last executing test programs: 4.649379087s ago: executing program 4 (id=4789): r0 = syz_open_dev$video4linux(&(0x7f0000001c80), 0xd36, 0x18bc80) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000001cc0)=0x8000) 3.938922342s ago: executing program 4 (id=4793): r0 = openat$vimc2(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000940)={0x1, @pix_mp={0x1ff, 0xf, 0x3136564e, 0x7, 0x6, [{0x2, 0x9}, {0x81, 0x4}, {0x80000000, 0xee2}, {0x6, 0x4}, {0x2, 0x40}, {0x2}, {0x34e, 0x4}, {0x0, 0x2}], 0x5, 0xc, 0x2, 0x1, 0x4}}) 3.828339165s ago: executing program 0 (id=4794): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x5, 0x4) 3.53211165s ago: executing program 1 (id=4795): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x254, 0x130, 0x0, 0x148, 0x130, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0xff, 0xffffffff, 'ip6gretap0\x00', 'virt_wifi0\x00', {}, {}, 0x21, 0x0, 0x65}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e23], [0x4e20, 0x4e22], 0xd, 0x0, 0x1, 0xbb}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e23], [0x4e24, 0x4e24], 0x9, 0x4, 0x1, 0xe}}]}, @common=@SET={0x30, 'SET\x00', 0x0, {{0x1, [0x6, 0x1, 0x1, 0x0, 0x6, 0x3], 0x1, 0x1}, {0xffffffffffffffff, [0x5, 0x4, 0x0, 0xc, 0x5, 0x2], 0x6, 0x3}}}}, {{@ip={@rand_addr=0x64010100, @empty, 0xff, 0x0, 'pim6reg1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6, 0x2, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b0) 3.419844416s ago: executing program 3 (id=4796): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x401, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000100)={0x78ef0f9d72a74ef3, 0x1, 0x100, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x99096f, 0x5, '\x00', @p_u32=0x0}}) 3.396858028s ago: executing program 2 (id=4797): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f02b, 0x1}) 3.348306967s ago: executing program 4 (id=4798): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c841}, 0x4044804) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) 3.224798799s ago: executing program 0 (id=4799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000000008001e0000040000080017"], 0x2c}}, 0x0) 2.940688191s ago: executing program 1 (id=4800): r0 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000000)=""/7, 0x7) 2.897933128s ago: executing program 3 (id=4801): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000480)=[{0xb1, 0x0, 0x0, 0x8b49}, {0x6}]}, 0x8) 2.770739585s ago: executing program 2 (id=4802): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000700)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) 2.753759323s ago: executing program 0 (id=4803): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@raw={0xfe, 0x0, "63b85b08cc70"}, @v={0x93, 0x0, 0xa0, 0x0, @generic, 0x0, 0x20}], 0x10) 2.387876052s ago: executing program 1 (id=4804): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0xd, 0x2, 0x1, "bc57499e007105bf0000000100000000e40300", 0x50424752}) 2.362661736s ago: executing program 2 (id=4805): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5004}, 0x0) 2.306670477s ago: executing program 3 (id=4806): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.987175333s ago: executing program 0 (id=4807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)=0x24) 1.736513457s ago: executing program 1 (id=4808): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) 1.688418463s ago: executing program 2 (id=4809): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 1.578720819s ago: executing program 3 (id=4810): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3}}) 1.409233193s ago: executing program 0 (id=4811): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000fd95"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x33, 0x0, @void}, 0x10) 1.260959686s ago: executing program 2 (id=4812): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x20800, 0x0, 0x1, 0x0, 0x0) 1.220397018s ago: executing program 4 (id=4813): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioperm(0x0, 0x4, 0xa) 1.148538194s ago: executing program 1 (id=4814): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file3\x00', 0x100481e, &(0x7f00000022c0)=ANY=[@ANYBLOB='keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp866,discard,iocharset=cp437,errors=remount-ro,discard,umask=00000000000000000000007,umask=0000000000000003,keep_last_dots,\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb, 0x1505, &(0x7f0000000180)="$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") mount$nfs(&(0x7f0000000000)='f\xac\xa1S\xeb\xa7 \xc6\xdaQ\x84\x04\xd0\x9d\x94pd:\xb2\x8c\xec%\xcc5\x82\x80\xd38\x039Ui\a,$c\xd3\b\xee\x9c\r\x8f\xa8Iu\x80\"\xb4\a\xdf\xb9dv&j6\xea\xf41\xf1]0\x05\xcbb\xb3&\x96\xaf\xee\xb8]{u\xe4\xa7\x92#r\xa7\xac<\x903\xf3\x8f\x8d\xcd1J\x7f\xb65\xdc\xa00\xc3B\xaf\x8f\xd8\x84L\xb5\xe5[\a!V{\xeb\x83\xd7B*\xa0\xd5\xb9\b\x8d\\\tN\ai\x0e\xda\x90.\x00'/141, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 1.052323064s ago: executing program 3 (id=4815): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x7, 0x0, 0xa0) 599.588289ms ago: executing program 4 (id=4816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) 599.345331ms ago: executing program 0 (id=4817): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x810084, &(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x1, 0x686, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x1) 434.245748ms ago: executing program 3 (id=4818): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x1, @vbi={0x16a, 0x3, 0x7fff, 0x59555956, [0xffffffff, 0x6], [0x80000001, 0x4], 0x13a}}) 125.281317ms ago: executing program 1 (id=4819): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 82.379277ms ago: executing program 4 (id=4820): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 0s ago: executing program 2 (id=4821): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000000240)=""/59, 0x3b, 0x0) kernel console output (not intermixed with test programs): Mfr=1, Product=2, SerialNumber=3 [ 648.658647][ T5849] usb 4-1: Product: syz [ 648.663119][ T5849] usb 4-1: Manufacturer: syz [ 648.667935][ T5849] usb 4-1: SerialNumber: syz [ 648.747690][ T5849] usb 4-1: config 0 descriptor?? [ 648.775217][ T5849] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 648.823323][T11768] dlm: non-version read from control device 36 [ 649.031874][ T5849] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 649.053162][ T5849] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 649.291802][T10215] usb 4-1: USB disconnect, device number 14 [ 650.471739][T11790] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 651.570824][T11809] loop2: detected capacity change from 0 to 64 [ 652.181574][T11814] xt_TCPMSS: Only works on TCP SYN packets [ 652.203990][T11810] loop1: detected capacity change from 0 to 4096 [ 652.696554][T11810] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 653.391787][T11828] loop0: detected capacity change from 0 to 512 [ 653.454468][T11828] EXT4-fs: Ignoring removed i_version option [ 653.502715][T11828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 653.671632][T11828] EXT4-fs (loop0): 1 truncate cleaned up [ 653.679714][T11828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.934221][T11837] loop3: detected capacity change from 0 to 64 [ 654.037237][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.338653][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.346220][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.061064][T11851] loop1: detected capacity change from 0 to 1024 [ 655.222742][T11851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.329803][T11851] EXT4-fs: Ignoring sb option on remount [ 655.336561][T11851] EXT4-fs: Cannot specify journal on remount [ 655.558955][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.647765][T11861] @0ÿ: renamed from bond_slave_0 [ 656.103862][T11869] CIFS mount error: No usable UNC path provided in device string! [ 656.103862][T11869] [ 656.114445][T11869] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 656.737868][T11879] loop3: detected capacity change from 0 to 8 [ 656.834043][T11879] SQUASHFS error: xz decompression failed, data probably corrupt [ 656.842256][T11879] SQUASHFS error: Failed to read block 0x108: -5 [ 656.848817][T11879] SQUASHFS error: Unable to read metadata cache entry [106] [ 656.856511][T11879] SQUASHFS error: Unable to read inode 0x11f [ 657.683177][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2763'. [ 658.093706][T11897] loop1: detected capacity change from 0 to 8 [ 658.525027][ T5849] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 658.722179][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 658.766839][ T5849] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 658.776470][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.821079][ T5849] usb 3-1: config 0 descriptor?? [ 658.860967][ T5849] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 659.312113][ T5849] gspca_nw80x: reg_r err -71 [ 659.317243][ T5849] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 659.367722][ T5849] usb 3-1: USB disconnect, device number 11 [ 660.393856][T11930] loop0: detected capacity change from 0 to 16 [ 660.461819][T11930] erofs (device loop0): mounted with root inode @ nid 36. [ 660.583913][T11930] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 660.617262][T11930] erofs (device loop0): read error -117 @ 43 of nid 36 [ 660.868803][T10306] IPVS: starting estimator thread 0... [ 660.981914][T11938] IPVS: using max 288 ests per chain, 14400 per kthread [ 662.443707][T11963] loop4: detected capacity change from 0 to 512 [ 662.602491][T11963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.616097][T11963] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.058507][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.207693][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2811'. [ 664.566322][T11997] loop1: detected capacity change from 0 to 164 [ 664.666757][T11999] netlink: 'syz.3.2814': attribute type 2 has an invalid length. [ 665.995417][T12020] 9pnet_virtio: no channels available for device [ 666.058821][T12021] loop1: detected capacity change from 0 to 256 [ 666.100889][T12021] exfat: Deprecated parameter 'utf8' [ 666.234414][T12021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 667.146677][T12037] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2832'. [ 669.058891][T12071] process 'syz.0.2848' launched '/dev/fd/3' with NULL argv: empty string added [ 669.412592][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 670.317095][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2856'. [ 670.825146][T12089] loop0: detected capacity change from 0 to 2048 [ 670.903899][T12089] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 671.082312][T12089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.491083][T12101] loop1: detected capacity change from 0 to 1024 [ 671.653267][T12101] fuse: Bad value for 'fd' [ 672.069062][ T3743] hfsplus: b-tree write err: -5, ino 4 [ 673.041138][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2874'. [ 673.050770][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2874'. [ 673.060112][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2874'. [ 673.069814][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2874'. [ 673.079088][T12124] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2874'. [ 673.288434][T12129] loop0: detected capacity change from 0 to 512 [ 673.442404][T12129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.456370][T12129] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.830307][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.837807][T12137] loop1: detected capacity change from 0 to 1024 [ 674.012721][T12137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.153483][T12137] EXT4-fs error (device loop1): __ext4_new_inode:1072: comm syz.1.2879: reserved inode found cleared - inode=1 [ 674.181707][T12135] loop3: detected capacity change from 0 to 4096 [ 674.264321][T12135] EXT4-fs (loop3): Test dummy encryption mode enabled [ 674.292281][T12143] netlink: 'syz.0.2882': attribute type 32 has an invalid length. [ 674.300405][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 674.305233][T12135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.309771][T12143] netlink: 'syz.0.2882': attribute type 32 has an invalid length. [ 674.504613][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.755359][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.972480][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'. [ 675.090600][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.098759][T12156] batadv_slave_0: entered promiscuous mode [ 675.105387][T12156] batadv_slave_0: entered allmulticast mode [ 675.365855][T12151] loop0: detected capacity change from 0 to 4096 [ 675.445901][T12151] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 675.768956][T12151] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 675.802961][T12151] ntfs3(loop0): ino=19, mi_enum_attr [ 675.912270][T12164] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2892'. [ 675.927372][T12151] ntfs3(loop0): failed to convert "c46c" to cp862 [ 675.950327][T12151] ntfs3(loop0): ino=20, mi_enum_attr [ 676.232359][T12170] openvswitch: netlink: Port 808464432 exceeds max allowable 65535 [ 676.605497][T12172] loop4: detected capacity change from 0 to 256 [ 676.631196][T12172] exfat: Deprecated parameter 'utf8' [ 676.639471][T12172] exfat: Deprecated parameter 'utf8' [ 676.814708][T12172] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 678.204654][T12197] netlink: 'syz.2.2909': attribute type 6 has an invalid length. [ 678.667333][T10306] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 678.873167][T10306] usb 1-1: Using ep0 maxpacket: 32 [ 678.901248][T10306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 678.916869][T12208] loop2: detected capacity change from 0 to 1024 [ 678.958902][T10306] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 678.968882][T10306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.974320][T12208] EXT4-fs: inline encryption not supported [ 678.977187][T10306] usb 1-1: Product: syz [ 678.983011][T12208] EXT4-fs: Ignoring removed i_version option [ 678.987152][T10306] usb 1-1: Manufacturer: syz [ 678.998355][T10306] usb 1-1: SerialNumber: syz [ 679.045907][T12208] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 679.192065][T12208] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.2914: lblock 2 mapped to illegal pblock 2 (length 1) [ 679.214618][T12208] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 679.223204][T12208] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.2914: lblock 0 mapped to illegal pblock 48 (length 1) [ 679.239629][T12208] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 679.248946][T12208] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2914: Failed to acquire dquot type 0 [ 679.253480][T10306] usb 1-1: config 0 descriptor?? [ 679.285820][T12208] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 679.307486][T12208] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.2914: mark_inode_dirty error [ 679.333806][T12208] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 679.344312][T10306] hub 1-1:0.0: bad descriptor, ignoring hub [ 679.344427][T10306] hub 1-1:0.0: probe with driver hub failed with error -5 [ 679.350404][T12208] EXT4-fs (loop2): 1 orphan inode deleted [ 679.367786][T12208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.382226][ T3613] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 679.468816][T10306] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 679.486456][ T3613] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 679.496785][ T3613] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 679.563511][T10306] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 679.610003][T12208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.633638][T10306] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 679.680438][T12208] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz.2.2914: Invalid inode table block 1 in block_group 0 [ 679.717465][T12208] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 679.744613][T10306] usb 1-1: USB disconnect, device number 16 [ 679.796813][T12208] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz.2.2914: mark_inode_dirty error [ 680.307790][T12226] loop3: detected capacity change from 0 to 64 [ 680.517508][T12226] hfs: hfs: Invalid key length: 224 [ 680.868048][ T5799] hfs: node 4:3 still has 1 user(s)! [ 681.962779][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 682.646468][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 683.996038][T12288] loop3: detected capacity change from 0 to 256 [ 684.282421][T12288] FAT-fs (loop3): Directory bread(block 64) failed [ 684.289329][T12288] FAT-fs (loop3): Directory bread(block 65) failed [ 684.296491][T12288] FAT-fs (loop3): Directory bread(block 66) failed [ 684.303365][T12288] FAT-fs (loop3): Directory bread(block 67) failed [ 684.310239][T12288] FAT-fs (loop3): Directory bread(block 68) failed [ 684.317208][T12288] FAT-fs (loop3): Directory bread(block 69) failed [ 684.324241][T12288] FAT-fs (loop3): Directory bread(block 70) failed [ 684.331001][T12288] FAT-fs (loop3): Directory bread(block 71) failed [ 684.338030][T12288] FAT-fs (loop3): Directory bread(block 72) failed [ 684.344990][T12288] FAT-fs (loop3): Directory bread(block 73) failed [ 686.311893][T12323] usb usb1: usbfs: process 12323 (syz.3.2970) did not claim interface 6 before use [ 686.982870][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2976'. [ 686.996082][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2976'. [ 687.111500][ T30] audit: type=1326 audit(1747309750.787:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 687.225086][ T30] audit: type=1326 audit(1747309750.827:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 687.247837][ T30] audit: type=1326 audit(1747309750.827:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 687.270819][ T30] audit: type=1326 audit(1747309750.827:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.4.2978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 688.388085][T12360] xt_TCPMSS: Only works on TCP SYN packets [ 688.450786][T12363] xt_socket: unknown flags 0x46 [ 688.671603][T10215] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 688.871686][T10215] usb 5-1: Using ep0 maxpacket: 8 [ 688.914613][T10215] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 688.923641][T10215] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 688.932257][T10215] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 688.940500][T10215] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 688.950367][T10215] usb 5-1: config 0 has no interface number 0 [ 688.956855][T10215] usb 5-1: config 0 has no interface number 1 [ 688.963308][T10215] usb 5-1: config 0 has no interface number 2 [ 688.969671][T10215] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.983101][T10215] usb 5-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 688.983258][T10215] usb 5-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 688.983451][T10215] usb 5-1: config 0 interface 150 has no altsetting 0 [ 688.983561][T10215] usb 5-1: config 0 interface 112 has no altsetting 0 [ 688.983672][T10215] usb 5-1: config 0 interface 3 has no altsetting 0 [ 688.983829][T10215] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 688.983963][T10215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.144037][T10215] usb 5-1: config 0 descriptor?? [ 689.172237][T10215] usb 5-1: selecting invalid altsetting 0 [ 689.207585][T12374] loop1: detected capacity change from 0 to 256 [ 689.284311][T12374] MINIX-fs: mounting file system with errors, running fsck is recommended [ 689.381259][T10215] usb 5-1: string descriptor 0 read error: -71 [ 689.493336][T10215] usb 5-1: USB disconnect, device number 11 [ 689.814161][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.181168][T12398] loop4: detected capacity change from 0 to 136 [ 691.956508][T12414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 692.063697][T12416] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 693.605220][T12440] loop0: detected capacity change from 0 to 256 [ 693.822882][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 694.498291][T12453] loop4: detected capacity change from 0 to 1024 [ 694.620129][T12453] EXT4-fs: Ignoring removed i_version option [ 694.627091][T12453] EXT4-fs: inline encryption not supported [ 694.738560][T12453] EXT4-fs (loop4): Test dummy encryption mode enabled [ 694.772481][T12453] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 694.904690][T12453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.177541][T12453] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 695.364077][T12466] loop2: detected capacity change from 0 to 2048 [ 695.423368][T12466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 695.495692][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.293058][T12483] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.3045'. [ 698.042761][T12510] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 699.008958][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 699.928739][T12545] overlay: Unknown parameter 'Zz-#FÇ<æõ]%gCžÊ [ 699.928739][T12545] SÃȘØÈžZ§6ŸÂ' [ 700.084766][T12547] loop0: detected capacity change from 0 to 512 [ 700.138587][T12547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 700.278015][T12547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.291180][T12547] ext4 filesystem being mounted at /623/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.785955][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.962105][T10306] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 701.034114][T12564] loop2: detected capacity change from 0 to 256 [ 701.141607][T10306] usb 5-1: Using ep0 maxpacket: 8 [ 701.241824][T10306] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 701.251225][T10306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.259634][T10306] usb 5-1: Product: syz [ 701.264192][T10306] usb 5-1: Manufacturer: syz [ 701.269093][T10306] usb 5-1: SerialNumber: syz [ 701.352769][T12564] FAT-fs (loop2): Directory bread(block 64) failed [ 701.359743][T12564] FAT-fs (loop2): Directory bread(block 65) failed [ 701.366995][T12564] FAT-fs (loop2): Directory bread(block 66) failed [ 701.374082][T12564] FAT-fs (loop2): Directory bread(block 67) failed [ 701.381015][T12564] FAT-fs (loop2): Directory bread(block 68) failed [ 701.388012][T12564] FAT-fs (loop2): Directory bread(block 69) failed [ 701.395201][T12564] FAT-fs (loop2): Directory bread(block 70) failed [ 701.402124][T12564] FAT-fs (loop2): Directory bread(block 71) failed [ 701.409020][T12564] FAT-fs (loop2): Directory bread(block 72) failed [ 701.415942][T12564] FAT-fs (loop2): Directory bread(block 73) failed [ 701.485421][T10306] usb 5-1: config 0 descriptor?? [ 701.515436][T10306] gspca_main: se401-2.14.0 probing 047d:5003 [ 701.534712][T12570] loop0: detected capacity change from 0 to 128 [ 701.594950][T12570] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 701.622744][T12570] ext4 filesystem being mounted at /624/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 701.930107][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 701.954451][T10306] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 701.962594][T10306] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 702.029917][T10306] usb 5-1: USB disconnect, device number 12 [ 703.138349][T12589] loop4: detected capacity change from 0 to 64 [ 703.202467][ T30] audit: type=1326 audit(1747309766.887:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.266357][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 703.275738][T12592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 703.290725][ T30] audit: type=1326 audit(1747309766.927:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.313358][ T30] audit: type=1326 audit(1747309766.927:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.336039][ T30] audit: type=1326 audit(1747309766.927:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.358493][ T30] audit: type=1326 audit(1747309766.927:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.380992][ T30] audit: type=1326 audit(1747309766.927:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.406387][ T30] audit: type=1326 audit(1747309766.927:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.431022][ T30] audit: type=1326 audit(1747309766.927:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.453497][ T30] audit: type=1326 audit(1747309766.927:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 703.476003][ T30] audit: type=1326 audit(1747309766.927:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.3.3094" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ff00000 [ 704.513823][T12607] netlink: 'syz.2.3103': attribute type 11 has an invalid length. [ 706.854950][T12639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3118'. [ 707.469567][T12647] loop4: detected capacity change from 0 to 256 [ 708.138070][T12658] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 708.146592][T12658] netlink: 'syz.3.3128': attribute type 2 has an invalid length. [ 708.292717][T12663] loop4: detected capacity change from 0 to 128 [ 708.366053][T12663] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 708.484147][T12663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.007153][T12675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3136'. [ 709.453214][T12673] loop1: detected capacity change from 0 to 4096 [ 709.966686][T12688] loop0: detected capacity change from 0 to 512 [ 710.098952][T12688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.112711][T12688] ext4 filesystem being mounted at /637/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.761947][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.812682][T12705] program syz.1.3148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.259325][ T30] kauditd_printk_skb: 560 callbacks suppressed [ 711.259391][ T30] audit: type=1326 audit(1747309774.947:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.0.3150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 711.289364][ T30] audit: type=1326 audit(1747309774.947:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.0.3150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 711.397335][ T30] audit: type=1326 audit(1747309775.057:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.0.3150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 711.419988][ T30] audit: type=1326 audit(1747309775.057:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.0.3150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 711.442601][ T30] audit: type=1326 audit(1747309775.057:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.0.3150" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 711.500681][T12716] Option ' ' to dns_resolver key: bad/missing value [ 711.792878][T12719] C: renamed from veth0_to_batadv (while UP) [ 711.864567][T12719] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 711.872807][T12719] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3155'. [ 711.884378][T12719] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 712.188720][T12725] ieee802154 phy0 wpan0: encryption failed: -90 [ 712.752332][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 713.377035][T12746] loop1: detected capacity change from 0 to 256 [ 713.779580][T12746] FAT-fs (loop1): Directory bread(block 64) failed [ 713.788884][T12746] FAT-fs (loop1): Directory bread(block 65) failed [ 713.796415][T12746] FAT-fs (loop1): Directory bread(block 66) failed [ 713.803507][T12746] FAT-fs (loop1): Directory bread(block 67) failed [ 713.810427][T12746] FAT-fs (loop1): Directory bread(block 68) failed [ 713.819708][T12746] FAT-fs (loop1): Directory bread(block 69) failed [ 713.826800][T12746] FAT-fs (loop1): Directory bread(block 70) failed [ 713.833728][T12746] FAT-fs (loop1): Directory bread(block 71) failed [ 713.840642][T12746] FAT-fs (loop1): Directory bread(block 72) failed [ 713.847577][T12746] FAT-fs (loop1): Directory bread(block 73) failed [ 714.446163][T12759] netlink: 'syz.4.3173': attribute type 17 has an invalid length. [ 714.505994][T12761] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 715.383354][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 715.794379][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.801170][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.891010][T12802] raw_sendmsg: syz.2.3194 forgot to set AF_INET. Fix it! [ 717.302845][T12810] openvswitch: netlink: IP tunnel dst address not specified [ 717.382057][ T5843] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 717.596794][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 717.618928][T12814] loop1: detected capacity change from 0 to 1024 [ 717.656139][ T5843] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 717.664744][ T5843] usb 4-1: config 0 has no interface number 0 [ 717.664868][ T5843] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 717.665006][ T5843] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 34714, setting to 1024 [ 717.753099][ T5843] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 717.753232][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 717.753344][ T5843] usb 4-1: Product: syz [ 717.753432][ T5843] usb 4-1: SerialNumber: syz [ 717.764419][ T5843] usb 4-1: config 0 descriptor?? [ 717.766336][T12807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 717.787363][ T5843] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 717.790617][ T5843] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input21 [ 717.994311][T12819] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3202'. [ 717.994477][T12819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3202'. [ 717.996039][T12819] unsupported nlmsg_type 40 [ 718.023291][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 718.186006][ T59] hfsplus: b-tree write err: -5, ino 4 [ 718.236652][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 718.243129][T10306] usb 4-1: USB disconnect, device number 15 [ 718.243752][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 718.275387][T10306] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 719.203333][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3208'. [ 719.432392][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3211'. [ 719.785057][T12843] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073290121217) [ 719.904852][T12846] loop2: detected capacity change from 0 to 256 [ 720.020155][T12846] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 720.113739][ T5843] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 720.146495][T12846] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 720.363474][ T5843] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.373130][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.381646][ T5843] usb 2-1: Product: syz [ 720.386023][ T5843] usb 2-1: Manufacturer: syz [ 720.390849][ T5843] usb 2-1: SerialNumber: syz [ 720.550401][ T5843] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 720.567238][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 720.576715][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 720.689279][ T45] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 721.262578][ T5843] usb 2-1: USB disconnect, device number 7 [ 721.769852][ T45] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 721.777839][ T45] ath9k_htc: Failed to initialize the device [ 721.852772][ T5843] usb 2-1: ath9k_htc: USB layer deinitialized [ 722.362187][T12872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3230'. [ 722.371730][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3230'. [ 723.363031][ T5849] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 723.464141][T12892] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3237'. [ 723.619385][ T5849] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 723.628924][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.637633][ T5849] usb 2-1: Product: syz [ 723.642103][ T5849] usb 2-1: Manufacturer: syz [ 723.646929][ T5849] usb 2-1: SerialNumber: syz [ 723.683322][ T5849] usb 2-1: config 0 descriptor?? [ 723.910471][ T5849] hso 2-1:0.0: Can't find BULK IN endpoint [ 723.918972][ T5849] usb-storage 2-1:0.0: USB Mass Storage device detected [ 724.120752][ T45] usb 2-1: USB disconnect, device number 8 [ 724.337662][T12907] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3244'. [ 724.714065][T12910] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 725.370231][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 726.452753][T12939] netlink: 'syz.3.3260': attribute type 13 has an invalid length. [ 726.520323][T12939] gretap0: refused to change device tx_queue_len [ 726.529135][T12939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 727.478497][T12949] loop2: detected capacity change from 0 to 764 [ 727.558116][T12949] Symlink component flag not implemented [ 727.586903][T12949] Symlink component flag not implemented (101) [ 729.287458][T12979] loop4: detected capacity change from 0 to 256 [ 730.166107][T12996] loop3: detected capacity change from 0 to 256 [ 730.512287][T12996] FAT-fs (loop3): Directory bread(block 64) failed [ 730.519122][T12996] FAT-fs (loop3): Directory bread(block 65) failed [ 730.526323][T12996] FAT-fs (loop3): Directory bread(block 66) failed [ 730.533182][T12996] FAT-fs (loop3): Directory bread(block 67) failed [ 730.533404][T12996] FAT-fs (loop3): Directory bread(block 68) failed [ 730.546858][T12996] FAT-fs (loop3): Directory bread(block 69) failed [ 730.553840][T12996] FAT-fs (loop3): Directory bread(block 70) failed [ 730.560589][T12996] FAT-fs (loop3): Directory bread(block 71) failed [ 730.567638][T12996] FAT-fs (loop3): Directory bread(block 72) failed [ 730.574898][T12996] FAT-fs (loop3): Directory bread(block 73) failed [ 730.704211][T13000] ip6gre1: entered allmulticast mode [ 730.854952][T13004] loop1: detected capacity change from 0 to 128 [ 732.591811][ T5843] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 732.822131][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 732.872074][ T5843] usb 4-1: config 7 has an invalid interface number: 232 but max is 0 [ 732.880607][ T5843] usb 4-1: config 7 has no interface number 0 [ 732.887263][ T5843] usb 4-1: config 7 interface 232 has no altsetting 0 [ 733.025710][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=7d.1d [ 733.036085][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.044985][ T5843] usb 4-1: Product: syz [ 733.049392][ T5843] usb 4-1: Manufacturer: syz [ 733.054371][ T5843] usb 4-1: SerialNumber: syz [ 733.280735][T13034] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3306'. [ 733.393700][ T5843] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.232/input/input22 [ 733.407339][ T5134] bcm5974 4-1:7.232: could not read from device [ 733.454785][ T5134] bcm5974 4-1:7.232: could not read from device [ 733.476604][ T5134] bcm5974 4-1:7.232: could not read from device [ 733.510925][ T5843] usb 4-1: USB disconnect, device number 16 [ 733.511221][ T5134] bcm5974 4-1:7.232: could not read from device [ 733.560698][T13039] loop4: detected capacity change from 0 to 1024 [ 733.660594][T13039] EXT4-fs: Ignoring removed bh option [ 733.813494][T13039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.994511][T13039] EXT4-fs: Ignoring removed bh option [ 734.039349][T13039] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 734.364045][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.676231][T13058] xt_NFQUEUE: number of total queues is 0 [ 735.553535][T13066] loop2: detected capacity change from 0 to 4096 [ 735.604664][T13066] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 735.732597][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 736.030874][T13066] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 736.892099][ T5843] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 737.103111][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 737.151913][ T5843] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 737.161589][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.169811][ T5843] usb 5-1: Product: syz [ 737.174368][ T5843] usb 5-1: Manufacturer: syz [ 737.179167][ T5843] usb 5-1: SerialNumber: syz [ 737.266398][ T5843] r8152-cfgselector 5-1: Unknown version 0x0000 [ 737.277836][ T5843] r8152-cfgselector 5-1: config 0 descriptor?? [ 737.460577][T13093] loop3: detected capacity change from 0 to 4096 [ 737.572279][T13093] NILFS (loop3): invalid segment: Checksum error in segment payload [ 737.580536][T13093] NILFS (loop3): trying rollback from an earlier position [ 737.688222][T13093] NILFS (loop3): recovery complete [ 737.758287][ T5843] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 737.771535][T13101] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.922961][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3342'. [ 738.932498][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3342'. [ 738.941938][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3342'. [ 738.951887][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3342'. [ 738.961125][T13114] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3342'. [ 739.032629][T13118] loop0: detected capacity change from 0 to 256 [ 739.301127][T13118] FAT-fs (loop0): Directory bread(block 64) failed [ 739.308750][T13118] FAT-fs (loop0): Directory bread(block 65) failed [ 739.315914][T13118] FAT-fs (loop0): Directory bread(block 66) failed [ 739.322770][T13118] FAT-fs (loop0): Directory bread(block 67) failed [ 739.334189][T13118] FAT-fs (loop0): Directory bread(block 68) failed [ 739.341103][T13118] FAT-fs (loop0): Directory bread(block 69) failed [ 739.348104][T13118] FAT-fs (loop0): Directory bread(block 70) failed [ 739.355032][T13118] FAT-fs (loop0): Directory bread(block 71) failed [ 739.362061][T13118] FAT-fs (loop0): Directory bread(block 72) failed [ 739.368824][T13118] FAT-fs (loop0): Directory bread(block 73) failed [ 740.373200][T13139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.261222][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 742.322908][T13205] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 743.713020][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'. [ 744.182832][T13236] netlink: 'syz.1.3375': attribute type 33 has an invalid length. [ 744.190944][T13236] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3375'. [ 744.859457][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3379'. [ 745.201652][ T5843] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 745.275989][T13255] loop4: detected capacity change from 0 to 8 [ 745.423463][ T5843] usb 2-1: config 0 has an invalid interface number: 97 but max is 0 [ 745.432177][ T5843] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 745.442751][ T5843] usb 2-1: config 0 has no interface number 0 [ 745.449040][ T5843] usb 2-1: too many endpoints for config 0 interface 97 altsetting 109: 101, using maximum allowed: 30 [ 745.460460][ T5843] usb 2-1: config 0 interface 97 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 745.474703][ T5843] usb 2-1: config 0 interface 97 has no altsetting 0 [ 745.617427][ T5843] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 745.629679][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.638097][ T5843] usb 2-1: Product: syz [ 745.642581][ T5843] usb 2-1: Manufacturer: syz [ 745.647371][ T5843] usb 2-1: SerialNumber: syz [ 745.687871][T13256] loop0: detected capacity change from 0 to 4096 [ 745.703402][ T5843] usb 2-1: config 0 descriptor?? [ 745.714740][T13256] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 745.781862][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 745.845052][T13256] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 745.912613][T13256] ntfs3(loop0): ino=19, mi_enum_attr [ 745.977154][ T5843] usb 2-1: USB disconnect, device number 9 [ 746.025367][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.031036][T13256] ntfs3(loop0): failed to convert "c46c" to iso8859-14 [ 746.034799][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.034930][ T45] usb 4-1: Product: syz [ 746.035017][ T45] usb 4-1: Manufacturer: syz [ 746.035109][ T45] usb 4-1: SerialNumber: syz [ 746.066889][T13256] ntfs3(loop0): ino=20, mi_enum_attr [ 746.204662][ T45] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.274523][ T5842] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.644882][ C1] usb 4-1: ath9k_htc: invalid pkt_len (ff31) [ 746.865720][ T5849] usb 4-1: USB disconnect, device number 17 [ 747.299511][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 747.381696][ T5842] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 747.389411][ T5842] ath9k_htc: Failed to initialize the device [ 747.446016][ T5849] usb 4-1: ath9k_htc: USB layer deinitialized [ 747.937254][T13279] loop0: detected capacity change from 0 to 764 [ 748.056124][T13279] rock: directory entry would overflow storage [ 748.062829][T13279] rock: sig=0x4654, size=5, remaining=4 [ 748.829964][T13294] loop0: detected capacity change from 0 to 256 [ 749.033873][T13294] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 749.047294][T13294] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 750.199316][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'. [ 750.532135][T13322] loop4: detected capacity change from 0 to 64 [ 751.270436][T13334] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 751.279902][T13334] overlayfs: missing 'lowerdir' [ 751.986847][T13347] netlink: 'syz.3.3430': attribute type 21 has an invalid length. [ 751.995592][T13347] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3430'. [ 752.532068][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 753.348963][T13373] macvtap0: entered allmulticast mode [ 753.355182][T13373] veth0_macvtap: entered allmulticast mode [ 753.526828][T10306] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 753.764924][T10306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 753.776620][T10306] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 753.786830][T10306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 753.797131][T10306] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 753.807337][T10306] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 753.816734][T10306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.998020][T10306] usb 1-1: config 0 descriptor?? [ 754.113165][T13382] netlink: 'syz.1.3446': attribute type 28 has an invalid length. [ 754.232384][T10306] hdpvr 1-1:0.0: firmware version 0x8 dated [ 754.426569][T10306] hdpvr 1-1:0.0: device init failed [ 754.432432][T10306] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 754.502850][T10306] usb 1-1: USB disconnect, device number 17 [ 755.682934][T13406] xt_hashlimit: max too large, truncated to 1048576 [ 755.778447][T13398] loop1: detected capacity change from 0 to 4096 [ 755.852073][T13406] SET target dimension over the limit! [ 756.095188][T13408] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 756.141594][T13398] syz.1.3455: attempt to access beyond end of device [ 756.141594][T13398] loop1: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 756.246598][T13398] syz.1.3455: attempt to access beyond end of device [ 756.246598][T13398] loop1: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 756.301730][ T30] audit: type=1800 audit(1747309819.947:614): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3455" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 756.872949][T13409] loop0: detected capacity change from 0 to 4096 [ 756.921620][T13409] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 757.041901][T13415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3463'. [ 757.165883][T13419] loop2: detected capacity change from 0 to 64 [ 758.531482][T13437] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 759.185256][T13447] loop4: detected capacity change from 0 to 1024 [ 759.288003][T13449] netlink: 'syz.3.3479': attribute type 7 has an invalid length. [ 759.339418][T13451] netlink: 'syz.0.3480': attribute type 1 has an invalid length. [ 759.347629][T13451] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3480'. [ 759.922420][T13457] netlink: 'syz.3.3483': attribute type 28 has an invalid length. [ 759.930557][T13457] netlink: 'syz.3.3483': attribute type 3 has an invalid length. [ 759.938996][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3483'. [ 760.998163][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 762.626120][ T5842] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 762.849110][ T5842] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 762.858024][ T5842] usb 4-1: config 0 has no interface number 1 [ 762.864520][ T5842] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 762.874757][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.003533][ T5842] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 763.013241][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 763.021725][ T5842] usb 4-1: SerialNumber: syz [ 763.084380][ T5842] usb 4-1: config 0 descriptor?? [ 763.115626][ T5842] usb 4-1: Found UVC 0.00 device (0002:0000) [ 763.123044][ T5842] usb 4-1: No valid video chain found. [ 763.368850][T10306] usb 4-1: USB disconnect, device number 18 [ 764.652063][T13531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3519'. [ 765.784621][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 766.329668][T13559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.337260][T13559] IPv6: NLM_F_CREATE should be set when creating new route [ 766.344846][T13559] IPv6: NLM_F_CREATE should be set when creating new route [ 766.788173][T13567] tmpfs: Bad value for 'mpol' [ 767.211684][T10306] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 767.415344][T10306] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 767.426396][T10306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 767.525109][T10306] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 767.534824][T10306] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 767.543453][T10306] usb 1-1: Product: syz [ 767.547846][T10306] usb 1-1: Manufacturer: syz [ 767.552978][T10306] usb 1-1: SerialNumber: syz [ 767.605011][T10306] usb 1-1: config 0 descriptor?? [ 767.635239][T10306] usb 1-1: selecting invalid altsetting 0 [ 767.650668][T13581] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3545'. [ 767.932146][ T45] usb 1-1: USB disconnect, device number 18 [ 767.982872][T13585] loop4: detected capacity change from 0 to 128 [ 768.045745][T13585] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 768.073186][T13587] loop3: detected capacity change from 0 to 64 [ 768.098863][T13585] FAT-fs (loop4): Directory bread(block 148) failed [ 768.106674][T13585] FAT-fs (loop4): Directory bread(block 149) failed [ 768.113826][T13585] FAT-fs (loop4): Directory bread(block 150) failed [ 768.120698][T13585] FAT-fs (loop4): Directory bread(block 151) failed [ 768.127818][T13585] FAT-fs (loop4): Directory bread(block 152) failed [ 768.134878][T13585] FAT-fs (loop4): Directory bread(block 153) failed [ 768.142003][T13585] FAT-fs (loop4): Directory bread(block 154) failed [ 768.148859][T13585] FAT-fs (loop4): Directory bread(block 155) failed [ 768.174056][ T5842] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 768.220622][T13585] FAT-fs (loop4): Directory bread(block 148) failed [ 768.227963][T13585] FAT-fs (loop4): Directory bread(block 149) failed [ 768.382538][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 768.425574][ T5842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.435988][ T5842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.446215][ T5842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.456603][ T5842] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.469987][ T5842] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.479420][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.643267][ T8105] udevd[8105]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.714027][ T3839] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 769.032258][ T5842] usb 3-1: GET_CAPABILITIES returned 2f [ 769.038343][ T5842] usbtmc 3-1:16.0: can't read capabilities [ 769.192861][T13598] netlink: 'syz.4.3552': attribute type 10 has an invalid length. [ 769.201579][T13598] vlan1: entered allmulticast mode [ 769.206897][T13598] veth0_vlan: entered allmulticast mode [ 769.216602][T13599] loop0: detected capacity change from 0 to 64 [ 769.268235][T10306] usb 3-1: USB disconnect, device number 12 [ 769.306598][T13598] team0: Port device vlan1 added [ 770.232073][T13608] netlink: 'syz.0.3556': attribute type 3 has an invalid length. [ 770.240045][T13608] netlink: 'syz.0.3556': attribute type 1 has an invalid length. [ 770.248414][T13608] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3556'. [ 773.483516][ T5849] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 773.621835][ T5842] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 773.683597][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 773.693856][ T5849] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 773.704068][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 773.714186][ T5849] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 773.841833][ T5849] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 773.851503][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.854860][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 773.859663][ T5849] usb 5-1: Product: syz [ 773.869625][ T5849] usb 5-1: Manufacturer: syz [ 773.874688][ T5849] usb 5-1: SerialNumber: syz [ 773.890618][ T5842] usb 4-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 773.957449][ T5842] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 773.961866][ T5849] usb 5-1: config 0 descriptor?? [ 773.966824][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.980243][ T5842] usb 4-1: Product: syz [ 773.984997][ T5842] usb 4-1: Manufacturer: syz [ 773.989822][ T5842] usb 4-1: SerialNumber: syz [ 774.045533][ T5849] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 774.086023][ T5842] usb 4-1: config 0 descriptor?? [ 774.148174][ T5842] usb 4-1: bad CDC descriptors [ 774.155770][ T5842] usb 4-1: unsupported MDLM descriptors [ 774.248060][ T5849] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 774.352954][ T5842] usb 4-1: USB disconnect, device number 19 [ 774.449463][ T5849] usb 5-1: USB disconnect, device number 14 [ 774.739227][T13677] loop2: detected capacity change from 0 to 1024 [ 774.912302][T13677] syz.2.3591: attempt to access beyond end of device [ 774.912302][T13677] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 775.742041][T13691] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 777.228569][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.235597][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.551729][T13715] netlink: 'syz.2.3610': attribute type 4 has an invalid length. [ 777.559970][T13715] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3610'. [ 777.587243][T13715] : renamed from bond0 (while UP) [ 779.352654][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 779.735543][T13742] loop4: detected capacity change from 0 to 4096 [ 779.742629][T13747] loop3: detected capacity change from 0 to 1764 [ 779.779772][T13742] EXT4-fs: Ignoring removed mblk_io_submit option [ 779.854011][T13742] EXT4-fs (loop4): Test dummy encryption mode enabled [ 779.932870][T13742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.018676][T13742] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 780.029570][T13742] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 780.039544][T13742] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.3624: Failed to acquire dquot type 1 [ 780.479006][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.945224][T13763] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 781.999314][T13782] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 783.512239][T13807] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 783.681964][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3657'. [ 783.691844][T13813] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3657'. [ 783.762217][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 784.222879][T13818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3660'. [ 784.232619][T13818] netlink: 556 bytes leftover after parsing attributes in process `syz.0.3660'. [ 784.875811][T13823] loop4: detected capacity change from 0 to 4096 [ 784.896762][T13823] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 784.966953][T13831] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 785.131757][T13823] ntfs3(loop4): ino=1a, mi_enum_attr [ 785.137373][T13823] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 785.313265][T13823] ntfs3(loop4): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 785.621997][T13186] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22. [ 785.773657][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'. [ 786.971536][ T5089] Bluetooth: hci0: command tx timeout [ 787.624162][T13869] netlink: 'syz.2.3687': attribute type 1 has an invalid length. [ 787.632609][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 787.854130][T13875] loop3: detected capacity change from 0 to 2048 [ 787.900339][T13875] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 787.964355][T13879] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 787.966979][T13591] udevd[13591]: incorrect nilfs2 checksum on /dev/loop3 [ 788.032219][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.113509][T13875] Remounting filesystem read-only [ 788.119540][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.129852][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.141683][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.152759][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.163224][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.173772][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.184004][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.278339][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.288844][T13875] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 788.306295][ T30] audit: type=1800 audit(1747309851.987:615): pid=13875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3688" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 788.515639][T13881] netlink: 'syz.2.3691': attribute type 1 has an invalid length. [ 790.285084][T13911] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.3706'. [ 792.821684][ T45] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 793.047477][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 793.059605][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 793.071796][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 38699, setting to 64 [ 793.217574][ T45] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 793.227541][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.236023][ T45] usb 2-1: Product: syz [ 793.240413][ T45] usb 2-1: Manufacturer: syz [ 793.245385][ T45] usb 2-1: SerialNumber: syz [ 793.347913][ T45] usb 2-1: config 0 descriptor?? [ 793.357214][T13951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 793.367536][T13951] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 793.439375][ T45] option 2-1:0.0: GSM modem (1-port) converter detected [ 793.660966][T13961] loop0: detected capacity change from 0 to 2048 [ 793.703490][ T5842] usb 2-1: USB disconnect, device number 10 [ 793.750700][ T5842] option 2-1:0.0: device disconnected [ 793.837401][T13961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.863823][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'. [ 795.357021][T13989] netlink: 'syz.3.3745': attribute type 21 has an invalid length. [ 795.365462][T13989] netlink: 'syz.3.3745': attribute type 6 has an invalid length. [ 795.373694][T13989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3745'. [ 795.834729][T13998] netlink: 'syz.4.3749': attribute type 2 has an invalid length. [ 795.842983][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3749'. [ 796.509751][T14009] loop4: detected capacity change from 0 to 512 [ 796.598091][T14009] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3754: invalid indirect mapped block 256 (level 2) [ 796.632203][T14009] EXT4-fs (loop4): Remounting filesystem read-only [ 796.670726][T14009] EXT4-fs (loop4): 2 truncates cleaned up [ 796.679685][T14009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.795471][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.271609][T14024] netlink: 'syz.3.3760': attribute type 33 has an invalid length. [ 798.620829][ T30] audit: type=1326 audit(1747309862.297:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 798.643769][ T30] audit: type=1326 audit(1747309862.307:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 798.850226][ T30] audit: type=1326 audit(1747309862.367:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 798.875539][ T30] audit: type=1326 audit(1747309862.367:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 798.898173][ T30] audit: type=1326 audit(1747309862.367:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14043 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 799.881011][T14070] netlink: 'syz.3.3784': attribute type 1 has an invalid length. [ 800.390060][T14074] loop0: detected capacity change from 0 to 256 [ 800.425011][T14074] exfat: Deprecated parameter 'namecase' [ 800.431120][T14074] exfat: Deprecated parameter 'utf8' [ 800.513267][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'. [ 800.523351][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'. [ 800.572029][T14074] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 801.337849][T14092] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 801.972247][T14103] openvswitch: netlink: IPv4 tun info is not correct [ 801.989208][T14104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3801'. [ 802.942346][ T5842] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 803.199781][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 803.211543][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 803.311984][ T5842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 803.322294][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 803.330633][ T5842] usb 1-1: SerialNumber: syz [ 803.465327][ T5842] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 803.475212][ T5842] usb-storage 1-1:1.0: USB Mass Storage device detected [ 803.544859][ T5842] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 803.572474][ T5842] scsi host1: usb-storage 1-1:1.0 [ 803.660983][ T30] audit: type=1326 audit(1747309867.327:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14126 comm="syz.4.3812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 803.683221][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.690070][ T30] audit: type=1326 audit(1747309867.327:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14126 comm="syz.4.3812" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000 [ 803.712364][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.748145][T14134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3814'. [ 803.762442][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3813'. [ 804.606389][T14144] loop3: detected capacity change from 0 to 64 [ 804.766911][T14146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3820'. [ 804.870299][ T5842] usb 1-1: USB disconnect, device number 19 [ 804.958188][T14148] loop2: detected capacity change from 0 to 256 [ 804.983839][T14148] exfat: Deprecated parameter 'utf8' [ 805.085581][T14148] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 805.809423][T14156] loop2: detected capacity change from 0 to 8 [ 805.964225][T14156] SQUASHFS error: Failed to read block 0x2fc: -5 [ 805.970884][T14156] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 805.978588][T14156] SQUASHFS error: Unable to read directory block [247:26] [ 806.012168][T14162] loop0: detected capacity change from 0 to 256 [ 806.033380][T14162] exfat: Deprecated parameter 'namecase' [ 806.039636][T14162] exfat: Deprecated parameter 'namecase' [ 806.186658][T14162] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xec411bf1, utbl_chksum : 0xe619d30d) [ 807.213039][T14179] loop3: detected capacity change from 0 to 256 [ 809.339309][ T30] audit: type=1326 audit(1747309873.017:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 809.361630][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.369062][ T30] audit: type=1326 audit(1747309873.017:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 809.670283][ T30] audit: type=1326 audit(1747309873.087:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 809.693694][ T30] audit: type=1326 audit(1747309873.087:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 809.715925][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.723110][ T30] audit: type=1326 audit(1747309873.087:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.2.3853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 809.745293][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.998546][T14223] loop2: detected capacity change from 0 to 64 [ 810.062263][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 810.682608][T14235] hsr0: entered promiscuous mode [ 810.788081][T14238] netlink: 'syz.3.3865': attribute type 3 has an invalid length. [ 810.796459][T14238] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3865'. [ 811.126186][T14241] loop4: detected capacity change from 0 to 256 [ 813.682545][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3889'. [ 813.692010][T14285] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 813.699996][T14285] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 813.708221][T14285] netlink: 'syz.2.3889': attribute type 2 has an invalid length. [ 813.716346][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 814.602513][T14301] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3896'. [ 814.612098][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 815.301119][ T30] audit: type=1326 audit(1747309878.977:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.324350][ T30] audit: type=1326 audit(1747309878.977:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.346494][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.353165][ T30] audit: type=1326 audit(1747309878.997:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.375950][ T30] audit: type=1326 audit(1747309878.997:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.398087][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.404771][ T30] audit: type=1326 audit(1747309878.997:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.538234][T14315] loop1: detected capacity change from 0 to 16 [ 815.659122][T14315] erofs (device loop1): mounted with root inode @ nid 36. [ 815.824976][ T30] audit: type=1326 audit(1747309879.507:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.847177][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.857153][T14320] netlink: 'syz.4.3906': attribute type 30 has an invalid length. [ 815.865786][T14320] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 815.875479][T14320] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 815.930246][ T30] audit: type=1326 audit(1747309879.577:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.953609][ T30] audit: type=1326 audit(1747309879.577:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.976495][ T30] audit: type=1326 audit(1747309879.577:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14318 comm="syz.3.3908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 815.998640][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.006081][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3907'. [ 816.622877][T14333] loop0: detected capacity change from 0 to 64 [ 817.842448][T14352] loop4: detected capacity change from 0 to 1024 [ 818.046571][T14352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.210409][T14360] loop1: detected capacity change from 0 to 512 [ 818.230539][T14352] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3922: missing EA_INODE flag [ 818.289399][T14360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 818.332438][T14352] EXT4-fs (loop4): Remounting filesystem read-only [ 818.494704][T14360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.507855][T14360] ext4 filesystem being mounted at /776/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.544509][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.657334][T14360] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3924: corrupted xattr block 32: bad e_name length [ 818.985319][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.045693][T14386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3937'. [ 821.084820][T14394] loop3: detected capacity change from 0 to 4096 [ 821.147771][T14394] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 821.266037][T14405] vti0: entered promiscuous mode [ 821.359779][T14394] ntfs3(loop3): ino=19, mi_enum_attr [ 821.366420][T14394] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 821.582877][T14394] ntfs3(loop3): failed to convert "c46c" to iso8859-9 [ 821.639085][T14394] ntfs3(loop3): ino=20, mi_enum_attr [ 821.679711][T14394] ntfs3(loop3): ino=1e, mi_enum_attr [ 822.742970][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3959'. [ 822.753140][T14427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3959'. [ 822.808019][T14430] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 823.390834][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3962'. [ 823.608748][T14445] loop0: detected capacity change from 0 to 512 [ 823.666253][T14445] EXT4-fs: Ignoring removed orlov option [ 823.722834][T14445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 823.804185][T14445] EXT4-fs (loop0): orphan cleanup on readonly fs [ 823.899240][T14445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3966: bg 0: block 248: padding at end of block bitmap is not set [ 823.994772][T14445] Quota error (device loop0): write_blk: dquota write failed [ 824.003518][T14445] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 824.014090][T14445] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.3966: Failed to acquire dquot type 1 [ 824.081186][T14445] EXT4-fs (loop0): 1 truncate cleaned up [ 824.106165][T14445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 824.187788][T14450] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3968'. [ 824.228138][T14445] EXT4-fs: Ignoring removed orlov option [ 824.234841][T14445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 824.256399][T14453] loop3: detected capacity change from 0 to 512 [ 824.289325][T14445] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 824.374459][T14453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.387923][T14453] ext4 filesystem being mounted at /784/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.436406][T14445] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.3966: Abort forced by user [ 824.502302][T14445] EXT4-fs (loop0): Remounting filesystem read-only [ 824.509038][T14445] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 824.517976][T14445] ext4 filesystem being remounted at /799/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 824.798089][T14445] syz.0.3966 (14445) used greatest stack depth: 3120 bytes left [ 824.863274][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.867612][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.692681][T14476] loop2: detected capacity change from 0 to 1024 [ 825.823008][T14476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.836004][T14476] ext4 filesystem being mounted at /797/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.956642][T14482] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.3981'. [ 826.018040][T14476] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 826.090160][T14476] EXT4-fs (loop2): Remounting filesystem read-only [ 826.474889][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.645268][T14492] loop1: detected capacity change from 0 to 64 [ 826.752535][T14492] hfs: get root inode failed [ 826.961631][T14496] loop2: detected capacity change from 0 to 256 [ 828.446779][T10306] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 828.648567][T10306] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 828.659380][T10306] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 828.672504][T10306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.774485][T10306] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 829.065752][T14531] netlink: 'syz.1.4005': attribute type 11 has an invalid length. [ 829.074305][T14531] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4005'. [ 829.843884][T10306] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 830.051049][T10306] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 830.060193][T10306] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 830.124952][T10306] usb 5-1: USB disconnect, device number 15 [ 831.155214][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4019'. [ 831.178551][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4020'. [ 831.454279][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 831.579189][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'. [ 832.088393][T14571] loop4: detected capacity change from 0 to 2048 [ 832.216367][T14575] Invalid option length (1048180) for dns_resolver key [ 832.228164][T14571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 832.653918][T14581] loop3: detected capacity change from 0 to 1024 [ 833.145089][T13186] hfsplus: b-tree write err: -5, ino 4 [ 833.343680][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 833.353121][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 834.056757][T14601] loop0: detected capacity change from 0 to 256 [ 834.321573][T14595] loop3: detected capacity change from 0 to 4096 [ 834.375834][T14595] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 834.472381][T14606] loop4: detected capacity change from 0 to 256 [ 834.684720][T14606] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 834.792543][ T30] audit: type=1800 audit(1747309898.467:637): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4042" name="file1" dev="loop4" ino=46 res=0 errno=0 [ 835.777579][T14619] dummy0 speed is unknown, defaulting to 1000 [ 835.787782][T14619] dummy0 speed is unknown, defaulting to 1000 [ 835.795276][T14619] dummy0 speed is unknown, defaulting to 1000 [ 835.823952][T14619] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 835.867485][T14619] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 835.984865][T14619] dummy0 speed is unknown, defaulting to 1000 [ 835.994434][T14619] dummy0 speed is unknown, defaulting to 1000 [ 836.003332][T14619] dummy0 speed is unknown, defaulting to 1000 [ 836.012648][T14619] dummy0 speed is unknown, defaulting to 1000 [ 836.021810][T14619] dummy0 speed is unknown, defaulting to 1000 [ 837.452177][ T30] audit: type=1326 audit(1747309901.127:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14645 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 837.474864][ T30] audit: type=1326 audit(1747309901.127:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14645 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 837.497497][ T30] audit: type=1326 audit(1747309901.137:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14645 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 837.519936][ T30] audit: type=1326 audit(1747309901.137:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14645 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 838.079134][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4066'. [ 838.221897][ T5842] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 838.355141][T14662] xt_hashlimit: max too large, truncated to 1048576 [ 838.405298][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 838.442271][ T5842] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 838.450768][ T5842] usb 4-1: config 4 has no interface number 0 [ 838.457268][ T5842] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.471493][ T5842] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.481999][ T5842] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 838.492289][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.658331][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.665632][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.789069][ T5842] hub 4-1:4.128: USB hub found [ 839.016780][ T5842] hub 4-1:4.128: 2 ports detected [ 839.022637][ T5842] hub 4-1:4.128: Using single TT (err -22) [ 839.062536][T14671] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 839.224018][ T5842] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 839.230788][ T5842] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 839.364170][ T5842] usb 4-1: USB disconnect, device number 20 [ 841.504601][ T30] audit: type=1400 audit(1747309905.187:642): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=14709 comm="syz.1.4092" [ 841.572557][T14712] lo: entered promiscuous mode [ 841.577557][T14712] lo: entered allmulticast mode [ 841.587149][T14712] tunl0: entered promiscuous mode [ 841.592556][T14712] tunl0: entered allmulticast mode [ 841.602326][T14712] gre0: entered promiscuous mode [ 841.607500][T14712] gre0: entered allmulticast mode [ 841.742487][T14712] gretap0: entered promiscuous mode [ 841.747993][T14712] gretap0: entered allmulticast mode [ 841.757745][T14712] erspan0: entered promiscuous mode [ 841.763357][T14712] erspan0: entered allmulticast mode [ 841.773309][T14712] ip_vti0: entered promiscuous mode [ 841.778721][T14712] ip_vti0: entered allmulticast mode [ 841.789226][T14712] ip6_vti0: entered promiscuous mode [ 841.794951][T14712] ip6_vti0: entered allmulticast mode [ 841.805982][T14712] sit0: entered promiscuous mode [ 841.811151][T14712] sit0: entered allmulticast mode [ 841.826369][T14712] ip6tnl0: entered promiscuous mode [ 841.831985][T14712] ip6tnl0: entered allmulticast mode [ 841.841879][T14712] ip6gre0: entered promiscuous mode [ 841.847296][T14712] ip6gre0: entered allmulticast mode [ 841.860472][T14712] syz_tun: entered promiscuous mode [ 841.866076][T14712] syz_tun: entered allmulticast mode [ 841.876295][T14712] ip6gretap0: entered promiscuous mode [ 841.882080][T14712] ip6gretap0: entered allmulticast mode [ 841.892234][T14712] bridge0: entered promiscuous mode [ 841.897653][T14712] bridge0: entered allmulticast mode [ 841.907529][T14712] vcan0: entered promiscuous mode [ 841.912882][T14712] vcan0: entered allmulticast mode [ 841.919578][T14712] : entered promiscuous mode [ 841.925232][T14712] bond_slave_1: entered promiscuous mode [ 841.931959][T14712] : entered allmulticast mode [ 841.936974][T14712] bond_slave_1: entered allmulticast mode [ 841.946679][T14712] 8021q: adding VLAN 0 to HW filter on device  [ 841.957496][T14712] team0: entered promiscuous mode [ 841.962950][T14712] team_slave_0: entered promiscuous mode [ 841.969717][T14712] team_slave_1: entered promiscuous mode [ 841.976612][T14712] team0: entered allmulticast mode [ 841.982078][T14712] team_slave_0: entered allmulticast mode [ 841.988001][T14712] team_slave_1: entered allmulticast mode [ 842.000225][T14712] dummy0: entered promiscuous mode [ 842.005690][T14712] dummy0: entered allmulticast mode [ 842.015893][T14712] nlmon0: entered promiscuous mode [ 842.021420][T14712] nlmon0: entered allmulticast mode [ 842.121871][T14712] caif0: entered promiscuous mode [ 842.127230][T14712] caif0: entered allmulticast mode [ 842.137278][T14712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 842.158086][ T45] dummy0 speed is unknown, defaulting to 1000 [ 842.460549][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'. [ 842.541544][T14722] loop0: detected capacity change from 0 to 64 [ 842.920166][T14726] loop2: detected capacity change from 0 to 256 [ 843.278700][T14726] FAT-fs (loop2): Directory bread(block 64) failed [ 843.286433][T14726] FAT-fs (loop2): Directory bread(block 65) failed [ 843.293922][T14726] FAT-fs (loop2): Directory bread(block 66) failed [ 843.300674][T14726] FAT-fs (loop2): Directory bread(block 67) failed [ 843.307643][T14726] FAT-fs (loop2): Directory bread(block 68) failed [ 843.314629][T14726] FAT-fs (loop2): Directory bread(block 69) failed [ 843.318616][T14730] loop3: detected capacity change from 0 to 1764 [ 843.321525][T14726] FAT-fs (loop2): Directory bread(block 70) failed [ 843.321641][T14726] FAT-fs (loop2): Directory bread(block 71) failed [ 843.341919][T14726] FAT-fs (loop2): Directory bread(block 72) failed [ 843.348687][T14726] FAT-fs (loop2): Directory bread(block 73) failed [ 843.439412][T14730] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 845.785537][T14773] loop0: detected capacity change from 0 to 8 [ 846.244805][T14779] SET target dimension over the limit! [ 846.392517][T14782] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4125'. [ 846.725666][T14787] loop0: detected capacity change from 0 to 16 [ 846.832475][T14787] erofs (device loop0): mounted with root inode @ nid 36. [ 846.946746][T14787] erofs (device loop0): failed to decompress -20 in[62, 4034] out[1849] [ 846.956043][T14787] erofs (device loop0): read error -117 @ 43 of nid 36 [ 849.205521][T14822] loop3: detected capacity change from 0 to 2048 [ 849.268681][T14822] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 849.331777][ T5842] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 849.404999][T14830] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 849.501587][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 849.588224][ T5842] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 849.598098][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.606759][ T5842] usb 1-1: Product: syz [ 849.611152][ T5842] usb 1-1: Manufacturer: syz [ 849.616096][ T5842] usb 1-1: SerialNumber: syz [ 849.702918][ T5842] r8152-cfgselector 1-1: Unknown version 0x0000 [ 849.709400][ T5842] r8152-cfgselector 1-1: config 0 descriptor?? [ 849.735853][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4147'. [ 849.972198][T14836] ieee802154 phy0 wpan0: encryption failed: -90 [ 850.170394][ T5842] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 852.000435][T14865] loop4: detected capacity change from 0 to 2048 [ 852.150312][T14873] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.253412][ T30] audit: type=1800 audit(1747309915.937:643): pid=14865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4161" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 852.269804][T14865] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 852.285447][T14865] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 852.358800][T14865] Remounting filesystem read-only [ 852.365052][T14865] NILFS (loop4): error -5 truncating bmap (ino=16) [ 852.580642][ T5796] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 852.992008][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4171'. [ 853.001471][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 853.203867][T14887] netlink: 'syz.3.4172': attribute type 8 has an invalid length. [ 853.364764][T14889] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4173'. [ 853.374237][T14889] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4173'. [ 853.386062][T14889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.691511][T14891] loop1: detected capacity change from 0 to 2048 [ 853.868213][T14896] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 854.145780][T14900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.028735][T14910] loop4: detected capacity change from 0 to 128 [ 855.071736][T14910] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 855.560853][T14916] loop0: detected capacity change from 0 to 8 [ 855.650619][T14918] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4188'. [ 856.816582][T14937] loop2: detected capacity change from 0 to 2048 [ 856.862127][T14937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 856.924698][T14937] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 858.001857][ T5843] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 858.032317][T14960] kAFS: unable to lookup cell '' [ 858.221952][ T5843] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00 [ 858.231563][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.239812][ T5843] usb 4-1: Product: syz [ 858.244480][ T5843] usb 4-1: Manufacturer: syz [ 858.249301][ T5843] usb 4-1: SerialNumber: syz [ 858.406876][ T5843] usb 4-1: config 0 descriptor?? [ 858.474172][ T5843] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 858.535156][ T5843] usb 4-1: Detected FT2232HP [ 858.916146][ T5843] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 858.964185][ T5843] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 859.025978][ T5843] usb 4-1: USB disconnect, device number 21 [ 859.054902][ T5843] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 859.066792][ T5843] ftdi_sio 4-1:0.0: device disconnected [ 859.520328][T14981] loop2: detected capacity change from 0 to 256 [ 859.713235][T14981] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 859.720815][T14981] FAT-fs (loop2): Filesystem has been set read-only [ 859.728732][T14981] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 860.657454][T14994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.679337][T14996] netlink: 'syz.0.4226': attribute type 10 has an invalid length. [ 860.687651][T14996] lo: entered promiscuous mode [ 860.694084][T14996] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 861.552381][T15010] batadv1: entered promiscuous mode [ 862.271966][ T5843] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 862.495292][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.505830][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 862.574548][ T5843] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 862.584455][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 862.592809][ T5843] usb 2-1: SerialNumber: syz [ 862.901957][ T5843] usb 2-1: 0:2 : does not exist [ 863.074679][ T5843] usb 2-1: USB disconnect, device number 11 [ 863.294263][T13591] udevd[13591]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.542336][T15031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 864.521167][T15043] loop1: detected capacity change from 0 to 256 [ 864.588144][T15045] loop0: detected capacity change from 0 to 164 [ 864.903066][ T5849] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 865.095525][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.106237][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.168385][ T5849] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 865.178115][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 865.186682][ T5849] usb 3-1: SerialNumber: syz [ 865.579294][ T5849] usb 3-1: 0:2 : does not exist [ 865.752717][ T5849] usb 3-1: USB disconnect, device number 13 [ 865.938568][T15063] netlink: 'syz.1.4259': attribute type 1 has an invalid length. [ 865.951579][T15063] netlink: 'syz.1.4259': attribute type 1 has an invalid length. [ 866.037997][T13591] udevd[13591]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.142371][ T5842] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 868.403450][ T5842] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 868.413065][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.421754][ T5842] usb 2-1: Product: syz [ 868.426171][ T5842] usb 2-1: Manufacturer: syz [ 868.431003][ T5842] usb 2-1: SerialNumber: syz [ 868.513272][ T5842] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 868.618316][ T5843] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 869.263557][ T5842] usb 2-1: USB disconnect, device number 12 [ 869.298757][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.697108][ T5843] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 869.705880][ T5843] ath9k_htc: Failed to initialize the device [ 869.772732][ T5842] usb 2-1: ath9k_htc: USB layer deinitialized [ 870.053582][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4285'. [ 870.451829][ T5849] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 870.660612][ T30] audit: type=1326 audit(1747309934.317:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.4289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 870.683449][ T30] audit: type=1326 audit(1747309934.317:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.0.4289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 870.791553][ T5849] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 870.800144][ T5849] usb 2-1: config 0 has no interface number 0 [ 870.806826][ T5849] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 870.818221][ T5849] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 870.828508][ T5849] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.841915][ T5849] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 870.858840][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.963470][ T5849] usb 2-1: config 0 descriptor?? [ 870.980244][ T5849] gspca_main: spca561-2.14.0 probing abcd:cdee [ 871.200365][ T5849] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 871.211346][ T5849] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.218532][ T5849] usb 2-1: MIDIStreaming interface descriptor not found [ 871.395007][ T5849] usb 2-1: USB disconnect, device number 13 [ 872.133222][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.942117][T15153] netlink: 'syz.2.4300': attribute type 3 has an invalid length. [ 873.402366][T15159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4303'. [ 873.412010][T15159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4303'. [ 874.862403][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'. [ 875.333935][T15191] loop3: detected capacity change from 0 to 256 [ 875.361877][T15191] exfat: Deprecated parameter 'utf8' [ 875.453337][T15191] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 876.828280][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 876.889074][T15205] loop0: detected capacity change from 0 to 4096 [ 876.992053][T15205] NILFS (loop0): invalid segment: Checksum error in segment payload [ 877.000289][T15205] NILFS (loop0): trying rollback from an earlier position [ 877.091856][T15205] NILFS (loop0): recovery complete [ 877.121659][T15219] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4333'. [ 877.139729][T15219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.195989][T15220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 877.316036][T15217] loop1: detected capacity change from 0 to 2048 [ 877.355749][T15217] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 877.476368][T15217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.519014][T15249] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4348'. [ 880.441874][T15256] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 881.147330][T15260] loop4: detected capacity change from 0 to 4096 [ 881.181970][T15266] loop0: detected capacity change from 0 to 1764 [ 881.351987][T15266] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 881.842072][T15278] tmpfs: Bad value for 'mpol' [ 882.422205][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4366'. [ 882.431708][T15286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4366'. [ 882.942106][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4370'. [ 883.142221][T15298] loop1: detected capacity change from 0 to 16 [ 883.516423][T15302] syz.3.4374: attempt to access beyond end of device [ 883.516423][T15302] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 883.837655][T15308] loop1: detected capacity change from 0 to 256 [ 884.071684][T15308] FAT-fs (loop1): Directory bread(block 64) failed [ 884.078670][T15308] FAT-fs (loop1): Directory bread(block 65) failed [ 884.085901][T15308] FAT-fs (loop1): Directory bread(block 66) failed [ 884.093147][T15308] FAT-fs (loop1): Directory bread(block 67) failed [ 884.100074][T15308] FAT-fs (loop1): Directory bread(block 68) failed [ 884.106962][T15308] FAT-fs (loop1): Directory bread(block 69) failed [ 884.113928][T15308] FAT-fs (loop1): Directory bread(block 70) failed [ 884.120840][T15308] FAT-fs (loop1): Directory bread(block 71) failed [ 884.128132][T15308] FAT-fs (loop1): Directory bread(block 72) failed [ 884.135061][T15308] FAT-fs (loop1): Directory bread(block 73) failed [ 884.237573][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'. [ 884.247475][T15314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4380'. [ 884.256852][T15314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4380'. [ 884.528636][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 884.812664][T15319] netlink: 'syz.3.4382': attribute type 11 has an invalid length. [ 884.821048][T15319] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4382'. [ 884.941901][T15321] program syz.2.4383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 886.224920][T15346] loop2: detected capacity change from 0 to 16 [ 886.231986][T10306] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 886.288876][T15346] erofs (device loop2): mounted with root inode @ nid 36. [ 886.300330][T15347] netlink: 12320 bytes leftover after parsing attributes in process `syz.0.4396'. [ 886.383356][ T5089] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000] [ 886.396471][T15346] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000] [ 886.406491][T15346] erofs (device loop2): read error -117 @ 0 of nid 89 [ 886.417895][ T30] audit: type=1800 audit(1747309950.107:646): pid=15346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4394" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 886.440764][T10306] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 886.450092][T10306] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 886.468298][T10306] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 886.477969][T10306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.486419][T10306] usb 4-1: Product: syz [ 886.490795][T10306] usb 4-1: Manufacturer: syz [ 886.496222][T10306] usb 4-1: SerialNumber: syz [ 886.797801][T10306] usb 4-1: USB disconnect, device number 22 [ 887.463257][T15359] tracefs: Unknown parameter 'gi' [ 887.812149][T15367] trusted_key: encrypted_key: master key parameter is missing [ 888.824890][T15385] loop4: detected capacity change from 0 to 256 [ 888.869952][T15385] exfat: Deprecated parameter 'utf8' [ 888.876700][T15385] exfat: Deprecated parameter 'namecase' [ 889.047607][T15385] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 889.297041][T15391] loop2: detected capacity change from 0 to 256 [ 889.352724][T15391] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 890.659924][T15410] loop2: detected capacity change from 0 to 256 [ 890.849248][T15414] libceph: resolve '0.0' (ret=-3): failed [ 891.149152][T15418] xt_policy: neither incoming nor outgoing policy selected [ 892.352861][T15436] netlink: 'syz.2.4440': attribute type 1 has an invalid length. [ 892.550896][T15440] loop0: detected capacity change from 0 to 1024 [ 892.585115][T15440] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 892.596743][T15440] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 892.606850][T15440] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 892.741771][T15440] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.4441: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 892.802164][T15440] EXT4-fs (loop0): no journal found [ 892.807613][T15440] EXT4-fs (loop0): can't get journal size [ 892.826564][T15440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 893.070552][T15451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4446'. [ 893.080125][T15451] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 893.089239][T15451] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 893.097470][T15451] netlink: 'syz.1.4446': attribute type 2 has an invalid length. [ 893.105610][T15451] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 893.113662][T15451] netlink: 'syz.1.4446': attribute type 1 has an invalid length. [ 893.220752][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.110851][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'. [ 895.666148][T15491] netlink: 'syz.4.4467': attribute type 24 has an invalid length. [ 895.830693][ T30] audit: type=1326 audit(1747309959.517:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 895.961773][ T30] audit: type=1326 audit(1747309959.567:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 895.985603][ T30] audit: type=1326 audit(1747309959.587:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 896.008256][ T30] audit: type=1326 audit(1747309959.587:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 896.030986][ T30] audit: type=1326 audit(1747309959.587:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15492 comm="syz.2.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 896.958880][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4477'. [ 897.821935][T15528] loop1: detected capacity change from 0 to 256 [ 898.079773][T15528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 898.785457][T15539] loop0: detected capacity change from 0 to 1764 [ 899.703211][T15556] loop4: detected capacity change from 0 to 1024 [ 899.905621][T15556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.058657][T15556] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4500: bg 0: block 260: invalid block bitmap [ 900.115255][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.122015][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.496386][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.624641][T15579] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 900.640338][T15578] nfs: Bad value for 'source' [ 901.778560][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'. [ 902.554653][T15607] loop4: detected capacity change from 0 to 512 [ 902.631943][T15607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 902.696925][T15607] EXT4-fs (loop4): orphan cleanup on readonly fs [ 902.785713][T15607] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 902.796183][T15607] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 902.806008][T15607] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4520: Failed to acquire dquot type 1 [ 902.934509][T15607] EXT4-fs (loop4): 1 truncate cleaned up [ 902.943276][T15607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 903.233600][T15618] No such timeout policy "syz1" [ 903.388736][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.684723][T15624] netlink: 'syz.3.4530': attribute type 2 has an invalid length. [ 903.693698][T15624] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4530'. [ 903.916217][T15628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4529'. [ 904.022603][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'. [ 905.252846][T15650] loop0: detected capacity change from 0 to 1024 [ 905.344028][T15650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.485586][T15650] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4542: bg 0: block 260: invalid block bitmap [ 905.779878][T15663] netlink: 'syz.1.4547': attribute type 1 has an invalid length. [ 905.963056][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.418924][T15670] vlan0: entered promiscuous mode [ 907.525623][T15687] gre2: entered promiscuous mode [ 907.530919][T15687] gre2: entered allmulticast mode [ 908.043149][ T5849] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 908.193471][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4564'. [ 908.231557][ T5849] usb 5-1: not running at top speed; connect to a high speed hub [ 908.283821][ T5849] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 908.292841][ T5849] usb 5-1: config 95 has no interface number 0 [ 908.299336][ T5849] usb 5-1: config 95 interface 1 has no altsetting 0 [ 908.379370][ T5849] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 908.389299][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.397807][ T5849] usb 5-1: Product: syz [ 908.403998][ T5849] usb 5-1: Manufacturer: syz [ 908.408812][ T5849] usb 5-1: SerialNumber: syz [ 908.602513][T15124] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 908.800426][T15124] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 908.812873][T15124] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.823158][T15124] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 908.832623][T15124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.944380][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4568'. [ 908.983997][T15124] hub 4-1:4.0: USB hub found [ 909.222279][T15124] hub 4-1:4.0: 13 ports detected [ 909.227577][T15124] usb 4-1: selecting invalid altsetting 1 [ 909.233871][T15124] hub 4-1:4.0: Using single TT (err -22) [ 909.250318][ T5849] usb 5-1: USB disconnect, device number 16 [ 909.282358][T15124] hub 4-1:4.0: insufficient power available to use all downstream ports [ 909.524867][T15124] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 909.533264][T15124] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 909.623175][T15124] usb 4-1: USB disconnect, device number 23 [ 909.793306][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4573'. [ 909.918655][T13591] udevd[13591]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.197561][T15738] netlink: 264 bytes leftover after parsing attributes in process `syz.2.4584'. [ 912.460544][T15763] loop0: detected capacity change from 0 to 512 [ 912.531664][T15763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 912.702600][T15763] EXT4-fs (loop0): 1 truncate cleaned up [ 912.710571][T15763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.084924][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.765405][T15783] loop3: detected capacity change from 0 to 256 [ 913.788906][T15783] exfat: Deprecated parameter 'utf8' [ 913.994042][T15783] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 914.117011][ T30] audit: type=1800 audit(1747309977.807:652): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4605" name="file1" dev="loop3" ino=56 res=0 errno=0 [ 915.278409][T15805] fuse: Bad value for 'fd' [ 916.552997][T15819] loop4: detected capacity change from 0 to 4096 [ 916.633099][T15819] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 917.942328][T15839] netlink: 'syz.4.4631': attribute type 9 has an invalid length. [ 917.950408][T15839] netlink: 'syz.4.4631': attribute type 7 has an invalid length. [ 917.958581][T15839] netlink: 'syz.4.4631': attribute type 8 has an invalid length. [ 918.449853][T15845] overlayfs: conflicting options: userxattr,metacopy=on [ 918.612362][T15847] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4637'. [ 918.621984][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4637'. [ 919.151790][T15856] loop0: detected capacity change from 0 to 256 [ 919.190360][T15857] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4641'. [ 919.200401][T15857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.581547][T15124] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 919.773039][T15124] usb 5-1: Using ep0 maxpacket: 32 [ 919.812779][T15124] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 919.824580][T15124] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 919.836424][T15124] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.969974][T15124] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 919.979423][T15124] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 919.988264][T15124] usb 5-1: Product: syz [ 919.999421][T15124] usb 5-1: Manufacturer: syz [ 920.004483][T15124] usb 5-1: SerialNumber: syz [ 920.169758][T15124] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input23 [ 920.397442][ T5842] usb 5-1: USB disconnect, device number 17 [ 920.492496][ T5842] appletouch 5-1:1.0: input: appletouch disconnected [ 920.747900][T15879] loop3: detected capacity change from 0 to 64 [ 921.024807][T15881] loop1: detected capacity change from 0 to 2048 [ 921.170040][T15881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 921.316981][T15885] loop2: detected capacity change from 0 to 2048 [ 921.420082][T15885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.182208][T15895] netlink: 'syz.2.4660': attribute type 21 has an invalid length. [ 923.135656][T15907] loop4: detected capacity change from 0 to 1764 [ 923.329902][T15914] loop1: detected capacity change from 0 to 128 [ 923.358610][T15914] FAT-fs (loop1): Directory bread(block 162) failed [ 923.365784][T15914] FAT-fs (loop1): Directory bread(block 163) failed [ 923.372790][T15914] FAT-fs (loop1): Directory bread(block 164) failed [ 923.379646][T15914] FAT-fs (loop1): Directory bread(block 165) failed [ 923.387017][T15914] FAT-fs (loop1): Directory bread(block 166) failed [ 923.394107][T15914] FAT-fs (loop1): Directory bread(block 167) failed [ 923.400979][T15914] FAT-fs (loop1): Directory bread(block 168) failed [ 923.407939][T15914] FAT-fs (loop1): Directory bread(block 169) failed [ 923.858820][T15919] loop3: detected capacity change from 0 to 1024 [ 924.089869][T15922] loop4: detected capacity change from 0 to 512 [ 924.133920][T15922] EXT4-fs: Ignoring removed nobh option [ 924.222795][T15922] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 924.261941][T15922] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4673: invalid indirect mapped block 2683928664 (level 1) [ 924.322410][T15922] EXT4-fs (loop4): 1 truncate cleaned up [ 924.330076][T15922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.390617][T13186] hfsplus: b-tree write err: -5, ino 4 [ 924.441057][T15928] bridge3: entered promiscuous mode [ 924.496267][T15922] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 924.762916][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.119747][T15956] netlink: 'syz.4.4689': attribute type 1 has an invalid length. [ 926.182710][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4688'. [ 926.434642][T15959] netlink: 'syz.1.4690': attribute type 5 has an invalid length. [ 927.339730][T15969] loop4: detected capacity change from 0 to 2048 [ 927.416046][T15969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 927.522706][T15124] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 927.735804][T15124] usb 4-1: config 0 has no interfaces? [ 927.741796][T15124] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.751137][T15124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.833136][T15124] usb 4-1: config 0 descriptor?? [ 928.104394][T15972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.114181][T15972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.185004][T15124] usb 4-1: USB disconnect, device number 24 [ 929.158759][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'. [ 929.241700][T15997] loop3: detected capacity change from 0 to 1024 [ 929.652436][ T3709] hfsplus: b-tree write err: -5, ino 4 [ 929.882583][T16009] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4715'. [ 931.651627][T16035] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 931.709829][T16035] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 932.321614][T16043] loop3: detected capacity change from 0 to 4096 [ 932.351534][T16043] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 932.639942][T16043] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 932.690644][T16043] ntfs3(loop3): Failed to load $Extend (-22). [ 932.697180][T16043] ntfs3(loop3): Failed to initialize $Extend. [ 932.818801][T16053] lo: left promiscuous mode [ 932.843445][T16053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.922532][T16055] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4738'. [ 933.290788][T16058] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 933.320764][T16059] netlink: 'syz.1.4740': attribute type 13 has an invalid length. [ 934.111680][T16071] loop3: detected capacity change from 0 to 1024 [ 934.253216][T16071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.292450][T16073] loop4: detected capacity change from 0 to 128 [ 934.355840][T16080] netlink: 7100 bytes leftover after parsing attributes in process `syz.1.4748'. [ 934.381054][T16073] FAT-fs (loop4): Directory bread(block 11554) failed [ 934.389766][T16073] FAT-fs (loop4): Directory bread(block 11555) failed [ 934.397121][T16073] FAT-fs (loop4): Directory bread(block 11556) failed [ 934.404361][T16073] FAT-fs (loop4): Directory bread(block 11557) failed [ 934.411560][T16073] FAT-fs (loop4): Directory bread(block 11558) failed [ 934.418613][T16073] FAT-fs (loop4): Directory bread(block 11559) failed [ 934.425882][T16073] FAT-fs (loop4): Directory bread(block 11560) failed [ 934.433004][T16073] FAT-fs (loop4): Directory bread(block 11561) failed [ 934.440553][T16073] FAT-fs (loop4): Directory bread(block 11562) failed [ 934.447856][T16073] FAT-fs (loop4): Directory bread(block 11563) failed [ 934.796059][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.944357][T16084] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 936.089178][T16096] 9pnet: Could not find request transport: 0xffffffffffffffff [ 936.320524][T16103] loop2: detected capacity change from 0 to 1024 [ 936.460465][T16103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.672293][T16103] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.4760: missing EA_INODE flag [ 936.741846][T16103] EXT4-fs (loop2): Remounting filesystem read-only [ 936.844951][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4765'. [ 936.912009][T16105] loop1: detected capacity change from 0 to 4096 [ 936.985968][T16105] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 937.053757][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.248877][T16105] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 937.355467][T16105] ntfs3(loop1): ino=5, "/" indx_read [ 937.537008][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4767'. [ 937.547087][T16121] vlan0: entered promiscuous mode [ 937.582816][T16122] loop3: detected capacity change from 0 to 512 [ 937.787495][T16122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.800821][T16122] ext4 filesystem being mounted at /936/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.188532][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.265247][T16130] loop1: detected capacity change from 0 to 1024 [ 938.390009][T16130] hfsplus: catalog name length corrupted [ 938.459951][T16135] loop0: detected capacity change from 0 to 512 [ 938.510795][T16135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 938.604376][T16135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.618012][T16135] ext4 filesystem being mounted at /960/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.969971][T16143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4776'. [ 939.046741][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.641637][ T5842] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 939.790473][T16158] erspan1: entered promiscuous mode [ 939.796156][T16158] erspan1: entered allmulticast mode [ 939.875195][ T5842] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 939.885214][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.893614][ T5842] usb 4-1: Product: syz [ 939.898072][ T5842] usb 4-1: Manufacturer: syz [ 939.902948][ T5842] usb 4-1: SerialNumber: syz [ 940.013923][ T5842] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 940.131499][ T5843] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 940.698594][T16166] i2c i2c-0: Invalid block write size 254 [ 940.725636][T15124] usb 4-1: USB disconnect, device number 25 [ 941.221707][ T5843] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 941.229534][ T5843] ath9k_htc: Failed to initialize the device [ 941.289958][T15124] usb 4-1: ath9k_htc: USB layer deinitialized [ 942.241907][T15124] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 942.443219][T15124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 942.453656][T15124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 942.526732][T15124] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 942.537058][T15124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.545522][T15124] usb 5-1: Product: syz [ 942.549990][T15124] usb 5-1: Manufacturer: syz [ 942.554930][T15124] usb 5-1: SerialNumber: syz [ 942.634780][T15124] usb 5-1: config 0 descriptor?? [ 942.709230][T15124] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 943.072979][T15124] usb 5-1: USB disconnect, device number 18 [ 943.433082][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.092196][T16215] loop2: detected capacity change from 0 to 512 [ 944.209160][T16215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.223379][T16215] ext4 filesystem being mounted at /968/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.279280][T16220] loop1: detected capacity change from 0 to 256 [ 944.368562][T16215] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #4: comm syz.2.4812: corrupted inode contents [ 944.434888][T16215] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #4: comm syz.2.4812: mark_inode_dirty error [ 944.464000][T16220] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 944.483452][T16215] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #4: comm syz.2.4812: corrupted inode contents [ 944.577451][T16215] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.4812: mark_inode_dirty error [ 944.642598][T16215] Quota error (device loop2): write_blk: dquota write failed [ 944.650574][T16215] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 944.661114][T16215] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.4812: Failed to acquire dquot type 1 [ 944.925614][T16227] loop0: detected capacity change from 0 to 1024 [ 945.038516][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.075959][T16227] ===================================================== [ 945.084922][T16227] BUG: KMSAN: uninit-value in hfsplus_lookup+0x674/0xf70 [ 945.092731][T16227] hfsplus_lookup+0x674/0xf70 [ 945.097672][T16227] __lookup_slow+0x560/0x760 [ 945.102695][T16227] lookup_slow+0x6a/0xd0 [ 945.107184][T16227] walk_component+0x444/0x650 [ 945.112326][T16227] path_lookupat+0x251/0x6b0 [ 945.117219][T16227] filename_lookup+0x2bd/0x800 [ 945.122551][T16227] user_path_at+0x91/0x3d0 [ 945.127223][T16227] do_sys_truncate+0x82/0x240 [ 945.132259][T16227] __ia32_compat_sys_truncate+0x77/0xc0 [ 945.138040][T16227] ia32_sys_call+0xa11/0x42c0 [ 945.143127][T16227] __do_fast_syscall_32+0xb0/0x110 [ 945.148474][T16227] do_fast_syscall_32+0x38/0x80 [ 945.154232][T16227] do_SYSENTER_32+0x1f/0x30 [ 945.158978][T16227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.165747][T16227] [ 945.168192][T16227] Uninit was created at: [ 945.172814][T16227] __alloc_frozen_pages_noprof+0x689/0xf00 [ 945.178875][T16227] alloc_pages_mpol+0x328/0x860 [ 945.184544][T16227] alloc_frozen_pages_noprof+0xf7/0x200 [ 945.190369][T16227] allocate_slab+0x24d/0x1210 [ 945.195532][T16227] ___slab_alloc+0xfec/0x3480 [ 945.200427][T16227] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 945.208487][T16227] hfsplus_alloc_inode+0x5a/0xd0 [ 945.213918][T16227] alloc_inode+0x87/0x4a0 [ 945.218455][T16227] iget_locked+0x239/0x12d0 [ 945.223401][T16227] hfsplus_iget+0x5c/0xb80 [ 945.228040][T16227] hfsplus_btree_open+0x132/0x1c90 [ 945.233497][T16227] hfsplus_fill_super+0x1161/0x2740 [ 945.238950][T16227] get_tree_bdev_flags+0x6e3/0x920 [ 945.244465][T16227] get_tree_bdev+0x38/0x50 [ 945.249098][T16227] hfsplus_get_tree+0x35/0x40 [ 945.254170][T16227] vfs_get_tree+0xb0/0x5c0 [ 945.258813][T16227] do_new_mount+0x73c/0x1620 [ 945.263746][T16227] path_mount+0x6db/0x1e90 [ 945.268360][T16227] __se_sys_mount+0x6eb/0x7d0 [ 945.273703][T16227] __ia32_sys_mount+0xe2/0x150 [ 945.278698][T16227] ia32_sys_call+0x2733/0x42c0 [ 945.283924][T16227] __do_fast_syscall_32+0xb0/0x110 [ 945.289293][T16227] do_fast_syscall_32+0x38/0x80 [ 945.294550][T16227] do_SYSENTER_32+0x1f/0x30 [ 945.299300][T16227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.306134][T16227] [ 945.308609][T16227] CPU: 0 UID: 0 PID: 16227 Comm: syz.0.4817 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 945.321115][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.331557][T16227] ===================================================== [ 945.338682][T16227] Disabling lock debugging due to kernel taint [ 945.345179][T16227] Kernel panic - not syncing: kmsan.panic set ... [ 945.351756][T16227] CPU: 0 UID: 0 PID: 16227 Comm: syz.0.4817 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 945.365688][T16227] Tainted: [B]=BAD_PAGE [ 945.369952][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.380147][T16227] Call Trace: [ 945.383568][T16227] [ 945.386590][T16227] __dump_stack+0x26/0x30 [ 945.391091][T16227] dump_stack_lvl+0x53/0x270 [ 945.395864][T16227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 945.401857][T16227] dump_stack+0x1e/0x25 [ 945.406174][T16227] panic+0x4bd/0xd50 [ 945.410267][T16227] kmsan_report+0x29d/0x2a0 [ 945.414936][T16227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 945.420915][T16227] ? __msan_warning+0x96/0x120 [ 945.425824][T16227] ? hfsplus_lookup+0x674/0xf70 [ 945.430854][T16227] ? __lookup_slow+0x560/0x760 [ 945.435788][T16227] ? lookup_slow+0x6a/0xd0 [ 945.440366][T16227] ? walk_component+0x444/0x650 [ 945.445379][T16227] ? path_lookupat+0x251/0x6b0 [ 945.450306][T16227] ? filename_lookup+0x2bd/0x800 [ 945.455408][T16227] ? user_path_at+0x91/0x3d0 [ 945.460165][T16227] ? do_sys_truncate+0x82/0x240 [ 945.465163][T16227] ? __ia32_compat_sys_truncate+0x77/0xc0 [ 945.471037][T16227] ? ia32_sys_call+0xa11/0x42c0 [ 945.476017][T16227] ? __do_fast_syscall_32+0xb0/0x110 [ 945.481468][T16227] ? do_fast_syscall_32+0x38/0x80 [ 945.486659][T16227] ? do_SYSENTER_32+0x1f/0x30 [ 945.491495][T16227] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.498195][T16227] ? __hfsplus_brec_find+0x6d3/0x840 [ 945.503642][T16227] ? kmsan_get_metadata+0x105/0x1b0 [ 945.509018][T16227] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 945.515441][T16227] ? __msan_memcpy+0x108/0x1c0 [ 945.520373][T16227] ? hfsplus_bnode_read+0x2d3/0x350 [ 945.525732][T16227] ? kmsan_get_metadata+0x105/0x1b0 [ 945.531119][T16227] __msan_warning+0x96/0x120 [ 945.535896][T16227] hfsplus_lookup+0x674/0xf70 [ 945.540827][T16227] ? kmsan_get_metadata+0x105/0x1b0 [ 945.546272][T16227] ? filter_irq_stacks+0x49/0x190 [ 945.551543][T16227] ? kmsan_get_metadata+0x105/0x1b0 [ 945.556959][T16227] ? __pfx_hfsplus_lookup+0x10/0x10 [ 945.562368][T16227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 945.568481][T16227] ? __pfx_hfsplus_lookup+0x10/0x10 [ 945.573907][T16227] __lookup_slow+0x560/0x760 [ 945.578737][T16227] lookup_slow+0x6a/0xd0 [ 945.583211][T16227] walk_component+0x444/0x650 [ 945.588078][T16227] ? kmsan_get_metadata+0x105/0x1b0 [ 945.593488][T16227] path_lookupat+0x251/0x6b0 [ 945.598302][T16227] filename_lookup+0x2bd/0x800 [ 945.603277][T16227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 945.609307][T16227] ? strncpy_from_user+0x255/0x470 [ 945.614634][T16227] ? kmsan_get_metadata+0x105/0x1b0 [ 945.620052][T16227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 945.626137][T16227] user_path_at+0x91/0x3d0 [ 945.630855][T16227] do_sys_truncate+0x82/0x240 [ 945.635733][T16227] __ia32_compat_sys_truncate+0x77/0xc0 [ 945.641493][T16227] ia32_sys_call+0xa11/0x42c0 [ 945.646347][T16227] __do_fast_syscall_32+0xb0/0x110 [ 945.651677][T16227] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 945.657609][T16227] do_fast_syscall_32+0x38/0x80 [ 945.662672][T16227] do_SYSENTER_32+0x1f/0x30 [ 945.667379][T16227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.673933][T16227] RIP: 0023:0xf70ae539 [ 945.678139][T16227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 945.697938][T16227] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 945.706509][T16227] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000001 [ 945.714638][T16227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.722750][T16227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.730836][T16227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 945.738915][T16227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.747030][T16227] [ 945.750476][T16227] Kernel Offset: disabled [ 945.754881][T16227] Rebooting in 86400 seconds..