last executing test programs: 1.869467396s ago: executing program 4 (id=4804): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af25, &(0x7f0000000000)={0x1}) 1.719346226s ago: executing program 4 (id=4808): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) 1.670147827s ago: executing program 0 (id=4811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 1.609024195s ago: executing program 4 (id=4813): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x7, 0x0, &(0x7f00000000c0)) 1.502522824s ago: executing program 4 (id=4817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.424930509s ago: executing program 0 (id=4819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffd}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x4008800) 1.284427321s ago: executing program 0 (id=4823): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000080)={0x1, 0x1, 0x15, 0xf, 0x61, 0x0}) 1.190730823s ago: executing program 4 (id=4826): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.141589933s ago: executing program 0 (id=4827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000b00060001"], 0x1c}}, 0x0) 1.107162947s ago: executing program 1 (id=4830): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0xc0984124, 0x1000000000000) 1.041578704s ago: executing program 4 (id=4831): move_pages(0x0, 0x1fffff24, &(0x7f00000005c0)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000640), 0x2) execveat(0xffffffffffffffff, &(0x7f0000000980)='./file0/file0\x00', &(0x7f0000000a40)={[], 0x300}, 0x0, 0x800) 995.180074ms ago: executing program 3 (id=4833): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000d80)=@fd={0x9, 0xd, 0x4, 0x800, 0x9, {0x77359400}, {0x4, 0x0, 0x3, 0x7, 0x7, 0x2c, "db2e0a85"}, 0x401, 0x4, {}, 0x8}) 979.481201ms ago: executing program 0 (id=4834): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x80885659, 0x0) 873.656461ms ago: executing program 1 (id=4835): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd, 0x4000, 0xc, 0x0, 0x0}) 872.906971ms ago: executing program 3 (id=4836): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r0) 823.972191ms ago: executing program 2 (id=4837): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0xffffffffffffff9e, 0x0, 0x1, 0x6, 0x29, 0x0, @rand_addr=0x60010100, @private}}}}) 819.0911ms ago: executing program 0 (id=4838): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file1\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x5566, &(0x7f0000005a80)="$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") 771.741061ms ago: executing program 3 (id=4839): r0 = socket(0xa, 0x3, 0xfc) sendto$unix(r0, 0x0, 0x0, 0x48850, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) 758.033978ms ago: executing program 2 (id=4840): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100001e000100001300000000000401"], 0x114}], 0x1}, 0x4800) 704.020227ms ago: executing program 1 (id=4841): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 630.287343ms ago: executing program 2 (id=4842): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000033c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1490, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x13c0, 0x325, 0x378, 0x13c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0x1228, 0x1290, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0xfd, 0x0, './cgroup.net/syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@frag={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14f0) 623.531082ms ago: executing program 1 (id=4843): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x0, 0x7, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) 594.439856ms ago: executing program 3 (id=4844): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0xffffffff, 0x7358}) 418.867172ms ago: executing program 1 (id=4845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 418.656432ms ago: executing program 3 (id=4846): r0 = inotify_init1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x33d) 324.758423ms ago: executing program 2 (id=4847): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 304.148219ms ago: executing program 3 (id=4848): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000080)={[{@uid}, {@eas_rw}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e18, &(0x7f000000a040)="$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") 211.582731ms ago: executing program 2 (id=4849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 105.28873ms ago: executing program 1 (id=4850): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x2) 0s ago: executing program 2 (id=4851): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 's}z', 0x20, 0x3ff}, 0x30, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): erface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.973646][ T9964] ALSA: mixer_oss: invalid OSS volume 'é›' [ 194.420614][ T9881] BTRFS info (device loop4): balance: start [ 194.427683][ T9881] BTRFS info (device loop4): balance: ended with status: 0 [ 194.538527][ T4571] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 194.622675][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.629155][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.908759][ T4571] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 194.943453][ T4571] usb 4-1: config 2 interface 0 has no altsetting 0 [ 195.118875][ T4571] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 195.142284][ T4571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.176216][ T4571] usb 4-1: Product: syz [ 195.194486][T10009] vivid-001: ================= START STATUS ================= [ 195.214310][ T4571] usb 4-1: Manufacturer: syz [ 195.222721][ T4571] usb 4-1: SerialNumber: syz [ 195.227977][T10009] vivid-001: Enable Output Cropping: true [ 195.287197][T10009] vivid-001: Enable Output Composing: true [ 195.300561][ T4571] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 195.318481][T10009] vivid-001: Enable Output Scaler: true [ 195.324343][T10009] vivid-001: Tx RGB Quantization Range: Automatic [ 195.338552][ T4571] usb 4-1: selecting invalid altsetting 0 [ 195.382263][ T4571] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 195.398482][T10009] vivid-001: Transmit Mode: HDMI [ 195.404061][T10009] vivid-001: Display Present: true inactive [ 195.432011][ T9976] loop1: detected capacity change from 0 to 32768 [ 195.445202][T10009] vivid-001: Hotplug Present: 0x00000001 [ 195.466244][T10009] vivid-001: RxSense Present: 0x00000001 [ 195.495927][T10009] vivid-001: EDID Present: 0x00000001 [ 195.514463][ T4571] usb 4-1: USB disconnect, device number 14 [ 195.555348][T10009] vivid-001: ================== END STATUS ================== [ 195.764047][T10024] loop4: detected capacity change from 0 to 256 [ 195.878942][T10024] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 195.902829][T10024] FAT-fs (loop4): Filesystem has been set read-only [ 195.945621][ T9996] loop0: detected capacity change from 0 to 32768 [ 196.042793][T10034] xt_hashlimit: max too large, truncated to 1048576 [ 196.051014][ T9996] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 196.132188][ T9996] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 196.216054][T10046] loop2: detected capacity change from 0 to 256 [ 196.246312][ T9996] (syz.0.2655,9996,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 196.299866][T10046] loop2: Can't mount, would change RO state [ 196.358486][ T9996] (syz.0.2655,9996,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 196.367153][ T9996] (syz.0.2655,9996,1):ocfs2_mknod:298 ERROR: status = -2 [ 196.443620][T10054] netlink: 'syz.1.2675': attribute type 6 has an invalid length. [ 196.480451][T10054] netlink: 'syz.1.2675': attribute type 7 has an invalid length. [ 196.490362][ T9996] (syz.0.2655,9996,1):ocfs2_mknod:502 ERROR: status = -2 [ 196.507424][T10054] netlink: 'syz.1.2675': attribute type 8 has an invalid length. [ 196.508449][ T9996] (syz.0.2655,9996,1):ocfs2_create:676 ERROR: status = -2 [ 196.589960][T10056] netlink: 'syz.3.2677': attribute type 5 has an invalid length. [ 196.628573][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 196.870210][T10066] loop1: detected capacity change from 0 to 4096 [ 196.969530][T10066] ntfs: volume version 3.1. [ 197.105021][T10079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.474701][T10092] loop1: detected capacity change from 0 to 1764 [ 197.829760][T10068] loop3: detected capacity change from 0 to 32768 [ 197.975012][T10068] JBD2: Ignoring recovery information on journal [ 198.002315][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2704'. [ 198.018773][T10076] loop2: detected capacity change from 0 to 40427 [ 198.106950][T10076] F2FS-fs (loop2): build fault injection attr: rate: 10, type: 0x1ffff [ 198.119877][T10068] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 198.148071][T10076] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 198.178934][T10068] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 198.179040][T10068] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 198.207856][T10124] loop0: detected capacity change from 0 to 256 [ 198.234174][T10076] F2FS-fs (loop2): invalid crc value [ 198.249112][T10068] OCFS2: File system is now read-only. [ 198.254911][T10068] (syz.3.2683,10068,0):ocfs2_setattr:1302 ERROR: status = -117 [ 198.282334][T10076] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x5249/0x67c0 [ 198.317513][T10076] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 198.346654][T10124] FAT-fs (loop0): Directory bread(block 64) failed [ 198.360031][T10124] FAT-fs (loop0): Directory bread(block 65) failed [ 198.374817][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 198.404973][T10124] FAT-fs (loop0): Directory bread(block 66) failed [ 198.436328][T10124] FAT-fs (loop0): Directory bread(block 67) failed [ 198.488865][T10124] FAT-fs (loop0): Directory bread(block 68) failed [ 198.495511][T10124] FAT-fs (loop0): Directory bread(block 69) failed [ 198.520015][T10124] FAT-fs (loop0): Directory bread(block 70) failed [ 198.526868][T10124] FAT-fs (loop0): Directory bread(block 71) failed [ 198.574783][T10124] FAT-fs (loop0): Directory bread(block 72) failed [ 198.601221][T10124] FAT-fs (loop0): Directory bread(block 73) failed [ 198.614210][T10140] hsr0: mtu greater than device maximum [ 199.027237][T10146] loop4: detected capacity change from 0 to 4096 [ 199.082604][T10160] loop0: detected capacity change from 0 to 256 [ 199.159470][T10146] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 199.168018][T10165] openvswitch: netlink: Missing key (keys=40, expected=100) [ 199.467076][ T9] ntfs3: loop4: ino=1e, Internal error [ 199.508555][ T9] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 199.517805][T10178] loop1: detected capacity change from 0 to 128 [ 199.570675][T10180] x_tables: duplicate entry at hook 1 [ 199.600579][T10182] device wlan0 entered promiscuous mode [ 199.685645][T10187] netlink: 'syz.2.2736': attribute type 15 has an invalid length. [ 199.720667][T10189] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2738'. [ 199.747618][T10191] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2739'. [ 199.873648][T10197] loop0: detected capacity change from 0 to 8 [ 199.888886][T10198] xt_hashlimit: overflow, try lower: 3/0 [ 200.128055][T10214] SET target dimension over the limit! [ 200.202439][T10219] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 200.224274][T10219] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2753'. [ 200.241048][T10220] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 200.752001][T10254] loop1: detected capacity change from 0 to 256 [ 201.009759][ T4437] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 201.288624][ T4437] usb 1-1: Using ep0 maxpacket: 8 [ 201.408707][ T4437] usb 1-1: config 7 interface 0 has no altsetting 0 [ 201.628729][ T4437] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=58.70 [ 201.656973][ T4437] usb 1-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 201.686316][T10302] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2796'. [ 201.696350][ T4437] usb 1-1: Product: syz [ 201.717326][ T4437] usb 1-1: Manufacturer: syz [ 201.726542][ T4437] usb 1-1: SerialNumber: syz [ 201.886651][T10316] loop4: detected capacity change from 0 to 256 [ 202.018730][ T4571] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.027123][ T4437] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 202.098678][ T4437] pwc: Failed to set LED on/off time (-71) [ 202.118635][ T4437] pwc: send_video_command error -71 [ 202.124084][ T4437] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 202.158031][ T4437] Philips webcam: probe of 1-1:7.0 failed with error -71 [ 202.216489][ T4437] usb 1-1: USB disconnect, device number 12 [ 202.235686][T10330] sctp: [Deprecated]: syz.2.2808 (pid 10330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.235686][T10330] Use struct sctp_sack_info instead [ 202.278458][ T4571] usb 2-1: Using ep0 maxpacket: 16 [ 202.398813][ T4571] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 202.417966][ T4571] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.454588][ T4571] usb 2-1: config 0 has no interface number 0 [ 202.506164][T10342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.514165][T10342] IPv6: NLM_F_CREATE should be set when creating new route [ 202.521658][T10342] IPv6: NLM_F_CREATE should be set when creating new route [ 202.634815][ T4571] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 202.655800][ T4571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.682726][ T4571] usb 2-1: Product: syz [ 202.697217][ T4571] usb 2-1: Manufacturer: syz [ 202.723936][ T4571] usb 2-1: SerialNumber: syz [ 202.756645][ T4571] usb 2-1: config 0 descriptor?? [ 202.781240][T10351] loop4: detected capacity change from 0 to 2048 [ 202.848440][T10351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.018754][ T4571] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 203.025708][ T4571] usb 2-1: No valid video chain found. [ 203.139646][T10337] loop3: detected capacity change from 0 to 32768 [ 203.210572][T10365] loop4: detected capacity change from 0 to 4096 [ 203.256141][ T4571] usb 2-1: USB disconnect, device number 15 [ 203.265332][T10371] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2829'. [ 203.307469][T10365] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 203.318205][T10365] ntfs3: loop4: Failed to load $Extend. [ 203.348675][T10337] BTRFS: Invalid seeding and uuid-changed device detected [ 203.511152][ T4263] udevd[4263]: incorrect btrfs checksum on /dev/loop3 [ 203.606404][T10386] xt_TCPMSS: Only works on TCP SYN packets [ 203.777188][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2837'. [ 203.868090][T10400] x_tables: duplicate entry at hook 2 [ 204.005055][T10409] loop2: detected capacity change from 0 to 256 [ 204.131452][T10409] FAT-fs (loop2): Directory bread(block 64) failed [ 204.142817][T10409] FAT-fs (loop2): Directory bread(block 65) failed [ 204.175251][T10409] FAT-fs (loop2): Directory bread(block 66) failed [ 204.195396][T10409] FAT-fs (loop2): Directory bread(block 67) failed [ 204.224462][T10409] FAT-fs (loop2): Directory bread(block 68) failed [ 204.253398][T10409] FAT-fs (loop2): Directory bread(block 69) failed [ 204.308903][T10409] FAT-fs (loop2): Directory bread(block 70) failed [ 204.325269][T10409] FAT-fs (loop2): Directory bread(block 71) failed [ 204.359308][T10409] FAT-fs (loop2): Directory bread(block 72) failed [ 204.365899][T10409] FAT-fs (loop2): Directory bread(block 73) failed [ 204.631702][T10441] kAFS: unable to lookup cell ' [ 204.631702][T10441] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 204.631702][T10441] ' [ 205.570467][T10489] usb usb7: usbfs: process 10489 (syz.0.2885) did not claim interface 5 before use [ 205.580339][ T4451] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 205.798446][ T4587] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 205.818586][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.970401][ T4451] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 205.989962][ T4451] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.002272][ T4451] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.013691][ T4451] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 206.098633][ T4451] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.107762][ T4451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.120858][ T4451] usb 5-1: SerialNumber: syz [ 206.168686][ T4587] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 206.173055][ T4451] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 206.183837][ T4587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.195303][ T4587] usb 2-1: config 0 descriptor?? [ 206.198764][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.211421][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.242064][ T4587] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 206.308829][ T13] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.318289][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 206.327371][ T13] usb 4-1: SerialNumber: syz [ 206.387890][ T4451] usb 5-1: USB disconnect, device number 11 [ 206.631530][ T13] usb 4-1: 0:2 : does not exist [ 206.651963][ T13] usb 4-1: USB disconnect, device number 15 [ 206.668608][ T4587] gp8psk: usb out operation failed. [ 206.680048][ T4587] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 206.691899][ T4587] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 206.715072][ T4587] usb 2-1: USB disconnect, device number 16 [ 206.911957][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.963681][T10507] loop0: detected capacity change from 0 to 512 [ 207.014926][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2897'. [ 207.028172][T10513] netlink: 'syz.2.2910': attribute type 32 has an invalid length. [ 207.037654][T10507] EXT4-fs (loop0): 1 truncate cleaned up [ 207.053883][T10507] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 207.765900][T10565] netlink: 'syz.4.2925': attribute type 3 has an invalid length. [ 208.088462][ T4437] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 208.121653][T10591] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 208.145766][T10592] loop4: detected capacity change from 0 to 256 [ 208.260302][T10599] netlink: 'syz.2.2943': attribute type 1 has an invalid length. [ 208.268730][T10599] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2943'. [ 208.333297][T10592] blk_update_request: I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.349638][ T4437] usb 2-1: Using ep0 maxpacket: 8 [ 208.478846][ T4437] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.494799][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 208.502288][ T4437] usb 2-1: config 179 has no interface number 0 [ 208.518615][ T4437] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.556232][ T4437] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.596043][ T4437] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 34304, setting to 1024 [ 208.635306][ T4437] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.698836][ T4437] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 208.735121][ T4437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.799067][T10567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.828869][T10567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.043464][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 209.060427][ T4587] usb 2-1: USB disconnect, device number 17 [ 209.068448][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 209.077661][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.176004][T10596] loop0: detected capacity change from 0 to 32768 [ 209.246094][T10639] netlink: 'syz.2.2959': attribute type 21 has an invalid length. [ 209.261967][T10639] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2959'. [ 209.502492][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 209.656760][T10657] loop4: detected capacity change from 0 to 1024 [ 209.807266][T10657] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,dioread_lock,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 209.865056][T10657] ext4 filesystem being mounted at /616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.496390][T10705] loop0: detected capacity change from 0 to 256 [ 210.665043][T10705] FAT-fs (loop0): Directory bread(block 64) failed [ 210.688778][T10705] FAT-fs (loop0): Directory bread(block 65) failed [ 210.698772][T10705] FAT-fs (loop0): Directory bread(block 66) failed [ 210.711941][T10705] FAT-fs (loop0): Directory bread(block 67) failed [ 210.745762][T10722] loop4: detected capacity change from 0 to 164 [ 210.754568][T10705] FAT-fs (loop0): Directory bread(block 68) failed [ 210.763759][T10721] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2998'. [ 210.773466][T10705] FAT-fs (loop0): Directory bread(block 69) failed [ 210.788561][T10705] FAT-fs (loop0): Directory bread(block 70) failed [ 210.791374][T10724] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.3000'. [ 210.805896][T10705] FAT-fs (loop0): Directory bread(block 71) failed [ 210.811407][T10724] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.3000'. [ 210.826311][T10705] FAT-fs (loop0): Directory bread(block 72) failed [ 210.838871][T10722] Unable to read rock-ridge attributes [ 210.864986][T10705] FAT-fs (loop0): Directory bread(block 73) failed [ 210.877879][T10722] Unable to read rock-ridge attributes [ 210.913864][T10722] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 210.948074][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3003'. [ 210.968602][ T4437] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 211.089667][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.163952][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.187748][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.218588][ T4437] usb 4-1: Using ep0 maxpacket: 8 [ 211.261609][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 211.348931][ T4437] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.559931][ T4437] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 211.580172][ T4437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.588226][ T4437] usb 4-1: Product: syz [ 211.664342][ T4437] usb 4-1: Manufacturer: syz [ 211.684169][ T4437] usb 4-1: SerialNumber: syz [ 211.721542][ T4437] usb 4-1: config 0 descriptor?? [ 211.770509][T10757] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 211.800927][ T4437] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 211.823780][T10766] loop2: detected capacity change from 0 to 256 [ 211.892554][T10766] FAT-fs (loop2): Directory bread(block 64) failed [ 211.928973][T10766] FAT-fs (loop2): Directory bread(block 65) failed [ 211.938888][T10766] FAT-fs (loop2): Directory bread(block 66) failed [ 211.956528][T10766] FAT-fs (loop2): Directory bread(block 67) failed [ 211.969983][T10766] FAT-fs (loop2): Directory bread(block 68) failed [ 211.986894][T10766] FAT-fs (loop2): Directory bread(block 69) failed [ 212.001003][T10766] FAT-fs (loop2): Directory bread(block 70) failed [ 212.025838][ T4437] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 212.045505][ T4437] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 212.058532][T10766] FAT-fs (loop2): Directory bread(block 71) failed [ 212.065310][T10766] FAT-fs (loop2): Directory bread(block 72) failed [ 212.095560][T10766] FAT-fs (loop2): Directory bread(block 73) failed [ 212.233970][ T4571] usb 4-1: USB disconnect, device number 16 [ 212.571315][T10764] loop0: detected capacity change from 0 to 32768 [ 212.616397][T10762] loop4: detected capacity change from 0 to 32768 [ 212.671116][T10764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3030 (10764) [ 212.776723][T10764] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 212.838671][T10764] BTRFS info (device loop0): using free space tree [ 212.881241][T10764] BTRFS info (device loop0): has skinny extents [ 212.928725][T10762] XFS (loop4): Mounting V5 Filesystem [ 212.935010][T10803] netlink: 'syz.3.3037': attribute type 27 has an invalid length. [ 213.073038][T10762] XFS (loop4): Ending clean mount [ 213.190122][ T4189] XFS (loop4): Unmounting Filesystem [ 213.323286][T10764] BTRFS info (device loop0): enabling ssd optimizations [ 213.348619][ T4575] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 213.543256][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4263) [ 213.868809][ T4575] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 213.889143][ T4575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.910988][ T4575] usb 2-1: Product: syz [ 213.938430][ T4575] usb 2-1: Manufacturer: syz [ 213.950726][ T4575] usb 2-1: SerialNumber: syz [ 213.958551][ T4432] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 213.966654][ T4575] usb 2-1: config 0 descriptor?? [ 214.238687][ T4575] mos7840 2-1:0.0: required endpoints missing [ 214.368919][ T4432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 214.390776][T10876] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 214.399196][T10876] __nla_validate_parse: 2 callbacks suppressed [ 214.399212][T10876] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3062'. [ 214.414955][ T4432] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 214.435784][T10876] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 214.454475][ T4575] usb 2-1: USB disconnect, device number 18 [ 214.455848][ T4432] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 214.496874][ T4432] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 214.708805][ T4432] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 214.727903][T10895] kernel profiling enabled (shift: 5) [ 214.738801][ T4432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.746860][ T4432] usb 4-1: Product: syz [ 214.781722][ T4432] usb 4-1: Manufacturer: syz [ 214.786498][ T4432] usb 4-1: SerialNumber: syz [ 214.812672][ T4432] usb 4-1: config 0 descriptor?? [ 214.869590][ T4432] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 214.916688][T10903] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.983746][ T4435] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.065314][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3078'. [ 215.164268][ T4432] ums-isd200: probe of 4-1:0.0 failed with error -22 [ 215.311081][ T4575] usb 4-1: USB disconnect, device number 17 [ 215.342230][T10925] device bridge3 entered promiscuous mode [ 215.369153][ T4435] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.393129][ T4435] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.598812][ T4435] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 215.618550][ T4435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.627734][ T4435] usb 3-1: Product: syz [ 215.632255][ T4435] usb 3-1: Manufacturer: syz [ 215.637266][ T4435] usb 3-1: SerialNumber: syz [ 215.673952][ T4435] usb 3-1: config 0 descriptor?? [ 215.740873][ T4435] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 215.740946][T10936] loop4: detected capacity change from 0 to 4096 [ 215.789532][ T4435] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.820271][T10936] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 215.848985][ T4435] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 215.857783][ T4435] usb 3-1: media controller created [ 215.889585][T10936] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 215.941720][T10936] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 215.951074][ T4435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.004473][T10936] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 216.048490][T10936] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 216.088137][ T4435] DVB: Unable to find symbol tda10046_attach() [ 216.104263][ T4435] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 216.159337][ T4435] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 216.188644][T10936] ntfs: volume version 3.1. [ 216.224789][T10929] loop1: detected capacity change from 0 to 32768 [ 216.239962][T10936] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 216.306898][T10936] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 216.323187][T10936] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 216.375443][T10936] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 216.468868][ T4435] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 216.485551][ T4435] usb 3-1: USB disconnect, device number 10 [ 216.498765][T10936] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 216.517584][T10968] netlink: 'syz.3.3106': attribute type 29 has an invalid length. [ 216.555648][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 216.615915][T10968] netlink: 'syz.3.3106': attribute type 29 has an invalid length. [ 216.646850][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 216.803947][T10978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.824000][T10978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.858755][T10978] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.969753][T10978] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 217.394871][T11002] loop0: detected capacity change from 0 to 256 [ 217.531030][T11002] FAT-fs (loop0): Directory bread(block 64) failed [ 217.574305][T11002] FAT-fs (loop0): Directory bread(block 65) failed [ 217.608647][T11002] FAT-fs (loop0): Directory bread(block 66) failed [ 217.615338][T11002] FAT-fs (loop0): Directory bread(block 67) failed [ 217.648586][T11002] FAT-fs (loop0): Directory bread(block 68) failed [ 217.655452][T11002] FAT-fs (loop0): Directory bread(block 69) failed [ 217.706982][T11002] FAT-fs (loop0): Directory bread(block 70) failed [ 217.725962][T11002] FAT-fs (loop0): Directory bread(block 71) failed [ 217.727712][T11010] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3127'. [ 217.741136][T11002] FAT-fs (loop0): Directory bread(block 72) failed [ 217.771066][T11002] FAT-fs (loop0): Directory bread(block 73) failed [ 217.782997][T11010] netlink: 'syz.1.3127': attribute type 3 has an invalid length. [ 217.801574][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3127'. [ 217.991922][T10994] loop2: detected capacity change from 0 to 32768 [ 218.072066][T10992] loop4: detected capacity change from 0 to 32768 [ 218.108138][T10994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3118 (10994) [ 218.127502][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3131'. [ 218.172564][T10992] JBD2: Ignoring recovery information on journal [ 218.180054][T10994] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 218.213243][T11026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.221071][T10994] BTRFS info (device loop2): force zlib compression, level 3 [ 218.228979][T10994] BTRFS info (device loop2): force clearing of disk cache [ 218.236576][T10994] BTRFS info (device loop2): setting nodatasum [ 218.242913][T10994] BTRFS info (device loop2): allowing degraded mounts [ 218.249852][T10994] BTRFS info (device loop2): enabling disk space caching [ 218.258435][T10994] BTRFS info (device loop2): disk space caching is enabled [ 218.266386][T10994] BTRFS info (device loop2): has skinny extents [ 218.273703][T11026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.297177][T11031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.305265][T10992] JBD2: Unrecognised features on journal [ 218.332437][T11026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.346716][T10992] (syz.4.3119,10992,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 218.394988][T11026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.403627][T10992] (syz.4.3119,10992,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -22 [ 218.414762][T10992] (syz.4.3119,10992,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 218.415905][T11026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.423263][T10992] (syz.4.3119,10992,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 218.489234][T10992] (syz.4.3119,10992,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 218.506996][T11038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.556406][T11038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.595311][T11038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.675126][T10994] BTRFS info (device loop2): clearing free space tree [ 218.716005][T11038] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 218.725958][T10994] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.764051][T10992] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.783275][T10994] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.930149][T11062] netlink: 'syz.4.3143': attribute type 1 has an invalid length. [ 218.955548][T11066] loop1: detected capacity change from 0 to 256 [ 218.990959][T10994] BTRFS info (device loop2): balance: start [ 219.038654][T10994] BTRFS info (device loop2): balance: ended with status: 0 [ 219.108749][T11066] FAT-fs (loop1): Directory bread(block 64) failed [ 219.159390][T11066] FAT-fs (loop1): Directory bread(block 65) failed [ 219.219092][T11066] FAT-fs (loop1): Directory bread(block 66) failed [ 219.225965][T11066] FAT-fs (loop1): Directory bread(block 67) failed [ 219.304575][T11066] FAT-fs (loop1): Directory bread(block 68) failed [ 219.328757][T11066] FAT-fs (loop1): Directory bread(block 69) failed [ 219.363571][T11066] FAT-fs (loop1): Directory bread(block 70) failed [ 219.409030][T11066] FAT-fs (loop1): Directory bread(block 71) failed [ 219.446840][T11066] FAT-fs (loop1): Directory bread(block 72) failed [ 219.480085][T11066] FAT-fs (loop1): Directory bread(block 73) failed [ 219.535202][T11086] loop3: detected capacity change from 0 to 256 [ 219.558091][T11082] loop4: detected capacity change from 0 to 2048 [ 219.692910][T11082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.697676][T11086] FAT-fs (loop3): Directory bread(block 64) failed [ 219.746099][T11086] FAT-fs (loop3): Directory bread(block 65) failed [ 219.784004][T11086] FAT-fs (loop3): Directory bread(block 66) failed [ 219.824524][T11086] FAT-fs (loop3): Directory bread(block 67) failed [ 219.860041][T11086] FAT-fs (loop3): Directory bread(block 68) failed [ 219.903833][T11086] FAT-fs (loop3): Directory bread(block 69) failed [ 219.967532][T11093] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.978948][T11086] FAT-fs (loop3): Directory bread(block 70) failed [ 220.033407][T11086] FAT-fs (loop3): Directory bread(block 71) failed [ 220.076042][T11086] FAT-fs (loop3): Directory bread(block 72) failed [ 220.079311][T11099] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.089208][T11086] FAT-fs (loop3): Directory bread(block 73) failed [ 220.443414][T11090] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.536357][T11123] x_tables: ip_tables: osf match: only valid for protocol 6 [ 220.708578][T11090] usb 1-1: Using ep0 maxpacket: 8 [ 220.814339][ T4432] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 220.846932][T11141] loop2: detected capacity change from 0 to 4096 [ 220.874050][T11141] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 220.989279][T11090] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 221.009540][T11090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.032958][T11090] usb 1-1: Product: syz [ 221.037454][T11090] usb 1-1: Manufacturer: syz [ 221.065113][T11090] usb 1-1: SerialNumber: syz [ 221.071375][ T4183] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 221.081106][T11090] usb 1-1: config 0 descriptor?? [ 221.086158][ T4183] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 221.096642][ T4183] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 221.248676][ T4432] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.288791][ T4432] usb 5-1: not running at top speed; connect to a high speed hub [ 221.348632][T11090] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 221.378660][ T4432] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 221.568578][T11090] usb write operation failed. (-71) [ 221.579038][ T4432] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 221.580190][T11090] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.588602][ T4432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.605394][T11090] dvbdev: DVB: registering new adapter (Terratec H7) [ 221.607851][ T4432] usb 5-1: Product: syz [ 221.615098][T11090] usb 1-1: media controller created [ 221.619122][ T4432] usb 5-1: Manufacturer: syz [ 221.629459][ T4432] usb 5-1: SerialNumber: syz [ 221.649146][T11090] usb read operation failed. (-71) [ 221.668854][T11090] usb write operation failed. (-71) [ 221.675745][T11090] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 221.689563][T11090] usb 1-1: USB disconnect, device number 13 [ 221.941839][ T4432] vmk80xx 5-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 221.953347][ T4432] usb 5-1: USB disconnect, device number 12 [ 222.408455][ T4435] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 222.590910][T11183] loop2: detected capacity change from 0 to 2048 [ 222.639500][T11183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.665192][T11183] Invalid option length (0) for dns_resolver key [ 222.804926][ T4435] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 222.839995][ T4435] usb 2-1: config 0 has no interface number 0 [ 222.846342][ T4435] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 222.881399][ T4435] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.933019][T11208] ceph: No source [ 223.058909][ T4435] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 223.089920][ T4435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.128557][ T4435] usb 2-1: Product: syz [ 223.132990][ T4435] usb 2-1: Manufacturer: syz [ 223.137620][ T4435] usb 2-1: SerialNumber: syz [ 223.148994][T11216] loop4: detected capacity change from 0 to 2048 [ 223.155817][T11217] loop0: detected capacity change from 0 to 4096 [ 223.179501][ T4435] usb 2-1: config 0 descriptor?? [ 223.199012][T11153] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 223.219888][ T4435] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 223.244150][T11216] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 223.280318][ T4435] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 223.297103][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 223.372124][T11217] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 223.375165][T11216] UDF-fs: unknown compression code (0) [ 223.417111][T11217] ntfs3: loop0: Failed to load $Extend. [ 223.578728][T11233] loop2: detected capacity change from 0 to 128 [ 223.782181][ T4444] usb 2-1: USB disconnect, device number 19 [ 223.788471][T11239] loop3: detected capacity change from 0 to 1764 [ 223.797550][ T4444] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 223.872183][ T4444] cyberjack 2-1:0.69: device disconnected [ 223.914028][T11248] xt_TCPMSS: Only works on TCP SYN packets [ 223.941099][T11239] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 224.114470][T11257] x_tables: duplicate entry at hook 2 [ 224.326905][T11268] kAFS: unable to lookup cell ' [ 224.326905][T11268] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 224.326905][T11268] ' [ 224.497938][T11280] IPv6: sit1: Disabled Multicast RS [ 224.687075][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 225.008618][T11308] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 225.101191][T11310] device netdevsim0 entered promiscuous mode [ 225.145063][T11310] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.310694][T11322] dlm: no locking on control device [ 225.434685][T11283] loop3: detected capacity change from 0 to 32768 [ 225.460427][T11326] xt_cgroup: path and classid specified [ 225.512047][T11283] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.3250 (11283) [ 225.566281][T11283] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 225.609174][T11283] BTRFS info (device loop3): using free space tree [ 225.615846][T11283] BTRFS info (device loop3): has skinny extents [ 225.876962][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3286'. [ 225.954030][T11283] BTRFS info (device loop3): enabling ssd optimizations [ 226.091840][T11385] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 226.168034][T11391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.419357][ T4263] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop3 scanned by udevd (4263) [ 227.133916][T11426] IPv6: sit1: Disabled Multicast RS [ 227.358628][ T3161] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.483819][T11443] netlink: 'syz.4.3319': attribute type 3 has an invalid length. [ 227.598395][ T3161] usb 3-1: Using ep0 maxpacket: 32 [ 227.698247][T11453] loop0: detected capacity change from 0 to 16 [ 227.724763][ T3161] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 227.744214][ T3161] usb 3-1: config 0 has no interface number 0 [ 227.772460][ T3161] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 227.783134][T11453] erofs: (device loop0): mounted with root inode @ nid 36. [ 227.817499][ T3161] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 227.899944][T11457] netlink: 'syz.4.3329': attribute type 32 has an invalid length. [ 228.015000][ T3161] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 228.031893][ T3161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.047078][T11423] loop1: detected capacity change from 0 to 32768 [ 228.056639][ T3161] usb 3-1: Product: syz [ 228.062059][ T3161] usb 3-1: Manufacturer: syz [ 228.066795][ T3161] usb 3-1: SerialNumber: syz [ 228.093147][T11423] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.3308 (11423) [ 228.139483][ T3161] usb 3-1: config 0 descriptor?? [ 228.158860][T11420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.165971][T11420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.473544][ T4565] usb 3-1: USB disconnect, device number 11 [ 228.515230][T11470] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3334'. [ 228.571704][T11470] openvswitch: netlink: Flow key attribute not present in set flow. [ 228.809116][T11465] overlayfs: missing 'workdir' [ 228.829443][T11423] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 228.848464][T11423] BTRFS info (device loop1): force zlib compression, level 3 [ 228.852739][T11451] syz.3.3325 (11451): drop_caches: 3 [ 228.856442][T11423] BTRFS info (device loop1): force clearing of disk cache [ 228.906664][T11423] BTRFS info (device loop1): setting nodatasum [ 228.978459][T11423] BTRFS info (device loop1): allowing degraded mounts [ 228.985655][T11423] BTRFS info (device loop1): enabling disk space caching [ 229.072633][T11423] BTRFS info (device loop1): disk space caching is enabled [ 229.106564][T11423] BTRFS info (device loop1): has skinny extents [ 229.402821][T11423] BTRFS info (device loop1): clearing free space tree [ 229.409068][T11515] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 229.413914][T11423] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.426887][T11423] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.445555][T11515] [U] J"—e:ÀÆ" [ 229.619422][T11423] BTRFS info (device loop1): balance: start [ 229.636055][T11423] BTRFS info (device loop1): balance: ended with status: 0 [ 230.011301][T11496] loop4: detected capacity change from 0 to 32768 [ 230.138785][ T4261] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 230.372922][T11496] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 230.388372][ T4261] usb 1-1: Using ep0 maxpacket: 32 [ 230.460906][T11496] BTRFS info (device loop4): using free space tree [ 230.467616][T11496] BTRFS info (device loop4): has skinny extents [ 230.510111][ T4261] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.540699][ T4261] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.718885][ T4261] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 230.761440][ T4261] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 230.822821][ T4261] usb 1-1: Product: syz [ 230.827084][ T4261] usb 1-1: Manufacturer: syz [ 230.836111][T11496] BTRFS info (device loop4): enabling ssd optimizations [ 230.909731][ T4261] hub 1-1:4.0: USB hub found [ 231.057205][ T4263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4263) [ 231.128605][ T4261] hub 1-1:4.0: 8 ports detected [ 231.137491][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3375'. [ 231.148480][ T4261] hub 1-1:4.0: insufficient power available to use all downstream ports [ 231.307894][T11567] loop3: detected capacity change from 0 to 32768 [ 231.339515][T11567] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3367 (11567) [ 231.352370][ T4261] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 231.370740][ T4261] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 231.468668][T11567] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 231.477963][T11567] BTRFS info (device loop3): force zlib compression, level 3 [ 231.487526][ T4261] usb 1-1: USB disconnect, device number 14 [ 231.530998][T11567] BTRFS info (device loop3): force clearing of disk cache [ 231.531028][T11567] BTRFS info (device loop3): setting nodatasum [ 231.531050][T11567] BTRFS info (device loop3): allowing degraded mounts [ 231.531072][T11567] BTRFS info (device loop3): enabling disk space caching [ 231.531088][T11567] BTRFS info (device loop3): disk space caching is enabled [ 231.531105][T11567] BTRFS info (device loop3): has skinny extents [ 231.748163][T11567] BTRFS info (device loop3): clearing free space tree [ 231.790991][T11567] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.894989][T11567] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 232.059144][T11645] loop1: detected capacity change from 0 to 1764 [ 232.086603][T11567] BTRFS info (device loop3): balance: start [ 232.106164][T11567] BTRFS info (device loop3): balance: ended with status: 0 [ 232.189800][T11645] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 232.246673][T11651] tmpfs: Bad value for 'mpol' [ 232.884279][T11641] loop2: detected capacity change from 0 to 32768 [ 233.158647][ T4261] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 233.177913][T11653] loop0: detected capacity change from 0 to 32768 [ 233.359536][T11681] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.529004][ T4261] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 233.551916][T11690] netlink: 'syz.2.3409': attribute type 10 has an invalid length. [ 233.558505][ T4261] usb 2-1: config 2 interface 0 has no altsetting 0 [ 233.598629][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3409'. [ 233.618584][T11690] device virt_wifi0 entered promiscuous mode [ 233.624775][T11690] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 233.758768][ T4261] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 233.788252][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.795814][T11698] loop4: detected capacity change from 0 to 1024 [ 233.831360][ T4261] usb 2-1: Product: syz [ 233.835969][ T4261] usb 2-1: Manufacturer: syz [ 233.859788][ T4261] usb 2-1: SerialNumber: syz [ 233.900536][ T4261] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 233.900567][ T4261] usb 2-1: selecting invalid altsetting 0 [ 233.902557][ T4261] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 234.015478][ T4202] hfsplus: b-tree write err: -5, ino 25 [ 234.015721][ T4202] hfsplus: b-tree write err: -5, ino 4 [ 234.016119][ T4202] hfsplus: b-tree write err: -5, ino 2 [ 234.016213][ T4202] hfsplus: b-tree write err: -5, ino 26 [ 234.188147][ T4261] usb 2-1: USB disconnect, device number 20 [ 234.304913][T11684] loop0: detected capacity change from 0 to 32768 [ 234.337023][T11684] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3405 (11684) [ 234.389668][T11684] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 234.414100][T11684] BTRFS info (device loop0): force zlib compression, level 3 [ 234.466808][T11684] BTRFS info (device loop0): force clearing of disk cache [ 234.501421][T11684] BTRFS info (device loop0): setting nodatasum [ 234.505374][T11718] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 234.507919][T11684] BTRFS info (device loop0): allowing degraded mounts [ 234.558494][T11684] BTRFS info (device loop0): enabling disk space caching [ 234.589030][T11684] BTRFS info (device loop0): disk space caching is enabled [ 234.608387][T11684] BTRFS info (device loop0): has skinny extents [ 234.969573][T11684] BTRFS info (device loop0): clearing free space tree [ 234.976787][T11684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.990753][T11684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.150971][ T4565] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.276120][T11684] BTRFS info (device loop0): balance: start [ 235.318030][T11684] BTRFS info (device loop0): balance: ended with status: 0 [ 235.417633][T11770] loop2: detected capacity change from 0 to 1024 [ 235.435259][ T4565] usb 2-1: Using ep0 maxpacket: 32 [ 235.634634][T11711] loop3: detected capacity change from 0 to 32768 [ 235.727827][ T4565] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 235.762099][ T4565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.792849][ T4565] usb 2-1: Product: syz [ 235.797942][ T4565] usb 2-1: Manufacturer: syz [ 235.819784][ T4565] usb 2-1: SerialNumber: syz [ 235.846012][ T4565] usb 2-1: config 0 descriptor?? [ 235.899613][ T4565] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 235.953143][ T9] hfsplus: b-tree write err: -5, ino 25 [ 235.963140][ T9] hfsplus: b-tree write err: -5, ino 4 [ 236.018666][ T9] hfsplus: b-tree write err: -5, ino 2 [ 236.024454][ T9] hfsplus: b-tree write err: -5, ino 26 [ 236.328982][ T4565] gspca_topro: reg_w err -71 [ 236.368391][ T4565] gspca_topro: Sensor soi763a [ 236.398612][ T4565] usb 2-1: USB disconnect, device number 21 [ 236.782231][T11809] loop4: detected capacity change from 0 to 2048 [ 236.837326][T11809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.089626][T11829] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3468'. [ 237.248413][ T4565] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 237.488508][ T4565] usb 1-1: Using ep0 maxpacket: 16 [ 237.614599][ T4565] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 237.625624][ T4565] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.669448][ T4565] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 237.686603][T11858] SET target dimension over the limit! [ 237.864836][ T4565] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 237.883112][ T4565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.916584][ T4565] usb 1-1: Product: syz [ 237.935682][ T4565] usb 1-1: Manufacturer: syz [ 237.952159][ T4565] usb 1-1: SerialNumber: syz [ 237.972323][ T4565] usb 1-1: config 0 descriptor?? [ 237.988835][ T4451] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 238.233936][ T4225] usb 1-1: USB disconnect, device number 15 [ 238.418637][ T4451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.504260][T11901] loop3: detected capacity change from 0 to 128 [ 238.608767][ T4451] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 238.619253][ T4451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.627368][ T4451] usb 2-1: Product: syz [ 238.662634][ T4451] usb 2-1: Manufacturer: syz [ 238.672269][ T4451] usb 2-1: SerialNumber: syz [ 238.692160][ T4451] usb 2-1: config 0 descriptor?? [ 238.740368][ T4451] powermate: probe of 2-1:0.0 failed with error -5 [ 238.910853][T11922] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3513'. [ 238.945139][ T4443] usb 2-1: USB disconnect, device number 22 [ 239.158093][T11937] netlink: 'syz.4.3519': attribute type 2 has an invalid length. [ 239.848566][T11970] loop2: detected capacity change from 0 to 256 [ 239.931744][T11970] FAT-fs (loop2): Directory bread(block 64) failed [ 239.945403][T11970] FAT-fs (loop2): Directory bread(block 65) failed [ 239.986861][T11970] FAT-fs (loop2): Directory bread(block 66) failed [ 240.009810][T11970] FAT-fs (loop2): Directory bread(block 67) failed [ 240.040084][T11970] FAT-fs (loop2): Directory bread(block 68) failed [ 240.062208][T11970] FAT-fs (loop2): Directory bread(block 69) failed [ 240.101659][T11970] FAT-fs (loop2): Directory bread(block 70) failed [ 240.121662][T11970] FAT-fs (loop2): Directory bread(block 71) failed [ 240.142281][T11970] FAT-fs (loop2): Directory bread(block 72) failed [ 240.184492][T11970] FAT-fs (loop2): Directory bread(block 73) failed [ 240.199050][T11982] xt_bpf: check failed: parse error [ 240.537739][T11997] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 240.767326][T12005] IPv6: sit2: Disabled Multicast RS [ 240.944785][T12015] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.191474][T12021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.213464][T12018] loop1: detected capacity change from 0 to 4096 [ 241.220472][ T4451] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.299519][T12018] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 241.427705][T12018] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 241.498791][ T4451] usb 5-1: Using ep0 maxpacket: 8 [ 241.513071][T12018] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 241.524546][T12032] loop2: detected capacity change from 0 to 8 [ 241.572373][T12018] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 241.659066][T12018] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 241.680895][T12018] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 241.685522][ T263] block nbd0: Attempted send on invalid socket [ 241.698201][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 241.710824][T12018] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 241.731590][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.738831][T12018] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 241.752556][T12034] XFS (nbd0): SB validate failed with error -5. [ 241.809021][T12018] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 241.830327][ T4451] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 241.850294][ T4451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.878937][ T4451] usb 5-1: Product: syz [ 241.883389][ T4451] usb 5-1: Manufacturer: syz [ 241.894740][T12018] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 241.908525][ T4451] usb 5-1: SerialNumber: syz [ 241.916535][ T4451] usb 5-1: config 0 descriptor?? [ 241.936839][T12018] ntfs: volume version 3.1. [ 241.988620][ T4451] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 242.046957][ T4451] dvb-usb: bulk message failed: -22 (2/0) [ 242.066638][ T4451] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.169611][ T4451] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 242.198248][ T4451] usb 5-1: media controller created [ 242.267449][ T4451] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.336368][ T4451] dvb-usb: bulk message failed: -22 (1/0) [ 242.355967][ T4451] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 242.440474][ T4451] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 242.504847][ T4451] dvb-usb: schedule remote query interval to 50 msecs. [ 242.526185][ T4451] dvb-usb: bulk message failed: -22 (2/0) [ 242.547897][ T4451] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 242.615267][ T4451] usb 5-1: USB disconnect, device number 13 [ 242.794977][ T4451] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 243.185519][T12102] loop2: detected capacity change from 0 to 64 [ 243.261370][T12098] loop4: detected capacity change from 0 to 4096 [ 243.357928][T12109] loop0: detected capacity change from 0 to 128 [ 243.466988][T12109] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 243.591550][T12118] netlink: 'syz.3.3606': attribute type 21 has an invalid length. [ 243.616911][T12118] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3606'. [ 243.743792][T12128] tmpfs: Bad value for 'mpol' [ 243.835616][T12134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 243.842921][T12134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.912042][T12134] vhci_hcd vhci_hcd.0: Device attached [ 244.071972][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3624'. [ 244.114530][ T4451] vhci_hcd: vhci_device speed not set [ 244.198506][ T4451] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 244.276535][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3628'. [ 244.307220][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3628'. [ 244.521110][T12135] vhci_hcd: connection reset by peer [ 244.559082][ T4237] vhci_hcd: stop threads [ 244.583382][ T4237] vhci_hcd: release socket [ 244.638053][ T4237] vhci_hcd: disconnect device [ 244.810929][ T4225] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 244.986348][T12194] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3644'. [ 245.002439][T12196] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 245.208456][ T4439] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 245.280464][T12175] loop4: detected capacity change from 0 to 32768 [ 245.368559][ T4225] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 245.388454][ T4443] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 245.394294][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.434560][ T4225] usb 4-1: Product: syz [ 245.448476][ T4225] usb 4-1: Manufacturer: syz [ 245.458619][ T4225] usb 4-1: SerialNumber: syz [ 245.530328][ T4225] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 245.659243][ T4439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.684819][ T4439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.716388][ T4439] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.765052][ T4439] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.786305][ T4439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.827751][ T4439] usb 2-1: config 0 descriptor?? [ 245.834196][ T4443] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.899746][ T4439] hub 2-1:0.0: USB hub found [ 245.940383][ T4443] usb 3-1: config 66 has an invalid interface number: 168 but max is 0 [ 245.964410][ T4443] usb 3-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 246.002469][ T4443] usb 3-1: config 66 has no interface number 0 [ 246.014060][ T4443] usb 3-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 246.033248][ T4443] usb 3-1: config 66 interface 168 has no altsetting 0 [ 246.087523][T12240] loop0: detected capacity change from 0 to 8 [ 246.108608][ T4439] hub 2-1:0.0: 14 ports detected [ 246.138895][ T4439] hub 2-1:0.0: insufficient power available to use all downstream ports [ 246.161191][T12240] SQUASHFS error: Failed to read block 0x8f: -5 [ 246.168108][T12240] SQUASHFS error: Unable to read data cache entry [8f] [ 246.182657][T12240] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 246.195791][T12240] SQUASHFS error: Unable to read data cache entry [8f] [ 246.209983][ T4225] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.213401][ T4444] kernel write not supported for file /1577/coredump_filter (pid: 4444 comm: kworker/0:12) [ 246.233072][T12240] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 246.246896][T12240] SQUASHFS error: Unable to read data cache entry [8f] [ 246.256974][T12240] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 246.258602][ T4443] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 246.271378][T12240] SQUASHFS error: Failed to read block 0x8f: -5 [ 246.288541][ T4443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.295513][T12240] SQUASHFS error: Failed to read block 0x8f: -5 [ 246.306769][ T4443] usb 3-1: Product: syz [ 246.321831][ T4443] usb 3-1: Manufacturer: syz [ 246.331768][ T4439] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 246.338247][ T4439] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 246.348462][ T4443] usb 3-1: SerialNumber: syz [ 246.399715][ T4439] usb 2-1: USB disconnect, device number 23 [ 246.596818][T12258] loop4: detected capacity change from 0 to 764 [ 246.630074][T12258] Symlink component flag not implemented [ 246.636136][T12258] Symlink component flag not implemented [ 246.665573][T12258] Symlink component flag not implemented (128) [ 246.671135][T11776] usb 4-1: USB disconnect, device number 18 [ 246.674431][T12258] Symlink component flag not implemented (122) [ 246.700796][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3678'. [ 246.714831][ T4443] usb 3-1: USB disconnect, device number 12 [ 246.724213][T12262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.960206][T12273] binder: Bad value for 'max' [ 246.997609][T12272] loop0: detected capacity change from 0 to 2048 [ 247.258413][ T4225] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 247.268132][ T4225] ath9k_htc: Failed to initialize the device [ 247.343509][T11776] usb 4-1: ath9k_htc: USB layer deinitialized [ 247.428462][T12300] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3697'. [ 247.496405][T12303] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 247.990738][T12340] delete_channel: no stack [ 248.059548][T12347] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 248.069280][ T4444] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 248.196083][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3723'. [ 248.354130][T12364] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.458892][ T4444] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 248.498478][ T4444] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 248.538482][ T4444] usb 4-1: config 220 interface 0 has no altsetting 0 [ 248.667607][T12376] loop4: detected capacity change from 0 to 256 [ 248.728761][ T4444] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.758428][ T4444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.786027][T12376] FAT-fs (loop4): Directory bread(block 64) failed [ 248.808735][ T4444] usb 4-1: Product: syz [ 248.813030][ T4444] usb 4-1: Manufacturer: syz [ 248.817932][ T4444] usb 4-1: SerialNumber: syz [ 248.833632][T12376] FAT-fs (loop4): Directory bread(block 65) failed [ 248.849908][T12376] FAT-fs (loop4): Directory bread(block 66) failed [ 248.877518][T12376] FAT-fs (loop4): Directory bread(block 67) failed [ 248.904029][T12376] FAT-fs (loop4): Directory bread(block 68) failed [ 248.921333][T12376] FAT-fs (loop4): Directory bread(block 69) failed [ 248.928072][T12376] FAT-fs (loop4): Directory bread(block 70) failed [ 248.962101][T12376] FAT-fs (loop4): Directory bread(block 71) failed [ 248.988501][T12376] FAT-fs (loop4): Directory bread(block 72) failed [ 249.015571][T12376] FAT-fs (loop4): Directory bread(block 73) failed [ 249.250400][ T4444] usb 4-1: USB disconnect, device number 19 [ 249.358622][ T4451] vhci_hcd: vhci_device speed not set [ 250.948508][T11776] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 251.208455][T11776] usb 5-1: Using ep0 maxpacket: 32 [ 251.328622][T11776] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 251.483487][T12494] netlink: 736 bytes leftover after parsing attributes in process `syz.2.3792'. [ 251.518691][T11776] usb 5-1: Dual-Role OTG device on HNP port [ 251.548494][T11776] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 251.582732][T11776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.601098][T11776] usb 5-1: Product: syz [ 251.621367][T11776] usb 5-1: Manufacturer: syz [ 251.630910][T12500] netlink: 'syz.3.3794': attribute type 32 has an invalid length. [ 251.652068][T11776] usb 5-1: SerialNumber: syz [ 251.676382][T11776] usb 5-1: config 0 descriptor?? [ 251.749327][T12440] loop1: detected capacity change from 0 to 40427 [ 251.756245][T11776] rndis_wlan 5-1:0.0: skipping garbage [ 251.762430][T11776] rndis_wlan 5-1:0.0: invalid descriptor buffer length [ 251.808424][T11776] usb 5-1: bad CDC descriptors [ 251.830419][T11776] rndis_host 5-1:0.0: skipping garbage [ 251.837768][T12440] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 251.850671][T11776] rndis_host 5-1:0.0: invalid descriptor buffer length [ 251.883862][T11776] usb 5-1: bad CDC descriptors [ 251.885239][T12440] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 251.893435][T11776] cdc_acm 5-1:0.0: skipping garbage [ 251.912892][T11776] cdc_acm 5-1:0.0: invalid descriptor buffer length [ 251.951713][T11776] usb 5-1: USB disconnect, device number 14 [ 251.979388][T12440] F2FS-fs (loop1): invalid crc value [ 252.020945][T12440] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.077350][T12509] loop3: detected capacity change from 0 to 4096 [ 252.196891][T12440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.346787][T12509] ntfs3: Cannot use different iocharset when remounting! [ 252.628400][ T4313] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 252.738451][ T4451] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 252.921064][T12540] loop3: detected capacity change from 0 to 512 [ 252.998664][T12540] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 253.027844][T12540] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 253.067274][T12540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 253.084967][T12540] System zones: 1-12 [ 253.102647][T12538] loop4: detected capacity change from 0 to 8192 [ 253.125936][T12540] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.3814: corrupted in-inode xattr [ 253.138938][ T4451] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.148556][ T4313] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 253.156977][T12540] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3814: couldn't read orphan inode 15 (err -117) [ 253.176915][ T4451] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 253.182605][ T4313] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 253.186135][ T4451] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.195822][T12540] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 253.237365][ T4313] usb 1-1: Product: syz [ 253.244561][ T4313] usb 1-1: Manufacturer: syz [ 253.253120][ T4313] usb 1-1: SerialNumber: syz [ 253.280090][ T4313] usb 1-1: config 0 descriptor?? [ 253.351073][ T4313] ch341 1-1:0.0: ch341-uart converter detected [ 253.398763][ T4451] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 253.407905][ T4451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.451488][ T4451] usb 3-1: Product: syz [ 253.455998][ T4451] usb 3-1: Manufacturer: syz [ 253.473828][ T4451] usb 3-1: SerialNumber: syz [ 253.481398][ T4451] usb 3-1: config 0 descriptor?? [ 253.686166][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'. [ 253.748520][ T4451] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 253.755274][ T4451] usb 3-1: No valid video chain found. [ 253.788479][ T4313] usb 1-1: failed to send control message: -71 [ 253.795475][ T4313] ch341-uart: probe of ttyUSB0 failed with error -71 [ 253.842466][ T4313] usb 1-1: USB disconnect, device number 16 [ 253.845179][T12570] autofs4:pid:12570:autofs_fill_super: called with bogus options [ 253.852489][ T4313] ch341 1-1:0.0: device disconnected [ 253.937954][T12576] netlink: 'syz.1.3829': attribute type 11 has an invalid length. [ 254.017213][ T4451] usb 3-1: USB disconnect, device number 13 [ 254.635480][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 254.767021][T12624] x_tables: unsorted underflow at hook 1 [ 255.410248][T12663] netlink: 420 bytes leftover after parsing attributes in process `syz.4.3873'. [ 255.896692][T12689] x_tables: duplicate underflow at hook 1 [ 256.071423][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.077921][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.628451][T12730] dlm: no locking on control device [ 256.765982][T12742] netlink: 'syz.4.3910': attribute type 10 has an invalid length. [ 256.805587][T12742] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3910'. [ 257.215330][T12776] netlink: 'syz.4.3923': attribute type 10 has an invalid length. [ 257.338565][ T4443] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 257.362039][T12790] netlink: 'syz.1.3930': attribute type 5 has an invalid length. [ 257.377349][T12790] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3930'. [ 257.540757][ T4451] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 257.542258][T12794] netlink: 'syz.1.3932': attribute type 30 has an invalid length. [ 257.588536][T11776] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 257.798582][ T4443] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.839754][T11776] usb 5-1: Using ep0 maxpacket: 32 [ 257.918573][ T4443] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.935746][ T4443] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 257.945636][ T4451] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 257.959423][T11776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.960786][ T4451] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.980303][T11776] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.004212][T12816] loop2: detected capacity change from 0 to 16 [ 258.011159][ T4451] usb 1-1: config 0 has no interface number 0 [ 258.017447][ T4451] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 258.037775][ T4451] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 258.047794][ T4451] usb 1-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.068741][ T4451] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 258.070415][T12816] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 258.081109][ T4451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.106877][ T4451] usb 1-1: config 0 descriptor?? [ 258.137879][T12820] loop1: detected capacity change from 0 to 4096 [ 258.138777][T11776] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 258.157879][T11776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.158720][ T4443] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 258.166775][T11776] usb 5-1: Product: syz [ 258.177353][ T4451] xbox_remote_probe: Unexpected endpoint_in [ 258.180812][T11776] usb 5-1: Manufacturer: syz [ 258.195435][T11776] usb 5-1: SerialNumber: syz [ 258.204140][T11776] usb 5-1: config 0 descriptor?? [ 258.222774][ T4443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.235471][ T4443] usb 4-1: Product: syz [ 258.240804][ T4443] usb 4-1: Manufacturer: syz [ 258.245878][ T4443] usb 4-1: SerialNumber: syz [ 258.261788][T12820] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 258.307202][T12822] overlayfs: workdir and upperdir must be separate subtrees [ 258.391006][ T4451] usb 1-1: USB disconnect, device number 17 [ 258.469507][T11776] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 258.506210][T11776] f0 e4 3d a7 d3 60 4f fe [ 258.511568][T11776] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 258.577629][T12834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3952'. [ 258.594777][T12834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3952'. [ 258.677657][T12836] loop1: detected capacity change from 0 to 512 [ 258.697915][ T4451] usb 5-1: USB disconnect, device number 15 [ 258.735230][ T4443] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 258.794901][ T4443] usb 4-1: USB disconnect, device number 20 [ 258.816109][T12836] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.857225][T12836] ext4 filesystem being mounted at /744/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.955040][T12849] netlink: 'syz.2.3958': attribute type 5 has an invalid length. [ 258.972275][T12849] device ip6erspan0 entered promiscuous mode [ 259.085566][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.733411][T12890] loop2: detected capacity change from 0 to 64 [ 259.939225][T12898] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 260.016917][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3985'. [ 260.101410][T12855] loop0: detected capacity change from 0 to 32768 [ 260.187598][T12855] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.3960 (12855) [ 260.264700][T12855] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 260.307814][T12855] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 260.340755][T12855] BTRFS info (device loop0): use zstd compression, level 3 [ 260.348125][T12855] BTRFS info (device loop0): using free space tree [ 260.389015][T12855] BTRFS info (device loop0): has skinny extents [ 260.507474][T12931] loop1: detected capacity change from 0 to 2048 [ 260.562646][T12929] loop2: detected capacity change from 0 to 8192 [ 260.639673][T12931] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.708693][T12954] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.725457][T12929] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 260.738647][T12929] REISERFS (device loop2): using ordered data mode [ 260.745350][T12929] reiserfs: using flush barriers [ 260.767501][T12948] loop4: detected capacity change from 0 to 4096 [ 260.800278][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 260.814511][T12929] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.855965][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 260.859615][T12855] BTRFS info (device loop0): enabling ssd optimizations [ 260.875261][T12929] REISERFS (device loop2): checking transaction log (loop2) [ 260.891766][T12948] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 260.928519][T12931] Remounting filesystem read-only [ 260.985986][T12929] REISERFS (device loop2): Using tea hash to sort names [ 261.011511][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.050666][T12929] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 261.060207][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.102925][T12962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4003'. [ 261.125648][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.173605][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.313469][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.386686][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.457304][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.518734][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.562352][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.613781][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.645545][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.665294][T12975] netlink: 'syz.3.4010': attribute type 2 has an invalid length. [ 261.715434][T12975] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 261.757404][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.767621][T12975] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4010'. [ 261.851815][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 261.856764][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 261.856781][ T26] audit: type=1400 audit(1772712485.437:7): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=12979 comm="syz.4.4012" [ 261.904629][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.999210][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.038370][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.130953][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.178596][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.248385][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.278826][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.323928][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.376650][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.418425][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.478836][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.538422][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.578115][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.628135][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.681578][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.694280][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4033'. [ 262.728494][T12931] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 262.758716][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4033'. [ 262.784652][T12931] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 262.810055][ T26] audit: type=1800 audit(1772712486.397:8): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3996" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 262.810549][T13031] overlayfs: missing 'lowerdir' [ 263.033610][T13039] netlink: 'syz.3.4040': attribute type 8 has an invalid length. [ 263.305528][T13055] loop3: detected capacity change from 0 to 64 [ 263.884334][T13077] loop1: detected capacity change from 0 to 1024 [ 263.938155][T13043] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.947614][T13043] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.067553][T13087] sctp: [Deprecated]: syz.3.4063 (pid 13087) Use of int in max_burst socket option. [ 264.067553][T13087] Use struct sctp_assoc_value instead [ 264.083273][ T4266] hfsplus: b-tree write err: -5, ino 25 [ 264.094153][ T4266] hfsplus: b-tree write err: -5, ino 4 [ 264.101602][ T4266] hfsplus: b-tree write err: -5, ino 2 [ 264.274898][T13091] loop3: detected capacity change from 0 to 512 [ 264.444297][T13091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.456529][T13091] ext4 filesystem being mounted at /767/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.645265][T13102] loop3: detected capacity change from 0 to 512 [ 264.690444][T13102] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.719968][T13102] ext4 filesystem being mounted at /768/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.783418][T13102] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 264.795041][T13102] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 264.806078][T13102] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.4070: Failed to acquire dquot type 0 [ 264.883978][T13043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.930992][T13043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.413219][T13043] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.422935][T13043] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.433325][T13043] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.442773][T13043] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.611864][T13116] xt_l2tp: v2 doesn't support IP mode [ 266.064919][T13154] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 266.158364][ T4313] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.414348][ T4313] usb 3-1: Using ep0 maxpacket: 8 [ 266.465405][T13181] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4108'. [ 266.515140][T13181] netlink: 'syz.3.4108': attribute type 3 has an invalid length. [ 266.538754][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 266.568884][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.588395][ T4313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.659004][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 266.694957][ T4313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 266.760206][ T4313] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 266.783182][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.849435][ T4313] usb 3-1: config 0 descriptor?? [ 266.878939][T13141] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 266.957898][T13200] loop4: detected capacity change from 0 to 4096 [ 267.057435][T13200] ntfs: volume version 3.1. [ 267.339138][T13226] x_tables: unsorted underflow at hook 2 [ 267.442577][T11776] usb 3-1: USB disconnect, device number 14 [ 267.836564][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4144'. [ 267.872353][T13256] IPv6: sit2: Disabled Multicast RS [ 268.020728][T13262] netlink: 'syz.4.4149': attribute type 5 has an invalid length. [ 268.117787][T13262] device  entered promiscuous mode [ 268.247781][T13277] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4155'. [ 268.264940][T13272] loop0: detected capacity change from 0 to 4096 [ 268.333083][T13272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 268.351219][T13277] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.375426][T13272] ntfs3: loop0: Failed to load $MFT. [ 268.412775][T13277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.420125][T13277] IPv6: NLM_F_CREATE should be set when creating new route [ 268.654123][T13272] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 269.349857][T13341] Unsupported ieee802154 address type: 0 [ 269.548515][ T4451] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 269.667111][T13364] netlink: 'syz.0.4194': attribute type 8 has an invalid length. [ 270.108855][ T4451] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 270.140474][ T4451] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 270.151419][T13388] loop2: detected capacity change from 0 to 8 [ 270.183565][ T4451] usb 5-1: Product: syz [ 270.196168][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4202'. [ 270.206161][ T4451] usb 5-1: Manufacturer: syz [ 270.252737][ T4451] usb 5-1: SerialNumber: syz [ 270.274187][T13388] SQUASHFS error: Unable to read inode 0xe3 [ 270.276968][T13391] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4202'. [ 270.350877][ T4451] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 270.534496][T13410] loop0: detected capacity change from 0 to 512 [ 270.568797][ T4451] vp7045: USB control message 'out' went wrong. [ 270.575322][ T4451] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 270.609834][ T4451] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 270.624179][ T4451] usb 5-1: USB disconnect, device number 16 [ 270.730821][T13410] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.4207: dx entry: limit 1024 != root limit 124 [ 270.755854][T13410] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4207: Corrupt directory, running e2fsck is recommended [ 270.846253][T13410] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 270.878718][T13410] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.4207: corrupted in-inode xattr [ 270.898394][ T4571] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 270.918628][T13410] EXT4-fs (loop0): Remounting filesystem read-only [ 270.925442][T13410] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4207: couldn't read orphan inode 15 (err -117) [ 270.963596][T13410] EXT4-fs (loop0): Remounting filesystem read-only [ 270.981285][T13410] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 271.048254][T13436] loop2: detected capacity change from 0 to 1764 [ 271.168448][ T4571] usb 4-1: Using ep0 maxpacket: 16 [ 271.288611][ T4571] usb 4-1: config index 0 descriptor too short (expected 176, got 162) [ 271.297122][ T4571] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.310289][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4224'. [ 271.329258][ T4571] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.342417][ T4571] usb 4-1: config 1 interface 0 has no altsetting 0 [ 271.508696][ T4571] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.545289][ T4571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.568837][ T4571] usb 4-1: Product: syz [ 271.573060][ T4571] usb 4-1: Manufacturer: syz [ 271.577674][ T4571] usb 4-1: SerialNumber: syz [ 271.608198][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4233'. [ 271.693557][T13469] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 271.749071][T13469] VFS: Can't find a romfs filesystem on dev nullb0. [ 271.749071][T13469] [ 271.806829][ T26] audit: type=1326 audit(1772712495.453:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ff989799 code=0x7ffc0000 [ 271.884919][ T26] audit: type=1326 audit(1772712495.453:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ff989799 code=0x7ffc0000 [ 271.968923][ T4571] usb 4-1: 0:2 : does not exist [ 272.012698][ T26] audit: type=1326 audit(1772712495.453:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f11ff989799 code=0x7ffc0000 [ 272.065457][ T26] audit: type=1326 audit(1772712495.453:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ff989799 code=0x7ffc0000 [ 272.143807][ T26] audit: type=1326 audit(1772712495.453:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13474 comm="syz.2.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ff989799 code=0x7ffc0000 [ 272.169094][ T4571] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 272.187731][T13499] loop2: detected capacity change from 0 to 8 [ 272.223685][ T4571] usb 4-1: USB disconnect, device number 21 [ 272.256999][T13499] SQUASHFS error: Unable to read inode 0x11f [ 272.671688][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.194554][T13560] loop3: detected capacity change from 0 to 1024 [ 273.240933][T13499] loop2: detected capacity change from 0 to 32768 [ 273.329453][T13569] loop4: detected capacity change from 0 to 1024 [ 273.393841][T13560] EXT4-fs (loop3): Test dummy encryption mode enabled [ 273.394534][T13499] (syz.2.4249,13499,0):ocfs2_read_journal_inode:1600 ERROR: status = -13 [ 273.409894][T13575] device ip6tnl1 entered promiscuous mode [ 273.418527][T13560] EXT4-fs (loop3): inline encryption not supported [ 273.462950][T13569] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 273.480342][T13560] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 273.488623][T13569] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 273.507359][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.523484][T13499] (syz.2.4249,13499,1):ocfs2_mark_dead_nodes:1885 ERROR: status = -13 [ 273.555352][T13499] (syz.2.4249,13499,1):ocfs2_check_volume:2481 ERROR: status = -13 [ 273.588446][T13499] (syz.2.4249,13499,1):ocfs2_check_volume:2493 ERROR: status = -13 [ 273.612857][T13499] (syz.2.4249,13499,1):ocfs2_mount_volume:1824 ERROR: status = -13 [ 273.628550][T13569] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.4279: Failed to acquire dquot type 0 [ 273.668894][T13569] EXT4-fs error (device loop4): mb_free_blocks:1874: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 273.725831][T13569] EXT4-fs (loop4): 1 truncate cleaned up [ 273.729636][T13499] (syz.2.4249,13499,1):ocfs2_fill_super:1177 ERROR: status = -13 [ 273.745850][T13569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.793224][T13588] loop1: detected capacity change from 0 to 256 [ 273.851754][T13569] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 273.868734][T13569] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 273.884817][T13569] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.4279: Failed to acquire dquot type 0 [ 274.045023][T13588] FAT-fs (loop1): Directory bread(block 64) failed [ 274.076097][T13588] FAT-fs (loop1): Directory bread(block 65) failed [ 274.124484][T13588] FAT-fs (loop1): Directory bread(block 66) failed [ 274.154387][T13588] FAT-fs (loop1): Directory bread(block 67) failed [ 274.173302][T13597] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 274.184104][T13588] FAT-fs (loop1): Directory bread(block 68) failed [ 274.205822][T13588] FAT-fs (loop1): Directory bread(block 69) failed [ 274.227659][T13588] FAT-fs (loop1): Directory bread(block 70) failed [ 274.361225][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 274.488881][T13613] netlink: 'syz.2.4298': attribute type 10 has an invalid length. [ 274.498569][T13588] FAT-fs (loop1): Directory bread(block 71) failed [ 274.505351][T13588] FAT-fs (loop1): Directory bread(block 72) failed [ 274.517845][T13588] FAT-fs (loop1): Directory bread(block 73) failed [ 274.669691][T13618] binder: 13617:13618 unknown command 1077961712 [ 274.699224][T13618] binder: 13617:13618 ioctl c0306201 200000000480 returned -22 [ 275.125785][T13643] autofs4:pid:13643:autofs_fill_super: called with bogus options [ 275.883751][T13678] loop4: detected capacity change from 0 to 1024 [ 275.968040][T13668] loop1: detected capacity change from 0 to 8192 [ 276.027086][T13668] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 276.060087][T13691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4335'. [ 276.096212][T13668] REISERFS (device loop1): using ordered data mode [ 276.103202][T13668] reiserfs: using flush barriers [ 276.118779][T13668] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.153857][T13678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.204108][T13668] REISERFS (device loop1): checking transaction log (loop1) [ 276.239709][T13678] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.4328: Attempting to read directory block (623) that is past i_size (638464) [ 276.262881][T13668] REISERFS (device loop1): Using r5 hash to sort names [ 276.317051][T13708] loop3: detected capacity change from 0 to 2048 [ 276.324593][T13668] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 276.369577][T13668] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 276.454715][T13708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.601046][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4348'. [ 276.941648][T13737] syz.1.4357 (13737): /proc/13734/oom_adj is deprecated, please use /proc/13734/oom_score_adj instead. [ 277.495838][T13771] tipc: Can't bind to reserved service type 0 [ 277.525657][T13774] netlink: 'syz.4.4375': attribute type 5 has an invalid length. [ 277.705956][T13779] loop4: detected capacity change from 0 to 256 [ 277.742017][T11776] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 277.750880][T13780] loop1: detected capacity change from 0 to 64 [ 277.841488][T13779] FAT-fs (loop4): Directory bread(block 64) failed [ 277.861490][T13779] FAT-fs (loop4): Directory bread(block 65) failed [ 277.899442][ T26] audit: type=1800 audit(1772712501.553:14): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4376" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 277.899784][T13779] FAT-fs (loop4): Directory bread(block 66) failed [ 278.018473][T13779] FAT-fs (loop4): Directory bread(block 67) failed [ 278.025402][T13779] FAT-fs (loop4): Directory bread(block 68) failed [ 278.049007][T13779] FAT-fs (loop4): Directory bread(block 69) failed [ 278.074183][T13779] FAT-fs (loop4): Directory bread(block 70) failed [ 278.091419][T13779] FAT-fs (loop4): Directory bread(block 71) failed [ 278.137275][T13779] FAT-fs (loop4): Directory bread(block 72) failed [ 278.154664][T13779] FAT-fs (loop4): Directory bread(block 73) failed [ 278.278872][T11776] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 278.288094][T11776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.312564][T11776] usb 4-1: Product: syz [ 278.317505][T11776] usb 4-1: Manufacturer: syz [ 278.338022][T11776] usb 4-1: SerialNumber: syz [ 278.364634][T11776] usb 4-1: config 0 descriptor?? [ 278.431573][T11776] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 278.719762][ T4443] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 278.728391][ T4565] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 278.776449][T13824] netlink: set zone limit has 8 unknown bytes [ 278.834958][T13827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4396'. [ 278.855775][T11776] usb 4-1: USB disconnect, device number 22 [ 278.978481][ T4443] usb 1-1: Using ep0 maxpacket: 8 [ 278.978591][ T4565] usb 3-1: Using ep0 maxpacket: 32 [ 279.011805][T13837] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.019256][ T4451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.128581][ T4565] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 279.147314][ T4565] usb 3-1: config 0 has no interface number 0 [ 279.164027][ T4443] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.170002][ T4565] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.179348][ T4443] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.206207][ T4443] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.216986][ T4565] usb 3-1: config 0 interface 85 has no altsetting 0 [ 279.296023][T13851] ipt_REJECT: ECHOREPLY no longer supported. [ 279.296084][T13849] usb usb8: usbfs: process 13849 (syz.4.4407) did not claim interface 0 before use [ 279.388625][ T4565] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 279.398739][ T4443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.404593][ T4565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.407893][ T4443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.448853][ T4565] usb 3-1: Product: syz [ 279.463467][ T4565] usb 3-1: Manufacturer: syz [ 279.468127][ T4565] usb 3-1: SerialNumber: syz [ 279.469252][ T4443] usb 1-1: Product: syz [ 279.479373][ T4443] usb 1-1: Manufacturer: syz [ 279.484009][ T4443] usb 1-1: SerialNumber: syz [ 279.496735][ T4565] usb 3-1: config 0 descriptor?? [ 279.560234][ T4565] appletouch 3-1:0.85: Could not find int-in endpoint [ 279.578647][ T4565] appletouch: probe of 3-1:0.85 failed with error -5 [ 279.599865][ T4443] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 279.615926][ T4443] cdc_ncm 1-1:1.0: bind() failure [ 279.623275][ T4565] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 279.808716][ T4443] cdc_mbim 1-1:1.1: CDC Union missing and no IAD found [ 279.839384][ T4443] cdc_mbim 1-1:1.1: bind() failure [ 279.852143][ T4565] usb 3-1: USB disconnect, device number 15 [ 279.964509][T13879] netlink: 'syz.4.4422': attribute type 21 has an invalid length. [ 280.011050][T13879] netlink: 'syz.4.4422': attribute type 6 has an invalid length. [ 280.034283][T13879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4422'. [ 280.045097][ T4443] usb 1-1: USB disconnect, device number 18 [ 280.398465][T13902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4433'. [ 280.464407][T13902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4433'. [ 280.604851][T13906] loop2: detected capacity change from 0 to 256 [ 280.661263][T13906] exFAT-fs (loop2): bogus data start sector [ 280.667329][T13906] exFAT-fs (loop2): failed to read boot sector [ 280.683076][T13906] exFAT-fs (loop2): failed to recognize exfat type [ 280.741462][T13915] MTD: Couldn't look up './bus': -15 [ 281.044941][T13898] loop1: detected capacity change from 0 to 32768 [ 281.109087][T13898] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4431 (13898) [ 281.178927][T13898] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 281.224829][T13898] BTRFS info (device loop1): force zlib compression, level 3 [ 281.268625][T13898] BTRFS info (device loop1): turning on flush-on-commit [ 281.275685][T13898] BTRFS info (device loop1): max_inline at 4096 [ 281.318977][T13898] BTRFS info (device loop1): using free space tree [ 281.325543][T13898] BTRFS info (device loop1): has skinny extents [ 281.459878][T13948] x_tables: unsorted entry at hook 3 [ 281.465468][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4455'. [ 281.720515][T13977] netlink: 'syz.0.4461': attribute type 1 has an invalid length. [ 281.728875][T13898] BTRFS info (device loop1): enabling ssd optimizations [ 281.767080][T13977] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4461'. [ 282.096386][T13994] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4469'. [ 282.139354][ T4263] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (4263) [ 282.148498][T13994] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4469'. [ 282.206857][T13994] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4469'. [ 282.250901][T13994] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4469'. [ 282.295630][T13994] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4469'. [ 282.618934][T14013] xt_TCPMSS: Only works on TCP SYN packets [ 282.779179][T14011] loop3: detected capacity change from 0 to 4096 [ 282.813639][T14026] IPv6: Can't replace route, no match found [ 282.838063][T14011] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 282.878506][T14011] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 282.959127][T14011] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 283.037797][T14011] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 283.093533][T14011] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 283.165848][T14011] ntfs: volume version 3.1. [ 283.180648][T14011] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 283.216379][T14011] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 283.272486][T14011] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 283.369939][T14011] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 283.412663][T14011] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 283.428487][ T4443] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 283.495569][T14011] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 283.549008][T14011] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 283.593147][ C0] sd 0:0:1:0: tag#2053 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 283.603297][ C0] sd 0:0:1:0: tag#2053 CDB: opcode=0x2 [ 283.609140][ C0] sd 0:0:1:0: tag#2053 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 283.618684][ C0] sd 0:0:1:0: tag#2053 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 283.627879][ C0] sd 0:0:1:0: tag#2053 CDB[20]: 47 [ 283.748550][ T4443] usb 3-1: Using ep0 maxpacket: 8 [ 283.794075][T14068] loop3: detected capacity change from 0 to 1024 [ 283.829014][T14070] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 283.866000][T14068] EXT4-fs (loop3): inline encryption not supported [ 283.893434][T14068] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.023722][T14068] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 284.052301][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.068657][ T4443] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 284.078107][ T4443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.080343][T14068] EXT4-fs error (device loop3): __ext4_new_inode:1076: comm syz.3.4503: reserved inode found cleared - inode=18 [ 284.086251][ T4443] usb 3-1: Product: syz [ 284.103222][ T4443] usb 3-1: Manufacturer: syz [ 284.112353][ T4443] usb 3-1: SerialNumber: syz [ 284.142147][T14087] openvswitch: netlink: Missing valid actions attribute. [ 284.149843][T14087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.212894][T14068] EXT4-fs (loop3): Remounting filesystem read-only [ 284.302513][T14093] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 284.328928][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.408756][T14093] CIFS mount error: No usable UNC path provided in device string! [ 284.408756][T14093] [ 284.443184][T14093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 284.488892][ T4443] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 284.548564][ T4443] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 284.638150][T14107] Cannot find del_set index 4 as target [ 284.656445][T14109] netlink: 'syz.1.4524': attribute type 4 has an invalid length. [ 284.673120][ T4443] usb 3-1: USB disconnect, device number 16 [ 285.072995][ T4322] udevd[4322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.085457][T14136] loop4: detected capacity change from 0 to 8 [ 285.238096][T14136] SQUASHFS error: Failed to read block 0x1ec: -5 [ 285.253857][T14136] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 285.263448][T14139] loop1: detected capacity change from 0 to 1024 [ 285.615823][T14163] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 285.980071][T14185] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 286.019979][T14193] loop1: detected capacity change from 0 to 64 [ 286.026694][T14185] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 286.039126][T14192] netlink: 'syz.3.4564': attribute type 6 has an invalid length. [ 286.057276][T14192] netlink: 'syz.3.4564': attribute type 7 has an invalid length. [ 286.077458][T14192] netlink: 'syz.3.4564': attribute type 8 has an invalid length. [ 286.120886][T14197] loop0: detected capacity change from 0 to 1024 [ 286.165576][T14200] __nla_validate_parse: 24 callbacks suppressed [ 286.165594][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4568'. [ 286.231595][T14197] EXT4-fs (loop0): Ignoring removed bh option [ 286.335813][T14197] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #3: block 1: comm syz.0.4567: lblock 1 mapped to illegal pblock 1 (length 1) [ 286.455304][T14197] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.4567: Failed to acquire dquot type 0 [ 286.493761][T14197] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.4567: Freeing blocks not in datazone - block = 0, count = 4096 [ 286.571224][T14197] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.4567: Invalid inode bitmap blk 0 in block_group 0 [ 286.591239][T14228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4581'. [ 286.605504][ T4266] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 286.662287][ T4266] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 286.668747][T14197] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 286.768601][T14197] EXT4-fs (loop0): 1 orphan inode deleted [ 286.779259][T14197] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; delalloc,max_dir_size_kb=0x0000000000000005,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: writeback. [ 286.787295][T14239] netlink: 'syz.2.4588': attribute type 1 has an invalid length. [ 286.822842][T14243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4587'. [ 286.931042][T14242] loop1: detected capacity change from 0 to 4096 [ 287.004900][T14197] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 287.053708][T14242] ntfs: volume version 3.1. [ 287.228483][T14258] netlink: 'syz.0.4594': attribute type 1 has an invalid length. [ 287.260725][T14258] netlink: 'syz.0.4594': attribute type 3 has an invalid length. [ 287.270950][T14260] loop3: detected capacity change from 0 to 256 [ 287.297862][T14258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4594'. [ 287.382532][T14260] FAT-fs (loop3): Directory bread(block 64) failed [ 287.415818][T14260] FAT-fs (loop3): Directory bread(block 65) failed [ 287.438656][T14260] FAT-fs (loop3): Directory bread(block 66) failed [ 287.493827][T14260] FAT-fs (loop3): Directory bread(block 67) failed [ 287.532717][T14260] FAT-fs (loop3): Directory bread(block 68) failed [ 287.632577][T14260] FAT-fs (loop3): Directory bread(block 69) failed [ 287.656720][T14260] FAT-fs (loop3): Directory bread(block 70) failed [ 287.668518][T14260] FAT-fs (loop3): Directory bread(block 71) failed [ 287.684282][T14260] FAT-fs (loop3): Directory bread(block 72) failed [ 287.707766][T14260] FAT-fs (loop3): Directory bread(block 73) failed [ 287.978396][ T4565] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 288.322363][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.330265][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.378684][ T4565] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 288.387012][ T4565] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 288.434616][ T4565] usb 2-1: config 220 has no interface number 2 [ 288.463773][ T4565] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 288.487255][ T4565] usb 2-1: config 220 interface 0 has no altsetting 0 [ 288.512872][ T4565] usb 2-1: config 220 interface 76 has no altsetting 0 [ 288.541898][ T4565] usb 2-1: config 220 interface 1 has no altsetting 0 [ 288.708726][ T4565] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 288.717913][ T4565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.734586][ T4565] usb 2-1: Product: syz [ 288.739276][ T4565] usb 2-1: Manufacturer: syz [ 288.744083][ T4565] usb 2-1: SerialNumber: syz [ 289.062819][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.105524][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.113475][ T4565] usb 2-1: selecting invalid altsetting 0 [ 289.120281][ T4565] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 289.126975][ T4565] usb 2-1: No valid video chain found. [ 289.172519][ T4565] usb 2-1: selecting invalid altsetting 0 [ 289.186405][ T4565] usbtest: probe of 2-1:220.1 failed with error -22 [ 289.212674][ T4565] usb 2-1: USB disconnect, device number 24 [ 289.516836][T14253] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.526836][T14253] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.536466][T14253] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.545685][T14253] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.756690][T14256] netlink: 'syz.4.4595': attribute type 25 has an invalid length. [ 289.796086][T14256] netlink: 'syz.4.4595': attribute type 9 has an invalid length. [ 289.825037][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4616'. [ 289.848848][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4616'. [ 290.138505][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.201423][T14339] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4633'. [ 290.276692][T14345] loop4: detected capacity change from 0 to 512 [ 290.378448][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 290.407608][T14345] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 290.467791][T14345] ext4 filesystem being mounted at /992/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.498764][ T23] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 290.518168][ T23] usb 3-1: config 0 has no interface number 0 [ 290.564748][ T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 290.614450][ T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.646728][T14345] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.4636: Directory hole found for htree leaf block 0 [ 290.666670][ T23] usb 3-1: config 0 interface 41 has no altsetting 0 [ 290.704785][T14345] EXT4-fs (loop4): Remounting filesystem read-only [ 290.839698][ T23] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 290.872603][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.896178][ T23] usb 3-1: Product: syz [ 290.901134][ T23] usb 3-1: Manufacturer: syz [ 290.905869][ T23] usb 3-1: SerialNumber: syz [ 290.947560][ T23] usb 3-1: config 0 descriptor?? [ 290.989636][T14317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 291.008460][T14317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 291.102538][T14391] ipt_REJECT: TCP_RESET invalid for non-tcp [ 291.225030][T14396] MTD: Attempt to mount non-MTD device "./file0" [ 291.243851][T14317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 291.266251][T14396] ./file0: Can't open blockdev [ 291.279928][T14317] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 291.367518][T14406] xt_addrtype: ipv6 does not support BROADCAST matching [ 291.588448][ T23] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 291.629137][ T23] usb 3-1: USB disconnect, device number 17 [ 291.697318][T14417] loop3: detected capacity change from 0 to 4096 [ 291.788662][ T4439] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 291.859622][T14417] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 292.176560][T14442] loop2: detected capacity change from 0 to 256 [ 292.214590][T14444] loop4: detected capacity change from 0 to 1024 [ 292.247455][ T4439] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.256936][T14442] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 292.290223][ T4439] usb 1-1: not running at top speed; connect to a high speed hub [ 292.326154][T14444] hfsplus: catalog name length corrupted [ 292.359986][ T4237] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 292.408665][ T4439] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 292.427720][ T4439] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 292.468666][ T4439] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 292.496654][ T4439] usb 1-1: config 2 has no interface number 0 [ 292.511021][ T4439] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 292.539276][T14459] loop4: detected capacity change from 0 to 128 [ 292.546179][ T4439] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 292.585434][ T4439] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 292.588007][T14459] EXT4-fs (loop4): Test dummy encryption mode enabled [ 292.697716][T14459] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 292.753127][T14459] ext4 filesystem being mounted at /1002/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.828569][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 292.829128][ T4439] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 292.872343][ T4439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.897183][T14459] EXT4-fs (loop4): Test dummy encryption mode enabled [ 292.908345][ T4439] usb 1-1: Product: syz [ 292.912590][ T4439] usb 1-1: Manufacturer: syz [ 292.917211][ T4439] usb 1-1: SerialNumber: syz [ 292.928353][T14459] EXT4-fs (loop4): re-mounted. Opts: test_dummy_encryption=v1. Quota mode: none. [ 293.062793][T14483] netlink: 'syz.2.4702': attribute type 1 has an invalid length. [ 293.068490][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 293.189399][ T23] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 293.208041][ T23] usb 4-1: config 8 has no interface number 0 [ 293.210427][T14491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4706'. [ 293.242231][ T23] usb 4-1: config 8 interface 220 has no altsetting 0 [ 293.248089][T14491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4706'. [ 293.271671][T14496] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.4708'. [ 293.280223][ T23] usb 4-1: config 8 interface 1 has no altsetting 0 [ 293.281918][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4706'. [ 293.302961][ T4439] usb 1-1: USB disconnect, device number 19 [ 293.481634][ T23] usb 4-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 293.521015][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.552791][ T23] usb 4-1: Product: syz [ 293.557028][ T23] usb 4-1: Manufacturer: syz [ 293.578672][T14508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4714'. [ 293.588194][ T23] usb 4-1: SerialNumber: syz [ 293.608368][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4715'. [ 293.624409][T14512] bad cache= option: nonw [ 293.624409][T14512] [ 293.636623][T14512] CIFS: VFS: bad cache= option: nonw [ 293.688057][T14514] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 293.808702][T14522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4721'. [ 293.939842][ T23] xr_serial 4-1:8.220: xr_serial converter detected [ 293.978994][ T23] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 294.012116][ T23] xr_serial: probe of ttyUSB0 failed with error -71 [ 294.054831][T14534] program syz.2.4726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.074208][ T23] usb 4-1: USB disconnect, device number 23 [ 294.118937][T14539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4729'. [ 294.129462][ T23] xr_serial 4-1:8.220: device disconnected [ 294.404605][T14555] netlink: 'syz.1.4739': attribute type 4 has an invalid length. [ 294.430115][T14555] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4739'. [ 294.458464][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4738'. [ 294.968397][ T4572] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 295.058075][T14596] netlink: 'syz.1.4758': attribute type 1 has an invalid length. [ 295.073253][T14598] netlink: 'syz.4.4759': attribute type 11 has an invalid length. [ 295.378582][ T4572] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.418670][ T4572] usb 3-1: not running at top speed; connect to a high speed hub [ 295.442906][T14614] xt_ipcomp: unknown flags 12 [ 295.508746][ T4572] usb 3-1: config 2 has an invalid interface number: 171 but max is 0 [ 295.533487][ T4572] usb 3-1: config 2 has no interface number 0 [ 295.550017][ T4572] usb 3-1: config 2 interface 171 has no altsetting 0 [ 295.708638][ T4572] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=c4.e0 [ 295.731027][ T4572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.750783][ T4572] usb 3-1: Product: syz [ 295.759969][ T4572] usb 3-1: Manufacturer: syz [ 295.764615][ T4572] usb 3-1: SerialNumber: syz [ 296.120656][ T4572] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 296.174716][ T4572] gspca_sunplus: reg_w_riv err -71 [ 296.187515][ T4572] sunplus: probe of 3-1:2.171 failed with error -71 [ 296.236118][ T4572] usb 3-1: USB disconnect, device number 18 [ 296.243651][T14656] ALSA: mixer_oss: invalid OSS volume 'u' [ 296.286749][T14661] loop0: detected capacity change from 0 to 1024 [ 296.464151][T14661] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.617787][T14679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.971147][T14708] kAFS: unable to lookup cell '(,c¾Ì' [ 297.308659][T14732] loop1: detected capacity change from 0 to 16 [ 297.393780][T14732] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 298.407341][T14788] loop3: detected capacity change from 0 to 128 [ 298.451732][T14788] hpfs: filesystem error: invalid number of hotfixes: 256, used: 2066844985; already mounted read-only [ 298.500076][T14788] hpfs: filesystem error: improperly stopped [ 298.516573][T14788] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 298.538610][T14788] hpfs: You really don't want any checks? You are crazy... [ 298.589894][T14788] hpfs: hpfs_map_sector(): read error [ 298.595418][T14788] hpfs: code page support is disabled [ 298.655839][T14788] ================================================================== [ 298.664465][T14788] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 298.671288][T14788] Read of size 1 at addr ffff888068c2f004 by task syz.3.4848/14788 [ 298.679423][T14788] [ 298.681872][T14788] CPU: 1 PID: 14788 Comm: syz.3.4848 Not tainted syzkaller #0 [ 298.689368][T14788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.699726][T14788] Call Trace: [ 298.700262][T14795] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 298.703032][T14788] [ 298.718912][T14788] dump_stack_lvl+0x188/0x250 [ 298.723791][T14788] ? show_regs_print_info+0x20/0x20 [ 298.729042][T14788] ? _printk+0xda/0x130 [ 298.733232][T14788] ? strcmp+0x67/0xb0 [ 298.737259][T14788] ? load_image+0x400/0x400 [ 298.741806][T14788] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 298.747666][T14788] print_address_description+0x60/0x2d0 [ 298.753348][T14788] ? strcmp+0x67/0xb0 [ 298.757627][T14788] kasan_report+0xdf/0x130 [ 298.762082][T14788] ? strcmp+0x67/0xb0 [ 298.766206][T14788] strcmp+0x67/0xb0 [ 298.770226][T14788] hpfs_get_ea+0x132/0xdd0 [ 298.774781][T14788] ? hpfs_read_ea+0xc20/0xc20 [ 298.779588][T14788] ? __getblk_gfp+0x52/0xb60 [ 298.784318][T14788] ? __might_sleep+0xf0/0xf0 [ 298.788968][T14788] ? __bread_gfp+0x132/0x380 [ 298.793599][T14788] ? hpfs_map_sector+0x14a/0x2e0 [ 298.798611][T14788] ? hpfs_map_fnode+0x27a/0x690 [ 298.803620][T14788] hpfs_read_inode+0x1a3/0x1050 [ 298.808527][T14788] ? __lock_acquire+0x7d10/0x7d10 [ 298.813755][T14788] ? hpfs_init_inode+0x2c0/0x2c0 [ 298.818729][T14788] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 298.824624][T14788] ? do_raw_spin_unlock+0x11d/0x230 [ 298.830136][T14788] ? hpfs_init_inode+0x1cc/0x2c0 [ 298.835118][T14788] hpfs_fill_super+0x135a/0x1fd0 [ 298.841051][T14788] ? hpfs_mount+0x40/0x40 [ 298.845424][T14788] ? snprintf+0xe5/0x140 [ 298.849726][T14788] ? set_blocksize+0x1f3/0x370 [ 298.854538][T14788] ? sb_set_blocksize+0xa5/0xe0 [ 298.859426][T14788] mount_bdev+0x287/0x3c0 [ 298.863794][T14788] ? hpfs_mount+0x40/0x40 [ 298.868334][T14788] legacy_get_tree+0xe6/0x180 [ 298.873042][T14788] ? hpfs_ioctl+0x260/0x260 [ 298.877585][T14788] vfs_get_tree+0x88/0x270 [ 298.881302][T14799] loop2: detected capacity change from 0 to 2048 [ 298.882037][T14788] do_new_mount+0x24a/0xa40 [ 298.882075][T14788] __se_sys_mount+0x2e3/0x3d0 [ 298.897682][T14788] ? __x64_sys_mount+0xc0/0xc0 [ 298.902607][T14788] ? lockdep_hardirqs_on+0x94/0x140 [ 298.908047][T14788] ? __x64_sys_mount+0x1c/0xc0 [ 298.912849][T14788] do_syscall_64+0x4c/0xa0 [ 298.917299][T14788] ? clear_bhb_loop+0x30/0x80 [ 298.922167][T14788] ? clear_bhb_loop+0x30/0x80 [ 298.926861][T14788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.932952][T14788] RIP: 0033:0x7f49ac0dfa0a [ 298.937411][T14788] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.957305][T14788] RSP: 002b:00007f49aa337e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.965739][T14788] RAX: ffffffffffffffda RBX: 00007f49aa337ee0 RCX: 00007f49ac0dfa0a [ 298.973807][T14788] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f49aa337ea0 [ 298.981866][T14788] RBP: 000020000000a000 R08: 00007f49aa337ee0 R09: 0000000003200041 [ 298.990020][T14788] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 298.997992][T14788] R13: 00007f49aa337ea0 R14: 0000000000009e18 R15: 0000200000000080 [ 299.006066][T14788] [ 299.009090][T14788] [ 299.011501][T14788] The buggy address belongs to the page: [ 299.017135][T14788] page:ffffea0001a30bc0 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x100 pfn:0x68c2f [ 299.027809][T14788] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 299.034938][T14788] raw: 00fff00000000000 ffffea0001bf2a88 ffffea00016546c8 0000000000000000 [ 299.043528][T14788] raw: 0000000000000100 0000000000000000 00000000ffffff7f 0000000000000000 [ 299.052104][T14788] page dumped because: kasan: bad access detected [ 299.058650][T14788] page_owner tracks the page as freed [ 299.064211][T14788] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 12855, ts 259708825385, free_ts 262164276346 [ 299.079525][T14788] get_page_from_freelist+0x1bbd/0x1ca0 [ 299.085112][T14788] __alloc_pages+0x1ee/0x480 [ 299.089815][T14788] alloc_pages_vma+0x393/0x7c0 [ 299.094583][T14788] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 299.100508][T14788] shmem_getpage_gfp+0x14f4/0x2d40 [ 299.105624][T14788] shmem_write_begin+0xcd/0x1a0 [ 299.110491][T14788] generic_perform_write+0x2b6/0x550 [ 299.115862][T14788] __generic_file_write_iter+0x25f/0x4e0 [ 299.121493][T14788] generic_file_write_iter+0xa6/0x1b0 [ 299.126862][T14788] vfs_write+0x745/0xd60 [ 299.131108][T14788] ksys_write+0x152/0x260 [ 299.135524][T14788] do_syscall_64+0x4c/0xa0 [ 299.140028][T14788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.146063][T14788] page last free stack trace: [ 299.154134][T14788] free_unref_page_prepare+0x637/0x6c0 [ 299.159630][T14788] free_unref_page_list+0x119/0x820 [ 299.164922][T14788] release_pages+0x186c/0x1be0 [ 299.169687][T14788] __pagevec_release+0x6d/0xe0 [ 299.174544][T14788] shmem_undo_range+0x62b/0x1930 [ 299.179482][T14788] shmem_evict_inode+0x220/0xa40 [ 299.184422][T14788] evict+0x4c9/0x8d0 [ 299.188320][T14788] __dentry_kill+0x431/0x650 [ 299.192907][T14788] dentry_kill+0xb8/0x290 [ 299.197284][T14788] dput+0xd8/0x1a0 [ 299.201009][T14788] __fput+0x5ee/0x930 [ 299.205014][T14788] task_work_run+0x125/0x1a0 [ 299.209622][T14788] exit_to_user_mode_loop+0x10f/0x130 [ 299.215079][T14788] exit_to_user_mode_prepare+0xee/0x180 [ 299.220893][T14788] syscall_exit_to_user_mode+0x16/0x40 [ 299.226447][T14788] do_syscall_64+0x58/0xa0 [ 299.230893][T14788] [ 299.233236][T14788] Memory state around the buggy address: [ 299.239140][T14788] ffff888068c2ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.247214][T14788] ffff888068c2ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 299.255449][T14788] >ffff888068c2f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 299.263507][T14788] ^ [ 299.267660][T14788] ffff888068c2f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 299.275720][T14788] ffff888068c2f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 299.283780][T14788] ================================================================== [ 299.291921][T14788] Disabling lock debugging due to kernel taint [ 299.298149][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.330961][T14799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.351912][T14768] loop0: detected capacity change from 0 to 40427 [ 299.405278][T14768] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 299.437861][T14768] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 299.464186][T14768] F2FS-fs (loop0): invalid crc value [ 299.488491][T14788] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 299.495934][T14788] CPU: 1 PID: 14788 Comm: syz.3.4848 Tainted: G B syzkaller #0 [ 299.504997][T14788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.515351][T14788] Call Trace: [ 299.518647][T14788] [ 299.521763][T14788] dump_stack_lvl+0x188/0x250 [ 299.526459][T14788] ? show_regs_print_info+0x20/0x20 [ 299.531789][T14788] ? load_image+0x400/0x400 [ 299.536310][T14788] panic+0x2e5/0x810 [ 299.540222][T14788] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 299.546606][T14788] ? bpf_jit_dump+0xd0/0xd0 [ 299.551259][T14788] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 299.557554][T14788] ? _raw_spin_unlock+0x40/0x40 [ 299.563479][T14788] ? strcmp+0x67/0xb0 [ 299.567568][T14788] check_panic_on_warn+0x80/0xa0 [ 299.573062][T14788] ? strcmp+0x67/0xb0 [ 299.577159][T14788] end_report+0x6d/0xf0 [ 299.581416][T14788] kasan_report+0x102/0x130 [ 299.585964][T14788] ? strcmp+0x67/0xb0 [ 299.589954][T14788] strcmp+0x67/0xb0 [ 299.593789][T14788] hpfs_get_ea+0x132/0xdd0 [ 299.598416][T14788] ? hpfs_read_ea+0xc20/0xc20 [ 299.603112][T14788] ? __getblk_gfp+0x52/0xb60 [ 299.607737][T14788] ? __might_sleep+0xf0/0xf0 [ 299.612431][T14788] ? __bread_gfp+0x132/0x380 [ 299.617035][T14788] ? hpfs_map_sector+0x14a/0x2e0 [ 299.622285][T14788] ? hpfs_map_fnode+0x27a/0x690 [ 299.627304][T14788] hpfs_read_inode+0x1a3/0x1050 [ 299.632345][T14788] ? __lock_acquire+0x7d10/0x7d10 [ 299.637384][T14788] ? hpfs_init_inode+0x2c0/0x2c0 [ 299.642335][T14788] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 299.648337][T14788] ? do_raw_spin_unlock+0x11d/0x230 [ 299.653552][T14788] ? hpfs_init_inode+0x1cc/0x2c0 [ 299.658504][T14788] hpfs_fill_super+0x135a/0x1fd0 [ 299.663551][T14788] ? hpfs_mount+0x40/0x40 [ 299.667900][T14788] ? snprintf+0xe5/0x140 [ 299.672340][T14788] ? set_blocksize+0x1f3/0x370 [ 299.677129][T14788] ? sb_set_blocksize+0xa5/0xe0 [ 299.682181][T14788] mount_bdev+0x287/0x3c0 [ 299.686635][T14788] ? hpfs_mount+0x40/0x40 [ 299.691184][T14788] legacy_get_tree+0xe6/0x180 [ 299.695888][T14788] ? hpfs_ioctl+0x260/0x260 [ 299.700426][T14788] vfs_get_tree+0x88/0x270 [ 299.704869][T14788] do_new_mount+0x24a/0xa40 [ 299.709424][T14788] __se_sys_mount+0x2e3/0x3d0 [ 299.714215][T14788] ? __x64_sys_mount+0xc0/0xc0 [ 299.718999][T14788] ? lockdep_hardirqs_on+0x94/0x140 [ 299.724210][T14788] ? __x64_sys_mount+0x1c/0xc0 [ 299.728989][T14788] do_syscall_64+0x4c/0xa0 [ 299.733418][T14788] ? clear_bhb_loop+0x30/0x80 [ 299.738115][T14788] ? clear_bhb_loop+0x30/0x80 [ 299.742826][T14788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.748836][T14788] RIP: 0033:0x7f49ac0dfa0a [ 299.751066][T14768] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 299.753398][T14788] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.753418][T14788] RSP: 002b:00007f49aa337e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.753442][T14788] RAX: ffffffffffffffda RBX: 00007f49aa337ee0 RCX: 00007f49ac0dfa0a [ 299.777471][T14768] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 299.783944][T14788] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f49aa337ea0 [ 299.783966][T14788] RBP: 000020000000a000 R08: 00007f49aa337ee0 R09: 0000000003200041 [ 299.783979][T14788] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 299.783991][T14788] R13: 00007f49aa337ea0 R14: 0000000000009e18 R15: 0000200000000080 [ 299.784011][T14788] [ 299.846231][T14788] Kernel Offset: disabled [ 299.851411][T14788] Rebooting in 86400 seconds..