last executing test programs: 1.921870437s ago: executing program 1 (id=4143): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:trusted: 00000000000000000061 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.795306995s ago: executing program 1 (id=4146): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) 1.625247115s ago: executing program 1 (id=4151): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) 1.497592812s ago: executing program 1 (id=4155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) 1.333647282s ago: executing program 1 (id=4159): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1, 0x5f9, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1.060011477s ago: executing program 1 (id=4163): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.059843908s ago: executing program 2 (id=4164): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000600000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40810) 1.048523169s ago: executing program 0 (id=4173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 937.787195ms ago: executing program 4 (id=4167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 937.303715ms ago: executing program 0 (id=4168): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000880) 822.118422ms ago: executing program 0 (id=4170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf2507", @ANYRES32], 0x40}}, 0x0) 792.054054ms ago: executing program 4 (id=4171): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x828}, 0x50) 771.127825ms ago: executing program 2 (id=4172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x50}}, 0x0) 733.155137ms ago: executing program 3 (id=4174): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 726.977877ms ago: executing program 0 (id=4175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@getsa={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800c) 691.457089ms ago: executing program 4 (id=4176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f727400240007800600054000000000060004400000000008000640000000000800080099f7cd600500010007000000050004"], 0x6c}}, 0x0) 613.095424ms ago: executing program 2 (id=4177): unshare(0x22020600) landlock_restrict_self(0xffffffffffffffff, 0x0) 612.561614ms ago: executing program 3 (id=4178): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 591.163015ms ago: executing program 4 (id=4179): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xc3680027}) 566.746627ms ago: executing program 0 (id=4180): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@utf8no}, {@rodir}, {@shortname_mixed}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@utf8}]}, 0x66, 0x33f, &(0x7f0000000480)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 514.04889ms ago: executing program 3 (id=4181): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x9, 0x1) 487.913682ms ago: executing program 4 (id=4182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a00)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31089, 0x64124}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 397.345366ms ago: executing program 2 (id=4183): r0 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000002c0)={0x1, 0x5}) 366.535739ms ago: executing program 3 (id=4193): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x4}}, 0x10) 365.941919ms ago: executing program 4 (id=4184): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 285.557903ms ago: executing program 2 (id=4185): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f00, 0x40, 0x3fffffe, 0x0, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@noop]}}}}}) 213.761907ms ago: executing program 3 (id=4186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007440000000e0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800b0001"], 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 101.197114ms ago: executing program 3 (id=4187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf8, 0x30, 0x1, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x74, 0x2, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe01}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 45.610787ms ago: executing program 0 (id=4188): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8911, &(0x7f00000005c0)="b2d6dbcfa6a2c43a") 0s ago: executing program 2 (id=4189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) kernel console output (not intermixed with test programs): attempt to clear invalid blocks 2 len 1 [ 184.105983][ T8814] EXT4-fs (loop0): Remounting filesystem read-only [ 184.149573][ T8814] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 184.250005][ T8831] loop3: detected capacity change from 0 to 64 [ 184.276917][ T8814] EXT4-fs (loop0): Remounting filesystem read-only [ 184.294084][ T8814] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2058: invalid indirect mapped block 1819239214 (level 0) [ 184.364782][ T8814] EXT4-fs (loop0): Remounting filesystem read-only [ 184.395134][ T8814] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2058: invalid indirect mapped block 1819239214 (level 1) [ 184.425466][ T8810] loop4: detected capacity change from 0 to 40427 [ 184.483090][ T8814] EXT4-fs (loop0): Remounting filesystem read-only [ 184.488718][ T8810] F2FS-fs (loop4): invalid crc value [ 184.508779][ T8814] EXT4-fs (loop0): 1 truncate cleaned up [ 184.513252][ T8810] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 184.523249][ T8814] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 184.564782][ T8810] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.713054][ T8848] loop2: detected capacity change from 0 to 64 [ 184.752834][ T8810] F2FS-fs (loop4): recover fsync data on readonly fs [ 184.805115][ T8810] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 184.845869][ T8810] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.162010][ T8865] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.216007][ T8865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.294344][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2086'. [ 185.319966][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2086'. [ 185.563645][ T8889] binfmt_misc: register: failed to install interpreter file ./file0 [ 185.927710][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 186.644964][ T8901] loop3: detected capacity change from 0 to 32768 [ 186.667427][ T8906] loop0: detected capacity change from 0 to 32768 [ 186.791240][ T4385] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.802768][ T8906] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 186.802768][ T8906] [ 186.989748][ T8952] netlink: 800 bytes leftover after parsing attributes in process `syz.0.2121'. [ 187.027075][ T8952] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.2121'. [ 187.061194][ T4385] usb 2-1: Using ep0 maxpacket: 32 [ 187.191458][ T4385] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 187.199707][ T4385] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 187.256265][ T4385] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 187.322604][ T4385] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 187.371226][ T4385] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 187.416070][ T4385] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.641512][ T4385] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 187.650640][ T4385] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 187.692257][ T4385] usb 2-1: Product: syz [ 187.696497][ T4385] usb 2-1: Manufacturer: syz [ 187.717368][ T4385] usb 2-1: SerialNumber: syz [ 187.755688][ T4385] usb 2-1: config 0 descriptor?? [ 187.796352][ T4385] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 187.832464][ T4385] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 188.051523][ T8939] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 188.070281][ T8958] loop4: detected capacity change from 0 to 32768 [ 188.080806][ T4385] usb 2-1: USB disconnect, device number 5 [ 188.094388][ T4385] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 188.177052][ T8958] blkno = 8ed2c, nblocks = 1 [ 188.188140][ T8958] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 188.188140][ T8958] [ 188.245800][ T8958] ERROR: (device loop4): remounting filesystem as read-only [ 188.253620][ T8958] ialloc: diAlloc returned -17! [ 188.370143][ T8994] loop2: detected capacity change from 0 to 4096 [ 188.425763][ T8994] __ntfs_warning: 8 callbacks suppressed [ 188.425782][ T8994] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 188.506954][ T8994] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 188.583559][ T8994] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 188.692150][ T8994] ntfs: volume version 3.1. [ 188.778376][ T9019] loop3: detected capacity change from 0 to 128 [ 188.907477][ T9019] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 188.982055][ T9019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.007570][ T9024] xt_CT: No such helper "syz0" [ 189.208826][ T9043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2162'. [ 189.218187][ T4233] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.338953][ T9047] loop1: detected capacity change from 0 to 512 [ 189.347034][ T9051] loop2: detected capacity change from 0 to 128 [ 189.410092][ T9051] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,noload,,errors=continue. Quota mode: none. [ 189.426734][ T9051] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.476880][ T9051] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.2169: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 189.503094][ T9047] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 189.517509][ T9047] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.577004][ T9063] loop3: detected capacity change from 0 to 2048 [ 189.643264][ T9065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.683650][ T9063] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 189.705544][ T9063] Remounting filesystem read-only [ 189.753512][ T4233] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.782952][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.792763][ T4233] usb 5-1: Product: syz [ 189.797251][ T4233] usb 5-1: Manufacturer: syz [ 189.826255][ T4233] usb 5-1: SerialNumber: syz [ 189.892147][ T4233] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 189.941952][ T9078] loop0: detected capacity change from 0 to 256 [ 190.035618][ T9078] FAT-fs (loop0): Directory bread(block 64) failed [ 190.068993][ T9078] FAT-fs (loop0): Directory bread(block 65) failed [ 190.104183][ T9078] FAT-fs (loop0): Directory bread(block 66) failed [ 190.111455][ T9078] FAT-fs (loop0): Directory bread(block 67) failed [ 190.138617][ T9078] FAT-fs (loop0): Directory bread(block 68) failed [ 190.171438][ T9078] FAT-fs (loop0): Directory bread(block 69) failed [ 190.192799][ T9078] FAT-fs (loop0): Directory bread(block 70) failed [ 190.216409][ T9078] FAT-fs (loop0): Directory bread(block 71) failed [ 190.272519][ T9078] FAT-fs (loop0): Directory bread(block 72) failed [ 190.311475][ T9078] FAT-fs (loop0): Directory bread(block 73) failed [ 190.492608][ T4233] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.524599][ T9100] loop2: detected capacity change from 0 to 2048 [ 190.650461][ T9106] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.679148][ T9100] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 190.705883][ T9100] Remounting filesystem read-only [ 190.948786][ T4660] usb 5-1: USB disconnect, device number 11 [ 191.127569][ T9128] loop3: detected capacity change from 0 to 256 [ 191.161298][ T8353] Bluetooth: hci1: command 0x0406 tx timeout [ 191.177670][ T8353] Bluetooth: hci0: command 0x0406 tx timeout [ 191.198594][ T8353] Bluetooth: hci3: command 0x0406 tx timeout [ 191.211599][ T8353] Bluetooth: hci2: command 0x0406 tx timeout [ 191.231156][ T8353] Bluetooth: hci4: command 0x0406 tx timeout [ 191.290248][ T9128] FAT-fs (loop3): Directory bread(block 64) failed [ 191.317648][ T9128] FAT-fs (loop3): Directory bread(block 65) failed [ 191.346096][ T9128] FAT-fs (loop3): Directory bread(block 66) failed [ 191.358171][ T9103] loop1: detected capacity change from 0 to 32768 [ 191.362715][ T9128] FAT-fs (loop3): Directory bread(block 67) failed [ 191.385173][ T9128] FAT-fs (loop3): Directory bread(block 68) failed [ 191.392757][ T9128] FAT-fs (loop3): Directory bread(block 69) failed [ 191.400004][ T9128] FAT-fs (loop3): Directory bread(block 70) failed [ 191.407282][ T9128] FAT-fs (loop3): Directory bread(block 71) failed [ 191.420866][ T9128] FAT-fs (loop3): Directory bread(block 72) failed [ 191.429974][ T9103] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 191.444014][ T9103] BTRFS info (device loop1): using free space tree [ 191.447048][ T9128] FAT-fs (loop3): Directory bread(block 73) failed [ 191.452642][ T9103] BTRFS info (device loop1): has skinny extents [ 191.551268][ T4233] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 191.558523][ T4233] ath9k_htc: Failed to initialize the device [ 191.567865][ T4660] usb 5-1: ath9k_htc: USB layer deinitialized [ 191.622932][ T9149] loop4: detected capacity change from 0 to 256 [ 191.748436][ T9149] FAT-fs (loop4): Directory bread(block 64) failed [ 191.771533][ T9103] BTRFS info (device loop1): enabling ssd optimizations [ 191.819420][ T9149] FAT-fs (loop4): Directory bread(block 65) failed [ 191.826428][ T9149] FAT-fs (loop4): Directory bread(block 66) failed [ 191.865614][ T9149] FAT-fs (loop4): Directory bread(block 67) failed [ 191.888898][ T9149] FAT-fs (loop4): Directory bread(block 68) failed [ 191.921519][ T9149] FAT-fs (loop4): Directory bread(block 69) failed [ 191.930429][ T9149] FAT-fs (loop4): Directory bread(block 70) failed [ 191.979270][ T9149] FAT-fs (loop4): Directory bread(block 71) failed [ 192.006798][ T9149] FAT-fs (loop4): Directory bread(block 72) failed [ 192.038275][ T9149] FAT-fs (loop4): Directory bread(block 73) failed [ 192.074982][ T4431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4431) [ 192.403860][ T9184] loop2: detected capacity change from 0 to 256 [ 192.495299][ T9184] FAT-fs (loop2): Directory bread(block 64) failed [ 192.534596][ T9184] FAT-fs (loop2): Directory bread(block 65) failed [ 192.558110][ T9184] FAT-fs (loop2): Directory bread(block 66) failed [ 192.591091][ T9184] FAT-fs (loop2): Directory bread(block 67) failed [ 192.616077][ T9184] FAT-fs (loop2): Directory bread(block 68) failed [ 192.646891][ T9184] FAT-fs (loop2): Directory bread(block 69) failed [ 192.681345][ T9184] FAT-fs (loop2): Directory bread(block 70) failed [ 192.688118][ T9184] FAT-fs (loop2): Directory bread(block 71) failed [ 192.773145][ T9184] FAT-fs (loop2): Directory bread(block 72) failed [ 192.779761][ T9184] FAT-fs (loop2): Directory bread(block 73) failed [ 192.916862][ T9201] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 193.089457][ T4185] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 193.125604][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 193.157247][ T4185] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 193.830796][ T9241] FAT-fs (loop2): Directory bread(block 64) failed [ 193.843192][ T9242] set_capacity_and_notify: 4 callbacks suppressed [ 193.843212][ T9242] loop4: detected capacity change from 0 to 4096 [ 193.866984][ T9241] FAT-fs (loop2): Directory bread(block 65) failed [ 193.880309][ T9246] loop1: detected capacity change from 0 to 64 [ 193.897309][ T9241] FAT-fs (loop2): Directory bread(block 66) failed [ 193.907812][ T9241] FAT-fs (loop2): Directory bread(block 67) failed [ 193.918581][ T9241] FAT-fs (loop2): Directory bread(block 68) failed [ 193.925566][ T9241] FAT-fs (loop2): Directory bread(block 69) failed [ 193.948685][ T9242] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 193.975613][ T9241] FAT-fs (loop2): Directory bread(block 70) failed [ 193.993117][ T9241] FAT-fs (loop2): Directory bread(block 71) failed [ 194.020547][ T9241] FAT-fs (loop2): Directory bread(block 72) failed [ 194.041433][ T9241] FAT-fs (loop2): Directory bread(block 73) failed [ 194.096860][ T4195] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 194.121055][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 194.128070][ T4195] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 194.197310][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.203710][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.413063][ T9261] loop1: detected capacity change from 0 to 256 [ 194.440705][ T9252] loop3: detected capacity change from 0 to 4096 [ 194.526613][ T9252] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 194.555803][ T9261] FAT-fs (loop1): Directory bread(block 64) failed [ 194.581107][ T9261] FAT-fs (loop1): Directory bread(block 65) failed [ 194.588916][ T9261] FAT-fs (loop1): Directory bread(block 66) failed [ 194.629448][ T9261] FAT-fs (loop1): Directory bread(block 67) failed [ 194.660173][ T9261] FAT-fs (loop1): Directory bread(block 68) failed [ 194.694308][ T9261] FAT-fs (loop1): Directory bread(block 69) failed [ 194.702906][ T4193] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 194.735418][ T4193] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 194.751987][ T9261] FAT-fs (loop1): Directory bread(block 70) failed [ 194.775097][ T4193] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 194.785569][ T9261] FAT-fs (loop1): Directory bread(block 71) failed [ 194.820542][ T9261] FAT-fs (loop1): Directory bread(block 72) failed [ 194.849100][ T9261] FAT-fs (loop1): Directory bread(block 73) failed [ 195.433925][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2292'. [ 195.603939][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 195.636715][ T9325] device wlan0 entered promiscuous mode [ 195.667459][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 195.689555][ T9327] netlink: 'syz.2.2288': attribute type 6 has an invalid length. [ 195.808585][ T9336] netlink: 'syz.0.2304': attribute type 6 has an invalid length. [ 195.860590][ T9341] loop2: detected capacity change from 0 to 164 [ 196.065954][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2303'. [ 196.213172][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 196.258807][ T9367] device wlan0 entered promiscuous mode [ 196.286641][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2306'. [ 196.325923][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2310'. [ 196.506006][ T9380] loop1: detected capacity change from 0 to 164 [ 196.701055][ T9393] loop4: detected capacity change from 0 to 256 [ 196.780345][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'. [ 196.863552][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2326'. [ 197.025867][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 197.100280][ T9416] device wlan0 entered promiscuous mode [ 197.377628][ T9444] loop0: detected capacity change from 0 to 256 [ 197.392279][ T9445] netlink: 'syz.3.2345': attribute type 11 has an invalid length. [ 197.511313][ T9451] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 197.843555][ T9478] netlink: 'syz.0.2364': attribute type 11 has an invalid length. [ 197.870848][ T9483] loop2: detected capacity change from 0 to 256 [ 197.887784][ T9485] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 197.940405][ T9484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.188465][ T9496] loop1: detected capacity change from 0 to 256 [ 198.525714][ T9512] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 198.604303][ T9515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.179999][ T9563] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.188723][ T9550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.585590][ T9597] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 199.692181][ T9604] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.700490][ T9602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.133372][ T9630] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 200.169875][ T9629] overlayfs: conflicting options: nfs_export=on,index=off [ 200.523891][ T9658] __nla_validate_parse: 8 callbacks suppressed [ 200.523910][ T9658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2450'. [ 200.584917][ T9664] overlayfs: conflicting options: nfs_export=on,index=off [ 200.665054][ T9669] loop3: detected capacity change from 0 to 256 [ 200.684121][ T9672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.721913][ T9669] exfat: Deprecated parameter 'utf8' [ 200.771805][ T9669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 200.974439][ T9690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2471'. [ 201.111153][ T9701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.233672][ T9714] loop1: detected capacity change from 0 to 256 [ 201.301783][ T9714] exfat: Deprecated parameter 'utf8' [ 201.328776][ T9714] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 201.565949][ T9736] overlayfs: conflicting options: userxattr,redirect_dir=off [ 201.725325][ T9749] loop4: detected capacity change from 0 to 64 [ 202.022711][ T9772] overlayfs: conflicting options: userxattr,redirect_dir=off [ 202.168126][ T9784] netlink: 'syz.1.2513': attribute type 5 has an invalid length. [ 202.296467][ T9797] netlink: 'syz.4.2530': attribute type 5 has an invalid length. [ 202.312387][ T9796] loop2: detected capacity change from 0 to 64 [ 202.746664][ T9817] device ~ÿ entered promiscuous mode [ 202.901740][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.603203][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.675435][ T9864] device ~ÿ entered promiscuous mode [ 203.934501][ T9880] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2559'. [ 204.157750][ T9893] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2579'. [ 204.785191][ T9921] device gtp0 entered promiscuous mode [ 204.803638][ T9924] overlayfs: missing 'lowerdir' [ 205.041170][ T9930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.300146][ T9947] netlink: 'syz.1.2591': attribute type 1 has an invalid length. [ 205.427168][ T9952] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 205.504654][ T9957] overlayfs: missing 'lowerdir' [ 205.521701][ T9956] device gtp0 entered promiscuous mode [ 205.673922][ T26] audit: type=1400 audit(1769423276.231:8): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9963 comm="syz.0.2604" [ 205.884590][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2610'. [ 206.019356][ T9983] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 206.106852][ T9987] device gtp0 entered promiscuous mode [ 206.133904][ T9989] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 206.296682][ T9996] device gtp1 entered promiscuous mode [ 206.323631][ T26] audit: type=1400 audit(1769423276.881:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=9998 comm="syz.1.2618" [ 206.471273][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2623'. [ 206.764004][T10026] loop4: detected capacity change from 0 to 64 [ 206.994775][T10039] loop1: detected capacity change from 0 to 64 [ 207.531162][T10076] netlink: 'syz.1.2654': attribute type 6 has an invalid length. [ 207.756432][T10090] device xfrm0 entered promiscuous mode [ 208.014352][ T264] block nbd3: Attempted send on invalid socket [ 208.020649][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.149270][T10117] netlink: 'syz.4.2677': attribute type 6 has an invalid length. [ 208.260479][T10122] netlink: 'syz.4.2680': attribute type 46 has an invalid length. [ 208.499998][T10133] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2684'. [ 208.529868][T10135] device xfrm0 entered promiscuous mode [ 208.535603][ T9173] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.653156][T10139] loop4: detected capacity change from 0 to 764 [ 208.670419][T10143] loop2: detected capacity change from 0 to 256 [ 208.877814][ T264] block nbd4: Attempted send on invalid socket [ 208.884367][ T264] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.931397][ T9173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 208.941445][ T9173] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 208.951956][ T9173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 208.965782][ T9173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 209.011059][T10152] netlink: 'syz.2.2696': attribute type 46 has an invalid length. [ 209.161629][ T9173] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 209.170765][ T9173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.201643][ T9173] usb 4-1: Product: syz [ 209.212945][T10161] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2702'. [ 209.216332][ T9173] usb 4-1: Manufacturer: syz [ 209.228225][ T9173] usb 4-1: SerialNumber: syz [ 209.259216][ T9173] usb 4-1: config 0 descriptor?? [ 209.318615][ T9173] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 209.356650][T10170] loop2: detected capacity change from 0 to 512 [ 209.447583][T10170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.488359][T10177] loop4: detected capacity change from 0 to 256 [ 209.507156][T10174] loop1: detected capacity change from 0 to 764 [ 209.522323][T10170] EXT4-fs (loop2): 1 truncate cleaned up [ 209.528034][T10170] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,init_itable,nodiscard,stripe=0x0000000000004000,errors=remount-ro,bsdgroups,. Quota mode: none. [ 209.640334][ T9173] usb 4-1: USB disconnect, device number 6 [ 209.937132][T10188] sctp: [Deprecated]: syz.2.2722 (pid 10188) Use of int in maxseg socket option. [ 209.937132][T10188] Use struct sctp_assoc_value instead [ 210.219486][T10208] loop1: detected capacity change from 0 to 512 [ 210.234845][T10206] loop2: detected capacity change from 0 to 1764 [ 210.284147][T10206] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 210.314891][T10210] loop0: detected capacity change from 0 to 2048 [ 210.357207][T10210] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 210.380889][T10208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.435614][T10210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.453955][T10208] EXT4-fs (loop1): 1 truncate cleaned up [ 210.484185][T10208] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,init_itable,nodiscard,stripe=0x0000000000004000,errors=remount-ro,bsdgroups,. Quota mode: none. [ 210.544601][T10221] sctp: [Deprecated]: syz.4.2728 (pid 10221) Use of int in maxseg socket option. [ 210.544601][T10221] Use struct sctp_assoc_value instead [ 210.885156][T10235] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.927388][T10235] EXT4-fs (loop3): 1 truncate cleaned up [ 210.961140][T10235] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,init_itable,nodiscard,stripe=0x0000000000004000,errors=remount-ro,bsdgroups,. Quota mode: none. [ 211.045860][T10250] device bridge2 entered promiscuous mode [ 211.087016][T10248] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 211.202343][T10256] device bridge5 entered promiscuous mode [ 211.301076][ T4225] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 211.321284][T10255] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 211.356232][T10255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.607580][T10276] device netdevsim0 entered promiscuous mode [ 211.636043][T10276] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2751'. [ 211.650447][T10276] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.681364][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 211.711520][ T4225] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 211.736664][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 211.774155][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 211.833076][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 211.867076][T10285] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 211.964831][ T4225] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 211.981900][ T4225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.994747][T10292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2763'. [ 212.009689][ T4225] usb 1-1: Product: syz [ 212.024579][ T4225] usb 1-1: Manufacturer: syz [ 212.039590][ T4225] usb 1-1: SerialNumber: syz [ 212.076276][ T4225] usb 1-1: config 0 descriptor?? [ 212.122322][ T4225] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 212.141296][ T9172] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.270116][T10310] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 212.338841][T10315] set_capacity_and_notify: 3 callbacks suppressed [ 212.338857][T10315] loop2: detected capacity change from 0 to 256 [ 212.362309][ T4660] usb 1-1: USB disconnect, device number 9 [ 212.402968][ T9172] usb 5-1: Using ep0 maxpacket: 16 [ 212.440158][T10315] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 212.475166][T10319] loop1: detected capacity change from 0 to 512 [ 212.542340][ T9172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.547725][T10319] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.571532][ T9172] usb 5-1: config 0 has no interfaces? [ 212.614929][T10319] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.697040][T10319] EXT4-fs (loop1): 1 truncate cleaned up [ 212.705049][T10319] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000068,barrier,jqfmt=vfsold,quota,. Quota mode: writeback. [ 212.742989][ T9172] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 212.768970][ T9172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.788569][ T9172] usb 5-1: Product: syz [ 212.793365][ T9172] usb 5-1: Manufacturer: syz [ 212.798046][ T9172] usb 5-1: SerialNumber: syz [ 212.831293][ T9172] r8152-cfgselector 5-1: config 0 descriptor?? [ 213.091775][ T9172] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 213.288324][T10346] loop1: detected capacity change from 0 to 4096 [ 213.309907][ T9172] usb 5-1: USB disconnect, device number 12 [ 213.321745][T10346] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 213.412467][T10346] ntfs3: loop1: failed to convert "c46c" to koi8-ru [ 213.541153][ T4225] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.618682][T10365] Restarting kernel threads ... done. [ 213.672069][T10352] loop2: detected capacity change from 0 to 32768 [ 213.711711][T10370] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2801'. [ 213.791489][ T4225] usb 4-1: Using ep0 maxpacket: 32 [ 213.816350][T10352] XFS (loop2): Mounting V5 Filesystem [ 213.923381][ T26] audit: type=1400 audit(1769423284.481:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10383 comm="syz.1.2804" [ 213.941364][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.005169][T10352] XFS (loop2): Ending clean mount [ 214.013712][T10352] XFS (loop2): Quotacheck needed: Please wait. [ 214.084310][ T4225] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 214.111287][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.150076][ T4225] usb 4-1: Product: syz [ 214.169474][ T4225] usb 4-1: Manufacturer: syz [ 214.175059][ T4225] usb 4-1: SerialNumber: syz [ 214.188380][ T4225] usb 4-1: config 0 descriptor?? [ 214.245267][T10352] XFS (loop2): Quotacheck: Done. [ 214.265201][T10379] loop0: detected capacity change from 0 to 32768 [ 214.389369][T10379] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 214.418048][ T4197] XFS (loop2): Unmounting Filesystem [ 214.613124][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2816'. [ 214.655156][T10408] x_tables: ip_tables: osf match: only valid for protocol 6 [ 214.681567][ T4225] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 214.688828][ T4225] airspy 4-1:0.0: Could not detect board [ 214.716169][ T4225] airspy: probe of 4-1:0.0 failed with error -71 [ 214.744678][ T4225] usb 4-1: USB disconnect, device number 7 [ 214.832752][T10410] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 214.855667][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 215.357909][T10426] loop2: detected capacity change from 0 to 4096 [ 215.389336][T10440] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2830'. [ 215.522569][T10426] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 215.571423][T10426] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 215.616354][T10426] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 215.644694][T10456] netlink: 'syz.1.2839': attribute type 3 has an invalid length. [ 215.661077][T10456] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2839'. [ 215.670343][T10426] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 215.706589][T10426] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 215.728021][T10458] netlink: 'syz.3.2841': attribute type 3 has an invalid length. [ 215.752990][T10426] ntfs: volume version 3.1. [ 215.797048][T10426] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 215.840867][T10426] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 215.911216][T10426] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 215.958038][T10426] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 216.030442][T10473] sctp: [Deprecated]: syz.0.2847 (pid 10473) Use of int in max_burst socket option. [ 216.030442][T10473] Use struct sctp_assoc_value instead [ 216.381926][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 216.558708][T10500] xt_CT: No such helper "pptp" [ 216.600771][T10508] loop4: detected capacity change from 0 to 512 [ 216.672025][T10508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.705946][T10516] loop1: detected capacity change from 0 to 1024 [ 216.730134][T10508] EXT4-fs (loop4): 1 truncate cleaned up [ 216.746645][T10522] netlink: 'syz.0.2870': attribute type 10 has an invalid length. [ 216.759374][T10508] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 216.785055][ T8353] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.790842][T10522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2870'. [ 216.808007][T10524] loop2: detected capacity change from 0 to 64 [ 216.818394][T10522] device batadv0 entered promiscuous mode [ 216.857143][T10522] bridge0: port 3(batadv0) entered blocking state [ 216.896568][T10516] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.921649][T10522] bridge0: port 3(batadv0) entered disabled state [ 216.933148][T10522] bridge0: port 3(batadv0) entered blocking state [ 216.940172][T10522] bridge0: port 3(batadv0) entered forwarding state [ 216.986181][T10516] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #11: comm syz.1.2868: directory missing '..' [ 217.081545][ T8353] usb 4-1: Using ep0 maxpacket: 32 [ 217.227828][ T8353] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 217.236632][ T144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 217.246983][ T144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 217.262668][ T8353] usb 4-1: config 0 has no interface number 0 [ 217.292375][T10538] SET target dimension over the limit! [ 217.444893][ T8353] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=70.50 [ 217.466539][ T8353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.494211][ T8353] usb 4-1: Product: syz [ 217.498479][ T8353] usb 4-1: Manufacturer: syz [ 217.530521][ T8353] usb 4-1: SerialNumber: syz [ 217.547828][ T8353] usb 4-1: config 0 descriptor?? [ 217.560228][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 217.617179][ T8353] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 217.631170][ T8353] gspca_stv06xx: st6422 sensor detected [ 217.709818][T10564] loop2: detected capacity change from 0 to 256 [ 218.059533][T10590] loop0: detected capacity change from 0 to 1024 [ 218.204755][ T8353] STV06xx: probe of 4-1:0.238 failed with error -71 [ 218.296251][ T4561] hfsplus: b-tree write err: -5, ino 8 [ 218.321304][ T8353] usb 4-1: unknown interface protocol 0x9, assuming v1 [ 218.328866][ T8353] usb 4-1: cannot find UAC_HEADER [ 218.343906][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 218.541773][ T8353] snd-usb-audio: probe of 4-1:0.238 failed with error -22 [ 218.614428][ T8353] usb 4-1: USB disconnect, device number 8 [ 218.667219][T10621] loop4: detected capacity change from 0 to 2048 [ 218.823578][T10621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.876379][ T4431] udevd[4431]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.906402][T10638] loop2: detected capacity change from 0 to 256 [ 219.005376][T10638] FAT-fs (loop2): Directory bread(block 64) failed [ 219.051122][T10638] FAT-fs (loop2): Directory bread(block 65) failed [ 219.074571][T10638] FAT-fs (loop2): Directory bread(block 66) failed [ 219.088723][T10645] loop3: detected capacity change from 0 to 256 [ 219.098590][T10638] FAT-fs (loop2): Directory bread(block 67) failed [ 219.116430][T10638] FAT-fs (loop2): Directory bread(block 68) failed [ 219.131269][ T4225] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.132022][T10638] FAT-fs (loop2): Directory bread(block 69) failed [ 219.171822][T10638] FAT-fs (loop2): Directory bread(block 70) failed [ 219.191016][T10645] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.209167][T10638] FAT-fs (loop2): Directory bread(block 71) failed [ 219.248097][T10638] FAT-fs (loop2): Directory bread(block 72) failed [ 219.268462][T10638] FAT-fs (loop2): Directory bread(block 73) failed [ 219.501337][ T4225] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 219.510471][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.550432][ T4225] usb 1-1: config 0 descriptor?? [ 219.726761][T10668] capability: warning: `syz.2.2926' uses 32-bit capabilities (legacy support in use) [ 219.841240][ T4225] [drm] vendor descriptor length:6 data:06 5f 01 30 30 30 00 00 00 00 00 [ 219.855102][ T4225] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 220.061176][ T4225] [drm:udl_init] *ERROR* Selecting channel failed [ 220.104468][ T4225] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 220.141841][ T4225] [drm] Initialized udl on minor 2 [ 220.191291][ T4225] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.233206][ T4225] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 220.259000][T10705] loop3: detected capacity change from 0 to 2048 [ 220.286224][ T4225] usb 1-1: USB disconnect, device number 10 [ 220.309488][ T4660] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 220.327850][ T4660] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 220.353900][ T4660] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 220.385478][T10705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.933136][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 220.975905][T10749] loop2: detected capacity change from 0 to 2048 [ 221.049322][T10749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.357484][T10783] loop4: detected capacity change from 0 to 1024 [ 221.409510][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 221.514399][ T4561] hfsplus: b-tree write err: -5, ino 8 [ 221.836073][T10819] loop3: detected capacity change from 0 to 1024 [ 221.961898][T10827] loop0: detected capacity change from 0 to 1024 [ 221.986751][ T9] hfsplus: b-tree write err: -5, ino 8 [ 222.017957][T10827] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 222.036289][T10827] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 222.092622][T10827] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 222.128895][T10827] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.183498][T10838] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.209355][T10827] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 222.271564][T10839] FAT-fs (loop1): Directory bread(block 64) failed [ 222.284889][T10839] FAT-fs (loop1): Directory bread(block 65) failed [ 222.305094][T10847] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 222.360517][T10839] FAT-fs (loop1): Directory bread(block 66) failed [ 222.394702][T10839] FAT-fs (loop1): Directory bread(block 67) failed [ 222.411452][T10839] FAT-fs (loop1): Directory bread(block 68) failed [ 222.418166][T10839] FAT-fs (loop1): Directory bread(block 69) failed [ 222.466009][T10839] FAT-fs (loop1): Directory bread(block 70) failed [ 222.481312][T10839] FAT-fs (loop1): Directory bread(block 71) failed [ 222.488012][T10839] FAT-fs (loop1): Directory bread(block 72) failed [ 222.516269][T10839] FAT-fs (loop1): Directory bread(block 73) failed [ 222.787415][T10877] set_capacity_and_notify: 2 callbacks suppressed [ 222.787433][T10877] loop0: detected capacity change from 0 to 256 [ 222.876292][T10877] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.974609][T10889] loop3: detected capacity change from 0 to 256 [ 223.081238][ T8353] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.307458][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 223.361276][ T8353] usb 5-1: Using ep0 maxpacket: 32 [ 223.444625][T10917] loop0: detected capacity change from 0 to 64 [ 223.519812][T10925] SET target dimension over the limit! [ 223.534947][ T8353] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 223.558305][ T8353] usb 5-1: config 0 has no interface number 0 [ 223.777347][ T8353] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=70.50 [ 223.790444][ T8353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.814933][ T8353] usb 5-1: Product: syz [ 223.819213][ T8353] usb 5-1: Manufacturer: syz [ 223.851160][ T8353] usb 5-1: SerialNumber: syz [ 223.873060][ T8353] usb 5-1: config 0 descriptor?? [ 223.934370][ T8353] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 223.955316][ T8353] gspca_stv06xx: st6422 sensor detected [ 223.993015][T10957] SET target dimension over the limit! [ 224.060268][T10963] loop1: detected capacity change from 0 to 64 [ 224.070874][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 224.187019][T10969] netlink: 'syz.2.3071': attribute type 10 has an invalid length. [ 224.210564][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3071'. [ 224.222900][T10971] loop0: detected capacity change from 0 to 256 [ 224.269585][T10973] loop3: detected capacity change from 0 to 1024 [ 224.392195][T10973] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.450191][T10973] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #11: comm syz.3.3074: directory missing '..' [ 224.521699][ T8353] STV06xx: probe of 5-1:0.238 failed with error -71 [ 224.558898][T10986] loop2: detected capacity change from 0 to 512 [ 224.621380][ T8353] usb 5-1: unknown interface protocol 0x9, assuming v1 [ 224.628566][ T8353] usb 5-1: cannot find UAC_HEADER [ 224.652353][T10986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.689665][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 224.739672][T10986] EXT4-fs (loop2): 1 truncate cleaned up [ 224.745542][T10986] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 224.778578][ T8353] snd-usb-audio: probe of 5-1:0.238 failed with error -22 [ 224.787788][ T8353] usb 5-1: USB disconnect, device number 13 [ 224.886106][T10997] xt_CT: No such helper "pptp" [ 225.207684][T11022] netlink: 'syz.4.3099': attribute type 3 has an invalid length. [ 225.334921][T11032] sctp: [Deprecated]: syz.3.3101 (pid 11032) Use of int in max_burst socket option. [ 225.334921][T11032] Use struct sctp_assoc_value instead [ 225.393447][T11038] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3113'. [ 225.465239][T11042] netlink: 'syz.4.3105': attribute type 3 has an invalid length. [ 225.515284][T11042] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3105'. [ 225.985606][T11083] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3123'. [ 226.241918][T11106] x_tables: ip_tables: osf match: only valid for protocol 6 [ 226.280882][T11110] netlink: 'syz.4.3138': attribute type 1 has an invalid length. [ 226.308804][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3137'. [ 226.638903][T11139] x_tables: ip_tables: osf match: only valid for protocol 6 [ 226.744903][T11147] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 226.938238][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 226.938253][ T26] audit: type=1400 audit(1769423297.491:11): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11159 comm="syz.3.3175" [ 226.963033][T11163] netlink: 'syz.2.3165': attribute type 3 has an invalid length. [ 227.026780][T11163] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3165'. [ 227.062188][T11166] netlink: 'syz.1.3167': attribute type 3 has an invalid length. [ 227.492067][T11192] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3180'. [ 227.530039][ T26] audit: type=1400 audit(1769423298.081:12): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11194 comm="syz.4.3179" [ 227.561163][T11193] Restarting kernel threads ... done. [ 227.678700][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.704428][T11201] sctp: [Deprecated]: syz.4.3184 (pid 11201) Use of int in max_burst socket option. [ 227.704428][T11201] Use struct sctp_assoc_value instead [ 227.806748][T11195] loop0: detected capacity change from 0 to 4096 [ 227.874157][T11195] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 227.921124][T11195] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 227.955034][T11195] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 228.035345][T11195] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 228.125868][T11195] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 228.212792][T11195] ntfs: volume version 3.1. [ 228.267147][T11195] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 228.340975][T11195] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 228.436099][T11195] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 228.961521][T11245] loop0: detected capacity change from 0 to 256 [ 229.105374][T11245] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 229.428634][T11216] loop3: detected capacity change from 0 to 32768 [ 229.556252][T11216] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 229.628962][T11276] netlink: 'syz.2.3220': attribute type 5 has an invalid length. [ 229.747554][T11279] loop0: detected capacity change from 0 to 164 [ 229.824685][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 230.245800][T11306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.298084][T11306] device batadv_slave_0 entered promiscuous mode [ 230.563517][T11325] loop1: detected capacity change from 0 to 512 [ 230.648357][T11325] EXT4-fs (loop1): orphan cleanup on readonly fs [ 230.686298][T11325] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.3247: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 230.707296][T11325] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.3247: Bad quota inode: 4, type: 1 [ 230.712740][T11336] tmpfs: Bad value for 'mpol' [ 230.731298][T11325] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.848522][T11339] netlink: 'syz.2.3252': attribute type 1 has an invalid length. [ 230.909202][T11325] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 230.979833][T11325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.079881][T11325] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 231.121810][T11325] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 231.462915][T11373] loop0: detected capacity change from 0 to 64 [ 231.672537][T11390] loop4: detected capacity change from 0 to 512 [ 231.702670][T11390] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 231.771331][ T4660] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.812832][T11390] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,grpjquota=.,stripe=0x0000000000000000,init_itable,. Quota mode: writeback. [ 231.896847][T11390] ext4 filesystem being mounted at /625/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.998908][T11412] dlm: no local IP address has been set [ 232.006049][T11412] dlm: cannot start dlm midcomms -107 [ 232.015792][T11414] loop3: detected capacity change from 0 to 164 [ 232.041127][ T4660] usb 2-1: Using ep0 maxpacket: 16 [ 232.164217][ T4660] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 232.179549][ T4660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 232.221384][ T4660] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 232.276552][ T4660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 232.345202][ T4660] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 232.551406][ T4660] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 232.568116][ T4660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.596678][ T4660] usb 2-1: Product: syz [ 232.600917][ T4660] usb 2-1: Manufacturer: syz [ 232.638217][ T4660] usb 2-1: SerialNumber: syz [ 232.669690][ T4660] usb 2-1: config 0 descriptor?? [ 232.722568][T11376] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 232.729694][T11376] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 232.755886][T11445] loop2: detected capacity change from 0 to 256 [ 232.815785][ T4660] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 232.831839][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 232.838846][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 232.918006][T11445] FAT-fs (loop2): Directory bread(block 64) failed [ 232.945731][T11445] FAT-fs (loop2): Directory bread(block 65) failed [ 232.963787][T11445] FAT-fs (loop2): Directory bread(block 66) failed [ 232.988033][ T6985] usb 2-1: USB disconnect, device number 6 [ 232.995254][T11445] FAT-fs (loop2): Directory bread(block 67) failed [ 232.999502][ T6985] mcba_usb 2-1:0.0 can0: device disconnected [ 233.034292][T11445] FAT-fs (loop2): Directory bread(block 68) failed [ 233.061183][T11445] FAT-fs (loop2): Directory bread(block 69) failed [ 233.085239][T11445] FAT-fs (loop2): Directory bread(block 70) failed [ 233.115934][T11445] FAT-fs (loop2): Directory bread(block 71) failed [ 233.134643][T11445] FAT-fs (loop2): Directory bread(block 72) failed [ 233.151766][T11445] FAT-fs (loop2): Directory bread(block 73) failed [ 233.394217][T11437] loop0: detected capacity change from 0 to 32768 [ 233.638233][T11473] overlayfs: missing 'lowerdir' [ 233.866457][T11441] loop3: detected capacity change from 0 to 32768 [ 234.026985][T11441] XFS (loop3): Mounting V5 Filesystem [ 234.037054][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3318'. [ 234.231287][T11441] XFS (loop3): Ending clean mount [ 234.363708][ T4193] XFS (loop3): Unmounting Filesystem [ 234.601281][ T8353] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.657276][T11532] loop2: detected capacity change from 0 to 512 [ 234.746683][T11532] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.815921][T11532] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3330: inode has both inline data and extents flags [ 234.846786][T11532] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3330: couldn't read orphan inode 15 (err -117) [ 234.896102][T11532] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,nojournal_checksum,norecovery,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 234.918607][ T8353] usb 2-1: Using ep0 maxpacket: 8 [ 235.221171][ T9173] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.229567][ T8353] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 235.269406][ T8353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.289735][ T8353] usb 2-1: Product: syz [ 235.299874][ T8353] usb 2-1: Manufacturer: syz [ 235.317471][ T8353] usb 2-1: SerialNumber: syz [ 235.343672][ T8353] usb 2-1: config 0 descriptor?? [ 235.382996][ T8353] cdc_ether 2-1:0.0: skipping garbage [ 235.392286][ T8353] cdc_ether 2-1:0.0: skipping garbage [ 235.398189][ T8353] usb 2-1: bad CDC descriptors [ 235.442931][ T8353] usb 2-1: unsupported MDLM descriptors [ 235.443259][ T8353] cdc_acm 2-1:0.0: skipping garbage [ 235.443277][ T8353] cdc_acm 2-1:0.0: skipping garbage [ 235.446380][T11571] loop4: detected capacity change from 0 to 16 [ 235.547372][T11571] erofs: (device loop4): mounted with root inode @ nid 36. [ 235.583252][T11576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3347'. [ 235.598384][T11571] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 235.610223][ T8353] usb 2-1: USB disconnect, device number 7 [ 235.624604][T11571] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 235.638027][ T4233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.652409][ T9173] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 235.660646][ T9173] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 183 [ 235.689282][ T9173] usb 3-1: config 0 has no interface number 1 [ 235.695751][ T9173] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.709403][ T9173] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 235.901327][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 235.901325][ T9173] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 235.901368][ T9173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.948180][ T9173] usb 3-1: Product: syz [ 235.967074][ T9173] usb 3-1: Manufacturer: syz [ 235.982496][ T9173] usb 3-1: SerialNumber: syz [ 235.996974][ T9173] usb 3-1: config 0 descriptor?? [ 236.031346][ T4233] usb 4-1: config 2 has an invalid interface number: 241 but max is 0 [ 236.050113][ T4233] usb 4-1: config 2 has no interface number 0 [ 236.054525][ T9173] usb-storage 3-1:0.127: USB Mass Storage device detected [ 236.064090][ T4233] usb 4-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.085277][ T4233] usb 4-1: config 2 interface 241 has no altsetting 0 [ 236.115610][ T9173] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 236.156561][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 236.179307][T11602] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 236.204358][ T9173] usb-storage 3-1:0.0: USB Mass Storage device detected [ 236.212769][T11602] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 236.221016][T11602] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 236.247393][ T9173] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 236.267193][ T4233] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 236.299627][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.327301][ T4233] usb 4-1: Product: syz [ 236.335913][ T4233] usb 4-1: Manufacturer: syz [ 236.344031][ T9173] usb 3-1: USB disconnect, device number 10 [ 236.360287][ T4233] usb 4-1: SerialNumber: syz [ 236.433435][ T4233] ti_usb_3410_5052 4-1:2.241: TI USB 3410 1 port adapter converter detected [ 236.449962][ T4233] ti_usb_3410_5052 4-1:2.241: missing endpoints [ 236.541114][ T9172] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 236.638798][ T6985] usb 4-1: USB disconnect, device number 9 [ 236.760430][T11632] netlink: 'syz.1.3373': attribute type 1 has an invalid length. [ 236.801156][ T9172] usb 1-1: Using ep0 maxpacket: 32 [ 236.809779][T11634] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.840266][T11634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 236.895355][T11636] misc userio: No port type given on /dev/userio [ 236.974023][ T9172] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 236.991599][ T9172] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 237.020845][ T9172] usb 1-1: config 1 has no interface number 1 [ 237.040595][T11642] loop1: detected capacity change from 0 to 512 [ 237.052484][ T9172] usb 1-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 237.066518][ T9172] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 237.079517][ T9172] usb 1-1: config 1 interface 2 has no altsetting 0 [ 237.207105][T11642] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 237.261175][ T9172] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.270569][ T9172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.291007][ T9172] usb 1-1: Product: syz [ 237.295261][ T9172] usb 1-1: Manufacturer: syz [ 237.299982][ T9172] usb 1-1: SerialNumber: syz [ 237.306162][T11642] ext4 filesystem being mounted at /728/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.339960][T11654] loop3: detected capacity change from 0 to 512 [ 237.482047][T11654] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 237.492104][T11654] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 237.500358][T11654] System zones: 0-1, 15-15, 18-18, 34-34 [ 237.512497][T11654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 237.519531][T11654] __quota_error: 8 callbacks suppressed [ 237.519551][T11654] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 237.568916][T11654] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 237.588301][T11654] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 237.604899][T11654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3383: bg 0: block 40: padding at end of block bitmap is not set [ 237.629673][T11654] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 237.645525][T11654] EXT4-fs (loop3): 1 truncate cleaned up [ 237.698139][T11654] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 237.712379][ T9172] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 237.719917][ T9172] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 237.742325][ T9172] usb 1-1: 2:1 : invalid channels 0 [ 237.757944][ T9172] usb 1-1: selecting invalid altsetting 0 [ 237.774923][T11650] loop4: detected capacity change from 0 to 32768 [ 237.792879][T11654] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 237.865753][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 237.869812][ T9172] usb 1-1: USB disconnect, device number 11 [ 237.950541][T11650] attempt to access beyond end of device [ 237.950541][T11650] loop4: rw=1, want=4680040, limit=32768 [ 237.989213][T11650] metapage_write_end_io: I/O error [ 238.009893][T11650] blkno = 8ed2c, nblocks = 1 [ 238.014870][T11650] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 238.014870][T11650] [ 238.057875][T11650] ERROR: (device loop4): remounting filesystem as read-only [ 238.082644][T11650] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 238.082644][T11650] [ 238.135510][T11650] ERROR: (device loop4): duplicateIXtree: [ 238.135510][T11650] [ 238.158340][ T4431] udevd[4431]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.187389][T11676] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.198430][T11678] binder: BC_ATTEMPT_ACQUIRE not supported [ 238.254632][T11678] binder: 11677:11678 ioctl c0306201 200000000340 returned -22 [ 238.297987][ T277] blkno = 8ed2c, nblocks = 4 [ 238.302847][ T277] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 238.302847][ T277] [ 238.364557][ T4195] attempt to access beyond end of device [ 238.364557][ T4195] loop4: rw=1, want=4680040, limit=32768 [ 238.415124][ T4195] metapage_write_end_io: I/O error [ 238.434582][ T4195] JFS: metapage_get_blocks failed [ 238.440091][ T4195] JFS: metapage_get_blocks failed [ 238.471066][ T4195] JFS: metapage_get_blocks failed [ 238.476264][ T4195] JFS: metapage_get_blocks failed [ 238.536482][T11690] loop1: detected capacity change from 0 to 256 [ 238.661182][ T9172] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.706528][T11690] FAT-fs (loop1): Directory bread(block 64) failed [ 238.713537][T11690] FAT-fs (loop1): Directory bread(block 65) failed [ 238.720237][T11690] FAT-fs (loop1): Directory bread(block 66) failed [ 238.741051][T11690] FAT-fs (loop1): Directory bread(block 67) failed [ 238.764564][T11690] FAT-fs (loop1): Directory bread(block 68) failed [ 238.771412][T11690] FAT-fs (loop1): Directory bread(block 69) failed [ 238.778107][T11690] FAT-fs (loop1): Directory bread(block 70) failed [ 238.808084][T11690] FAT-fs (loop1): Directory bread(block 71) failed [ 238.816107][T11690] FAT-fs (loop1): Directory bread(block 72) failed [ 238.823724][T11690] FAT-fs (loop1): Directory bread(block 73) failed [ 238.993957][T11698] loop3: detected capacity change from 0 to 164 [ 239.070878][T11682] loop2: detected capacity change from 0 to 32768 [ 239.077866][ T9172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.121194][ T9172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 239.297534][T11718] xt_hashlimit: size too large, truncated to 1048576 [ 239.304817][ T9172] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 239.346246][T11720] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3410'. [ 239.356668][ T9172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.382708][T11718] xt_hashlimit: max too large, truncated to 1048576 [ 239.424552][ T9172] usb 1-1: Product: syz [ 239.469938][ T9172] usb 1-1: Manufacturer: syz [ 239.475979][ T9172] usb 1-1: SerialNumber: syz [ 239.497881][T11682] XFS (loop2): Mounting V5 Filesystem [ 239.505587][ T9172] usb 1-1: config 0 descriptor?? [ 239.525715][T11730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 239.574484][ T9172] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 239.685364][ T9172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.732561][T11682] XFS (loop2): Ending clean mount [ 239.742829][ T9172] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 239.782853][ T9172] usb 1-1: media controller created [ 239.816147][ T9172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.889706][T11682] XFS (loop2): Quotacheck needed: Please wait. [ 239.980244][T11682] XFS (loop2): Quotacheck: Done. [ 240.057547][ T9172] DVB: Unable to find symbol tda10046_attach() [ 240.071055][ T9172] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 240.084009][ T4197] XFS (loop2): Unmounting Filesystem [ 240.094435][ T9172] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 240.120626][T11758] loop3: detected capacity change from 0 to 1764 [ 240.351462][ T9172] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 240.370802][ T9172] usb 1-1: USB disconnect, device number 12 [ 240.531336][ T6985] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 240.544417][T11770] netlink: 'syz.3.3433': attribute type 8 has an invalid length. [ 240.771192][ T6985] usb 5-1: Using ep0 maxpacket: 8 [ 240.891417][ T6985] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 240.916713][ T6985] usb 5-1: config 0 has no interface number 0 [ 240.943039][ T6985] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 240.981628][ T6985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.009173][ T6985] usb 5-1: config 0 descriptor?? [ 241.084411][T11802] loop0: detected capacity change from 0 to 512 [ 241.239093][T11802] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 241.269277][T11802] ext4 filesystem being mounted at /666/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.285647][ T6985] usb 5-1: USB disconnect, device number 14 [ 241.536696][T11822] loop1: detected capacity change from 0 to 4096 [ 241.549548][T11822] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 241.589393][T11822] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 241.616872][T11822] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 241.690861][T11822] ntfs: volume version 3.1. [ 241.731157][ T9173] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.994608][ T9173] usb 1-1: Using ep0 maxpacket: 32 [ 242.114781][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 242.121923][ T9173] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 242.134406][ T9173] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 242.156122][ T9173] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.187883][ T9173] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 242.218576][ T9173] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 242.262987][ T9173] usb 1-1: config 0 interface 0 has no altsetting 0 [ 242.295013][T11831] loop3: detected capacity change from 0 to 32768 [ 242.370037][T11857] loop1: detected capacity change from 0 to 512 [ 242.390277][T11831] blkno = 8ed2c, nblocks = 1 [ 242.403758][T11859] binfmt_misc: register: failed to install interpreter file ./file0 [ 242.412316][T11831] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 242.412316][T11831] [ 242.431387][T11831] ERROR: (device loop3): remounting filesystem as read-only [ 242.448865][T11831] ialloc: diAlloc returned -17! [ 242.477938][T11857] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 242.485701][ T9173] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 242.513067][ T9173] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 242.537537][T11857] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.547552][T11857] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 242.556234][ T9173] usb 1-1: Product: syz [ 242.560450][ T9173] usb 1-1: Manufacturer: syz [ 242.566874][ T9173] usb 1-1: SerialNumber: syz [ 242.572335][T11857] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3486: attempt to clear invalid blocks 2 len 1 [ 242.586630][ T9173] usb 1-1: config 0 descriptor?? [ 242.611108][T11857] EXT4-fs (loop1): Remounting filesystem read-only [ 242.628130][T11857] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 242.645013][ T9173] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 242.657063][T11857] EXT4-fs (loop1): Remounting filesystem read-only [ 242.665832][ T9173] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 242.691434][T11857] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3486: invalid indirect mapped block 1819239214 (level 0) [ 242.744928][T11857] EXT4-fs (loop1): Remounting filesystem read-only [ 242.761095][T11857] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3486: invalid indirect mapped block 1819239214 (level 1) [ 242.786165][T11857] EXT4-fs (loop1): Remounting filesystem read-only [ 242.796370][T11857] EXT4-fs (loop1): 1 truncate cleaned up [ 242.812202][T11857] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 242.875617][T11819] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 242.898544][ T9173] usb 1-1: USB disconnect, device number 13 [ 242.921752][ T9173] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 243.020927][T11855] loop4: detected capacity change from 0 to 32768 [ 243.495112][T11888] loop1: detected capacity change from 0 to 1024 [ 243.524231][T11894] binder: 11889:11894 ioctl c018620c 200000000240 returned -1 [ 243.584292][T11888] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 243.850086][T11912] loop1: detected capacity change from 0 to 256 [ 243.894329][T11909] loop0: detected capacity change from 0 to 4096 [ 243.911725][T11912] exfat: Deprecated parameter 'utf8' [ 243.917127][T11912] exfat: Deprecated parameter 'namecase' [ 243.936206][T11912] exfat: Deprecated parameter 'namecase' [ 243.942405][T11912] exfat: Deprecated parameter 'utf8' [ 243.986119][T11909] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 244.000170][T11912] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 244.054917][T11909] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 244.145271][T11909] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 244.193873][T11909] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 244.235225][T11909] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 244.252909][T11909] ntfs: volume version 3.1. [ 244.259736][T11909] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 244.329603][T11937] netlink: 'syz.2.3508': attribute type 3 has an invalid length. [ 244.355487][T11909] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 244.383498][T11937] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3508'. [ 244.417172][T11909] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 244.469104][T11909] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 244.511277][T11909] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 244.547021][T11945] loop1: detected capacity change from 0 to 64 [ 244.672217][T11951] netlink: 'syz.4.3518': attribute type 9 has an invalid length. [ 244.680159][T11951] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3518'. [ 244.729729][T11953] loop3: detected capacity change from 0 to 512 [ 244.849062][T11959] loop1: detected capacity change from 0 to 1024 [ 244.957853][T11953] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff05) [ 244.980433][T11953] FAT-fs (loop3): Filesystem has been set read-only [ 245.048687][T11970] loop0: detected capacity change from 0 to 256 [ 245.164017][T11977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.194201][T11977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.241235][T11977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.289234][T11977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.333967][T11983] netlink: 'syz.4.3547': attribute type 2 has an invalid length. [ 245.570881][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'. [ 245.806154][T11975] loop2: detected capacity change from 0 to 32768 [ 246.149279][T12010] dlm: no locking on control device [ 246.484634][T11985] loop0: detected capacity change from 0 to 32768 [ 246.539544][T12032] loop3: detected capacity change from 0 to 256 [ 246.702324][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3567'. [ 246.733749][T12032] FAT-fs (loop3): Directory bread(block 64) failed [ 246.740487][T12032] FAT-fs (loop3): Directory bread(block 65) failed [ 246.774102][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'. [ 246.834331][T12032] FAT-fs (loop3): Directory bread(block 66) failed [ 246.870578][T12032] FAT-fs (loop3): Directory bread(block 67) failed [ 246.887154][T12050] loop1: detected capacity change from 0 to 8 [ 246.897239][T12032] FAT-fs (loop3): Directory bread(block 68) failed [ 246.912272][T12032] FAT-fs (loop3): Directory bread(block 69) failed [ 246.926826][T12032] FAT-fs (loop3): Directory bread(block 70) failed [ 246.944230][T12032] FAT-fs (loop3): Directory bread(block 71) failed [ 247.011183][T12032] FAT-fs (loop3): Directory bread(block 72) failed [ 247.017828][T12032] FAT-fs (loop3): Directory bread(block 73) failed [ 247.268316][T12061] FAT-fs (loop2): Directory bread(block 64) failed [ 247.275760][T12061] FAT-fs (loop2): Directory bread(block 65) failed [ 247.292985][T12061] FAT-fs (loop2): Directory bread(block 66) failed [ 247.299735][T12061] FAT-fs (loop2): Directory bread(block 67) failed [ 247.316513][T12061] FAT-fs (loop2): Directory bread(block 68) failed [ 247.326350][T12061] FAT-fs (loop2): Directory bread(block 69) failed [ 247.333485][T12061] FAT-fs (loop2): Directory bread(block 70) failed [ 247.340289][T12061] FAT-fs (loop2): Directory bread(block 71) failed [ 247.363500][T12061] FAT-fs (loop2): Directory bread(block 72) failed [ 247.378115][T12061] FAT-fs (loop2): Directory bread(block 73) failed [ 247.407229][T12071] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 247.467886][T12073] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 247.864418][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 247.909438][T12086] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 247.941241][T12096] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 247.971170][T12098] netlink: 'syz.4.3601': attribute type 5 has an invalid length. [ 248.883954][T12147] tmpfs: Bad value for 'mpol' [ 248.963784][T12150] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 249.173647][T12111] set_capacity_and_notify: 3 callbacks suppressed [ 249.173666][T12111] loop2: detected capacity change from 0 to 32768 [ 249.284107][T12111] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 249.464485][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 249.843493][T12207] loop0: detected capacity change from 0 to 164 [ 250.173701][T12229] dlm: no local IP address has been set [ 250.191606][T12229] dlm: cannot start dlm midcomms -107 [ 250.209700][T12232] loop2: detected capacity change from 0 to 256 [ 250.488717][T12256] overlayfs: missing 'lowerdir' [ 251.069545][T12302] loop3: detected capacity change from 0 to 512 [ 251.139852][T12302] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 251.243746][T12302] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,grpjquota=.,stripe=0x0000000000000000,init_itable,. Quota mode: writeback. [ 251.395246][T12302] ext4 filesystem being mounted at /735/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.566451][T12279] loop1: detected capacity change from 0 to 40427 [ 251.612286][T12279] F2FS-fs (loop1): invalid crc value [ 251.723660][T12279] F2FS-fs (loop1): Found nat_bits in checkpoint [ 251.826185][T12329] loop3: detected capacity change from 0 to 512 [ 251.881475][T12329] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.925810][T12279] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 251.955726][T12329] EXT4-fs (loop3): 1 truncate cleaned up [ 251.980475][T12329] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 251.996496][T12279] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 252.110008][ T4185] attempt to access beyond end of device [ 252.110008][ T4185] loop1: rw=2049, want=40968, limit=40427 [ 252.272238][ T4233] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.386194][T12352] netlink: 'syz.3.3715': attribute type 10 has an invalid length. [ 252.398574][T12350] loop0: detected capacity change from 0 to 1024 [ 252.406663][T12352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3715'. [ 252.547161][T12350] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.645609][T12350] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #11: comm syz.0.3713: directory missing '..' [ 252.661292][ T4233] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 252.673795][T12355] xt_CT: No such helper "pptp" [ 252.689935][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.706366][ T4233] usb 3-1: config 0 descriptor?? [ 252.742015][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3717'. [ 252.946573][T12378] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3722'. [ 252.988294][T12376] Restarting kernel threads ... done. [ 253.001205][ T4233] [drm] vendor descriptor length:6 data:06 5f 01 30 30 30 00 00 00 00 00 [ 253.010901][ T4233] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 253.094047][ T4662] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 253.221327][ T4233] [drm:udl_init] *ERROR* Selecting channel failed [ 253.262454][T12392] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3731'. [ 253.273690][ T4233] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 253.292313][ T4233] [drm] Initialized udl on minor 2 [ 253.321177][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.332523][ T4233] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 253.351411][ T4662] usb 5-1: Using ep0 maxpacket: 32 [ 253.360845][T12388] loop0: detected capacity change from 0 to 4096 [ 253.371746][ T4660] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 253.386688][ T4233] usb 3-1: USB disconnect, device number 11 [ 253.420495][ T4660] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 253.434940][T12388] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 253.453042][ T4660] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 253.576023][T12388] ntfs3: loop0: failed to convert "c46c" to koi8-ru [ 253.632010][ T4662] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 253.651063][ T4662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.659144][ T4662] usb 5-1: Product: syz [ 253.669736][ T4662] usb 5-1: Manufacturer: syz [ 253.676929][ T4662] usb 5-1: SerialNumber: syz [ 253.683843][ T4662] usb 5-1: config 0 descriptor?? [ 254.161359][ T4662] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 254.168716][ T4662] airspy 5-1:0.0: Could not detect board [ 254.191143][ T4662] airspy: probe of 5-1:0.0 failed with error -71 [ 254.217253][ T4662] usb 5-1: USB disconnect, device number 15 [ 254.302529][T12448] loop2: detected capacity change from 0 to 8 [ 254.399287][T12448] SQUASHFS error: Failed to read block 0x2d7: -5 [ 254.420315][T12448] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 254.452679][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 254.452694][ T26] audit: type=1800 audit(1769423325.011:13): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3760" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 254.507886][T12461] loop1: detected capacity change from 0 to 64 [ 254.550490][T12466] loop0: detected capacity change from 0 to 128 [ 254.619517][T12468] loop3: detected capacity change from 0 to 1024 [ 254.626988][T12461] attempt to access beyond end of device [ 254.626988][T12461] loop1: rw=0, want=3074, limit=64 [ 254.640846][T12466] FAT-fs (loop0): invalid media value (0x00) [ 254.657519][T12466] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 254.680421][T12466] FAT-fs (loop0): Can't find a valid FAT filesystem [ 254.904566][ T1218] hfsplus: b-tree write err: -5, ino 4 [ 255.111163][ T8355] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 255.197252][T12508] loop2: detected capacity change from 0 to 256 [ 255.204727][T12507] loop4: detected capacity change from 0 to 16 [ 255.261719][T12507] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 255.304530][T12507] cramfs: Error -3 while decompressing! [ 255.321259][T12507] cramfs: ffffffff963fff68(453)->ffff88802c358000(4096) [ 255.335682][T12508] FAT-fs (loop2): Directory bread(block 64) failed [ 255.371051][T12508] FAT-fs (loop2): Directory bread(block 65) failed [ 255.388515][T12508] FAT-fs (loop2): Directory bread(block 66) failed [ 255.395581][ T8355] usb 2-1: Using ep0 maxpacket: 16 [ 255.407339][T12512] loop0: detected capacity change from 0 to 4096 [ 255.414160][T12508] FAT-fs (loop2): Directory bread(block 67) failed [ 255.420912][T12508] FAT-fs (loop2): Directory bread(block 68) failed [ 255.429220][T12508] FAT-fs (loop2): Directory bread(block 69) failed [ 255.461116][T12508] FAT-fs (loop2): Directory bread(block 70) failed [ 255.469030][T12508] FAT-fs (loop2): Directory bread(block 71) failed [ 255.479581][T12512] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 255.488843][T12508] FAT-fs (loop2): Directory bread(block 72) failed [ 255.496258][T12508] FAT-fs (loop2): Directory bread(block 73) failed [ 255.522643][T12512] ntfs: volume version 3.1. [ 255.549185][T12512] ntfs: (device loop0): parse_options(): Unrecognized mount option ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ. [ 255.641401][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.647771][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.721394][ T8355] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 255.756961][ T8355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.816503][ T8355] usb 2-1: Product: syz [ 255.820749][ T8355] usb 2-1: Manufacturer: syz [ 255.870993][ T8355] usb 2-1: SerialNumber: syz [ 255.905702][ T8355] r8152-cfgselector 2-1: config 0 descriptor?? [ 256.074496][T12528] autofs4:pid:12528:autofs_fill_super: called with bogus options [ 256.156873][T12530] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 256.178542][T12530] [U] J"—e:ÀÆ" [ 256.264881][T12514] loop3: detected capacity change from 0 to 32768 [ 256.339282][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 256.352705][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 256.381294][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 256.399125][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 256.423385][ T8355] r8152-cfgselector 2-1: Unknown version 0x0000 [ 256.447614][ T8355] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 256.458719][T12514] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 256.583364][T12514] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73 [ 256.657032][T12514] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 256.672317][T12514] OCFS2: File system is now read-only. [ 256.677845][T12514] (syz.3.3793,12514,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 256.690138][T12514] (syz.3.3793,12514,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 256.699857][T12514] (syz.3.3793,12514,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 256.744047][T12514] (syz.3.3793,12514,0):ocfs2_mknod:350 ERROR: status = -30 [ 256.769091][T12554] loop0: detected capacity change from 0 to 1024 [ 256.781494][T12514] (syz.3.3793,12514,0):ocfs2_mknod:502 ERROR: status = -30 [ 256.788776][T12514] (syz.3.3793,12514,0):ocfs2_create:676 ERROR: status = -30 [ 256.839540][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 257.171149][ T9173] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 257.348548][T12584] loop1: detected capacity change from 0 to 16 [ 257.381894][T12584] erofs: (device loop1): mounted with root inode @ nid 36. [ 257.395357][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3838'. [ 257.421787][T12584] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 257.445177][ T9173] usb 3-1: Using ep0 maxpacket: 32 [ 257.458165][T12584] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 257.506719][ T26] audit: type=1800 audit(1769423328.061:14): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3825" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 257.600825][T12595] EXT4-fs (loop4): orphan cleanup on readonly fs [ 257.612288][ T9173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.651293][ T9173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.662163][ T9173] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.689673][T12595] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.3830: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 257.751867][T12595] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.3830: Bad quota inode: 4, type: 1 [ 257.786894][T12595] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 257.846042][T12595] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 257.853128][T12595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.871196][ T9173] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 257.916702][ T9173] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 257.925545][T12595] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 257.940463][ T9173] usb 3-1: Product: syz [ 257.951360][ T9173] usb 3-1: Manufacturer: syz [ 257.956092][ T9173] usb 3-1: SerialNumber: syz [ 257.964603][T12595] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 258.040046][ T9173] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18 [ 258.320046][ T9173] usb 3-1: USB disconnect, device number 12 [ 258.411677][ T9173] appletouch 3-1:1.0: input: appletouch disconnected [ 258.718193][T12598] XFS (loop0): Mounting V5 Filesystem [ 258.820684][T12598] XFS (loop0): Ending clean mount [ 258.867964][T12598] XFS (loop0): Quotacheck needed: Please wait. [ 258.914802][T12598] XFS (loop0): Quotacheck: Done. [ 259.047467][ T4189] XFS (loop0): Unmounting Filesystem [ 259.090750][T12611] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 259.090750][T12611] [ 259.136624][T12652] hfsplus: Filesystem is marked locked, mounting read-only. [ 259.212317][T12652] hfsplus: filesystem is marked locked, leaving read-only. [ 259.415699][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3870'. [ 260.271300][ T4660] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 260.313065][T12723] set_capacity_and_notify: 4 callbacks suppressed [ 260.313084][T12723] loop4: detected capacity change from 0 to 256 [ 260.397382][T12723] FAT-fs (loop4): Directory bread(block 64) failed [ 260.407613][T12723] FAT-fs (loop4): Directory bread(block 65) failed [ 260.407754][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3889'. [ 260.416717][T12723] FAT-fs (loop4): Directory bread(block 66) failed [ 260.441110][T12723] FAT-fs (loop4): Directory bread(block 67) failed [ 260.447902][T12723] FAT-fs (loop4): Directory bread(block 68) failed [ 260.461162][T12723] FAT-fs (loop4): Directory bread(block 69) failed [ 260.468111][T12723] FAT-fs (loop4): Directory bread(block 70) failed [ 260.477699][T12723] FAT-fs (loop4): Directory bread(block 71) failed [ 260.485118][T12723] FAT-fs (loop4): Directory bread(block 72) failed [ 260.494634][T12723] FAT-fs (loop4): Directory bread(block 73) failed [ 260.521020][ T4660] usb 2-1: Using ep0 maxpacket: 32 [ 260.641255][ T4660] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 260.659808][ T4660] usb 2-1: config 0 has no interface number 0 [ 260.687727][T12731] loop3: detected capacity change from 0 to 256 [ 260.713516][T12729] loop2: detected capacity change from 0 to 512 [ 260.787872][T12731] FAT-fs (loop3): Directory bread(block 64) failed [ 260.794562][T12731] FAT-fs (loop3): Directory bread(block 65) failed [ 260.823400][ T4660] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=70.50 [ 260.836348][T12731] FAT-fs (loop3): Directory bread(block 66) failed [ 260.849550][ T4660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.881089][T12731] FAT-fs (loop3): Directory bread(block 67) failed [ 260.887979][ T4660] usb 2-1: Product: syz [ 260.893487][ T4660] usb 2-1: Manufacturer: syz [ 260.898390][ T4660] usb 2-1: SerialNumber: syz [ 260.903751][T12731] FAT-fs (loop3): Directory bread(block 68) failed [ 260.910342][T12731] FAT-fs (loop3): Directory bread(block 69) failed [ 260.931769][T12729] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 260.944121][ T4660] usb 2-1: config 0 descriptor?? [ 260.955237][T12733] loop4: detected capacity change from 0 to 8192 [ 260.962082][T12731] FAT-fs (loop3): Directory bread(block 70) failed [ 260.968664][T12731] FAT-fs (loop3): Directory bread(block 71) failed [ 260.983492][ T4660] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 260.986550][T12729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 260.989867][ T4660] gspca_stv06xx: st6422 sensor detected [ 261.016338][T12731] FAT-fs (loop3): Directory bread(block 72) failed [ 261.030111][T12733] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 261.072486][T12729] System zones: 0-1, 15-15, 18-18, 34-34 [ 261.079304][T12731] FAT-fs (loop3): Directory bread(block 73) failed [ 261.084712][T12729] EXT4-fs (loop2): orphan cleanup on readonly fs [ 261.092592][T12733] REISERFS (device loop4): using ordered data mode [ 261.099180][T12733] reiserfs: using flush barriers [ 261.111995][T12729] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 261.124735][T12729] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 261.140161][T12729] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 261.148587][T12733] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.165721][T12729] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3891: bg 0: block 40: padding at end of block bitmap is not set [ 261.181803][T12733] REISERFS (device loop4): checking transaction log (loop4) [ 261.193108][T12729] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 261.203213][T12733] REISERFS (device loop4): Using r5 hash to sort names [ 261.211663][T12729] EXT4-fs (loop2): 1 truncate cleaned up [ 261.222494][T12733] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 261.228775][T12729] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 261.329739][T12725] loop0: detected capacity change from 0 to 32768 [ 261.338695][T12729] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 261.531376][ T4660] STV06xx: probe of 2-1:0.238 failed with error -71 [ 261.573177][T12738] loop4: detected capacity change from 0 to 256 [ 261.581429][T12744] netlink: 'syz.2.3895': attribute type 21 has an invalid length. [ 261.589912][T12744] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3895'. [ 261.625309][ T4660] usb 2-1: unknown interface protocol 0x9, assuming v1 [ 261.645416][ T4660] usb 2-1: cannot find UAC_HEADER [ 261.738262][ T4660] snd-usb-audio: probe of 2-1:0.238 failed with error -22 [ 261.760474][T12750] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3899'. [ 261.777745][ T4660] usb 2-1: USB disconnect, device number 9 [ 261.815472][T12738] FAT-fs (loop4): Directory bread(block 64) failed [ 261.832968][T12738] FAT-fs (loop4): Directory bread(block 65) failed [ 261.839642][T12738] FAT-fs (loop4): Directory bread(block 66) failed [ 261.878975][T12746] loop0: detected capacity change from 0 to 4096 [ 261.911137][T12738] FAT-fs (loop4): Directory bread(block 67) failed [ 261.918018][T12738] FAT-fs (loop4): Directory bread(block 68) failed [ 261.955694][T12738] FAT-fs (loop4): Directory bread(block 69) failed [ 261.970629][T12738] FAT-fs (loop4): Directory bread(block 70) failed [ 261.991410][T12738] FAT-fs (loop4): Directory bread(block 71) failed [ 262.001346][T12746] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 262.002925][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.030373][T12738] FAT-fs (loop4): Directory bread(block 72) failed [ 262.039004][T12746] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 262.048220][T12746] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 262.058447][T12738] FAT-fs (loop4): Directory bread(block 73) failed [ 262.061855][T12746] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 262.094663][T12746] ntfs: volume version 3.1. [ 262.152191][T12746] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 262.222156][T12746] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 262.388135][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3902'. [ 262.396065][T12762] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3908'. [ 262.405156][T12761] loop2: detected capacity change from 0 to 256 [ 262.532275][T12761] FAT-fs (loop2): Directory bread(block 64) failed [ 262.556365][T12761] FAT-fs (loop2): Directory bread(block 65) failed [ 262.586718][T12761] FAT-fs (loop2): Directory bread(block 66) failed [ 262.594143][T12761] FAT-fs (loop2): Directory bread(block 67) failed [ 262.603577][T12766] loop1: detected capacity change from 0 to 128 [ 262.616403][T12761] FAT-fs (loop2): Directory bread(block 68) failed [ 262.674301][T12761] FAT-fs (loop2): Directory bread(block 69) failed [ 262.697973][T12761] FAT-fs (loop2): Directory bread(block 70) failed [ 262.712298][T12768] loop3: detected capacity change from 0 to 2048 [ 262.718961][T12761] FAT-fs (loop2): Directory bread(block 71) failed [ 262.729089][T12761] FAT-fs (loop2): Directory bread(block 72) failed [ 262.743404][T12761] FAT-fs (loop2): Directory bread(block 73) failed [ 262.824683][T12768] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 262.861136][T12768] UDF-fs: Scanning with blocksize 512 failed [ 262.894130][T12768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.933955][T12764] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 262.961231][T12764] REISERFS (device loop0): using ordered data mode [ 262.968042][T12764] reiserfs: using flush barriers [ 263.023366][T12764] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 263.113819][T12764] REISERFS (device loop0): checking transaction log (loop0) [ 263.123964][T12764] REISERFS (device loop0): Using r5 hash to sort names [ 263.161408][T12764] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 263.223681][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3930'. [ 263.393911][T12791] FAT-fs (loop2): Directory bread(block 64) failed [ 263.413187][T12795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3921'. [ 263.424658][T12791] FAT-fs (loop2): Directory bread(block 65) failed [ 263.457520][T12791] FAT-fs (loop2): Directory bread(block 66) failed [ 263.484263][T12791] FAT-fs (loop2): Directory bread(block 67) failed [ 263.506130][T12791] FAT-fs (loop2): Directory bread(block 68) failed [ 263.527331][T12791] FAT-fs (loop2): Directory bread(block 69) failed [ 263.545987][T12791] FAT-fs (loop2): Directory bread(block 70) failed [ 263.553390][T12791] FAT-fs (loop2): Directory bread(block 71) failed [ 263.560162][T12791] FAT-fs (loop2): Directory bread(block 72) failed [ 263.567537][T12791] FAT-fs (loop2): Directory bread(block 73) failed [ 263.647072][T12799] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 263.756965][T12802] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 263.799469][T12802] UDF-fs: Scanning with blocksize 512 failed [ 263.822251][T12811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 263.841641][T12802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.201673][T12828] Unable to read rock-ridge attributes [ 264.241861][T12836] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3940'. [ 264.261512][T12828] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 264.291273][T12836] netlink: 'syz.1.3940': attribute type 3 has an invalid length. [ 264.517143][T12847] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 264.547201][T12845] FAT-fs (loop1): Directory bread(block 64) failed [ 264.557441][T12835] ntfs3: loop4: ino=0, "file0" The size of extended attributes must not exceed 64KiB [ 264.573896][T12845] FAT-fs (loop1): Directory bread(block 65) failed [ 264.580739][T12845] FAT-fs (loop1): Directory bread(block 66) failed [ 264.588935][T12849] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3948'. [ 264.604616][T12845] FAT-fs (loop1): Directory bread(block 67) failed [ 264.611214][T12847] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 264.630353][T12845] FAT-fs (loop1): Directory bread(block 68) failed [ 264.674176][T12845] FAT-fs (loop1): Directory bread(block 69) failed [ 264.699856][T12847] Symlink component flag not implemented [ 264.714293][T12845] FAT-fs (loop1): Directory bread(block 70) failed [ 264.733928][T12847] Symlink component flag not implemented [ 264.744087][T12845] FAT-fs (loop1): Directory bread(block 71) failed [ 264.750773][T12845] FAT-fs (loop1): Directory bread(block 72) failed [ 264.809370][T12845] FAT-fs (loop1): Directory bread(block 73) failed [ 264.878055][T12851] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 264.941459][T12851] UDF-fs: Scanning with blocksize 512 failed [ 265.026625][T12851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.183994][T12853] syz.4.3950 (12853) used greatest stack depth: 18256 bytes left [ 265.407123][T12870] set_capacity_and_notify: 11 callbacks suppressed [ 265.407140][T12870] loop0: detected capacity change from 0 to 64 [ 265.443467][T12868] loop1: detected capacity change from 0 to 512 [ 265.521958][T12868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 265.633472][T12868] EXT4-fs (loop1): 1 truncate cleaned up [ 265.639293][T12868] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 266.111920][T12904] siw: device registration error -23 [ 266.191194][ T4660] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 266.343145][T12908] loop3: detected capacity change from 0 to 4096 [ 266.387366][T12908] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 266.415836][ T4233] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 266.473215][T12908] ntfs: volume version 3.1. [ 266.527159][T12908] ntfs: (device loop3): parse_options(): Unrecognized mount option ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ. [ 266.550760][T12916] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3979'. [ 266.563862][T12916] openvswitch: netlink: Key 0 has unexpected len 3060 expected 0 [ 266.583872][ T4660] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 266.603347][ T4660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.686268][ T4660] pwc: Logitech ViewPort AV 100 webcam detected. [ 266.804137][ T4233] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 266.819211][ T4233] usb 1-1: config 0 has no interface number 0 [ 266.841319][ T4233] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.876963][ T4233] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.925738][T12902] loop1: detected capacity change from 0 to 32768 [ 267.010105][T12928] usb usb9: usbfs: process 12928 (syz.3.3986) did not claim interface 0 before use [ 267.045768][T12930] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3987'. [ 267.062457][ T4233] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 267.080721][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.113520][ T4233] usb 1-1: Product: syz [ 267.119168][ T4233] usb 1-1: Manufacturer: syz [ 267.125689][ T4660] pwc: send_video_command error -71 [ 267.132963][ T4660] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 267.162737][ T4233] usb 1-1: SerialNumber: syz [ 267.171618][ T4660] Philips webcam: probe of 5-1:127.0 failed with error -71 [ 267.180132][T12932] siw: device registration error -23 [ 267.188583][ T4233] usb 1-1: config 0 descriptor?? [ 267.212058][ T4660] usb 5-1: USB disconnect, device number 16 [ 267.271552][ T4233] vmk80xx 1-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 267.300336][T12934] loop2: detected capacity change from 0 to 2048 [ 267.313116][ T4233] vmk80xx: probe of 1-1:0.255 failed with error -22 [ 267.410459][T12934] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 267.462788][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2 [ 267.474116][ T4660] usb 1-1: USB disconnect, device number 14 [ 267.496715][T12937] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.749347][T12949] loop4: detected capacity change from 0 to 512 [ 267.825330][T12953] loop1: detected capacity change from 0 to 512 [ 267.860578][T12953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.868192][T12949] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 267.913436][T12953] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3996: inode has both inline data and extents flags [ 267.918752][T12949] EXT4-fs (loop4): orphan cleanup on readonly fs [ 267.941979][T12953] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3996: couldn't read orphan inode 15 (err -117) [ 267.971549][T12953] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,nojournal_checksum,norecovery,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 268.031283][T12949] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 268.041256][T12949] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3994: attempt to clear invalid blocks 2 len 1 [ 268.092718][T12959] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3997'. [ 268.175548][T12949] EXT4-fs (loop4): Remounting filesystem read-only [ 268.206282][T12949] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 268.263682][T12949] EXT4-fs (loop4): Remounting filesystem read-only [ 268.270508][T12949] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3994: invalid indirect mapped block 1819239214 (level 0) [ 268.319729][T12949] EXT4-fs (loop4): Remounting filesystem read-only [ 268.329507][T12949] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3994: invalid indirect mapped block 1819239214 (level 1) [ 268.361800][ T9173] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 268.405649][T12949] EXT4-fs (loop4): Remounting filesystem read-only [ 268.442972][T12949] EXT4-fs (loop4): 1 truncate cleaned up [ 268.459151][T12946] loop2: detected capacity change from 0 to 32768 [ 268.459882][T12949] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 268.516918][T12955] loop3: detected capacity change from 0 to 32768 [ 268.738199][T12970] loop4: detected capacity change from 0 to 256 [ 268.795093][T12970] FAT-fs (loop4): Directory bread(block 64) failed [ 268.804517][ T9173] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 268.831055][ T9173] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 183 [ 268.861435][T12970] FAT-fs (loop4): Directory bread(block 65) failed [ 268.888468][ T9173] usb 2-1: config 0 has no interface number 1 [ 268.895356][T12970] FAT-fs (loop4): Directory bread(block 66) failed [ 268.911174][ T9173] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.931017][T12970] FAT-fs (loop4): Directory bread(block 67) failed [ 268.948784][T12970] FAT-fs (loop4): Directory bread(block 68) failed [ 268.955838][ T9173] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 268.996520][T12970] FAT-fs (loop4): Directory bread(block 69) failed [ 269.044172][T12970] FAT-fs (loop4): Directory bread(block 70) failed [ 269.079224][T12970] FAT-fs (loop4): Directory bread(block 71) failed [ 269.127333][T12970] FAT-fs (loop4): Directory bread(block 72) failed [ 269.146065][T12970] FAT-fs (loop4): Directory bread(block 73) failed [ 269.179724][T12985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4012'. [ 269.233364][T12985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4012'. [ 269.243209][ T9173] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 269.259669][ T9173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.260162][T12981] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,nogrpid,nolazytime,,errors=continue. Quota mode: writeback. [ 269.292714][ T9173] usb 2-1: Product: syz [ 269.297266][ T9173] usb 2-1: Manufacturer: syz [ 269.302044][ T9173] usb 2-1: SerialNumber: syz [ 269.308714][ T9173] usb 2-1: config 0 descriptor?? [ 269.328034][T12981] ext4 filesystem being mounted at /794/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.353100][ T9173] usb-storage 2-1:0.127: USB Mass Storage device detected [ 269.410894][ T9173] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 269.466338][ T9173] usb-storage 2-1:0.0: USB Mass Storage device detected [ 269.496407][ T9173] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 269.558188][T12999] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 269.584342][ T9173] usb 2-1: USB disconnect, device number 10 [ 269.683351][T12999] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4016: invalid indirect mapped block 8 (level 2) [ 269.708265][T12998] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 269.719164][T12999] EXT4-fs (loop0): 1 truncate cleaned up [ 269.748428][T12999] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,nomblk_io_submit,auto_da_alloc=0x0000000000000002,nouid32,barrier=0x0000000000000009,noauto_da_alloc,,errors=continue. Quota mode: none. [ 269.772756][T12998] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 269.784690][T12998] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 269.793246][T12998] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.875504][T12998] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 269.977669][T13011] netlink: 'syz.3.4022': attribute type 4 has an invalid length. [ 270.545713][T13025] set_capacity_and_notify: 4 callbacks suppressed [ 270.545731][T13025] loop2: detected capacity change from 0 to 4096 [ 270.626220][T13025] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 270.811314][T13025] ntfs3: loop2: failed to convert "c46c" to maccroatian [ 271.288179][T13070] loop3: detected capacity change from 0 to 256 [ 271.347222][T13070] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.390544][T13070] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 271.434307][T13070] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 271.858377][T13089] loop1: detected capacity change from 0 to 4096 [ 271.913780][T13061] loop4: detected capacity change from 0 to 32768 [ 271.948520][T13089] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 271.970311][T13089] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 271.991221][T13089] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 272.032049][T13089] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 272.034072][T13061] XFS (loop4): Mounting V5 Filesystem [ 272.117403][T13089] ntfs: volume version 3.1. [ 272.132756][T13080] loop2: detected capacity change from 0 to 32768 [ 272.158838][T13080] [ 272.158838][T13080] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.158838][T13080] [ 272.228440][T13089] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 272.246896][T13061] XFS (loop4): Ending clean mount [ 272.267812][T13061] XFS (loop4): Quotacheck needed: Please wait. [ 272.294865][T13080] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 272.294865][T13080] [ 272.308940][T13089] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 272.391358][T13061] XFS (loop4): Quotacheck: Done. [ 272.391405][T13080] xtLookup: xtSearch returned -5 [ 272.432299][T13080] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 272.432299][T13080] [ 272.505879][ T4195] XFS (loop4): Unmounting Filesystem [ 272.589476][ T1218] [ 272.589476][ T1218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.589476][ T1218] [ 272.635727][T13107] netlink: 'syz.3.4065': attribute type 9 has an invalid length. [ 272.647826][ T1218] [ 272.647826][ T1218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.647826][ T1218] [ 272.699726][ T277] [ 272.699726][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.699726][ T277] [ 272.710925][T13108] loop0: detected capacity change from 0 to 2048 [ 272.760176][ T4197] [ 272.760176][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.760176][ T4197] [ 272.786429][ T4197] [ 272.786429][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.786429][ T4197] [ 272.839677][T13112] loop1: detected capacity change from 0 to 1024 [ 272.850332][T13115] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.902227][T13108] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 272.995180][T13108] Remounting filesystem read-only [ 273.013074][T13108] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 273.067003][T13108] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 273.107927][T13108] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 273.141624][T13108] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 273.166609][T13108] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 273.182668][ T144] hfsplus: b-tree write err: -5, ino 4 [ 273.192830][ T26] audit: type=1800 audit(1769423343.751:15): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4067" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 273.283281][T13121] loop2: detected capacity change from 0 to 1024 [ 273.294461][T13123] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4074'. [ 273.356764][T13125] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4062'. [ 273.580805][T13135] loop1: detected capacity change from 0 to 164 [ 273.616767][T13135] rock: directory entry would overflow storage [ 273.643545][T13135] rock: sig=0x66, size=4, remaining=3 [ 273.651421][ T4662] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 273.687205][T13135] rock: directory entry would overflow storage [ 273.702693][T13135] rock: sig=0x66, size=4, remaining=3 [ 274.011328][ T4662] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 274.019660][ T4662] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 274.023807][T13153] loop1: detected capacity change from 0 to 64 [ 274.049159][ T4662] usb 3-1: config 0 has no interface number 0 [ 274.069458][ T4662] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 274.090389][ T4662] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 274.100497][ T4662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.129949][ T4662] usb 3-1: config 0 descriptor?? [ 274.171350][T13121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 274.181419][T13157] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 274.249627][T13159] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4089'. [ 274.349206][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4093'. [ 274.371594][T13163] device bridge_slave_1 left promiscuous mode [ 274.394902][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.430501][ T4662] usb 3-1: USB disconnect, device number 13 [ 274.498696][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.521227][T13139] XFS (loop0): Mounting V5 Filesystem [ 274.571080][T13165] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 274.658588][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4096'. [ 274.678465][T13139] XFS (loop0): Ending clean mount [ 274.747773][T13165] ntfs3: loop1: failed to convert "c46c" to maciceland [ 274.831735][ T4189] XFS (loop0): Unmounting Filesystem [ 275.100561][T13187] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 275.144422][T13187] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 275.361196][ T4660] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 275.601149][ T4652] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.614037][ T4660] usb 5-1: Using ep0 maxpacket: 16 [ 275.730652][T13219] set_capacity_and_notify: 4 callbacks suppressed [ 275.730670][T13219] loop0: detected capacity change from 0 to 512 [ 275.744342][ T4660] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 275.755812][ T4660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 275.785645][ T4660] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 275.799483][ T4660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 275.817316][T13219] EXT4-fs (loop0): Ignoring removed bh option [ 275.825895][ T4660] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 275.850671][T13219] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.868093][T13219] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 275.931699][T13219] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 275.959451][T13219] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 275.974594][ T4652] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.985390][ T4652] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.998799][T13219] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 276.034414][ T4660] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 276.047343][T13219] EXT4-fs warning (device loop0): ext4_group_extend:1852: can't read last block, resize aborted [ 276.059021][ T4660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.067570][ T4660] usb 5-1: Product: syz [ 276.072250][ T4660] usb 5-1: Manufacturer: syz [ 276.076898][ T4660] usb 5-1: SerialNumber: syz [ 276.084708][ T4660] usb 5-1: config 0 descriptor?? [ 276.101391][T13189] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.112489][T13189] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 276.131488][ T4660] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 276.141739][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 276.148003][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 276.175596][ T4652] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 276.195412][ T4652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.221242][ T4652] usb 4-1: Product: syz [ 276.225480][ T4652] usb 4-1: Manufacturer: syz [ 276.231041][ T4662] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 276.247838][ T4652] usb 4-1: SerialNumber: syz [ 276.265989][ T4652] usb 4-1: config 0 descriptor?? [ 276.313299][ T4652] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 276.380909][ T6985] usb 5-1: USB disconnect, device number 17 [ 276.388073][ T4652] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.406428][ T6985] mcba_usb 5-1:0.0 can0: device disconnected [ 276.461539][ T4652] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 276.470240][ T4652] usb 4-1: media controller created [ 276.475906][ T4662] usb 3-1: Using ep0 maxpacket: 16 [ 276.532124][T13243] comedi comedi0: Minor 32769 is invalid! [ 276.553583][ T4652] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.601364][ T4662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.643416][ T4662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.691601][ T4662] usb 3-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 276.721426][ T4662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.738403][ T4652] DVB: Unable to find symbol tda10046_attach() [ 276.771089][ T4652] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 276.782283][ T4662] usb 3-1: config 0 descriptor?? [ 276.799171][ T4652] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 276.822564][ T4662] hub 3-1:0.0: USB hub found [ 277.041681][ T4662] hub 3-1:0.0: 7 ports detected [ 277.065048][ T4662] hub 3-1:0.0: insufficient power available to use all downstream ports [ 277.091125][ T4652] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 277.113304][ T4652] usb 4-1: USB disconnect, device number 10 [ 277.251946][ T4662] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 277.275686][ T4662] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 277.355913][ T4662] usb 3-1: USB disconnect, device number 14 [ 277.870525][T13325] netlink: 'syz.4.4156': attribute type 24 has an invalid length. [ 277.975797][T13333] loop1: detected capacity change from 0 to 1024 [ 278.059743][T13333] hfsplus: invalid catalog entry type in lookup [ 278.192420][T13345] xt_TCPMSS: Only works on TCP SYN packets [ 278.198800][T13348] netlink: zone id is out of range [ 278.304375][T13348] netlink: set zone limit has 8 unknown bytes [ 278.359973][T13357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4169'. [ 278.400068][T13357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4169'. [ 278.581672][ T9173] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 278.688391][T13377] loop0: detected capacity change from 0 to 256 [ 278.798914][T13377] FAT-fs (loop0): Directory bread(block 64) failed [ 278.834199][T13377] FAT-fs (loop0): Directory bread(block 65) failed [ 278.854900][T13377] FAT-fs (loop0): Directory bread(block 66) failed [ 278.884875][T13377] FAT-fs (loop0): Directory bread(block 67) failed [ 278.900834][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 278.911987][T13377] FAT-fs (loop0): Directory bread(block 68) failed [ 278.918591][T13377] FAT-fs (loop0): Directory bread(block 69) failed [ 278.934711][T13386] device bridge_slave_1 left promiscuous mode [ 278.962045][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.978334][T13377] FAT-fs (loop0): Directory bread(block 70) failed [ 278.985963][T13377] FAT-fs (loop0): Directory bread(block 71) failed [ 279.000065][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.016577][ T9173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.028064][ T9173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.037540][T13377] FAT-fs (loop0): Directory bread(block 72) failed [ 279.044436][T13377] FAT-fs (loop0): Directory bread(block 73) failed [ 279.194938][ T8355] bridge0 speed is unknown, defaulting to 1000 [ 279.221320][ T9173] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 279.230612][ T9173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.261484][ T8355] ================================================================== [ 279.270212][ T8355] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 279.277636][ T8355] Read of size 4 at addr ffff88807ef080d8 by task kworker/0:11/8355 [ 279.285646][ T8355] [ 279.288018][ T8355] CPU: 0 PID: 8355 Comm: kworker/0:11 Not tainted syzkaller #0 [ 279.295585][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.305842][ T8355] Workqueue: infiniband ib_cache_event_task [ 279.311786][ T8355] Call Trace: [ 279.315099][ T8355] [ 279.318056][ T8355] dump_stack_lvl+0x188/0x250 [ 279.323176][ T8355] ? show_regs_print_info+0x20/0x20 [ 279.328496][ T8355] ? _printk+0xda/0x130 [ 279.332776][ T8355] ? load_image+0x400/0x400 [ 279.337407][ T8355] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 279.343007][ T8355] print_address_description+0x60/0x2d0 [ 279.348594][ T8355] ? siw_query_port+0x358/0x450 [ 279.353595][ T8355] kasan_report+0xdf/0x130 [ 279.358055][ T8355] ? siw_query_port+0x358/0x450 [ 279.363029][ T8355] siw_query_port+0x358/0x450 [ 279.367936][ T8355] ib_cache_update+0x1bf/0x9c0 [ 279.372736][ T8355] ? ib_cache_setup_one+0x5d0/0x5d0 [ 279.377972][ T8355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.384104][ T8355] ? read_lock_is_recursive+0x10/0x10 [ 279.389640][ T8355] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.395761][ T8355] ? _raw_spin_unlock+0x40/0x40 [ 279.401377][ T8355] ib_cache_event_task+0xd4/0x1c0 [ 279.406524][ T8355] process_one_work+0x85f/0x1010 [ 279.411519][ T8355] ? worker_detach_from_pool+0x240/0x240 [ 279.417196][ T8355] ? lockdep_hardirqs_off+0x70/0x100 [ 279.422727][ T8355] ? _raw_spin_lock_irq+0xb7/0xf0 [ 279.427818][ T8355] ? _raw_spin_lock_irqsave+0x100/0x100 [ 279.433408][ T8355] ? wq_worker_running+0x97/0x170 [ 279.438465][ T8355] worker_thread+0xaa6/0x1290 [ 279.443174][ T8355] ? lockdep_hardirqs_on+0x94/0x140 [ 279.448699][ T8355] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.454801][ T8355] kthread+0x436/0x520 [ 279.458898][ T8355] ? rcu_lock_release+0x20/0x20 [ 279.463949][ T8355] ? kthread_blkcg+0xd0/0xd0 [ 279.468568][ T8355] ret_from_fork+0x1f/0x30 [ 279.473039][ T8355] [ 279.476087][ T8355] [ 279.478599][ T8355] Allocated by task 4195: [ 279.483059][ T8355] __kasan_kmalloc+0xb5/0xf0 [ 279.487699][ T8355] kvmalloc_node+0x84/0x130 [ 279.492368][ T8355] alloc_netdev_mqs+0x84/0xc40 [ 279.497161][ T8355] rtnl_create_link+0x2fb/0xa90 [ 279.502134][ T8355] rtnl_newlink+0x127c/0x1a50 [ 279.506952][ T8355] rtnetlink_rcv_msg+0x844/0xf30 [ 279.512053][ T8355] netlink_rcv_skb+0x1f5/0x440 [ 279.517020][ T8355] netlink_unicast+0x774/0x920 [ 279.521920][ T8355] netlink_sendmsg+0x8ba/0xbe0 [ 279.526826][ T8355] __sys_sendto+0x46d/0x620 [ 279.531374][ T8355] __x64_sys_sendto+0xda/0xf0 [ 279.536089][ T8355] do_syscall_64+0x4c/0xa0 [ 279.540734][ T8355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.546651][ T8355] [ 279.548989][ T8355] Freed by task 13386: [ 279.553078][ T8355] kasan_set_track+0x4b/0x70 [ 279.557780][ T8355] kasan_set_free_info+0x1f/0x40 [ 279.562741][ T8355] ____kasan_slab_free+0xd5/0x110 [ 279.568092][ T8355] slab_free_freelist_hook+0xea/0x170 [ 279.573507][ T8355] kfree+0xef/0x2a0 [ 279.577358][ T8355] device_release+0x92/0x1c0 [ 279.582263][ T8355] kobject_put+0x21d/0x460 [ 279.586723][ T8355] netdev_run_todo+0x8f4/0xa70 [ 279.591708][ T8355] rtnetlink_rcv_msg+0xa6a/0xf30 [ 279.596912][ T8355] netlink_rcv_skb+0x1f5/0x440 [ 279.601702][ T8355] netlink_unicast+0x774/0x920 [ 279.606703][ T8355] netlink_sendmsg+0x8ba/0xbe0 [ 279.611600][ T8355] sock_write_iter+0x2a6/0x3a0 [ 279.616486][ T8355] vfs_write+0x745/0xd60 [ 279.620905][ T8355] ksys_write+0x152/0x260 [ 279.625361][ T8355] do_syscall_64+0x4c/0xa0 [ 279.629835][ T8355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.635841][ T8355] [ 279.638203][ T8355] Last potentially related work creation: [ 279.643940][ T8355] kasan_save_stack+0x35/0x60 [ 279.648739][ T8355] kasan_record_aux_stack+0xb8/0x100 [ 279.654140][ T8355] insert_work+0x54/0x3d0 [ 279.658607][ T8355] __queue_work+0x9c5/0xd50 [ 279.663243][ T8355] queue_work_on+0x124/0x1f0 [ 279.667953][ T8355] rhashtable_remove_fast+0xba2/0xc60 [ 279.673480][ T8355] br_multicast_dev_del+0x176/0x600 [ 279.678706][ T8355] br_dev_uninit+0x1a/0x70 [ 279.683144][ T8355] unregister_netdevice_many+0x1417/0x19f0 [ 279.689061][ T8355] rtnl_dellink+0x52b/0x7b0 [ 279.693597][ T8355] rtnetlink_rcv_msg+0x844/0xf30 [ 279.698596][ T8355] netlink_rcv_skb+0x1f5/0x440 [ 279.703384][ T8355] netlink_unicast+0x774/0x920 [ 279.708185][ T8355] netlink_sendmsg+0x8ba/0xbe0 [ 279.713022][ T8355] sock_write_iter+0x2a6/0x3a0 [ 279.717815][ T8355] vfs_write+0x745/0xd60 [ 279.722116][ T8355] ksys_write+0x152/0x260 [ 279.726467][ T8355] do_syscall_64+0x4c/0xa0 [ 279.730913][ T8355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.736844][ T8355] [ 279.739196][ T8355] Second to last potentially related work creation: [ 279.746011][ T8355] kasan_save_stack+0x35/0x60 [ 279.750720][ T8355] kasan_record_aux_stack+0xb8/0x100 [ 279.756032][ T8355] insert_work+0x54/0x3d0 [ 279.760734][ T8355] __queue_work+0x9c5/0xd50 [ 279.765265][ T8355] queue_work_on+0x124/0x1f0 [ 279.769871][ T8355] br_multicast_dev_del+0x362/0x600 [ 279.775235][ T8355] br_dev_uninit+0x1a/0x70 [ 279.779675][ T8355] unregister_netdevice_many+0x1417/0x19f0 [ 279.785524][ T8355] rtnl_dellink+0x52b/0x7b0 [ 279.790056][ T8355] rtnetlink_rcv_msg+0x844/0xf30 [ 279.795025][ T8355] netlink_rcv_skb+0x1f5/0x440 [ 279.799809][ T8355] netlink_unicast+0x774/0x920 [ 279.804597][ T8355] netlink_sendmsg+0x8ba/0xbe0 [ 279.809581][ T8355] sock_write_iter+0x2a6/0x3a0 [ 279.814364][ T8355] vfs_write+0x745/0xd60 [ 279.818716][ T8355] ksys_write+0x152/0x260 [ 279.823066][ T8355] do_syscall_64+0x4c/0xa0 [ 279.827503][ T8355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.833424][ T8355] [ 279.835771][ T8355] The buggy address belongs to the object at ffff88807ef08000 [ 279.835771][ T8355] which belongs to the cache kmalloc-cg-8k of size 8192 [ 279.850103][ T8355] The buggy address is located 216 bytes inside of [ 279.850103][ T8355] 8192-byte region [ffff88807ef08000, ffff88807ef0a000) [ 279.863496][ T8355] The buggy address belongs to the page: [ 279.869174][ T8355] page:ffffea0001fbc200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ef08 [ 279.879351][ T8355] head:ffffea0001fbc200 order:3 compound_mapcount:0 compound_pincount:0 [ 279.888111][ T8355] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 279.896121][ T8355] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c4c3c0 [ 279.904830][ T8355] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 279.913428][ T8355] page dumped because: kasan: bad access detected [ 279.919975][ T8355] page_owner tracks the page as allocated [ 279.925801][ T8355] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4195, ts 68166901026, free_ts 68138582590 [ 279.946863][ T8355] get_page_from_freelist+0x1bbd/0x1ca0 [ 279.952554][ T8355] __alloc_pages+0x1ee/0x480 [ 279.957281][ T8355] new_slab+0xc0/0x4b0 [ 279.961374][ T8355] ___slab_alloc+0x80a/0xdd0 [ 279.966165][ T8355] __kmalloc_node+0x200/0x3b0 [ 279.970863][ T8355] kvmalloc_node+0x84/0x130 [ 279.975559][ T8355] alloc_netdev_mqs+0x84/0xc40 [ 279.980479][ T8355] rtnl_create_link+0x2fb/0xa90 [ 279.985372][ T8355] rtnl_newlink+0x127c/0x1a50 [ 279.990094][ T8355] rtnetlink_rcv_msg+0x844/0xf30 [ 279.995103][ T8355] netlink_rcv_skb+0x1f5/0x440 [ 280.000157][ T8355] netlink_unicast+0x774/0x920 [ 280.004944][ T8355] netlink_sendmsg+0x8ba/0xbe0 [ 280.009907][ T8355] __sys_sendto+0x46d/0x620 [ 280.014518][ T8355] __x64_sys_sendto+0xda/0xf0 [ 280.019280][ T8355] do_syscall_64+0x4c/0xa0 [ 280.023751][ T8355] page last free stack trace: [ 280.028457][ T8355] free_unref_page_prepare+0x637/0x6c0 [ 280.033943][ T8355] free_unref_page+0x8f/0x2a0 [ 280.038645][ T8355] __unfreeze_partials+0x1a5/0x200 [ 280.043791][ T8355] put_cpu_partial+0x12d/0x190 [ 280.048608][ T8355] qlist_free_all+0x35/0x90 [ 280.053227][ T8355] kasan_quarantine_reduce+0x150/0x160 [ 280.058708][ T8355] __kasan_slab_alloc+0x2f/0xd0 [ 280.063597][ T8355] slab_post_alloc_hook+0x4c/0x380 [ 280.068840][ T8355] __kmalloc+0x127/0x330 [ 280.073188][ T8355] tomoyo_init_log+0x19f9/0x1e90 [ 280.078149][ T8355] tomoyo_supervisor+0x38d/0x11f0 [ 280.083292][ T8355] tomoyo_path_permission+0x25a/0x380 [ 280.088701][ T8355] tomoyo_check_open_permission+0x275/0x410 [ 280.094645][ T8355] security_file_open+0x5e/0xa0 [ 280.100609][ T8355] do_dentry_open+0x322/0xf80 [ 280.105436][ T8355] path_openat+0x26f5/0x2fa0 [ 280.110061][ T8355] [ 280.112423][ T8355] Memory state around the buggy address: [ 280.118166][ T8355] ffff88807ef07f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.126269][ T8355] ffff88807ef08000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.134356][ T8355] >ffff88807ef08080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.142448][ T8355] ^ [ 280.149410][ T8355] ffff88807ef08100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.157586][ T8355] ffff88807ef08180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.165663][ T8355] ================================================================== [ 280.173745][ T8355] Disabling lock debugging due to kernel taint [ 280.232289][ T9173] usb 2-1: Product: syz [ 280.236780][ T9173] usb 2-1: Manufacturer: syz [ 280.248886][ T9173] usb 2-1: SerialNumber: syz [ 280.266096][ T9173] usb 2-1: config 0 descriptor?? [ 280.280574][ T8355] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 280.288276][ T8355] CPU: 0 PID: 8355 Comm: kworker/0:11 Tainted: G B syzkaller #0 [ 280.297264][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.307548][ T8355] Workqueue: infiniband ib_cache_event_task [ 280.313914][ T8355] Call Trace: [ 280.317651][ T8355] [ 280.320632][ T8355] dump_stack_lvl+0x188/0x250 [ 280.325694][ T8355] ? show_regs_print_info+0x20/0x20 [ 280.330937][ T8355] ? load_image+0x400/0x400 [ 280.335596][ T8355] panic+0x2e5/0x810 [ 280.339623][ T8355] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 280.345819][ T8355] ? bpf_jit_dump+0xd0/0xd0 [ 280.350864][ T8355] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 280.356986][ T8355] ? _raw_spin_unlock+0x40/0x40 [ 280.361914][ T8355] ? siw_query_port+0x358/0x450 [ 280.367044][ T8355] check_panic_on_warn+0x80/0xa0 [ 280.372157][ T8355] ? siw_query_port+0x358/0x450 [ 280.377082][ T8355] end_report+0x6d/0xf0 [ 280.381392][ T8355] kasan_report+0x102/0x130 [ 280.386196][ T8355] ? siw_query_port+0x358/0x450 [ 280.391404][ T8355] siw_query_port+0x358/0x450 [ 280.396233][ T8355] ib_cache_update+0x1bf/0x9c0 [ 280.401339][ T8355] ? ib_cache_setup_one+0x5d0/0x5d0 [ 280.406673][ T8355] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.412777][ T8355] ? read_lock_is_recursive+0x10/0x10 [ 280.418191][ T8355] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 280.424385][ T8355] ? _raw_spin_unlock+0x40/0x40 [ 280.429387][ T8355] ib_cache_event_task+0xd4/0x1c0 [ 280.434548][ T8355] process_one_work+0x85f/0x1010 [ 280.439711][ T8355] ? worker_detach_from_pool+0x240/0x240 [ 280.445758][ T8355] ? lockdep_hardirqs_off+0x70/0x100 [ 280.451444][ T8355] ? _raw_spin_lock_irq+0xb7/0xf0 [ 280.456707][ T8355] ? _raw_spin_lock_irqsave+0x100/0x100 [ 280.462398][ T8355] ? wq_worker_running+0x97/0x170 [ 280.467472][ T8355] worker_thread+0xaa6/0x1290 [ 280.472182][ T8355] ? lockdep_hardirqs_on+0x94/0x140 [ 280.477422][ T8355] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 280.483457][ T8355] kthread+0x436/0x520 [ 280.487751][ T8355] ? rcu_lock_release+0x20/0x20 [ 280.492878][ T8355] ? kthread_blkcg+0xd0/0xd0 [ 280.497511][ T8355] ret_from_fork+0x1f/0x30 [ 280.501977][ T8355] [ 280.505615][ T8355] Kernel Offset: disabled [ 280.521544][ T8355] Rebooting in 86400 seconds..