop2: detected capacity change from 0 to 512 [ 140.104874][ T5989] EXT4-fs: Ignoring removed orlov option [ 140.197712][ T5989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.211916][ T5963] loop4: detected capacity change from 0 to 40427 [ 140.243952][ T5989] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.320583][ T5963] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 140.357745][ T5963] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.378055][ T5989] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.746: bg 0: block 248: padding at end of block bitmap is not set [ 140.397119][ T5963] F2FS-fs (loop4): invalid crc value [ 140.436111][ T5989] Quota error (device loop2): write_blk: dquota write failed [ 140.469210][ T5989] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 140.507497][ T5963] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 140.527359][ T5989] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.746: Failed to acquire dquot type 1 [ 140.595275][ T5989] EXT4-fs (loop2): 1 truncate cleaned up [ 140.650265][ T5989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.777780][ T5989] EXT4-fs: Ignoring removed orlov option [ 140.783648][ T5989] EXT4-fs: can't change dax mount option while remounting [ 140.793356][ T5963] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.808283][ T5963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.941198][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 141.236243][ T6024] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 141.294062][ T6028] loop2: detected capacity change from 0 to 128 [ 141.331096][ T6024] team0: Device veth1_macvtap failed to register rx_handler [ 141.623413][ T6033] Cannot find add_set index 0 as target [ 142.079021][ T6050] netlink: 'syz.1.773': attribute type 3 has an invalid length. [ 142.131135][ T6054] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'. [ 142.334621][ T6061] netlink: 'syz.1.779': attribute type 1 has an invalid length. [ 142.397997][ T6061] netlink: 128 bytes leftover after parsing attributes in process `syz.1.779'. [ 142.427537][ T6061] NCSI netlink: No device for ifindex 0 [ 143.460631][ T6074] device netdevsim0 entered promiscuous mode [ 143.502453][ T6074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.113208][ T6098] tmpfs: Bad value for 'mpol' [ 144.241334][ T6102] netlink: 'syz.1.799': attribute type 8 has an invalid length. [ 144.257068][ T6102] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.799'. [ 144.524868][ T6110] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 145.093755][ T6135] loop2: detected capacity change from 0 to 64 [ 145.143845][ T6130] loop5: detected capacity change from 0 to 4096 [ 145.207534][ T6130] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 145.399770][ T6130] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 145.451687][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 145.605107][ T2975] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 145.622704][ T4990] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 145.639150][ T4990] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 145.679144][ T4990] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 145.729818][ T4356] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 145.736934][ T4990] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 145.903235][ T6154] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 146.700145][ T6184] loop2: detected capacity change from 0 to 1024 [ 146.733041][ T6184] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 146.733041][ T6184] [ 146.773782][ T6184] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 147.268405][ T26] audit: type=1326 audit(1755257426.816:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5878ebe9 code=0x7ffc0000 [ 147.290730][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.348720][ T26] audit: type=1326 audit(1755257426.866:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f0a5878ebe9 code=0x7ffc0000 [ 147.383451][ T6164] loop1: detected capacity change from 0 to 40427 [ 147.433965][ T6164] F2FS-fs (loop1): invalid crc value [ 147.456874][ T26] audit: type=1326 audit(1755257426.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5878ebe9 code=0x7ffc0000 [ 147.473957][ T6164] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 147.559427][ T6164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.563932][ T26] audit: type=1326 audit(1755257426.866:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5878ebe9 code=0x7ffc0000 [ 147.572546][ T6209] loop5: detected capacity change from 0 to 256 [ 147.726556][ T6164] F2FS-fs (loop1): recover fsync data on readonly fs [ 147.792741][ T6209] FAT-fs (loop5): Directory bread(block 64) failed [ 147.807740][ T6164] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 147.817924][ T6209] FAT-fs (loop5): Directory bread(block 65) failed [ 147.824634][ T6209] FAT-fs (loop5): Directory bread(block 66) failed [ 147.848289][ T6164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.874299][ T6209] FAT-fs (loop5): Directory bread(block 67) failed [ 147.927641][ T6209] FAT-fs (loop5): Directory bread(block 68) failed [ 147.967534][ T6209] FAT-fs (loop5): Directory bread(block 69) failed [ 147.974278][ T6209] FAT-fs (loop5): Directory bread(block 70) failed [ 148.000598][ T6209] FAT-fs (loop5): Directory bread(block 71) failed [ 148.027570][ T6209] FAT-fs (loop5): Directory bread(block 72) failed [ 148.047744][ T6209] FAT-fs (loop5): Directory bread(block 73) failed [ 148.837621][ T33] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.897663][ T126] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.031099][ T33] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 149.048098][ T33] usb 5-1: config 0 has no interface number 0 [ 149.061711][ T6231] loop3: detected capacity change from 0 to 32768 [ 149.079137][ T33] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 149.097462][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 149.105573][ T126] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.127256][ T33] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 149.152597][ T126] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 149.192797][ T126] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 149.207665][ T33] usb 5-1: config 0 interface 255 has no altsetting 0 [ 149.216275][ T33] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 149.236510][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.246283][ T126] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.274633][ T33] usb 5-1: config 0 descriptor?? [ 149.279775][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.297613][ T126] usb 6-1: SerialNumber: syz [ 149.304890][ T33] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 149.348350][ T6239] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 149.382429][ T126] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 149.498630][ T6237] loop1: detected capacity change from 0 to 32768 [ 149.509588][ T4320] usb 5-1: USB disconnect, device number 2 [ 149.545596][ T6237] jfs: Unrecognized mount option "ÿ00000000000000000000ÿÿÿÿ18446744073709551615ÿÿÿÿ" or missing value [ 149.582698][ T6254] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.599326][ T126] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 149.619677][ T126] usb 6-1: USB disconnect, device number 3 [ 149.627982][ T6254] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.021544][ T26] audit: type=1400 audit(1755257429.566:12): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=6262 comm="syz.3.876" [ 150.476709][ T6275] kAFS: No cell specified [ 150.949750][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'. [ 150.975989][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 151.067476][ T33] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 151.252509][ T6306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.270932][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 151.309334][ T33] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 151.346712][ T33] usb 5-1: config 0 has no interface number 0 [ 151.369981][ T6309] loop3: detected capacity change from 0 to 1024 [ 151.393634][ T33] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 151.404890][ T6309] hfsplus: Filesystem is marked locked, mounting read-only. [ 151.436394][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.438589][ T6309] hfsplus: filesystem is marked locked, leaving read-only. [ 151.452388][ T33] usb 5-1: Product: syz [ 151.490085][ T33] usb 5-1: Manufacturer: syz [ 151.494760][ T33] usb 5-1: SerialNumber: syz [ 151.518550][ T33] usb 5-1: config 0 descriptor?? [ 151.547015][ T33] smsc95xx v2.0.0 [ 151.551459][ T33] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 151.567930][ T33] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 151.677576][ T126] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.809455][ T3599] usb 5-1: USB disconnect, device number 3 [ 151.877603][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 151.886286][ T126] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.903895][ T126] usb 6-1: config 179 has no interface number 0 [ 151.928510][ T126] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.963649][ T126] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.983537][ T126] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.057536][ T126] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.076370][ T126] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.122018][ T126] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.139996][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.174803][ T6307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 152.206787][ T6332] loop2: detected capacity change from 0 to 256 [ 152.226627][ T6333] xt_CONNSECMARK: invalid mode: 0 [ 152.308497][ T6332] FAT-fs (loop2): Directory bread(block 64) failed [ 152.337726][ T3599] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.355746][ T6332] FAT-fs (loop2): Directory bread(block 65) failed [ 152.378525][ T6332] FAT-fs (loop2): Directory bread(block 66) failed [ 152.416535][ T6332] FAT-fs (loop2): Directory bread(block 67) failed [ 152.443524][ T6332] FAT-fs (loop2): Directory bread(block 68) failed [ 152.461349][ T6332] FAT-fs (loop2): Directory bread(block 69) failed [ 152.475582][ T6332] FAT-fs (loop2): Directory bread(block 70) failed [ 152.488776][ T6332] FAT-fs (loop2): Directory bread(block 71) failed [ 152.490119][ T126] usb 6-1: USB disconnect, device number 4 [ 152.495368][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.495410][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.495581][ T6332] FAT-fs (loop2): Directory bread(block 72) failed [ 152.536401][ T6332] FAT-fs (loop2): Directory bread(block 73) failed [ 152.555291][ T6337] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 152.566666][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 152.573885][ T3599] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 152.605428][ T3599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.636258][ T3599] usb 4-1: config 0 has no interface number 0 [ 152.656528][ T3599] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.706346][ T3599] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 152.737255][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.764732][ T3599] usb 4-1: Product: syz [ 152.779559][ T3599] usb 4-1: Manufacturer: syz [ 152.784275][ T3599] usb 4-1: SerialNumber: syz [ 152.793380][ T3599] usb 4-1: config 0 descriptor?? [ 152.805722][ T3599] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 152.816128][ T3599] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 153.017321][ T3599] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 153.035384][ T3599] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 153.220661][ T6352] x_tables: duplicate entry at hook 1 [ 153.221983][ T126] usb 4-1: USB disconnect, device number 4 [ 153.447553][ T6359] kAFS: unparsable volume name [ 153.620549][ T6365] vivid-003: disconnect [ 153.638843][ T6364] vivid-003: reconnect [ 153.827559][ T4283] Bluetooth: hci4: command 0x2021 tx timeout [ 153.977042][ T6346] loop2: detected capacity change from 0 to 40427 [ 154.040046][ T6346] F2FS-fs (loop2): invalid crc value [ 154.045679][ T6346] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 154.117640][ T33] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.136317][ T6346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.297682][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 154.306884][ T6346] F2FS-fs (loop2): recover fsync data on readonly fs [ 154.317353][ T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.337750][ T6346] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 154.344550][ T6346] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 154.353797][ T6386] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.370885][ T33] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 154.396152][ T6346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.401538][ T33] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 154.412688][ T6388] loop3: detected capacity change from 0 to 512 [ 154.448745][ T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.470066][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.497119][ T33] usb 5-1: SerialNumber: syz [ 154.499329][ T6388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.522931][ T6372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.556711][ T33] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 154.595943][ T6388] EXT4-fs (loop3): filesystem is read-only [ 154.622364][ T6388] EXT4-fs (loop3): filesystem is read-only [ 154.642658][ T6388] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.667817][ T6388] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.936: bad orphan inode 16 [ 154.717155][ T6388] ext4_test_bit(bit=15, block=3) = 0 [ 154.733479][ T6388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.772412][ T33] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 154.790752][ T33] usb 5-1: USB disconnect, device number 4 [ 154.945890][ T6384] loop5: detected capacity change from 0 to 32768 [ 155.011244][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 155.106466][ T6400] autofs4:pid:6400:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 155.120733][ T6400] autofs4:pid:6400:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 155.132384][ T6384] XFS (loop5): Mounting V5 Filesystem [ 155.243699][ T6384] XFS (loop5): Ending clean mount [ 155.283998][ T6384] XFS (loop5): Quotacheck needed: Please wait. [ 155.354796][ T6384] XFS (loop5): Quotacheck: Done. [ 155.599550][ T4990] XFS (loop5): Unmounting Filesystem [ 155.745462][ T6421] loop4: detected capacity change from 0 to 1024 [ 155.875589][ T6421] hfsplus: keylen 65060 too large [ 156.022302][ T26] audit: type=1326 audit(1755257435.566:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 156.055177][ T6429] syz.1.953 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 156.077481][ T26] audit: type=1326 audit(1755257435.596:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 156.137997][ T26] audit: type=1326 audit(1755257435.596:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 156.229952][ T26] audit: type=1326 audit(1755257435.656:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 156.276433][ T26] audit: type=1326 audit(1755257435.656:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 156.821462][ T6454] loop1: detected capacity change from 0 to 4096 [ 156.883003][ T6454] ntfs3: loop1: ino=3, Correct links count -> 2. [ 156.987496][ T4313] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.011217][ T6454] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 157.070674][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 157.207581][ T4313] usb 4-1: Using ep0 maxpacket: 16 [ 157.215313][ T4313] usb 4-1: config index 0 descriptor too short (expected 18, got 14) [ 157.267738][ T4313] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 157.300242][ T4313] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.337067][ T4313] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 157.375747][ T6467] loop2: detected capacity change from 0 to 1764 [ 157.387468][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.395700][ T4313] usb 4-1: Product: syz [ 157.407494][ T4313] usb 4-1: Manufacturer: syz [ 157.420811][ T4313] usb 4-1: SerialNumber: syz [ 157.457988][ T4313] r8152-cfgselector 4-1: config 0 descriptor?? [ 157.503635][ T6467] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 157.597536][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.674057][ T4313] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 157.787669][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 157.796247][ T7] usb 2-1: config 0 has an invalid interface number: 54 but max is 0 [ 157.819559][ T6481] netlink: 108 bytes leftover after parsing attributes in process `syz.2.978'. [ 157.828843][ T7] usb 2-1: config 0 has no interface number 0 [ 157.828894][ T7] usb 2-1: config 0 interface 54 has no altsetting 0 [ 157.833911][ T7] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 157.881551][ T4313] usb 4-1: USB disconnect, device number 5 [ 157.915315][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.943669][ T7] usb 2-1: Product: syz [ 157.957674][ T7] usb 2-1: Manufacturer: syz [ 157.967752][ T7] usb 2-1: SerialNumber: syz [ 157.998269][ T7] usb 2-1: config 0 descriptor?? [ 157.999441][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'. [ 158.013184][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'. [ 158.186380][ T6491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.226665][ T7] ums_eneub6250 2-1:0.54: USB Mass Storage device detected [ 158.358369][ T7] usb 2-1: USB disconnect, device number 5 [ 158.519555][ T6504] loop2: detected capacity change from 0 to 8 [ 158.625011][ T6501] loop5: detected capacity change from 0 to 4096 [ 159.558087][ T6535] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 159.755274][ T6541] Unknown options in mask 5 [ 160.291583][ T6555] loop5: detected capacity change from 0 to 4096 [ 160.625059][ T6571] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 160.945829][ T6585] netlink: 'syz.5.1027': attribute type 3 has an invalid length. [ 161.457685][ T4313] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 161.514869][ T6602] loop4: detected capacity change from 0 to 4096 [ 161.547680][ T6602] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 161.631726][ T6608] loop2: detected capacity change from 0 to 512 [ 161.675465][ T6608] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 161.693024][ T4313] usb 6-1: string descriptor 0 read error: -22 [ 161.709772][ T4313] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 161.749421][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.789909][ T4313] usb 6-1: config 0 descriptor?? [ 161.839126][ T4313] usbtest 6-1:0.0: FX2 device [ 161.843886][ T4313] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 162.020254][ T4313] usb 6-1: USB disconnect, device number 5 [ 162.152140][ T6590] loop1: detected capacity change from 0 to 40427 [ 162.191073][ T6590] F2FS-fs (loop1): invalid crc value [ 162.197970][ T6590] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 162.227647][ T4320] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.268980][ T6590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.321355][ T6621] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 162.379583][ T6590] F2FS-fs (loop1): recover fsync data on readonly fs [ 162.386569][ T6590] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 162.397918][ T6590] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 162.426522][ T6590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.437627][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 162.463041][ T4320] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 162.507530][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.538004][ T4320] usb 3-1: Product: syz [ 162.538027][ T4320] usb 3-1: Manufacturer: syz [ 162.538043][ T4320] usb 3-1: SerialNumber: syz [ 162.559863][ T4320] usb 3-1: config 0 descriptor?? [ 162.848418][ T4320] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 162.880009][ T4320] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 162.886604][ T4320] f81534a_ctrl: probe of 3-1:0.0 failed with error -5 [ 162.944751][ T6635] loop5: detected capacity change from 0 to 128 [ 162.953285][ T4320] usb 3-1: USB disconnect, device number 4 [ 163.045179][ T6635] hpfs: hpfs_map_4sectors(): unaligned read [ 163.072501][ T6633] loop1: detected capacity change from 0 to 4096 [ 163.077938][ T6635] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 163.126767][ T6635] hpfs: hpfs_map_sector(): read error [ 163.517573][ T6645] netlink: 'syz.4.1057': attribute type 29 has an invalid length. [ 163.525609][ T6645] netlink: 'syz.4.1057': attribute type 29 has an invalid length. [ 163.965398][ T6663] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 164.503096][ T6685] loop1: detected capacity change from 0 to 64 [ 164.593416][ T6679] nvme_fabrics: missing parameter 'transport=%s' [ 164.627270][ T6685] overlayfs: filesystem on './file0' not supported [ 164.636541][ T6679] nvme_fabrics: missing parameter 'nqn=%s' [ 164.784467][ T6692] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 164.825952][ T6692] device macvlan0 entered promiscuous mode [ 164.905675][ T6692] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 165.427013][ T6715] xt_cluster: node mask cannot exceed total number of nodes [ 165.717479][ T6726] netlink: 'syz.3.1097': attribute type 29 has an invalid length. [ 165.725697][ T6726] netlink: 'syz.3.1097': attribute type 29 has an invalid length. [ 166.298221][ T26] audit: type=1326 audit(1755257445.846:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cd8ebe9 code=0x7ffc0000 [ 166.403810][ T26] audit: type=1326 audit(1755257445.876:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f564cd8ebe9 code=0x7ffc0000 [ 166.403862][ T26] audit: type=1326 audit(1755257445.876:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cd8ebe9 code=0x7ffc0000 [ 166.403903][ T26] audit: type=1326 audit(1755257445.876:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564cd8ebe9 code=0x7ffc0000 [ 166.500594][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.566413][ T6758] tmpfs: Bad value for 'mpol' [ 166.596911][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.046399][ T6778] loop4: detected capacity change from 0 to 8 [ 167.183455][ T6782] loop5: detected capacity change from 0 to 256 [ 167.219305][ T6778] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.247638][ T6778] SQUASHFS error: Failed to read block 0x60: -5 [ 167.254306][ T6782] exFAT-fs (loop5): bogus sector size bits : 0 [ 167.268989][ T6782] exFAT-fs (loop5): failed to read boot sector [ 167.275302][ T6782] exFAT-fs (loop5): failed to recognize exfat type [ 167.304294][ T6784] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1125'. [ 167.321300][ T6782] exFAT-fs (loop5): bogus sector size bits : 0 [ 167.342111][ T6782] exFAT-fs (loop5): failed to read boot sector [ 167.360163][ T6778] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.374376][ T6782] exFAT-fs (loop5): failed to recognize exfat type [ 167.375833][ T6788] autofs4:pid:6788:autofs_fill_super: called with bogus options [ 167.413168][ T6778] SQUASHFS error: Failed to read block 0x60: -5 [ 167.477892][ T26] audit: type=1800 audit(1755257447.016:22): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1123" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 167.588829][ T6792] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.932882][ T6804] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 168.226863][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 169.334415][ T6822] loop1: detected capacity change from 0 to 32768 [ 169.394516][ T6822] XFS (loop1): Mounting V5 Filesystem [ 169.624351][ T6822] XFS (loop1): Ending clean mount [ 169.682498][ T6822] XFS (loop1): Quotacheck needed: Please wait. [ 169.777806][ T6822] XFS (loop1): Quotacheck: Done. [ 169.951533][ T4266] XFS (loop1): Unmounting Filesystem [ 170.256879][ T6892] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 170.320792][ T6892] Error parsing options; rc = [-22] [ 170.361302][ T6895] netlink: 'syz.3.1177': attribute type 3 has an invalid length. [ 170.417926][ T6893] loop4: detected capacity change from 0 to 4096 [ 170.461796][ T6893] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 170.523299][ T6893] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 170.661228][ T6893] ntfs3: loop4: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 170.803926][ T4271] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 171.039481][ T6917] loop3: detected capacity change from 0 to 1024 [ 171.086409][ T6917] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 171.586608][ T6931] vivid-008: disconnect [ 171.636978][ T6930] vivid-008: reconnect [ 171.957742][ T6946] loop5: detected capacity change from 0 to 64 [ 172.609543][ T6961] loop3: detected capacity change from 0 to 4096 [ 172.712910][ T6961] ntfs3: loop3: ino=5, "/" attr_set_size [ 172.737782][ T6961] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 172.943653][ T6981] xt_CONNSECMARK: invalid mode: 0 [ 173.624891][ T7001] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 173.663779][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1228'. [ 173.801670][ T7001] team0: Port device geneve0 added [ 173.967631][ T3599] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.177617][ T3599] usb 4-1: Using ep0 maxpacket: 32 [ 174.184824][ T3599] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.215792][ T3599] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 174.252542][ T3599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.295993][ T3599] usb 4-1: Product: syz [ 174.305759][ T3599] usb 4-1: Manufacturer: syz [ 174.312412][ T3599] usb 4-1: SerialNumber: syz [ 174.321638][ T3599] usb 4-1: config 0 descriptor?? [ 174.477301][ T7028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1243'. [ 174.492102][ T7028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1243'. [ 174.512666][ T7033] loop4: detected capacity change from 0 to 512 [ 174.566887][ T7033] EXT4-fs: Ignoring removed i_version option [ 174.653021][ T7033] EXT4-fs (loop4): 1 truncate cleaned up [ 174.682207][ T7033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.748175][ T3599] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 174.775660][ T3599] gs_usb: probe of 4-1:0.0 failed with error -71 [ 174.826523][ T3599] usb 4-1: USB disconnect, device number 6 [ 175.004805][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 175.310757][ T7058] loop4: detected capacity change from 0 to 256 [ 175.325305][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.348850][ T7058] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.380810][ T7058] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 175.416599][ T7058] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 175.530910][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1258'. [ 175.542415][ T126] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.587594][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.631681][ T126] usb 3-1: config 0 descriptor?? [ 175.672701][ T126] cp210x 3-1:0.0: cp210x converter detected [ 175.888874][ T126] usb 3-1: cp210x converter now attached to ttyUSB0 [ 176.096185][ T4330] usb 3-1: USB disconnect, device number 5 [ 176.118771][ T4330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.127041][ T4330] cp210x 3-1:0.0: device disconnected [ 176.154044][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1268'. [ 176.204450][ T7083] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 176.488450][ T7094] loop3: detected capacity change from 0 to 764 [ 176.556469][ T7094] rock: directory entry would overflow storage [ 176.595487][ T7094] rock: sig=0x4654, size=5, remaining=4 [ 176.615841][ T7094] isofs: Unable to find the ".." directory for NFS. [ 176.626027][ T7100] loop5: detected capacity change from 0 to 256 [ 176.716655][ T7100] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 177.197188][ T7119] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 177.197188][ T7119] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 177.332223][ T7126] openvswitch: netlink: Key type 29 is not supported [ 177.794757][ T26] audit: type=1326 audit(1755257457.336:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 177.893880][ T26] audit: type=1326 audit(1755257457.356:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 177.995669][ T26] audit: type=1326 audit(1755257457.366:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 178.163076][ T26] audit: type=1326 audit(1755257457.676:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 178.202380][ T7157] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.246309][ T7157] overlayfs: missing 'lowerdir' [ 178.281895][ T26] audit: type=1326 audit(1755257457.706:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 178.757718][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.827937][ T7182] loop5: detected capacity change from 0 to 128 [ 178.903875][ T7182] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 178.937803][ T7182] FAT-fs (loop5): Filesystem has been set read-only [ 178.959503][ T4320] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 178.990623][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.032511][ T4320] usb 2-1: config 0 descriptor?? [ 179.062784][ T4320] pwc: Philips SPC 900NC USB webcam detected. [ 179.326402][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 179.464797][ T4320] pwc: send_video_command error -71 [ 179.470271][ T4320] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 179.508496][ T4320] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 179.557732][ T4320] usb 2-1: USB disconnect, device number 6 [ 179.707500][ T4330] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 179.902498][ T4330] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 179.932449][ T7220] netlink: 'syz.2.1334': attribute type 11 has an invalid length. [ 179.938374][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.957520][ T7220] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1334'. [ 179.976055][ T4330] usb 6-1: Product: syz [ 179.988177][ T4330] usb 6-1: Manufacturer: syz [ 179.994159][ T4330] usb 6-1: SerialNumber: syz [ 180.034204][ T4330] r8152-cfgselector 6-1: config 0 descriptor?? [ 180.169799][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1336'. [ 180.451906][ T4330] r8152-cfgselector 6-1: Unknown version 0x0000 [ 180.470110][ T4330] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 180.552378][ T7236] loop2: detected capacity change from 0 to 512 [ 180.692391][ T7236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.726546][ T7236] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.760281][ T7219] loop4: detected capacity change from 0 to 32768 [ 180.876400][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 180.893567][ T7243] loop3: detected capacity change from 0 to 4096 [ 180.900636][ T7219] XFS (loop4): Mounting V5 Filesystem [ 180.948741][ T7243] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 181.029285][ T7219] XFS (loop4): Ending clean mount [ 181.096879][ T7219] XFS (loop4): Quotacheck needed: Please wait. [ 181.101069][ T7257] qrtr: Invalid version 0 [ 181.116379][ T7243] ntfs3: loop3: failed to convert "c46c" to cp932 [ 181.183156][ T7219] XFS (loop4): Quotacheck: Done. [ 181.237618][ T7259] netlink: 'syz.5.1348': attribute type 10 has an invalid length. [ 181.245753][ T7259] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 181.372977][ T4271] XFS (loop4): Unmounting Filesystem [ 181.388732][ T7261] netlink: 'syz.1.1349': attribute type 3 has an invalid length. [ 181.396561][ T7261] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1349'. [ 183.030066][ T7310] loop3: detected capacity change from 0 to 4096 [ 183.289445][ T4320] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 183.336678][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 183.386392][ T7324] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1380'. [ 183.441330][ T7326] loop2: detected capacity change from 0 to 256 [ 183.507688][ T4320] usb 6-1: Using ep0 maxpacket: 8 [ 183.512962][ T7326] FAT-fs (loop2): Directory bread(block 64) failed [ 183.524838][ T4320] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 183.537605][ T7326] FAT-fs (loop2): Directory bread(block 65) failed [ 183.544303][ T7326] FAT-fs (loop2): Directory bread(block 66) failed [ 183.575906][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.609091][ T7326] FAT-fs (loop2): Directory bread(block 67) failed [ 183.615785][ T7326] FAT-fs (loop2): Directory bread(block 68) failed [ 183.637735][ T4320] usb 6-1: Product: syz [ 183.642021][ T4320] usb 6-1: Manufacturer: syz [ 183.657925][ T7326] FAT-fs (loop2): Directory bread(block 69) failed [ 183.686651][ T1043] block nbd1: Attempted send on invalid socket [ 183.688894][ T4320] usb 6-1: SerialNumber: syz [ 183.693665][ T1043] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.698561][ T7326] FAT-fs (loop2): Directory bread(block 70) failed [ 183.770601][ T7326] FAT-fs (loop2): Directory bread(block 71) failed [ 183.792310][ T4320] usb 6-1: config 0 descriptor?? [ 183.844412][ T7326] FAT-fs (loop2): Directory bread(block 72) failed [ 183.853936][ T4320] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 183.884653][ T7326] FAT-fs (loop2): Directory bread(block 73) failed [ 184.038192][ T26] audit: type=1800 audit(1755257463.576:28): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1381" name="bus" dev="loop2" ino=1048609 res=0 errno=0 [ 184.272682][ T4320] gspca_vc032x: reg_w err -71 [ 184.278401][ T26] audit: type=1326 audit(1755257463.826:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 184.285407][ T4320] vc032x: probe of 6-1:0.0 failed with error -71 [ 184.347923][ T4320] usb 6-1: USB disconnect, device number 7 [ 184.406365][ T26] audit: type=1326 audit(1755257463.826:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 184.477600][ T26] audit: type=1326 audit(1755257463.856:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 184.512128][ T7334] loop4: detected capacity change from 0 to 32768 [ 184.517697][ T26] audit: type=1326 audit(1755257463.856:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 184.618426][ T7334] XFS (loop4): Mounting V5 Filesystem [ 184.624501][ T26] audit: type=1326 audit(1755257463.856:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.2.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598858ebe9 code=0x7ffc0000 [ 184.699926][ T7336] loop3: detected capacity change from 0 to 32768 [ 184.709320][ T7334] XFS (loop4): Ending clean mount [ 184.733883][ T7334] XFS (loop4): Quotacheck needed: Please wait. [ 184.742259][ T7336] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1386 (7336) [ 184.845408][ T7334] XFS (loop4): Quotacheck: Done. [ 184.891186][ T7356] No such timeout policy "syz1" [ 184.949684][ T7358] trusted_key: encrypted_key: master key parameter is missing [ 184.992677][ T7336] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.068204][ T7336] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 185.123824][ T4271] XFS (loop4): Unmounting Filesystem [ 185.138703][ T7336] BTRFS info (device loop3): using free space tree [ 185.231060][ T7368] loop1: detected capacity change from 0 to 256 [ 185.445160][ T7336] BTRFS info (device loop3): enabling ssd optimizations [ 185.900551][ T4265] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.264892][ T7439] IPv6: sit2: Disabled Multicast RS [ 187.592747][ T7453] loop5: detected capacity change from 0 to 512 [ 187.700107][ T7453] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 187.727679][ T7453] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.821948][ T7453] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.1427: corrupted xattr block 33 [ 187.918408][ T7453] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 188.056866][ T7473] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 188.065816][ T4990] EXT4-fs (loop5): unmounting filesystem. [ 188.237608][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.437498][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 188.447261][ T4320] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 188.486076][ T4320] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 188.517485][ T4320] usb 2-1: Product: syz [ 188.521735][ T4320] usb 2-1: Manufacturer: syz [ 188.557840][ T4320] usb 2-1: SerialNumber: syz [ 188.583701][ T4320] usb 2-1: config 0 descriptor?? [ 188.597504][ T7492] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1446'. [ 188.609047][ T4320] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 188.733163][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 188.861526][ T7499] sock: sock_timestamping_bind_phc: sock not bind to device [ 189.011645][ T4320] gspca_zc3xx: reg_r err -71 [ 189.016444][ T4320] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 189.065629][ T4320] usb 2-1: USB disconnect, device number 7 [ 189.211768][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1455'. [ 189.227669][ T7512] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.285812][ T7508] loop3: detected capacity change from 0 to 4096 [ 189.300861][ T7508] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 189.397219][ T7508] ntfs3: loop3: no free space to extend mft [ 189.874083][ T7524] loop5: detected capacity change from 0 to 4096 [ 189.935563][ T7524] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 190.012988][ T7534] loop4: detected capacity change from 0 to 256 [ 190.024730][ T7536] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 190.064713][ T7534] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 190.197173][ T7524] ntfs3: loop5: failed to convert "c46c" to cp865 [ 190.498982][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.699537][ T4320] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 190.726194][ T4320] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.763348][ T4320] usb 5-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 190.806689][ T4320] usb 5-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 190.850331][ T4320] usb 5-1: config 1 interface 1 has no altsetting 0 [ 190.874839][ T4320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.903036][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.916898][ T7526] loop1: detected capacity change from 0 to 32768 [ 190.942082][ T4320] usb 5-1: Product: syz [ 190.959460][ T4320] usb 5-1: Manufacturer: syz [ 190.984577][ T4320] usb 5-1: SerialNumber: syz [ 191.035989][ T7562] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 191.065284][ T4320] usb 5-1: selecting invalid altsetting 0 [ 191.124170][ T4320] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 191.170595][ T7526] XFS (loop1): Mounting V5 Filesystem [ 191.256192][ T4320] usb 5-1: selecting invalid altsetting 0 [ 191.271522][ T4320] usbtest: probe of 5-1:1.1 failed with error -22 [ 191.280943][ T4320] usb 5-1: USB disconnect, device number 5 [ 191.302227][ T7526] XFS (loop1): Ending clean mount [ 191.348784][ T7526] XFS (loop1): Quotacheck needed: Please wait. [ 191.430621][ T7526] XFS (loop1): Quotacheck: Done. [ 191.515760][ T4266] XFS (loop1): Unmounting Filesystem [ 192.276227][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 192.476048][ T7582] loop2: detected capacity change from 0 to 32768 [ 192.569876][ T7582] ERROR: (device loop2): dtSearch: stack overrun! [ 192.569876][ T7582] [ 192.666618][ T7582] ERROR: (device loop2): remounting filesystem as read-only [ 192.681147][ T7582] btstack dump: [ 192.693562][ T7582] bn = 0, index = 4 [ 192.704551][ T7582] bn = 0, index = 4 [ 192.715942][ T7582] bn = 0, index = 4 [ 192.744924][ T7582] bn = 0, index = 4 [ 192.757524][ T7582] bn = 0, index = 4 [ 192.767670][ T7582] bn = 0, index = 4 [ 192.781750][ T7582] bn = 0, index = 4 [ 192.785686][ T7582] bn = 0, index = 0 [ 192.827788][ T7582] jfs_lookup: dtSearch returned -5 [ 192.835523][ T7584] loop3: detected capacity change from 0 to 32768 [ 192.957518][ T7584] XFS (loop3): Mounting V5 Filesystem [ 193.086513][ T7584] XFS (loop3): Ending clean mount [ 193.112700][ T7584] XFS (loop3): Quotacheck needed: Please wait. [ 193.188980][ T7584] XFS (loop3): Quotacheck: Done. [ 193.407642][ T4265] XFS (loop3): Unmounting Filesystem [ 193.493581][ T7629] syz.1.1504 uses obsolete (PF_INET,SOCK_PACKET) [ 193.556185][ T7604] loop4: detected capacity change from 0 to 32768 [ 194.217223][ T7649] loop5: detected capacity change from 0 to 2048 [ 194.238654][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245012][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.305480][ T7649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.995393][ T7672] loop5: detected capacity change from 0 to 512 [ 195.039753][ T7672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.083029][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 195.182349][ T7672] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 195.396326][ T4990] EXT4-fs (loop5): unmounting filesystem. [ 195.592774][ T7691] device ip6erspan0 entered promiscuous mode [ 195.607995][ T7697] loop4: detected capacity change from 0 to 8 [ 195.853416][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 196.444836][ T7719] loop4: detected capacity change from 0 to 4096 [ 196.463706][ T7723] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 196.489046][ T7719] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 196.665645][ T7719] ntfs3: loop4: failed to convert "c46c" to cp857 [ 196.737098][ T7707] loop1: detected capacity change from 0 to 32768 [ 196.913690][ T7707] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 196.950086][ T7736] xt_TCPMSS: Only works on TCP SYN packets [ 196.962887][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1553'. [ 197.303499][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 198.203020][ T7781] overlayfs: unrecognized mount option "\" or missing value [ 198.271609][ T7783] loop4: detected capacity change from 0 to 512 [ 198.330043][ T7785] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 198.369956][ T7783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.428442][ T7791] loop5: detected capacity change from 0 to 256 [ 198.499503][ T7783] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 198.511785][ T7783] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 198.521358][ T7783] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.1578: Failed to acquire dquot type 0 [ 198.620887][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 198.727882][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.923112][ T22] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.923904][ T7806] loop3: detected capacity change from 0 to 512 [ 198.967553][ T22] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.984589][ T7806] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.013400][ T22] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.027460][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.064549][ T7793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.148475][ T7806] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 199.340691][ T7817] netlink: 'syz.4.1592': attribute type 30 has an invalid length. [ 199.481400][ T3599] usb 2-1: USB disconnect, device number 8 [ 199.760503][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 199.963382][ T7833] syz.5.1600 (7833) used greatest stack depth: 20840 bytes left [ 200.820820][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.841652][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.858284][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.944424][ T7874] netlink: 'syz.1.1620': attribute type 4 has an invalid length. [ 201.427607][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 201.433761][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 201.439972][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 201.494408][ T7857] loop2: detected capacity change from 0 to 32768 [ 202.234383][ T7902] loop4: detected capacity change from 0 to 2048 [ 202.261574][ T7902] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 202.324478][ T7902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.640295][ T7915] loop4: detected capacity change from 0 to 256 [ 202.738006][ T7915] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 202.795382][ T7922] loop1: detected capacity change from 0 to 256 [ 202.797851][ T7915] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 202.853665][ T7922] exfat: Deprecated parameter 'utf8' [ 202.873261][ T7922] exfat: Deprecated parameter 'utf8' [ 202.903709][ T7922] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 203.777561][ T4313] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.979008][ T4313] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 204.003095][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.047551][ T4313] usb 2-1: config 0 has no interface number 0 [ 204.053760][ T4313] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 204.085424][ T4313] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.109755][ T4313] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 204.130079][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.144116][ T7962] loop5: detected capacity change from 0 to 512 [ 204.164590][ T4313] usb 2-1: Product: syz [ 204.170898][ T4313] usb 2-1: Manufacturer: syz [ 204.175546][ T4313] usb 2-1: SerialNumber: syz [ 204.208048][ T4313] usb 2-1: config 0 descriptor?? [ 204.257172][ T7962] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 204.305987][ T7962] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 204.364866][ T7962] EXT4-fs (loop5): 1 truncate cleaned up [ 204.380888][ T7962] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 204.421076][ T7962] EXT4-fs (loop5): unmounting filesystem. [ 204.636460][ T4330] usb 2-1: USB disconnect, device number 9 [ 204.802732][ T7973] loop2: detected capacity change from 0 to 4096 [ 204.843152][ T7973] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 204.888620][ T7973] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 204.956627][ T7973] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 205.019594][ T7973] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 205.067521][ T7973] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 205.128893][ T7973] ntfs: volume version 3.1. [ 205.155714][ T7973] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 205.224779][ T7973] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 205.316955][ T7973] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 205.357516][ T7973] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 205.463900][ T7973] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 205.510975][ T7994] SET target dimension over the limit! [ 205.769716][ T8003] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 206.105221][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1687'. [ 206.541213][ T8019] loop1: detected capacity change from 0 to 8192 [ 206.606568][ T8019] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.644898][ T8019] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 206.664929][ T8019] REISERFS (device loop1): using ordered data mode [ 206.674206][ T8019] reiserfs: using flush barriers [ 206.684582][ T8019] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.702272][ T8019] REISERFS (device loop1): checking transaction log (loop1) [ 206.739152][ T8019] REISERFS (device loop1): Using r5 hash to sort names [ 206.748102][ T8019] REISERFS (device loop1): using 3.5.x disk format [ 207.276415][ T8007] loop3: detected capacity change from 0 to 40427 [ 207.313894][ T8007] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 207.355839][ T8007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 207.464322][ T8007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.685994][ T8007] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.693493][ T8007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.777089][ T8060] loop1: detected capacity change from 0 to 2048 [ 207.865636][ T8060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.399272][ T8072] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1715'. [ 208.513017][ T8074] loop1: detected capacity change from 0 to 256 [ 208.687828][ T8078] device hsr0 entered promiscuous mode [ 208.736388][ T8078] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 208.831631][ T8080] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 208.844149][ T8046] loop4: detected capacity change from 0 to 40427 [ 208.926894][ T8046] F2FS-fs (loop4): invalid crc value [ 208.989509][ T8046] F2FS-fs (loop4): Found nat_bits in checkpoint [ 209.175735][ T8046] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 209.217900][ T8046] F2FS-fs (loop4): Start checkpoint disabled! [ 209.240961][ T8046] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 209.432892][ T8100] netlink: 'syz.1.1727': attribute type 7 has an invalid length. [ 209.601270][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1729'. [ 210.053825][ T8120] loop4: detected capacity change from 0 to 16 [ 210.125339][ T8120] erofs: (device loop4): mounted with root inode @ nid 36. [ 210.145382][ T8122] loop3: detected capacity change from 0 to 2048 [ 210.178382][ T8120] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 210.221749][ T8120] syz.4.1737: attempt to access beyond end of device [ 210.221749][ T8120] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 210.254480][ T8126] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.309599][ T8126] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 210.339383][ T8120] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 210.389869][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 210.389884][ T26] audit: type=1800 audit(210.352:34): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1737" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 210.394748][ T8126] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 210.561177][ T8120] syz.4.1737 (8120) used greatest stack depth: 20424 bytes left [ 210.594385][ T8126] Remounting filesystem read-only [ 210.613586][ T8132] hsr0: VLAN not yet supported [ 210.796182][ T4265] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 210.913263][ T8142] loop1: detected capacity change from 0 to 512 [ 211.109446][ T8142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.333436][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 211.604263][ T8165] loop1: detected capacity change from 0 to 2048 [ 211.714062][ T8174] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.801074][ T8174] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 211.820209][ T8177] deleting an unspecified loop device is not supported. [ 211.827332][ T8174] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 211.869883][ T8174] Remounting filesystem read-only [ 211.889368][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1764'. [ 211.971258][ T4266] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 212.482377][ T8204] 9pnet_fd: Insufficient options for proto=fd [ 212.645767][ T8208] loop2: detected capacity change from 0 to 8 [ 212.744074][ T8208] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.762603][ T8208] SQUASHFS error: Failed to read block 0x1c0: -5 [ 212.787898][ T8208] SQUASHFS error: Unable to read metadata cache entry [1be] [ 213.117003][ T8226] loop5: detected capacity change from 0 to 1024 [ 213.322875][ T9] hfsplus: b-tree write err: -5, ino 4 [ 213.573710][ T8239] loop5: detected capacity change from 0 to 1024 [ 214.371863][ T8275] (syz.4.1811,8275,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 214.432461][ T8275] (syz.4.1811,8275,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 214.457459][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 214.659346][ T7] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.679970][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.717234][ T7] usb 6-1: config 0 descriptor?? [ 214.738600][ T7] cp210x 6-1:0.0: cp210x converter detected [ 214.893071][ T8296] bond0: Unable to set up delay as MII monitoring is disabled [ 215.091243][ T8298] binfmt_misc: register: failed to install interpreter file ./file0 [ 215.130233][ T8301] netlink: 'syz.4.1823': attribute type 2 has an invalid length. [ 215.144946][ T7] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 215.168026][ T7] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 215.206387][ T7] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 215.216801][ T7] usb 6-1: cp210x converter now attached to ttyUSB0 [ 215.247052][ T7] usb 6-1: USB disconnect, device number 8 [ 215.296239][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.314799][ T7] cp210x 6-1:0.0: device disconnected [ 215.361404][ T8309] loop2: detected capacity change from 0 to 164 [ 215.451664][ T8309] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 215.527542][ T8314] dlm: no locking on control device [ 215.876759][ T8325] loop4: detected capacity change from 0 to 256 [ 216.342899][ T8344] loop5: detected capacity change from 0 to 256 [ 216.459538][ T8344] FAT-fs (loop5): Directory bread(block 64) failed [ 216.466185][ T8344] FAT-fs (loop5): Directory bread(block 65) failed [ 216.532522][ T8344] FAT-fs (loop5): Directory bread(block 66) failed [ 216.557129][ T8344] FAT-fs (loop5): Directory bread(block 67) failed [ 216.587737][ T8344] FAT-fs (loop5): Directory bread(block 68) failed [ 216.594411][ T8344] FAT-fs (loop5): Directory bread(block 69) failed [ 216.609913][ T8344] FAT-fs (loop5): Directory bread(block 70) failed [ 216.636370][ T8344] FAT-fs (loop5): Directory bread(block 71) failed [ 216.657661][ T4313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 216.668312][ T8344] FAT-fs (loop5): Directory bread(block 72) failed [ 216.686307][ T8344] FAT-fs (loop5): Directory bread(block 73) failed [ 216.831008][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 216.847663][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 216.859797][ T4313] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 216.917605][ T4313] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 216.934543][ T4313] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 216.946851][ T4313] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 216.957564][ T4313] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 216.971670][ T4313] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.003014][ T4313] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 217.012478][ T4320] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 217.030511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 217.039678][ T4313] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 217.057469][ T4313] usb 2-1: Product: syz [ 217.061929][ T4313] usb 2-1: Manufacturer: syz [ 217.066556][ T4313] usb 2-1: SerialNumber: syz [ 217.098475][ T4313] usb 2-1: config 0 descriptor?? [ 217.109402][ T4313] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 217.125267][ T8366] loop3: detected capacity change from 0 to 128 [ 217.155869][ T4313] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 217.215019][ T8366] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 217.230282][ T4320] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 217.256013][ T4320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.283259][ T8366] FAT-fs (loop3): Filesystem has been set read-only [ 217.290336][ T4320] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.347802][ T8348] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 217.363413][ T4320] usb 3-1: config 1 has no interface number 1 [ 217.393114][ T4320] usb 3-1: string descriptor 0 read error: -22 [ 217.407813][ T4320] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.437875][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.458161][ T4313] usb 2-1: USB disconnect, device number 10 [ 217.474477][ T4320] usb 3-1: MIDIStreaming interface descriptor not found [ 217.490140][ T4313] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 217.544972][ T4320] snd-usb-audio: probe of 3-1:1.2 failed with error -16 [ 217.679909][ T22] usb 3-1: USB disconnect, device number 6 [ 217.707820][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 217.739302][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 219.174095][ T8429] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 220.208319][ T8468] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 220.393605][ T8475] loop2: detected capacity change from 0 to 256 [ 220.445260][ T8475] FAT-fs (loop2): Directory bread(block 64) failed [ 220.475425][ T8475] FAT-fs (loop2): Directory bread(block 65) failed [ 220.475453][ T8478] netlink: 'syz.5.1912': attribute type 1 has an invalid length. [ 220.487668][ T8475] FAT-fs (loop2): Directory bread(block 66) failed [ 220.496702][ T8475] FAT-fs (loop2): Directory bread(block 67) failed [ 220.525194][ T8475] FAT-fs (loop2): Directory bread(block 68) failed [ 220.540944][ T8475] FAT-fs (loop2): Directory bread(block 69) failed [ 220.555462][ T8475] FAT-fs (loop2): Directory bread(block 70) failed [ 220.564747][ T8481] loop4: detected capacity change from 0 to 64 [ 220.567802][ T8475] FAT-fs (loop2): Directory bread(block 71) failed [ 220.593155][ T8475] FAT-fs (loop2): Directory bread(block 72) failed [ 220.602073][ T8478] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1912'. [ 220.610341][ T8475] FAT-fs (loop2): Directory bread(block 73) failed [ 220.667473][ T4364] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.678526][ T8481] hfs: unable to locate alternate MDB [ 220.693908][ T8481] hfs: continuing without an alternate MDB [ 220.857449][ T4364] usb 2-1: Using ep0 maxpacket: 16 [ 220.864627][ T4364] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 220.898768][ T4364] usb 2-1: config 0 has no interface number 0 [ 220.923351][ T4364] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.935619][ T4364] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.950344][ T4364] usb 2-1: config 0 interface 41 has no altsetting 0 [ 220.998342][ T4364] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 221.028100][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.036186][ T4364] usb 2-1: Product: syz [ 221.074368][ T4364] usb 2-1: Manufacturer: syz [ 221.091674][ T4364] usb 2-1: SerialNumber: syz [ 221.114442][ T4364] usb 2-1: config 0 descriptor?? [ 221.132922][ T8476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.145229][ T8476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.274915][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1920'. [ 221.316612][ T8492] xt_CT: No such helper "snmp_trap" [ 221.403760][ T8476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.437592][ T8476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 221.481312][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1923'. [ 221.667539][ T4364] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 221.691721][ T4364] CoreChips: probe of 2-1:0.41 failed with error -71 [ 221.750016][ T4364] usb 2-1: USB disconnect, device number 11 [ 221.788242][ T8509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.842207][ T8507] loop5: detected capacity change from 0 to 4096 [ 221.877431][ T8507] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 222.044491][ T8515] loop2: detected capacity change from 0 to 1024 [ 222.470514][ T8531] program syz.5.1938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.532539][ T8526] loop1: detected capacity change from 0 to 4096 [ 222.566500][ T8526] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 222.658594][ T4330] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 222.869408][ T4330] usb 4-1: config 0 has no interfaces? [ 222.877816][ T4330] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 222.906929][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.955953][ T4330] usb 4-1: Product: syz [ 222.966092][ T4330] usb 4-1: Manufacturer: syz [ 222.977490][ T4330] usb 4-1: SerialNumber: syz [ 222.992832][ T4330] r8152-cfgselector 4-1: config 0 descriptor?? [ 223.177309][ T8549] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.178829][ T8543] loop2: detected capacity change from 0 to 4096 [ 223.221539][ T4330] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 223.252121][ T8543] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 223.377719][ T8543] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 223.417679][ T8543] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 223.434902][ T4330] usb 4-1: USB disconnect, device number 7 [ 223.531264][ T4268] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 223.544615][ T4268] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 223.588319][ T8555] netlink: 356 bytes leftover after parsing attributes in process `syz.5.1950'. [ 224.052985][ T8551] loop4: detected capacity change from 0 to 32768 [ 224.229876][ T8551] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 224.271813][ T8551] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 224.357813][ T8551] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 224.378913][ T8551] OCFS2: File system is now read-only. [ 224.384458][ T8551] (syz.4.1948,8551,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 224.562784][ T4271] ocfs2: Unmounting device (7,4) on (node local) [ 224.602366][ T8557] loop2: detected capacity change from 0 to 32768 [ 224.740637][ T8557] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 224.803529][ T8557] (syz.2.1951,8557,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 224.845535][ T8563] loop3: detected capacity change from 0 to 32768 [ 224.901703][ T8557] (syz.2.1951,8557,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 224.962199][ T8557] (syz.2.1951,8557,1):ocfs2_mknod:298 ERROR: status = -2 [ 224.978990][ T8577] netlink: 'syz.5.1960': attribute type 8 has an invalid length. [ 225.013007][ T8557] (syz.2.1951,8557,1):ocfs2_mknod:502 ERROR: status = -2 [ 225.034878][ T8557] (syz.2.1951,8557,1):ocfs2_mkdir:659 ERROR: status = -2 [ 225.066040][ T8579] trusted_key: encrypted_key: master key parameter is missing [ 225.315098][ T4268] ocfs2: Unmounting device (7,2) on (node local) [ 225.511969][ T8592] netlink: 'syz.5.1967': attribute type 1 has an invalid length. [ 225.831179][ T8595] loop1: detected capacity change from 0 to 2048 [ 225.905768][ T8602] loop3: detected capacity change from 0 to 64 [ 225.953652][ T8595] Alternate GPT is invalid, using primary GPT. [ 225.984314][ T8595] loop1: p2 p3 p7 [ 226.257570][ T4320] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.447734][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 226.454880][ T4320] usb 5-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 226.507251][ T4320] usb 5-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 226.543314][ T4320] usb 5-1: config 1 interface 0 altsetting 235 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.584176][ T4320] usb 5-1: config 1 interface 0 has no altsetting 0 [ 226.600867][ T4709] udevd[4709]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 226.601071][ T4404] udevd[4404]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 226.635616][ T7816] udevd[7816]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 226.644045][ T4320] usb 5-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 226.666480][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.684868][ T4320] usb 5-1: Product: syz [ 226.697492][ T4320] usb 5-1: Manufacturer: syz [ 226.706447][ T4320] usb 5-1: SerialNumber: syz [ 226.726409][ T8604] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.736939][ T8624] loop2: detected capacity change from 0 to 2048 [ 226.759977][ T4320] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 226.830298][ T8627] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.018469][ T33] usb 5-1: USB disconnect, device number 6 [ 227.082922][ T8633] loop5: detected capacity change from 0 to 512 [ 227.115304][ T8636] netlink: 'syz.3.1987': attribute type 24 has an invalid length. [ 227.123481][ T8636] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 227.128316][ T8633] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.218811][ T8633] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 227.237015][ T8633] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 227.249066][ T8633] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1986: Failed to acquire dquot type 1 [ 227.266921][ T8633] EXT4-fs (loop5): 1 truncate cleaned up [ 227.287730][ T8633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 227.410179][ T4990] EXT4-fs (loop5): unmounting filesystem. [ 228.390631][ T8683] loop3: detected capacity change from 0 to 128 [ 228.692827][ T8694] netlink: 'syz.5.2015': attribute type 17 has an invalid length. [ 228.742739][ T8694] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2015'. [ 228.776573][ T8694] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 229.206164][ T8715] loop5: detected capacity change from 0 to 128 [ 229.259064][ T8715] FAT-fs (loop5): bogus number of reserved sectors [ 229.280410][ T8715] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 229.324951][ T8715] FAT-fs (loop5): Can't find a valid FAT filesystem [ 229.393793][ T8715] loop5: detected capacity change from 0 to 128 [ 229.605266][ T8725] loop3: detected capacity change from 0 to 256 [ 230.646091][ T8727] loop2: detected capacity change from 0 to 32768 [ 230.703424][ T8727] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 230.703424][ T8727] [ 230.751951][ T8727] ialloc: diAlloc returned -5! [ 230.986793][ T8771] device netdevsim0 entered promiscuous mode [ 231.795041][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2068'. [ 231.811365][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 231.824471][ T8804] loop2: detected capacity change from 0 to 512 [ 231.881473][ T8804] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.128470][ T8807] loop5: detected capacity change from 0 to 4096 [ 232.149692][ T8807] ntfs3: loop5: ino=3, Correct links count -> 2. [ 232.157402][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 232.659660][ T8829] comedi comedi0: pcl730: I/O port conflict (0x2,4) [ 232.972817][ T3599] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 233.197750][ T3599] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.226949][ T3599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.248683][ T3599] usb 6-1: Product: syz [ 233.259056][ T3599] usb 6-1: Manufacturer: syz [ 233.263733][ T3599] usb 6-1: SerialNumber: syz [ 233.312208][ T3599] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.362318][ T3599] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.365069][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2093'. [ 233.453568][ T8823] loop3: detected capacity change from 0 to 32768 [ 233.575719][ C0] usb 6-1: ath9k_htc: invalid pkt_len (ffd7) [ 233.583842][ T8823] XFS (loop3): Mounting V5 Filesystem [ 233.818095][ T4364] usb 6-1: USB disconnect, device number 9 [ 233.849825][ T8823] XFS (loop3): Ending clean mount [ 233.879615][ T8823] XFS (loop3): Quotacheck needed: Please wait. [ 233.966125][ T8823] XFS (loop3): Quotacheck: Done. [ 234.086017][ T4265] XFS (loop3): Unmounting Filesystem [ 234.124863][ T8879] delete_channel: no stack [ 234.332966][ T8884] loop4: detected capacity change from 0 to 64 [ 234.477477][ T3599] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 234.489685][ T3599] ath9k_htc: Failed to initialize the device [ 234.532192][ T4364] usb 6-1: ath9k_htc: USB layer deinitialized [ 234.941653][ T8876] loop1: detected capacity change from 0 to 32768 [ 235.045320][ T8876] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 235.085620][ T8876] (syz.1.2100,8876,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 235.117543][ T8876] (syz.1.2100,8876,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 235.126226][ T8876] (syz.1.2100,8876,0):ocfs2_mknod:298 ERROR: status = -2 [ 235.133634][ T8876] (syz.1.2100,8876,0):ocfs2_mknod:502 ERROR: status = -2 [ 235.146474][ T8876] (syz.1.2100,8876,0):ocfs2_mkdir:659 ERROR: status = -2 [ 235.254007][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 235.627571][ T4364] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 235.828793][ T4364] usb 5-1: Using ep0 maxpacket: 16 [ 235.845321][ T4364] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 235.876831][ T8931] netlink: 'syz.5.2126': attribute type 1 has an invalid length. [ 235.884864][ T4364] usb 5-1: config 0 has no interface number 0 [ 235.901518][ T4364] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 235.933844][ T4364] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 235.972779][ T4364] usb 5-1: config 0 interface 41 has no altsetting 0 [ 236.022973][ T4364] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 236.052006][ T4364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.089132][ T4364] usb 5-1: Product: syz [ 236.103612][ T4364] usb 5-1: Manufacturer: syz [ 236.133959][ T4364] usb 5-1: SerialNumber: syz [ 236.155080][ T4364] usb 5-1: config 0 descriptor?? [ 236.156734][ T8938] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.176146][ T8911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.194416][ T8939] delete_channel: no stack [ 236.200303][ T8911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.443696][ T4364] CoreChips: probe of 5-1:0.41 failed with error -71 [ 236.490092][ T4364] usb 5-1: USB disconnect, device number 7 [ 237.153066][ T8972] team0: Port device team_slave_0 removed [ 237.207984][ T8972] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 237.408208][ T26] audit: type=1326 audit(237.372:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 237.487583][ T26] audit: type=1326 audit(237.412:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 237.487624][ T26] audit: type=1326 audit(237.412:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 237.487658][ T26] audit: type=1326 audit(237.422:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz.1.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6c98ebe9 code=0x7ffc0000 [ 237.699051][ T8994] trusted_key: encrypted_key: keylen parameter is missing [ 237.747644][ T27] INFO: task syz-executor:4267 blocked for more than 143 seconds. [ 237.747687][ T27] Not tainted 6.1.148-syzkaller #0 [ 237.747699][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.747709][ T27] task:syz-executor state:D stack:21824 pid:4267 ppid:1 flags:0x00004004 [ 237.747763][ T27] Call Trace: [ 237.747771][ T27] [ 237.747785][ T27] __schedule+0x10ec/0x40b0 [ 237.747833][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 237.747864][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 237.747897][ T27] ? lock_chain_count+0x20/0x20 [ 237.747923][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 237.747951][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 237.747984][ T27] schedule+0xb9/0x180 [ 237.748005][ T27] io_schedule+0x7c/0xd0 [ 237.748039][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 237.748084][ T27] ? folio_wait_bit+0x30/0x30 [ 237.748110][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 237.748143][ T27] ? folio_mapping+0x1ba/0x4d0 [ 237.748197][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 237.748255][ T27] ? mapping_evict_folio+0x520/0x520 [ 237.748326][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 237.748385][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 237.748426][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 237.748481][ T27] evict+0x498/0x870 [ 237.748529][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 237.748559][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 237.748608][ T27] ? _raw_spin_unlock+0x24/0x40 [ 237.748645][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 237.748703][ T27] evict_inodes+0x604/0x690 [ 237.748737][ T27] ? clear_inode+0x150/0x150 [ 237.748768][ T27] ? dput+0x1c9/0x1d0 [ 237.748803][ T27] ? sync_filesystem+0x103/0x220 [ 237.748835][ T27] generic_shutdown_super+0x93/0x340 [ 237.748875][ T27] kill_block_super+0x7c/0xe0 [ 237.748907][ T27] deactivate_locked_super+0x93/0xf0 [ 237.748966][ T27] cleanup_mnt+0x463/0x4f0 [ 237.748994][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 237.749029][ T27] task_work_run+0x1ca/0x250 [ 237.749067][ T27] ? task_work_cancel+0x230/0x230 [ 237.749099][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 237.749133][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 237.749163][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 237.749195][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 237.749250][ T27] do_syscall_64+0x58/0xa0 [ 237.749275][ T27] ? clear_bhb_loop+0x60/0xb0 [ 237.749312][ T27] ? clear_bhb_loop+0x60/0xb0 [ 237.749343][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.749391][ T27] RIP: 0033:0x7f896718ff17 [ 237.749423][ T27] RSP: 002b:00007ffebc396768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 237.749447][ T27] RAX: 0000000000000000 RBX: 00007f8967211c05 RCX: 00007f896718ff17 [ 237.749464][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebc396820 [ 237.749478][ T27] RBP: 00007ffebc396820 R08: 0000000000000000 R09: 0000000000000000 [ 237.749493][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebc3978b0 [ 237.749509][ T27] R13: 00007f8967211c05 R14: 00000000000168fd R15: 00007ffebc3978f0 [ 237.749553][ T27] [ 237.749628][ T27] [ 237.749628][ T27] Showing all locks held in the system: [ 237.749649][ T27] 1 lock held by rcu_tasks_kthre/12: [ 237.749663][ T27] #0: ffffffff8cb2b770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 237.749752][ T27] 1 lock held by rcu_tasks_trace/13: [ 237.749766][ T27] #0: ffffffff8cb2bf90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 237.749837][ T27] 1 lock held by khungtaskd/27: [ 237.749849][ T27] #0: ffffffff8cb2ade0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 237.749984][ T27] 3 locks held by kworker/0:3/3599: [ 237.749997][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.750056][ T27] #1: ffffc9000dd37d00 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.750118][ T27] #2: ffffffff8cb30ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 237.750188][ T27] 2 locks held by getty/4026: [ 237.750201][ T27] #0: ffff88814d2a1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 237.750271][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 237.750340][ T27] 1 lock held by syz-executor/4267: [ 237.750353][ T27] #0: ffff88803099c0e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 237.750436][ T27] 2 locks held by kworker/0:7/4364: [ 237.750448][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.750506][ T27] #1: ffffc900045e7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.750569][ T27] 5 locks held by syz.3.2155/8986: [ 237.750582][ T27] 1 lock held by syz.1.2159/8992: [ 237.750594][ T27] 1 lock held by syz.4.2160/8994: [ 237.750607][ T27] 3 locks held by syz.2.2161/8997: [ 237.750620][ T27] 1 lock held by syz.5.2158/8998: [ 237.750646][ T27] [ 237.750652][ T27] ============================================= [ 237.750652][ T27] [ 237.750661][ T27] NMI backtrace for cpu 1 [ 237.750682][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0 [ 237.750702][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.750714][ T27] Call Trace: [ 237.750721][ T27] [ 237.750729][ T27] dump_stack_lvl+0x168/0x22e [ 237.750752][ T27] ? irq_work_queue+0xbf/0x140 [ 237.750789][ T27] ? show_regs_print_info+0x12/0x12 [ 237.750811][ T27] ? load_image+0x3b0/0x3b0 [ 237.750836][ T27] ? vprintk_emit+0x571/0x680 [ 237.750867][ T27] ? printk_sprint+0x460/0x460 [ 237.750901][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 237.750928][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 237.750949][ T27] ? _printk+0xcc/0x110 [ 237.750976][ T27] ? load_image+0x3b0/0x3b0 [ 237.751005][ T27] ? load_image+0x3b0/0x3b0 [ 237.751035][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 237.751060][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 237.751085][ T27] watchdog+0xeee/0xf30 [ 237.751119][ T27] ? watchdog+0x1ed/0xf30 [ 237.751152][ T27] kthread+0x29d/0x330 [ 237.751179][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.751202][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.751233][ T27] ret_from_fork+0x1f/0x30 [ 237.751274][ T27] [ 237.751282][ T27] Sending NMI from CPU 1 to CPUs 0: [ 237.751316][ C0] NMI backtrace for cpu 0 [ 237.751324][ C0] CPU: 0 PID: 8997 Comm: syz.2.2161 Not tainted 6.1.148-syzkaller #0 [ 237.751340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.751349][ C0] RIP: 0010:kasan_check_range+0xd/0x290 [ 237.751374][ C0] Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f [ 237.751394][ C0] RSP: 0018:ffffc90005f9f490 EFLAGS: 00000202 [ 237.751408][ C0] RAX: ffffffff81c31c01 RBX: 0000000000000000 RCX: ffffffff81bcff66 [ 237.751420][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001753340 [ 237.751431][ C0] RBP: ffffc90005f9f5f0 R08: dffffc0000000000 R09: fffffbfff1c3ea96 [ 237.751443][ C0] R10: fffffbfff1c3ea96 R11: 1ffffffff1c3ea95 R12: 1ffffd40002ea669 [ 237.751455][ C0] R13: ffffea0001753340 R14: ffffea0001753348 R15: 800000005d4cd007 [ 237.751468][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 237.751481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.751493][ C0] CR2: 0000200000000000 CR3: 000000005ba51000 CR4: 00000000003506f0 [ 237.751507][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.751516][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.751527][ C0] Call Trace: [ 237.751532][ C0] [ 237.751537][ C0] unmap_page_range+0x1156/0x2500 [ 237.751577][ C0] unmap_vmas+0x22c/0x330 [ 237.751600][ C0] ? unmap_vmas+0x189/0x330 [ 237.751623][ C0] ? unmap_page_range+0x2500/0x2500 [ 237.751647][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 237.751667][ C0] ? mas_next_entry+0xdf9/0xea0 [ 237.751694][ C0] ? mlock_page_drain_local+0x75/0x490 [ 237.751711][ C0] ? memset+0x1e/0x40 [ 237.751737][ C0] exit_mmap+0x1cc/0x8e0 [ 237.751758][ C0] ? vm_brk+0x20/0x20 [ 237.751776][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 237.751800][ C0] ? exit_mm+0x1d6/0x2c0 [ 237.751827][ C0] ? uprobe_clear_state+0x274/0x290 [ 237.751849][ C0] ? mm_update_next_owner+0x525/0x650 [ 237.751874][ C0] __mmput+0x118/0x3c0 [ 237.751889][ C0] exit_mm+0x1e6/0x2c0 [ 237.751913][ C0] ? do_exit+0x2400/0x2400 [ 237.751935][ C0] ? taskstats_exit+0x35a/0x9d0 [ 237.751960][ C0] do_exit+0x8c1/0x2400 [ 237.751986][ C0] ? put_task_struct+0x80/0x80 [ 237.752010][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 237.752033][ C0] ? lock_chain_count+0x20/0x20 [ 237.752063][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 237.752086][ C0] do_group_exit+0x217/0x2d0 [ 237.752108][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 237.752130][ C0] get_signal+0x1272/0x1350 [ 237.752164][ C0] arch_do_signal_or_restart+0xb0/0x1230 [ 237.752189][ C0] ? do_futex+0x310/0x320 [ 237.752216][ C0] ? __ia32_sys_get_robust_list+0x80/0x80 [ 237.752242][ C0] ? get_sigframe_size+0x10/0x10 [ 237.752259][ C0] ? rcu_read_lock_sched_held+0x86/0xf0 [ 237.752287][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 237.752313][ C0] exit_to_user_mode_loop+0x70/0x110 [ 237.752337][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 237.752360][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 237.752381][ C0] do_syscall_64+0x58/0xa0 [ 237.752396][ C0] ? clear_bhb_loop+0x60/0xb0 [ 237.752410][ C0] ? clear_bhb_loop+0x60/0xb0 [ 237.752426][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.752451][ C0] RIP: 0033:0x7f598858ebe9 [ 237.752463][ C0] Code: Unable to access opcode bytes at 0x7f598858ebbf. [ 237.752471][ C0] RSP: 002b:00007f59894e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 237.752486][ C0] RAX: fffffffffffffe00 RBX: 00007f59887b5fa8 RCX: 00007f598858ebe9 [ 237.752498][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f59887b5fa8 [ 237.752509][ C0] RBP: 00007f59887b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.752519][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.752528][ C0] R13: 00007f59887b6038 R14: 00007ffe84263350 R15: 00007ffe84263438 [ 237.752548][ C0] [ 237.753322][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 237.753333][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0 [ 237.753352][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.753363][ T27] Call Trace: [ 237.753370][ T27] [ 237.753377][ T27] dump_stack_lvl+0x168/0x22e [ 237.753398][ T27] ? memcpy+0x3c/0x60 [ 237.753428][ T27] ? show_regs_print_info+0x12/0x12 [ 237.753449][ T27] ? load_image+0x3b0/0x3b0 [ 237.753488][ T27] panic+0x2c9/0x710 [ 237.753516][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 237.753541][ T27] ? load_image+0x3b0/0x3b0 [ 237.753569][ T27] ? irq_work_queue+0xbf/0x140 [ 237.753601][ T27] ? nmi_trigger_cpumask_backtrace+0x2ed/0x450 [ 237.753626][ T27] watchdog+0xf2d/0xf30 [ 237.753652][ T27] ? watchdog+0x1ed/0xf30 [ 237.753678][ T27] kthread+0x29d/0x330 [ 237.753711][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.753733][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.753764][ T27] ret_from_fork+0x1f/0x30 [ 237.753808][ T27] [ 237.754080][ T27] Kernel Offset: disabled [ 238.881361][ T27] Rebooting in 86400 seconds..