last executing test programs: 2.196372748s ago: executing program 0 (id=1357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x926, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@policy_type={0xa}, @tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x1, 0x1, 0x81, 0x568, 0x2, 0x7}]}]}, 0x108}}, 0x0) 2.1022907s ago: executing program 0 (id=1361): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.690461638s ago: executing program 0 (id=1372): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r0, 0x0, 0x4, 0x0, &(0x7f0000000580)) 1.673368578s ago: executing program 2 (id=1374): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x1) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x150, &(0x7f0000000240)="$eJzs281KOlEYx/Hf+P7334tlbaKF0KI2Oan04q4uRXQSaSzJNkoQXUr3V1A3kOGgJxyFwNBDzvezen4+HHxmcfTZjABEVkEFOXKUHIb9TO4p79geCcCSDCR9DgBEU/zd9gQA7Hi7kjqSXj8e64onp/aDYf9y3I+lpvvP0l5i1HfSyoT3ixfpcHze+TfzfNb0szP7Rwfj7/+vNa1rQ5vKaUvbo37DnN/95TYERIujYjhPfBDTdcv3TkxOBrlkcirI5VCumJwOcrF+5zcW9QgA5hT74f7HQ/c/Ebr/AP6ubq9/U/N9756CgoLCFLZ/mQAsmvvQ7rjdXv+41a41vaZ3W74oV88qp6Xzqhts/u7k/g9gdXz/6dueBAAAAAAAAAAAAAAAzCuvHdsjAAAAAFiSZbxOZPsZAQAAAAAAAAAAAAAAAAAAgFXxFQAA//+KWyUw") 1.466359132s ago: executing program 0 (id=1377): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}}) 1.449203693s ago: executing program 2 (id=1378): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x6, 0x8, 0x3, 0x0, 0x67}) 1.332848885s ago: executing program 0 (id=1380): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f0000001180)="7c2e359af14889d208387f235c2717c7341e02458599cba0b6967e30f59cd90bdbad89e7836f704622dd92e05c923458a03a49a5f41cc9c8bda7baf26a518e711baf1413ebb9e6dae0c1e9750a0da2f02f9ae2363ab93fb954f3b92b40f04c3b901e5e30e0550f780f", 0x69}, {0x0}], 0x2) 1.278387906s ago: executing program 2 (id=1381): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000640)='./file0\x00', 0x2000040, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000"], 0x1, 0x1a2, &(0x7f0000000000)="$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") llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 1.209748147s ago: executing program 0 (id=1392): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000980)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c75737271756f74612c726573765f6c6576656c3d30303030303030303030303030303030303030342c6865617274626561743d6e6f6e652c696e6f646536342c000e8f7ccb752ef4677d8cb289a879154b7616c17a83cbe0bba9479aaefe32ef4267d844267676"], 0x1, 0x4703, &(0x7f0000008f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x5b2, 0x7ff, 0xfffffffc, 0x80040000000001, 0x9, 0xfffffffffffffffa, 0x2f5, 0x40408409}) 1.06079766s ago: executing program 2 (id=1383): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0809000300", 0x33fe0}], 0x1}, 0x0) 798.424005ms ago: executing program 4 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 654.187318ms ago: executing program 4 (id=1389): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x1) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x150, &(0x7f0000000240)="$eJzs281KOlEYx/Hf+P7334tlbaKF0KI2Oan04q4uRXQSaSzJNkoQXUr3V1A3kOGgJxyFwNBDzvezen4+HHxmcfTZjABEVkEFOXKUHIb9TO4p79geCcCSDCR9DgBEU/zd9gQA7Hi7kjqSXj8e64onp/aDYf9y3I+lpvvP0l5i1HfSyoT3ixfpcHze+TfzfNb0szP7Rwfj7/+vNa1rQ5vKaUvbo37DnN/95TYERIujYjhPfBDTdcv3TkxOBrlkcirI5VCumJwOcrF+5zcW9QgA5hT74f7HQ/c/Ebr/AP6ubq9/U/N9756CgoLCFLZ/mQAsmvvQ7rjdXv+41a41vaZ3W74oV88qp6Xzqhts/u7k/g9gdXz/6dueBAAAAAAAAAAAAAAAzCuvHdsjAAAAAFiSZbxOZPsZAQAAAAAAAAAAAAAAAAAAgFXxFQAA//+KWyUw") 653.586818ms ago: executing program 2 (id=1400): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SIOCAX25GETINFO(r0, 0x89ed, 0x0) 590.480989ms ago: executing program 1 (id=1390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000ffffff5800000000000000008500000036000000850000007d0000009500001d000000000ccb9b3b0e61213a9492608d6897fd"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 558.3241ms ago: executing program 2 (id=1393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xa0081c, &(0x7f00000006c0)={[{@dioread_lock}, {@nobarrier}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x503, &(0x7f0000000140)="$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") unlink(&(0x7f00000007c0)='./file1\x00') 476.707801ms ago: executing program 1 (id=1395): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000680)=ANY=[]) 474.493712ms ago: executing program 4 (id=1396): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 366.396064ms ago: executing program 3 (id=1397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x7e6f26235301ac0b}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048894}, 0x0) 360.462254ms ago: executing program 1 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 336.435684ms ago: executing program 4 (id=1399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x82, 0xffffffffffffffff, &(0x7f00000000c0)=0x41) 262.199756ms ago: executing program 1 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x1, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 207.155667ms ago: executing program 3 (id=1402): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 153.342058ms ago: executing program 3 (id=1403): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0xc0104307, &(0x7f0000000340)) 90.498039ms ago: executing program 3 (id=1404): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @win={{0x7, 0x7, 0x4, 0xe41}, 0x2dc1eb9abe2cde1d, 0x3, 0x0, 0x1, 0x0, 0x3}}}) 90.415419ms ago: executing program 4 (id=1405): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1, 0x1, 0x1, "eb271b443c64203fe9656a18b2f1c2e791397e438a13b834c90e31d340ad2a5f", 0xb5315241}) 90.365599ms ago: executing program 3 (id=1406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbb) 90.253309ms ago: executing program 1 (id=1407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}}, 0x0) 183.351µs ago: executing program 1 (id=1408): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x18, 0x0, 0x3f) 99.74µs ago: executing program 3 (id=1409): r0 = mq_open(&(0x7f00000002c0)=':M\x00\xdc\x98\x8aY\xa4\xec\xe7\xf8\xaa\xcf\xc8\xec\xc11\x18\x10\xab\xf8f\x85\x15\x8f\xben\xf6\f\xc7o\x8d\xb9\xaeG\x17\xc3u1pd\xfa\xda\x96\xb0\r\xdbu0\x13\xc2\x91\x16\x00\x00\x00\x00N\xe3\x13\xad!,\xad{l\xc5\x19\xfa\xc0\xcb\x11=\xc9\xde\x8eJ\xbb\x12\xde3\"\x9b\xb0Ce\'\xec,it\x83\xc5\xfd\xbe\x10\"n\xa1\x1b\xd7\xc1\x02m\xb7\x1c\xff\xcfM\xff\xc5%\xe8;\xab\xec\xa9\x15\xe8\x8c\xe6\x00\"\xd1D\x83\xc7[H\x1b\xd4\x00(\xa7\x90e\x8d\xc9\x88;i\x04x\x90\xa5\n\xaa\xf8p\xb7t\xc0\xc9\xbf~z\x84\xe0\\#J', 0x7101779cc4dbb6e, 0x40, 0x0) preadv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000000c0)=""/130, 0x82}], 0x2, 0x9, 0x3) 0s ago: executing program 4 (id=1410): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {0x0, @multicast}, 0x3c, {0x2, 0x0, @empty}, 'lo\x00'}) kernel console output (not intermixed with test programs): eady [ 64.124608][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.132675][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.147380][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.159785][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.167025][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.175384][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.217955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.227591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.238400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.247861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.257358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.265188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.272614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.280759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.288541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.301421][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.315078][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.323880][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.346193][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.357173][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.377433][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.397901][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.407614][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.416574][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.426023][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.435117][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.457446][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.467462][ T4198] device veth0_macvtap entered promiscuous mode [ 64.479740][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.510350][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.531515][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.555366][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.570414][ T4198] device veth1_macvtap entered promiscuous mode [ 64.585761][ T4185] device veth0_macvtap entered promiscuous mode [ 64.606357][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.617637][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.630417][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.640512][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.651940][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.667474][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.679241][ T4185] device veth1_macvtap entered promiscuous mode [ 64.691707][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.714390][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.727200][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.740845][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.750722][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.771549][ T4184] device veth0_vlan entered promiscuous mode [ 64.782693][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.804434][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.812720][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.821442][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.830273][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.839475][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.848282][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.857015][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.865439][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.880755][ T4184] device veth1_vlan entered promiscuous mode [ 64.888757][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.898116][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.907700][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.916676][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.940576][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.950546][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.959688][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.969800][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.981212][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.992611][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.025111][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.033531][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.042049][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.052094][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.060571][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.069686][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.077766][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.088227][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.100058][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.112154][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.129399][ T4183] device veth0_vlan entered promiscuous mode [ 65.141420][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.151506][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.162577][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.171542][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.180514][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.193398][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.212339][ T4193] device veth0_vlan entered promiscuous mode [ 65.237142][ T4183] device veth1_vlan entered promiscuous mode [ 65.256255][ T4184] device veth0_macvtap entered promiscuous mode [ 65.264541][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.273308][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.281690][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.290596][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.299528][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.308254][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.316453][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.325725][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.345376][ T4184] device veth1_macvtap entered promiscuous mode [ 65.373816][ T4193] device veth1_vlan entered promiscuous mode [ 65.433876][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.441897][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.454902][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.467358][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.478088][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.488637][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.500127][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.514807][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.526308][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.536452][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.547876][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.558957][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.568109][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.577535][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.586393][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.594921][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.603929][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.612568][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.621146][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.632368][ T4183] device veth0_macvtap entered promiscuous mode [ 65.657737][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.667757][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680314][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.690069][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716390][ T4183] device veth1_macvtap entered promiscuous mode [ 65.747523][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.756999][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.766212][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.774979][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.791037][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.801927][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.813852][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.825944][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.836816][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.847414][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.857467][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.867973][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.878613][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.889148][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.900399][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.914918][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 65.923429][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.936392][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.944263][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.952756][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.967696][ T4193] device veth0_macvtap entered promiscuous mode [ 65.981382][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.984269][ T4248] Bluetooth: hci4: command 0x040f tx timeout [ 65.996060][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.008718][ T4248] Bluetooth: hci2: command 0x040f tx timeout [ 66.009605][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.019336][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 66.025803][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.032537][ T4248] Bluetooth: hci3: command 0x040f tx timeout [ 66.041389][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.058980][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.077805][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.104999][ T4193] device veth1_macvtap entered promiscuous mode [ 66.114016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.122071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.132813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.151692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.163047][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.172824][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.181658][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.190573][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.208620][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.216828][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.229279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.265802][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.283952][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.318458][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.329472][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.345378][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.359993][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.370251][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.381005][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.395331][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.417617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.426745][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.437854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.439275][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.492828][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.506729][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.517052][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.527807][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.537837][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.550020][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.562976][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.574067][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.585935][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.613569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.621336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.658604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.672107][ T4291] loop1: detected capacity change from 0 to 32768 [ 66.705867][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.723495][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.732227][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.750569][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.784957][ T4291] ======================================================= [ 66.784957][ T4291] WARNING: The mand mount option has been deprecated and [ 66.784957][ T4291] and is ignored by this kernel. Remove the mand [ 66.784957][ T4291] option from the mount to silence this warning. [ 66.784957][ T4291] ======================================================= [ 66.808400][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.881327][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.899103][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.904834][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.923857][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.940718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.956006][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.964566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.001398][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.049236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.050717][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.082061][ T4291] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 67.088623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.155212][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.169834][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.188603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.361019][ T4198] ocfs2: Unmounting device (7,1) on (node local) [ 67.610890][ T4327] capability: warning: `syz.2.15' uses 32-bit capabilities (legacy support in use) [ 67.662667][ T4329] loop3: detected capacity change from 0 to 256 [ 67.739253][ T4336] loop2: detected capacity change from 0 to 256 [ 67.759237][ T4335] loop0: detected capacity change from 0 to 1024 [ 67.781969][ T4329] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 67.840178][ T4335] EXT4-fs (loop0): Ignoring removed nobh option [ 67.845942][ T4336] FAT-fs (loop2): Directory bread(block 64) failed [ 67.875208][ T4335] EXT4-fs (loop0): inline encryption not supported [ 67.885411][ T4336] FAT-fs (loop2): Directory bread(block 65) failed [ 67.893020][ T4336] FAT-fs (loop2): Directory bread(block 66) failed [ 67.911570][ T4336] FAT-fs (loop2): Directory bread(block 67) failed [ 67.929283][ T4335] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.933428][ T4336] FAT-fs (loop2): Directory bread(block 68) failed [ 67.983765][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 67.989083][ T4336] FAT-fs (loop2): Directory bread(block 69) failed [ 68.024903][ T4335] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000002,init_itable=0x0000000000000001,data_err=ignore,lazytime,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none. [ 68.054911][ T4336] FAT-fs (loop2): Directory bread(block 70) failed [ 68.068506][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 68.076682][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 68.086957][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 68.093113][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 68.102031][ T4336] FAT-fs (loop2): Directory bread(block 71) failed [ 68.109198][ T4351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.24'. [ 68.118329][ T4351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.24'. [ 68.158251][ T4336] FAT-fs (loop2): Directory bread(block 72) failed [ 68.188135][ T4336] FAT-fs (loop2): Directory bread(block 73) failed [ 68.327770][ T4362] loop4: detected capacity change from 0 to 1024 [ 68.489179][ T4368] netlink: 10 bytes leftover after parsing attributes in process `syz.1.33'. [ 68.727971][ T4380] loop2: detected capacity change from 0 to 2364 [ 68.748458][ T4386] x_tables: unsorted entry at hook 3 [ 69.109300][ T4403] xt_l2tp: v2 doesn't support IP mode [ 69.156611][ T4396] loop4: detected capacity change from 0 to 4096 [ 69.554619][ T4422] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 69.841337][ T4440] Cannot find add_set index 0 as target [ 70.203390][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.265522][ T4456] loop0: detected capacity change from 0 to 4096 [ 70.348822][ T4467] usb usb8: usbfs: process 4467 (syz.4.81) did not claim interface 0 before use [ 70.456430][ T4473] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.463583][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 70.478393][ T4472] loop4: detected capacity change from 0 to 1024 [ 70.524809][ T4475] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 70.565298][ T4456] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 70.624618][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.634054][ T4456] Remounting filesystem read-only [ 70.707271][ T13] usb 4-1: config 1 has an invalid interface number: 160 but max is 0 [ 70.721185][ T13] usb 4-1: config 1 has no interface number 0 [ 70.740885][ T13] usb 4-1: config 1 interface 160 has no altsetting 0 [ 70.767842][ T4183] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 70.856418][ T4483] loop2: detected capacity change from 0 to 256 [ 70.909583][ T4485] loop4: detected capacity change from 0 to 256 [ 70.931451][ T13] usb 4-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 70.952621][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.987731][ T4483] FAT-fs (loop2): Directory bread(block 64) failed [ 71.007918][ T13] usb 4-1: Product: syz [ 71.012132][ T13] usb 4-1: Manufacturer: syz [ 71.028742][ T4483] FAT-fs (loop2): Directory bread(block 65) failed [ 71.039418][ T4489] loop0: detected capacity change from 0 to 256 [ 71.048729][ T13] usb 4-1: SerialNumber: syz [ 71.073863][ T4483] FAT-fs (loop2): Directory bread(block 66) failed [ 71.080529][ T4483] FAT-fs (loop2): Directory bread(block 67) failed [ 71.117962][ T4483] FAT-fs (loop2): Directory bread(block 68) failed [ 71.125393][ T4483] FAT-fs (loop2): Directory bread(block 69) failed [ 71.148371][ T4483] FAT-fs (loop2): Directory bread(block 70) failed [ 71.176573][ T4489] FAT-fs (loop0): Directory bread(block 64) failed [ 71.195319][ T4483] FAT-fs (loop2): Directory bread(block 71) failed [ 71.209663][ T4489] FAT-fs (loop0): Directory bread(block 65) failed [ 71.222503][ T4483] FAT-fs (loop2): Directory bread(block 72) failed [ 71.240966][ T4489] FAT-fs (loop0): Directory bread(block 66) failed [ 71.253068][ T4483] FAT-fs (loop2): Directory bread(block 73) failed [ 71.269273][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.276252][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285418][ T4489] FAT-fs (loop0): Directory bread(block 67) failed [ 71.292050][ T4489] FAT-fs (loop0): Directory bread(block 68) failed [ 71.333365][ T4489] FAT-fs (loop0): Directory bread(block 69) failed [ 71.340004][ T4489] FAT-fs (loop0): Directory bread(block 70) failed [ 71.388846][ T4497] loop1: detected capacity change from 0 to 512 [ 71.391012][ T4489] FAT-fs (loop0): Directory bread(block 71) failed [ 71.421224][ T4489] FAT-fs (loop0): Directory bread(block 72) failed [ 71.424090][ T13] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 71.428395][ T4489] FAT-fs (loop0): Directory bread(block 73) failed [ 71.456930][ T13] visor 4-1:1.160: Handspring Visor / Palm OS converter detected [ 71.482358][ T4497] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.493505][ T4497] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 71.502649][ T4497] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 71.536644][ T13] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 71.561983][ T4497] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.95: attempt to clear invalid blocks 2 len 1 [ 71.601014][ T4499] loop4: detected capacity change from 0 to 4096 [ 71.610369][ T13] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 71.615516][ T4497] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.95: invalid indirect mapped block 1819239214 (level 0) [ 71.632956][ T4499] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 71.654095][ T4497] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.95: invalid indirect mapped block 1819239214 (level 1) [ 71.676295][ T4497] EXT4-fs (loop1): 1 truncate cleaned up [ 71.683952][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 71.707825][ T13] usb 4-1: USB disconnect, device number 2 [ 71.749678][ T13] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 71.767500][ T4497] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.95: 'file1' linked to parent dir [ 71.797877][ T13] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 71.815126][ T13] visor 4-1:1.160: device disconnected [ 71.910286][ T7] Bluetooth: hci4: command 0x0407 tx timeout [ 71.971949][ T4499] ntfs3: loop4: failed to convert "c46c" to cp861 [ 72.014776][ T4506] loop0: detected capacity change from 0 to 8 [ 72.022713][ T4505] loop1: detected capacity change from 0 to 512 [ 72.087547][ T4506] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 72.150785][ T4505] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 72.175253][ T4505] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.220554][ T4307] udevd[4307]: incorrect cramfs checksum on /dev/loop0 [ 72.620094][ T150] block nbd3: Attempted send on invalid socket [ 72.627394][ T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.641313][ T4531] vxfs: unable to read disk superblock at 1 [ 72.653987][ T4533] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 72.662243][ T1282] block nbd3: Attempted send on invalid socket [ 72.669272][ T1282] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.695458][ T4533] netlink: 'syz.0.112': attribute type 2 has an invalid length. [ 72.703604][ T4531] vxfs: unable to read disk superblock at 8 [ 72.743310][ T4531] vxfs: can't find superblock. [ 73.051365][ T4560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.124'. [ 73.333371][ T4582] loop4: detected capacity change from 0 to 16 [ 73.415165][ T4582] cramfs: Error -3 while decompressing! [ 73.430712][ T4582] cramfs: ffffffff961ef068(27)->ffff88805ea75000(4096) [ 73.467425][ T4582] cramfs: Error -3 while decompressing! [ 73.495758][ T4582] cramfs: ffffffff961ef083(16)->ffff88805eaa6000(4096) [ 73.502778][ T4582] cramfs: Error -3 while decompressing! [ 73.527910][ T4582] cramfs: ffffffff961ef068(27)->ffff88805ea75000(4096) [ 73.564400][ T26] audit: type=1800 audit(1757619747.257:2): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.135" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 73.928644][ T4611] loop4: detected capacity change from 0 to 16 [ 73.942343][ T4610] x_tables: duplicate entry at hook 3 [ 73.958629][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 73.985154][ T4611] erofs: (device loop4): mounted with root inode @ nid 36. [ 74.284699][ T4629] autofs4:pid:4629:autofs_fill_super: called with bogus options [ 74.305584][ T4626] loop3: detected capacity change from 0 to 1024 [ 74.398511][ T4626] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 74.398511][ T4626] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 74.398511][ T4626] [ 74.406873][ T4634] loop0: detected capacity change from 0 to 256 [ 74.430118][ T4626] EXT4-fs (loop3): Ignoring removed bh option [ 74.482731][ T4626] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,journal_ioprio=0x0000000000000000,barrier,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 74.590078][ T4644] tmpfs: Bad value for 'mpol' [ 74.613544][ T4634] FAT-fs (loop0): Directory bread(block 64) failed [ 74.621280][ T4634] FAT-fs (loop0): Directory bread(block 65) failed [ 74.637847][ T4634] FAT-fs (loop0): Directory bread(block 66) failed [ 74.653909][ T4634] FAT-fs (loop0): Directory bread(block 67) failed [ 74.660557][ T4634] FAT-fs (loop0): Directory bread(block 68) failed [ 74.680734][ T4634] FAT-fs (loop0): Directory bread(block 69) failed [ 74.706274][ T4650] capability: warning: `syz.3.166' uses deprecated v2 capabilities in a way that may be insecure [ 74.738751][ T4634] FAT-fs (loop0): Directory bread(block 70) failed [ 74.764869][ T4634] FAT-fs (loop0): Directory bread(block 71) failed [ 74.819959][ T4634] FAT-fs (loop0): Directory bread(block 72) failed [ 74.841059][ T4654] loop2: detected capacity change from 0 to 1024 [ 74.860760][ T4634] FAT-fs (loop0): Directory bread(block 73) failed [ 74.936423][ T4660] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 74.964942][ T4654] hfsplus: catalog name length corrupted [ 75.073088][ T4664] loop1: detected capacity change from 0 to 64 [ 75.091498][ T4668] netlink: 'syz.4.175': attribute type 4 has an invalid length. [ 75.100888][ T4668] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.175'. [ 75.363291][ T4199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.441124][ T4683] loop1: detected capacity change from 0 to 64 [ 75.573108][ T4691] xt_TCPMSS: Only works on TCP SYN packets [ 75.658291][ T4199] usb 4-1: Using ep0 maxpacket: 16 [ 75.833647][ T4199] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 75.853479][ T4199] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.904453][ T4199] usb 4-1: config 0 has no interface number 0 [ 76.073530][ T4672] loop2: detected capacity change from 0 to 32768 [ 76.107185][ T4199] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.122695][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.133792][ T4199] usb 4-1: Product: syz [ 76.137985][ T4199] usb 4-1: Manufacturer: syz [ 76.142788][ T4199] usb 4-1: SerialNumber: syz [ 76.156367][ T4199] usb 4-1: config 0 descriptor?? [ 76.235672][ T4199] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 76.242074][ T4199] usb 4-1: No valid video chain found. [ 76.260316][ T4672] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 76.325099][ T4729] dlm: dev_write: no op 0 0 [ 76.369973][ T4735] loop4: detected capacity change from 0 to 64 [ 76.375838][ T4672] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 76.456404][ T4199] usb 4-1: USB disconnect, device number 3 [ 76.463567][ T4672] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.503420][ T4672] OCFS2: Returning error to the calling process. [ 76.505358][ T4741] loop0: detected capacity change from 0 to 164 [ 76.521346][ T4672] (syz.2.176,4672,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 76.553033][ T4672] (syz.2.176,4672,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 76.575085][ T4672] (syz.2.176,4672,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 76.599261][ T4672] (syz.2.176,4672,0):ocfs2_mknod:306 ERROR: status = -5 [ 76.623433][ T4672] (syz.2.176,4672,0):ocfs2_mknod:502 ERROR: status = -5 [ 76.630405][ T4672] (syz.2.176,4672,0):ocfs2_mkdir:659 ERROR: status = -5 [ 76.634130][ T4741] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 76.736116][ T4747] loop4: detected capacity change from 0 to 64 [ 76.781957][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 76.885975][ T4747] hfs: unable to load iocharset "Sp—" [ 76.891715][ T4747] hfs: unable to parse mount options [ 77.170324][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 77.180156][ T4762] block device autoloading is deprecated and will be removed. [ 77.270807][ T4771] loop0: detected capacity change from 0 to 164 [ 77.477673][ T4788] netlink: 'syz.2.234': attribute type 21 has an invalid length. [ 77.711775][ T4806] loop0: detected capacity change from 0 to 256 [ 77.784138][ T4806] exfat: Deprecated parameter 'utf8' [ 77.789478][ T4806] exfat: Deprecated parameter 'utf8' [ 77.809849][ T4806] exfat: Deprecated parameter 'utf8' [ 77.810632][ T4814] netlink: 156 bytes leftover after parsing attributes in process `syz.2.247'. [ 77.870507][ T4806] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 78.112352][ T4824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.252'. [ 78.123435][ T4824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 78.150859][ T4828] loop1: detected capacity change from 0 to 512 [ 78.266407][ T4828] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 78.345611][ T4828] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.375758][ T4800] loop3: detected capacity change from 0 to 32768 [ 78.451823][ T4800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.240 (4800) [ 78.606647][ T4800] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.667750][ T4800] BTRFS info (device loop3): using free space tree [ 78.702881][ T4853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.263'. [ 78.715921][ T4800] BTRFS info (device loop3): has skinny extents [ 78.732314][ T4853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.263'. [ 79.057837][ T4800] BTRFS info (device loop3): enabling ssd optimizations [ 79.218547][ T4895] loop2: detected capacity change from 0 to 256 [ 79.336837][ T4895] exFAT-fs (loop2): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d) [ 79.399961][ T4845] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 79.452259][ T4902] loop1: detected capacity change from 0 to 1764 [ 79.562265][ T4912] delete_channel: no stack [ 79.722826][ T4902] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 79.731743][ T4920] device sit0 entered promiscuous mode [ 79.749607][ T4920] netlink: 'syz.4.279': attribute type 1 has an invalid length. [ 79.804235][ T4920] netlink: 1 bytes leftover after parsing attributes in process `syz.4.279'. [ 80.062383][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 80.074388][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.329765][ T4944] netlink: 'syz.2.289': attribute type 4 has an invalid length. [ 80.343363][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 80.359668][ T4944] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.289'. [ 80.495196][ T23] usb 4-1: config 0 has no interfaces? [ 80.505499][ T4928] loop4: detected capacity change from 0 to 32768 [ 80.528981][ T4928] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.282 (4928) [ 80.598958][ T4928] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 80.620452][ T4953] loop0: detected capacity change from 0 to 2048 [ 80.638318][ T4928] BTRFS info (device loop4): using free space tree [ 80.658467][ T4928] BTRFS info (device loop4): has skinny extents [ 80.693645][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.707495][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.725060][ T23] usb 4-1: Product: syz [ 80.733791][ T23] usb 4-1: Manufacturer: syz [ 80.743997][ T23] usb 4-1: SerialNumber: syz [ 80.756577][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 80.760514][ T4953] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.809873][ T4953] NILFS (loop0): mounting unchecked fs [ 80.824988][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop0 [ 80.830127][ T4953] NILFS (loop0): recovery required for readonly filesystem [ 80.839842][ T4953] NILFS (loop0): write access will be enabled during recovery [ 80.851994][ T4928] BTRFS info (device loop4): enabling ssd optimizations [ 80.894913][ T4953] NILFS (loop0): recovery complete [ 80.908985][ T4928] BTRFS info (device loop4): resizing devid 73709551615 [ 80.917108][ T4928] BTRFS info (device loop4): resizer unable to find device 73709551615 [ 80.941076][ T4397] udevd[4397]: incorrect nilfs2 checksum on /dev/loop0 [ 81.024237][ T23] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 81.192088][ T4987] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.302'. [ 81.335837][ T4995] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 81.336402][ T4997] usb 4-1: USB disconnect, device number 4 [ 81.437634][ T5003] autofs4:pid:5003:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 81.515117][ T5007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.309'. [ 81.517408][ T1109] cfg80211: failed to load regulatory.db [ 81.533929][ T5007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.309'. [ 81.546329][ T5005] loop2: detected capacity change from 0 to 1024 [ 81.654163][ T5005] EXT4-fs (loop2): Ignoring removed orlov option [ 81.743785][ T5005] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 81.842791][ T5005] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 81.991920][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 82.221319][ T5027] loop0: detected capacity change from 0 to 4096 [ 82.286845][ T5027] ntfs: (device loop0): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 82.388440][ T5027] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 82.448693][ T5027] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 82.483296][ T5047] device netdevsim0 entered promiscuous mode [ 82.644108][ T26] audit: type=1400 audit(1757619756.327:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=5055 comm="syz.1.331" [ 82.792612][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 82.826300][ T5065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.963325][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.971717][ T5073] loop1: detected capacity change from 0 to 64 [ 83.253437][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 83.327410][ T5067] loop3: detected capacity change from 0 to 32768 [ 83.357508][ T5067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.336 (5067) [ 83.387996][ T5067] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 83.404816][ T5067] BTRFS info (device loop3): max_inline at 4096 [ 83.408324][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.418632][ T5067] BTRFS info (device loop3): using free space tree [ 83.476939][ T5067] BTRFS info (device loop3): has skinny extents [ 83.550053][ T5091] netlink: 3 bytes leftover after parsing attributes in process `syz.2.346'. [ 83.579981][ T5071] loop0: detected capacity change from 0 to 32768 [ 83.587732][ T5091] 0ªX¹¦À: renamed from caif0 [ 83.605546][ T5091] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.623353][ T23] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 83.632934][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.645030][ T23] usb 5-1: Product: syz [ 83.649207][ T23] usb 5-1: Manufacturer: syz [ 83.654080][ T23] usb 5-1: SerialNumber: syz [ 83.662339][ T23] usb 5-1: config 0 descriptor?? [ 83.674719][ T5071] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 83.714808][ T23] usb 5-1: bad CDC descriptors [ 83.720982][ T23] usb 5-1: unsupported MDLM descriptors [ 83.746353][ T5071] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.870997][ T5067] BTRFS info (device loop3): enabling ssd optimizations [ 83.936593][ T23] usb 5-1: USB disconnect, device number 2 [ 83.961825][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 84.345890][ T5134] netlink: 'syz.0.352': attribute type 21 has an invalid length. [ 84.359317][ T5134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'. [ 84.698636][ T5142] loop2: detected capacity change from 0 to 8192 [ 84.796687][ T5142] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 84.813966][ T5142] REISERFS (device loop2): using ordered data mode [ 84.826831][ T5142] reiserfs: using flush barriers [ 84.863486][ T5142] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.918899][ T5142] REISERFS (device loop2): checking transaction log (loop2) [ 84.941055][ T5142] REISERFS (device loop2): Using r5 hash to sort names [ 85.083859][ T5177] QAT: failed to copy from user. [ 85.238226][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.305970][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.313152][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.315644][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 85.353276][ T5126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.365758][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 85.427902][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 85.701607][ T5201] loop1: detected capacity change from 0 to 8192 [ 85.733462][ T5126] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 85.751877][ T5126] usb 4-1: config 0 has no interface number 0 [ 85.775519][ T5126] usb 4-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 85.963523][ T5126] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 86.003354][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.038973][ T5225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.050100][ T5126] usb 4-1: Product: syz [ 86.064989][ T5126] usb 4-1: Manufacturer: syz [ 86.069720][ T5126] usb 4-1: SerialNumber: syz [ 86.166999][ T5126] usb 4-1: config 0 descriptor?? [ 86.225125][ T5126] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 86.231552][ T5126] usb 4-1: No valid video chain found. [ 86.450916][ T5126] usb 4-1: USB disconnect, device number 5 [ 86.490614][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 86.524744][ T5261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 86.571526][ T5261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 86.709496][ T5272] netlink: 'syz.4.426': attribute type 28 has an invalid length. [ 86.711481][ T5274] loop1: detected capacity change from 0 to 16 [ 86.748536][ T5274] erofs: (device loop1): mounted with root inode @ nid 36. [ 86.755881][ T5272] netlink: 'syz.4.426': attribute type 3 has an invalid length. [ 86.785717][ T5272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.816716][ T5274] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 87.233291][ T5307] program syz.4.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.289284][ T5307] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 87.413391][ T5126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 87.663428][ T5126] usb 4-1: Using ep0 maxpacket: 16 [ 87.737809][ T5329] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.452'. [ 87.783496][ T5126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.783522][ T5126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.871356][ T5304] loop2: detected capacity change from 0 to 32768 [ 87.943744][ T5126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.963497][ T5304] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 87.973137][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.981741][ T5126] usb 4-1: Product: syz [ 88.007765][ T5126] usb 4-1: Manufacturer: syz [ 88.013719][ T5126] usb 4-1: SerialNumber: syz [ 88.032232][ T5304] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 88.034675][ T5336] loop0: detected capacity change from 0 to 4096 [ 88.086855][ T5304] ocfs2: Unmounting device (7,2) on (node local) [ 88.150704][ T5336] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 88.290382][ T5336] ntfs3: loop0: failed to convert "c46c" to cp861 [ 88.303551][ T4199] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.374167][ T5345] loop2: detected capacity change from 0 to 16 [ 88.454459][ T5345] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 88.468966][ T5345] erofs: DAX unsupported by block device. Turning off DAX. [ 88.479684][ T5345] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.513500][ T5126] usb 4-1: cannot find UAC_HEADER [ 88.616484][ T5126] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 88.641653][ T5126] usb 4-1: USB disconnect, device number 6 [ 88.714460][ T5341] loop4: detected capacity change from 0 to 32768 [ 88.728240][ T4199] usb 2-1: config 0 has an invalid interface number: 17 but max is 1 [ 88.750167][ T5341] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.458 (5341) [ 88.763892][ T4199] usb 2-1: config 0 has an invalid interface number: 135 but max is 1 [ 88.792505][ T4199] usb 2-1: config 0 has no interface number 0 [ 88.801081][ T4199] usb 2-1: config 0 has no interface number 1 [ 88.843338][ T4199] usb 2-1: config 0 interface 17 has no altsetting 0 [ 88.864873][ T4199] usb 2-1: config 0 interface 135 has no altsetting 0 [ 88.872147][ T5360] loop2: detected capacity change from 0 to 128 [ 88.888246][ T5341] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 88.900114][ T5341] BTRFS info (device loop4): enabling ssd optimizations [ 88.907565][ T5341] BTRFS info (device loop4): not using ssd optimizations [ 88.918321][ T5360] FAT-fs (loop2): bogus number of reserved sectors [ 88.928391][ T5341] BTRFS info (device loop4): turning off barriers [ 88.934539][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.951417][ T5341] BTRFS info (device loop4): using free space tree [ 88.964532][ T5341] BTRFS info (device loop4): has skinny extents [ 88.964542][ T5360] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 88.989354][ T5360] FAT-fs (loop2): Can't find a valid FAT filesystem [ 89.054131][ T4199] usb 2-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=1b.39 [ 89.079923][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.151326][ T4199] usb 2-1: Product: syz [ 89.183685][ T4199] usb 2-1: Manufacturer: syz [ 89.221954][ T4199] usb 2-1: SerialNumber: syz [ 89.248256][ T5387] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 89.258745][ T5387] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.269350][ T4199] usb 2-1: config 0 descriptor?? [ 89.280618][ T5389] xt_l2tp: unknown flags: 3b [ 89.422617][ T4397] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop4 scanned by udevd (4397) [ 89.615666][ T4199] usb 2-1: USB disconnect, device number 2 [ 89.770506][ T5423] xt_TCPMSS: Only works on TCP SYN packets [ 90.097609][ T5442] netlink: 'syz.0.492': attribute type 21 has an invalid length. [ 90.146113][ T5442] netlink: 156 bytes leftover after parsing attributes in process `syz.0.492'. [ 90.173729][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 90.288115][ T5456] loop0: detected capacity change from 0 to 16 [ 90.362971][ T5456] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.428689][ T5456] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 90.502440][ T5468] vivid-001: ================= START STATUS ================= [ 90.598999][ T5468] vivid-001: Enable Output Cropping: true [ 90.659243][ T5468] vivid-001: Enable Output Composing: true [ 90.678251][ T5468] vivid-001: Enable Output Scaler: true [ 90.688360][ T5468] vivid-001: Tx RGB Quantization Range: Automatic [ 90.723898][ T5468] vivid-001: Transmit Mode: HDMI [ 90.758871][ T5468] vivid-001: Display Present: true inactive [ 90.779073][ T5468] vivid-001: Hotplug Present: 0x00000001 [ 90.792501][ T5484] tmpfs: Bad value for 'mpol' [ 90.813393][ T5468] vivid-001: RxSense Present: 0x00000001 [ 90.819337][ T5468] vivid-001: EDID Present: 0x00000001 [ 90.867444][ T5468] vivid-001: ================== END STATUS ================== [ 90.896506][ T5490] loop0: detected capacity change from 0 to 1024 [ 90.906174][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 90.950155][ T5490] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.088786][ T5490] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 91.117438][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.227558][ T5490] EXT4-fs error (device loop0): ext4_xattr_set_entry:1624: inode #16: comm syz.0.516: corrupted xattr entries [ 91.277556][ T5490] EXT4-fs (loop0): Remounting filesystem read-only [ 91.319696][ T5515] loop2: detected capacity change from 0 to 256 [ 91.337216][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 91.377569][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 91.759336][ T4199] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.883280][ T5126] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.041130][ T5561] loop3: detected capacity change from 0 to 1024 [ 92.047766][ T4199] usb 5-1: Using ep0 maxpacket: 32 [ 92.128123][ T5561] hfsplus: keylen 65060 too large [ 92.139445][ T5561] hfsplus: xattr searching failed [ 92.203486][ T5412] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.253626][ T5126] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 92.271877][ T5126] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 92.298974][ T5126] usb 3-1: config 0 has no interface number 1 [ 92.304763][ T5571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.555'. [ 92.310678][ T5126] usb 3-1: config 0 has no interface number 2 [ 92.314779][ T5571] openvswitch: netlink: Key 0 has unexpected len 3060 expected 0 [ 92.328995][ T5126] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 92.339390][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.359725][ T5126] usb 3-1: config 0 descriptor?? [ 92.373881][ T4199] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 92.383375][ T4199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.391400][ T4199] usb 5-1: Product: syz [ 92.404429][ T4199] usb 5-1: Manufacturer: syz [ 92.409115][ T4199] usb 5-1: SerialNumber: syz [ 92.424976][ T4199] usb 5-1: config 0 descriptor?? [ 92.453534][ T4999] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.623563][ T5126] qcserial 3-1:0.3: Qualcomm USB modem converter detected [ 92.653659][ T5412] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 92.667215][ T5412] usb 1-1: config 0 has no interface number 0 [ 92.693467][ T4999] usb 2-1: Using ep0 maxpacket: 8 [ 92.693561][ T5412] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 92.711181][ T5412] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 92.734969][ T5412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.751679][ T5412] usb 1-1: config 0 descriptor?? [ 92.760225][ T4199] usb 5-1: USB disconnect, device number 3 [ 92.806152][ T5412] ttusbir 1-1:0.83: cannot find expected altsetting [ 92.813543][ T4999] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 92.831874][ T4999] usb 2-1: config 0 has no interface number 0 [ 92.844859][ T5412] usb 3-1: USB disconnect, device number 2 [ 92.851774][ T5412] qcserial 3-1:0.3: device disconnected [ 92.987224][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 93.003566][ T4999] usb 2-1: New USB device found, idVendor=093a, idProduct=260f, bcdDevice=a4.45 [ 93.022543][ T4999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.033892][ T4999] usb 2-1: Product: syz [ 93.038163][ T4999] usb 2-1: Manufacturer: syz [ 93.042763][ T4999] usb 2-1: SerialNumber: syz [ 93.057530][ T5413] usb 1-1: USB disconnect, device number 2 [ 93.073721][ T4999] usb 2-1: config 0 descriptor?? [ 93.125809][ T4999] gspca_main: pac7311-2.14.0 probing 093a:260f [ 93.335331][ T5565] loop1: detected capacity change from 0 to 256 [ 93.419742][ T5565] FAT-fs (loop1): Directory bread(block 64) failed [ 93.445352][ T5565] FAT-fs (loop1): Directory bread(block 65) failed [ 93.483383][ T5624] netlink: 'syz.2.581': attribute type 7 has an invalid length. [ 93.491064][ T5624] netlink: 148 bytes leftover after parsing attributes in process `syz.2.581'. [ 93.501055][ T5565] FAT-fs (loop1): Directory bread(block 66) failed [ 93.514463][ T5565] FAT-fs (loop1): Directory bread(block 67) failed [ 93.524378][ T5565] FAT-fs (loop1): Directory bread(block 68) failed [ 93.530932][ T5565] FAT-fs (loop1): Directory bread(block 69) failed [ 93.537941][ T5626] netlink: 'syz.3.582': attribute type 24 has an invalid length. [ 93.565700][ T5565] FAT-fs (loop1): Directory bread(block 70) failed [ 93.572684][ T5565] FAT-fs (loop1): Directory bread(block 71) failed [ 93.649691][ T5565] FAT-fs (loop1): Directory bread(block 72) failed [ 93.657999][ T4999] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 93.670593][ T4999] pac7311: probe of 2-1:0.46 failed with error -110 [ 93.711057][ T5565] FAT-fs (loop1): Directory bread(block 73) failed [ 93.778441][ T5638] netlink: 48 bytes leftover after parsing attributes in process `syz.0.588'. [ 93.801699][ T5639] device geneve2 entered promiscuous mode [ 93.881763][ T5126] usb 2-1: USB disconnect, device number 3 [ 94.041965][ T5654] loop2: detected capacity change from 0 to 512 [ 94.092874][ T5654] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 94.134932][ T5654] EXT4-fs (loop2): 1 truncate cleaned up [ 94.153315][ T5654] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 94.210017][ T5665] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 94.230704][ T5654] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.593: Logical block already allocated [ 94.307131][ T5673] loop0: detected capacity change from 0 to 8 [ 94.314574][ T5654] EXT4-fs (loop2): Remounting filesystem read-only [ 94.346515][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 94.356521][ T5673] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 94.385062][ T5665] CIFS mount error: No usable UNC path provided in device string! [ 94.385062][ T5665] [ 94.403731][ T5665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.602541][ T5684] misc userio: No port type given on /dev/userio [ 94.812482][ T26] audit: type=1400 audit(1757619769.505:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=5696 comm="syz.3.614" [ 94.862501][ T5700] loop0: detected capacity change from 0 to 256 [ 94.883957][ T5703] device batadv0 entered promiscuous mode [ 94.885128][ T5707] loop3: detected capacity change from 0 to 128 [ 94.904394][ T5700] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 94.988738][ T5707] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 95.001295][ T5700] attempt to access beyond end of device [ 95.001295][ T5700] loop0: rw=524288, want=408, limit=256 [ 95.041028][ T5707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.050811][ T5700] attempt to access beyond end of device [ 95.050811][ T5700] loop0: rw=524288, want=664, limit=256 [ 95.109885][ T5700] attempt to access beyond end of device [ 95.109885][ T5700] loop0: rw=0, want=288, limit=256 [ 95.170037][ T26] audit: type=1800 audit(1757619769.865:5): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 95.593371][ T4999] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.620380][ T5745] loop0: detected capacity change from 0 to 128 [ 95.639849][ T5746] loop3: detected capacity change from 0 to 512 [ 95.681085][ T5750] netlink: 'syz.4.640': attribute type 30 has an invalid length. [ 95.690631][ T5750] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 95.721529][ T5745] FAT-fs (loop0): Directory bread(block 32) failed [ 95.728840][ T5750] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 95.741427][ T5750] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 95.756413][ T5745] FAT-fs (loop0): Directory bread(block 33) failed [ 95.764151][ T5745] FAT-fs (loop0): Directory bread(block 34) failed [ 95.769149][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 95.770695][ T5745] FAT-fs (loop0): Directory bread(block 35) failed [ 95.770779][ T5745] FAT-fs (loop0): Directory bread(block 36) failed [ 95.814212][ T5745] FAT-fs (loop0): Directory bread(block 37) failed [ 95.823635][ T5746] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.839699][ T5745] FAT-fs (loop0): Directory bread(block 38) failed [ 95.853263][ T4999] usb 2-1: Using ep0 maxpacket: 32 [ 95.866642][ T5745] FAT-fs (loop0): Directory bread(block 39) failed [ 95.878882][ T5745] FAT-fs (loop0): Directory bread(block 40) failed [ 95.885627][ T5745] FAT-fs (loop0): Directory bread(block 41) failed [ 95.902641][ T5762] loop4: detected capacity change from 0 to 512 [ 95.956730][ T5761] loop2: detected capacity change from 0 to 4096 [ 96.010985][ T5761] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 96.020353][ T4999] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.045229][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.065875][ T5762] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.110212][ T4999] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 96.127161][ T5761] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 96.138554][ T4999] usb 2-1: config 7 has no interface number 0 [ 96.171872][ T4999] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.233379][ T5762] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.644: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 96.256810][ T4999] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.292948][ T26] audit: type=1800 audit(1757619770.985:6): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="bus" dev="loop0" ino=1048601 res=0 errno=0 [ 96.320916][ T4999] usb 2-1: config 7 interface 187 has no altsetting 0 [ 96.328498][ T5762] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.644: directory missing '.' [ 96.493545][ T4999] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 96.526486][ T4999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.556867][ T4999] usb 2-1: Product: syz [ 96.561077][ T4999] usb 2-1: Manufacturer: syz [ 96.573791][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 96.582670][ T4999] usb 2-1: SerialNumber: syz [ 96.823791][ T5783] loop4: detected capacity change from 0 to 4096 [ 96.906078][ T4999] usb 2-1: Unknown endpoint type found, address 0x07 [ 96.922057][ T5798] device bridge1 entered promiscuous mode [ 96.929611][ T5783] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.939567][ T4999] usb 2-1: Not enough endpoints found in device, aborting! [ 96.976372][ T5783] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 97.039687][ T5800] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.061318][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 97.096343][ T5802] device bridge_slave_1 left promiscuous mode [ 97.099999][ T5783] attempt to access beyond end of device [ 97.099999][ T5783] loop4: rw=0, want=8246337208512, limit=4096 [ 97.147382][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.149483][ T5783] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 97.164117][ T5126] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 97.172258][ T4996] usb 2-1: USB disconnect, device number 4 [ 97.230124][ T5802] device bridge_slave_0 left promiscuous mode [ 97.249824][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.432734][ T5813] loop3: detected capacity change from 0 to 2048 [ 97.481382][ T5817] snd_dummy snd_dummy.0: control 3:0:4095:syz0:2096827922 is already present [ 97.530155][ T5813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.563529][ T5126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.613365][ T5126] usb 1-1: not running at top speed; connect to a high speed hub [ 97.724198][ T5126] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 97.732701][ T5126] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 97.787052][ T5126] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 97.824038][ T5126] usb 1-1: config 128 has no interface number 0 [ 97.842152][ T5126] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 97.879491][ T5833] loop2: detected capacity change from 0 to 1024 [ 97.893262][ T5126] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.922294][ T5126] usb 1-1: config 128 interface 127 has no altsetting 0 [ 98.076111][ T144] hfsplus: b-tree write err: -5, ino 4 [ 98.093507][ T5126] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 98.102793][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.114057][ T5126] usb 1-1: Product: syz [ 98.118267][ T5126] usb 1-1: Manufacturer: syz [ 98.123488][ T5126] usb 1-1: SerialNumber: syz [ 98.185833][ T5850] netlink: 'syz.3.687': attribute type 2 has an invalid length. [ 98.596323][ T5126] usb 1-1: USB disconnect, device number 3 [ 98.741000][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 98.761155][ T5885] loop4: detected capacity change from 0 to 2048 [ 98.804538][ T5887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 98.822297][ T5887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 98.860988][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.888212][ T5885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.095632][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 99.279225][ T5921] netlink: 'syz.4.720': attribute type 10 has an invalid length. [ 99.308393][ T5921] openvswitch: netlink: Flow key attr not present in new flow. [ 99.571081][ T5938] xt_TPROXY: Can be used only with -p tcp or -p udp [ 99.663545][ T5941] loop4: detected capacity change from 0 to 512 [ 99.680977][ T5942] 9p: Unknown access argument Ø [ 99.720337][ T5941] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.796039][ T5941] EXT4-fs error (device loop4): ext4_quota_enable:6413: comm syz.4.729: Bad quota inum: 1280, type: 0 [ 99.813756][ T5941] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=1280). Please run e2fsck to fix. [ 99.899170][ T5917] loop3: detected capacity change from 0 to 32768 [ 99.906191][ T5941] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 99.915525][ T5941] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.969940][ T5941] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 100.031307][ T5917] JBD2: Ignoring recovery information on journal [ 100.202078][ T5941] EXT4-fs error (device loop4): ext4_quota_enable:6413: comm syz.4.729: Bad quota inum: 1280, type: 0 [ 100.224341][ T5917] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 100.279464][ T5941] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=1280). Please run e2fsck to fix. [ 100.328209][ T5917] (syz.3.719,5917,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 100.428956][ T5917] (syz.3.719,5917,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 100.438637][ T5917] (syz.3.719,5917,1):ocfs2_mknod:298 ERROR: status = -2 [ 100.450489][ T5917] (syz.3.719,5917,1):ocfs2_mknod:502 ERROR: status = -2 [ 100.476076][ T5983] loop1: detected capacity change from 0 to 256 [ 100.490945][ T5917] (syz.3.719,5917,1):ocfs2_create:676 ERROR: status = -2 [ 100.595300][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 100.615164][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.748'. [ 100.643249][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.748'. [ 100.644380][ T5983] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 100.658495][ T5126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.669563][ T5983] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 100.866666][ T5994] ceph: No source [ 100.923366][ T5126] usb 1-1: Using ep0 maxpacket: 8 [ 100.933522][ T5996] ip6t_REJECT: ECHOREPLY is not supported [ 101.053549][ T5126] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 101.097660][ T5126] usb 1-1: config 11 has no interface number 0 [ 101.109854][ T5126] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 101.145802][ T6006] loop1: detected capacity change from 0 to 2048 [ 101.162444][ T5126] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 1293, setting to 1024 [ 101.181810][ T5126] usb 1-1: config 11 interface 95 has no altsetting 0 [ 101.228264][ T6006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.363612][ T5126] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 101.393056][ T5126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.421929][ T5126] usb 1-1: Product: syz [ 101.440001][ T5126] usb 1-1: Manufacturer: syz [ 101.453402][ T5413] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 101.453945][ T5126] usb 1-1: SerialNumber: syz [ 101.728328][ T6032] loop4: detected capacity change from 0 to 4096 [ 101.825223][ T5126] usbtouchscreen: probe of 1-1:11.95 failed with error -22 [ 101.843491][ T6032] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 101.853510][ T5413] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 101.882147][ T5413] usb 4-1: config 8 has no interface number 0 [ 101.885009][ T5126] usb 1-1: USB disconnect, device number 4 [ 101.911329][ T5413] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 101.940600][ T6025] loop2: detected capacity change from 0 to 32768 [ 101.951041][ T5413] usb 4-1: config 8 interface 177 has no altsetting 0 [ 101.991838][ T5413] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 102.018471][ T5413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.064340][ T6025] jfs_strtoUCS: char2uni returned -22. [ 102.081477][ T6025] charset = cp949, char = 0xd4 [ 102.103722][ T6010] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.353400][ T5413] usb 4-1: string descriptor 0 read error: -71 [ 102.383410][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 102.423098][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 102.550997][ T6066] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 102.607305][ T6071] netlink: 'syz.0.791': attribute type 21 has an invalid length. [ 102.646644][ T6071] netlink: 100 bytes leftover after parsing attributes in process `syz.0.791'. [ 102.735682][ T6076] loop2: detected capacity change from 0 to 64 [ 102.863649][ T4996] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.873655][ T5413] ir_toy 4-1:8.177: could not write reset command: -110 [ 102.903254][ C1] ir_toy 4-1:8.177: failed to resubmit urb: -1 [ 102.909792][ T5413] ir_toy: probe of 4-1:8.177 failed with error -110 [ 102.939418][ T5413] usb 4-1: USB disconnect, device number 7 [ 103.032441][ T6092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.233450][ T4996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.263697][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.285387][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.337521][ T4996] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.352453][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 103.379883][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 103.392734][ T4996] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 103.413458][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 103.429815][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.475484][ T4996] usb 2-1: config 0 descriptor?? [ 103.490613][ T6119] netlink: 'syz.3.815': attribute type 9 has an invalid length. [ 103.515360][ T4996] gspca_main: spca561-2.14.0 probing abcd:cdee [ 103.645506][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.668001][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.675204][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.763602][ T5413] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.779377][ T6134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.798302][ T4996] spca561: probe of 2-1:0.0 failed with error -22 [ 103.807563][ T4996] usb 2-1: MIDIStreaming interface descriptor not found [ 103.924209][ T4996] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 103.928471][ T6136] loop0: detected capacity change from 0 to 8192 [ 103.967833][ T4996] usb 2-1: USB disconnect, device number 5 [ 104.190130][ T4308] udevd[4308]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.206256][ T5413] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 104.226474][ T5413] usb 3-1: config 0 has no interface number 0 [ 104.232621][ T5413] usb 3-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 104.436407][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 104.523490][ T5413] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 104.542765][ T5413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.557365][ T5413] usb 3-1: Product: syz [ 104.561565][ T5413] usb 3-1: Manufacturer: syz [ 104.576776][ T5413] usb 3-1: SerialNumber: syz [ 104.595926][ T5413] usb 3-1: config 0 descriptor?? [ 104.665293][ T5413] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 104.671686][ T5413] usb 3-1: No valid video chain found. [ 104.763305][ T1109] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.886564][ T5413] usb 3-1: USB disconnect, device number 3 [ 104.986790][ T6168] loop0: detected capacity change from 0 to 32768 [ 104.991540][ T6170] loop3: detected capacity change from 0 to 32768 [ 105.061082][ T6168] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.071494][ T1109] usb 5-1: Using ep0 maxpacket: 16 [ 105.129917][ T6170] XFS (loop3): Mounting V5 Filesystem [ 105.131148][ T6185] loop1: detected capacity change from 0 to 4096 [ 105.156076][ T6185] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 105.205462][ T1109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.257516][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 105.271739][ T1109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.309831][ T6185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.351069][ T6170] XFS (loop3): Ending clean mount [ 105.454608][ T6170] XFS (loop3): Quotacheck needed: Please wait. [ 105.463551][ T1109] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.490663][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.530275][ T1109] usb 5-1: Product: syz [ 105.544254][ T384] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1807 dinode [ 105.566804][ T1109] usb 5-1: Manufacturer: syz [ 105.593407][ T1109] usb 5-1: SerialNumber: syz [ 105.608126][ T384] XFS (loop3): Unmount and run xfs_repair [ 105.635488][ T384] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 105.642904][ T384] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 105.678757][ T384] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.696138][ T6198] loop0: detected capacity change from 0 to 4096 [ 105.709442][ T384] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 105.723608][ T6198] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 105.732827][ T384] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 105.747824][ T384] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 105.762387][ T384] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 105.792096][ T384] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 105.808094][ T384] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 105.819948][ T6198] ntfs3: loop0: failed to convert "c46c" to macroman [ 105.902050][ T6170] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 105.988026][ T6211] loop1: detected capacity change from 0 to 128 [ 106.029552][ T6213] loop0: detected capacity change from 0 to 512 [ 106.089131][ T4185] XFS (loop3): Unmounting Filesystem [ 106.103833][ T1109] usb 5-1: cannot find UAC_HEADER [ 106.114773][ T6211] befs: Unrecognized mount option "¹#" or missing value [ 106.176163][ T6213] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 106.178632][ T6199] loop2: detected capacity change from 0 to 32768 [ 106.204018][ T1109] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 106.212364][ T1109] usb 5-1: USB disconnect, device number 4 [ 106.234908][ T6213] EXT4-fs (loop0): 1 truncate cleaned up [ 106.240571][ T6213] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 106.289679][ T6199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.849 (6199) [ 106.307625][ T6213] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.851: Logical block already allocated [ 106.358305][ T6213] EXT4-fs (loop0): Remounting filesystem read-only [ 106.416988][ T6199] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 106.434680][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.460862][ T6199] BTRFS info (device loop2): using free space tree [ 106.471486][ T6199] BTRFS info (device loop2): has skinny extents [ 106.569662][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 106.813566][ T6199] BTRFS info (device loop2): enabling ssd optimizations [ 107.401860][ T6278] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 107.416552][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 107.442743][ T6281] loop3: detected capacity change from 0 to 164 [ 107.449392][ T6278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.612348][ T6281] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 107.723829][ T6297] loop0: detected capacity change from 0 to 16 [ 107.778481][ T6297] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.872628][ T6307] loop3: detected capacity change from 0 to 256 [ 107.876307][ T6308] ipt_CLUSTERIP: bad num_local_nodes 18 [ 107.933274][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.975031][ T6307] FAT-fs (loop3): Directory bread(block 64) failed [ 107.992691][ T6307] FAT-fs (loop3): Directory bread(block 65) failed [ 107.992713][ T6313] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 108.013357][ T6307] FAT-fs (loop3): Directory bread(block 66) failed [ 108.019920][ T6307] FAT-fs (loop3): Directory bread(block 67) failed [ 108.051983][ T6307] FAT-fs (loop3): Directory bread(block 68) failed [ 108.080824][ T6307] FAT-fs (loop3): Directory bread(block 69) failed [ 108.080910][ T6307] FAT-fs (loop3): Directory bread(block 70) failed [ 108.080939][ T6307] FAT-fs (loop3): Directory bread(block 71) failed [ 108.081002][ T6307] FAT-fs (loop3): Directory bread(block 72) failed [ 108.081029][ T6307] FAT-fs (loop3): Directory bread(block 73) failed [ 108.188268][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 108.348704][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.426372][ T13] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 108.426400][ T13] usb 5-1: config 7 has no interface number 0 [ 108.426431][ T13] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.426452][ T13] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 108.426475][ T13] usb 5-1: config 7 interface 187 has no altsetting 0 [ 108.585639][ T13] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 108.636086][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.663285][ T13] usb 5-1: Product: syz [ 108.677762][ T13] usb 5-1: Manufacturer: syz [ 108.682521][ T13] usb 5-1: SerialNumber: syz [ 108.700271][ T6309] loop1: detected capacity change from 0 to 32768 [ 108.785672][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 108.796979][ T6337] device bridge_slave_1 left promiscuous mode [ 108.803263][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.812240][ T6337] device bridge_slave_0 left promiscuous mode [ 108.832698][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.844466][ T6309] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.868287][ T6309] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 108.895183][ T6309] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 108.907100][ T6309] OCFS2: Returning error to the calling process. [ 108.913622][ T6309] (syz.1.886,6309,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 108.922794][ T6309] (syz.1.886,6309,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 108.931231][ T6309] (syz.1.886,6309,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 108.939591][ T6309] (syz.1.886,6309,0):ocfs2_mknod:306 ERROR: status = -5 [ 108.947897][ T6309] (syz.1.886,6309,0):ocfs2_mknod:502 ERROR: status = -5 [ 108.955316][ T6309] (syz.1.886,6309,0):ocfs2_mkdir:659 ERROR: status = -5 [ 108.973820][ T13] usb 5-1: Unknown endpoint type found, address 0x07 [ 108.980707][ T13] usb 5-1: Not enough endpoints found in device, aborting! [ 109.040681][ T4198] ocfs2: Unmounting device (7,1) on (node local) [ 109.190237][ T4233] usb 5-1: USB disconnect, device number 5 [ 109.819174][ T6393] netlink: 3416 bytes leftover after parsing attributes in process `syz.1.926'. [ 109.874959][ T6393] netlink: 3416 bytes leftover after parsing attributes in process `syz.1.926'. [ 109.932071][ T6393] netlink: 242 bytes leftover after parsing attributes in process `syz.1.926'. [ 110.156987][ T6414] loop2: detected capacity change from 0 to 1024 [ 110.283824][ T6414] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.343456][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.943'. [ 110.557112][ T6439] netlink: 372 bytes leftover after parsing attributes in process `syz.4.949'. [ 110.573706][ T6441] loop1: detected capacity change from 0 to 256 [ 110.607821][ T6439] netlink: 'syz.4.949': attribute type 3 has an invalid length. [ 110.624551][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 110.724624][ T6443] loop4: detected capacity change from 0 to 1024 [ 110.854465][ T6443] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 110.889856][ T6443] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.921623][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 110.924736][ T6441] FAT-fs (loop1): Directory bread(block 64) failed [ 110.947580][ T6443] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,nodiscard,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 110.992499][ T6437] loop3: detected capacity change from 0 to 32768 [ 111.001111][ T6441] FAT-fs (loop1): Directory bread(block 65) failed [ 111.023456][ T6441] FAT-fs (loop1): Directory bread(block 66) failed [ 111.030761][ T6441] FAT-fs (loop1): Directory bread(block 67) failed [ 111.059993][ T6441] FAT-fs (loop1): Directory bread(block 68) failed [ 111.066680][ T6441] FAT-fs (loop1): Directory bread(block 69) failed [ 111.075394][ T6441] FAT-fs (loop1): Directory bread(block 70) failed [ 111.082211][ T6441] FAT-fs (loop1): Directory bread(block 71) failed [ 111.091997][ T6441] FAT-fs (loop1): Directory bread(block 72) failed [ 111.098764][ T6441] FAT-fs (loop1): Directory bread(block 73) failed [ 111.118794][ T6437] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.129529][ T6443] VFS: Lookup of 'file0' in ext4 loop4 would have caused loop [ 111.151599][ T26] audit: type=1800 audit(1757619785.845:7): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.951" name="file2" dev="loop1" ino=1048606 res=0 errno=0 [ 111.423285][ T4999] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.446839][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 111.684224][ T4999] usb 1-1: Using ep0 maxpacket: 16 [ 111.731342][ T6476] loop2: detected capacity change from 0 to 256 [ 111.790206][ T6476] exfat: Deprecated parameter 'utf8' [ 111.857507][ T6476] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 111.973456][ T4999] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=a8.f7 [ 111.982533][ T4999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.003240][ T4999] usb 1-1: Product: syz [ 112.007437][ T4999] usb 1-1: Manufacturer: syz [ 112.012047][ T4999] usb 1-1: SerialNumber: syz [ 112.023758][ T5393] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.052929][ T4999] usb 1-1: config 0 descriptor?? [ 112.114921][ T4999] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 112.210197][ T6497] x_tables: unsorted entry at hook 1 [ 112.323413][ T4999] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 112.349555][ T4999] quatech2: probe of 1-1:0.0 failed with error -8 [ 112.533110][ T4999] usb 1-1: USB disconnect, device number 5 [ 112.560023][ T6520] netlink: 188 bytes leftover after parsing attributes in process `syz.1.987'. [ 112.626239][ T5393] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 112.642716][ T5393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.673421][ T5393] usb 5-1: Product: syz [ 112.677637][ T5393] usb 5-1: Manufacturer: syz [ 112.689634][ T5393] usb 5-1: SerialNumber: syz [ 112.723521][ T5393] usb 5-1: config 0 descriptor?? [ 112.825723][ T6537] loop2: detected capacity change from 0 to 256 [ 112.957662][ T6537] FAT-fs (loop2): Directory bread(block 64) failed [ 112.993595][ T5393] int51x1: probe of 5-1:0.0 failed with error -22 [ 113.000625][ T6537] FAT-fs (loop2): Directory bread(block 65) failed [ 113.011334][ T6537] FAT-fs (loop2): Directory bread(block 66) failed [ 113.024053][ T6537] FAT-fs (loop2): Directory bread(block 67) failed [ 113.074741][ T6537] FAT-fs (loop2): Directory bread(block 68) failed [ 113.108522][ T6537] FAT-fs (loop2): Directory bread(block 69) failed [ 113.115616][ T6546] xt_HMARK: spi-set and port-set can't be combined [ 113.142214][ T6537] FAT-fs (loop2): Directory bread(block 70) failed [ 113.175469][ T6537] FAT-fs (loop2): Directory bread(block 71) failed [ 113.182407][ T6537] FAT-fs (loop2): Directory bread(block 72) failed [ 113.205580][ T6537] FAT-fs (loop2): Directory bread(block 73) failed [ 113.221977][ T5393] usb 5-1: USB disconnect, device number 6 [ 113.580104][ T6572] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1011'. [ 113.728263][ T6582] loop3: detected capacity change from 0 to 764 [ 113.739071][ T6579] loop0: detected capacity change from 0 to 2048 [ 113.820088][ T6582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 113.874892][ T6579] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.878760][ T6589] __nla_validate_parse: 1 callbacks suppressed [ 113.878788][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 113.917727][ T6589] device bridge_slave_1 left promiscuous mode [ 113.963487][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.037410][ T6589] device bridge_slave_0 left promiscuous mode [ 114.053867][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.171432][ T6593] loop3: detected capacity change from 0 to 2048 [ 114.255669][ T6593] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 114.326200][ T6580] loop1: detected capacity change from 0 to 32768 [ 114.343716][ T6580] (syz.1.1016,6580,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.427471][ T6580] (syz.1.1016,6580,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.642165][ T6585] loop2: detected capacity change from 0 to 32768 [ 114.643982][ T6580] JBD2: Ignoring recovery information on journal [ 114.719752][ T6580] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.919992][ T6624] loop4: detected capacity change from 0 to 512 [ 114.955830][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 114.976084][ T6580] syz.1.1016 (6580) used greatest stack depth: 20672 bytes left [ 115.037080][ T4198] ocfs2: Unmounting device (7,1) on (node local) [ 115.064677][ T6624] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.128406][ T6624] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 115.224536][ T6624] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.241495][ T6640] loop0: detected capacity change from 0 to 1024 [ 115.263782][ T6624] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 115.306709][ T6624] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.1035: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 115.348066][ T6640] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.447332][ T6651] loop2: detected capacity change from 0 to 512 [ 115.464073][ T6624] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1035: couldn't read orphan inode 13 (err -117) [ 115.565631][ T6624] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.598907][ T6651] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback. [ 115.646180][ T6659] loop0: detected capacity change from 0 to 256 [ 115.668461][ T6651] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.793378][ T6659] FAT-fs (loop0): Directory bread(block 64) failed [ 115.799953][ T6659] FAT-fs (loop0): Directory bread(block 65) failed [ 115.813531][ T6659] FAT-fs (loop0): Directory bread(block 66) failed [ 115.838651][ T6659] FAT-fs (loop0): Directory bread(block 67) failed [ 115.852583][ T6659] FAT-fs (loop0): Directory bread(block 68) failed [ 115.887190][ T6659] FAT-fs (loop0): Directory bread(block 69) failed [ 115.924234][ T6659] FAT-fs (loop0): Directory bread(block 70) failed [ 115.930863][ T6659] FAT-fs (loop0): Directory bread(block 71) failed [ 115.948348][ T6659] FAT-fs (loop0): Directory bread(block 72) failed [ 115.967712][ T6659] FAT-fs (loop0): Directory bread(block 73) failed [ 116.056097][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 116.123064][ T6687] device bridge_slave_1 left promiscuous mode [ 116.138322][ T26] audit: type=1800 audit(1757619790.835:8): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1048" name="file2" dev="loop0" ino=1048609 res=0 errno=0 [ 116.163706][ T6689] sctp: [Deprecated]: syz.4.1065 (pid 6689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.163706][ T6689] Use struct sctp_sack_info instead [ 116.177481][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.221601][ T6687] device bridge_slave_0 left promiscuous mode [ 116.253666][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.445803][ T6703] kAFS: unparsable volume name [ 116.570079][ T6709] loop2: detected capacity change from 0 to 2048 [ 116.631566][ T6709] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 116.688057][ T6709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.820250][ T6720] loop3: detected capacity change from 0 to 256 [ 116.890788][ T6723] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1081'. [ 116.995062][ T6720] FAT-fs (loop3): Directory bread(block 64) failed [ 117.033330][ T6720] FAT-fs (loop3): Directory bread(block 65) failed [ 117.052924][ T6720] FAT-fs (loop3): Directory bread(block 66) failed [ 117.100130][ T6720] FAT-fs (loop3): Directory bread(block 67) failed [ 117.125684][ T6720] FAT-fs (loop3): Directory bread(block 68) failed [ 117.151597][ T6720] FAT-fs (loop3): Directory bread(block 69) failed [ 117.183772][ T6720] FAT-fs (loop3): Directory bread(block 70) failed [ 117.190488][ T6720] FAT-fs (loop3): Directory bread(block 71) failed [ 117.231767][ T6720] FAT-fs (loop3): Directory bread(block 72) failed [ 117.256167][ T6746] loop1: detected capacity change from 0 to 64 [ 117.273522][ T6720] FAT-fs (loop3): Directory bread(block 73) failed [ 117.418852][ T26] audit: type=1400 audit(1757619792.115:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=6756 comm="syz.2.1096" [ 117.511131][ T26] audit: type=1800 audit(1757619792.205:10): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1079" name="file2" dev="loop3" ino=1048610 res=0 errno=0 [ 117.615835][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'. [ 117.623799][ T5393] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.756135][ T6772] loop4: detected capacity change from 0 to 1024 [ 117.817213][ T6772] EXT4-fs (loop4): Ignoring removed nobh option [ 117.839692][ T6772] EXT4-fs (loop4): Ignoring removed bh option [ 117.908185][ T6782] loop1: detected capacity change from 0 to 4096 [ 117.937340][ T6772] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpquota,nobh,abort,lazytime,usrquota,resgid=0x0000000000000000,bh,,errors=continue. Quota mode: writeback. [ 117.971930][ T6772] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.985107][ T6782] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 118.005769][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.019456][ T6782] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 118.076671][ T6782] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.093290][ T4233] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.101275][ T6782] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 118.123281][ T6782] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.132210][ T6782] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 118.153013][ T6782] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.167922][ T6782] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 118.212304][ T6782] ntfs: volume version 3.1. [ 118.239998][ T5393] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.253705][ T5393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.261772][ T5393] usb 1-1: Product: syz [ 118.281133][ T5393] usb 1-1: Manufacturer: syz [ 118.286744][ T5393] usb 1-1: SerialNumber: syz [ 118.328896][ T6790] device netdevsim0 entered promiscuous mode [ 118.354764][ T5393] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 118.499421][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 118.509388][ T6802] device bridge_slave_1 left promiscuous mode [ 118.528470][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.536863][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.545257][ T4233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.557082][ T6802] device bridge_slave_0 left promiscuous mode [ 118.568179][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.573410][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 118.610556][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.733763][ T4233] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.742862][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.766510][ T4233] usb 3-1: SerialNumber: syz [ 118.837595][ T6821] loop3: detected capacity change from 0 to 512 [ 118.860313][ T6821] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 118.860313][ T6821] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 118.860313][ T6821] [ 118.899905][ T6821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1121: inode #262144: comm syz.3.1121: iget: illegal inode # [ 118.916941][ T6821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1121: error while reading EA inode 262144 err=-117 [ 118.930990][ T6821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1121: inode #262144: comm syz.3.1121: iget: illegal inode # [ 118.948450][ T6821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1121: error while reading EA inode 262144 err=-117 [ 118.961748][ T6821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1121: inode #1: comm syz.3.1121: iget: illegal inode # [ 118.975499][ T6821] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1121: error while reading EA inode 1 err=-117 [ 118.990962][ T6821] EXT4-fs (loop3): 1 orphan inode deleted [ 119.001164][ T6821] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 119.026567][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.089902][ T4233] usb 3-1: 0:2 : does not exist [ 119.104018][ T4233] usb 3-1: unit 5 not found! [ 119.133729][ T5393] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.166051][ T4233] usb 3-1: USB disconnect, device number 4 [ 119.223537][ T6835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1127'. [ 119.326071][ T6833] loop1: detected capacity change from 0 to 4096 [ 119.405135][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1131'. [ 119.481341][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.559025][ T5126] usb 1-1: USB disconnect, device number 6 [ 119.634278][ T4199] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.795674][ T6864] xt_TCPMSS: Only works on TCP SYN packets [ 120.128932][ T6880] device vlan0 entered promiscuous mode [ 120.141329][ T6858] loop2: detected capacity change from 0 to 32768 [ 120.203685][ T4199] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 120.223927][ T5393] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 120.232727][ T5393] ath9k_htc: Failed to initialize the device [ 120.250079][ T6858] (syz.2.1138,6858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.255297][ T6888] loop1: detected capacity change from 0 to 512 [ 120.271137][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.291833][ T5126] usb 1-1: ath9k_htc: USB layer deinitialized [ 120.300111][ T4199] usb 4-1: Product: syz [ 120.306802][ T4199] usb 4-1: Manufacturer: syz [ 120.311790][ T4199] usb 4-1: SerialNumber: syz [ 120.316716][ T6858] (syz.2.1138,6858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.340885][ T4199] usb 4-1: config 0 descriptor?? [ 120.352588][ T6888] EXT4-fs (loop1): Ignoring removed oldalloc option [ 120.392550][ T6858] JBD2: Ignoring recovery information on journal [ 120.456405][ T6888] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,block_validity,grpid,oldalloc,,errors=continue. Quota mode: writeback. [ 120.491918][ T6892] xt_CT: No such helper "pptp" [ 120.499357][ T6888] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.513410][ T6858] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.613600][ T4199] int51x1: probe of 4-1:0.0 failed with error -22 [ 120.725765][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 120.828208][ T4199] usb 4-1: USB disconnect, device number 8 [ 120.979210][ T6921] netlink: 'syz.0.1167': attribute type 3 has an invalid length. [ 121.425969][ T6946] loop3: detected capacity change from 0 to 256 [ 121.749416][ T6963] loop2: detected capacity change from 0 to 1024 [ 121.773292][ T5126] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.801961][ T6967] loop3: detected capacity change from 0 to 8 [ 121.827536][ T6929] loop0: detected capacity change from 0 to 32768 [ 121.863104][ T6967] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 121.879332][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 121.912260][ T6929] find_entry called with index >= next_index [ 121.915872][ T6967] process 'syz.3.1189' launched './file2' with NULL argv: empty string added [ 121.927763][ T6929] find_entry called with index >= next_index [ 121.939670][ T4397] udevd[4397]: incorrect cramfs checksum on /dev/loop3 [ 121.952444][ T6929] find_entry called with index >= next_index [ 121.991259][ T6967] cramfs: Error -3 while decompressing! [ 122.010479][ T6967] cramfs: ffffffff961eb068(26)->ffff88805b203000(4096) [ 122.034922][ T6967] cramfs: Error -3 while decompressing! [ 122.049981][ T6967] cramfs: ffffffff961eb082(26)->ffff88805b204000(4096) [ 122.057268][ T5126] usb 5-1: Using ep0 maxpacket: 16 [ 122.097005][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 122.110945][ T6967] cramfs: Error -3 while decompressing! [ 122.128041][ T6967] cramfs: ffffffff961eb09c(16)->ffff88805b205000(4096) [ 122.158578][ T6967] cramfs: Error -3 while decompressing! [ 122.193482][ T5126] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 122.202556][ T5126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.216786][ T6967] cramfs: ffffffff961eb068(26)->ffff88805b203000(4096) [ 122.247381][ T5126] usb 5-1: config 0 descriptor?? [ 122.294822][ T5126] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 122.476866][ T6988] loop2: detected capacity change from 0 to 4096 [ 122.515888][ T5126] usb 5-1: Detected FT232BM [ 122.576946][ T6988] __ntfs_warning: 12 callbacks suppressed [ 122.576974][ T6988] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 122.603642][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.648821][ T6988] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 122.671515][ T6988] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.693764][ T6988] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 122.721921][ T6988] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.731775][ T6988] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 122.761111][ T5126] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 122.770738][ T6988] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.773254][ T5393] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.780237][ T6988] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 122.807743][ T5126] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 122.816173][ T5126] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.834975][ T5126] usb 5-1: USB disconnect, device number 7 [ 122.863310][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 122.873817][ T5126] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.889454][ T6988] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 122.914415][ T6988] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 122.945055][ T5126] ftdi_sio 5-1:0.0: device disconnected [ 122.956075][ T6988] ntfs: volume version 3.1. [ 122.993642][ T13] usb 2-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 123.014630][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 123.180865][ T7017] loop3: detected capacity change from 0 to 64 [ 123.183587][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 123.208390][ T5393] usb 1-1: descriptor type invalid, skip [ 123.212178][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.232554][ T13] usb 2-1: Product: syz [ 123.243595][ T13] usb 2-1: Manufacturer: syz [ 123.248254][ T13] usb 2-1: SerialNumber: syz [ 123.276522][ T7017] Trying to free block not in datazone [ 123.305611][ T5393] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.316576][ T7017] minix_free_block (loop3:21): bit already cleared [ 123.340430][ T5393] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 123.488519][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 123.513451][ T5393] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.522524][ T5393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.554399][ T5393] usb 1-1: Product: syz [ 123.564512][ T5393] usb 1-1: Manufacturer: syz [ 123.569278][ T5393] usb 1-1: SerialNumber: syz [ 123.592660][ T5393] usb 1-1: config 0 descriptor?? [ 123.606408][ T13] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10 [ 123.648563][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 123.667329][ T13] usb 2-1: USB disconnect, device number 6 [ 123.683371][ T3547] bcm5974 2-1:1.0: could not read from device [ 123.693585][ T3547] bcm5974 2-1:1.0: could not read from device [ 123.751862][ T7042] loop4: detected capacity change from 0 to 64 [ 123.755260][ T7040] loop3: detected capacity change from 0 to 128 [ 123.810641][ T7042] Trying to free block not in datazone [ 123.832898][ T7040] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 123.848857][ T7040] hpfs: filesystem error: improperly stopped [ 123.855138][ T7040] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 123.863040][ T7040] hpfs: You really don't want any checks? You are crazy... [ 123.875388][ T7040] hpfs: hpfs_map_sector(): read error [ 123.880784][ T7040] hpfs: code page support is disabled [ 123.887224][ T7040] hpfs: hpfs_map_4sectors(): unaligned read [ 123.893580][ T7040] hpfs: hpfs_map_4sectors(): unaligned read [ 123.899608][ T7040] hpfs: filesystem error: unable to find root dir [ 123.913553][ T5126] usb 1-1: USB disconnect, device number 7 [ 124.117643][ T7054] loop2: detected capacity change from 0 to 8 [ 124.140400][ T7056] loop4: detected capacity change from 0 to 512 [ 124.188506][ T7060] netlink: 'syz.3.1236': attribute type 6 has an invalid length. [ 124.215803][ T7056] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 124.215803][ T7056] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 124.215803][ T7056] [ 124.218970][ T7054] SQUASHFS error: xz decompression failed, data probably corrupt [ 124.285511][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 124.312231][ T7054] SQUASHFS error: Failed to read block 0x108: -5 [ 124.320295][ T7054] SQUASHFS error: Unable to read metadata cache entry [106] [ 124.350600][ T7056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1234: inode #262144: comm syz.4.1234: iget: illegal inode # [ 124.403320][ T7054] SQUASHFS error: Unable to read inode 0x11f [ 124.498376][ T7074] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 124.523960][ T7056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1234: error while reading EA inode 262144 err=-117 [ 124.547496][ T7056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1234: inode #262144: comm syz.4.1234: iget: illegal inode # [ 124.579358][ T7076] loop0: detected capacity change from 0 to 2048 [ 124.630779][ T7056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1234: error while reading EA inode 262144 err=-117 [ 124.664570][ T7076] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 124.686796][ T7056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1234: inode #1: comm syz.4.1234: iget: illegal inode # [ 124.752597][ T7056] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1234: error while reading EA inode 1 err=-117 [ 124.754671][ T7076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.785502][ T7086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.817253][ T7056] EXT4-fs (loop4): 1 orphan inode deleted [ 124.829820][ T7056] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 124.835964][ T7083] loop2: detected capacity change from 0 to 4096 [ 124.874748][ T7088] loop1: detected capacity change from 0 to 128 [ 124.947248][ T7083] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 125.069018][ T7094] netlink: 'syz.0.1251': attribute type 10 has an invalid length. [ 125.142218][ T7094] device veth0_macvtap left promiscuous mode [ 125.168695][ T7096] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1255'. [ 125.243117][ T7094] batman_adv: batadv0: Adding interface: macvtap0 [ 125.250306][ T7094] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.385955][ T7094] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 125.404240][ T7098] netlink: 'syz.1.1253': attribute type 7 has an invalid length. [ 125.560024][ T7115] loop3: detected capacity change from 0 to 512 [ 125.700352][ T7115] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 125.724968][ T7115] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.753283][ T5393] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.769118][ T7115] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.1262: invalid size [ 125.804733][ T7132] loop0: detected capacity change from 0 to 64 [ 125.854663][ T7132] Trying to free block not in datazone [ 125.871637][ T7132] minix_free_block (loop0:21): bit already cleared [ 126.033772][ T7143] loop1: detected capacity change from 0 to 256 [ 126.087105][ T7143] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.133649][ T5393] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.163273][ T5393] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 126.218074][ T5393] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 126.251960][ T5393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.287058][ T7156] loop3: detected capacity change from 0 to 64 [ 126.302193][ T5393] usb 5-1: config 0 descriptor?? [ 126.496558][ T7166] loop3: detected capacity change from 0 to 512 [ 126.530000][ T7166] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.572635][ T7166] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1287: bg 0: block 248: padding at end of block bitmap is not set [ 126.588049][ T5393] Bluetooth: Can't get state to change to load ram patch err [ 126.604630][ T5393] Bluetooth: Loading patch file failed [ 126.610138][ T5393] ath3k: probe of 5-1:0.0 failed with error -121 [ 126.614873][ T7166] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1287: Failed to acquire dquot type 1 [ 126.677896][ T7166] EXT4-fs (loop3): 1 truncate cleaned up [ 126.691877][ T7166] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 126.713513][ T5409] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.713856][ T7166] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.1287: deleted inode referenced: 12 [ 126.798791][ T5126] usb 5-1: USB disconnect, device number 8 [ 126.987317][ T7191] loop0: detected capacity change from 0 to 8 [ 126.993871][ T5409] usb 2-1: Using ep0 maxpacket: 16 [ 127.048851][ T7191] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 127.072940][ T7196] loop3: detected capacity change from 0 to 512 [ 127.092308][ T7191] cramfs: Error -3 while decompressing! [ 127.092724][ T4397] udevd[4397]: incorrect cramfs checksum on /dev/loop0 [ 127.097906][ T7191] cramfs: ffffffff961ef068(26)->ffff8880683b5000(4096) [ 127.097967][ T7191] cramfs: Error -3 while decompressing! [ 127.097977][ T7191] cramfs: ffffffff961ef082(26)->ffff88805b3c5000(4096) [ 127.098098][ T7191] cramfs: Error -3 while decompressing! [ 127.130488][ T7191] cramfs: ffffffff961ef09c(16)->ffff88805efc8000(4096) [ 127.145506][ T7191] cramfs: Error -3 while decompressing! [ 127.163038][ T7196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 127.165354][ T4397] udevd[4397]: incorrect cramfs checksum on /dev/loop0 [ 127.171294][ T5409] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 127.183848][ T7191] cramfs: ffffffff961ef068(26)->ffff8880683b5000(4096) [ 127.201521][ T7196] System zones: 1-12 [ 127.205579][ T5409] usb 2-1: config 0 has no interface number 0 [ 127.220180][ T7196] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.1300: invalid block [ 127.235774][ T7196] EXT4-fs (loop3): Remounting filesystem read-only [ 127.244614][ T7196] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1300: invalid indirect mapped block 8 (level 2) [ 127.263746][ T7196] EXT4-fs (loop3): Remounting filesystem read-only [ 127.270808][ T7196] EXT4-fs (loop3): 1 truncate cleaned up [ 127.276858][ T7196] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 127.403464][ T5409] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 127.420814][ T5409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.464676][ T5409] usb 2-1: Product: syz [ 127.468979][ T5409] usb 2-1: Manufacturer: syz [ 127.496869][ T5409] usb 2-1: SerialNumber: syz [ 127.521463][ T5409] usb 2-1: config 0 descriptor?? [ 127.574189][ T5409] hub 2-1:0.145: bad descriptor, ignoring hub [ 127.591537][ T5409] hub: probe of 2-1:0.145 failed with error -5 [ 127.616237][ T7214] loop0: detected capacity change from 0 to 128 [ 127.627971][ T5409] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input11 [ 127.961368][ T5409] usb 2-1: USB disconnect, device number 7 [ 128.033046][ T7227] loop3: detected capacity change from 0 to 4096 [ 128.113367][ T7227] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 128.179296][ T7238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1320'. [ 128.190783][ T7227] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 128.205871][ T7238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1320'. [ 128.253104][ T154] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 128.272166][ T4185] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 128.303266][ T4185] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 128.320929][ T4185] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 128.338323][ T154] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 128.345640][ T7242] netlink: 'syz.4.1322': attribute type 4 has an invalid length. [ 128.359215][ T4185] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 128.369135][ T4185] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 128.397001][ T7211] loop2: detected capacity change from 0 to 32768 [ 128.435252][ T7246] loop0: detected capacity change from 0 to 8 [ 128.468844][ T7248] loop1: detected capacity change from 0 to 128 [ 128.567038][ T7248] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.585232][ T7248] hpfs: filesystem error: improperly stopped [ 128.592787][ T7248] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.619926][ T7248] hpfs: You really don't want any checks? You are crazy... [ 128.652925][ T7248] hpfs: hpfs_map_sector(): read error [ 128.679079][ T7248] hpfs: code page support is disabled [ 128.752311][ T7248] hpfs: hpfs_map_4sectors(): unaligned read [ 128.778476][ T7259] netlink: 'syz.0.1328': attribute type 22 has an invalid length. [ 128.825100][ T7248] hpfs: hpfs_map_4sectors(): unaligned read [ 128.833542][ T7259] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 128.847722][ T7248] hpfs: filesystem error: unable to find root dir [ 129.012002][ T7265] loop2: detected capacity change from 0 to 256 [ 129.047298][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.061291][ T7265] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.131919][ T7265] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 129.188719][ T7265] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 129.246518][ T7281] netlink: 568 bytes leftover after parsing attributes in process `syz.0.1339'. [ 129.349252][ T7286] loop4: detected capacity change from 0 to 128 [ 129.402764][ T7292] loop3: detected capacity change from 0 to 1024 [ 129.463035][ T7286] FAT-fs (loop4): bogus sectors per cluster 0 [ 129.517314][ T7286] FAT-fs (loop4): Can't find a valid FAT filesystem [ 129.933738][ T7328] loop0: detected capacity change from 0 to 16 [ 129.991445][ T7328] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.031989][ T7328] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 130.080283][ T7328] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 130.123407][ T7328] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 130.387514][ T7350] loop2: detected capacity change from 0 to 64 [ 130.616902][ T7309] loop1: detected capacity change from 0 to 32768 [ 130.667612][ T7366] loop2: detected capacity change from 0 to 8 [ 130.731447][ T7358] loop3: detected capacity change from 0 to 4096 [ 130.734217][ T7309] find_entry called with index >= next_index [ 130.791037][ T7358] __ntfs_error: 12 callbacks suppressed [ 130.791055][ T7358] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 130.804021][ T7309] find_entry called with index >= next_index [ 130.815018][ T7358] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 130.893762][ T7358] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 130.913408][ T7309] find_entry called with index >= next_index [ 130.973245][ T7358] ntfs: volume version 3.1. [ 130.980757][ T7372] netlink: 210620 bytes leftover after parsing attributes in process `syz.2.1383'. [ 131.179661][ T7378] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 131.380410][ T7386] loop4: detected capacity change from 0 to 64 [ 131.511419][ T7392] loop2: detected capacity change from 0 to 512 [ 131.594174][ T7392] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 131.633655][ T7368] loop0: detected capacity change from 0 to 32768 [ 131.674897][ T7368] (syz.0.1392,7368,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.720388][ T7392] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,nobarrier,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 131.782625][ T7368] (syz.0.1392,7368,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 131.802033][ T7392] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.921146][ T7392] [ 131.923534][ T7392] ====================================================== [ 131.930576][ T7392] WARNING: possible circular locking dependency detected [ 131.937612][ T7392] syzkaller #0 Not tainted [ 131.942052][ T7392] ------------------------------------------------------ [ 131.949081][ T7392] syz.2.1393/7392 is trying to acquire lock: [ 131.955060][ T7392] ffff8880729ea268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 131.963970][ T7392] [ 131.963970][ T7392] but task is already holding lock: [ 131.971341][ T7392] ffff88805f93f020 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 131.980673][ T7392] [ 131.980673][ T7392] which lock already depends on the new lock. [ 131.980673][ T7392] [ 131.991084][ T7392] [ 131.991084][ T7392] the existing dependency chain (in reverse order) is: [ 132.000099][ T7392] [ 132.000099][ T7392] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 132.007934][ T7392] down_write+0x38/0x60 [ 132.012626][ T7392] ext4_map_blocks+0x8b2/0x1b30 [ 132.018012][ T7392] ext4_getblk+0x16d/0x630 [ 132.022970][ T7392] ext4_bread+0x26/0x180 [ 132.027743][ T7392] ext4_quota_write+0x230/0x570 [ 132.033126][ T7392] do_insert_tree+0x115c/0x1970 [ 132.038514][ T7392] do_insert_tree+0x5b1/0x1970 [ 132.043820][ T7392] do_insert_tree+0x5b1/0x1970 [ 132.049126][ T7392] do_insert_tree+0x5b1/0x1970 [ 132.054421][ T7392] qtree_write_dquot+0x361/0x4b0 [ 132.059886][ T7392] v2_write_dquot+0x108/0x190 [ 132.065096][ T7392] dquot_acquire+0x2d5/0x520 [ 132.070220][ T7392] ext4_acquire_dquot+0x2d9/0x4a0 [ 132.075773][ T7392] dqget+0x778/0xeb0 [ 132.080191][ T7392] dquot_set_dqblk+0x27/0xf90 [ 132.085392][ T7392] quota_setquota+0x4ac/0x530 [ 132.090609][ T7392] __se_sys_quotactl+0x295/0x6c0 [ 132.096089][ T7392] do_syscall_64+0x4c/0xa0 [ 132.101037][ T7392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.107461][ T7392] [ 132.107461][ T7392] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 132.115556][ T7392] down_read+0x44/0x2e0 [ 132.120254][ T7392] v2_read_dquot+0x4a/0x110 [ 132.125298][ T7392] dquot_acquire+0x152/0x520 [ 132.130417][ T7392] ext4_acquire_dquot+0x2d9/0x4a0 [ 132.135975][ T7392] dqget+0x778/0xeb0 [ 132.140409][ T7392] dquot_set_dqblk+0x27/0xf90 [ 132.145252][ T7368] JBD2: Ignoring recovery information on journal [ 132.145607][ T7392] quota_setquota+0x4ac/0x530 [ 132.145630][ T7392] __se_sys_quotactl+0x295/0x6c0 [ 132.162595][ T7392] do_syscall_64+0x4c/0xa0 [ 132.167655][ T7392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.174083][ T7392] [ 132.174083][ T7392] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 132.181758][ T7392] __lock_acquire+0x2c33/0x7c60 [ 132.187234][ T7392] lock_acquire+0x197/0x3f0 [ 132.192275][ T7392] __mutex_lock_common+0x1eb/0x2390 [ 132.198016][ T7392] mutex_lock_nested+0x17/0x20 [ 132.203314][ T7392] dquot_commit+0x5a/0x410 [ 132.208270][ T7392] ext4_write_dquot+0x1f0/0x360 [ 132.213693][ T7392] mark_all_dquot_dirty+0xf9/0x400 [ 132.219338][ T7392] __dquot_free_space+0x7ca/0xb90 [ 132.224884][ T7392] ext4_free_blocks+0x1af5/0x2480 [ 132.230164][ T7368] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.230433][ T7392] ext4_ext_remove_space+0x1eaa/0x43a0 [ 132.245322][ T7392] ext4_ext_truncate+0x192/0x240 [ 132.250801][ T7392] ext4_truncate+0x9f1/0x10d0 [ 132.256007][ T7392] ext4_evict_inode+0xb43/0x1080 [ 132.261475][ T7392] evict+0x485/0x870 [ 132.265891][ T7392] do_unlinkat+0x3d8/0x6f0 [ 132.270831][ T7392] __x64_sys_unlink+0x45/0x50 [ 132.276029][ T7392] do_syscall_64+0x4c/0xa0 [ 132.280971][ T7392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.287398][ T7392] [ 132.287398][ T7392] other info that might help us debug this: [ 132.287398][ T7392] [ 132.297642][ T7392] Chain exists of: [ 132.297642][ T7392] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 132.297642][ T7392] [ 132.311303][ T7392] Possible unsafe locking scenario: [ 132.311303][ T7392] [ 132.318755][ T7392] CPU0 CPU1 [ 132.324121][ T7392] ---- ---- [ 132.329485][ T7392] lock(&ei->i_data_sem/2); [ 132.334089][ T7392] lock(&s->s_dquot.dqio_sem); [ 132.341482][ T7392] lock(&ei->i_data_sem/2); [ 132.348598][ T7392] lock(&dquot->dq_lock); [ 132.353014][ T7392] [ 132.353014][ T7392] *** DEADLOCK *** [ 132.353014][ T7392] [ 132.361166][ T7392] 4 locks held by syz.2.1393/7392: [ 132.366272][ T7392] #0: ffff8880210ae460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 132.375430][ T7392] #1: ffff8880210ae650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 132.384915][ T7392] #2: ffff88805f93f020 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 132.394674][ T7392] #3: ffffffff8c23ee98 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 132.403734][ T7392] [ 132.403734][ T7392] stack backtrace: [ 132.409637][ T7392] CPU: 1 PID: 7392 Comm: syz.2.1393 Not tainted syzkaller #0 [ 132.417003][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.427061][ T7392] Call Trace: [ 132.430349][ T7392] [ 132.433280][ T7392] dump_stack_lvl+0x168/0x230 [ 132.437982][ T7392] ? load_image+0x3b0/0x3b0 [ 132.442489][ T7392] ? show_regs_print_info+0x20/0x20 [ 132.447698][ T7392] ? print_circular_bug+0x12b/0x1a0 [ 132.452913][ T7392] check_noncircular+0x274/0x310 [ 132.457868][ T7392] ? add_chain_block+0x940/0x940 [ 132.462800][ T7392] ? lockdep_lock+0xdc/0x1e0 [ 132.467399][ T7392] ? deref_stack_reg+0xd0/0x120 [ 132.472254][ T7392] ? mark_lock+0x94/0x320 [ 132.476621][ T7392] __lock_acquire+0x2c33/0x7c60 [ 132.481487][ T7392] ? stack_trace_save+0x98/0xe0 [ 132.486339][ T7392] ? verify_lock_unused+0x140/0x140 [ 132.491541][ T7392] ? check_noncircular+0x16f/0x310 [ 132.496653][ T7392] ? add_chain_block+0x940/0x940 [ 132.501587][ T7392] ? lockdep_unlock+0x134/0x2d0 [ 132.506440][ T7392] ? lockdep_lock+0x1e0/0x1e0 [ 132.511133][ T7392] lock_acquire+0x197/0x3f0 [ 132.515646][ T7392] ? dquot_commit+0x5a/0x410 [ 132.520240][ T7392] ? __might_sleep+0xf0/0xf0 [ 132.524834][ T7392] ? read_lock_is_recursive+0x10/0x10 [ 132.530213][ T7392] ? dquot_commit+0x5a/0x410 [ 132.534810][ T7392] __mutex_lock_common+0x1eb/0x2390 [ 132.540016][ T7392] ? dquot_commit+0x5a/0x410 [ 132.544622][ T7392] ? __might_sleep+0xf0/0xf0 [ 132.549222][ T7392] ? mutex_lock_io_nested+0x60/0x60 [ 132.554443][ T7392] mutex_lock_nested+0x17/0x20 [ 132.559215][ T7392] dquot_commit+0x5a/0x410 [ 132.563646][ T7392] ? __ext4_journal_start_sb+0x1bd/0x360 [ 132.569299][ T7392] ext4_write_dquot+0x1f0/0x360 [ 132.574178][ T7392] mark_all_dquot_dirty+0xf9/0x400 [ 132.579301][ T7392] __dquot_free_space+0x7ca/0xb90 [ 132.584341][ T7392] ext4_free_blocks+0x1af5/0x2480 [ 132.589383][ T7392] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 132.596758][ T7392] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 132.602824][ T7392] ? ext4_inode_journal_mode+0x18f/0x460 [ 132.608470][ T7392] ext4_ext_remove_space+0x1eaa/0x43a0 [ 132.613967][ T7392] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 132.619781][ T7392] ? ext4_es_remove_extent+0x24f/0x3e0 [ 132.625250][ T7392] ext4_ext_truncate+0x192/0x240 [ 132.630205][ T7392] ext4_truncate+0x9f1/0x10d0 [ 132.634888][ T7392] ? __ext4_mark_inode_dirty+0x700/0x700 [ 132.640527][ T7392] ext4_evict_inode+0xb43/0x1080 [ 132.645469][ T7392] ? _raw_spin_unlock+0x24/0x40 [ 132.650331][ T7392] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 132.656228][ T7392] ? do_raw_spin_unlock+0x11d/0x230 [ 132.661437][ T7392] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 132.667335][ T7392] evict+0x485/0x870 [ 132.671234][ T7392] ? __lock_acquire+0x7c60/0x7c60 [ 132.676278][ T7392] ? proc_nr_inodes+0x320/0x320 [ 132.681132][ T7392] ? do_raw_spin_unlock+0x11d/0x230 [ 132.686331][ T7392] ? _raw_spin_unlock+0x24/0x40 [ 132.691182][ T7392] ? iput+0x706/0x8a0 [ 132.695168][ T7392] do_unlinkat+0x3d8/0x6f0 [ 132.699581][ T7392] ? __virt_addr_valid+0x3c6/0x470 [ 132.704696][ T7392] ? fsnotify_link_count+0xf0/0xf0 [ 132.705924][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709807][ T7392] ? strncpy_from_user+0x1fb/0x360 [ 132.718885][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.721152][ T7392] ? getname_flags+0x1fe/0x500 [ 132.732146][ T7392] __x64_sys_unlink+0x45/0x50 [ 132.736831][ T7392] do_syscall_64+0x4c/0xa0 [ 132.741250][ T7392] ? clear_bhb_loop+0x30/0x80 [ 132.745933][ T7392] ? clear_bhb_loop+0x30/0x80 [ 132.750607][ T7392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.756508][ T7392] RIP: 0033:0x7f8ad2380ba9 [ 132.760923][ T7392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.780529][ T7392] RSP: 002b:00007f8ad05e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 132.788991][ T7392] RAX: ffffffffffffffda RBX: 00007f8ad25c7fa0 RCX: 00007f8ad2380ba9 [ 132.796966][ T7392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000007c0 [ 132.804934][ T7392] RBP: 00007f8ad2403e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.812907][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.820906][ T7392] R13: 00007f8ad25c8038 R14: 00007f8ad25c7fa0 R15: 00007ffebf16e018 [ 132.828896][ T7392] [ 132.837340][ T7392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1393: inode #1: comm syz.2.1393: iget: illegal inode # [ 132.853628][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 132.855032][ T7392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1393: error while reading EA inode 1 err=-117 [ 132.872891][ T7392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1393: inode #1: comm syz.2.1393: iget: illegal inode # [ 132.886501][ T7392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1393: error while reading EA inode 1 err=-117