last executing test programs: 2.697619095s ago: executing program 0 (id=3140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) 2.412059231s ago: executing program 0 (id=3144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x268, 0x98, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@mcast2, @port=0x4e23, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 2.084547s ago: executing program 0 (id=3145): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000000)={[{@adinicb}, {@partition={'partition', 0x3d, 0xa8e2}}, {@utf8}, {@uid}, {@dmode={'dmode', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@gid_ignore}, {@fileset={'fileset', 0x3d, 0x8bd}}, {@adinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@uid}, {@session}]}, 0x1, 0xc5d, &(0x7f0000001bc0)="$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") symlink(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.625629377s ago: executing program 0 (id=3152): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @private0, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2b, 0x3a}}}], 0x30}}], 0x1, 0xc8800) 1.542328941s ago: executing program 2 (id=3153): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) 1.476295795s ago: executing program 1 (id=3155): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0x85, 0x0, 0x0, 0x1, [@generic="5b00320e31a5852a9c1b110d523a07560e39abb842eac5c9c22bfe6c40f42ca574baddb5b6f2984561e28e70904b0069eb933e4000bbb45de074a2b35f415f5fd064ce591ff14b3dbc4215b64955b7399360c866a12caed8372e5f114bdf98c3921f4973548520f240aeb568c14f7c78e7fc9cad6e", @typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, @nested={0x45, 0x0, 0x0, 0x1, [@generic="f66e50f1514f30b7f60183b0034f59138859b2663b55694c53d4815c78f8b0cb119ff5bab35543cdb3761fe3aec943b793136080a8cc4cb600416f2de742bda257"]}]}, 0xe0}], 0x1}, 0x0) 1.38559051s ago: executing program 0 (id=3156): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) 1.274722537s ago: executing program 2 (id=3157): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @private}}}}) 1.161730333s ago: executing program 1 (id=3159): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000007900)={{0x3, 0x3, 0x1, 0x4, 0xfffffeff}, 0x2, 0xffffffffffffffff}) 1.143382334s ago: executing program 0 (id=3160): syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 1.046640739s ago: executing program 3 (id=3161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000000101040000000000000000020000002400018014000180080001000400000108000200000000000c00028005000100000000002c0002800c00028005000100000000001400018008000100e000000108000200ac1e0001060003400400000008000740000000004c001080080003400000013308000240000000cd080001"], 0xb8}}, 0x0) 1.018765972s ago: executing program 2 (id=3162): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="b5ace4c70521b9b4"}}}}}, 0x0) 956.186455ms ago: executing program 1 (id=3163): r0 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/116) 824.517352ms ago: executing program 3 (id=3164): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @private0, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2b, 0x3a}}}], 0x30}}], 0x1, 0xc8800) 758.277536ms ago: executing program 1 (id=3165): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) 677.215501ms ago: executing program 2 (id=3166): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f0000000100)={0x300, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 633.321273ms ago: executing program 3 (id=3167): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3, 0x27c, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) 632.897334ms ago: executing program 1 (id=3168): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) 431.657695ms ago: executing program 1 (id=3169): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f00000000c0), 0x0) 418.840785ms ago: executing program 3 (id=3170): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 312.972712ms ago: executing program 2 (id=3171): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000900)={0x7f, 0x4, 0x10, {0x80000000, 0x80}, 0xfffffff8, 0x6}) 210.940898ms ago: executing program 3 (id=3172): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, 0x0, 0x40) 70.054316ms ago: executing program 3 (id=3173): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x841) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x7}) 0s ago: executing program 2 (id=3174): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0_macvtap\x00') kernel console output (not intermixed with test programs): 295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 230.778156][ T6332] usb 2-1: Using ep0 maxpacket: 32 [ 230.787838][ T6332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.819128][ T28] audit: type=1326 audit(1770023589.722:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 230.842194][ T6332] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 230.855404][ T6332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.873856][ T6332] usb 2-1: Product: syz [ 230.882380][ T6332] usb 2-1: Manufacturer: syz [ 230.891347][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 230.900766][ T6332] usb 2-1: SerialNumber: syz [ 230.905542][ T28] audit: type=1326 audit(1770023589.722:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 230.950489][ T6332] usb 2-1: config 0 descriptor?? [ 230.956319][ T28] audit: type=1326 audit(1770023589.722:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 230.958901][ T6332] usb 2-1: bad CDC descriptors [ 231.007294][ T6332] usb 2-1: unsupported MDLM descriptors [ 231.129148][ T9685] netlink: 'syz.3.1771': attribute type 10 has an invalid length. [ 231.168115][ T5760] usb 2-1: USB disconnect, device number 6 [ 231.659420][ T28] audit: type=1326 audit(1770023590.682:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.2.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 231.697600][ T28] audit: type=1326 audit(1770023590.682:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.2.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 231.758292][ T28] audit: type=1326 audit(1770023590.682:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.2.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 231.830408][ T28] audit: type=1326 audit(1770023590.682:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.2.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 231.852800][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.169270][ T9721] loop2: detected capacity change from 0 to 256 [ 232.239431][ T9721] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 232.584131][ T9735] @0Ù: renamed from dummy0 (while UP) [ 232.966696][ T9750] loop3: detected capacity change from 0 to 1024 [ 232.995985][ T9750] EXT4-fs: inline encryption not supported [ 233.032137][ T9750] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.105909][ T9750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.301147][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.793516][ T9780] loop3: detected capacity change from 0 to 256 [ 233.825707][ T28] audit: type=1326 audit(1770023592.842:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.0.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 233.847991][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.884284][ T9783] x_tables: duplicate underflow at hook 3 [ 233.910910][ T28] audit: type=1326 audit(1770023592.842:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.0.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 233.990195][ T28] audit: type=1326 audit(1770023592.852:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.0.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 234.010699][ T9780] FAT-fs (loop3): Directory bread(block 64) failed [ 234.019029][ T9780] FAT-fs (loop3): Directory bread(block 65) failed [ 234.066324][ T9780] FAT-fs (loop3): Directory bread(block 66) failed [ 234.095479][ T28] audit: type=1326 audit(1770023592.852:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.0.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 234.118737][ T9780] FAT-fs (loop3): Directory bread(block 67) failed [ 234.146002][ T9780] FAT-fs (loop3): Directory bread(block 68) failed [ 234.171110][ T9780] FAT-fs (loop3): Directory bread(block 69) failed [ 234.185928][ T9780] FAT-fs (loop3): Directory bread(block 70) failed [ 234.193248][ T28] audit: type=1326 audit(1770023592.852:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.0.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e839aeb9 code=0x7ffc0000 [ 234.227196][ T9780] FAT-fs (loop3): Directory bread(block 71) failed [ 234.247598][ T9780] FAT-fs (loop3): Directory bread(block 72) failed [ 234.282707][ T9780] FAT-fs (loop3): Directory bread(block 73) failed [ 235.010136][ T5884] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.175136][ T9814] C: renamed from team_slave_0 [ 235.188926][ T9814] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 235.229065][ T9814] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1833'. [ 235.240296][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 235.248613][ T9814] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 235.304082][ T5884] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 235.322190][ T5884] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 235.358727][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.382613][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.399722][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.408515][ T5884] usb 4-1: Product: syz [ 235.413114][ T5884] usb 4-1: Manufacturer: syz [ 235.417785][ T5884] usb 4-1: SerialNumber: syz [ 235.880199][ T5884] usb 4-1: 0:2 : does not exist [ 235.888494][ T9833] netlink: 'syz.0.1841': attribute type 8 has an invalid length. [ 235.932136][ T5884] usb 4-1: USB disconnect, device number 8 [ 236.014154][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.222148][ T9844] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 236.450369][ T6332] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 236.650058][ T6332] usb 1-1: Using ep0 maxpacket: 32 [ 236.657693][ T6332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.671674][ T6332] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 236.684489][ T6332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.703175][ T6332] usb 1-1: Product: syz [ 236.703603][ T9860] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.713781][ T6332] usb 1-1: Manufacturer: syz [ 236.741678][ T6332] usb 1-1: SerialNumber: syz [ 236.759013][ T6332] usb 1-1: config 0 descriptor?? [ 236.785670][ T6332] usb 1-1: bad CDC descriptors [ 236.805771][ T6332] usb 1-1: unsupported MDLM descriptors [ 237.011402][ T6332] usb 1-1: USB disconnect, device number 10 [ 237.068206][ T9864] loop2: detected capacity change from 0 to 4096 [ 237.096226][ T9864] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 237.108989][ T9868] hsr0: VLAN not yet supported [ 237.133535][ T9864] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 237.191354][ T9864] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 237.494254][ T28] audit: type=1326 audit(1770023596.522:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 237.550150][ T28] audit: type=1326 audit(1770023596.522:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 237.596426][ T28] audit: type=1326 audit(1770023596.542:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 237.660025][ T28] audit: type=1326 audit(1770023596.552:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164c79aeb9 code=0x7ffc0000 [ 238.370186][ T5777] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.396770][ T9882] loop2: detected capacity change from 0 to 32768 [ 238.478195][ T9882] ERROR: (device loop2): diAllocBit: iag inconsistent [ 238.478195][ T9882] [ 238.503148][ T9882] ERROR: (device loop2): remounting filesystem as read-only [ 238.511749][ T9882] ialloc: diAlloc returned -5! [ 238.572363][ T5777] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 238.596189][ T5777] usb 1-1: config 0 has no interface number 0 [ 238.610229][ T5777] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 238.630065][ T5777] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 238.650088][ T5777] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 238.665031][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.722077][ T5777] usb 1-1: config 0 descriptor?? [ 238.763691][ T5777] ttusbir 1-1:0.83: cannot find expected altsetting [ 238.911057][ T9910] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 238.918873][ T9910] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1879'. [ 238.950602][ T6331] usb 1-1: USB disconnect, device number 11 [ 239.077641][ T9900] loop1: detected capacity change from 0 to 32768 [ 239.203625][ T9900] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 239.203625][ T9900] [ 239.260971][ T9900] ERROR: (device loop1): remounting filesystem as read-only [ 239.627013][ T9924] loop2: detected capacity change from 0 to 1024 [ 239.709331][ T9928] loop1: detected capacity change from 0 to 256 [ 239.710805][ T9924] hfsplus: invalid file type 03755 for inode 20 [ 240.409605][ T9949] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 240.608449][ T9958] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1903'. [ 241.177901][ T9972] loop0: detected capacity change from 0 to 4096 [ 241.226797][ T9972] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 241.288340][ T9972] ntfs3: loop0: $AttrDef is corrupted. [ 241.759150][ T9997] loop3: detected capacity change from 0 to 1024 [ 241.880749][ T9997] hfsplus: xattr searching failed [ 241.945031][T10002] netlink: 'syz.2.1925': attribute type 32 has an invalid length. [ 242.146511][T10009] ipt_ECN: cannot use operation on non-tcp rule [ 242.606288][T10026] loop0: detected capacity change from 0 to 256 [ 243.465415][T10061] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 243.610490][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 243.655497][T10067] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1957'. [ 243.821310][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 243.838260][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.851747][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.894222][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.913821][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.934409][ T23] usb 1-1: Product: syz [ 243.948937][ T23] usb 1-1: Manufacturer: syz [ 243.958643][ T23] usb 1-1: SerialNumber: syz [ 244.445852][ T23] usb 1-1: cannot find UAC_HEADER [ 244.536476][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 244.557036][ T23] usb 1-1: USB disconnect, device number 12 [ 244.624885][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.689056][T10095] loop1: detected capacity change from 0 to 8192 [ 244.756480][T10095] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.828771][T10095] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 244.892787][T10095] REISERFS (device loop1): using ordered data mode [ 244.899377][T10095] reiserfs: using flush barriers [ 244.945920][T10095] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.020578][T10095] REISERFS (device loop1): checking transaction log (loop1) [ 245.313778][T10095] REISERFS (device loop1): Using tea hash to sort names [ 245.321978][T10095] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 245.455301][T10115] loop0: detected capacity change from 0 to 1024 [ 245.474652][T10115] EXT4-fs: inline encryption not supported [ 245.554787][T10115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.751428][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.844997][T10126] loop3: detected capacity change from 0 to 164 [ 245.907923][T10126] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 246.033493][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 246.076105][T10128] netlink: 440 bytes leftover after parsing attributes in process `syz.0.1982'. [ 246.156616][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 246.347504][T10138] --map-set only usable from mangle table [ 246.482286][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 246.695968][ T5884] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.732573][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.748215][ T5884] usb 2-1: Product: syz [ 246.760586][ T5884] usb 2-1: Manufacturer: syz [ 246.765639][ T5884] usb 2-1: SerialNumber: syz [ 246.787482][ T5884] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.837463][ T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 247.415431][ T5836] usb 2-1: USB disconnect, device number 7 [ 247.551542][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2007'. [ 247.665355][T10180] loop2: detected capacity change from 0 to 1764 [ 247.887348][ T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 247.903793][ T23] ath9k_htc: Failed to initialize the device [ 247.919245][T10188] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 247.931425][ T5836] usb 2-1: ath9k_htc: USB layer deinitialized [ 248.465772][T10207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2022'. [ 249.046852][T10195] loop3: detected capacity change from 0 to 32768 [ 249.143061][T10195] ea_get: invalid extended attribute [ 249.214887][T10231] loop2: detected capacity change from 0 to 64 [ 249.804256][T10250] loop2: detected capacity change from 0 to 1024 [ 250.177298][T10259] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 250.388621][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2048'. [ 250.431298][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2048'. [ 250.809852][T10254] loop0: detected capacity change from 0 to 32768 [ 250.864120][T10254] [ 250.864120][T10254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.864120][T10254] [ 250.945002][T10254] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 250.945002][T10254] [ 251.061153][ T1092] read_mapping_page failed! [ 251.066041][ T1092] ERROR: (device loop0): txCommit: [ 251.066041][ T1092] [ 251.080219][ T1092] jfs_write_inode: jfs_commit_inode failed! [ 251.086287][ T5770] [ 251.086287][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.086287][ T5770] [ 251.121538][ T5770] [ 251.121538][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.121538][ T5770] [ 252.139010][T10320] loop0: detected capacity change from 0 to 512 [ 252.226377][T10320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.317633][T10320] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.354206][T10311] loop2: detected capacity change from 0 to 32768 [ 252.385904][T10328] loop3: detected capacity change from 0 to 1024 [ 252.394106][T10311] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 252.394106][T10311] [ 252.422806][T10311] ERROR: (device loop2): remounting filesystem as read-only [ 252.430747][T10311] jfs_create: dtInsert returned -EIO [ 252.436434][T10311] ERROR: (device loop2): jfs_create: [ 252.436434][T10311] [ 252.612382][ T2987] hfsplus: b-tree write err: -5, ino 4 [ 252.633417][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.898065][T10338] No such timeout policy "syz1" [ 253.149532][T10347] CIFS mount error: No usable UNC path provided in device string! [ 253.149532][T10347] [ 253.185445][T10347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.356808][T10354] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 253.706802][T10362] loop1: detected capacity change from 0 to 4096 [ 253.721633][T10366] loop3: detected capacity change from 0 to 2048 [ 253.759815][T10367] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.863003][T10366] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 253.898729][T10366] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 253.937132][T10366] Remounting filesystem read-only [ 253.967808][T10366] NILFS (loop3): error -5 truncating bmap (ino=16) [ 254.111244][ T5774] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 254.148359][ T5774] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 254.179988][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.210029][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.280290][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.302736][ T5774] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 254.311887][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 254.331277][ T5774] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 254.338760][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.360023][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.379196][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.407560][ T5774] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 254.423523][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 254.424945][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.460046][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.479417][ T5774] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 254.499703][ T5774] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.518459][T10360] loop2: detected capacity change from 0 to 40427 [ 254.566699][T10360] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 254.576161][T10360] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 254.619208][T10360] F2FS-fs (loop2): build fault injection attr: rate: 18446, type: 0x7ffff [ 254.646118][T10360] F2FS-fs (loop2): invalid crc value [ 254.692810][T10360] F2FS-fs (loop2): Found nat_bits in checkpoint [ 254.793317][T10360] F2FS-fs (loop2): Start checkpoint disabled! [ 254.820061][T10360] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 254.830014][T10360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 255.029513][T10371] loop1: detected capacity change from 0 to 32768 [ 255.077853][T10371] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 255.201250][ T2975] kworker/u4:11: attempt to access beyond end of device [ 255.201250][ T2975] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 255.233685][ T2975] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 255.250126][ T2975] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 255.308693][ T5996] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 255.431868][T10389] loop1: detected capacity change from 0 to 1024 [ 255.551907][T10389] hfsplus: bad catalog entry used to create inode [ 255.676403][ T2975] hfsplus: b-tree write err: -5, ino 4 [ 256.125531][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.132111][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.235507][T10385] loop3: detected capacity change from 0 to 32768 [ 256.287226][T10385] [ 256.287226][T10385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.287226][T10385] [ 256.362455][T10385] read_mapping_page failed! [ 256.367057][T10385] ERROR: (device loop3): txCommit: [ 256.367057][T10385] [ 256.402620][T10385] ERROR: (device loop3): remounting filesystem as read-only [ 256.595015][T10412] netlink: 'syz.1.2116': attribute type 2 has an invalid length. [ 256.607092][T10412] netlink: 'syz.1.2116': attribute type 3 has an invalid length. [ 256.618264][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2116'. [ 257.093946][T10425] loop1: detected capacity change from 0 to 2048 [ 257.192477][T10425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.220573][T10425] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.527491][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.634199][T10448] loop0: detected capacity change from 0 to 64 [ 257.731319][T10448] syz.0.2134: attempt to access beyond end of device [ 257.731319][T10448] loop0: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 257.750348][T10448] Buffer I/O error on dev loop0, logical block 1295, async page read [ 257.791283][T10448] syz.0.2134: attempt to access beyond end of device [ 257.791283][T10448] loop0: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 257.839646][T10452] loop2: detected capacity change from 0 to 256 [ 257.848494][T10448] Buffer I/O error on dev loop0, logical block 1295, async page read [ 257.882619][ T28] audit: type=1800 audit(1770023616.912:62): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2134" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 257.914158][T10452] FAT-fs (loop2): Directory bread(block 64) failed [ 257.944447][T10452] FAT-fs (loop2): Directory bread(block 65) failed [ 257.973551][T10452] FAT-fs (loop2): Directory bread(block 66) failed [ 257.998652][T10452] FAT-fs (loop2): Directory bread(block 67) failed [ 258.030226][T10452] FAT-fs (loop2): Directory bread(block 68) failed [ 258.036846][T10452] FAT-fs (loop2): Directory bread(block 69) failed [ 258.083157][T10452] FAT-fs (loop2): Directory bread(block 70) failed [ 258.110045][T10452] FAT-fs (loop2): Directory bread(block 71) failed [ 258.116778][T10452] FAT-fs (loop2): Directory bread(block 72) failed [ 258.141864][T10452] FAT-fs (loop2): Directory bread(block 73) failed [ 258.158624][T10458] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2137'. [ 258.246908][T10460] loop0: detected capacity change from 0 to 512 [ 258.303649][T10460] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 258.326838][T10460] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.342619][T10462] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 258.524811][ T2975] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 258.568048][T10467] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 258.603041][T10467] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2142'. [ 258.684768][T10469] loop1: detected capacity change from 0 to 2048 [ 258.758255][T10474] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.870623][T10469] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 258.900828][T10469] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 258.925065][T10478] loop0: detected capacity change from 0 to 64 [ 258.940834][T10469] Remounting filesystem read-only [ 258.960125][T10469] NILFS (loop1): error -5 truncating bmap (ino=16) [ 259.089100][ T5772] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 259.108988][ T5772] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 259.130088][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.139136][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.173360][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.198212][ T5772] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 259.229371][ T5772] NILFS (loop1): discard dirty page: offset=0, ino=16 [ 259.247486][ T5772] NILFS (loop1): discard dirty block: blocknr=23, size=1024 [ 259.268681][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.280703][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.289803][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.322425][ T5772] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 259.329195][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.384142][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.394384][ T5772] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 259.403540][ T5772] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 259.750937][ T5777] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 259.890269][T10486] loop2: detected capacity change from 0 to 32768 [ 259.912689][T10486] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 259.952527][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 259.968258][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.003393][ T5777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 260.040435][ T5777] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.107805][ T5777] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.140006][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.148090][ T5777] usb 1-1: Product: syz [ 260.176948][ T5777] usb 1-1: Manufacturer: syz [ 260.185513][ T5996] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 260.200180][ T5777] usb 1-1: SerialNumber: syz [ 260.220688][ T5777] cdc_ncm 1-1:1.0: skipping garbage [ 260.225983][ T5777] cdc_ncm 1-1:1.0: skipping garbage [ 260.249999][ T5777] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 260.256902][ T5777] cdc_ncm 1-1:1.0: bind() failure [ 260.482348][ T5777] usb 1-1: USB disconnect, device number 13 [ 260.730624][T10522] loop2: detected capacity change from 0 to 512 [ 260.764011][T10522] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.2168: bad orphan inode 15 [ 260.783973][T10522] ext4_test_bit(bit=14, block=5) = 0 [ 260.830867][T10522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.063398][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.267849][T10535] @0Ù: renamed from dummy0 (while UP) [ 261.697142][T10525] loop3: detected capacity change from 0 to 32768 [ 261.757989][T10525] [ 261.757989][T10525] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.757989][T10525] [ 261.910045][ T5774] [ 261.910045][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.910045][ T5774] [ 261.945765][ T5774] [ 261.945765][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.945765][ T5774] [ 262.155657][ T28] audit: type=1326 audit(1770023621.182:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 262.182821][T10561] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.228450][ T28] audit: type=1326 audit(1770023621.212:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 262.250988][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.308005][ T28] audit: type=1326 audit(1770023621.252:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 262.400427][ T28] audit: type=1326 audit(1770023621.252:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 262.449765][ T28] audit: type=1326 audit(1770023621.252:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.3.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 262.698570][T10573] loop1: detected capacity change from 0 to 256 [ 262.852217][T10573] FAT-fs (loop1): Directory bread(block 64) failed [ 262.858938][T10573] FAT-fs (loop1): Directory bread(block 65) failed [ 262.879086][T10573] FAT-fs (loop1): Directory bread(block 66) failed [ 262.889010][T10573] FAT-fs (loop1): Directory bread(block 67) failed [ 262.899590][T10573] FAT-fs (loop1): Directory bread(block 68) failed [ 262.940170][T10573] FAT-fs (loop1): Directory bread(block 69) failed [ 262.950262][T10573] FAT-fs (loop1): Directory bread(block 70) failed [ 262.956876][T10573] FAT-fs (loop1): Directory bread(block 71) failed [ 263.011539][T10573] FAT-fs (loop1): Directory bread(block 72) failed [ 263.018581][T10573] FAT-fs (loop1): Directory bread(block 73) failed [ 263.542681][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'. [ 263.591544][T10599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.888499][T10613] netlink: 'syz.3.2211': attribute type 8 has an invalid length. [ 264.054359][T10618] loop1: detected capacity change from 0 to 256 [ 264.075207][T10620] loop0: detected capacity change from 0 to 256 [ 264.232636][T10620] FAT-fs (loop0): Directory bread(block 64) failed [ 264.251748][T10620] FAT-fs (loop0): Directory bread(block 65) failed [ 264.258503][T10620] FAT-fs (loop0): Directory bread(block 66) failed [ 264.278946][T10623] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 264.316033][T10620] FAT-fs (loop0): Directory bread(block 67) failed [ 264.320217][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'. [ 264.334419][T10620] FAT-fs (loop0): Directory bread(block 68) failed [ 264.359426][T10620] FAT-fs (loop0): Directory bread(block 69) failed [ 264.380694][T10620] FAT-fs (loop0): Directory bread(block 70) failed [ 264.387399][T10620] FAT-fs (loop0): Directory bread(block 71) failed [ 264.412692][T10620] FAT-fs (loop0): Directory bread(block 72) failed [ 264.419599][T10620] FAT-fs (loop0): Directory bread(block 73) failed [ 265.085757][T10649] loop0: detected capacity change from 0 to 256 [ 265.949799][T10679] loop3: detected capacity change from 0 to 256 [ 266.129012][T10684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2247'. [ 266.777872][T10710] loop2: detected capacity change from 0 to 256 [ 266.784744][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 267.009835][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2263'. [ 267.219503][T10720] loop1: detected capacity change from 0 to 164 [ 267.307226][T10720] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 267.447613][T10700] loop0: detected capacity change from 0 to 32768 [ 267.517928][T10727] loop3: detected capacity change from 0 to 256 [ 267.960248][ T28] audit: type=1326 audit(1770023626.982:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 268.032900][ T28] audit: type=1326 audit(1770023626.982:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 268.096426][T10741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2275'. [ 268.150131][ T28] audit: type=1326 audit(1770023627.012:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 268.211178][ T28] audit: type=1326 audit(1770023627.012:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.1.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 268.531700][T10756] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 268.746378][T10762] loop1: detected capacity change from 0 to 512 [ 268.757354][T10764] overlayfs: unescaped trailing colons in lowerdir mount option. [ 268.828013][T10762] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.2286: bad orphan inode 15 [ 268.843175][T10762] ext4_test_bit(bit=14, block=5) = 0 [ 268.864226][T10762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.163726][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.367086][T10783] netlink: 'syz.0.2294': attribute type 16 has an invalid length. [ 269.701030][ T6332] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.883061][ T6332] usb 4-1: Using ep0 maxpacket: 32 [ 269.891957][ T6332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.903735][ T6332] usb 4-1: config 129 has an invalid interface number: 249 but max is 0 [ 269.912233][ T6332] usb 4-1: config 129 has no interface number 0 [ 269.918629][ T6332] usb 4-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 269.929293][ T6332] usb 4-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 269.939705][ T6332] usb 4-1: config 129 interface 249 has no altsetting 0 [ 269.949792][ T6332] usb 4-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 269.959128][ T6332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.967790][ T6332] usb 4-1: Product: syz [ 269.972243][ T6332] usb 4-1: Manufacturer: syz [ 269.976895][ T6332] usb 4-1: SerialNumber: syz [ 269.985071][T10786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 270.211789][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.221121][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.239493][ T6332] smsc95xx v2.0.0 [ 270.244874][ T6332] smsc95xx 4-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 270.256969][ T6332] smsc95xx: probe of 4-1:129.249 failed with error -71 [ 270.269491][ T6332] usb 4-1: USB disconnect, device number 9 [ 270.864649][T10797] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2309'. [ 271.077586][T10803] loop3: detected capacity change from 0 to 512 [ 271.124440][T10803] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.2302: bad orphan inode 15 [ 271.143739][T10803] ext4_test_bit(bit=14, block=5) = 0 [ 271.151657][T10809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2312'. [ 271.186584][T10803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.344478][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.771144][T10825] netlink: 'syz.2.2308': attribute type 16 has an invalid length. [ 271.990304][T10833] loop3: detected capacity change from 0 to 512 [ 272.048966][T10833] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.2317: bad orphan inode 15 [ 272.078865][T10833] ext4_test_bit(bit=14, block=5) = 0 [ 272.086711][T10833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.248609][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.335682][T10840] loop0: detected capacity change from 0 to 1024 [ 272.562894][ T12] hfsplus: b-tree write err: -5, ino 4 [ 273.478508][T10876] loop1: detected capacity change from 0 to 1024 [ 273.833480][ T12] hfsplus: b-tree write err: -5, ino 4 [ 273.991582][ T28] audit: type=1326 audit(1770023633.022:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 274.051943][ T28] audit: type=1326 audit(1770023633.022:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 274.120779][ T28] audit: type=1326 audit(1770023633.022:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 274.187886][ T28] audit: type=1326 audit(1770023633.042:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbf8d9ac22 code=0x7ffc0000 [ 274.277320][ T28] audit: type=1326 audit(1770023633.042:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbf8d9ac22 code=0x7ffc0000 [ 274.320524][ T28] audit: type=1326 audit(1770023633.042:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 274.343369][ T28] audit: type=1326 audit(1770023633.052:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10884 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 274.487701][T10901] loop3: detected capacity change from 0 to 64 [ 274.938286][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 275.453495][T10929] loop3: detected capacity change from 0 to 512 [ 275.482836][T10929] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 275.491876][T10929] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 275.502216][T10929] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.2354: bad orphan inode 13 [ 275.535927][T10929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.720933][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.746299][T10937] loop1: detected capacity change from 0 to 512 [ 275.794654][T10937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 275.846223][T10937] EXT4-fs (loop1): orphan cleanup on readonly fs [ 275.885864][T10937] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.2368: Block bitmap for bg 0 marked uninitialized [ 275.926741][T10937] EXT4-fs (loop1): Remounting filesystem read-only [ 275.934179][T10937] EXT4-fs (loop1): 1 orphan inode deleted [ 275.942055][T10937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 276.027301][T10937] loop1: Can't mount, would change RO state [ 276.067554][T10942] bridge4: entered promiscuous mode [ 276.191601][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.845399][T10967] loop3: detected capacity change from 0 to 512 [ 276.867741][T10967] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 276.879555][T10969] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 276.904477][T10969] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 276.906389][T10967] EXT4-fs (loop3): orphan cleanup on readonly fs [ 276.940397][T10967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2375: Block bitmap for bg 0 marked uninitialized [ 276.954636][T10967] EXT4-fs (loop3): Remounting filesystem read-only [ 276.961461][T10967] EXT4-fs (loop3): 1 orphan inode deleted [ 276.969051][T10967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 277.088187][T10967] loop3: Can't mount, would change RO state [ 277.151558][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.170426][T10976] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 277.211268][T10976] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 277.361995][T10978] loop3: detected capacity change from 0 to 512 [ 277.386350][T10978] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 277.434040][T10978] EXT4-fs (loop3): orphan cleanup on readonly fs [ 277.451442][T10978] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.2378: Block bitmap for bg 0 marked uninitialized [ 277.483375][T10978] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 277.497593][T10978] EXT4-fs (loop3): 1 orphan inode deleted [ 277.523226][T10978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 277.590311][T10978] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 277.621445][T10978] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 277.752710][T10963] loop2: detected capacity change from 0 to 40427 [ 277.814000][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.838850][T10963] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 277.865616][T10963] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 277.875051][T10963] F2FS-fs (loop2): heap/no_heap options were deprecated [ 277.928977][T10963] F2FS-fs (loop2): invalid crc value [ 277.959177][T10963] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.122294][T10963] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 278.139767][T10963] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.349770][ T5771] syz-executor: attempt to access beyond end of device [ 278.349770][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.383193][ T5771] F2FS-fs (loop2): Remounting filesystem read-only [ 278.610318][ T5836] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.801027][T11014] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2394'. [ 278.814429][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 278.835554][ T5836] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 278.857120][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.880767][ T5836] usb 1-1: Product: syz [ 278.885045][ T5836] usb 1-1: Manufacturer: syz [ 278.889779][ T5836] usb 1-1: SerialNumber: syz [ 278.951787][ T5836] usb 1-1: config 0 descriptor?? [ 278.995164][T11016] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 279.199611][ T5836] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 279.226241][T11020] bridge3: entered promiscuous mode [ 279.357847][T11024] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.2400'. [ 279.409812][ T5836] usb write operation failed. (-71) [ 279.445967][ T5836] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.479238][ T5836] dvbdev: DVB: registering new adapter (Terratec H7) [ 279.500117][ T5836] usb 1-1: media controller created [ 279.511581][ T5836] usb read operation failed. (-71) [ 279.530068][ T5836] usb write operation failed. (-71) [ 279.552692][ T5836] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 279.574689][ T5836] usb 1-1: USB disconnect, device number 14 [ 279.701250][T11034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2403'. [ 279.722026][T11034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2403'. [ 279.731813][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2403'. [ 279.851810][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 279.864595][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 279.877215][T11038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2412'. [ 279.894293][T11040] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2404'. [ 280.199791][T11051] bridge4: entered promiscuous mode [ 280.508618][T11062] i2c i2c-0: Invalid block write size 252 [ 280.761384][T11074] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 280.871174][T11079] bridge5: entered promiscuous mode [ 281.077185][T11087] loop1: detected capacity change from 0 to 64 [ 281.122245][T11087] Trying to free block not in datazone [ 281.160533][T11087] Trying to free block not in datazone [ 281.180047][T11087] Trying to free block not in datazone [ 281.185603][T11087] Trying to free block not in datazone [ 281.206085][T11087] minix_free_block (loop1:6): bit already cleared [ 281.220746][T11090] i2c i2c-0: Invalid block write size 252 [ 281.222053][T11087] Trying to free block not in datazone [ 281.239156][T11087] Trying to free block not in datazone [ 281.464107][T11093] loop2: detected capacity change from 0 to 4096 [ 281.475051][T11097] loop1: detected capacity change from 0 to 1024 [ 281.485583][T11093] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 281.513358][T11097] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.534817][T11097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 281.567527][T11097] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.2431: bad orphan inode 11 [ 281.616973][T11097] ext4_test_bit(bit=10, block=4) = 1 [ 281.623871][T11097] is_bad_inode(inode)=0 [ 281.628106][T11097] NEXT_ORPHAN(inode)=3254779904 [ 281.634718][T11097] max_ino=32 [ 281.638818][T11097] i_nlink=0 [ 281.730877][T11097] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.2431: lblock 2 mapped to illegal pblock 2 (length 1) [ 281.783684][T11097] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 281.811029][T11097] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.2431: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.878219][T11097] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 281.896881][T11097] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2431: Failed to acquire dquot type 0 [ 281.926647][T11097] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 281.960589][T11097] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.2431: mark_inode_dirty error [ 282.011501][T11097] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 282.059826][T11097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.191018][ T2975] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm kworker/u4:11: lblock 2 mapped to illegal pblock 2 (length 1) [ 282.244759][ T2975] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 282.253396][ T2975] EXT4-fs error (device loop1): ext4_write_dquot:6929: comm kworker/u4:11: Failed to commit dquot type 0 [ 282.286926][ T2975] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 282.327815][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.359533][ T5772] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 282.391923][ T5772] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 282.421670][ T5772] EXT4-fs error (device loop1): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 282.496398][T11118] loop2: detected capacity change from 0 to 64 [ 282.510220][T11119] comedi comedi3: dt2817: I/O port conflict (0x4,5) [ 282.581478][T11118] Trying to free block not in datazone [ 282.587046][T11118] Trying to free block not in datazone [ 282.599622][T11118] Trying to free block not in datazone [ 282.605391][T11118] Trying to free block not in datazone [ 282.611780][T11118] minix_free_block (loop2:6): bit already cleared [ 282.618280][T11118] Trying to free block not in datazone [ 282.624627][T11118] Trying to free block not in datazone [ 282.786594][T11126] loop3: detected capacity change from 0 to 128 [ 283.170942][T11140] loop3: detected capacity change from 0 to 1024 [ 283.179379][T11140] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.187373][T11140] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.200297][T11140] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.2452: bad orphan inode 11 [ 283.210786][T11140] ext4_test_bit(bit=10, block=4) = 1 [ 283.216141][T11140] is_bad_inode(inode)=0 [ 283.221152][T11140] NEXT_ORPHAN(inode)=3254779904 [ 283.226072][T11140] max_ino=32 [ 283.229315][T11140] i_nlink=0 [ 283.268403][T11140] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.2452: lblock 2 mapped to illegal pblock 2 (length 1) [ 283.400382][T11140] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 283.421432][T11140] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.2452: lblock 0 mapped to illegal pblock 48 (length 1) [ 283.462015][T11140] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 283.480254][T11140] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.2452: Failed to acquire dquot type 0 [ 283.530073][T11140] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 283.545575][T11145] loop2: detected capacity change from 0 to 4096 [ 283.559399][T11140] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.2452: mark_inode_dirty error [ 283.593068][T11140] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 283.633001][T11140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.748531][ T2960] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm kworker/u4:10: lblock 2 mapped to illegal pblock 2 (length 1) [ 283.842190][ T2960] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 283.875852][ T2960] EXT4-fs error (device loop3): ext4_write_dquot:6929: comm kworker/u4:10: Failed to commit dquot type 0 [ 283.921362][ T2960] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 283.968870][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.001287][ T5774] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 284.036567][ T5774] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 284.066795][ T5774] EXT4-fs error (device loop3): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 284.292218][T11138] loop0: detected capacity change from 0 to 32768 [ 284.336665][T11138] [ 284.336665][T11138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.336665][T11138] [ 284.391439][T11138] read_mapping_page failed! [ 284.396055][T11138] ERROR: (device loop0): txCommit: [ 284.396055][T11138] [ 284.450333][T11138] ERROR: (device loop0): remounting filesystem as read-only [ 284.534058][T11157] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 284.544010][T11156] comedi comedi3: dt2817: I/O port conflict (0x4,5) [ 285.058893][T11168] loop0: detected capacity change from 0 to 4096 [ 285.143825][T11168] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 285.190819][T11168] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 285.213395][T11168] ntfs: volume version 3.1. [ 285.537827][T11178] loop0: detected capacity change from 0 to 1024 [ 285.563865][T11178] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.594125][T11178] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 285.625977][T11178] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.2465: bad orphan inode 11 [ 285.653805][T11178] ext4_test_bit(bit=10, block=4) = 1 [ 285.680227][T11178] is_bad_inode(inode)=0 [ 285.684474][T11178] NEXT_ORPHAN(inode)=3254779904 [ 285.689374][T11178] max_ino=32 [ 285.692916][T11178] i_nlink=0 [ 285.714368][T11178] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.2465: lblock 2 mapped to illegal pblock 2 (length 1) [ 285.739030][T11178] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.2465: lblock 0 mapped to illegal pblock 48 (length 1) [ 285.753718][T11178] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2465: Failed to acquire dquot type 0 [ 285.765608][T11178] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 285.778618][T11178] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.2465: mark_inode_dirty error [ 285.793221][T11178] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 285.842218][T11178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.929856][ T12] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm kworker/u4:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 286.000339][ T12] EXT4-fs error (device loop0): ext4_write_dquot:6929: comm kworker/u4:1: Failed to commit dquot type 0 [ 286.048322][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.094092][ T5770] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 286.123803][ T5770] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 286.150563][ T5770] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 286.425135][T11199] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2471'. [ 286.546026][T11195] loop0: detected capacity change from 0 to 4096 [ 287.061903][T11215] netlink: 'syz.1.2490': attribute type 21 has an invalid length. [ 287.486026][T11231] loop0: detected capacity change from 0 to 2048 [ 287.536719][T11232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.644353][T11231] syz.0.2488: attempt to access beyond end of device [ 287.644353][T11231] loop0: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048 [ 287.700378][T11231] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 287.840667][T11232] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 287.863755][T11232] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 287.901061][T11232] Remounting filesystem read-only [ 287.919606][ T2960] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 287.928608][ T2960] NILFS (loop0): discard dirty block: blocknr=1099511627811, size=1024 [ 287.937292][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 287.947115][ T2960] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 287.980116][ T2960] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 288.004294][ T2960] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 288.021460][ T2960] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 288.028854][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.060022][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.079440][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.094094][ T2960] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 288.108601][ T2960] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 288.171171][ T2960] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 288.198548][ T2960] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 288.207866][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.217007][ T2960] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 288.224401][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.237941][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.247172][ T2960] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 288.260068][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.269148][ T2960] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 288.278638][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.292855][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.304486][ T2960] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 288.315319][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.325756][ T2960] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 288.337502][ T2960] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 288.346565][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.362211][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.375045][ T2960] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.387205][ T5770] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 288.398601][ T5770] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 288.408649][ T5770] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 288.446788][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.457547][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.472224][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.485355][ T5770] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 288.496240][ T5770] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 288.507568][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.516895][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 288.531747][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.544584][ T5770] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.711798][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 288.724189][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.737772][ T8] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 288.747464][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.756318][ T8] usb 3-1: Product: syz [ 288.762314][ T8] usb 3-1: Manufacturer: syz [ 288.767077][ T8] usb 3-1: SerialNumber: syz [ 288.774952][ T8] usb 3-1: config 0 descriptor?? [ 288.811979][ T8] usb 3-1: bad CDC descriptors [ 288.817376][ T8] usb 3-1: unsupported MDLM descriptors [ 288.863504][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 288.863520][ T28] audit: type=1326 audit(1770023647.892:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.1.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 288.931058][ T28] audit: type=1326 audit(1770023647.922:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.1.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 289.011445][ T28] audit: type=1326 audit(1770023647.932:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.1.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 289.102378][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 289.111604][ T28] audit: type=1326 audit(1770023647.932:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.1.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 289.111667][ T28] audit: type=1326 audit(1770023647.932:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.1.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 289.125849][ T6332] usb 3-1: USB disconnect, device number 9 [ 289.524158][T11279] @0Ù: renamed from dummy0 (while UP) [ 290.044029][T11302] x_tables: duplicate underflow at hook 3 [ 290.193547][T11307] loop0: detected capacity change from 0 to 256 [ 290.208532][T11309] @0Ù: renamed from dummy0 (while UP) [ 290.258983][T11307] FAT-fs (loop0): Directory bread(block 64) failed [ 290.285660][T11307] FAT-fs (loop0): Directory bread(block 65) failed [ 290.297130][T11307] FAT-fs (loop0): Directory bread(block 66) failed [ 290.340891][T11307] FAT-fs (loop0): Directory bread(block 67) failed [ 290.348100][T11307] FAT-fs (loop0): Directory bread(block 68) failed [ 290.390176][T11307] FAT-fs (loop0): Directory bread(block 69) failed [ 290.410223][T11307] FAT-fs (loop0): Directory bread(block 70) failed [ 290.440324][T11307] FAT-fs (loop0): Directory bread(block 71) failed [ 290.460154][T11307] FAT-fs (loop0): Directory bread(block 72) failed [ 290.470070][T11307] FAT-fs (loop0): Directory bread(block 73) failed [ 290.603689][T11319] C: renamed from team_slave_0 [ 290.621436][T11319] netlink: 'syz.3.2529': attribute type 1 has an invalid length. [ 290.632699][T11319] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2529'. [ 290.650037][T11319] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.667650][T11318] netlink: 'syz.1.2540': attribute type 10 has an invalid length. [ 290.824909][T11324] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 291.186292][T11331] loop2: detected capacity change from 0 to 4096 [ 291.629706][T11342] loop2: detected capacity change from 0 to 1024 [ 291.668143][T11342] EXT4-fs: inline encryption not supported [ 291.691395][T11342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.691401][T11345] netlink: 'syz.0.2543': attribute type 10 has an invalid length. [ 291.771610][T11342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.867355][T11333] loop1: detected capacity change from 0 to 32768 [ 291.996269][T11333] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 292.079256][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.097528][T11333] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 292.121092][ T28] audit: type=1326 audit(1770023651.142:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 292.194286][ T28] audit: type=1326 audit(1770023651.142:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 292.221833][T11333] (syz.1.2547,11333,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 292.241347][T11333] (syz.1.2547,11333,0):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 292.297205][ T28] audit: type=1326 audit(1770023651.152:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 292.397150][ T28] audit: type=1326 audit(1770023651.152:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 292.449313][ T28] audit: type=1326 audit(1770023651.152:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.3.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 292.560383][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 292.677907][T11369] C: renamed from team_slave_0 [ 292.727049][T11369] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 292.751188][T11369] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2555'. [ 292.780189][T11369] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 292.881072][T11374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.093997][T11382] loop2: detected capacity change from 0 to 64 [ 293.129306][T11380] loop0: detected capacity change from 0 to 1024 [ 293.161890][T11380] EXT4-fs: inline encryption not supported [ 293.200149][T11380] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.282280][T11380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.361508][T11383] loop1: detected capacity change from 0 to 4096 [ 293.508820][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.739147][T11396] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 293.761591][T11396] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2565'. [ 293.995872][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 294.200300][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 294.212733][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 294.250033][ T23] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 294.281818][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.308889][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.332491][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.352745][ T23] usb 3-1: Product: syz [ 294.356989][ T23] usb 3-1: Manufacturer: syz [ 294.383369][ T23] usb 3-1: SerialNumber: syz [ 294.847220][ T23] usb 3-1: 0:2 : does not exist [ 294.912466][ T23] usb 3-1: USB disconnect, device number 10 [ 295.004869][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.800715][T11453] netlink: 'syz.1.2592': attribute type 3 has an invalid length. [ 295.819246][T11453] netlink: 'syz.1.2592': attribute type 27 has an invalid length. [ 296.558752][T11448] loop0: detected capacity change from 0 to 32768 [ 296.637482][T11448] ERROR: (device loop0): diAllocBit: iag inconsistent [ 296.637482][T11448] [ 296.663575][T11448] ERROR: (device loop0): remounting filesystem as read-only [ 296.682102][T11448] ialloc: diAlloc returned -5! [ 296.818683][T11485] netlink: 'syz.2.2609': attribute type 5 has an invalid length. [ 297.190088][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 297.382832][ T23] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 297.398713][ T23] usb 3-1: config 0 has no interface number 0 [ 297.417724][ T23] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 297.449560][ T23] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 297.471575][ T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 297.481702][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.500677][ T6332] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 297.504903][ T23] usb 3-1: config 0 descriptor?? [ 297.524718][ T23] ttusbir 3-1:0.83: cannot find expected altsetting [ 297.698928][T11515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2624'. [ 297.714711][ T6332] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 297.728074][ T6332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.760209][ T6332] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.764754][ T23] usb 3-1: USB disconnect, device number 11 [ 297.769345][ T6332] usb 4-1: config 1 has no interface number 1 [ 297.810267][ T6332] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.859989][ T6332] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.913081][ T6332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.925911][ T6332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.937726][ T6332] usb 4-1: Product: syz [ 297.944229][ T6332] usb 4-1: Manufacturer: syz [ 297.969963][ T6332] usb 4-1: SerialNumber: syz [ 298.203846][ T6332] usb 4-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 298.214083][ T6332] usb 4-1: MIDIStreaming interface descriptor not found [ 298.285223][ T6332] usb 4-1: USB disconnect, device number 10 [ 298.377146][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.618883][T11536] netlink: 'syz.2.2633': attribute type 3 has an invalid length. [ 298.630167][T11536] netlink: 'syz.2.2633': attribute type 27 has an invalid length. [ 299.038247][T11525] loop0: detected capacity change from 0 to 32768 [ 299.129024][T11525] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 299.129024][T11525] [ 299.180248][T11525] ERROR: (device loop0): remounting filesystem as read-only [ 299.373806][T11554] netlink: 'syz.1.2643': attribute type 5 has an invalid length. [ 299.513946][T11557] loop2: detected capacity change from 0 to 256 [ 299.692401][T11557] FAT-fs (loop2): Directory bread(block 64) failed [ 299.699040][T11557] FAT-fs (loop2): Directory bread(block 65) failed [ 299.758383][T11563] loop3: detected capacity change from 0 to 256 [ 299.766751][T11557] FAT-fs (loop2): Directory bread(block 66) failed [ 299.788534][T11557] FAT-fs (loop2): Directory bread(block 67) failed [ 299.805384][T11557] FAT-fs (loop2): Directory bread(block 68) failed [ 299.823783][T11557] FAT-fs (loop2): Directory bread(block 69) failed [ 299.841467][T11557] FAT-fs (loop2): Directory bread(block 70) failed [ 299.858454][T11557] FAT-fs (loop2): Directory bread(block 71) failed [ 299.877910][T11557] FAT-fs (loop2): Directory bread(block 72) failed [ 299.917864][T11557] FAT-fs (loop2): Directory bread(block 73) failed [ 300.101633][T11557] syz.2.2645: attempt to access beyond end of device [ 300.101633][T11557] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 300.372375][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 300.904124][T11572] loop3: detected capacity change from 0 to 32768 [ 300.950493][T11572] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 300.969576][T11590] netlink: 'syz.2.2661': attribute type 8 has an invalid length. [ 301.041433][T11572] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 301.103227][T11572] (syz.3.2653,11572,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 301.124469][T11572] (syz.3.2653,11572,0):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 301.200846][T11600] xt_hashlimit: size too large, truncated to 1048576 [ 301.332039][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 301.753879][T11615] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2673'. [ 302.095372][T11630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2688'. [ 302.354170][T11638] loop0: detected capacity change from 0 to 256 [ 302.378280][T11642] loop1: detected capacity change from 0 to 256 [ 302.652889][T11638] FAT-fs (loop0): Directory bread(block 64) failed [ 302.659639][T11638] FAT-fs (loop0): Directory bread(block 65) failed [ 302.710310][T11638] FAT-fs (loop0): Directory bread(block 66) failed [ 302.720238][T11638] FAT-fs (loop0): Directory bread(block 67) failed [ 302.726767][T11648] loop3: detected capacity change from 0 to 512 [ 302.727232][T11638] FAT-fs (loop0): Directory bread(block 68) failed [ 302.770746][T11638] FAT-fs (loop0): Directory bread(block 69) failed [ 302.777488][T11638] FAT-fs (loop0): Directory bread(block 70) failed [ 302.800104][T11638] FAT-fs (loop0): Directory bread(block 71) failed [ 302.806879][T11638] FAT-fs (loop0): Directory bread(block 72) failed [ 302.834266][T11638] FAT-fs (loop0): Directory bread(block 73) failed [ 303.029191][T11654] netlink: 'syz.2.2691': attribute type 1 has an invalid length. [ 303.037805][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'. [ 303.066695][T11638] syz.0.2683: attempt to access beyond end of device [ 303.066695][T11638] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 303.680033][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 303.871491][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 303.879000][ T27] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 303.887621][ T27] usb 2-1: config 0 has no interface number 0 [ 303.893926][ T27] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 303.903934][ T27] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 303.914119][ T27] usb 2-1: config 0 interface 41 has no altsetting 0 [ 303.926809][ T27] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 303.936424][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.944667][ T27] usb 2-1: Product: syz [ 303.948978][ T27] usb 2-1: Manufacturer: syz [ 303.953856][ T27] usb 2-1: SerialNumber: syz [ 303.962909][ T27] usb 2-1: config 0 descriptor?? [ 303.974050][T11668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.981681][T11668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.002444][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 304.195830][T11668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.204420][T11668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.213952][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.223560][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.232096][ T8] usb 4-1: Product: syz [ 304.236715][ T8] usb 4-1: Manufacturer: syz [ 304.241481][ T8] usb 4-1: SerialNumber: syz [ 304.256538][ T8] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.284339][ T6332] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.432526][ T27] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 304.447633][ T27] CoreChips: probe of 2-1:0.41 failed with error -71 [ 304.459651][ T27] usb 2-1: USB disconnect, device number 8 [ 304.712680][ T27] usb 4-1: USB disconnect, device number 11 [ 305.017391][T11683] loop1: detected capacity change from 0 to 256 [ 305.077779][T11683] FAT-fs (loop1): Directory bread(block 64) failed [ 305.102073][T11683] FAT-fs (loop1): Directory bread(block 65) failed [ 305.108806][T11683] FAT-fs (loop1): Directory bread(block 66) failed [ 305.134299][T11683] FAT-fs (loop1): Directory bread(block 67) failed [ 305.151701][T11683] FAT-fs (loop1): Directory bread(block 68) failed [ 305.158344][T11683] FAT-fs (loop1): Directory bread(block 69) failed [ 305.207374][T11683] FAT-fs (loop1): Directory bread(block 70) failed [ 305.226657][T11683] FAT-fs (loop1): Directory bread(block 71) failed [ 305.254895][T11683] FAT-fs (loop1): Directory bread(block 72) failed [ 305.267434][T11683] FAT-fs (loop1): Directory bread(block 73) failed [ 305.330064][ T6332] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 305.360165][ T6332] ath9k_htc: Failed to initialize the device [ 305.401269][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 305.490129][T11683] syz.1.2706: attempt to access beyond end of device [ 305.490129][T11683] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 305.522209][T11696] loop0: detected capacity change from 0 to 256 [ 305.652568][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 305.808753][T11703] loop0: detected capacity change from 0 to 256 [ 306.240178][T11718] netlink: 'syz.2.2724': attribute type 17 has an invalid length. [ 306.264502][T11718] netlink: 'syz.2.2724': attribute type 16 has an invalid length. [ 306.302485][T11718] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2724'. [ 306.316090][T11720] loop0: detected capacity change from 0 to 8 [ 306.376774][T11720] SQUASHFS error: lzo decompression failed, data probably corrupt [ 306.410085][T11720] SQUASHFS error: Failed to read block 0x1dd: -5 [ 306.416916][T11720] SQUASHFS error: Unable to read metadata cache entry [1db] [ 306.431754][T11720] SQUASHFS error: Unable to read inode 0xa7 [ 306.852875][T11730] loop3: detected capacity change from 0 to 4096 [ 306.885219][T11730] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 307.033735][T11730] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 307.049423][T11730] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 307.146810][T11744] loop2: detected capacity change from 0 to 2048 [ 307.251612][T11744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.274714][T11744] ext4 filesystem being mounted at /684/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.303284][ T2975] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 307.332101][ T5774] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 307.342926][ T5774] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 307.350876][ T5774] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 307.359013][T11744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2737: bg 0: block 345: padding at end of block bitmap is not set [ 307.381144][ T34] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 307.557321][T11755] loop1: detected capacity change from 0 to 128 [ 307.617626][T11755] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.641062][T11755] ext4 filesystem being mounted at /698/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.681661][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.774084][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.860519][T11759] loop2: detected capacity change from 0 to 4096 [ 307.950046][T11761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.472047][T11779] loop0: detected capacity change from 0 to 128 [ 308.525711][T11779] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.608157][T11779] ext4 filesystem being mounted at /655/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.647529][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 308.701474][T11786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2752'. [ 308.780788][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.368249][T11806] loop1: detected capacity change from 0 to 4096 [ 309.423479][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 309.453969][T11815] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.483726][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2768'. [ 310.553827][T11847] netlink: 'syz.3.2786': attribute type 5 has an invalid length. [ 310.687705][T11826] loop1: detected capacity change from 0 to 32768 [ 310.741937][T11853] sctp: [Deprecated]: syz.2.2788 (pid 11853) Use of int in max_burst socket option. [ 310.741937][T11853] Use struct sctp_assoc_value instead [ 310.811900][T11826] ialloc: diAlloc returned -17! [ 310.859613][T11857] loop3: detected capacity change from 0 to 8 [ 310.947873][T11857] SQUASHFS error: lzo decompression failed, data probably corrupt [ 310.968937][T11857] SQUASHFS error: Failed to read block 0x1dd: -5 [ 311.022175][T11857] SQUASHFS error: Unable to read metadata cache entry [1db] [ 311.050143][T11857] SQUASHFS error: Unable to read inode 0xa7 [ 311.171593][T11861] process 'syz.1.2792' launched './file0' with NULL argv: empty string added [ 311.800222][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 312.010088][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 312.017814][ T8] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 312.033231][ T8] usb 3-1: config 0 has no interface number 0 [ 312.060065][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 312.088763][ T8] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 312.100881][ T8] usb 3-1: config 0 interface 41 has no altsetting 0 [ 312.119114][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 312.137535][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.154317][ T8] usb 3-1: Product: syz [ 312.159411][ T8] usb 3-1: Manufacturer: syz [ 312.165087][ T8] usb 3-1: SerialNumber: syz [ 312.180109][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 312.183834][ T8] usb 3-1: config 0 descriptor?? [ 312.203587][T11875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 312.211960][T11875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 312.364672][T11903] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 312.390207][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 312.397631][ T5884] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 312.407478][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.432564][ T5884] usb 1-1: config 0 descriptor?? [ 312.447893][ T5884] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 312.477063][T11875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 312.500373][T11875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 312.652119][ T5884] usb 1-1: Detected FT232B [ 312.737296][ T8] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 312.770325][ T8] CoreChips: probe of 3-1:0.41 failed with error -71 [ 312.808809][ T8] usb 3-1: USB disconnect, device number 12 [ 312.855983][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 312.883657][ T5884] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 312.907485][ T5884] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 312.940426][ T5884] usb 1-1: USB disconnect, device number 15 [ 312.968814][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 312.990641][ T5884] ftdi_sio 1-1:0.0: device disconnected [ 313.045227][T11901] loop1: detected capacity change from 0 to 32768 [ 313.096105][T11901] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 313.176898][T11901] XFS (loop1): Ending clean mount [ 313.196670][T11901] XFS (loop1): Quotacheck needed: Please wait. [ 313.257447][T11901] XFS (loop1): Quotacheck: Done. [ 313.414239][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 313.850380][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 314.073753][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 314.098182][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.110831][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.119017][ T27] usb 1-1: Product: syz [ 314.124975][ T27] usb 1-1: Manufacturer: syz [ 314.129736][ T27] usb 1-1: SerialNumber: syz [ 314.147332][ T27] usb 1-1: config 0 descriptor?? [ 314.188155][ T27] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 314.195723][ T5884] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 314.237726][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.355042][T11926] loop2: detected capacity change from 0 to 32768 [ 314.389016][ T5777] usb 1-1: USB disconnect, device number 16 [ 314.400175][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 314.413649][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 314.423585][T11926] XFS (loop2): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 314.446853][ T5884] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 314.461008][ T5884] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 314.474388][ T5884] usb 4-1: Product: syz [ 314.479489][ T5884] usb 4-1: Manufacturer: syz [ 314.489308][ T5884] usb 4-1: SerialNumber: syz [ 314.494353][T11926] XFS (loop2): ro->rw transition prohibited on norecovery mount [ 314.540044][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 314.803848][ T5884] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 314.849849][ T5884] usb 4-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 314.857923][ T5884] usb 4-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 314.900020][ T5884] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 315.018952][ T5884] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 315.050156][ T5884] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 315.066229][ T5884] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 315.118269][ T5884] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 315.190491][ T5884] usb 4-1: USB disconnect, device number 12 [ 315.223360][ T5884] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 315.301200][ T5884] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 315.326776][ T5884] visor 4-1:1.0: device disconnected [ 315.337476][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2830'. [ 315.645482][T11949] loop2: detected capacity change from 0 to 32768 [ 315.695775][T11949] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.971525][T11949] XFS (loop2): Ending clean mount [ 315.999179][T11949] XFS (loop2): Quotacheck needed: Please wait. [ 316.009204][T11979] loop0: detected capacity change from 0 to 512 [ 316.042754][T11979] EXT4-fs: Ignoring removed orlov option [ 316.080022][T11979] EXT4-fs: Ignoring removed nobh option [ 316.107802][T11979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.136468][T11949] XFS (loop2): Quotacheck: Done. [ 316.172996][T11967] loop1: detected capacity change from 0 to 32768 [ 316.273524][T11967] jfs_strtoUCS: char2uni returned -22. [ 316.290352][T11979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2837: bg 0: block 248: padding at end of block bitmap is not set [ 316.306331][T11967] charset = cp932, char = 0xfc [ 316.320524][T11979] Quota error (device loop0): write_blk: dquota write failed [ 316.328102][T11979] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 316.359152][T11979] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2837: Failed to acquire dquot type 1 [ 316.386290][T11979] EXT4-fs (loop0): 1 truncate cleaned up [ 316.407106][T11979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.450281][T11979] ext4 filesystem being mounted at /676/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.543612][T11979] EXT4-fs: Ignoring removed orlov option [ 316.549363][T11979] EXT4-fs: Ignoring removed nobh option [ 316.586005][T11979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.665340][T11979] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.2837: Abort forced by user [ 316.700938][T11979] EXT4-fs (loop0): Remounting filesystem read-only [ 316.707584][T11979] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 316.855037][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.250537][T11989] loop3: detected capacity change from 0 to 32768 [ 317.443250][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.561025][T12013] loop3: detected capacity change from 0 to 64 [ 317.570590][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.580696][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.773190][T12015] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 318.013408][T12021] loop0: detected capacity change from 0 to 128 [ 318.097167][T12021] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 318.118247][T12021] FAT-fs (loop0): Filesystem has been set read-only [ 318.232959][ T5770] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 318.531875][T12035] loop1: detected capacity change from 0 to 16 [ 318.539365][T12035] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 319.030287][ T28] audit: type=1326 audit(1770023678.052:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 319.110404][ T28] audit: type=1326 audit(1770023678.052:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 319.177186][ T28] audit: type=1326 audit(1770023678.062:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 319.246429][ T28] audit: type=1326 audit(1770023678.062:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 319.311176][ T28] audit: type=1326 audit(1770023678.082:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.1.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbf8d9aeb9 code=0x7ffc0000 [ 319.370635][T12063] Sensor A: ================= START STATUS ================= [ 319.378644][T12063] Sensor A: Test Pattern: 75% Colorbar [ 319.409206][T12063] Sensor A: Show Information: All [ 319.414997][T12063] Sensor A: Vertical Flip: false [ 319.440222][T12063] Sensor A: Horizontal Flip: true [ 319.450511][T12063] Sensor A: Brightness: 128 [ 319.455171][T12063] Sensor A: Contrast: 128 [ 319.473614][T12063] Sensor A: Hue: 0 [ 319.493844][T12063] Sensor A: Saturation: 128 [ 319.500115][ T5777] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 319.518320][T12063] Sensor A: ================== END STATUS ================== [ 319.690684][ T5777] usb 1-1: Using ep0 maxpacket: 8 [ 319.718454][ T5777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 319.745904][ T5777] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 319.766589][ T5777] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 319.791369][ T5777] usb 1-1: Product: syz [ 319.806724][ T5777] usb 1-1: Manufacturer: syz [ 319.822308][ T5777] usb 1-1: SerialNumber: syz [ 319.932859][T12055] loop3: detected capacity change from 0 to 32768 [ 320.034816][T12055] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 320.086181][ T5777] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 320.105003][ T5777] usb 1-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 320.120673][ T5777] usb 1-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 320.138263][ T5777] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 320.180562][T12055] XFS (loop3): ro->rw transition prohibited on norecovery mount [ 320.285595][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 320.302091][ T5777] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 320.322236][ T5777] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 320.368318][ T5777] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 320.412447][T12090] loop2: detected capacity change from 0 to 64 [ 320.421312][ T5777] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 320.444606][ T5777] usb 1-1: USB disconnect, device number 17 [ 320.474594][ T5777] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 320.534880][T12092] Sensor A: ================= START STATUS ================= [ 320.552554][ T5777] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 320.588014][T12092] Sensor A: Test Pattern: 75% Colorbar [ 320.618235][ T5777] visor 1-1:1.0: device disconnected [ 320.624139][T12092] Sensor A: Show Information: All [ 320.649844][T12092] Sensor A: Vertical Flip: false [ 320.687778][T12092] Sensor A: Horizontal Flip: true [ 320.703600][T12092] Sensor A: Brightness: 128 [ 320.730207][T12092] Sensor A: Contrast: 128 [ 320.750051][T12092] Sensor A: Hue: 0 [ 320.769080][T12092] Sensor A: Saturation: 128 [ 320.784148][T12092] Sensor A: ================== END STATUS ================== [ 321.019149][T12098] loop2: detected capacity change from 0 to 128 [ 321.064057][T12098] FAT-fs (loop2): Directory bread(block 524322) failed [ 321.080848][T12098] FAT-fs (loop2): Directory bread(block 524323) failed [ 321.112269][T12098] FAT-fs (loop2): Directory bread(block 524324) failed [ 321.119261][T12098] FAT-fs (loop2): Directory bread(block 524325) failed [ 321.147521][T12098] FAT-fs (loop2): Directory bread(block 524326) failed [ 321.177034][T12098] FAT-fs (loop2): Directory bread(block 524327) failed [ 321.184690][T12098] FAT-fs (loop2): Directory bread(block 524328) failed [ 321.205764][T12098] FAT-fs (loop2): Directory bread(block 524329) failed [ 321.225332][T12098] FAT-fs (loop2): Directory bread(block 524322) failed [ 321.236614][T12098] FAT-fs (loop2): Directory bread(block 524323) failed [ 321.563823][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2897'. [ 321.880262][T12126] netlink: 'syz.1.2904': attribute type 3 has an invalid length. [ 321.979574][T12132] loop3: detected capacity change from 0 to 16 [ 321.997287][T12132] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 322.397401][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2912'. [ 322.554865][T12148] netlink: 'syz.2.2914': attribute type 58 has an invalid length. [ 322.570828][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2914'. [ 322.644878][T12152] loop1: detected capacity change from 0 to 512 [ 322.689051][T12152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 322.792111][T12152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.848375][T12152] ext4 filesystem being mounted at /748/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.982269][T12152] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.2923: verity file corrupted; can't find descriptor [ 323.038573][T12140] loop0: detected capacity change from 0 to 32768 [ 323.049199][T12152] EXT4-fs (loop1): Remounting filesystem read-only [ 323.077100][T12152] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 323.108720][T12140] jfs_strtoUCS: char2uni returned -22. [ 323.126836][T12140] charset = cp932, char = 0xfc [ 323.224964][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.653481][T12177] syz.1.2927 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 323.777149][T12179] netlink: 'syz.0.2928': attribute type 13 has an invalid length. [ 323.820553][T12179] netlink: 'syz.0.2928': attribute type 12 has an invalid length. [ 323.867633][T12183] overlayfs: unescaped trailing colons in lowerdir mount option. [ 324.278685][T12197] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 324.370095][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 324.550025][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 324.586817][ T5884] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 324.608485][T12195] loop2: detected capacity change from 0 to 32768 [ 324.623466][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.635804][ T5884] usb 1-1: Product: syz [ 324.640335][T12195] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2935 (12195) [ 324.653436][ T5884] usb 1-1: Manufacturer: syz [ 324.653470][ T5884] usb 1-1: SerialNumber: syz [ 324.677070][ T5884] usb 1-1: config 0 descriptor?? [ 324.690385][T12195] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 324.706407][T12195] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 324.721443][T12195] BTRFS info (device loop2): using free space tree [ 324.812449][T12193] loop3: detected capacity change from 0 to 32768 [ 324.861601][T12195] BTRFS info (device loop2): enabling ssd optimizations [ 324.868652][T12195] BTRFS info (device loop2): auto enabling async discard [ 324.918411][T12193] jfs_strtoUCS: char2uni returned -22. [ 324.930101][T12193] charset = cp932, char = 0xfc [ 324.939573][ T5884] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 324.957185][ T5884] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 324.997625][T12217] loop1: detected capacity change from 0 to 128 [ 325.071655][T12217] FAT-fs (loop1): Directory bread(block 524322) failed [ 325.103268][T12217] FAT-fs (loop1): Directory bread(block 524323) failed [ 325.130937][T12217] FAT-fs (loop1): Directory bread(block 524324) failed [ 325.178953][ T5771] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 325.180250][T12217] FAT-fs (loop1): Directory bread(block 524325) failed [ 325.211938][ T5884] usb 1-1: USB disconnect, device number 18 [ 325.260058][T12217] FAT-fs (loop1): Directory bread(block 524326) failed [ 325.270786][T12217] FAT-fs (loop1): Directory bread(block 524327) failed [ 325.280207][T12217] FAT-fs (loop1): Directory bread(block 524328) failed [ 325.307604][T12217] FAT-fs (loop1): Directory bread(block 524329) failed [ 325.373871][T12217] FAT-fs (loop1): Directory bread(block 524322) failed [ 325.431503][T12217] FAT-fs (loop1): Directory bread(block 524323) failed [ 325.520116][T12222] netlink: 'syz.2.2940': attribute type 3 has an invalid length. [ 326.041584][T12236] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 326.150160][T12240] loop1: detected capacity change from 0 to 256 [ 326.191858][T12240] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.415944][T12246] netlink: 'syz.3.2953': attribute type 13 has an invalid length. [ 326.450147][T12246] netlink: 'syz.3.2953': attribute type 12 has an invalid length. [ 326.650528][ T28] audit: type=1326 audit(1770023685.672:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 326.727043][ T28] audit: type=1326 audit(1770023685.672:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 326.761621][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 326.779179][T12255] loop0: detected capacity change from 0 to 4096 [ 326.790081][ T28] audit: type=1326 audit(1770023685.682:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 326.878634][ T28] audit: type=1326 audit(1770023685.682:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 326.944471][ T28] audit: type=1326 audit(1770023685.682:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa26c19c747 code=0x7ffc0000 [ 326.970081][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 326.985449][ T23] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 327.000266][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.010545][ T28] audit: type=1326 audit(1770023685.682:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa26c15b78e code=0x7ffc0000 [ 327.037764][T12255] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 327.049577][ T23] usb 2-1: Product: syz [ 327.080423][ T23] usb 2-1: Manufacturer: syz [ 327.085213][ T23] usb 2-1: SerialNumber: syz [ 327.090302][ T28] audit: type=1326 audit(1770023685.682:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa26c15b78e code=0x7ffc0000 [ 327.151344][ T23] usb 2-1: config 0 descriptor?? [ 327.179577][ T28] audit: type=1326 audit(1770023685.682:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa26c15b78e code=0x7ffc0000 [ 327.284866][ T28] audit: type=1326 audit(1770023685.682:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa26c15b78e code=0x7ffc0000 [ 327.380579][ T28] audit: type=1326 audit(1770023685.712:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12254 comm="syz.3.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 327.416512][ T23] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 327.426616][ T5770] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 327.444112][ T23] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 327.652414][ T5884] usb 2-1: USB disconnect, device number 9 [ 327.828343][T12278] loop2: detected capacity change from 0 to 4096 [ 327.868758][T12278] ntfs: volume version 3.1. [ 327.880305][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 328.083269][ T23] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 328.092312][ T23] usb 1-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 328.097023][T12284] loop3: detected capacity change from 0 to 64 [ 328.110442][ T23] usb 1-1: config 0 has no interface number 0 [ 328.120909][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 328.141883][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.151648][ T23] usb 1-1: Product: syz [ 328.155906][ T23] usb 1-1: Manufacturer: syz [ 328.161291][ T23] usb 1-1: SerialNumber: syz [ 328.178432][ T23] usb 1-1: config 0 descriptor?? [ 328.479797][ T23] usb 1-1: USB disconnect, device number 19 [ 328.882740][T12310] loop3: detected capacity change from 0 to 256 [ 328.944606][T12310] FAT-fs (loop3): Directory bread(block 64) failed [ 328.970158][T12310] FAT-fs (loop3): Directory bread(block 65) failed [ 328.976876][T12310] FAT-fs (loop3): Directory bread(block 66) failed [ 329.005497][T12310] FAT-fs (loop3): Directory bread(block 67) failed [ 329.017825][T12310] FAT-fs (loop3): Directory bread(block 68) failed [ 329.070091][T12310] FAT-fs (loop3): Directory bread(block 69) failed [ 329.077028][T12310] FAT-fs (loop3): Directory bread(block 70) failed [ 329.140122][T12310] FAT-fs (loop3): Directory bread(block 71) failed [ 329.146871][T12310] FAT-fs (loop3): Directory bread(block 72) failed [ 329.220386][T12310] FAT-fs (loop3): Directory bread(block 73) failed [ 329.490394][T12320] loop0: detected capacity change from 0 to 4096 [ 329.665971][T12326] bond2: entered allmulticast mode [ 329.883960][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2996'. [ 329.914767][T12335] netlink: del zone limit has 8 unknown bytes [ 330.460424][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 330.569528][T12359] loop3: detected capacity change from 0 to 1024 [ 330.635019][T12359] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 330.646087][T12359] hfsplus: xattr searching failed [ 330.654662][T12359] syz.3.3007: attempt to access beyond end of device [ 330.654662][T12359] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 330.670501][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 330.681689][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.693758][T12362] loop0: detected capacity change from 0 to 1764 [ 330.700356][T12359] Buffer I/O error on dev loop3, logical block 458752, async page read [ 330.700591][T12359] hfsplus: unable to mark blocks free: error -5 [ 330.700605][T12359] hfsplus: can't free extent [ 330.743596][ T23] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 330.757373][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.768163][ T23] usb 2-1: Product: syz [ 330.786824][ T23] usb 2-1: Manufacturer: syz [ 330.797773][ T23] usb 2-1: SerialNumber: syz [ 330.810895][ T23] usb 2-1: config 0 descriptor?? [ 330.830267][ T23] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 330.836618][ T23] usb 2-1: selecting invalid altsetting 1 [ 331.298336][ T5777] usb 2-1: USB disconnect, device number 10 [ 331.578814][T12383] loop0: detected capacity change from 0 to 1024 [ 331.697565][T12383] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 331.748017][T12383] hfsplus: xattr searching failed [ 331.778099][T12383] syz.0.3019: attempt to access beyond end of device [ 331.778099][T12383] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 331.795091][T12383] Buffer I/O error on dev loop0, logical block 458752, async page read [ 331.804123][T12383] hfsplus: unable to mark blocks free: error -5 [ 331.810855][T12383] hfsplus: can't free extent [ 331.980231][T12395] loop0: detected capacity change from 0 to 256 [ 332.020193][ T5777] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 332.039442][T12395] FAT-fs (loop0): Directory bread(block 64) failed [ 332.051094][T12395] FAT-fs (loop0): Directory bread(block 65) failed [ 332.068484][T12395] FAT-fs (loop0): Directory bread(block 66) failed [ 332.078512][T12395] FAT-fs (loop0): Directory bread(block 67) failed [ 332.090921][T12395] FAT-fs (loop0): Directory bread(block 68) failed [ 332.105893][T12395] FAT-fs (loop0): Directory bread(block 69) failed [ 332.118938][T12393] loop3: detected capacity change from 0 to 4096 [ 332.121089][T12395] FAT-fs (loop0): Directory bread(block 70) failed [ 332.153753][T12395] FAT-fs (loop0): Directory bread(block 71) failed [ 332.180434][T12395] FAT-fs (loop0): Directory bread(block 72) failed [ 332.189659][T12395] FAT-fs (loop0): Directory bread(block 73) failed [ 332.210024][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 332.220989][ T5777] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 332.244440][ T5777] usb 3-1: config 179 has no interface number 0 [ 332.265926][ T5777] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 332.322972][ T5777] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 332.351119][ T5777] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 332.382202][ T5777] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 332.416723][ T5777] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 332.450041][ T5777] usb 3-1: config 179 interface 65 has no altsetting 0 [ 332.464226][ T5777] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 332.483938][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.546210][ T5777] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input17 [ 332.614457][ T5125] input input17: unable to receive magic message: -110 [ 332.775165][ T5125] input input17: unable to receive magic message: -32 [ 332.873003][ T5125] input input17: unable to receive magic message: -32 [ 332.938518][ T5125] input input17: unable to receive magic message: -32 [ 332.983689][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 332.992193][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 333.001017][ T6332] usb 3-1: USB disconnect, device number 13 [ 333.008685][ T6332] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 333.601326][T12417] loop1: detected capacity change from 0 to 1024 [ 333.714905][T12417] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 333.745201][T12417] hfsplus: xattr searching failed [ 333.760528][T12417] syz.1.3034: attempt to access beyond end of device [ 333.760528][T12417] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 333.807758][T12417] Buffer I/O error on dev loop1, logical block 458752, async page read [ 333.848304][T12417] hfsplus: unable to mark blocks free: error -5 [ 333.890332][T12417] hfsplus: can't free extent [ 334.393751][T12439] loop2: detected capacity change from 0 to 128 [ 334.430878][T12439] FAT-fs (loop2): Directory bread(block 162) failed [ 334.450014][T12439] FAT-fs (loop2): Directory bread(block 163) failed [ 334.456733][T12439] FAT-fs (loop2): Directory bread(block 164) failed [ 334.496625][T12439] FAT-fs (loop2): Directory bread(block 165) failed [ 334.524908][T12439] FAT-fs (loop2): Directory bread(block 166) failed [ 334.577824][T12439] FAT-fs (loop2): Directory bread(block 167) failed [ 334.602778][T12439] FAT-fs (loop2): Directory bread(block 168) failed [ 334.620853][T12439] FAT-fs (loop2): Directory bread(block 169) failed [ 334.651132][T12439] FAT-fs (loop2): Directory bread(block 162) failed [ 334.658376][T12439] FAT-fs (loop2): Directory bread(block 163) failed [ 334.667026][T12439] syz.2.3047: attempt to access beyond end of device [ 334.667026][T12439] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 334.701427][T12439] syz.2.3047: attempt to access beyond end of device [ 334.701427][T12439] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 334.788150][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'. [ 335.303067][T12456] loop2: detected capacity change from 0 to 4096 [ 335.330031][T12456] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 335.379594][T12462] loop3: detected capacity change from 0 to 2048 [ 335.426471][T12462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.530531][T12466] loop1: detected capacity change from 0 to 8 [ 335.544344][T12456] ntfs3: loop2: failed to convert "c46c" to default [ 335.586087][T12466] SQUASHFS error: Unable to read directory block [1d0:0] [ 335.801091][T12470] loop0: detected capacity change from 0 to 256 [ 335.952465][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 336.038937][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'. [ 336.273223][T12480] bond3: entered promiscuous mode [ 336.286361][T12480] bond3: entered allmulticast mode [ 336.293041][T12480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.463990][T12489] ip6t_rpfilter: unknown options [ 336.662581][T12498] loop1: detected capacity change from 0 to 256 [ 336.850048][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 337.067904][ T8] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 337.076772][ T8] usb 3-1: config 0 has no interface number 0 [ 337.086981][ T8] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.112452][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 337.127086][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.144540][ T8] usb 3-1: Product: syz [ 337.156574][ T8] usb 3-1: Manufacturer: syz [ 337.164853][ T8] usb 3-1: SerialNumber: syz [ 337.174761][ T8] usb 3-1: config 0 descriptor?? [ 337.197133][T12509] bond4: entered promiscuous mode [ 337.212755][ T8] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 337.226775][T12509] bond4: entered allmulticast mode [ 337.249307][T12509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 337.355899][T12499] loop0: detected capacity change from 0 to 32768 [ 337.373438][T12499] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.3076 (12499) [ 337.439798][T12499] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 337.458537][T12499] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 337.468175][T12499] BTRFS info (device loop0): force zlib compression, level 3 [ 337.476142][T12499] BTRFS info (device loop0): turning off barriers [ 337.533100][T12499] BTRFS info (device loop0): using free space tree [ 337.676434][ T8] usb 3-1: USB disconnect, device number 14 [ 337.709227][T12499] BTRFS info (device loop0): auto enabling async discard [ 337.725141][ T8] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 337.764543][T12534] ip6t_rpfilter: unknown options [ 337.920924][ T5770] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 338.410250][T12550] libceph: resolve '400' (ret=-3): failed [ 338.504463][T12553] loop0: detected capacity change from 0 to 256 [ 338.742113][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 338.742131][ T28] audit: type=1326 audit(1770023697.772:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 338.811695][T12553] FAT-fs (loop0): Directory bread(block 64) failed [ 338.818320][T12553] FAT-fs (loop0): Directory bread(block 65) failed [ 338.865098][T12553] FAT-fs (loop0): Directory bread(block 66) failed [ 338.872177][ T28] audit: type=1326 audit(1770023697.802:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 338.906338][T12553] FAT-fs (loop0): Directory bread(block 67) failed [ 338.926377][T12553] FAT-fs (loop0): Directory bread(block 68) failed [ 338.940315][T12553] FAT-fs (loop0): Directory bread(block 69) failed [ 338.950773][ T28] audit: type=1326 audit(1770023697.812:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 338.980439][T12553] FAT-fs (loop0): Directory bread(block 70) failed [ 339.000649][T12553] FAT-fs (loop0): Directory bread(block 71) failed [ 339.007396][T12553] FAT-fs (loop0): Directory bread(block 72) failed [ 339.039797][ T28] audit: type=1326 audit(1770023697.812:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 339.062507][T12553] FAT-fs (loop0): Directory bread(block 73) failed [ 339.123614][ T28] audit: type=1326 audit(1770023697.822:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 339.212861][ T28] audit: type=1326 audit(1770023697.822:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 339.315414][ T28] audit: type=1326 audit(1770023697.822:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 339.390007][ T28] audit: type=1326 audit(1770023697.822:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 339.415859][T12575] loop2: detected capacity change from 0 to 2048 [ 339.441315][ T28] audit: type=1326 audit(1770023697.822:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa26c19aeb9 code=0x7ffc0000 [ 339.507376][T12575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.843146][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3108'. [ 339.893215][T12582] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3108'. [ 339.989813][T12584] loop1: detected capacity change from 0 to 4096 [ 339.998428][T12584] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 340.280193][T12584] ntfs3: loop1: failed to convert "c46c" to default [ 340.587720][T12607] netlink: 'syz.1.3120': attribute type 1 has an invalid length. [ 340.595678][T12607] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3120'. [ 340.619483][T12607] netlink: 'syz.1.3120': attribute type 1 has an invalid length. [ 340.911411][T12617] xt_limit: Overflow, try lower: 65536/2147483648 [ 340.964393][T12619] loop3: detected capacity change from 0 to 128 [ 341.088405][T12619] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.200460][T12619] ext4 filesystem being mounted at /813/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.296998][T12619] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 341.332588][T12633] loop2: detected capacity change from 0 to 512 [ 341.367863][T12633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 341.402398][T12635] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 341.422755][T12635] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3134'. [ 341.426204][T12633] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 341.446075][T12635] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 341.455834][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.498246][T12633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 341.540154][T12633] System zones: 0-1, 15-15, 18-18, 34-34 [ 341.546846][T12633] EXT4-fs (loop2): orphan cleanup on readonly fs [ 341.625792][T12633] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 341.659495][T12633] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 341.695623][T12633] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 341.712212][T12633] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3131: bg 0: block 40: padding at end of block bitmap is not set [ 341.750618][T12633] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 341.790280][T12633] EXT4-fs (loop2): 1 truncate cleaned up [ 341.802343][T12633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.895285][T12633] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.3131: bad symlink. [ 342.039046][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.247242][T12654] loop3: detected capacity change from 0 to 256 [ 342.319605][T12654] FAT-fs (loop3): Directory bread(block 64) failed [ 342.354541][T12654] FAT-fs (loop3): Directory bread(block 65) failed [ 342.385886][T12657] loop2: detected capacity change from 0 to 256 [ 342.391630][T12654] FAT-fs (loop3): Directory bread(block 66) failed [ 342.398867][T12654] FAT-fs (loop3): Directory bread(block 67) failed [ 342.432965][T12654] FAT-fs (loop3): Directory bread(block 68) failed [ 342.440780][T12654] FAT-fs (loop3): Directory bread(block 69) failed [ 342.452397][T12654] FAT-fs (loop3): Directory bread(block 70) failed [ 342.459391][T12658] xt_TCPMSS: Only works on TCP SYN packets [ 342.471014][T12654] FAT-fs (loop3): Directory bread(block 71) failed [ 342.488181][T12654] FAT-fs (loop3): Directory bread(block 72) failed [ 342.510080][T12654] FAT-fs (loop3): Directory bread(block 73) failed [ 342.799031][T12664] loop0: detected capacity change from 0 to 2048 [ 342.896400][T12664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.770358][T12695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3161'. [ 344.159587][T12706] loop3: detected capacity change from 0 to 256 [ 344.528993][T12693] loop0: detected capacity change from 0 to 32768 [ 344.576507][T12693] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 344.631231][T12693] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 344.656376][ T2987] (kworker/u4:12,2987,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 344.829600][T12693] [ 344.832037][T12693] ====================================================== [ 344.839123][T12693] WARNING: possible circular locking dependency detected [ 344.846373][T12693] syzkaller #0 Not tainted [ 344.850829][T12693] ------------------------------------------------------ [ 344.857992][T12693] syz.0.3160/12693 is trying to acquire lock: [ 344.864101][T12693] ffff88805c8b5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 344.873497][T12693] [ 344.873497][T12693] but task is already holding lock: [ 344.880997][T12693] ffff88805fb7dce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 344.891523][T12693] [ 344.891523][T12693] which lock already depends on the new lock. [ 344.891523][T12693] [ 344.902061][T12693] [ 344.902061][T12693] the existing dependency chain (in reverse order) is: [ 344.911326][T12693] [ 344.911326][T12693] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 344.919900][T12693] down_read+0x46/0x2e0 [ 344.924645][T12693] ocfs2_start_trans+0x3a8/0x6f0 [ 344.930162][T12693] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 344.936445][T12693] ocfs2_dismount_volume+0x1e5/0x8a0 [ 344.942381][T12693] generic_shutdown_super+0x134/0x2b0 [ 344.948304][T12693] kill_block_super+0x44/0x90 [ 344.953528][T12693] deactivate_locked_super+0x97/0x100 [ 344.959450][T12693] cleanup_mnt+0x43b/0x4d0 [ 344.964415][T12693] task_work_run+0x1d4/0x260 [ 344.969743][T12693] exit_to_user_mode_loop+0xe6/0x110 [ 344.975579][T12693] exit_to_user_mode_prepare+0xee/0x180 [ 344.981687][T12693] syscall_exit_to_user_mode+0x1a/0x50 [ 344.987699][T12693] do_syscall_64+0x61/0xa0 [ 344.992806][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.999428][T12693] [ 344.999428][T12693] -> #3 (sb_internal#4){.+.+}-{0:0}: [ 345.007033][T12693] ocfs2_start_trans+0x2a9/0x6f0 [ 345.012530][T12693] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 345.018810][T12693] ocfs2_dismount_volume+0x1e5/0x8a0 [ 345.024643][T12693] generic_shutdown_super+0x134/0x2b0 [ 345.030574][T12693] kill_block_super+0x44/0x90 [ 345.035895][T12693] deactivate_locked_super+0x97/0x100 [ 345.041822][T12693] cleanup_mnt+0x43b/0x4d0 [ 345.046806][T12693] task_work_run+0x1d4/0x260 [ 345.051984][T12693] exit_to_user_mode_loop+0xe6/0x110 [ 345.057826][T12693] exit_to_user_mode_prepare+0xee/0x180 [ 345.063976][T12693] syscall_exit_to_user_mode+0x1a/0x50 [ 345.070004][T12693] do_syscall_64+0x61/0xa0 [ 345.075026][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.081558][T12693] [ 345.081558][T12693] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 345.092116][T12693] down_write+0x97/0x200 [ 345.097005][T12693] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 345.103496][T12693] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 345.110480][T12693] ocfs2_extend_dir+0x74f/0x48b0 [ 345.116062][T12693] ocfs2_prepare_dir_for_insert+0x315b/0x56b0 [ 345.122840][T12693] ocfs2_mknod+0x81b/0x2300 [ 345.128032][T12693] ocfs2_create+0x196/0x430 [ 345.133102][T12693] path_openat+0x12a0/0x3230 [ 345.138256][T12693] do_filp_open+0x1f5/0x430 [ 345.143309][T12693] do_sys_openat2+0x134/0x1d0 [ 345.148539][T12693] __x64_sys_creat+0x90/0xb0 [ 345.153857][T12693] do_syscall_64+0x55/0xa0 [ 345.158838][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.165398][T12693] [ 345.165398][T12693] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 345.174415][T12693] down_write+0x97/0x200 [ 345.179231][T12693] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 345.185774][T12693] ocfs2_xattr_set+0x61b/0x13e0 [ 345.191196][T12693] ocfs2_set_acl+0x4e1/0x590 [ 345.196739][T12693] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 345.202243][T12693] vfs_set_acl+0x803/0xa60 [ 345.207215][T12693] path_setxattr+0x41d/0x5d0 [ 345.212385][T12693] __x64_sys_setxattr+0xbb/0xd0 [ 345.217972][T12693] do_syscall_64+0x55/0xa0 [ 345.223033][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.229479][T12693] [ 345.229479][T12693] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 345.237339][T12693] __lock_acquire+0x2df1/0x7d40 [ 345.242799][T12693] lock_acquire+0x19e/0x420 [ 345.248002][T12693] down_read+0x46/0x2e0 [ 345.252771][T12693] ocfs2_init_acl+0x30a/0x770 [ 345.258062][T12693] ocfs2_mknod+0x140f/0x2300 [ 345.263310][T12693] ocfs2_create+0x196/0x430 [ 345.268550][T12693] path_openat+0x12a0/0x3230 [ 345.273713][T12693] do_filp_open+0x1f5/0x430 [ 345.278969][T12693] do_sys_openat2+0x134/0x1d0 [ 345.284493][T12693] __x64_sys_creat+0x90/0xb0 [ 345.289703][T12693] do_syscall_64+0x55/0xa0 [ 345.294791][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.301861][T12693] [ 345.301861][T12693] other info that might help us debug this: [ 345.301861][T12693] [ 345.312115][T12693] Chain exists of: [ 345.312115][T12693] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 345.312115][T12693] [ 345.326175][T12693] Possible unsafe locking scenario: [ 345.326175][T12693] [ 345.333777][T12693] CPU0 CPU1 [ 345.339204][T12693] ---- ---- [ 345.344611][T12693] rlock(&journal->j_trans_barrier); [ 345.350020][T12693] lock(sb_internal#4); [ 345.356823][T12693] lock(&journal->j_trans_barrier); [ 345.364750][T12693] rlock(&oi->ip_xattr_sem); [ 345.369464][T12693] [ 345.369464][T12693] *** DEADLOCK *** [ 345.369464][T12693] [ 345.377634][T12693] 8 locks held by syz.0.3160/12693: [ 345.382944][T12693] #0: ffff88807dfea418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 345.392235][T12693] #1: ffff88805c8b5f58 (&type->i_mutex_dir_key#16){++++}-{3:3}, at: path_openat+0x7dc/0x3230 [ 345.402559][T12693] #2: ffff888077d6ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 345.416393][T12693] #3: ffff88805c8b09d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 345.430213][T12693] #4: ffff88805c8b3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 345.443945][T12693] #5: ffff88807dfea608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300 [ 345.453231][T12693] #6: ffff88805fb7dce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 345.463988][T12693] #7: ffff88806e67e990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 345.474056][T12693] [ 345.474056][T12693] stack backtrace: [ 345.480015][T12693] CPU: 1 PID: 12693 Comm: syz.0.3160 Not tainted syzkaller #0 [ 345.487513][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.497638][T12693] Call Trace: [ 345.500960][T12693] [ 345.503923][T12693] dump_stack_lvl+0x18c/0x250 [ 345.508724][T12693] ? load_image+0x400/0x400 [ 345.513286][T12693] ? show_regs_print_info+0x20/0x20 [ 345.518696][T12693] ? print_circular_bug+0x12b/0x1a0 [ 345.523963][T12693] check_noncircular+0x2fc/0x400 [ 345.529053][T12693] ? print_deadlock_bug+0x5d0/0x5d0 [ 345.534296][T12693] ? _find_first_zero_bit+0xd3/0x100 [ 345.539663][T12693] ? add_lock_to_list+0x191/0x280 [ 345.544834][T12693] __lock_acquire+0x2df1/0x7d40 [ 345.549799][T12693] ? verify_lock_unused+0x140/0x140 [ 345.555150][T12693] ? __lock_acquire+0x7d40/0x7d40 [ 345.560254][T12693] ? do_raw_spin_lock+0x11f/0x2c0 [ 345.565325][T12693] lock_acquire+0x19e/0x420 [ 345.569920][T12693] ? ocfs2_init_acl+0x30a/0x770 [ 345.574845][T12693] ? __might_sleep+0xe0/0xe0 [ 345.579504][T12693] ? read_lock_is_recursive+0x20/0x20 [ 345.584945][T12693] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 345.591595][T12693] ? mark_lock+0x94/0x320 [ 345.595971][T12693] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 345.601987][T12693] down_read+0x46/0x2e0 [ 345.606181][T12693] ? ocfs2_init_acl+0x30a/0x770 [ 345.611074][T12693] ocfs2_init_acl+0x30a/0x770 [ 345.615825][T12693] ? ocfs2_mknod_locked+0x159/0x290 [ 345.621061][T12693] ? ocfs2_acl_chmod+0x330/0x330 [ 345.626034][T12693] ? dquot_alloc_inode+0x211/0xa40 [ 345.631180][T12693] ? ocfs2_block_signals+0x9b/0xe0 [ 345.636414][T12693] ? ocfs2_free_mem_caches+0x50/0x50 [ 345.641746][T12693] ? mark_lock+0x94/0x320 [ 345.646115][T12693] ? ocfs2_init_security_get+0x139/0x1a0 [ 345.651787][T12693] ocfs2_mknod+0x140f/0x2300 [ 345.656420][T12693] ? ocfs2_mkdir+0x430/0x430 [ 345.661051][T12693] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 345.666997][T12693] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 345.672952][T12693] ? ocfs2_inode_unlock+0xa5/0x140 [ 345.678104][T12693] ? __lock_acquire+0x7d40/0x7d40 [ 345.683165][T12693] ? __rwlock_init+0x150/0x150 [ 345.687963][T12693] ? do_raw_spin_unlock+0x121/0x230 [ 345.693191][T12693] ? rcu_is_watching+0x15/0xb0 [ 345.697981][T12693] ? ocfs2_lookup+0x494/0x950 [ 345.702684][T12693] ocfs2_create+0x196/0x430 [ 345.707225][T12693] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 345.713499][T12693] ? from_kgid+0x16d/0x690 [ 345.718035][T12693] ? ocfs2_lookup+0x950/0x950 [ 345.722742][T12693] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 345.727722][T12693] ? inode_permission+0xf3/0x480 [ 345.732708][T12693] ? bpf_lsm_inode_create+0x9/0x10 [ 345.737856][T12693] ? security_inode_create+0xb7/0x100 [ 345.743296][T12693] ? ocfs2_lookup+0x950/0x950 [ 345.748024][T12693] path_openat+0x12a0/0x3230 [ 345.752740][T12693] ? do_filp_open+0x430/0x430 [ 345.757808][T12693] ? __virt_addr_valid+0x18c/0x540 [ 345.763155][T12693] do_filp_open+0x1f5/0x430 [ 345.767782][T12693] ? vfs_tmpfile+0x490/0x490 [ 345.772595][T12693] ? _raw_spin_unlock+0x28/0x40 [ 345.777579][T12693] ? alloc_fd+0x58f/0x630 [ 345.782037][T12693] do_sys_openat2+0x134/0x1d0 [ 345.786808][T12693] ? do_sys_open+0xe0/0xe0 [ 345.791343][T12693] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 345.797379][T12693] ? lock_chain_count+0x20/0x20 [ 345.802366][T12693] __x64_sys_creat+0x90/0xb0 [ 345.806999][T12693] do_syscall_64+0x55/0xa0 [ 345.811451][T12693] ? clear_bhb_loop+0x40/0x90 [ 345.816159][T12693] ? clear_bhb_loop+0x40/0x90 [ 345.820885][T12693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.826824][T12693] RIP: 0033:0x7ff1e839aeb9 [ 345.831304][T12693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.851048][T12693] RSP: 002b:00007ff1e92d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 345.859498][T12693] RAX: ffffffffffffffda RBX: 00007ff1e8615fa0 RCX: 00007ff1e839aeb9 [ 345.867501][T12693] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000200000000580 [ 345.875504][T12693] RBP: 00007ff1e8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 345.883505][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.891502][T12693] R13: 00007ff1e8616038 R14: 00007ff1e8615fa0 R15: 00007fff68e5d418 [ 345.899512][T12693] [ 345.902652][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.976664][T12693] syz.0.3160 (12693) used greatest stack depth: 18224 bytes left [ 346.021550][ T5770] ocfs2: Unmounting device (7,0) on (node local)