last executing test programs: 2.969937256s ago: executing program 3 (id=2308): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87) 2.786381336s ago: executing program 3 (id=2310): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x3, @pix={0x200, 0xd11b5fe9, 0x36314d59, 0x2, 0x4, 0x3, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3}}) 2.778734887s ago: executing program 4 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 2.55131356s ago: executing program 3 (id=2314): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 2.485980814s ago: executing program 4 (id=2315): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x101000) fadvise64(r0, 0x1, 0xfff, 0x4) 2.325912253s ago: executing program 3 (id=2318): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 2.246119428s ago: executing program 4 (id=2319): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074020440fd07010099482102030109021b00ca000000010904000001c6b3e30009058b0f43"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.999568572s ago: executing program 3 (id=2323): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x0) 1.767276266s ago: executing program 3 (id=2326): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005200)='./file0\x00', 0x204409, &(0x7f0000000040)={[{@compress_force}, {@clear_cache}, {@commit={'commit', 0x3d, 0x6}}, {@fatal_errors_bug}, {@notreelog}, {@space_cache_v1}]}, 0x2, 0x51ab, &(0x7f000000a440)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.595831476s ago: executing program 1 (id=2328): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 1.53409809s ago: executing program 0 (id=2330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.324873692s ago: executing program 0 (id=2331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.313148622s ago: executing program 2 (id=2332): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.226159047s ago: executing program 1 (id=2333): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) writev(r0, &(0x7f0000000040)=[{}, {&(0x7f0000000140)="42dd", 0x2}], 0x2) 1.098005455s ago: executing program 0 (id=2334): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x3, 0x25dfdbfd, {{@in=@loopback, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0xa0000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.093960835s ago: executing program 2 (id=2335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 899.623517ms ago: executing program 0 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 858.976579ms ago: executing program 2 (id=2337): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x891c, 0x0) 846.41906ms ago: executing program 1 (id=2338): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x98, 0x218, 0x2b8, 0x98, 0x2b8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'batadv0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 730.880517ms ago: executing program 2 (id=2339): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000001400)=0x1c, 0x4) 678.85675ms ago: executing program 1 (id=2340): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x418, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x478) 678.42254ms ago: executing program 0 (id=2341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) 554.426817ms ago: executing program 2 (id=2342): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa04416, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c0fc56d5161ae3c622a649f9f85781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ee6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb0687020daf57ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445634147700565f4cab17c0e618b4a3d4bea681cf45b9a75a65260c3f", @ANYRES32, @ANYRES32], 0xff, 0x2be, &(0x7f0000000b80)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) 475.349102ms ago: executing program 1 (id=2343): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 417.414365ms ago: executing program 4 (id=2344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e00}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) 372.710198ms ago: executing program 0 (id=2345): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) 215.258387ms ago: executing program 4 (id=2346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) 137.543862ms ago: executing program 2 (id=2347): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) fsmount(0xffffffffffffffff, 0x1, 0x1) 136.029042ms ago: executing program 1 (id=2348): r0 = socket$inet_sctp(0x2, 0x1, 0x84) fremovexattr(r0, &(0x7f0000001500)=@random={'security.', '\xff\xff\xff\xff\xff\xff'}) 0s ago: executing program 4 (id=2349): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @empty}, @in={0x2, 0x0, @local}], 0x20) kernel console output (not intermixed with test programs): .353491][ T6310] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 189.390240][ T6310] UDF-fs: Scanning with blocksize 1024 failed [ 189.415899][ T6310] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 189.452847][ T6310] UDF-fs: Scanning with blocksize 2048 failed [ 189.505802][ T6310] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 189.566227][ T6310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.959600][ T6316] set_capacity_and_notify: 4 callbacks suppressed [ 189.959617][ T6316] loop1: detected capacity change from 0 to 128 [ 190.728965][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.737355][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.683651][ T6324] loop3: detected capacity change from 0 to 256 [ 193.275878][ T6328] loop2: detected capacity change from 0 to 512 [ 193.324681][ T6328] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 193.354498][ T6328] UDF-fs: Scanning with blocksize 512 failed [ 193.366344][ T6328] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 193.373788][ T6328] UDF-fs: Scanning with blocksize 1024 failed [ 193.433511][ T6328] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 193.461032][ T6328] UDF-fs: Scanning with blocksize 2048 failed [ 193.477165][ T6328] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 193.524427][ T6328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.853691][ T6330] loop2: detected capacity change from 0 to 2048 [ 194.134624][ T6332] loop1: detected capacity change from 0 to 128 [ 194.215940][ T6334] loop2: detected capacity change from 0 to 128 [ 194.447426][ T6336] loop1: detected capacity change from 0 to 256 [ 194.754157][ T6338] loop2: detected capacity change from 0 to 8192 [ 195.882473][ T6344] loop2: detected capacity change from 0 to 32768 [ 196.525726][ T6346] loop3: detected capacity change from 0 to 32768 [ 196.683653][ T6346] XFS (loop3): Mounting V5 Filesystem [ 196.880499][ T6346] XFS (loop3): Ending clean mount [ 196.976207][ T4269] XFS (loop3): Unmounting Filesystem [ 197.564375][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 197.570481][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 197.583266][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 197.583687][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 197.589335][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 198.209699][ T6350] loop2: detected capacity change from 0 to 65536 [ 198.380092][ T6350] XFS (loop2): Mounting V5 Filesystem [ 198.568341][ T6350] XFS (loop2): Ending clean mount [ 198.683244][ T4281] XFS (loop2): Unmounting Filesystem [ 199.115210][ T6360] loop3: detected capacity change from 0 to 65536 [ 199.287140][ T6360] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 200.070913][ T6362] loop1: detected capacity change from 0 to 65536 [ 200.184577][ T6362] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 200.516681][ T6374] loop2: detected capacity change from 0 to 65536 [ 200.734748][ T6374] XFS (loop2): Mounting V5 Filesystem [ 200.801053][ T6372] loop0: detected capacity change from 0 to 65536 [ 200.908900][ T6402] loop1: detected capacity change from 0 to 512 [ 200.946241][ T6402] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 200.953874][ T6402] UDF-fs: Scanning with blocksize 512 failed [ 200.957655][ T6372] XFS (loop0): Mounting V5 Filesystem [ 201.023381][ T6402] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 201.041312][ T6402] UDF-fs: Scanning with blocksize 1024 failed [ 201.048364][ T6374] XFS (loop2): Ending clean mount [ 201.080106][ T6402] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 201.087674][ T6402] UDF-fs: Scanning with blocksize 2048 failed [ 201.099614][ T6372] XFS (loop0): Ending clean mount [ 201.230484][ T6402] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 201.255876][ T6402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.266982][ T4275] XFS (loop0): Unmounting Filesystem [ 201.337757][ T4281] XFS (loop2): Unmounting Filesystem [ 201.918714][ T6412] loop1: detected capacity change from 0 to 512 [ 202.242402][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.251218][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.588020][ T6418] loop1: detected capacity change from 0 to 512 [ 202.653378][ T6381] Process accounting paused [ 202.844460][ T6420] loop2: detected capacity change from 0 to 256 [ 202.967333][ T6420] FAT-fs (loop2): Directory bread(block 64) failed [ 202.998761][ T6420] FAT-fs (loop2): Directory bread(block 65) failed [ 203.005456][ T6420] FAT-fs (loop2): Directory bread(block 66) failed [ 203.042604][ T6420] FAT-fs (loop2): Directory bread(block 67) failed [ 203.074905][ T6420] FAT-fs (loop2): Directory bread(block 68) failed [ 203.081536][ T6420] FAT-fs (loop2): Directory bread(block 69) failed [ 203.150787][ T6420] FAT-fs (loop2): Directory bread(block 70) failed [ 203.177735][ T6420] FAT-fs (loop2): Directory bread(block 71) failed [ 203.227752][ T6420] FAT-fs (loop2): Directory bread(block 72) failed [ 203.234393][ T6420] FAT-fs (loop2): Directory bread(block 73) failed [ 204.455577][ T6428] loop3: detected capacity change from 0 to 32768 [ 205.161172][ T6460] capability: warning: `syz.3.713' uses 32-bit capabilities (legacy support in use) [ 206.315482][ T6488] loop3: detected capacity change from 0 to 1024 [ 206.767598][ T6450] loop4: detected capacity change from 0 to 65536 [ 206.775361][ T6492] loop3: detected capacity change from 0 to 1024 [ 206.897536][ T6450] XFS (loop4): Mounting V5 Filesystem [ 207.042903][ T6450] XFS (loop4): Ending clean mount [ 207.109422][ T6486] loop2: detected capacity change from 0 to 32768 [ 207.239037][ T4283] XFS (loop4): Unmounting Filesystem [ 207.288086][ T6486] XFS (loop2): Mounting V5 Filesystem [ 207.383499][ T6486] XFS (loop2): Ending clean mount [ 207.384420][ T6516] misc userio: No port type given on /dev/userio [ 207.651251][ T4281] XFS (loop2): Unmounting Filesystem [ 208.361464][ T6538] loop2: detected capacity change from 0 to 512 [ 208.468660][ T6543] loop4: detected capacity change from 0 to 128 [ 208.556363][ T6543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.596085][ T6543] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.678999][ T6543] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.747: No space for directory leaf checksum. Please run e2fsck -D. [ 208.736408][ T6524] loop3: detected capacity change from 0 to 32768 [ 208.747851][ T6543] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.747: checksumming directory block 0 [ 208.887688][ T6538] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.902790][ T6538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.919544][ T6524] loop3: p9 p11 p16 [ 208.956748][ T6538] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.739: bad orphan inode 131083 [ 208.988591][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 209.041406][ T6538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.299746][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 209.543959][ T6565] netlink: 144 bytes leftover after parsing attributes in process `syz.2.753'. [ 209.654884][ T6567] loop4: detected capacity change from 0 to 1024 [ 209.768394][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.006131][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 210.052411][ T6574] device wlan0 entered promiscuous mode [ 210.139071][ T6574] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 210.360468][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 210.382820][ T6582] netlink: 108 bytes leftover after parsing attributes in process `syz.0.761'. [ 210.403572][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 210.444209][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 210.510981][ T6588] overlayfs: missing 'lowerdir' [ 210.521197][ T6586] comedi comedi2: fl512: I/O port conflict (0x100009e1,16) [ 210.718000][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 210.761477][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 211.207710][ T6609] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 211.313183][ T26] audit: type=1326 audit(1770826052.095:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 211.418887][ T26] audit: type=1326 audit(1770826052.095:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 211.460818][ T6619] netlink: 128 bytes leftover after parsing attributes in process `syz.3.779'. [ 211.497741][ T6619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 211.557961][ T26] audit: type=1326 audit(1770826052.095:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 211.592938][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.600496][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.657880][ T26] audit: type=1326 audit(1770826052.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 211.759834][ T26] audit: type=1326 audit(1770826052.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 211.901220][ T6631] loop3: detected capacity change from 0 to 2048 [ 211.962817][ T6638] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.056898][ T6631] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 212.132938][ T6631] Remounting filesystem read-only [ 212.424330][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 212.453795][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 212.615447][ T6661] device netdevsim0 entered promiscuous mode [ 212.668549][ T6661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.845948][ T6711] loop1: detected capacity change from 0 to 64 [ 213.901652][ T6711] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 214.383281][ T26] audit: type=1326 audit(1770826055.325:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.4.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x0 [ 214.404827][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.424299][ T6734] loop0: detected capacity change from 0 to 16 [ 214.474403][ T6734] erofs: (device loop0): mounted with root inode @ nid 36. [ 214.559625][ T6734] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 214.619353][ T6734] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 214.643676][ T6734] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 214.706940][ T6729] loop3: detected capacity change from 0 to 8192 [ 214.743834][ T6729] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.782229][ T6729] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 214.792233][ T6729] REISERFS (device loop3): using ordered data mode [ 214.798782][ T6729] reiserfs: using flush barriers [ 214.811191][ T6729] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 214.827886][ T6729] REISERFS (device loop3): checking transaction log (loop3) [ 214.862102][ T6729] REISERFS (device loop3): Using r5 hash to sort names [ 214.869866][ T6729] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 214.886009][ T6729] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 215.521794][ T6762] loop1: detected capacity change from 0 to 128 [ 215.585953][ T6762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.625798][ T6762] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.678412][ T6766] ax25_connect(): syz.0.849 uses autobind, please contact jreuter@yaina.de [ 215.719614][ T6762] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.847: No space for directory leaf checksum. Please run e2fsck -D. [ 215.771434][ T6762] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.847: checksumming directory block 0 [ 215.963026][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 216.093240][ T6780] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 216.540549][ T6799] loop3: detected capacity change from 0 to 256 [ 217.207051][ T6818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.388196][ T6784] loop1: detected capacity change from 0 to 32768 [ 218.274379][ T6848] loop1: detected capacity change from 0 to 4096 [ 218.354483][ T6848] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 218.378133][ T6848] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 218.421958][ T6848] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 218.452820][ T6860] netlink: 'syz.2.886': attribute type 9 has an invalid length. [ 218.480522][ T4337] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.487485][ T6848] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 218.491865][ T6860] __nla_validate_parse: 3 callbacks suppressed [ 218.491907][ T6860] netlink: 399 bytes leftover after parsing attributes in process `syz.2.886'. [ 218.569055][ T6848] ntfs: volume version 3.1. [ 218.647589][ T6848] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 218.672575][ T4337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.689104][ T4337] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.727511][ T6848] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 218.748532][ T4337] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.787153][ T4337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.816418][ T4337] usb 5-1: SerialNumber: syz [ 219.042948][ T4337] usb 5-1: 0:2 : does not exist [ 219.102997][ T4337] usb 5-1: USB disconnect, device number 14 [ 219.389641][ T26] audit: type=1326 audit(1770826060.596:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2279bf79 code=0x7ffc0000 [ 219.469147][ T26] audit: type=1326 audit(1770826060.648:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f3e2279bf79 code=0x7ffc0000 [ 219.493780][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 219.570458][ T26] audit: type=1326 audit(1770826060.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2279bf79 code=0x7ffc0000 [ 219.706784][ T26] audit: type=1326 audit(1770826060.648:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.3.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2279bf79 code=0x7ffc0000 [ 219.777667][ T6890] loop4: detected capacity change from 0 to 256 [ 219.878663][ T6890] FAT-fs (loop4): Directory bread(block 64) failed [ 219.890735][ T6888] loop3: detected capacity change from 0 to 4096 [ 219.915973][ T6890] FAT-fs (loop4): Directory bread(block 65) failed [ 219.922699][ T6890] FAT-fs (loop4): Directory bread(block 66) failed [ 219.953703][ T6890] FAT-fs (loop4): Directory bread(block 67) failed [ 219.981438][ T6888] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 219.999320][ T6890] FAT-fs (loop4): Directory bread(block 68) failed [ 220.049504][ T6890] FAT-fs (loop4): Directory bread(block 69) failed [ 220.056244][ T6890] FAT-fs (loop4): Directory bread(block 70) failed [ 220.083948][ T6890] FAT-fs (loop4): Directory bread(block 71) failed [ 220.115411][ T6890] FAT-fs (loop4): Directory bread(block 72) failed [ 220.122132][ T6890] FAT-fs (loop4): Directory bread(block 73) failed [ 220.426497][ T6905] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 220.641405][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.909'. [ 220.668873][ T6916] loop1: detected capacity change from 0 to 16 [ 220.739623][ T6916] erofs: (device loop1): mounted with root inode @ nid 36. [ 221.172107][ T6930] netlink: 744 bytes leftover after parsing attributes in process `syz.0.917'. [ 221.308731][ T6932] loop3: detected capacity change from 0 to 4096 [ 221.452897][ T6941] loop2: detected capacity change from 0 to 64 [ 221.459879][ T6932] ntfs: volume version 3.1. [ 221.820232][ T6952] netlink: 'syz.1.925': attribute type 21 has an invalid length. [ 221.870384][ T6952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.925'. [ 222.089770][ T6961] binder: 6960:6961 ioctl c018620c 200000000000 returned -1 [ 222.487952][ T6977] netlink: 'syz.0.940': attribute type 11 has an invalid length. [ 222.516102][ T6977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.940'. [ 222.724162][ T6987] Unknown options in mask b7f2 [ 223.368949][ T7009] tmpfs: Unknown parameter 'no' [ 223.890612][ T7024] loop1: detected capacity change from 0 to 4096 [ 223.916607][ T7024] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 223.934520][ T7028] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 224.184183][ T7037] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 224.208189][ T7039] loop3: detected capacity change from 0 to 256 [ 224.218926][ T7037] netlink: 55 bytes leftover after parsing attributes in process `syz.0.969'. [ 224.377938][ T7039] FAT-fs (loop3): Directory bread(block 64) failed [ 224.396709][ T7039] FAT-fs (loop3): Directory bread(block 65) failed [ 224.416270][ T7039] FAT-fs (loop3): Directory bread(block 66) failed [ 224.438345][ T7039] FAT-fs (loop3): Directory bread(block 67) failed [ 224.458716][ T7039] FAT-fs (loop3): Directory bread(block 68) failed [ 224.482621][ T7039] FAT-fs (loop3): Directory bread(block 69) failed [ 224.497973][ T7039] FAT-fs (loop3): Directory bread(block 70) failed [ 224.555107][ T7039] FAT-fs (loop3): Directory bread(block 71) failed [ 224.562408][ T7039] FAT-fs (loop3): Directory bread(block 72) failed [ 224.570901][ T7039] FAT-fs (loop3): Directory bread(block 73) failed [ 224.682702][ T7043] netlink: 180 bytes leftover after parsing attributes in process `syz.1.971'. [ 224.704046][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 224.721286][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 224.769473][ T7045] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 224.906553][ T7045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.967256][ T7054] loop1: detected capacity change from 0 to 256 [ 225.064385][ T7054] FAT-fs (loop1): Directory bread(block 64) failed [ 225.088406][ T7054] FAT-fs (loop1): Directory bread(block 65) failed [ 225.095117][ T7054] FAT-fs (loop1): Directory bread(block 66) failed [ 225.122003][ T7054] FAT-fs (loop1): Directory bread(block 67) failed [ 225.140658][ T7054] FAT-fs (loop1): Directory bread(block 68) failed [ 225.179084][ T7054] FAT-fs (loop1): Directory bread(block 69) failed [ 225.205437][ T7054] FAT-fs (loop1): Directory bread(block 70) failed [ 225.249187][ T7054] FAT-fs (loop1): Directory bread(block 71) failed [ 225.274020][ T7054] FAT-fs (loop1): Directory bread(block 72) failed [ 225.280876][ T5602] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 225.301711][ T7054] FAT-fs (loop1): Directory bread(block 73) failed [ 225.472115][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.492823][ T5602] usb 4-1: not running at top speed; connect to a high speed hub [ 225.526597][ T5602] usb 4-1: config 106 has an invalid interface number: 8 but max is 0 [ 225.543740][ T5602] usb 4-1: config 106 has no interface number 0 [ 225.549354][ T7072] loop4: detected capacity change from 0 to 256 [ 225.564411][ T5602] usb 4-1: config 106 interface 8 has no altsetting 0 [ 225.586344][ T5602] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 225.608230][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.646578][ T5602] usb 4-1: Product: syz [ 225.667338][ T5602] usb 4-1: Manufacturer: syz [ 225.672092][ T5602] usb 4-1: SerialNumber: syz [ 225.911941][ T5602] kalmia 4-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 225.942630][ T5602] kalmia: probe of 4-1:106.8 failed with error -22 [ 225.969721][ T5602] usb 4-1: USB disconnect, device number 15 [ 226.162224][ T7088] loop0: detected capacity change from 0 to 16 [ 226.182933][ T7088] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.258011][ T7088] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-95] [ 226.504532][ T7098] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 227.059113][ T7123] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.088721][ T7125] loop3: detected capacity change from 0 to 128 [ 227.149673][ T7127] xt_l2tp: v2 sid > 0xffff: 262144 [ 227.478151][ T7137] comedi comedi0: s526: I/O port conflict (0xffffffffffffffff,64) [ 227.547475][ T7143] loop2: detected capacity change from 0 to 64 [ 227.621609][ T7143] hfs: request for non-existent node 1025 in B*Tree [ 227.655728][ T7143] hfs: request for non-existent node 1025 in B*Tree [ 228.004369][ T7157] loop0: detected capacity change from 0 to 256 [ 228.131373][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 228.131388][ T26] audit: type=1326 audit(1770826069.799:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 228.254886][ T26] audit: type=1326 audit(1770826069.852:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 228.319492][ T7168] ipt_REJECT: ECHOREPLY no longer supported. [ 228.357600][ T26] audit: type=1326 audit(1770826069.852:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 228.511079][ T26] audit: type=1326 audit(1770826069.852:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 228.591970][ T26] audit: type=1326 audit(1770826069.852:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 228.662906][ T26] audit: type=1326 audit(1770826069.852:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 228.913111][ T7193] loop3: detected capacity change from 0 to 256 [ 229.057479][ T7197] loop1: detected capacity change from 0 to 256 [ 229.139245][ T7197] FAT-fs (loop1): Directory bread(block 64) failed [ 229.145873][ T7197] FAT-fs (loop1): Directory bread(block 65) failed [ 229.182432][ T7197] FAT-fs (loop1): Directory bread(block 66) failed [ 229.201939][ T7197] FAT-fs (loop1): Directory bread(block 67) failed [ 229.221558][ T7197] FAT-fs (loop1): Directory bread(block 68) failed [ 229.264715][ T7197] FAT-fs (loop1): Directory bread(block 69) failed [ 229.290082][ T7197] FAT-fs (loop1): Directory bread(block 70) failed [ 229.314787][ T7197] FAT-fs (loop1): Directory bread(block 71) failed [ 229.322033][ T7197] FAT-fs (loop1): Directory bread(block 72) failed [ 229.354071][ T7197] FAT-fs (loop1): Directory bread(block 73) failed [ 229.719696][ T7191] loop4: detected capacity change from 0 to 32768 [ 229.748508][ T7191] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 230.022245][ T4396] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 230.177319][ T7224] loop4: detected capacity change from 0 to 128 [ 230.195630][ T7227] netlink: 'syz.0.1063': attribute type 5 has an invalid length. [ 230.429704][ T7233] tc_dump_action: action bad kind [ 230.867936][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 231.066124][ T7257] loop0: detected capacity change from 0 to 128 [ 231.332382][ T7258] Process accounting resumed [ 231.532399][ T7245] loop1: detected capacity change from 0 to 32768 [ 231.581815][ T5602] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 231.659032][ T7275] capability: warning: `syz.2.1087' uses deprecated v2 capabilities in a way that may be insecure [ 231.781579][ T5602] usb 1-1: Using ep0 maxpacket: 16 [ 231.789058][ T5602] usb 1-1: config 0 has no interfaces? [ 231.813541][ T5602] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 231.847956][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.874641][ T5602] usb 1-1: Product: syz [ 231.905265][ T5602] usb 1-1: Manufacturer: syz [ 231.909973][ T5602] usb 1-1: SerialNumber: syz [ 231.944537][ T5602] r8152-cfgselector 1-1: config 0 descriptor?? [ 232.117056][ T7289] loop1: detected capacity change from 0 to 512 [ 232.147851][ T5602] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 232.172258][ T4358] usb 1-1: config 0 descriptor?? [ 232.237749][ T7289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1092: bg 0: block 473: padding at end of block bitmap is not set [ 232.342561][ T7295] 8021q: VLANs not supported on hsr0 [ 232.351164][ T4358] usb 1-1: can't set config #0, error -71 [ 232.353376][ T5602] usb 1-1: USB disconnect, device number 14 [ 232.370803][ T5595] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 232.386528][ T7289] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 232.408651][ T7289] EXT4-fs (loop1): 1 orphan inode deleted [ 232.419615][ T4299] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 232.436241][ T7289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 232.452543][ T4299] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 232.465073][ T7289] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.547730][ T7289] Invalid option length (230) for dns_resolver key [ 232.589784][ T5595] usb 4-1: Using ep0 maxpacket: 16 [ 232.609460][ T5595] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 232.646279][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.665316][ T5595] usb 4-1: Product: syz [ 232.669761][ T5595] usb 4-1: Manufacturer: syz [ 232.674410][ T5595] usb 4-1: SerialNumber: syz [ 232.700566][ T5595] r8152-cfgselector 4-1: config 0 descriptor?? [ 232.730038][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 233.123450][ T5595] r8152-cfgselector 4-1: Unknown version 0x0000 [ 233.133013][ T5595] r8152-cfgselector 4-1: bad CDC descriptors [ 233.169774][ T5595] r8152-cfgselector 4-1: Unknown version 0x0000 [ 233.198385][ T5595] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 233.316850][ T7317] loop2: detected capacity change from 0 to 2048 [ 233.334098][ T7317] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504 [ 233.364279][ T7317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.521757][ T22] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 233.555358][ T4345] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.709382][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.733694][ T4345] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 233.739772][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.770173][ T4345] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 233.772673][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 233.806874][ T4345] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.820883][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.832970][ T22] usb 5-1: SerialNumber: syz [ 233.835351][ T4345] usb 1-1: config 220 has no interface number 2 [ 233.843969][ T4345] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 233.864314][ T22] usb 5-1: 0:2 : does not exist [ 233.879538][ T7322] loop1: detected capacity change from 0 to 32768 [ 233.913120][ T4345] usb 1-1: config 220 interface 0 has no altsetting 0 [ 233.920155][ T7322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1106 (7322) [ 233.933250][ T4345] usb 1-1: config 220 interface 76 has no altsetting 0 [ 233.949750][ T4345] usb 1-1: config 220 interface 1 has no altsetting 0 [ 233.963022][ T7322] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.974918][ T4345] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 233.995651][ T7322] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 234.005099][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.017704][ T7322] BTRFS info (device loop1): setting nodatacow, compression disabled [ 234.039756][ T7322] BTRFS info (device loop1): enabling auto defrag [ 234.048369][ T7322] BTRFS info (device loop1): max_inline at 4096 [ 234.050317][ T4345] usb 1-1: Product: syz [ 234.075062][ T7322] BTRFS info (device loop1): using free space tree [ 234.092125][ T4345] usb 1-1: Manufacturer: syz [ 234.096810][ T4345] usb 1-1: SerialNumber: syz [ 234.276986][ T22] usb 5-1: USB disconnect, device number 15 [ 234.341181][ T4345] usb 1-1: selecting invalid altsetting 0 [ 234.347664][ T4345] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 234.355415][ T4345] usb 1-1: No valid video chain found. [ 234.378658][ T4345] usb 1-1: selecting invalid altsetting 0 [ 234.384495][ T4345] usbtest: probe of 1-1:220.1 failed with error -22 [ 234.403915][ T4345] usb 1-1: USB disconnect, device number 15 [ 234.516200][ T4268] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.794828][ T7329] loop3: detected capacity change from 0 to 32768 [ 235.417313][ T26] audit: type=1400 audit(1770826077.455:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=7377 comm="syz.3.1124" [ 235.433790][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1122'. [ 235.547598][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1122'. [ 235.604624][ T7375] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 235.696111][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.756706][ T7390] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 236.022152][ T7396] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 236.089347][ T7396] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1132'. [ 237.022981][ T7427] loop3: detected capacity change from 0 to 8192 [ 237.349163][ T7446] netlink: 'syz.3.1153': attribute type 5 has an invalid length. [ 237.367102][ T7446] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1153'. [ 237.544418][ T4342] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 237.600271][ T7455] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 237.622910][ T7454] loop0: detected capacity change from 0 to 64 [ 237.636287][ T7455] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1156'. [ 237.715713][ T7454] syz.0.1166: attempt to access beyond end of device [ 237.715713][ T7454] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 237.731843][ T7454] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 237.754073][ T4342] usb 5-1: Using ep0 maxpacket: 16 [ 237.765509][ T4342] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 237.780888][ T4342] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 237.815248][ T4342] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 237.856332][ T4342] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 237.884612][ T7454] syz.0.1166: attempt to access beyond end of device [ 237.884612][ T7454] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 237.904675][ T4342] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 237.923909][ T4342] usb 5-1: config 0 has no interface number 0 [ 237.942115][ T7454] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 237.960281][ T4342] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 237.983593][ T4342] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 237.995420][ T7461] loop2: detected capacity change from 0 to 256 [ 238.002597][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1157'. [ 238.017804][ T4342] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.046091][ T7461] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 238.050611][ T7456] device bridge1 entered promiscuous mode [ 238.064301][ T4342] usb 5-1: config 0 interface 125 has no altsetting 1 [ 238.081301][ T4342] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 238.114990][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.143409][ T4342] usb 5-1: Product: syz [ 238.153108][ T4342] usb 5-1: Manufacturer: syz [ 238.167594][ T4342] usb 5-1: SerialNumber: syz [ 238.184601][ T4342] usb 5-1: config 0 descriptor?? [ 238.410357][ T7467] netlink: 'syz.1.1162': attribute type 4 has an invalid length. [ 238.418272][ T7467] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 238.465378][ T7467] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1162'. [ 238.532324][ T7467] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 238.626207][ T22] usb 5-1: USB disconnect, device number 16 [ 238.813829][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.847951][ T4342] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.058163][ T4342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.074130][ T4342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.094898][ T7484] team0: Port device team_slave_0 removed [ 239.098547][ T4342] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.110874][ T7484] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 239.134188][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 239.180799][ T4342] usb 4-1: SerialNumber: syz [ 239.296056][ T7482] loop0: detected capacity change from 0 to 32768 [ 239.440682][ T4342] usb 4-1: 0:2 : does not exist [ 239.447872][ T7482] XFS (loop0): Mounting V5 Filesystem [ 239.518348][ T4342] usb 4-1: USB disconnect, device number 17 [ 239.566909][ T7482] XFS (loop0): Ending clean mount [ 239.600523][ T7482] XFS (loop0): Quotacheck needed: Please wait. [ 239.705485][ T7482] XFS (loop0): Quotacheck: Done. [ 239.751602][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.854693][ T4275] XFS (loop0): Unmounting Filesystem [ 240.006148][ T7510] loop1: detected capacity change from 0 to 1024 [ 240.032591][ T7512] bond0: (slave gretap0): Error -99 calling set_mac_address [ 240.135969][ T7510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 240.197979][ T7497] loop2: detected capacity change from 0 to 32768 [ 240.283459][ T7519] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.434329][ T7497] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 240.434329][ T7497] [ 240.456476][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 240.484788][ T7497] ERROR: (device loop2): remounting filesystem as read-only [ 240.539578][ T7497] ialloc: diAlloc returned -5! [ 241.052889][ T7540] loop0: detected capacity change from 0 to 128 [ 241.097610][ T7540] EXT4-fs: Ignoring removed nobh option [ 241.127999][ T7540] EXT4-fs (loop0): Test dummy encryption mode enabled [ 241.154456][ T7540] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 241.500382][ T7358] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 241.611984][ T26] audit: type=1326 audit(1770826083.964:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 241.634632][ T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.662890][ T26] audit: type=1326 audit(1770826083.964:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 241.691048][ T7358] usb 1-1: Using ep0 maxpacket: 8 [ 241.698597][ T7358] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 241.709731][ T26] audit: type=1326 audit(1770826084.017:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 241.729368][ T7358] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 241.756808][ T7358] usb 1-1: config 0 has no interface number 0 [ 241.779915][ T7358] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 241.794633][ T26] audit: type=1326 audit(1770826084.017:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 241.817789][ T7358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.842760][ T7358] usb 1-1: Product: syz [ 241.848311][ T7358] usb 1-1: Manufacturer: syz [ 241.856841][ T22] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 241.876096][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.877125][ T7358] usb 1-1: SerialNumber: syz [ 241.886374][ T7537] loop1: detected capacity change from 0 to 32768 [ 241.896366][ T22] usb 3-1: Product: syz [ 241.900903][ T26] audit: type=1326 audit(1770826084.017:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 241.926781][ T22] usb 3-1: Manufacturer: syz [ 241.936091][ T7358] usb 1-1: config 0 descriptor?? [ 241.955701][ T22] usb 3-1: SerialNumber: syz [ 242.018844][ T22] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.027271][ T7537] XFS (loop1): Mounting V5 Filesystem [ 242.074508][ T22] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.130200][ T7537] XFS (loop1): Ending clean mount [ 242.174182][ T7537] XFS (loop1): Quotacheck needed: Please wait. [ 242.219868][ T5343] usb 1-1: USB disconnect, device number 16 [ 242.346533][ T7537] XFS (loop1): Quotacheck: Done. [ 242.465516][ T4268] XFS (loop1): Unmounting Filesystem [ 242.497256][ T5343] usb 3-1: USB disconnect, device number 14 [ 242.689457][ T7565] loop4: detected capacity change from 0 to 32768 [ 242.735878][ T7565] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 242.797648][ T7565] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 242.926244][ T7565] (syz.4.1203,7565,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 242.960689][ T7565] (syz.4.1203,7565,0):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 243.124820][ T22] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 243.143059][ T22] ath9k_htc: Failed to initialize the device [ 243.178885][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 243.185631][ T5343] usb 3-1: ath9k_htc: USB layer deinitialized [ 243.686484][ T7606] loop4: detected capacity change from 0 to 2048 [ 243.724812][ C1] sd 0:0:1:0: [sda] tag#6369 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.735387][ C1] sd 0:0:1:0: [sda] tag#6369 CDB: Read(6) 08 00 00 00 03 44 [ 243.768763][ T7606] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 243.820808][ T7606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.015646][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_0 [ 244.026404][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.493155][ T7637] loop4: detected capacity change from 0 to 1024 [ 244.661005][ T7637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.891457][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 245.158139][ T7666] Cannot find add_set index 0 as target [ 245.391789][ T7673] syz.3.1252 uses obsolete (PF_INET,SOCK_PACKET) [ 245.950837][ T7697] netlink: 'syz.2.1262': attribute type 2 has an invalid length. [ 245.999308][ T7697] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 246.013566][ T7697] netlink: 'syz.2.1262': attribute type 2 has an invalid length. [ 246.042449][ T7697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1262'. [ 246.084889][ T22] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 246.232348][ T7677] loop1: detected capacity change from 0 to 32768 [ 246.267291][ T7677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1253 (7677) [ 246.281956][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.308417][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.338645][ T7677] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.352685][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 246.370554][ T7677] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 246.379727][ T7705] loop4: detected capacity change from 0 to 512 [ 246.395691][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.404449][ T7677] BTRFS info (device loop1): using free space tree [ 246.421676][ T22] usb 4-1: SerialNumber: syz [ 246.438108][ T22] usb 4-1: 0:2 : does not exist [ 246.509481][ T7705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.538446][ T7705] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.656356][ T7677] BTRFS info (device loop1): enabling ssd optimizations [ 246.672440][ T7705] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.1267: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 246.750736][ T5602] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 246.871261][ T22] usb 4-1: USB disconnect, device number 18 [ 246.909647][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 246.922418][ T4268] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.934366][ T5602] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 246.950764][ T5602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.000098][ T5602] usb 1-1: config 0 has no interface number 0 [ 247.031204][ T5602] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 247.064593][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.116397][ T5602] usb 1-1: Product: syz [ 247.120827][ T5602] usb 1-1: Manufacturer: syz [ 247.155795][ T7735] loop2: detected capacity change from 0 to 1024 [ 247.162598][ T5602] usb 1-1: SerialNumber: syz [ 247.174880][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 247.209420][ T5602] usb 1-1: config 0 descriptor?? [ 247.296520][ T7735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 247.447828][ T22] usb 1-1: USB disconnect, device number 17 [ 247.557366][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 247.791076][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 247.825711][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 247.863664][ T7751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1278'. [ 248.251665][ T7763] team0: Port device team_slave_0 removed [ 248.284967][ T7763] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 248.500716][ T26] audit: type=1326 audit(1770826091.208:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 248.556405][ T26] audit: type=1326 audit(1770826091.229:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 248.655965][ T26] audit: type=1326 audit(1770826091.229:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 248.728101][ T26] audit: type=1326 audit(1770826091.229:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.2.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 248.750456][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.766594][ T7778] loop2: detected capacity change from 0 to 2048 [ 248.810296][ T7778] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 248.887785][ T7784] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.050017][ T7759] loop3: detected capacity change from 0 to 32768 [ 249.130472][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.136888][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.157211][ T4383] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.209359][ T7786] loop1: detected capacity change from 0 to 8192 [ 249.285492][ T7786] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 249.385721][ T7786] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 249.415896][ T7786] REISERFS (device loop1): using ordered data mode [ 249.422692][ T7786] reiserfs: using flush barriers [ 249.518942][ T7786] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.609568][ T7786] REISERFS (device loop1): checking transaction log (loop1) [ 249.639526][ T7786] REISERFS (device loop1): Using rupasov hash to sort names [ 249.699893][ T7786] REISERFS (device loop1): using 3.5.x disk format [ 249.706725][ T7786] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.764544][ T7786] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.802250][ T7786] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.851860][ T7786] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 249.921041][ T7803] team0: Port device team_slave_0 removed [ 249.927084][ T7786] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 249.948318][ T7803] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 250.020540][ T7809] netlink: 'syz.2.1306': attribute type 6 has an invalid length. [ 250.027056][ T7786] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 250.060070][ T7786] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 250.193700][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1307'. [ 250.230936][ T5343] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 250.434597][ T7800] loop0: detected capacity change from 0 to 32768 [ 250.446267][ T5343] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.465571][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.517637][ T7800] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 250.542937][ T7822] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072924056005) [ 250.556445][ T7822] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 250.567382][ T5343] usb 4-1: Product: syz [ 250.589529][ T29] (kworker/u4:2,29,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 250.614116][ T5343] usb 4-1: Manufacturer: syz [ 250.636636][ T5343] usb 4-1: SerialNumber: syz [ 250.689577][ T5343] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.725564][ T4275] (syz-executor,4275,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 250.754895][ T5343] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.811174][ T4275] (syz-executor,4275,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 250.917656][ T4275] ocfs2: Unmounting device (7,0) on (node local) [ 251.200562][ T7836] loop2: detected capacity change from 0 to 164 [ 251.225713][ T5018] usb 4-1: USB disconnect, device number 19 [ 251.802424][ T5343] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 251.809495][ T5343] ath9k_htc: Failed to initialize the device [ 251.840415][ T5018] usb 4-1: ath9k_htc: USB layer deinitialized [ 251.936071][ T7861] loop4: detected capacity change from 0 to 1024 [ 251.986960][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 252.079351][ T7861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.114213][ T7861] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.4.1333: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 252.138017][ T7861] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 252.147862][ T7861] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.1333: Deleting old file: nlink 1, error=-117 [ 252.285416][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 252.863460][ T7888] loop4: detected capacity change from 0 to 8192 [ 252.918983][ T7888] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.946076][ T7888] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 252.994572][ T7888] REISERFS (device loop4): using ordered data mode [ 253.012874][ T7898] x_tables: duplicate underflow at hook 4 [ 253.047626][ T7888] reiserfs: using flush barriers [ 253.073629][ T7888] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.078993][ T7874] loop0: detected capacity change from 0 to 32768 [ 253.133983][ T7888] REISERFS (device loop4): checking transaction log (loop4) [ 253.141867][ T7900] loop2: detected capacity change from 0 to 256 [ 253.159042][ T7888] REISERFS (device loop4): Using rupasov hash to sort names [ 253.216045][ T7888] REISERFS (device loop4): using 3.5.x disk format [ 253.236653][ T7900] FAT-fs (loop2): Directory bread(block 64) failed [ 253.254257][ T7888] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 253.276543][ T7900] FAT-fs (loop2): Directory bread(block 65) failed [ 253.283233][ T7900] FAT-fs (loop2): Directory bread(block 66) failed [ 253.305018][ T7888] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 253.355272][ T7900] FAT-fs (loop2): Directory bread(block 67) failed [ 253.365399][ T7888] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 253.392989][ T7900] FAT-fs (loop2): Directory bread(block 68) failed [ 253.399579][ T7900] FAT-fs (loop2): Directory bread(block 69) failed [ 253.433869][ T7888] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 253.485342][ T7888] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 253.485375][ T7900] FAT-fs (loop2): Directory bread(block 70) failed [ 253.531279][ T7900] FAT-fs (loop2): Directory bread(block 71) failed [ 253.546703][ T7900] FAT-fs (loop2): Directory bread(block 72) failed [ 253.565403][ T7888] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 253.571409][ T7900] FAT-fs (loop2): Directory bread(block 73) failed [ 253.618017][ T7888] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 254.554801][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 254.598281][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 254.639003][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 254.693615][ T7941] loop4: detected capacity change from 0 to 64 [ 255.101425][ T7956] xt_limit: Overflow, try lower: 1207959552/384 [ 255.318474][ T7966] loop3: detected capacity change from 0 to 256 [ 255.362585][ T7966] exfat: Deprecated parameter 'namecase' [ 255.409580][ T7969] libceph: resolve '4.' (ret=-3): failed [ 255.427716][ T7966] exfat: Deprecated parameter 'utf8' [ 255.465029][ T7966] exfat: Deprecated parameter 'utf8' [ 255.494635][ T7966] exfat: Deprecated parameter 'namecase' [ 255.517159][ T7966] /dev/loop3: Can't open blockdev [ 255.783724][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 255.793132][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 255.811553][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 256.376566][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 256.413048][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 256.919963][ T5343] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 256.925819][ T8028] netlink: 'syz.4.1410': attribute type 1 has an invalid length. [ 256.951370][ T8028] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1410'. [ 257.140120][ T5343] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 257.172801][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.205829][ T5343] usb 3-1: config 0 descriptor?? [ 257.422999][ T5343] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 257.498022][ T8022] loop1: detected capacity change from 0 to 32768 [ 257.538581][ T8022] (syz.1.1406,8022,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.590356][ T8022] (syz.1.1406,8022,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.632558][ T5343] usb 3-1: USB disconnect, device number 15 [ 257.701005][ T8022] (syz.1.1406,8022,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 257.792958][ T8022] (syz.1.1406,8022,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 257.834009][ T8034] loop4: detected capacity change from 0 to 32768 [ 257.868899][ T8022] JBD2: Ignoring recovery information on journal [ 257.895092][ T8034] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 257.895092][ T8034] [ 257.942653][ T8034] xtLookup: xtSearch returned -5 [ 257.952435][ T8034] free_index: error reading directory table [ 257.966509][ T8034] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 257.966509][ T8034] [ 257.985609][ T8022] (syz.1.1406,8022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 258.023758][ T8022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 258.033401][ T8034] xtLookup: xtSearch returned -5 [ 258.046205][ T8034] free_index: error reading directory table [ 258.055743][ T8022] (syz.1.1406,8022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 258.080278][ T8034] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 258.080278][ T8034] [ 258.099783][ T8034] xtLookup: xtSearch returned -5 [ 258.132610][ T8034] free_index: error reading directory table [ 258.140144][ T8022] (syz.1.1406,8022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 258.326918][ T8022] (syz.1.1406,8022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 258.424872][ T8022] (syz.1.1406,8022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 258.482266][ T8022] (syz.1.1406,8022,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 258.488012][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1423'. [ 258.525850][ T8022] (syz.1.1406,8022,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 258.550587][ T8042] loop0: detected capacity change from 0 to 32768 [ 258.566305][ T8022] (syz.1.1406,8022,0):ocfs2_quota_read:201 ERROR: status = -5 [ 258.591488][ T8056] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 258.601176][ T8022] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 258.643676][ T8042] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 258.653735][ T8022] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 258.668626][ T8022] (syz.1.1406,8022,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 258.680758][ T8042] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 258.700214][ T8022] (syz.1.1406,8022,0):ocfs2_mknod:314 ERROR: status = -5 [ 258.707502][ T8022] (syz.1.1406,8022,0):ocfs2_mknod:502 ERROR: status = -5 [ 258.726408][ T8022] (syz.1.1406,8022,0):ocfs2_mkdir:659 ERROR: status = -5 [ 258.819036][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 258.827625][ T8042] (syz.0.1417,8042,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 258.883714][ T8042] (syz.0.1417,8042,0):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 259.097089][ T4275] ocfs2: Unmounting device (7,0) on (node local) [ 259.171013][ T22] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 259.359116][ T8075] dlm: no local IP address has been set [ 259.368665][ T22] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 259.383760][ T8075] dlm: cannot start dlm midcomms -107 [ 259.404693][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.429977][ T22] usb 5-1: config 0 descriptor?? [ 259.455660][ T22] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 259.826216][ T22] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 259.845211][ T22] pac7311: probe of 5-1:0.0 failed with error -71 [ 259.883670][ T22] usb 5-1: USB disconnect, device number 17 [ 259.992008][ T8095] loop0: detected capacity change from 0 to 256 [ 260.024902][ T8095] exfat: Deprecated parameter 'namecase' [ 260.043289][ T8095] exfat: Deprecated parameter 'utf8' [ 260.056179][ T8095] exfat: Deprecated parameter 'utf8' [ 260.070319][ T8095] exfat: Deprecated parameter 'namecase' [ 260.140390][ T8095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 260.358304][ T8062] Process accounting paused [ 260.587699][ T8107] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 260.714663][ T8113] IPv6: Can't replace route, no match found [ 260.887925][ T8117] netlink: 2072 bytes leftover after parsing attributes in process `syz.4.1451'. [ 260.907771][ T8089] loop2: detected capacity change from 0 to 32768 [ 260.924609][ T8117] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1451'. [ 260.944348][ T8117] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1451'. [ 260.967463][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1451'. [ 260.981293][ T8122] loop3: detected capacity change from 0 to 256 [ 261.016228][ T8089] XFS (loop2): Mounting V5 Filesystem [ 261.079699][ T8128] loop1: detected capacity change from 0 to 1024 [ 261.118548][ T4383] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.182746][ T8128] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64 [ 261.230529][ T8089] XFS (loop2): Ending clean mount [ 261.298992][ T8089] XFS (loop2): Quotacheck needed: Please wait. [ 261.479881][ T8089] XFS (loop2): Quotacheck: Done. [ 261.591659][ T5344] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 261.751674][ T4281] XFS (loop2): Unmounting Filesystem [ 261.807064][ T5344] usb 5-1: config 0 has an invalid interface number: 36 but max is 0 [ 261.818425][ T5344] usb 5-1: config 0 has no interface number 0 [ 261.838760][ T5344] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 261.869882][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.885659][ T5344] usb 5-1: Product: syz [ 261.897716][ T5344] usb 5-1: Manufacturer: syz [ 261.913907][ T5344] usb 5-1: SerialNumber: syz [ 261.924523][ T5344] usb 5-1: config 0 descriptor?? [ 261.960857][ T5344] gspca_main: spca505-2.14.0 probing 0733:0430 [ 262.333477][ T5344] gspca_spca505: reg write: error -71 [ 262.340771][ T5344] spca505: probe of 5-1:0.36 failed with error -5 [ 262.360439][ T8153] loop0: detected capacity change from 0 to 8192 [ 262.371288][ T5344] usb 5-1: USB disconnect, device number 18 [ 262.403288][ T8153] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.447376][ T8153] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 262.456977][ T8153] REISERFS (device loop0): using ordered data mode [ 262.463530][ T8153] reiserfs: using flush barriers [ 262.471637][ T8153] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.488480][ T8153] REISERFS (device loop0): checking transaction log (loop0) [ 262.670805][ T8153] REISERFS (device loop0): Using tea hash to sort names [ 262.695478][ T8153] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 263.362648][ T8162] loop1: detected capacity change from 0 to 32768 [ 263.458588][ T8162] ialloc: diAlloc returned -5! [ 263.788367][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 263.879679][ T8189] trusted_key: encrypted_key: insufficient parameters specified [ 264.276715][ T8201] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 264.617517][ T8212] loop4: detected capacity change from 0 to 22 [ 264.624674][ T8212] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 264.665404][ T8212] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 264.739817][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1494'. [ 264.748949][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1494'. [ 265.403946][ T8237] loop1: detected capacity change from 0 to 8 [ 265.587405][ T8237] SQUASHFS error: Failed to read block 0x2fc: -5 [ 265.605947][ T8237] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 265.613326][ T8237] SQUASHFS error: Unable to read directory block [247:26] [ 266.425165][ T8273] binder: 8270:8273 ioctl c018620c 200000000380 returned -22 [ 266.819180][ T5343] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 267.036314][ T5343] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 267.060567][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.080045][ T5343] usb 5-1: Product: syz [ 267.093790][ T5343] usb 5-1: Manufacturer: syz [ 267.116165][ T5343] usb 5-1: SerialNumber: syz [ 267.146367][ T5343] r8152-cfgselector 5-1: config 0 descriptor?? [ 267.562575][ T5343] r8152-cfgselector 5-1: Unknown version 0x0000 [ 267.591666][ T5343] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 267.771623][ T8323] netlink: 'syz.0.1549': attribute type 12 has an invalid length. [ 268.055082][ T8333] netlink: 'syz.0.1553': attribute type 21 has an invalid length. [ 268.278096][ T8315] loop1: detected capacity change from 0 to 32768 [ 268.367595][ T8315] XFS (loop1): Mounting V5 Filesystem [ 268.469253][ T5343] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.502796][ T8315] XFS (loop1): Ending clean mount [ 268.521192][ T8315] XFS (loop1): Quotacheck needed: Please wait. [ 268.646828][ T8315] XFS (loop1): Quotacheck: Done. [ 268.668846][ T5343] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 268.701386][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.719750][ T5343] usb 3-1: Product: syz [ 268.747523][ T5343] usb 3-1: Manufacturer: syz [ 268.773537][ T5343] usb 3-1: SerialNumber: syz [ 268.822437][ T5343] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 268.848764][ T4268] XFS (loop1): Unmounting Filesystem [ 268.883978][ T5343] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 269.109144][ C0] usb 3-1: ath9k_htc: invalid pkt_len (fd10) [ 269.334423][ T5018] usb 3-1: USB disconnect, device number 16 [ 269.468629][ T8377] xt_l2tp: v2 doesn't support IP mode [ 269.857116][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 269.877418][ T8385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1576'. [ 269.916004][ T5343] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 269.927864][ T5343] ath9k_htc: Failed to initialize the device [ 269.940254][ T8388] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 269.965727][ T5018] usb 3-1: ath9k_htc: USB layer deinitialized [ 269.996957][ T8365] loop0: detected capacity change from 0 to 32768 [ 270.182441][ T8365] XFS (loop0): Mounting V5 Filesystem [ 270.245113][ T8399] loop2: detected capacity change from 0 to 4096 [ 270.355099][ T8365] XFS (loop0): Ending clean mount [ 270.377981][ T8399] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 270.461779][ T5526] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 270.557146][ T4275] XFS (loop0): Unmounting Filesystem [ 270.681852][ T5526] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 270.695710][ T5526] usb 5-1: config 0 has no interface number 0 [ 270.726701][ T5526] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 270.752864][ T5526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.788229][ T5526] usb 5-1: Product: syz [ 270.807772][ T5526] usb 5-1: Manufacturer: syz [ 270.817564][ T5526] usb 5-1: SerialNumber: syz [ 270.842288][ T5526] usb 5-1: config 0 descriptor?? [ 270.875818][ T5526] hub 5-1:0.132: bad descriptor, ignoring hub [ 270.912008][ T5526] hub: probe of 5-1:0.132 failed with error -5 [ 270.933059][ T5526] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input10 [ 270.997338][ T8419] loop1: detected capacity change from 0 to 512 [ 271.104451][ T8419] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1590: bg 0: block 248: padding at end of block bitmap is not set [ 271.136476][ T8419] Quota error (device loop1): write_blk: dquota write failed [ 271.163880][ T8419] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 271.239324][ T8419] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1590: Failed to acquire dquot type 1 [ 271.349299][ T8419] EXT4-fs (loop1): 1 truncate cleaned up [ 271.357511][ T5343] usb 5-1: USB disconnect, device number 20 [ 271.373417][ T8419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 271.386555][ T8419] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.470813][ T8419] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 271.523910][ T8419] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 271.539903][ T8419] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1590: Failed to acquire dquot type 1 [ 271.635461][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 271.647661][ T75] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 271.666713][ T75] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 272.236275][ T8458] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1606'. [ 272.274986][ T5599] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 272.452498][ T8464] loop1: detected capacity change from 0 to 512 [ 272.470272][ T5599] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 272.501568][ T5599] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.523858][ T5599] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.583265][ T8464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.617392][ T5599] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 272.637255][ T8464] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.663695][ T26] audit: type=1326 audit(1770826116.614:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 272.715623][ T5599] usb 4-1: Product: syz [ 272.746477][ T5599] usb 4-1: Manufacturer: syz [ 272.752519][ T5599] usb 4-1: SerialNumber: syz [ 272.779461][ T26] audit: type=1326 audit(1770826116.635:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 272.812088][ T5599] usb 4-1: config 0 descriptor?? [ 272.846943][ T5599] usb 4-1: selecting invalid altsetting 0 [ 272.864012][ T26] audit: type=1326 audit(1770826116.635:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f9d9bf79 code=0x7ffc0000 [ 272.900053][ T8446] loop4: detected capacity change from 0 to 32768 [ 272.952960][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 272.959856][ T8479] loop0: detected capacity change from 0 to 64 [ 272.984710][ T8479] Trying to free block not in datazone [ 272.993440][ T8479] Trying to free block not in datazone [ 272.999442][ T8479] Trying to free block not in datazone [ 273.005044][ T8479] Trying to free block not in datazone [ 273.010630][ T8479] Trying to free block not in datazone [ 273.016349][ T8479] Trying to free block not in datazone [ 273.021903][ T8479] Trying to free block not in datazone [ 273.027762][ T8479] Trying to free block not in datazone [ 273.041339][ T8479] Trying to free block not in datazone [ 273.074344][ T8479] Trying to free block not in datazone [ 273.079973][ T8479] Trying to free block not in datazone [ 273.081116][ T5599] usb 4-1: USB disconnect, device number 20 [ 273.121497][ T8479] Trying to free block not in datazone [ 273.128212][ T8479] Trying to free block not in datazone [ 273.134448][ T8479] Trying to free block not in datazone [ 273.145259][ T8446] XFS (loop4): Mounting V5 Filesystem [ 273.154147][ T8479] Trying to free block not in datazone [ 273.159667][ T8479] Trying to free block not in datazone [ 273.236108][ T8479] Trying to free block not in datazone [ 273.258038][ T8479] Trying to free block not in datazone [ 273.315752][ T8479] Trying to free block not in datazone [ 273.328180][ T8446] XFS (loop4): Ending clean mount [ 273.334310][ T8479] Trying to free block not in datazone [ 273.339848][ T8479] Trying to free block not in datazone [ 273.382634][ T8479] Trying to free block not in datazone [ 273.410403][ T8479] Trying to free block not in datazone [ 273.415942][ T8479] Trying to free block not in datazone [ 273.471560][ T8479] Trying to free block not in datazone [ 273.489382][ T8479] Trying to free block not in datazone [ 273.495357][ T4283] XFS (loop4): Unmounting Filesystem [ 273.501722][ T8479] Trying to free block not in datazone [ 273.512082][ T8479] Trying to free block not in datazone [ 273.567056][ T8479] Trying to free block not in datazone [ 273.573195][ T8479] Trying to free block not in datazone [ 273.586307][ T8479] Trying to free block not in datazone [ 273.602963][ T8479] Trying to free block not in datazone [ 273.609431][ T8479] Trying to free block not in datazone [ 273.615073][ T8479] Trying to free block not in datazone [ 273.639211][ T8479] Trying to free block not in datazone [ 273.657001][ T8479] Trying to free block not in datazone [ 273.676075][ T8479] Trying to free block not in datazone [ 273.689451][ T8479] Trying to free block not in datazone [ 273.734226][ T8479] Trying to free block not in datazone [ 273.797830][ T8479] Trying to free block not in datazone [ 273.803409][ T8479] Trying to free block not in datazone [ 273.816938][ T8479] Trying to free block not in datazone [ 273.838704][ T8479] Trying to free block not in datazone [ 273.849326][ T8496] device bridge2 entered promiscuous mode [ 273.858556][ T8479] Trying to free block not in datazone [ 273.864073][ T8479] Trying to free block not in datazone [ 273.870554][ T8498] netlink: 'syz.1.1623': attribute type 30 has an invalid length. [ 273.913287][ T8479] Trying to free block not in datazone [ 273.956623][ T8479] Trying to free block not in datazone [ 273.990721][ T8479] Trying to free block not in datazone [ 274.034724][ T8479] Trying to free block not in datazone [ 274.083238][ T8479] Trying to free block not in datazone [ 274.088783][ T8479] Trying to free block not in datazone [ 274.140295][ T8479] Trying to free block not in datazone [ 274.163404][ T8479] Trying to free block not in datazone [ 274.184840][ T8479] Trying to free block not in datazone [ 274.200571][ T8479] Trying to free block not in datazone [ 274.233601][ T8479] Trying to free block not in datazone [ 274.261157][ T8479] Trying to free block not in datazone [ 274.282979][ T8479] Trying to free block not in datazone [ 274.288522][ T8479] Trying to free block not in datazone [ 274.318889][ T8479] Trying to free block not in datazone [ 274.336714][ T8479] Trying to free block not in datazone [ 274.342569][ T8479] Trying to free block not in datazone [ 274.348145][ T8479] Trying to free block not in datazone [ 274.378301][ T8479] Trying to free block not in datazone [ 274.418432][ T8479] Trying to free block not in datazone [ 274.434392][ T8479] Trying to free block not in datazone [ 274.449555][ T26] audit: type=1326 audit(1770826118.485:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 274.454614][ T8479] Trying to free block not in datazone [ 274.526266][ T26] audit: type=1326 audit(1770826118.527:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 274.548085][ T8479] Trying to free block not in datazone [ 274.585199][ T8479] Trying to free block not in datazone [ 274.604392][ T8479] Trying to free block not in datazone [ 274.659828][ T8479] Trying to free block not in datazone [ 274.669825][ T8479] Trying to free block not in datazone [ 274.676425][ T8479] Trying to free block not in datazone [ 274.682804][ T8479] Trying to free block not in datazone [ 274.688307][ T8479] Trying to free block not in datazone [ 274.702330][ T8479] Trying to free block not in datazone [ 274.702340][ T8479] Trying to free block not in datazone [ 274.702346][ T8479] Trying to free block not in datazone [ 274.702353][ T8479] Trying to free block not in datazone [ 274.702359][ T8479] Trying to free block not in datazone [ 274.702365][ T8479] Trying to free block not in datazone [ 274.702371][ T8479] Trying to free block not in datazone [ 274.702378][ T8479] Trying to free block not in datazone [ 274.702384][ T8479] Trying to free block not in datazone [ 274.702390][ T8479] Trying to free block not in datazone [ 274.702397][ T8479] Trying to free block not in datazone [ 274.702403][ T8479] Trying to free block not in datazone [ 274.702409][ T8479] Trying to free block not in datazone [ 274.702415][ T8479] Trying to free block not in datazone [ 274.702422][ T8479] Trying to free block not in datazone [ 274.702428][ T8479] Trying to free block not in datazone [ 274.702435][ T8479] Trying to free block not in datazone [ 274.702441][ T8479] Trying to free block not in datazone [ 274.702447][ T8479] Trying to free block not in datazone [ 274.702454][ T8479] Trying to free block not in datazone [ 274.702461][ T8479] Trying to free block not in datazone [ 274.702467][ T8479] Trying to free block not in datazone [ 274.702474][ T8479] Trying to free block not in datazone [ 274.702480][ T8479] Trying to free block not in datazone [ 274.702486][ T8479] Trying to free block not in datazone [ 274.702493][ T8479] Trying to free block not in datazone [ 274.702499][ T8479] Trying to free block not in datazone [ 274.702505][ T8479] Trying to free block not in datazone [ 274.702512][ T8479] Trying to free block not in datazone [ 274.702518][ T8479] Trying to free block not in datazone [ 274.702525][ T8479] Trying to free block not in datazone [ 274.702531][ T8479] Trying to free block not in datazone [ 274.702537][ T8479] Trying to free block not in datazone [ 274.702543][ T8479] Trying to free block not in datazone [ 274.702549][ T8479] Trying to free block not in datazone [ 274.702555][ T8479] Trying to free block not in datazone [ 274.702561][ T8479] Trying to free block not in datazone [ 274.702568][ T8479] Trying to free block not in datazone [ 274.702575][ T8479] Trying to free block not in datazone [ 274.702581][ T8479] Trying to free block not in datazone [ 274.702587][ T8479] Trying to free block not in datazone [ 274.702593][ T8479] Trying to free block not in datazone [ 274.702600][ T8479] Trying to free block not in datazone [ 274.702606][ T8479] Trying to free block not in datazone [ 274.702612][ T8479] Trying to free block not in datazone [ 274.702619][ T8479] Trying to free block not in datazone [ 274.702625][ T8479] Trying to free block not in datazone [ 274.702632][ T8479] Trying to free block not in datazone [ 274.702638][ T8479] Trying to free block not in datazone [ 274.702644][ T8479] Trying to free block not in datazone [ 274.702651][ T8479] Trying to free block not in datazone [ 274.702657][ T8479] Trying to free block not in datazone [ 274.702664][ T8479] Trying to free block not in datazone [ 274.702670][ T8479] Trying to free block not in datazone [ 274.702679][ T8479] Trying to free block not in datazone [ 274.702685][ T8479] Trying to free block not in datazone [ 274.702691][ T8479] Trying to free block not in datazone [ 274.702698][ T8479] Trying to free block not in datazone [ 274.702704][ T8479] Trying to free block not in datazone [ 274.702710][ T8479] Trying to free block not in datazone [ 274.702717][ T8479] Trying to free block not in datazone [ 274.702723][ T8479] Trying to free block not in datazone [ 274.702730][ T8479] Trying to free block not in datazone [ 274.702736][ T8479] Trying to free block not in datazone [ 274.702743][ T8479] Trying to free block not in datazone [ 274.702749][ T8479] Trying to free block not in datazone [ 274.702756][ T8479] Trying to free block not in datazone [ 274.702763][ T8479] Trying to free block not in datazone [ 274.702770][ T8479] Trying to free block not in datazone [ 274.702777][ T8479] Trying to free block not in datazone [ 274.702784][ T8479] Trying to free block not in datazone [ 274.702791][ T8479] Trying to free block not in datazone [ 274.702798][ T8479] Trying to free block not in datazone [ 274.702806][ T8479] Trying to free block not in datazone [ 274.702813][ T8479] Trying to free block not in datazone [ 274.702821][ T8479] Trying to free block not in datazone [ 274.702828][ T8479] Trying to free block not in datazone [ 274.702837][ T8479] Trying to free block not in datazone [ 274.702844][ T8479] Trying to free block not in datazone [ 274.702852][ T8479] Trying to free block not in datazone [ 274.702860][ T8479] Trying to free block not in datazone [ 274.702867][ T8479] Trying to free block not in datazone [ 274.702875][ T8479] Trying to free block not in datazone [ 274.702883][ T8479] Trying to free block not in datazone [ 274.702890][ T8479] Trying to free block not in datazone [ 274.702898][ T8479] Trying to free block not in datazone [ 274.702906][ T8479] Trying to free block not in datazone [ 274.702913][ T8479] Trying to free block not in datazone [ 274.702928][ T8479] Trying to free block not in datazone [ 274.702936][ T8479] Trying to free block not in datazone [ 274.702944][ T8479] Trying to free block not in datazone [ 274.702951][ T8479] Trying to free block not in datazone [ 274.702960][ T8479] Trying to free block not in datazone [ 274.702967][ T8479] Trying to free block not in datazone [ 274.702975][ T8479] Trying to free block not in datazone [ 274.702983][ T8479] Trying to free block not in datazone [ 274.702991][ T8479] Trying to free block not in datazone [ 274.702999][ T8479] Trying to free block not in datazone [ 274.703006][ T8479] Trying to free block not in datazone [ 274.703014][ T8479] Trying to free block not in datazone [ 274.703022][ T8479] Trying to free block not in datazone [ 274.703029][ T8479] Trying to free block not in datazone [ 274.703037][ T8479] Trying to free block not in datazone [ 274.703045][ T8479] Trying to free block not in datazone [ 274.703052][ T8479] Trying to free block not in datazone [ 274.703060][ T8479] Trying to free block not in datazone [ 274.703068][ T8479] Trying to free block not in datazone [ 274.703075][ T8479] Trying to free block not in datazone [ 274.703083][ T8479] Trying to free block not in datazone [ 274.703091][ T8479] Trying to free block not in datazone [ 274.703099][ T8479] Trying to free block not in datazone [ 274.703107][ T8479] Trying to free block not in datazone [ 274.703114][ T8479] Trying to free block not in datazone [ 274.703122][ T8479] Trying to free block not in datazone [ 274.703130][ T8479] Trying to free block not in datazone [ 274.703138][ T8479] Trying to free block not in datazone [ 274.703145][ T8479] Trying to free block not in datazone [ 274.703153][ T8479] Trying to free block not in datazone [ 274.703161][ T8479] Trying to free block not in datazone [ 274.703168][ T8479] Trying to free block not in datazone [ 274.703176][ T8479] Trying to free block not in datazone [ 274.703184][ T8479] Trying to free block not in datazone [ 274.703192][ T8479] Trying to free block not in datazone [ 274.703199][ T8479] Trying to free block not in datazone [ 274.703207][ T8479] Trying to free block not in datazone [ 274.703214][ T8479] Trying to free block not in datazone [ 274.703222][ T8479] Trying to free block not in datazone [ 274.703230][ T8479] Trying to free block not in datazone [ 274.703238][ T8479] Trying to free block not in datazone [ 274.703245][ T8479] Trying to free block not in datazone [ 274.703253][ T8479] Trying to free block not in datazone [ 274.703261][ T8479] Trying to free block not in datazone [ 274.703269][ T8479] Trying to free block not in datazone [ 274.703276][ T8479] Trying to free block not in datazone [ 274.703284][ T8479] Trying to free block not in datazone [ 274.703292][ T8479] Trying to free block not in datazone [ 274.703300][ T8479] Trying to free block not in datazone [ 274.703307][ T8479] Trying to free block not in datazone [ 274.703315][ T8479] Trying to free block not in datazone [ 274.703323][ T8479] Trying to free block not in datazone [ 274.703330][ T8479] Trying to free block not in datazone [ 274.703338][ T8479] Trying to free block not in datazone [ 274.703346][ T8479] Trying to free block not in datazone [ 274.703353][ T8479] Trying to free block not in datazone [ 274.703361][ T8479] Trying to free block not in datazone [ 274.703369][ T8479] Trying to free block not in datazone [ 274.703377][ T8479] Trying to free block not in datazone [ 274.703385][ T8479] Trying to free block not in datazone [ 274.703392][ T8479] Trying to free block not in datazone [ 274.703400][ T8479] Trying to free block not in datazone [ 274.703408][ T8479] Trying to free block not in datazone [ 274.703416][ T8479] Trying to free block not in datazone [ 274.703424][ T8479] Trying to free block not in datazone [ 274.703431][ T8479] Trying to free block not in datazone [ 274.703439][ T8479] Trying to free block not in datazone [ 274.703447][ T8479] Trying to free block not in datazone [ 274.703454][ T8479] Trying to free block not in datazone [ 274.703462][ T8479] Trying to free block not in datazone [ 274.703469][ T8479] Trying to free block not in datazone [ 274.703477][ T8479] Trying to free block not in datazone [ 274.703485][ T8479] Trying to free block not in datazone [ 274.703492][ T8479] Trying to free block not in datazone [ 274.703500][ T8479] Trying to free block not in datazone [ 274.703508][ T8479] Trying to free block not in datazone [ 274.703515][ T8479] Trying to free block not in datazone [ 274.703523][ T8479] Trying to free block not in datazone [ 274.703531][ T8479] Trying to free block not in datazone [ 274.703538][ T8479] Trying to free block not in datazone [ 274.703546][ T8479] Trying to free block not in datazone [ 274.703553][ T8479] Trying to free block not in datazone [ 274.703561][ T8479] Trying to free block not in datazone [ 274.703569][ T8479] Trying to free block not in datazone [ 274.703576][ T8479] Trying to free block not in datazone [ 274.703584][ T8479] Trying to free block not in datazone [ 274.703591][ T8479] Trying to free block not in datazone [ 274.703599][ T8479] Trying to free block not in datazone [ 274.703607][ T8479] Trying to free block not in datazone [ 274.703614][ T8479] Trying to free block not in datazone [ 274.703622][ T8479] Trying to free block not in datazone [ 274.703630][ T8479] Trying to free block not in datazone [ 274.757014][ T8479] Trying to free block not in datazone [ 275.022811][ T8530] loop1: detected capacity change from 0 to 4096 [ 275.039471][ T8530] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 275.377766][ T5018] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.557708][ T5018] usb 3-1: Using ep0 maxpacket: 16 [ 275.562196][ T5018] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 275.562230][ T5018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.562253][ T5018] usb 3-1: Product: syz [ 275.562271][ T5018] usb 3-1: Manufacturer: syz [ 275.562289][ T5018] usb 3-1: SerialNumber: syz [ 275.564255][ T5018] usb 3-1: config 0 descriptor?? [ 275.569406][ T5018] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 275.966870][ T5018] gspca_sn9c2028: read1 error -71 [ 275.967155][ T5018] gspca_sn9c2028: read1 error -71 [ 275.967203][ T5018] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 275.976363][ T5018] usb 3-1: USB disconnect, device number 17 [ 277.311674][ T8597] netlink: 'syz.0.1670': attribute type 1 has an invalid length. [ 277.330144][ T8523] tty tty4: ldisc open failed (-12), clearing slot 3 [ 277.923242][ T8605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.010141][ T8607] tmpfs: Bad value for 'size' [ 278.053532][ T8611] Error parsing options; rc = [-22] [ 278.167848][ T8603] loop1: detected capacity change from 0 to 4096 [ 278.753393][ T8633] loop2: detected capacity change from 0 to 256 [ 278.823199][ T8633] exfat: Deprecated parameter 'utf8' [ 278.828965][ T8633] exfat: Deprecated parameter 'namecase' [ 278.940480][ T8633] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 279.000546][ T8641] xt_hashlimit: max too large, truncated to 1048576 [ 279.020827][ T8633] kAFS: unable to lookup cell 's@z0' [ 279.252324][ T8649] loop4: detected capacity change from 0 to 1024 [ 279.443542][ T8659] program syz.1.1701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.504407][ T8658] loop2: detected capacity change from 0 to 736 [ 279.963953][ T8674] xt_l2tp: missing protocol rule (udp|l2tpip) [ 280.584434][ T8698] loop0: detected capacity change from 0 to 64 [ 280.704368][ T8704] netlink: 'syz.2.1723': attribute type 24 has an invalid length. [ 281.062641][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 281.062658][ T26] audit: type=1326 audit(1770826125.442:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 281.182440][ T26] audit: type=1326 audit(1770826125.473:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 281.276706][ T26] audit: type=1326 audit(1770826125.473:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 281.339411][ T26] audit: type=1326 audit(1770826125.473:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 281.431571][ T8688] loop1: detected capacity change from 0 to 32768 [ 281.441643][ T26] audit: type=1326 audit(1770826125.473:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.0.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 281.497309][ T8688] (syz.1.1716,8688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 281.520852][ T8718] loop4: detected capacity change from 0 to 8192 [ 281.532969][ T8688] (syz.1.1716,8688,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 281.591334][ T8727] usb usb7: usbfs: process 8727 (syz.2.1734) did not claim interface 0 before use [ 281.647353][ T8718] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.660626][ T8718] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 281.670703][ T8718] REISERFS (device loop4): using ordered data mode [ 281.677386][ T8718] reiserfs: using flush barriers [ 281.684985][ T8688] JBD2: Ignoring recovery information on journal [ 281.693361][ T8718] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.710391][ T8718] REISERFS (device loop4): checking transaction log (loop4) [ 281.719781][ T8718] REISERFS (device loop4): Using r5 hash to sort names [ 281.789390][ T8718] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 281.812406][ T8718] REISERFS warning (device loop4): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 281.852450][ T8718] REISERFS error (device loop4): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 281.903095][ T8718] REISERFS (device loop4): Remounting filesystem read-only [ 281.970809][ T8688] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 282.077793][ T8736] loop2: detected capacity change from 0 to 4096 [ 282.127995][ T8736] ntfs3: loop2: ino=3, Correct links count -> 2. [ 282.350722][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 282.790649][ T8755] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 283.583539][ T8787] netlink: 'syz.3.1763': attribute type 5 has an invalid length. [ 283.630363][ T8787] device ip6erspan0 entered promiscuous mode [ 284.178214][ T8815] 9pnet_fd: p9_fd_create_tcp (8815): problem connecting socket to 127.0.0.1 [ 284.385933][ T8823] loop4: detected capacity change from 0 to 256 [ 284.408874][ T5018] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 284.437685][ T8825] netlink: 'syz.2.1781': attribute type 3 has an invalid length. [ 284.593608][ T5018] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 284.611584][ T22] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 284.622980][ T5018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.655262][ T5018] usb 4-1: Product: syz [ 284.659521][ T5018] usb 4-1: Manufacturer: syz [ 284.664162][ T5018] usb 4-1: SerialNumber: syz [ 284.716306][ T5018] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.735389][ T8831] loop0: detected capacity change from 0 to 2048 [ 284.770545][ T5018] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 284.781559][ T8831] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 284.793829][ T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 284.813002][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 284.829262][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.852372][ T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.884810][ T8831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.894927][ T22] usb 2-1: Product: syz [ 284.899178][ T22] usb 2-1: Manufacturer: syz [ 284.921322][ T22] usb 2-1: SerialNumber: syz [ 284.940821][ T22] usb 2-1: config 0 descriptor?? [ 284.966899][ T22] usb 2-1: selecting invalid altsetting 0 [ 285.219044][ T5344] usb 4-1: USB disconnect, device number 21 [ 285.238070][ T5526] usb 2-1: USB disconnect, device number 16 [ 285.816478][ T5018] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 285.823577][ T5018] ath9k_htc: Failed to initialize the device [ 285.825247][ T22] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 285.851974][ T5344] usb 4-1: ath9k_htc: USB layer deinitialized [ 286.034782][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 286.042165][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.073141][ T22] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 286.081414][ T22] usb 1-1: config 8 has no interface number 0 [ 286.147845][ T22] usb 1-1: config 8 interface 255 has no altsetting 0 [ 286.178466][ T22] usb 1-1: string descriptor 0 read error: -22 [ 286.229417][ T22] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 286.247009][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 286.258884][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.606856][ T8880] loop1: detected capacity change from 0 to 4096 [ 286.652633][ T8880] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 286.705188][ T22] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 286.771752][ T8880] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 286.785356][ T22] usb 1-1: USB disconnect, device number 18 [ 286.984073][ T2895] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 287.020192][ T4268] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 287.033866][ T4268] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 287.068692][ T4268] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 287.088527][ T4299] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 287.103256][ T4268] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 287.979837][ T8933] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config [ 288.335852][ T8939] loop0: detected capacity change from 0 to 4096 [ 288.809318][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 288.860862][ T8965] 9pnet_fd: p9_fd_create_tcp (8965): problem connecting socket to 127.0.0.1 [ 289.329536][ T8975] Process accounting resumed [ 289.538553][ T26] audit: type=1326 audit(1770826134.353:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 289.616914][ T26] audit: type=1326 audit(1770826134.385:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 289.685037][ T26] audit: type=1326 audit(1770826134.385:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 289.708498][ T8995] netlink: 'syz.3.1864': attribute type 6 has an invalid length. [ 289.764460][ T26] audit: type=1326 audit(1770826134.385:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 289.814229][ T26] audit: type=1326 audit(1770826134.385:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 289.908292][ T26] audit: type=1326 audit(1770826134.385:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 289.908767][ T9001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.989347][ T26] audit: type=1326 audit(1770826134.385:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bc759bf79 code=0x7ffc0000 [ 290.063309][ T9006] loop0: detected capacity change from 0 to 1024 [ 290.131844][ T9006] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.1871: lblock 2 mapped to illegal pblock 2 (length 1) [ 290.161130][ T9006] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 290.174664][ T9006] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.1871: lblock 0 mapped to illegal pblock 48 (length 1) [ 290.241265][ T9006] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 290.269942][ T9006] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1871: Failed to acquire dquot type 0 [ 290.327046][ T9006] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 290.344157][ T9019] loop3: detected capacity change from 0 to 256 [ 290.382981][ T9006] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.1871: mark_inode_dirty error [ 290.445083][ T4383] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.474991][ T9006] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 290.523182][ T9006] EXT4-fs (loop0): 1 orphan inode deleted [ 290.535920][ T29] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 290.570710][ T9006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.613443][ T29] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 290.656771][ T29] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 290.794625][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 290.800686][ T75] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 290.824301][ T75] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 290.864655][ T4275] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 290.899564][ T4275] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 290.912337][ T9029] loop4: detected capacity change from 0 to 2048 [ 290.923452][ T4275] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 290.992780][ T9029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.245154][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 291.402916][ T9049] QAT: failed to copy from user cfg_data. [ 291.711272][ T9059] loop2: detected capacity change from 0 to 2048 [ 291.773337][ T9059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.033659][ T9072] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1899'. [ 292.150215][ T9076] VFS: could not find a valid V7 on nullb0. [ 292.370273][ T9085] Cannot find del_set index 0 as target [ 292.407803][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 292.487945][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 292.501381][ T9091] loop1: detected capacity change from 0 to 256 [ 292.629799][ T9091] FAT-fs (loop1): Directory bread(block 64) failed [ 292.636425][ T9091] FAT-fs (loop1): Directory bread(block 65) failed [ 292.668835][ T9091] FAT-fs (loop1): Directory bread(block 66) failed [ 292.704747][ T9091] FAT-fs (loop1): Directory bread(block 67) failed [ 292.753521][ T9091] FAT-fs (loop1): Directory bread(block 68) failed [ 292.790227][ T9091] FAT-fs (loop1): Directory bread(block 69) failed [ 292.826293][ T9091] FAT-fs (loop1): Directory bread(block 70) failed [ 292.853955][ T9091] FAT-fs (loop1): Directory bread(block 71) failed [ 292.892152][ T9091] FAT-fs (loop1): Directory bread(block 72) failed [ 292.924703][ T9091] FAT-fs (loop1): Directory bread(block 73) failed [ 293.437687][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1921'. [ 294.045614][ T9142] loop2: detected capacity change from 0 to 8 [ 294.376990][ T9151] netlink: 'syz.1.1940': attribute type 11 has an invalid length. [ 294.390262][ T22] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 294.542910][ T9158] SET target dimension over the limit! [ 294.588812][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 294.611047][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 294.655849][ T22] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 294.702741][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.733119][ T22] usb 4-1: Product: syz [ 294.747622][ T22] usb 4-1: Manufacturer: syz [ 294.770522][ T22] usb 4-1: SerialNumber: syz [ 294.791753][ T9165] binder: 9164:9165 ioctl c0046209 0 returned -22 [ 294.798643][ T22] usb 4-1: config 0 descriptor?? [ 295.046387][ T22] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 295.272388][ T5344] usb 4-1: USB disconnect, device number 22 [ 295.559358][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1957'. [ 295.673043][ T9186] loop1: detected capacity change from 0 to 4096 [ 295.707788][ T9186] __ntfs_error: 1 callbacks suppressed [ 295.707805][ T9186] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 295.777939][ T9186] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 295.789302][ T9198] loop4: detected capacity change from 0 to 256 [ 295.823244][ T9186] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 295.876170][ T9186] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 295.925554][ T9198] FAT-fs (loop4): Directory bread(block 64) failed [ 295.947716][ T9198] FAT-fs (loop4): Directory bread(block 65) failed [ 295.960424][ T9198] FAT-fs (loop4): Directory bread(block 66) failed [ 295.967083][ T9198] FAT-fs (loop4): Directory bread(block 67) failed [ 295.984025][ T9198] FAT-fs (loop4): Directory bread(block 68) failed [ 296.005023][ T9198] FAT-fs (loop4): Directory bread(block 69) failed [ 296.028098][ T9198] FAT-fs (loop4): Directory bread(block 70) failed [ 296.037161][ T9186] ntfs: volume version 3.1. [ 296.063813][ T9198] FAT-fs (loop4): Directory bread(block 71) failed [ 296.107323][ T9198] FAT-fs (loop4): Directory bread(block 72) failed [ 296.116716][ T9186] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 296.132168][ T9198] FAT-fs (loop4): Directory bread(block 73) failed [ 296.145168][ T9186] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 297.030300][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 297.618833][ T9210] loop1: detected capacity change from 0 to 32768 [ 297.722210][ T9261] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1989'. [ 297.764701][ T9210] XFS (loop1): Mounting V5 Filesystem [ 297.807907][ T9263] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1990'. [ 297.979336][ T9210] XFS (loop1): Ending clean mount [ 298.038472][ T9275] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1994'. [ 298.256816][ T4268] XFS (loop1): Unmounting Filesystem [ 299.114342][ T9306] Illegal XDP return value 4294967282 on prog (id 107) dev N/A, expect packet loss! [ 299.212142][ T9310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.390691][ T9317] loop3: detected capacity change from 0 to 256 [ 300.037086][ T9343] loop1: detected capacity change from 0 to 256 [ 300.122303][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_0 [ 300.196716][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.274744][ T26] audit: type=1326 audit(1770826145.628:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 300.376489][ T26] audit: type=1326 audit(1770826145.649:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 300.514936][ T26] audit: type=1326 audit(2000000000.000:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e699bf79 code=0x7ffc0000 [ 301.909382][ T9410] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2051'. [ 302.365265][ T9384] loop3: detected capacity change from 0 to 32768 [ 302.430164][ T9384] /dev/loop3: Can't open blockdev [ 302.747352][ T9437] device wlan0 entered promiscuous mode [ 302.805315][ T9437] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 303.393969][ T9458] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2070'. [ 303.594084][ T9464] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 303.870796][ T9474] cgroup: Name too long [ 304.037538][ T9471] loop3: detected capacity change from 0 to 4096 [ 304.069387][ T9471] /dev/loop3: Can't open blockdev [ 304.447439][ T9494] netlink: 'syz.2.2087': attribute type 5 has an invalid length. [ 305.090836][ T9510] loop3: detected capacity change from 0 to 4096 [ 305.137946][ T9510] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 305.228689][ T9521] loop4: detected capacity change from 0 to 256 [ 305.270566][ T9510] ntfs3: loop3: failed to convert "c46c" to iso8859-6 [ 305.320287][ T9510] ntfs3: loop3: failed to convert "0030" to iso8859-6 [ 305.349606][ T9521] FAT-fs (loop4): Directory bread(block 64) failed [ 305.368571][ T9510] ntfs3: loop3: failed to convert "0031" to iso8859-6 [ 305.387834][ T9521] FAT-fs (loop4): Directory bread(block 65) failed [ 305.431972][ T9521] FAT-fs (loop4): Directory bread(block 66) failed [ 305.470322][ T9521] FAT-fs (loop4): Directory bread(block 67) failed [ 305.498930][ T9521] FAT-fs (loop4): Directory bread(block 68) failed [ 305.517893][ T9521] FAT-fs (loop4): Directory bread(block 69) failed [ 305.527988][ T9521] FAT-fs (loop4): Directory bread(block 70) failed [ 305.534613][ T9521] FAT-fs (loop4): Directory bread(block 71) failed [ 305.594000][ T9521] FAT-fs (loop4): Directory bread(block 72) failed [ 305.600608][ T9521] FAT-fs (loop4): Directory bread(block 73) failed [ 305.736283][ T9521] syz.4.2101: attempt to access beyond end of device [ 305.736283][ T9521] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 305.798163][ T9532] xt_ecn: cannot match TCP bits for non-tcp packets [ 305.851703][ T9521] syz.4.2101: attempt to access beyond end of device [ 305.851703][ T9521] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 305.908777][ T26] audit: type=1800 audit(2000000005.871:51): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2101" name="freezer.state" dev="loop4" ino=1048617 res=0 errno=0 [ 305.936979][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2107'. [ 306.514319][ T9525] loop2: detected capacity change from 0 to 32768 [ 306.633985][ T9559] netlink: 'syz.1.2119': attribute type 8 has an invalid length. [ 306.706129][ T9525] XFS (loop2): Mounting V5 Filesystem [ 306.783320][ T9525] XFS (loop2): Ending clean mount [ 306.809026][ T9525] XFS (loop2): Quotacheck needed: Please wait. [ 306.813360][ T9568] SET target dimension over the limit! [ 306.979737][ T9525] XFS (loop2): Quotacheck: Done. [ 307.194697][ T4281] XFS (loop2): Unmounting Filesystem [ 307.596141][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.602519][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.953014][ T9604] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.990130][ T9604] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.021006][ T9604] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.040704][ T9604] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.968655][ T9649] loop1: detected capacity change from 0 to 1024 [ 309.004070][ T9649] EXT4-fs: inline encryption not supported [ 309.103503][ T9649] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.2161: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.126367][ T9655] ip6t_rpfilter: unknown options [ 309.164200][ T9649] EXT4-fs (loop1): Remounting filesystem read-only [ 309.170887][ T9649] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 309.179338][ T9649] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.2161: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.195017][ T9649] EXT4-fs (loop1): Remounting filesystem read-only [ 309.202314][ T9649] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 309.211211][ T9649] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2161: Failed to acquire dquot type 0 [ 309.225683][ T9649] EXT4-fs (loop1): Remounting filesystem read-only [ 309.232857][ T9649] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 309.242850][ T9649] EXT4-fs (loop1): Remounting filesystem read-only [ 309.249439][ T9649] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.2161: mark_inode_dirty error [ 309.288590][ T9649] EXT4-fs (loop1): Remounting filesystem read-only [ 309.305721][ T9649] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 309.364475][ T9649] EXT4-fs (loop1): 1 orphan inode deleted [ 309.398209][ T2895] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.439664][ T9649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 309.475010][ T2895] EXT4-fs (loop1): Remounting filesystem read-only [ 309.497524][ T2895] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 309.515643][ T2895] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 309.535277][ T9649] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm syz.1.2161: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.589248][ T2895] EXT4-fs (loop1): Remounting filesystem read-only [ 309.636676][ T9649] EXT4-fs (loop1): Remounting filesystem read-only [ 309.661639][ T9649] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 309.833666][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 309.839582][ T4268] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 309.885310][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 309.908370][ T4268] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 309.955743][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 309.962327][ T4268] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 310.024082][ T4268] EXT4-fs (loop1): Remounting filesystem read-only [ 310.450915][ T9698] loop1: detected capacity change from 0 to 16 [ 310.458133][ T9698] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 310.856352][ T9710] netlink: 'syz.1.2190': attribute type 10 has an invalid length. [ 310.979009][ T9710] wlan1: mtu less than device minimum [ 311.015858][ T9710] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 311.786003][ T9750] ksmbd: Unknown IPC event: 4, ignore. [ 311.988406][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 312.022228][ T26] audit: type=1326 audit(2000000012.309:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.2215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc759bf79 code=0x0 [ 312.496643][ T9781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.646541][ T9786] IPv6: sit1: Disabled Multicast RS [ 312.931214][ T9796] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2233'. [ 313.294746][ T9811] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 313.306508][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.515312][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 313.527343][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 313.556266][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.592224][ T22] usb 2-1: Product: syz [ 313.596546][ T22] usb 2-1: Manufacturer: syz [ 313.617539][ T22] usb 2-1: SerialNumber: syz [ 313.627317][ T22] usb 2-1: config 0 descriptor?? [ 313.652032][ T22] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 313.745759][ T9826] tipc: Trying to set illegal importance in message [ 313.780199][ T9820] loop3: detected capacity change from 0 to 4096 [ 313.796769][ T9820] /dev/loop3: Can't open blockdev [ 313.859410][ T4383] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.037201][ T22] gspca_vc032x: reg_w err -71 [ 314.048888][ T22] vc032x: probe of 2-1:0.0 failed with error -71 [ 314.091792][ T22] usb 2-1: USB disconnect, device number 17 [ 314.121771][ T4396] udevd[4396]: setting mode of /dev/bus/usb/002/017 to 020664 failed: No such file or directory [ 314.163322][ T4396] udevd[4396]: setting owner of /dev/bus/usb/002/017 to uid=0, gid=0 failed: No such file or directory [ 314.457047][ T5018] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 314.658104][ T5018] usb 4-1: Using ep0 maxpacket: 16 [ 314.665867][ T5018] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 314.700762][ T5018] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 314.730992][ T5018] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.750767][ T5018] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 314.770932][ T5018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.802258][ T5018] usb 4-1: config 0 descriptor?? [ 315.214639][ T5018] usb 4-1: USB disconnect, device number 23 [ 315.225160][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 315.465661][ T9883] loop1: detected capacity change from 0 to 164 [ 315.518076][ T9883] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 315.624971][ T9889] loop0: detected capacity change from 0 to 16 [ 315.637623][ T9888] netlink: 'syz.2.2278': attribute type 4 has an invalid length. [ 315.671914][ T9889] erofs: (device loop0): mounted with root inode @ nid 36. [ 315.750467][ T9889] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 316.098866][ T9903] xt_TCPMSS: Only works on TCP SYN packets [ 316.267392][ T4342] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 316.450512][ T4342] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 316.478436][ T4342] usb 2-1: config 0 has no interface number 0 [ 316.484642][ T4342] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 316.529088][ T4342] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.553777][ T4342] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 316.580290][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.618733][ T4342] usb 2-1: Product: syz [ 316.634540][ T4342] usb 2-1: Manufacturer: syz [ 316.648204][ T4342] usb 2-1: SerialNumber: syz [ 316.691268][ T4342] usb 2-1: config 0 descriptor?? [ 316.704393][ T9899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.741461][ T4342] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 316.783342][ T4342] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 317.178504][ T9940] loop4: detected capacity change from 0 to 2048 [ 317.187458][ T22] usb 2-1: USB disconnect, device number 18 [ 317.197866][ T22] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 317.240907][ T22] cyberjack 2-1:0.69: device disconnected [ 317.253674][ T9940] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 317.306569][ T9940] syz.4.2304: attempt to access beyond end of device [ 317.306569][ T9940] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 317.322745][ T9944] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.418304][ T9940] syz.4.2304: attempt to access beyond end of device [ 317.418304][ T9940] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 317.484513][ T9940] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 317.510310][ T9940] NILFS (loop4): error -5 reading inode: ino=12 [ 317.926701][ T9955] Process accounting paused [ 317.989869][ T9938] loop2: detected capacity change from 0 to 32768 [ 318.075608][ T9938] (syz.2.2303,9938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.146347][ T9938] (syz.2.2303,9938,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.291628][ T9938] JBD2: Ignoring recovery information on journal [ 318.391436][ T9938] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 318.532975][ T5602] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.610481][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 318.735749][ T5602] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 318.761635][ T5602] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 318.790712][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 318.824547][ T5602] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 318.865233][ T5602] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 318.895601][ T5602] usb 5-1: Product: syz [ 318.923569][ T5602] usb 5-1: Manufacturer: syz [ 318.928392][ T5602] usb 5-1: SerialNumber: syz [ 318.954267][ T5602] usb 5-1: config 0 descriptor?? [ 319.426233][ T5602] usb 5-1: USB disconnect, device number 21 [ 319.490004][T10005] xt_socket: unknown flags 0x4c [ 319.831471][ T9989] loop3: detected capacity change from 0 to 32768 [ 319.855714][ T9989] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2326 (9989) [ 319.940973][ T9989] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 319.989344][ T9989] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 320.041898][ T9989] BTRFS info (device loop3): force zlib compression, level 3 [ 320.052852][T10020] loop2: detected capacity change from 0 to 128 [ 320.104479][ T9989] BTRFS info (device loop3): force clearing of disk cache [ 320.111743][ T9989] BTRFS info (device loop3): disabling tree log [ 320.155721][ T9989] BTRFS info (device loop3): enabling disk space caching [ 320.172597][ T9989] BTRFS info (device loop3): disk space caching is enabled [ 320.511961][ T9989] BTRFS info (device loop3): enabling ssd optimizations [ 320.547669][ T9989] BTRFS warning (device loop3: state M): Skipping commit of aborted transaction. [ 320.560643][ T9989] ------------[ cut here ]------------ [ 320.576202][ T9989] WARNING: CPU: 0 PID: 9989 at fs/btrfs/transaction.c:1997 btrfs_commit_transaction+0x3355/0x3c30 [ 320.586951][ T9989] Modules linked in: [ 320.591053][ T9989] CPU: 0 PID: 9989 Comm: syz.3.2326 Not tainted syzkaller #0 [ 320.598516][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 320.609240][ T9989] RIP: 0010:btrfs_commit_transaction+0x3355/0x3c30 [ 320.615827][ T9989] Code: e8 00 ac 18 fe be 01 00 00 00 48 89 df e8 33 1b a7 00 e9 56 d2 ff ff e8 e9 ab 18 fe 48 c7 c7 40 78 cf 8a 89 de e8 eb 1b e4 fd <0f> 0b e9 bb f8 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f2 cd [ 320.635824][ T9989] RSP: 0018:ffffc900063977e0 EFLAGS: 00010246 [ 320.642022][ T9989] RAX: 7ad5546e7573ab00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 320.650084][ T9989] RDX: ffffc9000e7ba000 RSI: 000000000000a48e RDI: 000000000000a48f [ 320.658152][ T9989] RBP: ffffc90006397b08 R08: ffffc90006397467 R09: 1ffff92000c72e8c [ 320.666229][ T9989] R10: dffffc0000000000 R11: fffff52000c72e8d R12: ffff8880544e8000 [ 320.674260][ T9989] R13: fffff52000c72f20 R14: dffffc0000000000 R15: 0000000000000000 [ 320.682382][ T9989] FS: 00007f3e2372d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 320.691403][ T9989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.698077][ T9989] CR2: 0000200000001a40 CR3: 000000002ebed000 CR4: 00000000003506f0 [ 320.706149][ T9989] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.714216][ T9989] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.722253][ T9989] Call Trace: [ 320.725649][ T9989] [ 320.728644][ T9989] ? btrfs_commit_transaction+0x192/0x3c30 [ 320.734579][ T9989] ? join_transaction+0xb66/0xd20 [ 320.739684][ T9989] ? btrfs_commit_transaction_async+0x470/0x470 [ 320.746043][ T9989] ? do_raw_spin_unlock+0x11d/0x230 [ 320.751346][ T9989] ? _raw_spin_unlock+0x24/0x40 [ 320.756258][ T9989] ? join_transaction+0xb66/0xd20 [ 320.761400][ T9989] ? btrfs_record_root_in_trans+0x8d/0x180 [ 320.767277][ T9989] ? start_transaction+0x469/0x11c0 [ 320.772607][ T9989] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 320.779169][ T9989] btrfs_remount+0x1036/0x14b0 [ 320.784067][ T9989] ? btrfs_statfs+0x1890/0x1890 [ 320.788985][ T9989] ? dentry_lru_isolate+0x2e0/0x2e0 [ 320.794301][ T9989] ? hook_sb_remount+0x19/0xc0 [ 320.799172][ T9989] ? bpf_lsm_sb_remount+0x5/0x10 [ 320.804174][ T9989] reconfigure_super+0x219/0x8a0 [ 320.809217][ T9989] path_mount+0xe13/0x1020 [ 320.813696][ T9989] ? kmem_cache_free+0xf7/0x290 [ 320.818649][ T9989] __se_sys_mount+0x2e3/0x3d0 [ 320.823430][ T9989] ? __x64_sys_mount+0xc0/0xc0 [ 320.828289][ T9989] ? lockdep_hardirqs_on+0x94/0x140 [ 320.833557][ T9989] ? __x64_sys_mount+0x1c/0xc0 [ 320.838429][ T9989] do_syscall_64+0x4c/0xa0 [ 320.842912][ T9989] ? clear_bhb_loop+0x60/0xb0 [ 320.847715][ T9989] ? clear_bhb_loop+0x60/0xb0 [ 320.852542][ T9989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.858571][ T9989] RIP: 0033:0x7f3e2279bf79 [ 320.863052][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.882846][ T9989] RSP: 002b:00007f3e2372d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.891368][ T9989] RAX: ffffffffffffffda RBX: 00007f3e22a15fa0 RCX: 00007f3e2279bf79 [ 320.899440][ T9989] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 320.907946][ T9989] RBP: 00007f3e228327e0 R08: 0000000000000000 R09: 0000000000000000 [ 320.916378][ T9989] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 320.924459][ T9989] R13: 00007f3e22a16038 R14: 00007f3e22a15fa0 R15: 00007ffc337b9948 [ 320.932530][ T9989] [ 320.935598][ T9989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.942923][ T9989] CPU: 0 PID: 9989 Comm: syz.3.2326 Not tainted syzkaller #0 [ 320.950359][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 320.960458][ T9989] Call Trace: [ 320.963783][ T9989] [ 320.966782][ T9989] dump_stack_lvl+0x188/0x24e [ 320.971503][ T9989] ? memcpy+0x3c/0x60 [ 320.975518][ T9989] ? show_regs_print_info+0x12/0x12 [ 320.980766][ T9989] ? load_image+0x400/0x400 [ 320.985305][ T9989] panic+0x2e5/0x730 [ 320.989229][ T9989] ? bpf_jit_dump+0xd0/0xd0 [ 320.993778][ T9989] __warn+0x2f8/0x4f0 [ 320.997784][ T9989] ? btrfs_commit_transaction+0x3355/0x3c30 [ 321.003719][ T9989] ? btrfs_commit_transaction+0x3355/0x3c30 [ 321.009663][ T9989] report_bug+0x2ba/0x4f0 [ 321.014032][ T9989] ? btrfs_commit_transaction+0x3355/0x3c30 [ 321.019977][ T9989] handle_bug+0x3a/0x70 [ 321.024171][ T9989] exc_invalid_op+0x16/0x40 [ 321.028709][ T9989] asm_exc_invalid_op+0x16/0x20 [ 321.033589][ T9989] RIP: 0010:btrfs_commit_transaction+0x3355/0x3c30 [ 321.040128][ T9989] Code: e8 00 ac 18 fe be 01 00 00 00 48 89 df e8 33 1b a7 00 e9 56 d2 ff ff e8 e9 ab 18 fe 48 c7 c7 40 78 cf 8a 89 de e8 eb 1b e4 fd <0f> 0b e9 bb f8 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f2 cd [ 321.059759][ T9989] RSP: 0018:ffffc900063977e0 EFLAGS: 00010246 [ 321.065856][ T9989] RAX: 7ad5546e7573ab00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 321.073860][ T9989] RDX: ffffc9000e7ba000 RSI: 000000000000a48e RDI: 000000000000a48f [ 321.081852][ T9989] RBP: ffffc90006397b08 R08: ffffc90006397467 R09: 1ffff92000c72e8c [ 321.089855][ T9989] R10: dffffc0000000000 R11: fffff52000c72e8d R12: ffff8880544e8000 [ 321.097858][ T9989] R13: fffff52000c72f20 R14: dffffc0000000000 R15: 0000000000000000 [ 321.105877][ T9989] ? btrfs_commit_transaction+0x192/0x3c30 [ 321.111735][ T9989] ? join_transaction+0xb66/0xd20 [ 321.116798][ T9989] ? btrfs_commit_transaction_async+0x470/0x470 [ 321.123083][ T9989] ? do_raw_spin_unlock+0x11d/0x230 [ 321.128302][ T9989] ? _raw_spin_unlock+0x24/0x40 [ 321.133182][ T9989] ? join_transaction+0xb66/0xd20 [ 321.138237][ T9989] ? btrfs_record_root_in_trans+0x8d/0x180 [ 321.144088][ T9989] ? start_transaction+0x469/0x11c0 [ 321.149329][ T9989] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 321.155858][ T9989] btrfs_remount+0x1036/0x14b0 [ 321.160669][ T9989] ? btrfs_statfs+0x1890/0x1890 [ 321.165552][ T9989] ? dentry_lru_isolate+0x2e0/0x2e0 [ 321.170790][ T9989] ? hook_sb_remount+0x19/0xc0 [ 321.175589][ T9989] ? bpf_lsm_sb_remount+0x5/0x10 [ 321.180572][ T9989] reconfigure_super+0x219/0x8a0 [ 321.185541][ T9989] path_mount+0xe13/0x1020 [ 321.189976][ T9989] ? kmem_cache_free+0xf7/0x290 [ 321.194856][ T9989] __se_sys_mount+0x2e3/0x3d0 [ 321.199561][ T9989] ? __x64_sys_mount+0xc0/0xc0 [ 321.204352][ T9989] ? lockdep_hardirqs_on+0x94/0x140 [ 321.209581][ T9989] ? __x64_sys_mount+0x1c/0xc0 [ 321.214372][ T9989] do_syscall_64+0x4c/0xa0 [ 321.218818][ T9989] ? clear_bhb_loop+0x60/0xb0 [ 321.223520][ T9989] ? clear_bhb_loop+0x60/0xb0 [ 321.228220][ T9989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.234138][ T9989] RIP: 0033:0x7f3e2279bf79 [ 321.238574][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.258208][ T9989] RSP: 002b:00007f3e2372d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.266649][ T9989] RAX: ffffffffffffffda RBX: 00007f3e22a15fa0 RCX: 00007f3e2279bf79 [ 321.274640][ T9989] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 321.282628][ T9989] RBP: 00007f3e228327e0 R08: 0000000000000000 R09: 0000000000000000 [ 321.290621][ T9989] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 321.298608][ T9989] R13: 00007f3e22a16038 R14: 00007f3e22a15fa0 R15: 00007ffc337b9948 [ 321.306610][ T9989] [ 321.310259][ T9989] Kernel Offset: disabled [ 321.314689][ T9989] Rebooting in 86400 seconds..