last executing test programs: 5m24.428140624s ago: executing program 2 (id=737): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) lseek(r0, 0x0, 0x1) 5m24.147912696s ago: executing program 2 (id=739): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000040)=0x5e) 5m24.034234634s ago: executing program 2 (id=742): prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) 5m23.839397229s ago: executing program 2 (id=743): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m23.198300349s ago: executing program 2 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000015c0)='autofs\x00', 0x814400, &(0x7f0000000040)=',\x00') 5m22.713841507s ago: executing program 2 (id=753): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0xc) 5m22.055781709s ago: executing program 32 (id=753): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0xc) 5.091211504s ago: executing program 3 (id=4785): r0 = socket(0x2, 0x80805, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001180)={&(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000040)="11", 0x1}], 0x1, &(0x7f0000000080)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xfff}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}], 0x30, 0x810}, 0x4000040) 4.75700472s ago: executing program 3 (id=4790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 4.423834396s ago: executing program 3 (id=4794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) 4.190366764s ago: executing program 3 (id=4798): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x942) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/88) 3.895063827s ago: executing program 3 (id=4803): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.675315772s ago: executing program 0 (id=4818): r0 = syz_open_dev$video4linux(&(0x7f0000002900), 0x7fffffff, 0x82) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000400)={0x8001, 0x0, '\x00', {0x0, @reserved}}) 2.464085368s ago: executing program 1 (id=4820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 2.435167961s ago: executing program 0 (id=4821): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) 2.205727478s ago: executing program 0 (id=4823): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file2\x00', 0x1018658, &(0x7f0000000000), 0x6, 0x60a, &(0x7f0000000c00)="$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") quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.163956282s ago: executing program 1 (id=4824): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_gstrings={0x4a, 0x4}}) 1.947304319s ago: executing program 1 (id=4825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9d387dbd1abc89b6f5bec0000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.695327058s ago: executing program 4 (id=4828): unshare(0x22020600) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) 1.601623195s ago: executing program 3 (id=4829): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000140), 0x0}, 0x20) 1.283688251s ago: executing program 0 (id=4830): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000004c0)=0x79, 0x4) 907.54211ms ago: executing program 4 (id=4831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14, 0x10}}, 0x78}}, 0x0) 711.786445ms ago: executing program 1 (id=4832): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 639.47756ms ago: executing program 4 (id=4833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x3) 570.939476ms ago: executing program 0 (id=4834): r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000000)={r0}) 425.539348ms ago: executing program 4 (id=4835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x8, 0x0, 0x31) 398.12827ms ago: executing program 1 (id=4836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040}, 0x2) 315.896216ms ago: executing program 0 (id=4837): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xb, 0x2b2, &(0x7f0000000700)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 185.589576ms ago: executing program 1 (id=4838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 154.600429ms ago: executing program 4 (id=4839): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0xb, 0x3, 0x40, 0xad2, 'syz1\x00'}) 0s ago: executing program 4 (id=4840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) kernel console output (not intermixed with test programs): 3553][T12106] loop0: detected capacity change from 0 to 8 [ 309.934392][T12106] SQUASHFS error: lzo decompression failed, data probably corrupt [ 310.000423][T12106] SQUASHFS error: Failed to read block 0x1c0: -5 [ 310.024319][T12106] SQUASHFS error: Unable to read metadata cache entry [1be] [ 311.373390][T12162] loop3: detected capacity change from 0 to 128 [ 311.385533][T12162] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.419037][T12162] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 312.033415][T12187] loop1: detected capacity change from 0 to 64 [ 312.407927][T12198] xt_hashlimit: max too large, truncated to 1048576 [ 312.575582][T12202] loop0: detected capacity change from 0 to 1024 [ 312.658542][ T3520] hfsplus: b-tree write err: -5, ino 4 [ 312.868544][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2752'. [ 312.896026][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2752'. [ 313.123641][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 313.148940][T12214] veth1_to_team: entered allmulticast mode [ 313.320403][ T5859] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.377572][T12194] loop1: detected capacity change from 0 to 32768 [ 313.448663][T12194] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 313.488645][T12194] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 313.540881][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 313.582550][ T5859] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 313.595872][T12194] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 313.630288][ T5859] usb 4-1: config 0 has no interface number 0 [ 313.696292][T12194] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 313.709093][ T5859] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 313.735557][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.776783][ T5859] usb 4-1: Product: syz [ 313.796023][ T5859] usb 4-1: Manufacturer: syz [ 313.810639][ T5859] usb 4-1: SerialNumber: syz [ 313.839830][ T5859] usb 4-1: config 0 descriptor?? [ 314.080497][ T27] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 314.269010][ T5859] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 314.289675][ T27] usb 1-1: config 1 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 314.320085][ T27] usb 1-1: config 1 interface 0 altsetting 89 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 314.356415][ T27] usb 1-1: config 1 interface 0 has no altsetting 0 [ 314.370257][ T27] usb 1-1: string descriptor 0 read error: -22 [ 314.377293][ T27] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 314.407511][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.436866][ T5859] usb 4-1: USB disconnect, device number 12 [ 314.442497][T12229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 314.484094][T12229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 314.611861][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.787303][ T27] usbhid 1-1:1.0: can't add hid device: -71 [ 314.801381][ T27] usbhid: probe of 1-1:1.0 failed with error -71 [ 314.838069][ T27] usb 1-1: USB disconnect, device number 13 [ 315.041232][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 315.071605][T12254] veth1_to_team: entered allmulticast mode [ 315.165766][T12256] loop3: detected capacity change from 0 to 2048 [ 315.195598][T12256] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 315.222791][T12256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.689887][T12273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2786'. [ 315.701087][T12273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2786'. [ 315.740959][T12276] loop0: detected capacity change from 0 to 128 [ 315.793523][T12276] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.896431][T12276] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.2785: No space for directory leaf checksum. Please run e2fsck -D. [ 315.912378][T12276] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.2785: checksumming directory block 0 [ 316.095613][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.588852][T12302] loop1: detected capacity change from 0 to 512 [ 316.649610][T12302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.801482][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.822711][ T62] hfsplus: b-tree write err: -5, ino 4 [ 317.384999][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.392113][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.323993][T12364] netlink: 'syz.4.2827': attribute type 2 has an invalid length. [ 318.335238][T12364] netlink: 'syz.4.2827': attribute type 1 has an invalid length. [ 318.792063][T12381] loop1: detected capacity change from 0 to 512 [ 318.823228][T12381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.914420][T12381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.111379][ T28] audit: type=1326 audit(319.060:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 319.159216][T12381] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 319.186081][T12381] EXT4-fs (loop1): Remounting filesystem read-only [ 319.200703][ T28] audit: type=1326 audit(319.060:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 319.248591][ T28] audit: type=1326 audit(319.060:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 319.281196][T12394] xt_TCPMSS: Only works on TCP SYN packets [ 319.340999][ T28] audit: type=1326 audit(319.060:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 319.382223][ T28] audit: type=1326 audit(319.060:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.3.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 319.411474][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.422386][ T11] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 319.450975][ T11] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 321.523033][T12473] xt_TCPMSS: Only works on TCP SYN packets [ 321.589461][T12476] loop3: detected capacity change from 0 to 1024 [ 321.800732][ T48] hfsplus: b-tree write err: -5, ino 4 [ 321.884824][T12485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.043958][T12492] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 322.474736][T12497] loop1: detected capacity change from 0 to 4096 [ 322.517949][T12497] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 322.573244][T12497] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 322.630642][T12497] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 322.681543][T12497] ntfs: volume version 3.1. [ 323.338942][T12523] loop0: detected capacity change from 0 to 512 [ 323.376160][T12523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 323.425709][T12523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.595373][T12523] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 323.685798][T12523] EXT4-fs (loop0): Remounting filesystem read-only [ 323.813096][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.826591][T12493] loop3: detected capacity change from 0 to 32768 [ 323.892227][T12493] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 323.912117][T12493] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 324.040638][T12493] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 324.231777][T12493] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 324.429895][T12556] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 324.440964][T12556] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2919'. [ 324.458019][T12557] loop0: detected capacity change from 0 to 2048 [ 324.477049][T12559] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 324.527587][T12557] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 324.604138][T12557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.723753][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 324.759905][T12561] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 325.460812][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 325.615035][T12588] netlink: 'syz.4.2936': attribute type 3 has an invalid length. [ 325.740133][T12590] loop1: detected capacity change from 0 to 2048 [ 325.812981][T12590] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 325.888532][T12590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.040377][ T54] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 326.219240][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 326.258412][ T54] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 326.299496][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.320063][ T54] usb 1-1: Product: syz [ 326.325105][ T54] usb 1-1: Manufacturer: syz [ 326.329756][ T54] usb 1-1: SerialNumber: syz [ 326.370951][ T54] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.393069][ T5172] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 326.450416][ T5859] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 326.643424][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 326.673197][ T5859] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.684245][ T5859] usb 4-1: config 179 has no interface number 0 [ 326.700394][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 326.720358][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 326.749731][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 326.763036][ T5859] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 326.775160][ T5859] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.788858][ T5859] usb 4-1: config 179 interface 65 has no altsetting 0 [ 326.796024][ T5859] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 326.827043][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.871209][ T27] usb 1-1: USB disconnect, device number 14 [ 326.927547][ T5859] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19 [ 327.039043][ T5142] input input19: unable to receive magic message: -110 [ 327.071870][ T5142] input input19: unable to receive magic message: -32 [ 327.117790][ T5142] input input19: unable to receive magic message: -32 [ 327.432216][ T5863] usb 4-1: USB disconnect, device number 13 [ 327.434685][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 327.463201][ T5863] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 327.471699][ T5172] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 327.497167][ T5172] ath9k_htc: Failed to initialize the device [ 327.515434][ T27] usb 1-1: ath9k_htc: USB layer deinitialized [ 328.450848][T12650] comedi comedi2: multiq3: I/O port conflict (0xffff,16) [ 328.861292][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2973'. [ 328.881733][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2973'. [ 328.902618][T12664] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2973'. [ 328.966144][T12668] geneve3: entered promiscuous mode [ 329.740011][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2987'. [ 329.773134][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2987'. [ 329.805578][T12694] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2987'. [ 329.916805][T12700] loop0: detected capacity change from 0 to 1024 [ 330.050301][ T5172] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 330.290662][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 330.308903][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 330.330630][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.359185][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 330.393880][ T5172] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 330.403839][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.412080][ T5172] usb 2-1: Product: syz [ 330.416368][ T5172] usb 2-1: Manufacturer: syz [ 330.421176][ T5172] usb 2-1: SerialNumber: syz [ 330.429186][ T5172] usb 2-1: config 0 descriptor?? [ 330.433920][T12715] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 330.443320][ T5172] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 330.533669][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 330.644474][T12720] geneve2: entered promiscuous mode [ 330.669520][ T5172] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 330.687898][ T5172] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 330.708362][ T5172] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 330.730662][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 330.769872][ T27] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 330.794386][ T27] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 330.835880][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 330.847238][ T27] usb 1-1: config 1 has no interface number 0 [ 330.860474][ T27] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 330.890167][ T27] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 330.932201][ T27] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 330.944307][ T23] usb 2-1: USB disconnect, device number 15 [ 330.965924][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.984325][ T27] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 331.056647][T12730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3006'. [ 331.201917][ T27] snd_usb_pod 1-1:1.1: invalid control EP [ 331.207944][ T27] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 331.248375][ T27] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 331.275701][ T27] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 331.437579][ T27] usb 1-1: USB disconnect, device number 15 [ 332.003506][T12740] loop3: detected capacity change from 0 to 32768 [ 332.057207][T12740] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 332.232851][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 332.294981][T12754] loop0: detected capacity change from 0 to 2048 [ 332.316275][T12748] loop1: detected capacity change from 0 to 32768 [ 332.335086][T12754] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 332.382693][T12754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.386956][T12748] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.658860][T12748] XFS (loop1): Ending clean mount [ 332.861321][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 332.861343][ T28] audit: type=1326 audit(332.810:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 332.889710][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.898375][ T28] audit: type=1326 audit(332.850:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 332.904059][ T28] audit: type=1326 audit(332.860:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 332.964769][ T28] audit: type=1326 audit(332.880:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 332.999751][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 333.007545][ T28] audit: type=1326 audit(332.880:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.3.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 333.201980][T12774] loop3: detected capacity change from 0 to 512 [ 333.210616][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 333.217244][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.224707][T12774] EXT4-fs: Ignoring removed orlov option [ 333.227248][ T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 333.243505][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.270426][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 333.277449][T12774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 333.289877][ T27] usb 1-1: config 1 has no interface number 1 [ 333.301099][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 333.315185][ T27] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.327581][T12774] EXT4-fs (loop3): 1 orphan inode deleted [ 333.328458][ T27] usb 1-1: config 1 interface 2 has no altsetting 0 [ 333.341318][T12774] EXT4-fs (loop3): 1 truncate cleaned up [ 333.349819][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.359616][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.368258][ T27] usb 1-1: Product: syz [ 333.369562][T12774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.372974][ T27] usb 1-1: Manufacturer: syz [ 333.389773][ T27] usb 1-1: SerialNumber: syz [ 333.499463][T12778] loop1: detected capacity change from 0 to 2048 [ 333.517237][T12778] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 333.543619][T12774] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.3024: iget: bad extra_isize 46 (inode size 256) [ 333.557221][T12779] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.568728][T12778] syz.1.3022: attempt to access beyond end of device [ 333.568728][T12778] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 333.588943][T12774] EXT4-fs (loop3): Remounting filesystem read-only [ 333.614299][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 333.630598][ T27] usb 1-1: MIDIStreaming interface descriptor not found [ 333.676026][T12778] syz.1.3022: attempt to access beyond end of device [ 333.676026][T12778] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 333.692555][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.699022][T12778] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 333.785276][ T27] usb 1-1: USB disconnect, device number 16 [ 334.572575][T12800] loop3: detected capacity change from 0 to 256 [ 334.603496][T12800] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.065267][T12794] loop0: detected capacity change from 0 to 32768 [ 335.086685][ T28] audit: type=1326 audit(335.040:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.3.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 335.117926][ T28] audit: type=1326 audit(335.040:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.3.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 335.170923][ T5844] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 335.179044][T12794] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 335.250449][ T28] audit: type=1326 audit(335.070:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.3.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 335.355482][ T28] audit: type=1326 audit(335.070:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.3.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 335.380475][ T5844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.415791][ T5844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.448521][ T5844] usb 2-1: config 1 has no interface number 0 [ 335.461568][ T5844] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.474855][ T28] audit: type=1326 audit(335.070:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.3.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 335.518085][ T5844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.547137][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.576907][T12794] XFS (loop0): Ending clean mount [ 335.582905][ T5844] usb 2-1: Product: syz [ 335.599231][ T5844] usb 2-1: Manufacturer: syz [ 335.617606][ T5844] usb 2-1: SerialNumber: syz [ 335.645490][ T5844] usb 2-1: selecting invalid altsetting 1 [ 335.832519][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.057892][ T5844] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 336.088610][ T5844] cdc_ncm 2-1:1.1: bind() failure [ 336.133560][ T5844] usb 2-1: USB disconnect, device number 16 [ 338.069393][T12899] loop3: detected capacity change from 0 to 4096 [ 338.218092][T12908] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.328743][T12899] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 338.345216][T12913] loop1: detected capacity change from 0 to 1024 [ 338.403075][T12899] Remounting filesystem read-only [ 339.195633][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'. [ 339.459556][T12942] loop0: detected capacity change from 0 to 4096 [ 339.517706][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3103'. [ 339.560887][T12951] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.687811][T12942] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 339.742448][T12942] Remounting filesystem read-only [ 340.213377][T12972] loop3: detected capacity change from 0 to 512 [ 340.270507][T12972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.421357][T12972] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3114: corrupted xattr block 33: invalid ea_ino [ 340.571075][T12972] EXT4-fs (loop3): Remounting filesystem read-only [ 340.681400][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.077651][T13002] loop1: detected capacity change from 0 to 256 [ 341.197843][T13002] FAT-fs (loop1): Directory bread(block 64) failed [ 341.252009][T13002] FAT-fs (loop1): Directory bread(block 65) failed [ 341.258733][T13002] FAT-fs (loop1): Directory bread(block 66) failed [ 341.265122][T13007] ax25_connect(): syz.4.3139 uses autobind, please contact jreuter@yaina.de [ 341.282767][T13002] FAT-fs (loop1): Directory bread(block 67) failed [ 341.289450][T13002] FAT-fs (loop1): Directory bread(block 68) failed [ 341.327935][T13002] FAT-fs (loop1): Directory bread(block 69) failed [ 341.335554][T13002] FAT-fs (loop1): Directory bread(block 70) failed [ 341.349504][T13002] FAT-fs (loop1): Directory bread(block 71) failed [ 341.356589][T13002] FAT-fs (loop1): Directory bread(block 72) failed [ 341.371946][T13002] FAT-fs (loop1): Directory bread(block 73) failed [ 342.110096][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3143'. [ 342.760469][T13028] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 343.180474][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 343.199356][T13066] erspan0: default FDB implementation only supports local addresses [ 343.548339][T13078] loop1: detected capacity change from 0 to 512 [ 343.584636][T13078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.711652][T13078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.715706][T13089] netlink: 'syz.0.3169': attribute type 21 has an invalid length. [ 343.732555][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 344.020769][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 344.180171][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.384513][T13107] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 344.806471][T13123] loop1: detected capacity change from 0 to 256 [ 344.851491][T13123] exfat: Deprecated parameter 'utf8' [ 344.970566][T13123] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 346.294805][T13176] binder: 13175:13176 ioctl 40046205 0 returned -22 [ 347.041759][T13203] binder: 13199:13203 ioctl 40046205 0 returned -22 [ 348.261136][T13248] netlink: 'syz.4.3247': attribute type 10 has an invalid length. [ 348.269046][T13248] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3247'. [ 348.392321][T13254] syz.3.3251[13254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.392467][T13254] syz.3.3251[13254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.506654][T13260] loop0: detected capacity change from 0 to 64 [ 349.170925][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3263'. [ 349.618931][T13286] loop3: detected capacity change from 0 to 8192 [ 349.661238][T13286] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 349.679307][T13286] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 349.691119][T13286] REISERFS (device loop3): using ordered data mode [ 349.698542][T13286] reiserfs: using flush barriers [ 349.705604][T13286] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 349.725058][T13286] REISERFS (device loop3): checking transaction log (loop3) [ 349.988355][T13286] REISERFS (device loop3): Using tea hash to sort names [ 350.161372][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 350.993258][T13329] loop1: detected capacity change from 0 to 512 [ 351.242175][T13335] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 351.378507][T13335] CIFS mount error: No usable UNC path provided in device string! [ 351.378507][T13335] [ 351.424317][T13335] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 352.062817][T13337] loop0: detected capacity change from 0 to 32768 [ 352.178195][T13358] netlink: 'syz.1.3309': attribute type 5 has an invalid length. [ 352.214557][T13337] ialloc: diAlloc returned -5! [ 352.230158][T13359] loop3: detected capacity change from 0 to 512 [ 352.553765][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 353.042721][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 353.042736][ T28] audit: type=1326 audit(353.000:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 353.132677][ T28] audit: type=1326 audit(353.030:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 353.160886][T13370] loop0: detected capacity change from 0 to 8192 [ 353.199018][ T28] audit: type=1326 audit(353.040:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 353.199079][T13378] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3310'. [ 353.229484][ T28] audit: type=1326 audit(353.040:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13372 comm="syz.3.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078178ebe9 code=0x7ffc0000 [ 353.280147][T13370] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 353.350515][T13370] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 353.377717][T13370] REISERFS (device loop0): using ordered data mode [ 353.432755][T13370] reiserfs: using flush barriers [ 353.485845][T13370] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 353.522212][T13370] REISERFS (device loop0): checking transaction log (loop0) [ 353.757134][T13370] REISERFS (device loop0): Using tea hash to sort names [ 354.634692][T13412] sctp: [Deprecated]: syz.3.3328 (pid 13412) Use of int in max_burst socket option deprecated. [ 354.634692][T13412] Use struct sctp_assoc_value instead [ 355.005874][T13396] loop1: detected capacity change from 0 to 32768 [ 355.350787][T13424] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3335'. [ 355.809474][ T28] audit: type=1326 audit(355.750:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.0.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17d98ebe9 code=0x7ffc0000 [ 355.831992][T13432] syz.0.3339 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 355.858723][ T28] audit: type=1326 audit(355.750:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.0.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17d98ebe9 code=0x7ffc0000 [ 355.937405][ T28] audit: type=1326 audit(355.790:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.0.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd17d98ebe9 code=0x7ffc0000 [ 355.995356][ T28] audit: type=1326 audit(355.810:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.0.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17d98ebe9 code=0x7ffc0000 [ 356.078319][ T28] audit: type=1326 audit(355.850:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.0.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17d98ebe9 code=0x7ffc0000 [ 356.283284][T13446] loop1: detected capacity change from 0 to 64 [ 357.035939][T13440] loop0: detected capacity change from 0 to 32768 [ 357.150758][T13469] ceph: No source [ 357.418252][T13478] loop0: detected capacity change from 0 to 256 [ 357.488819][T13478] FAT-fs (loop0): Directory bread(block 64) failed [ 357.511008][T13478] FAT-fs (loop0): Directory bread(block 65) failed [ 357.524892][T13478] FAT-fs (loop0): Directory bread(block 66) failed [ 357.549281][T13478] FAT-fs (loop0): Directory bread(block 67) failed [ 357.569311][T13478] FAT-fs (loop0): Directory bread(block 68) failed [ 357.585946][T13478] FAT-fs (loop0): Directory bread(block 69) failed [ 357.593232][T13478] FAT-fs (loop0): Directory bread(block 70) failed [ 357.599930][T13478] FAT-fs (loop0): Directory bread(block 71) failed [ 357.645623][T13478] FAT-fs (loop0): Directory bread(block 72) failed [ 357.675249][T13478] FAT-fs (loop0): Directory bread(block 73) failed [ 358.102956][T13495] x_tables: duplicate underflow at hook 4 [ 358.967671][T13529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.261954][T13537] loop0: detected capacity change from 0 to 47 [ 359.610749][ T5863] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 359.628514][T13550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.829329][ T5863] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 359.850551][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.870507][ T5863] usb 4-1: Product: syz [ 359.882264][ T5863] usb 4-1: Manufacturer: syz [ 359.897252][ T5863] usb 4-1: SerialNumber: syz [ 359.922401][ T5863] usb 4-1: config 0 descriptor?? [ 360.182509][ T5863] hso 4-1:0.0: Failed to find INT IN ep [ 360.188937][ T5863] usb-storage 4-1:0.0: USB Mass Storage device detected [ 360.397479][T13575] overlayfs: conflicting options: userxattr,redirect_dir=on [ 360.442893][ T5172] usb 4-1: USB disconnect, device number 14 [ 360.452009][T13577] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 360.559091][T13581] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 360.586144][T13581] batman_adv: batadv0: Adding interface: wlan0 [ 360.600094][T13581] batman_adv: batadv0: The MTU of interface wlan0 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.670101][T13581] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 361.309009][T13606] netlink: 'syz.1.3423': attribute type 5 has an invalid length. [ 361.329423][T13605] netlink: 'syz.4.3421': attribute type 1 has an invalid length. [ 361.332252][T13607] loop0: detected capacity change from 0 to 256 [ 361.364206][T13609] SET target dimension over the limit! [ 361.374127][T13607] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.431574][T13607] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 361.514962][T13607] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 362.170667][T13633] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 362.479334][T13645] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 362.571772][T13647] x_tables: duplicate underflow at hook 4 [ 362.824869][T13657] loop1: detected capacity change from 0 to 256 [ 363.277515][T13673] loop3: detected capacity change from 0 to 1024 [ 363.300398][T13673] EXT4-fs: Ignoring removed i_version option [ 363.314884][T13675] x_tables: duplicate underflow at hook 4 [ 363.371751][T13673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.426611][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.604877][T13682] delete_channel: no stack [ 364.029340][T13700] loop0: detected capacity change from 0 to 128 [ 364.095777][T13700] autofs4:pid:13700:autofs_fill_super: called with bogus options [ 364.199036][T13704] loop3: detected capacity change from 0 to 64 [ 364.229670][T13706] xt_l2tp: wrong L2TP version: 0 [ 364.407566][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'. [ 364.567606][T13716] binder: 13714:13716 ioctl c0306201 200000000380 returned -14 [ 364.572013][T13717] loop0: detected capacity change from 0 to 2048 [ 364.620686][T13718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.726560][T13717] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 364.757244][ T50] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 364.768065][T13717] Remounting filesystem read-only [ 365.109750][T13732] loop0: detected capacity change from 0 to 2048 [ 365.122888][T13732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.167364][ T28] audit: type=1800 audit(365.120:94): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3483" name="file2" dev="loop0" ino=1336 res=0 errno=0 [ 365.692976][T13750] loop1: detected capacity change from 0 to 128 [ 365.771971][ T5788] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 365.789200][T13750] autofs4:pid:13750:autofs_fill_super: called with bogus options [ 366.089062][T13758] xt_connbytes: Forcing CT accounting to be enabled [ 366.148887][T13742] loop3: detected capacity change from 0 to 32768 [ 366.713124][T13775] loop0: detected capacity change from 0 to 1024 [ 366.781798][T13775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.877925][T13775] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 367.171159][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.210835][ T50] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 367.621006][T13805] No such timeout policy "syz1" [ 367.804282][T13813] loop1: detected capacity change from 0 to 1024 [ 367.895419][T13813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.952367][T13813] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 368.008049][T13810] loop3: detected capacity change from 0 to 8192 [ 368.111862][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.396239][T13831] loop3: detected capacity change from 0 to 64 [ 370.400500][T13898] bond0: Unable to set up delay as MII monitoring is disabled [ 371.512613][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3583'. [ 371.951118][ T5863] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 372.170924][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 372.182188][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.195585][T13965] netlink: 'syz.1.3596': attribute type 3 has an invalid length. [ 372.203815][T13965] netlink: 'syz.1.3596': attribute type 3 has an invalid length. [ 372.213163][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3596'. [ 372.230699][ T5863] usb 1-1: config 0 has no interfaces? [ 372.253083][ T5863] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 372.270345][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.284695][ T5863] usb 1-1: Product: syz [ 372.288944][ T5863] usb 1-1: Manufacturer: syz [ 372.294896][ T5863] usb 1-1: SerialNumber: syz [ 372.314761][ T5863] r8152-cfgselector 1-1: config 0 descriptor?? [ 372.546723][ T5863] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 372.756642][ T5172] usb 1-1: USB disconnect, device number 17 [ 373.033139][T13992] usb usb9: usbfs: process 13992 (syz.4.3606) did not claim interface 6 before use [ 373.881665][T14019] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 374.055940][T14027] xt_connbytes: Forcing CT accounting to be enabled [ 374.354450][T14036] loop0: detected capacity change from 0 to 512 [ 374.381474][T14036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.388286][T14036] EXT4-fs: Ignoring removed i_version option [ 374.541507][T14036] EXT4-fs (loop0): 1 orphan inode deleted [ 374.581613][T14036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.950707][ T5863] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 375.163004][ T5863] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 375.194845][ T5863] usb 1-1: config 0 has no interface number 0 [ 375.216974][ T5863] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 375.253266][ T5863] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 375.310118][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.350406][ T5863] usb 1-1: config 0 descriptor?? [ 375.370363][T14036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.382940][ T5863] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input20 [ 375.550549][T14042] loop3: detected capacity change from 0 to 32768 [ 375.634742][T14042] __jfs_setxattr: xattr_size = 82, new_size = 12061 [ 375.757035][ T5859] usb 1-1: USB disconnect, device number 18 [ 376.379821][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.602508][T14098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 376.700685][T14102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3659'. [ 376.709767][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3659'. [ 376.859011][T14108] loop3: detected capacity change from 0 to 1024 [ 377.031741][ T27] IPVS: starting estimator thread 0... [ 377.054004][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 377.106710][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3664'. [ 377.131407][T14112] IPVS: using max 17 ests per chain, 40800 per kthread [ 377.136667][T14114] ip6gretap1: entered allmulticast mode [ 377.795043][T14137] 9pnet: Found fid 0 not clunked [ 377.963967][T14144] netlink: 'syz.0.3679': attribute type 15 has an invalid length. [ 378.828663][T14176] loop0: detected capacity change from 0 to 256 [ 378.837560][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844499][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.876731][T14176] exfat: Unknown parameter '0xffffffffffffffff' [ 378.908451][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'. [ 378.917546][T14170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.951654][ T27] lo speed is unknown, defaulting to 1000 [ 379.160348][ T787] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 379.350416][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 379.365436][ T787] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 379.384866][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.415487][ T787] usb 1-1: config 0 has no interface number 0 [ 379.435801][ T787] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 379.467804][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.488726][ T787] usb 1-1: config 0 descriptor?? [ 379.508472][ T787] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 379.524326][ T787] usb 1-1: No valid video chain found. [ 379.729005][T14199] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 379.743484][ T787] usb 1-1: USB disconnect, device number 19 [ 379.916457][T14204] cgroup: none used incorrectly [ 380.210372][ T5844] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 380.300556][T14216] netlink: 'syz.4.3715': attribute type 10 has an invalid length. [ 380.308477][T14216] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 380.353382][T14216] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 380.430427][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 380.480778][ T5844] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 380.489894][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.530655][ T5844] usb 2-1: Product: syz [ 380.534888][ T5844] usb 2-1: Manufacturer: syz [ 380.539506][ T5844] usb 2-1: SerialNumber: syz [ 380.608795][ T5844] r8152-cfgselector 2-1: config 0 descriptor?? [ 381.009780][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3726'. [ 381.064122][ T5844] r8152-cfgselector 2-1: Unknown version 0x0000 [ 381.108415][ T5844] r8152-cfgselector 2-1: USB disconnect, device number 17 [ 381.661452][T14260] loop3: detected capacity change from 0 to 64 [ 382.517537][T14290] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3752'. [ 382.556753][T14290] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 382.571656][T14290] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 382.582911][T14292] loop3: detected capacity change from 0 to 512 [ 382.676379][T14292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 382.723648][T14292] loop3: Can't mount, would change RO state [ 382.822226][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.884091][T14300] loop0: detected capacity change from 0 to 256 [ 382.948409][T14300] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.991419][T14300] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 383.103754][T14300] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 383.210459][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'. [ 383.352490][T14310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3762'. [ 383.538082][T14313] loop1: detected capacity change from 0 to 2048 [ 383.547250][T14315] loop3: detected capacity change from 0 to 256 [ 383.576340][T14313] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 383.633570][T14317] loop0: detected capacity change from 0 to 2048 [ 383.647835][T14318] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.659406][ T5788] udevd[5788]: incorrect nilfs2 checksum on /dev/loop1 [ 383.710495][T14317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.737138][T14315] FAT-fs (loop3): Directory bread(block 64) failed [ 383.781249][T14315] FAT-fs (loop3): Directory bread(block 65) failed [ 383.838775][T14315] FAT-fs (loop3): Directory bread(block 66) failed [ 383.857490][T14313] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 383.872481][T14315] FAT-fs (loop3): Directory bread(block 67) failed [ 383.879227][T14315] FAT-fs (loop3): Directory bread(block 68) failed [ 383.903810][T14313] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 383.921810][T14315] FAT-fs (loop3): Directory bread(block 69) failed [ 383.940562][T14315] FAT-fs (loop3): Directory bread(block 70) failed [ 383.948693][T14315] FAT-fs (loop3): Directory bread(block 71) failed [ 383.954767][T14313] Remounting filesystem read-only [ 383.960681][T14313] NILFS (loop1): error -5 truncating bmap (ino=15) [ 383.992986][T14315] FAT-fs (loop3): Directory bread(block 72) failed [ 383.999588][T14315] FAT-fs (loop3): Directory bread(block 73) failed [ 384.057629][T14322] xt_TCPMSS: Only works on TCP SYN packets [ 384.125346][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 384.145449][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.168881][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 384.220276][ T5786] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 384.227631][ T5786] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 384.278716][ T5786] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 385.013955][T14350] netlink: 'syz.0.3779': attribute type 21 has an invalid length. [ 385.060692][T14350] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3779'. [ 385.183427][T14356] loop3: detected capacity change from 0 to 1764 [ 385.248318][T14356] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 385.295662][T14360] loop1: detected capacity change from 0 to 16 [ 385.342245][T14360] erofs: (device loop1): mounted with root inode @ nid 36. [ 385.414765][T14360] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 385.458325][T14360] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 385.494070][T14360] erofs: (device loop1): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 385.743335][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 385.964590][T14378] bridge_slave_0: left allmulticast mode [ 386.007377][T14378] bridge_slave_0: left promiscuous mode [ 386.022136][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.049781][T14378] bridge_slave_1: left allmulticast mode [ 386.064322][T14378] bridge_slave_1: left promiscuous mode [ 386.074673][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.104623][T14378] bond0: (slave bond_slave_0): Releasing backup interface [ 386.135168][T14378] bond0: (slave bond_slave_1): Releasing backup interface [ 386.199949][T14378] team0: Port device team_slave_0 removed [ 386.245324][T14378] team0: Port device team_slave_1 removed [ 386.258988][T14378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.276075][T14378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.287762][T14378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.302773][T14378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.329908][T14378] batman_adv: batadv0: Removing interface: macvtap0 [ 386.358019][T14390] autofs4:pid:14390:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 386.372937][T14378] bond0: (slave netdevsim0): Releasing backup interface [ 386.408475][T14378] batman_adv: batadv0: Removing interface: wlan0 [ 386.648265][T14394] loop1: detected capacity change from 0 to 1024 [ 386.724402][T14394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.813865][T14394] EXT4-fs error (device loop1): ext4_get_first_dir_block:3595: inode #11: comm syz.1.3810: directory missing '.' [ 386.841342][T14394] EXT4-fs (loop1): Remounting filesystem read-only [ 386.991303][T14407] tmpfs: Bad value for 'huge' [ 386.996536][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.260448][T14415] PKCS7: Unknown OID: [4] 0.0 [ 387.296222][T14415] PKCS7: Only support pkcs7_signedData type [ 387.664303][T14425] netlink: 'syz.1.3816': attribute type 10 has an invalid length. [ 387.759725][T14425] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 387.906086][T14405] loop0: detected capacity change from 0 to 32768 [ 388.031275][T14405] jfs_strtoUCS: char2uni returned -22. [ 388.054316][T14405] charset = cp949, char = 0xd4 [ 388.507464][T14445] loop1: detected capacity change from 0 to 2048 [ 388.567091][T14445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.865861][T14457] loop0: detected capacity change from 0 to 512 [ 389.323533][T14470] trusted_key: encrypted_key: master key parameter '' is invalid [ 389.579274][T14475] loop0: detected capacity change from 0 to 512 [ 389.691814][T14475] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 389.699957][T14475] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 389.768203][T14475] EXT4-fs (loop0): 1 truncate cleaned up [ 389.801730][T14475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.958988][T14475] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 390.069797][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.914568][T14516] loop0: detected capacity change from 0 to 128 [ 391.026417][T14516] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 391.115740][T14516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.302968][T14525] loop3: detected capacity change from 0 to 1024 [ 391.426925][ T5784] hfsplus: bad catalog entry type [ 391.971166][ T11] hfsplus: b-tree write err: -5, ino 4 [ 392.279227][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.312702][T14545] loop1: detected capacity change from 0 to 4096 [ 392.373961][T14545] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 392.420575][T14545] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 392.463224][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.492938][T14545] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 392.523646][T14545] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 392.549717][T14545] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 392.596826][T14538] loop0: detected capacity change from 0 to 32768 [ 392.597532][T14545] ntfs: volume version 3.1. [ 392.624723][T14545] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 392.659009][T14545] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 392.710271][T14545] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 392.744616][T14545] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 392.798604][T14545] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 392.819241][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.994097][ T3520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.471672][ T3520] : left promiscuous mode [ 393.942024][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.957987][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.967319][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.990957][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.015674][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 394.023266][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.409355][T14583] netlink: 'syz.1.3890': attribute type 21 has an invalid length. [ 394.642912][T14565] lo speed is unknown, defaulting to 1000 [ 395.239614][T14608] loop1: detected capacity change from 0 to 4096 [ 395.316189][T14608] ntfs: volume version 3.1. [ 395.536836][T14617] loop0: detected capacity change from 0 to 2048 [ 395.588637][T14617] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 395.674102][T14617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.733232][T14617] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 396.115038][ T5793] Bluetooth: hci1: command tx timeout [ 396.261231][T14636] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 396.268486][T14636] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 396.477080][T14565] chnl_net:caif_netlink_parms(): no params data found [ 396.575620][T14645] loop1: detected capacity change from 0 to 512 [ 396.694380][T14645] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 396.780490][T14645] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 396.850590][T14645] EXT4-fs (loop1): 1 truncate cleaned up [ 396.910602][T14645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.995466][T14645] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 397.060136][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.067636][T14565] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.070372][T14661] xt_l2tp: v2 sid > 0xffff: 262144 [ 397.121592][T14565] bridge_slave_0: entered allmulticast mode [ 397.129161][T14565] bridge_slave_0: entered promiscuous mode [ 397.236660][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.386739][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.416887][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.437567][T14565] bridge_slave_1: entered allmulticast mode [ 397.462364][T14565] bridge_slave_1: entered promiscuous mode [ 397.550438][ T5859] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 397.654722][T14672] loop1: detected capacity change from 0 to 8 [ 397.665783][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.765538][ T5859] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 397.775538][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.783881][ T3520] hsr_slave_0: left promiscuous mode [ 397.799514][ T5859] usb 1-1: Product: syz [ 397.804370][ T5859] usb 1-1: Manufacturer: syz [ 397.809014][ T5859] usb 1-1: SerialNumber: syz [ 397.820024][ T3520] hsr_slave_1: left promiscuous mode [ 397.829543][ T5859] usb 1-1: config 0 descriptor?? [ 397.838214][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.851876][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.889331][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.897405][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.917633][ T3520] batman_adv: batadv0: Removing interface: macvtap0 [ 397.941611][ T3520] bridge_slave_1: left allmulticast mode [ 397.957626][ T3520] bridge_slave_1: left promiscuous mode [ 397.965439][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.044965][ T5859] usb 1-1: ignoring: probably an ADSL modem [ 398.110743][ T3520] veth1_macvtap: left promiscuous mode [ 398.128274][ T3520] veth1_vlan: left promiscuous mode [ 398.180597][ T5793] Bluetooth: hci1: command tx timeout [ 398.248607][ T5859] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 398.276245][ T5859] usb 1-1: USB disconnect, device number 20 [ 399.082843][T14684] loop0: detected capacity change from 0 to 64 [ 399.439047][T14690] netlink: 1572 bytes leftover after parsing attributes in process `syz.0.3929'. [ 399.644110][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 399.705838][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 399.773602][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.829637][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.268833][ T5793] Bluetooth: hci1: command tx timeout [ 400.449659][ T3520] bond0 (unregistering): Released all slaves [ 400.531194][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.561139][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3925'. [ 400.784276][T14565] team0: Port device team_slave_0 added [ 400.833325][T14565] team0: Port device team_slave_1 added [ 401.025686][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.034412][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.078758][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.101617][T14705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3934'. [ 401.129649][T14707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3935'. [ 401.140067][T14707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3935'. [ 401.160803][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.167853][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.290257][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.605325][T14565] hsr_slave_0: entered promiscuous mode [ 401.622557][T14565] hsr_slave_1: entered promiscuous mode [ 401.967916][T14735] loop0: detected capacity change from 0 to 512 [ 402.094191][T14735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.289740][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.350850][ T5793] Bluetooth: hci1: command tx timeout [ 403.108256][T14732] loop1: detected capacity change from 0 to 32768 [ 403.759956][T14774] netlink: 'syz.1.3955': attribute type 21 has an invalid length. [ 403.785033][T14774] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 403.831320][T14774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3955'. [ 404.175893][T14782] loop1: detected capacity change from 0 to 256 [ 404.217298][T14782] exfat: Deprecated parameter 'namecase' [ 404.242278][T14782] exfat: Deprecated parameter 'namecase' [ 404.301377][T14782] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 404.343695][T14565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.399014][T14565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.434170][T14565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.503395][T14565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.864526][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.959000][T14565] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.017807][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.025058][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.079363][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.086744][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.293224][T14565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.531095][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'. [ 405.552202][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'. [ 406.015406][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.138270][T14846] loop1: detected capacity change from 0 to 256 [ 406.163484][T14565] veth0_vlan: entered promiscuous mode [ 406.198419][T14809] loop0: detected capacity change from 0 to 40427 [ 406.218972][T14565] veth1_vlan: entered promiscuous mode [ 406.266094][T14809] F2FS-fs (loop0): invalid crc value [ 406.268899][T14846] FAT-fs (loop1): Directory bread(block 64) failed [ 406.322767][T14846] FAT-fs (loop1): Directory bread(block 65) failed [ 406.329526][T14846] FAT-fs (loop1): Directory bread(block 66) failed [ 406.344111][T14809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 406.374296][T14565] veth0_macvtap: entered promiscuous mode [ 406.397292][T14846] FAT-fs (loop1): Directory bread(block 67) failed [ 406.433444][T14846] FAT-fs (loop1): Directory bread(block 68) failed [ 406.463744][T14565] veth1_macvtap: entered promiscuous mode [ 406.469954][T14846] FAT-fs (loop1): Directory bread(block 69) failed [ 406.488257][T14846] FAT-fs (loop1): Directory bread(block 70) failed [ 406.517102][T14846] FAT-fs (loop1): Directory bread(block 71) failed [ 406.547968][T14846] FAT-fs (loop1): Directory bread(block 72) failed [ 406.557369][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.579822][T14846] FAT-fs (loop1): Directory bread(block 73) failed [ 406.590458][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.610551][T14809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 406.620635][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.641512][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.692459][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.753439][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.794483][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.829773][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 406.829790][ T28] audit: type=1800 audit(406.780:95): pid=14809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3966" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 406.834991][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.948476][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.989415][ T5785] syz-executor: attempt to access beyond end of device [ 406.989415][ T5785] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 407.002278][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.014588][ T5785] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 407.064556][T14565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.074793][T14565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.085273][T14565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.102353][T14565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.447465][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.480360][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.553659][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.574662][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.113834][T14880] loop3: detected capacity change from 0 to 64 [ 408.202957][T14880] Trying to free block not in datazone [ 408.266440][T14883] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 408.391739][T14887] xt_ecn: cannot match TCP bits for non-tcp packets [ 408.690508][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3988'. [ 408.699749][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3988'. [ 408.755542][T14896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3988'. [ 408.782590][T14897] netlink: 'syz.0.3990': attribute type 5 has an invalid length. [ 408.793810][T14899] loop3: detected capacity change from 0 to 16 [ 408.840642][T14899] erofs: (device loop3): mounted with root inode @ nid 36. [ 409.394654][T14920] netlink: 'syz.4.3999': attribute type 7 has an invalid length. [ 409.430509][T14920] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3999'. [ 410.506888][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4016'. [ 411.682642][T14958] loop3: detected capacity change from 0 to 32768 [ 411.713066][T14958] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4013 (14958) [ 411.802298][T14958] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 411.839846][T14958] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 411.887118][T14958] BTRFS info (device loop3): force zlib compression, level 3 [ 411.947124][T14958] BTRFS info (device loop3): force clearing of disk cache [ 412.000371][T14958] BTRFS info (device loop3): setting nodatasum [ 412.039435][T14958] BTRFS info (device loop3): allowing degraded mounts [ 412.072948][T15014] netlink: 'syz.4.4034': attribute type 1 has an invalid length. [ 412.077512][T14958] BTRFS info (device loop3): enabling disk space caching [ 412.100131][T15014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4034'. [ 412.130317][T14958] BTRFS info (device loop3): disk space caching is enabled [ 412.489189][T14958] BTRFS info (device loop3): auto enabling async discard [ 412.541801][T15045] loop1: detected capacity change from 0 to 512 [ 412.564764][T14958] BTRFS info (device loop3): rebuilding free space tree [ 412.572108][T15045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 412.681595][T14958] BTRFS info (device loop3): disabling free space tree [ 412.688743][T15045] EXT4-fs (loop1): 1 truncate cleaned up [ 412.701076][T14958] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 412.711854][T15045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.788453][T14958] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 412.823749][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.182079][T14958] BTRFS warning (device loop3): get dev_stats failed, device not found [ 413.350888][T14565] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 413.413367][T15069] tmpfs: Bad value for 'mpol' [ 413.561005][ T787] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 413.671604][T15073] netlink: 'syz.4.4049': attribute type 3 has an invalid length. [ 413.762337][T15076] netlink: 'syz.3.4048': attribute type 1 has an invalid length. [ 413.830724][ T787] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 413.913331][ T787] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 413.932949][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.967780][ T787] usb 2-1: Product: syz [ 413.986682][ T787] usb 2-1: Manufacturer: syz [ 414.006835][ T787] usb 2-1: SerialNumber: syz [ 414.033644][ T787] usb 2-1: config 0 descriptor?? [ 414.175564][ T787] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 414.299697][T10261] udevd[10261]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.458192][ T5863] usb 2-1: USB disconnect, device number 18 [ 414.755755][T15098] xt_hashlimit: invalid interval [ 414.772463][T15100] raw_sendmsg: syz.0.4058 forgot to set AF_INET. Fix it! [ 415.041296][T15106] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4060'. [ 415.247885][T15108] loop0: detected capacity change from 0 to 4096 [ 415.279682][T15108] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 415.525810][T15108] ntfs: (device loop0): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 415.547026][T15108] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 415.572593][T15108] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 415.624449][T15126] cgroup: Invalid name [ 415.651549][T15108] ntfs: volume version 3.1. [ 416.328952][T15144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.384885][T15148] loop3: detected capacity change from 0 to 256 [ 416.510825][T15148] FAT-fs (loop3): Directory bread(block 64) failed [ 416.559265][T15148] FAT-fs (loop3): Directory bread(block 65) failed [ 416.581498][T15148] FAT-fs (loop3): Directory bread(block 66) failed [ 416.588111][T15148] FAT-fs (loop3): Directory bread(block 67) failed [ 416.618830][T15148] FAT-fs (loop3): Directory bread(block 68) failed [ 416.635952][T15148] FAT-fs (loop3): Directory bread(block 69) failed [ 416.665850][T15148] FAT-fs (loop3): Directory bread(block 70) failed [ 416.680372][T15148] FAT-fs (loop3): Directory bread(block 71) failed [ 416.699602][T15148] FAT-fs (loop3): Directory bread(block 72) failed [ 416.727305][T15148] FAT-fs (loop3): Directory bread(block 73) failed [ 417.203481][T15140] loop1: detected capacity change from 0 to 32768 [ 417.266403][T15140] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 417.290342][T15140] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.573835][T15140] XFS (loop1): Ending clean mount [ 417.596627][T15178] loop0: detected capacity change from 0 to 2048 [ 417.654354][T15178] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 417.730323][T15183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.863035][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.926504][T15178] syz.0.4088: attempt to access beyond end of device [ 417.926504][T15178] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 417.940071][T15185] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 417.967005][T15178] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 418.329953][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4093'. [ 418.770356][ T787] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 418.972331][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 419.001181][ T787] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 419.015317][ T787] usb 2-1: config 0 has no interface number 0 [ 419.031900][ T787] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 419.043825][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.085841][ T787] usb 2-1: Product: syz [ 419.090069][ T787] usb 2-1: Manufacturer: syz [ 419.115227][ T787] usb 2-1: SerialNumber: syz [ 419.136259][ T787] usb 2-1: config 0 descriptor?? [ 419.171849][ T787] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 419.187487][T15209] loop0: detected capacity change from 0 to 512 [ 419.209954][T15209] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 419.212482][ T787] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 419.258612][T15209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 419.274688][T15209] System zones: 0-2, 18-18, 34-34 [ 419.309406][T15209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.407805][ T787] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 419.472681][T15216] loop3: detected capacity change from 0 to 256 [ 419.491586][T15216] exfat: Deprecated parameter 'namecase' [ 419.517873][T15216] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 419.540052][T15216] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 419.554039][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.611997][ T787] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 419.633293][ T787] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 419.695418][ T787] usb 2-1: USB disconnect, device number 19 [ 419.746426][ T787] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 419.859717][T15221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4107'. [ 419.918643][ T28] audit: type=1326 audit(419.870:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 420.046983][ T28] audit: type=1326 audit(419.870:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 420.171445][ T28] audit: type=1326 audit(419.870:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 420.194063][ T28] audit: type=1326 audit(419.870:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 420.219512][ T28] audit: type=1326 audit(419.870:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.3.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 420.457834][T15235] overlay: Bad value for 'verity' [ 420.687418][T15241] loop0: detected capacity change from 0 to 512 [ 420.727603][T15243] loop1: detected capacity change from 0 to 512 [ 420.800042][T15243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 420.820075][T15241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.853362][T15243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 420.903492][T15243] System zones: 0-2, 18-18, 34-34 [ 420.941989][T15243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.979285][T15241] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.4117: bg 0: block 255: padding at end of block bitmap is not set [ 421.143188][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.179741][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.090414][ T5859] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 422.306658][ T5859] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 422.318738][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 422.351485][ T5859] usb 2-1: Product: syz [ 422.355730][ T5859] usb 2-1: SerialNumber: syz [ 422.385216][ T5859] usb 2-1: config 0 descriptor?? [ 422.388047][ T28] audit: type=1326 audit(422.340:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15290 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 422.460427][ T28] audit: type=1326 audit(422.340:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15290 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 422.507244][ T28] audit: type=1326 audit(422.390:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15290 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 422.572525][T15275] loop3: detected capacity change from 0 to 32768 [ 422.580922][ T28] audit: type=1326 audit(422.390:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15290 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 422.628426][ T28] audit: type=1326 audit(422.390:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15290 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 422.661313][ T5859] hso 2-1:0.0: Failed to find BULK IN ep [ 422.680445][T15275] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.4132 (15275) [ 422.717536][T15275] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 422.728198][T15275] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 422.737368][T15275] BTRFS info (device loop3): enabling ssd optimizations [ 422.770677][T15275] BTRFS info (device loop3): not using ssd optimizations [ 422.800233][T15275] BTRFS info (device loop3): turning off barriers [ 422.806739][T15275] BTRFS info (device loop3): using free space tree [ 422.878576][ T5859] usb 2-1: USB disconnect, device number 20 [ 423.385149][T14565] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 423.523866][T15323] loop0: detected capacity change from 0 to 4096 [ 423.721557][T15330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.756419][T15323] ntfs: (device loop0): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 423.769452][ T5788] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop3 scanned by udevd (5788) [ 423.872460][T15323] ntfs: volume version 3.1. [ 424.720983][T15351] loop3: detected capacity change from 0 to 512 [ 424.833489][T15351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 424.980977][T15351] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 425.042001][T15351] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 425.073610][T15351] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4161: Failed to acquire dquot type 0 [ 425.105024][T15366] netlink: 'syz.0.4167': attribute type 1 has an invalid length. [ 425.245566][T14565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 425.398609][T15373] ALSA: mixer_oss: invalid OSS volume 'u' [ 425.560372][T14858] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 425.750771][ T5859] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 425.761746][T14858] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 425.784948][T14858] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 425.794499][T14858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.803177][T14858] usb 1-1: Product: syz [ 425.807477][T14858] usb 1-1: Manufacturer: syz [ 425.812698][T14858] usb 1-1: SerialNumber: syz [ 425.821299][T14858] usb 1-1: config 0 descriptor?? [ 425.852981][T14858] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 425.898405][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.950560][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 425.965891][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.977164][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.987042][ T5859] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.001181][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.012712][ T5859] usb 4-1: config 0 descriptor?? [ 426.030038][ T5859] hub 4-1:0.0: USB hub found [ 426.114809][ T787] usb 1-1: USB disconnect, device number 21 [ 426.234919][ T5859] hub 4-1:0.0: 29 ports detected [ 426.242706][ T5859] hub 4-1:0.0: insufficient power available to use all downstream ports [ 426.441558][ T5859] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 426.459369][ T5859] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 426.482885][ T5859] usbhid 4-1:0.0: can't add hid device: -71 [ 426.489036][ T5859] usbhid: probe of 4-1:0.0 failed with error -71 [ 426.535620][ T5859] usb 4-1: USB disconnect, device number 15 [ 426.982262][T15395] ALSA: mixer_oss: invalid OSS volume 'u' [ 427.074111][T15398] xt_TCPMSS: Only works on TCP SYN packets [ 427.184750][T15400] loop1: detected capacity change from 0 to 256 [ 427.217826][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4186'. [ 427.230774][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4186'. [ 427.267032][T15404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4186'. [ 427.292773][ T28] audit: type=1800 audit(427.240:106): pid=15400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4185" name="file1" dev="loop1" ino=1048663 res=0 errno=0 [ 427.828718][T15424] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4196'. [ 428.060421][ T8] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 428.272445][ T8] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 428.290344][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.327932][ T8] usb 4-1: config 0 descriptor?? [ 428.381318][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 428.806729][ T8] gp8psk: usb out operation failed. [ 428.813180][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 428.870347][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 428.936932][ T8] usb 4-1: USB disconnect, device number 16 [ 429.083628][T15456] loop0: detected capacity change from 0 to 1024 [ 429.304275][T15462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4214'. [ 429.725577][T15480] loop3: detected capacity change from 0 to 256 [ 429.746323][T15480] exfat: Deprecated parameter 'namecase' [ 429.764990][T15480] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 429.954772][T15486] ..0ˆ: renamed from veth0_to_hsr (while UP) [ 430.122876][T15490] loop1: detected capacity change from 0 to 16 [ 430.163418][T15490] erofs: (device loop1): mounted with root inode @ nid 36. [ 430.221960][T15490] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 430.264606][T15490] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 430.309507][T15490] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 430.486137][T15500] loop3: detected capacity change from 0 to 256 [ 430.535687][T15500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 431.514162][T15539] virtiofs: Unknown parameter 'always' [ 431.928419][T15549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.980635][T15552] gtp0: entered promiscuous mode [ 432.106530][T15525] loop1: detected capacity change from 0 to 32768 [ 432.173565][T15525] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 432.334245][T15563] loop0: detected capacity change from 0 to 4096 [ 432.352545][T15563] ntfs3: loop0: It is recommened to use chkdsk. [ 432.399921][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 432.439239][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 432.478469][T15525] XFS (loop1): Ending clean mount [ 432.490495][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 432.498502][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 432.526512][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 432.539008][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 432.547818][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 432.557345][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 432.575250][T15563] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 432.591756][T15525] XFS (loop1): Quotacheck needed: Please wait. [ 432.688118][T15525] XFS (loop1): Quotacheck: Done. [ 432.980652][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.554316][T15588] loop0: detected capacity change from 0 to 4096 [ 433.623741][T15588] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 433.722265][T15597] "syz.4.4277" (15597) uses obsolete ecb(arc4) skcipher [ 434.388493][T15614] netlink: 'syz.3.4285': attribute type 21 has an invalid length. [ 434.407882][T15614] netlink: 'syz.3.4285': attribute type 15 has an invalid length. [ 434.417524][T15614] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4285'. [ 434.427910][T15614] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.437420][T15614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.445597][T15614] IPv6: NLM_F_CREATE should be set when creating new route [ 434.452972][T15614] IPv6: NLM_F_CREATE should be set when creating new route [ 434.460309][T15614] IPv6: NLM_F_CREATE should be set when creating new route [ 434.976069][T15636] x_tables: duplicate entry at hook 1 [ 435.130930][T15640] autofs4:pid:15640:autofs_fill_super: called with bogus options [ 435.206179][T15643] veth4: entered promiscuous mode [ 435.215243][T15643] veth4: entered allmulticast mode [ 435.405816][T15650] loop0: detected capacity change from 0 to 512 [ 435.446595][T15650] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.513511][T15650] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.4303: bad orphan inode 13 [ 435.560774][T15650] ext4_test_bit(bit=12, block=18) = 1 [ 435.587331][T15650] is_bad_inode(inode)=0 [ 435.592754][T15650] NEXT_ORPHAN(inode)=2130706432 [ 435.597701][T15650] max_ino=32 [ 435.602899][T15650] i_nlink=1 [ 435.607586][T15650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.786029][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.152042][T15669] loop3: detected capacity change from 0 to 4096 [ 436.345594][T15675] loop1: detected capacity change from 0 to 1764 [ 437.217432][T15696] loop3: detected capacity change from 0 to 4096 [ 437.238045][T15696] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 437.352483][T15696] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 437.359090][T15696] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 437.555158][ T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 437.577860][T14565] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 437.600570][T14565] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 437.607594][T14565] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 437.674703][ T42] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 437.960616][T15713] comedi comedi0: Minor -2147450880 is invalid! [ 438.125971][T15689] loop1: detected capacity change from 0 to 32768 [ 438.167698][T15689] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.4321 (15689) [ 438.249011][T15689] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 438.291215][T15689] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 438.299978][T15689] BTRFS info (device loop1): use zlib compression, level 3 [ 438.367717][T15689] BTRFS info (device loop1): turning on sync discard [ 438.395933][T15689] BTRFS info (device loop1): doing ref verification [ 438.439612][T15689] BTRFS info (device loop1): disabling tree log [ 438.464690][T15689] BTRFS info (device loop1): enabling tree log [ 438.490327][T15689] BTRFS info (device loop1): enabling ssd optimizations [ 438.497377][T15689] BTRFS info (device loop1): using spread ssd allocation scheme [ 438.547729][T15689] BTRFS info (device loop1): not using ssd optimizations [ 438.590544][T15689] BTRFS info (device loop1): not using spread ssd allocation scheme [ 438.621213][T15689] BTRFS info (device loop1): using free space tree [ 439.118163][ T5786] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 439.890437][T15777] netlink: 'syz.1.4355': attribute type 21 has an invalid length. [ 439.921473][T15750] loop0: detected capacity change from 0 to 32768 [ 440.039785][T15750] ialloc: diAlloc returned -5! [ 440.265374][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.272505][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.336193][T15783] loop1: detected capacity change from 0 to 512 [ 440.412944][T15783] EXT4-fs (loop1): 1 truncate cleaned up [ 440.420005][T15783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.618393][T15796] loop0: detected capacity change from 0 to 256 [ 440.667198][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.809544][T15796] FAT-fs (loop0): Directory bread(block 64) failed [ 440.838837][T15796] FAT-fs (loop0): Directory bread(block 65) failed [ 440.860554][T15796] FAT-fs (loop0): Directory bread(block 66) failed [ 440.867162][T15796] FAT-fs (loop0): Directory bread(block 67) failed [ 440.894919][T15796] FAT-fs (loop0): Directory bread(block 68) failed [ 440.928555][T15796] FAT-fs (loop0): Directory bread(block 69) failed [ 440.949529][T15796] FAT-fs (loop0): Directory bread(block 70) failed [ 440.980445][T15796] FAT-fs (loop0): Directory bread(block 71) failed [ 441.018843][T15796] FAT-fs (loop0): Directory bread(block 72) failed [ 441.047664][T15796] FAT-fs (loop0): Directory bread(block 73) failed [ 441.054778][T15808] netlink: 'syz.4.4368': attribute type 5 has an invalid length. [ 441.098236][T15809] netlink: 'syz.1.4369': attribute type 21 has an invalid length. [ 441.123738][T15809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4369'. [ 441.308044][T15813] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 441.858365][T15832] loop3: detected capacity change from 0 to 1024 [ 441.946026][T15832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.212496][T14565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.490323][ T5863] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 442.575363][ T28] audit: type=1326 audit(442.520:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 442.635190][ T28] audit: type=1326 audit(442.520:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 442.720386][ T28] audit: type=1326 audit(442.560:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 442.751130][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 442.766049][ T5863] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 442.780422][ T28] audit: type=1326 audit(442.560:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 442.790237][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.832102][ T5863] usb 2-1: Product: syz [ 442.836334][ T5863] usb 2-1: Manufacturer: syz [ 442.841556][ T5863] usb 2-1: SerialNumber: syz [ 442.847558][ T28] audit: type=1326 audit(442.560:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 443.093519][ T5863] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 443.137594][ T5863] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 443.174136][ T5863] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 443.191761][T15870] (null): rxe_set_mtu: Set mtu to 4096 [ 443.209022][T15870] rdma_rxe: rxe_newlink: failed to add lo [ 443.370715][ T787] usb 2-1: USB disconnect, device number 21 [ 443.383050][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 443.432031][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 443.468046][ T787] visor 2-1:1.0: device disconnected [ 443.540336][ T5863] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 443.683088][T15882] loop0: detected capacity change from 0 to 128 [ 443.746261][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 443.764705][T15884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4404'. [ 443.765690][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.777154][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4404'. [ 443.799159][ T5863] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 443.801919][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4404'. [ 443.809850][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.841654][ T5863] usb 4-1: config 0 descriptor?? [ 444.081739][ T787] usb 4-1: USB disconnect, device number 17 [ 444.105967][T15891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4407'. [ 444.121618][T15892] tmpfs: Bad value for 'mpol' [ 444.331053][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4410'. [ 444.367414][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4410'. [ 444.774035][T15910] loop1: detected capacity change from 0 to 256 [ 445.509772][T15936] Unknown options in mask 5 [ 446.223450][T15964] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 446.512041][T15972] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.976311][T15991] (null): rxe_set_mtu: Set mtu to 1024 [ 447.701109][T15991] infiniband syz!: set active [ 447.738838][T15991] infiniband syz!: added team_slave_0 [ 447.932680][T15991] RDS/IB: syz!: added [ 447.942210][T15991] smc: adding ib device syz! with port count 1 [ 447.958339][T15991] smc: ib device syz! port 1 has pnetid [ 448.460815][T16005] loop0: detected capacity change from 0 to 32768 [ 448.572901][T16005] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 448.597445][T16036] netlink: 'syz.4.4474': attribute type 64 has an invalid length. [ 448.610828][T16039] qrtr: Invalid version 195 [ 448.650544][T16036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'. [ 448.710741][T16036] netlink: 'syz.4.4474': attribute type 64 has an invalid length. [ 448.722106][T16036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'. [ 448.869609][T16044] loop1: detected capacity change from 0 to 16 [ 448.877158][T16005] XFS (loop0): Ending clean mount [ 448.899535][T16044] erofs: (device loop1): mounted with root inode @ nid 36. [ 448.943481][T16005] XFS (loop0): Quotacheck needed: Please wait. [ 449.108960][T16005] XFS (loop0): Quotacheck: Done. [ 449.377480][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 449.710564][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4485'. [ 450.556693][T16078] loop1: detected capacity change from 0 to 512 [ 450.612599][T16078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 450.856328][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 451.184880][T16093] loop3: detected capacity change from 0 to 1024 [ 451.955253][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 451.975739][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 452.000332][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'. [ 452.294316][T16116] loop0: detected capacity change from 0 to 1024 [ 452.391998][T16116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.444286][T16095] loop1: detected capacity change from 0 to 40427 [ 452.492624][T16095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 452.567945][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.655522][T16095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 453.410658][ T28] audit: type=1326 audit(453.350:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be9d8ebe9 code=0x7ffc0000 [ 453.504651][ T28] audit: type=1326 audit(453.350:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be9d8ebe9 code=0x7ffc0000 [ 453.596078][ T28] audit: type=1326 audit(453.400:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f1be9d8ebe9 code=0x7ffc0000 [ 453.627078][ T28] audit: type=1326 audit(453.400:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be9d8ebe9 code=0x7ffc0000 [ 453.715931][ T28] audit: type=1326 audit(453.400:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be9d8ebe9 code=0x7ffc0000 [ 453.794826][T16154] loop3: detected capacity change from 0 to 1764 [ 453.838201][T16154] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 453.940341][T16154] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 454.197188][T16164] loop0: detected capacity change from 0 to 2048 [ 454.222679][T16168] loop1: detected capacity change from 0 to 64 [ 454.294087][T16169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.320945][T16168] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 454.349787][T16169] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 454.384100][T16169] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 454.474825][T16169] Remounting filesystem read-only [ 454.611370][ T5785] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 454.633706][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 454.642280][ T5785] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 454.649626][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.690233][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.719875][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.760870][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 454.767648][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.803406][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.830227][ T5785] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 454.837598][ T5785] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 454.866457][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 454.890782][ T5785] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 454.898156][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.910819][T16177] loop3: detected capacity change from 0 to 2048 [ 454.918114][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.942503][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.952951][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 454.961185][ T5785] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 454.969639][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.981495][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 454.992924][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 455.006683][T16177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.040695][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 455.047461][ T5785] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 455.091120][ T5785] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 455.098492][ T5785] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 455.121205][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 455.368403][T16173] loop1: detected capacity change from 0 to 32768 [ 455.437183][T16173] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 455.519930][T16173] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 74 has 8388607 used bits but only 2048 total [ 455.543277][T16173] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 455.553359][T16173] OCFS2: File system is now read-only. [ 455.558963][T16173] (syz.1.4536,16173,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 455.567715][T16173] (syz.1.4536,16173,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 455.577161][T16173] (syz.1.4536,16173,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 455.585906][T16173] (syz.1.4536,16173,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 455.594170][T16173] (syz.1.4536,16173,1):ocfs2_mknod:385 ERROR: status = -30 [ 455.622016][T16173] (syz.1.4536,16173,1):ocfs2_mknod:502 ERROR: status = -30 [ 455.650299][T16173] (syz.1.4536,16173,1):ocfs2_create:676 ERROR: status = -30 [ 455.726571][ T5786] (syz-executor,5786,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 455.800246][ T5786] ocfs2: Unmounting device (7,1) on (node local) [ 456.295187][T16183] loop3: detected capacity change from 0 to 32768 [ 456.378497][T16183] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 456.503373][T14565] ocfs2: Unmounting device (7,3) on (node local) [ 456.840827][T16219] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 457.029869][ T5863] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 457.269595][ T5863] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 457.301008][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.309086][ T5863] usb 2-1: Product: syz [ 457.330264][ T5863] usb 2-1: Manufacturer: syz [ 457.334940][ T5863] usb 2-1: SerialNumber: syz [ 457.393264][ T5863] r8152-cfgselector 2-1: config 0 descriptor?? [ 457.438009][T16236] (null): rxe_set_mtu: Set mtu to 4096 [ 457.447661][T16236] rdma_rxe: rxe_newlink: failed to add lo [ 457.822240][ T5863] r8152-cfgselector 2-1: Unknown version 0x0000 [ 457.858361][ T5863] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 458.274310][T16265] loop0: detected capacity change from 0 to 512 [ 458.437599][T16265] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 458.483762][T16265] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 458.494488][T16265] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.4577: Failed to acquire dquot type 1 [ 458.521760][T16265] EXT4-fs (loop0): 1 truncate cleaned up [ 458.528846][T16265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.661620][T16265] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 458.706234][T16265] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 458.757739][T16265] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.4577: Failed to acquire dquot type 1 [ 458.774278][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4584'. [ 458.785414][T16283] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4584'. [ 458.809311][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4584'. [ 458.932950][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.039691][T16289] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4589'. [ 460.372901][T16340] loop3: detected capacity change from 0 to 512 [ 460.397809][T16340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 460.490612][T16340] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 460.542212][T16340] EXT4-fs (loop3): 1 truncate cleaned up [ 460.549248][T16340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.699808][T16350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4617'. [ 460.811072][T14565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.997633][T16356] ubi8: attaching mtd0 [ 461.030990][T16356] ubi8: scanning is finished [ 461.035670][T16356] ubi8: empty MTD device detected [ 461.102420][T16336] loop0: detected capacity change from 0 to 32768 [ 461.137646][T16336] (syz.0.4611,16336,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.174410][T16336] (syz.0.4611,16336,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.252719][T16356] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 461.289108][T16336] JBD2: Ignoring recovery information on journal [ 461.309944][T16356] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 461.310026][T16356] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 461.310044][T16356] ubi8: VID header offset: 64 (aligned 64), data offset: 128 [ 461.310063][T16356] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 461.310079][T16356] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 461.310097][T16356] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 460322424 [ 461.310118][T16356] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 461.316282][T16359] ubi8: background thread "ubi_bgt8d" started, PID 16359 [ 461.439198][T16336] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 461.759936][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 461.938607][T16373] veth3: entered allmulticast mode [ 462.218159][T16381] loop3: detected capacity change from 0 to 256 [ 462.663497][T16393] loop1: detected capacity change from 0 to 2048 [ 462.711589][T16393] NILFS (loop1): invalid segment: Magic number mismatch [ 462.718614][T16393] NILFS (loop1): trying rollback from an earlier position [ 462.790622][T16393] NILFS (loop1): recovery complete [ 462.805466][T16398] netlink: 'syz.0.4638': attribute type 3 has an invalid length. [ 462.840461][T16399] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.206576][T16407] xt_SECMARK: invalid mode: 2 [ 463.438254][T16417] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4648'. [ 463.824824][T16435] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4656'. [ 464.223681][T16446] usb usb8: usbfs: process 16446 (syz.0.4661) did not claim interface 0 before use [ 464.238048][ T28] audit: type=1326 audit(464.190:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 464.289498][ T28] audit: type=1326 audit(464.190:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 464.329884][ T28] audit: type=1326 audit(464.240:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 464.356679][T16452] netlink: 'syz.1.4664': attribute type 1 has an invalid length. [ 464.380232][T16452] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4664'. [ 464.406129][ T28] audit: type=1326 audit(464.240:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 464.482886][ T28] audit: type=1326 audit(464.240:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16447 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2df8ebe9 code=0x7ffc0000 [ 464.806812][T16467] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4671'. [ 464.840951][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.866079][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.890121][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.924460][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.993556][T16467] batadv_slave_1: entered promiscuous mode [ 465.688632][T16493] vlan0: entered promiscuous mode [ 465.798734][T16495] loop1: detected capacity change from 0 to 1024 [ 466.238883][ T28] audit: type=1326 audit(466.190:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 466.297794][ T28] audit: type=1326 audit(466.190:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 466.357658][ T28] audit: type=1326 audit(466.230:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16504 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 466.410260][ T28] audit: type=1326 audit(466.230:125): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=16504 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 466.449491][ T28] audit: type=1326 audit(466.230:126): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=unconfined pid=16504 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc098ebe9 code=0x7ffc0000 [ 466.594363][T16509] loop1: detected capacity change from 0 to 2048 [ 466.642707][T16509] NILFS (loop1): unrecognized mount option ">" [ 466.901392][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 466.909316][T16499] loop0: detected capacity change from 0 to 32768 [ 467.004120][T16499] JBD2: Ignoring recovery information on journal [ 467.164527][T16499] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 467.228047][T16524] loop1: detected capacity change from 0 to 512 [ 467.272953][T16499] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 467.273116][T16499] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 467.309147][T16499] OCFS2: File system is now read-only. [ 467.316632][T16499] (syz.0.4687,16499,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 467.326210][T16499] (syz.0.4687,16499,0):ocfs2_mknod:334 ERROR: status = -117 [ 467.334846][T16499] (syz.0.4687,16499,0):ocfs2_mknod:502 ERROR: status = -117 [ 467.390359][T16524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.495393][T16524] Option 'óÉ™Z³uû±›ê]ïŽ' to dns_resolver key: bad/missing value [ 467.512247][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 467.569289][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.876683][T16538] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4705'. [ 468.402577][T16552] loop3: detected capacity change from 0 to 1764 [ 468.677553][T16558] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4714'. [ 468.837241][T16542] loop0: detected capacity change from 0 to 40427 [ 468.858019][T16542] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 468.870054][T16542] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 468.888341][T16542] F2FS-fs (loop0): invalid crc value [ 468.903578][T16542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 469.011880][T16542] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 469.022224][T16542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 469.148274][T16542] syz.0.4708: attempt to access beyond end of device [ 469.148274][T16542] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 469.205768][T16574] kernel profiling enabled (shift: 62) [ 469.213521][T16574] profiling shift: 62 too large [ 469.538107][T16582] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 470.123616][T16598] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 470.136384][T16598] netlink: 'syz.1.4733': attribute type 2 has an invalid length. [ 470.156767][T16598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4733'. [ 470.768516][T16622] program syz.4.4744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.779689][T16622] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.859707][T16625] loop0: detected capacity change from 0 to 1024 [ 471.254857][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'. [ 471.281532][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 471.656457][T16646] netlink: 'syz.0.4755': attribute type 2 has an invalid length. [ 471.784194][T16631] loop3: detected capacity change from 0 to 40427 [ 471.848500][T16650] loop1: detected capacity change from 0 to 256 [ 471.866450][T16650] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.886424][T16631] F2FS-fs (loop3): Found nat_bits in checkpoint [ 471.933511][T16650] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.115927][T16631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 473.472883][T16698] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 473.667890][T16686] loop3: detected capacity change from 0 to 32768 [ 473.803262][T16705] loop1: detected capacity change from 0 to 256 [ 473.874746][T16705] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 473.900385][T16705] FAT-fs (loop1): Filesystem has been set read-only [ 474.016283][ T5786] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 474.664746][T16727] delete_channel: no stack [ 475.334405][T16750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4804'. [ 475.340762][T16752] netlink: 'syz.0.4806': attribute type 27 has an invalid length. [ 476.419701][T16744] loop3: detected capacity change from 0 to 40427 [ 476.470370][T16744] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 476.478202][T16744] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 476.543703][T16744] F2FS-fs (loop3): invalid crc value [ 476.565225][T16744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 476.870325][T16744] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 476.920214][T16744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 476.938544][T16800] loop0: detected capacity change from 0 to 1024 [ 477.058567][T16800] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.083946][T16744] syz.3.4803: attempt to access beyond end of device [ 477.083946][T16744] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 477.168437][T16800] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.4823: Invalid block bitmap block 0 in block_group 0 [ 477.240440][T16800] Quota error (device loop0): write_blk: dquota write failed [ 477.250642][T16800] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 477.261307][T16800] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.4823: Failed to acquire dquot type 0 [ 477.320941][T16800] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.4823: Freeing blocks not in datazone - block = 0, count = 4096 [ 477.390123][T16800] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.4823: Invalid inode bitmap blk 0 in block_group 0 [ 477.428749][T16800] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 477.445947][ T1121] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 477.463284][T16800] EXT4-fs (loop0): 1 orphan inode deleted [ 477.466167][ T1121] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 0 [ 477.483692][T16800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.036865][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.324580][T16834] netlink: 'syz.1.4832': attribute type 2 has an invalid length. [ 478.356169][T16834] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4832'. [ 478.707501][T16844] loop0: detected capacity change from 0 to 64 [ 478.859272][T16844] hfs: request for non-existent node 16777216 in B*Tree [ 478.894862][T16844] hfs: request for non-existent node 16777216 in B*Tree [ 478.928838][T16844] hfs: request for non-existent node 16777216 in B*Tree [ 478.942846][T16844] hfs: request for non-existent node 16777216 in B*Tree [ 479.001648][T16844] [ 479.004049][T16844] ====================================================== [ 479.011101][T16844] WARNING: possible circular locking dependency detected [ 479.018155][T16844] 6.6.101-syzkaller #0 Not tainted [ 479.023294][T16844] ------------------------------------------------------ [ 479.030341][T16844] syz.0.4837/16844 is trying to acquire lock: [ 479.036431][T16844] ffff8880651960b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 479.046035][T16844] [ 479.046035][T16844] but task is already holding lock: [ 479.053434][T16844] ffff88805d4d34f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 479.064282][T16844] [ 479.064282][T16844] which lock already depends on the new lock. [ 479.064282][T16844] [ 479.074812][T16844] [ 479.074812][T16844] the existing dependency chain (in reverse order) is: [ 479.083855][T16844] [ 479.083855][T16844] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 479.093128][T16844] __mutex_lock+0x129/0xcc0 [ 479.098209][T16844] hfs_extend_file+0xdb/0x1220 [ 479.103548][T16844] hfs_bmap_reserve+0x107/0x430 [ 479.108975][T16844] __hfs_ext_write_extent+0x1fa/0x470 [ 479.114925][T16844] __hfs_ext_cache_extent+0x6b/0x9b0 [ 479.120769][T16844] hfs_extend_file+0x317/0x1220 [ 479.126174][T16844] hfs_get_block+0x3d8/0xbd0 [ 479.131415][T16844] __block_write_begin_int+0x566/0x1ad0 [ 479.137539][T16844] block_write_begin+0x9a/0x1e0 [ 479.142963][T16844] cont_write_begin+0x5c8/0x7e0 [ 479.148381][T16844] hfs_write_begin+0x8b/0xd0 [ 479.153585][T16844] cont_write_begin+0x2ad/0x7e0 [ 479.159011][T16844] hfs_write_begin+0x8b/0xd0 [ 479.164169][T16844] hfs_file_truncate+0x191/0x9b0 [ 479.169665][T16844] hfs_inode_setattr+0x4af/0x6e0 [ 479.175170][T16844] notify_change+0xb0d/0xe10 [ 479.180323][T16844] do_truncate+0x19b/0x220 [ 479.185291][T16844] vfs_truncate+0x266/0x300 [ 479.190350][T16844] do_sys_truncate+0xe0/0x1a0 [ 479.195584][T16844] do_syscall_64+0x55/0xb0 [ 479.200568][T16844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.207034][T16844] [ 479.207034][T16844] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 479.215180][T16844] __lock_acquire+0x2ddb/0x7c80 [ 479.220592][T16844] lock_acquire+0x197/0x410 [ 479.225659][T16844] __mutex_lock+0x129/0xcc0 [ 479.230733][T16844] hfs_find_init+0x15f/0x1d0 [ 479.235891][T16844] hfs_extend_file+0x2ef/0x1220 [ 479.241301][T16844] hfs_bmap_reserve+0x107/0x430 [ 479.246721][T16844] hfs_cat_move+0x18d/0x930 [ 479.251774][T16844] hfs_rename+0x1dc/0x2c0 [ 479.256662][T16844] vfs_rename+0xb96/0xec0 [ 479.261554][T16844] do_renameat2+0x8a1/0xc70 [ 479.266611][T16844] __x64_sys_rename+0x86/0x90 [ 479.271845][T16844] do_syscall_64+0x55/0xb0 [ 479.276818][T16844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.283281][T16844] [ 479.283281][T16844] other info that might help us debug this: [ 479.283281][T16844] [ 479.293537][T16844] Possible unsafe locking scenario: [ 479.293537][T16844] [ 479.301018][T16844] CPU0 CPU1 [ 479.306413][T16844] ---- ---- [ 479.311803][T16844] lock(&HFS_I(tree->inode)->extents_lock); [ 479.317817][T16844] lock(&tree->tree_lock#2/1); [ 479.325239][T16844] lock(&HFS_I(tree->inode)->extents_lock); [ 479.333776][T16844] lock(&tree->tree_lock#2/1); [ 479.338684][T16844] [ 479.338684][T16844] *** DEADLOCK *** [ 479.338684][T16844] [ 479.346861][T16844] 6 locks held by syz.0.4837/16844: [ 479.352090][T16844] #0: ffff888057966418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 479.361408][T16844] #1: ffff88805d4d4a38 (&type->i_mutex_dir_key#18/1){+.+.}-{3:3}, at: do_renameat2+0x427/0xc70 [ 479.371928][T16844] #2: ffff88805d4d43b8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: lock_two_nondirectories+0x1ab/0x270 [ 479.383397][T16844] #3: ffff88805d4d50b8 (&sb->s_type->i_mutex_key#24/4){+.+.}-{3:3}, at: vfs_rename+0x69b/0xec0 [ 479.393914][T16844] #4: ffff8880651940b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 479.403748][T16844] #5: ffff88805d4d34f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 479.415039][T16844] [ 479.415039][T16844] stack backtrace: [ 479.420971][T16844] CPU: 1 PID: 16844 Comm: syz.0.4837 Not tainted 6.6.101-syzkaller #0 [ 479.429168][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.439274][T16844] Call Trace: [ 479.442588][T16844] [ 479.445562][T16844] dump_stack_lvl+0x16c/0x230 [ 479.450282][T16844] ? load_image+0x3b0/0x3b0 [ 479.454835][T16844] ? show_regs_print_info+0x20/0x20 [ 479.460078][T16844] ? print_circular_bug+0x12b/0x1a0 [ 479.465325][T16844] check_noncircular+0x2bd/0x3c0 [ 479.470307][T16844] ? print_deadlock_bug+0x5d0/0x5d0 [ 479.475559][T16844] ? lockdep_lock+0xe0/0x220 [ 479.480197][T16844] ? _find_first_zero_bit+0xd3/0x100 [ 479.485540][T16844] __lock_acquire+0x2ddb/0x7c80 [ 479.490452][T16844] ? lock_chain_count+0x20/0x20 [ 479.495372][T16844] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 479.501320][T16844] ? verify_lock_unused+0x140/0x140 [ 479.506568][T16844] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 479.512516][T16844] ? _raw_spin_unlock+0x40/0x40 [ 479.517434][T16844] ? stack_trace_save+0x9c/0xe0 [ 479.522325][T16844] ? stack_trace_snprint+0xf0/0xf0 [ 479.527494][T16844] lock_acquire+0x197/0x410 [ 479.532072][T16844] ? hfs_find_init+0x15f/0x1d0 [ 479.536891][T16844] ? hfs_extend_file+0x2ef/0x1220 [ 479.541961][T16844] ? hfs_bmap_reserve+0x107/0x430 [ 479.547046][T16844] ? do_syscall_64+0x55/0xb0 [ 479.551674][T16844] ? __might_sleep+0xe0/0xe0 [ 479.556307][T16844] ? read_lock_is_recursive+0x20/0x20 [ 479.561741][T16844] __mutex_lock+0x129/0xcc0 [ 479.566281][T16844] ? hfs_find_init+0x15f/0x1d0 [ 479.571108][T16844] ? hfs_find_init+0x15f/0x1d0 [ 479.575917][T16844] ? mutex_lock_nested+0x20/0x20 [ 479.580901][T16844] ? __kmem_cache_alloc_node+0x13e/0x260 [ 479.586583][T16844] ? hfs_find_init+0x88/0x1d0 [ 479.591310][T16844] ? hfs_find_init+0x88/0x1d0 [ 479.596040][T16844] ? __kmalloc+0xe2/0x240 [ 479.600432][T16844] hfs_find_init+0x15f/0x1d0 [ 479.605075][T16844] hfs_extend_file+0x2ef/0x1220 [ 479.609969][T16844] ? hfs_get_block+0xbd0/0xbd0 [ 479.614776][T16844] ? rcu_is_watching+0x15/0xb0 [ 479.619601][T16844] ? trace_contention_end+0x39/0xe0 [ 479.624840][T16844] ? __mutex_lock+0x304/0xcc0 [ 479.629574][T16844] ? hfs_find_init+0x15f/0x1d0 [ 479.634399][T16844] ? mutex_lock_nested+0x20/0x20 [ 479.639390][T16844] hfs_bmap_reserve+0x107/0x430 [ 479.644298][T16844] hfs_cat_move+0x18d/0x930 [ 479.648843][T16844] ? lockdep_hardirqs_on+0x98/0x150 [ 479.654094][T16844] ? hfs_cat_delete+0x6c0/0x6c0 [ 479.658993][T16844] ? preempt_schedule_common+0x82/0xc0 [ 479.664497][T16844] ? preempt_schedule+0xab/0xc0 [ 479.669396][T16844] ? rcu_is_watching+0x15/0xb0 [ 479.674215][T16844] hfs_rename+0x1dc/0x2c0 [ 479.678583][T16844] ? hfs_mkdir+0xe0/0xe0 [ 479.682860][T16844] vfs_rename+0xb96/0xec0 [ 479.687236][T16844] ? __ia32_sys_link+0x90/0x90 [ 479.692041][T16844] ? _raw_spin_unlock+0x28/0x40 [ 479.696939][T16844] ? bpf_lsm_path_rename+0x9/0x10 [ 479.702019][T16844] ? security_path_rename+0x17c/0x200 [ 479.707441][T16844] do_renameat2+0x8a1/0xc70 [ 479.711997][T16844] ? fsnotify_move+0x4e0/0x4e0 [ 479.716791][T16844] ? __check_object_size+0x506/0xa30 [ 479.722117][T16844] ? strncpy_from_user+0x197/0x2e0 [ 479.727271][T16844] ? getname_flags+0x20a/0x500 [ 479.732080][T16844] __x64_sys_rename+0x86/0x90 [ 479.736796][T16844] do_syscall_64+0x55/0xb0 [ 479.741253][T16844] ? clear_bhb_loop+0x40/0x90 [ 479.745968][T16844] ? clear_bhb_loop+0x40/0x90 [ 479.750681][T16844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.756612][T16844] RIP: 0033:0x7fd17d98ebe9 [ 479.761054][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.780704][T16844] RSP: 002b:00007fd17e730038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 479.789147][T16844] RAX: ffffffffffffffda RBX: 00007fd17dbb5fa0 RCX: 00007fd17d98ebe9 [ 479.797134][T16844] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 479.805118][T16844] RBP: 00007fd17da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 479.813096][T16844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.821083][T16844] R13: 00007fd17dbb6038 R14: 00007fd17dbb5fa0 R15: 00007ffd304808b8 [ 479.829083][T16844] [ 479.855622][T16844] hfs: request for non-existent node 16777216 in B*Tree [ 479.862722][T16844] hfs: request for non-existent node 16777216 in B*Tree