last executing test programs: 2.759884204s ago: executing program 0 (id=4087): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b7dd25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 2.618390877s ago: executing program 0 (id=4092): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'sit0\x00', 0x0}) 2.44574451s ago: executing program 0 (id=4096): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @sliced={0x3, [0x6, 0x2c00, 0x8000, 0xffff, 0x0, 0xd08, 0x3ff, 0x7, 0x3, 0x3, 0xd, 0x5, 0x2, 0xc54, 0x7, 0x7fff, 0xa1ae, 0x8, 0x81, 0x9, 0x2, 0x4, 0xc37, 0x8, 0x6, 0x5, 0x76a, 0xdfe7, 0x9, 0xfff, 0x7, 0x5fb, 0x9, 0x203, 0x0, 0x81, 0x2, 0x1000, 0x48, 0x1, 0x401, 0x4, 0x2, 0x48, 0x6, 0x1, 0x4, 0x5], 0x6}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) 1.658592853s ago: executing program 3 (id=4121): ioperm(0x0, 0x3, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xfffffffffffffffd, 0x8}) 1.573441264s ago: executing program 3 (id=4124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0xfffffffffffffff7}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) 1.534056944s ago: executing program 3 (id=4125): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x200000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.422525736s ago: executing program 3 (id=4129): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001500257f09004b01fcfc8c860a881300f2f545cdc671c5662e09b8f889719e719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e00000000620300c6", 0x48}], 0x1) 1.311751128s ago: executing program 3 (id=4133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1000000000007}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xa21, 0x1, 0x4820, 0x3, 0x33cf, 0x1, 0x1, 0xea4d, 0x1ff, 0x7, 0x80000, 0x5, 0x0, 0xff3, 0x6e19, 0x4b02, 0xd, 0x5, 0x4f, 0xfffffffb, 0x81, 0x6, 0x5, 0x0, 0x3, 0xffff741a, 0x5, 0xfffffffe, 0x9, 0x2, 0x8, 0x6, 0xa6, 0x3, 0x9, 0x200, 0x7, 0x10, 0x6, 0xa, 0x6, 0xdb38, 0x1, 0xffffcd1f, 0xfffff44e, 0x7a8, 0x1, 0x2bca, 0x7, 0x5, 0x4, 0x6, 0x165c, 0x4, 0x3, 0x6, 0xfffffffa, 0x7f, 0x8, 0x0, 0x2, 0x10001, 0x5, 0x6, 0x9, 0xfffffffb, 0x37bc, 0xfff, 0x2, 0x1ff, 0x1, 0xff, 0x2, 0xfff3, 0x7, 0x4, 0x0, 0x0, 0x8000, 0xddb3, 0x1bb, 0x9c, 0x202, 0x4000100, 0x1, 0x7, 0x2, 0x1, 0xd9, 0x80, 0x1cf, 0x8000, 0x2a52, 0xcce, 0x8, 0x1, 0x6, 0x3, 0x8, 0x3, 0x3, 0x6, 0xd, 0x32, 0x80000000, 0x8, 0xc5, 0x479, 0x4, 0x0, 0x7ff, 0xf0, 0x9, 0x7f, 0xbb, 0x10001, 0x0, 0x3, 0xb41, 0x7f, 0x2, 0xa220, 0x4, 0x154e, 0x3, 0x800, 0x1, 0xe662, 0x3, 0xb0, 0x7, 0x5, 0x2, 0x8001, 0x5, 0x9, 0x10, 0x3ff, 0xffe7, 0x1, 0x1e, 0x2, 0x9ad, 0xc2da, 0x8, 0x76, 0x8, 0x5, 0x3, 0x5, 0x80, 0x4b, 0x0, 0x637, 0x6, 0x7f, 0x100, 0xadb, 0x6, 0x40000000, 0x0, 0x346349b4, 0x8, 0x7, 0xe, 0x4, 0x7, 0x8000, 0x400, 0x0, 0x8, 0xfffffc00, 0x6, 0x3, 0x0, 0x2, 0x6, 0x588, 0x40, 0x9de, 0x201, 0x4c07, 0x3, 0x9, 0x1, 0x7, 0xb, 0x5, 0xa, 0x4, 0x7c, 0x6, 0xd02, 0xd, 0x455b, 0x2, 0x10, 0x100, 0x3, 0x9, 0x9a38, 0x7, 0x0, 0x81, 0x5, 0x6, 0x80, 0x4, 0x4, 0x40, 0xfffffffc, 0x81, 0x1, 0xfffffffb, 0x7fffffff, 0x6, 0x42, 0xfffffff7, 0x0, 0x1, 0x10001, 0xfffffffd, 0x10001, 0x7, 0xa, 0x1, 0x3, 0x8, 0x9, 0x6, 0x10001, 0x7, 0x5, 0x4, 0x3, 0x2, 0x7, 0x8000, 0x7ff, 0x8, 0x8, 0xda, 0x8001, 0x9, 0x6, 0xb, 0x1, 0x878, 0x401, 0x10000, 0x3, 0xfffffe00, 0xffffffff, 0x4, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x7, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x5, 0x4, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x9, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0xd3, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x2, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x3, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x80, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x2, 0x8, 0x100a, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x1, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x3, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0x9a6d, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x8, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0x2, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x7, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 1.21596328s ago: executing program 3 (id=4136): rt_sigaction(0x1b, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500242864220f30c75930a000102030109021b00010595201009043d0601add5da000905031640"], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) 1.135889931s ago: executing program 2 (id=4137): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8000, 0xe}, 0x9c) 1.086457132s ago: executing program 4 (id=4139): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001640)={r0, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) 1.059678763s ago: executing program 4 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 1.058224792s ago: executing program 2 (id=4141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f00000001c0)) 976.661144ms ago: executing program 2 (id=4142): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x21, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff}}) 968.680454ms ago: executing program 4 (id=4143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="4000d35c00dd00001c001280090001007866726d000019000c00028008000200ea000000140003007866b864090000"], 0x50}}, 0x0) 893.205045ms ago: executing program 2 (id=4145): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f00000000c0)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000d800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) 857.104605ms ago: executing program 4 (id=4147): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000003500)={0x10001ff, 0x397d0000, 0x2, {0x7, @pix={0x9, 0x7c4d, 0x34565559, 0x5, 0x20000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3}}, 0x9}) 780.594227ms ago: executing program 0 (id=4148): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x7, 0x2, 0x0, 0xc}) 722.605618ms ago: executing program 4 (id=4150): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f00000002c0)=0x4000000000000, 0x12) 720.007778ms ago: executing program 2 (id=4151): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 671.806729ms ago: executing program 1 (id=4152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 664.849849ms ago: executing program 4 (id=4153): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583616e"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 637.656369ms ago: executing program 0 (id=4154): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x1b8, 0x318, 0x3e8, 0xd0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9b8357af2c289d6fb961cc75d70cb80ba01ac2f4afc51ee286835491b9a9"}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private1, @remote}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 593.24903ms ago: executing program 2 (id=4155): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xee, 0xb0, 0xf3, 0x20, 0x4b4, 0x1002, 0xcdc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xf7, 0xf2}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) 592.66036ms ago: executing program 1 (id=4156): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x5000000) 532.264501ms ago: executing program 0 (id=4157): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 406.463403ms ago: executing program 1 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x7, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 377.533544ms ago: executing program 1 (id=4159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="34001680300001802c000c"], 0x70}}, 0x24040800) 175.018827ms ago: executing program 1 (id=4160): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="68000000150021042abd7000fedbdf250a"], 0x68}, 0x1, 0x0, 0x0, 0x20040051}, 0x200480c0) 0s ago: executing program 1 (id=4161): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): [ 184.676202][ T9049] loop2: detected capacity change from 0 to 2048 [ 184.722435][ T9054] loop0: detected capacity change from 0 to 256 [ 184.737543][ T9049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.880472][ T9054] FAT-fs (loop0): Directory bread(block 64) failed [ 184.887164][ T9054] FAT-fs (loop0): Directory bread(block 65) failed [ 184.929025][ T9054] FAT-fs (loop0): Directory bread(block 66) failed [ 184.947757][ T9064] loop3: detected capacity change from 0 to 64 [ 184.958703][ T9054] FAT-fs (loop0): Directory bread(block 67) failed [ 184.965569][ T9054] FAT-fs (loop0): Directory bread(block 68) failed [ 184.986819][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2183'. [ 185.019109][ T9054] FAT-fs (loop0): Directory bread(block 69) failed [ 185.058724][ T9054] FAT-fs (loop0): Directory bread(block 70) failed [ 185.065326][ T9054] FAT-fs (loop0): Directory bread(block 71) failed [ 185.126387][ T9054] FAT-fs (loop0): Directory bread(block 72) failed [ 185.149688][ T9054] FAT-fs (loop0): Directory bread(block 73) failed [ 185.276672][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 185.352918][ T9085] xt_NFQUEUE: number of total queues is 0 [ 185.592489][ T9100] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2199'. [ 185.658804][ T9100] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 185.675039][ T9100] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.889100][ T9122] loop2: detected capacity change from 0 to 512 [ 185.964719][ T9122] EXT4-fs (loop2): Ignoring removed bh option [ 185.987134][ T9130] loop3: detected capacity change from 0 to 64 [ 186.008057][ T9122] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 186.078306][ T9122] EXT4-fs (loop2): 1 truncate cleaned up [ 186.134146][ T9122] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 186.158891][ T4216] Bluetooth: hci2: command 0x0406 tx timeout [ 186.165564][ T4216] Bluetooth: hci3: command 0x0406 tx timeout [ 186.185389][ T4216] Bluetooth: hci1: command 0x0406 tx timeout [ 186.191998][ T4216] Bluetooth: hci4: command 0x0406 tx timeout [ 186.267057][ T9122] overlayfs: missing 'workdir' [ 186.648022][ T9173] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 186.873330][ T26] audit: type=1326 audit(1750191339.713:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.3.2239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x0 [ 186.955352][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 187.673288][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2257'. [ 187.699411][ T9217] overlayfs: missing 'lowerdir' [ 187.856542][ T9223] xt_cluster: node mask cannot exceed total number of nodes [ 187.864281][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 188.081737][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2264'. [ 188.108669][ T9233] loop0: detected capacity change from 0 to 8 [ 188.148847][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 188.163590][ T9193] loop2: detected capacity change from 0 to 32768 [ 188.249799][ T9233] SQUASHFS error: Unable to read inode 0xa7 [ 188.288846][ T23] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 188.311711][ T23] usb 5-1: config 0 has no interface number 1 [ 188.327750][ T9193] XFS (loop2): Mounting V5 Filesystem [ 188.360875][ T9249] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2270'. [ 188.399664][ T9249] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2270'. [ 188.440944][ T9253] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 188.468083][ T9193] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 188.498936][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 188.523887][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.537643][ T9257] ipt_ECN: cannot use operation on non-tcp rule [ 188.578007][ T23] usb 5-1: Product: syz [ 188.594145][ T9193] XFS (loop2): Starting recovery (logdev: internal) [ 188.603015][ T23] usb 5-1: Manufacturer: syz [ 188.624275][ T9193] XFS (loop2): Ending recovery (logdev: internal) [ 188.626548][ T23] usb 5-1: SerialNumber: syz [ 188.699554][ T23] usb 5-1: config 0 descriptor?? [ 188.765051][ T9263] loop1: detected capacity change from 0 to 64 [ 188.793810][ T4171] XFS (loop2): Unmounting Filesystem [ 188.820634][ T9263] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 188.840757][ T9263] MINIX-fs: bad superblock or unable to read bitmaps [ 189.041567][ T4942] usb 5-1: USB disconnect, device number 11 [ 189.092290][ T9271] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2281'. [ 189.269125][ T9281] loop1: detected capacity change from 0 to 8 [ 189.331987][ T9283] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 189.449660][ T9288] mmap: syz.0.2287 (9288) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 189.808735][ T9310] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 189.818337][ T9307] loop2: detected capacity change from 0 to 1024 [ 190.031058][ T9324] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 190.123518][ T9329] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 190.321562][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 190.514405][ T9350] loop3: detected capacity change from 0 to 8 [ 190.551953][ T9351] loop2: detected capacity change from 0 to 1024 [ 190.566623][ T9346] loop4: detected capacity change from 0 to 4096 [ 190.590443][ T9350] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 190.606680][ T9350] cramfs: Error -3 while decompressing! [ 190.636576][ T9346] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 190.659344][ T9351] hfsplus: filesystem is marked journaled, leaving read-only. [ 190.679067][ T9350] cramfs: ffffffff961ca228(26)->ffff888054e74000(4096) [ 190.708294][ T9350] cramfs: Error -3 while decompressing! [ 190.722658][ T9350] cramfs: ffffffff961ca242(26)->ffff888053cd9000(4096) [ 190.731631][ T9350] cramfs: Error -3 while decompressing! [ 190.737548][ T9350] cramfs: ffffffff961ca25c(16)->ffff88805576a000(4096) [ 190.741073][ T7635] udevd[7635]: incorrect cramfs checksum on /dev/loop3 [ 190.745415][ T9350] cramfs: Error -3 while decompressing! [ 190.763785][ T9350] cramfs: ffffffff961ca228(26)->ffff888054e74000(4096) [ 190.776246][ T9357] loop1: detected capacity change from 0 to 2048 [ 190.787641][ T26] audit: type=1800 audit(1750191343.623:15): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2314" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 190.871378][ T9357] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 190.922747][ T9357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.000370][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'. [ 191.782505][ T9409] loop3: detected capacity change from 0 to 256 [ 191.882872][ T9409] exfat: Deprecated parameter 'namecase' [ 191.984258][ T9409] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 192.148977][ T4888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 192.418436][ T9434] loop3: detected capacity change from 0 to 4096 [ 192.508367][ T9434] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.550150][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2361'. [ 192.586950][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2361'. [ 192.588759][ T4888] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 192.638223][ T9414] loop1: detected capacity change from 0 to 32768 [ 192.668704][ T4888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.719085][ T9414] XFS (loop1): Mounting V5 Filesystem [ 192.727139][ T4888] usb 5-1: config 0 descriptor?? [ 192.799994][ T4888] usb 5-1: unsupported MDLM descriptors [ 192.923438][ T9464] netlink: 'syz.3.2366': attribute type 2 has an invalid length. [ 192.933258][ T9464] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2366'. [ 193.004506][ T9414] XFS (loop1): Ending clean mount [ 193.013328][ T4888] usb 5-1: USB disconnect, device number 12 [ 193.039583][ T9414] XFS (loop1): Quotacheck needed: Please wait. [ 193.075418][ T9468] loop2: detected capacity change from 0 to 1024 [ 193.127747][ T9414] XFS (loop1): Quotacheck: Done. [ 193.128117][ T9472] loop3: detected capacity change from 0 to 64 [ 193.230939][ T4170] XFS (loop1): Unmounting Filesystem [ 193.618988][ T9483] cgroup: noprefix used incorrectly [ 193.765720][ T9490] loop4: detected capacity change from 0 to 764 [ 193.777924][ T26] audit: type=1326 audit(1750191346.613:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 193.809483][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 193.857359][ T26] audit: type=1326 audit(1750191346.613:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 193.892768][ T9496] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 34141 - 0 [ 193.906593][ T9490] rock: directory entry would overflow storage [ 193.936414][ T9496] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 34141 - 0 [ 193.938034][ T9490] rock: sig=0x4654, size=5, remaining=4 [ 193.965999][ T9498] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2384'. [ 193.966269][ T26] audit: type=1326 audit(1750191346.613:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 193.994121][ T9496] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 34141 - 0 [ 194.069267][ T26] audit: type=1326 audit(1750191346.613:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.073345][ T9496] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 34141 - 0 [ 194.168065][ T26] audit: type=1326 audit(1750191346.613:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.196437][ T9496] device geneve2 entered promiscuous mode [ 194.197539][ T26] audit: type=1326 audit(1750191346.613:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.225660][ T26] audit: type=1326 audit(1750191346.633:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.252842][ T26] audit: type=1326 audit(1750191346.633:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.310610][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317169][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372161][ T9507] loop0: detected capacity change from 0 to 512 [ 194.380843][ T26] audit: type=1326 audit(1750191346.633:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.403980][ T26] audit: type=1326 audit(1750191346.633:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e6837929 code=0x50000 [ 194.532490][ T9507] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 194.561903][ T9507] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.581998][ T9517] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2390'. [ 194.692671][ T9519] tmpfs: Bad value for 'mpol' [ 194.817713][ T9523] loop2: detected capacity change from 0 to 22 [ 194.964634][ T9531] loop4: detected capacity change from 0 to 2048 [ 195.651275][ T9523] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 195.693235][ T9523] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 195.852787][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 195.894493][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 195.947041][ T9537] binder: 9536:9537 ioctl c018620c 200000000380 returned -22 [ 196.030467][ T4216] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.433984][ T4216] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 196.441105][ T9555] loop1: detected capacity change from 0 to 4096 [ 196.448011][ T4216] usb 5-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 196.487781][ T4216] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.488385][ T9555] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 196.514573][ T4216] usb 5-1: config 1 has no interface number 0 [ 196.545332][ T4216] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 196.566556][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'. [ 196.582379][ T4216] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 196.604755][ T9560] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2413'. [ 196.620807][ T9560] netlink: 'syz.0.2413': attribute type 3 has an invalid length. [ 196.641212][ T9560] netlink: 'syz.0.2413': attribute type 2 has an invalid length. [ 196.658675][ T9560] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2413'. [ 196.687898][ T9563] loop2: detected capacity change from 0 to 1764 [ 196.838844][ T4216] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.854579][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.867194][ T4216] usb 5-1: Product: syz [ 196.879516][ T4216] usb 5-1: Manufacturer: syz [ 196.880414][ T9569] netlink: 'syz.3.2416': attribute type 2 has an invalid length. [ 196.891585][ T4216] usb 5-1: SerialNumber: syz [ 196.912195][ T9569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2416'. [ 196.950578][ T5564] ntfs3: loop1: ntfs3_write_inode r=1a failed, -22. [ 196.979993][ T4216] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 196.995093][ T4216] cdc_ncm 5-1:1.1: bind() failure [ 197.001873][ T4170] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 197.011756][ T4170] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 197.038795][ T4170] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 197.215689][ T4874] usb 5-1: USB disconnect, device number 13 [ 197.248019][ T9581] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2423'. [ 197.379697][ T9591] netlink: 'syz.1.2427': attribute type 12 has an invalid length. [ 197.411167][ T9591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2427'. [ 197.456237][ T9595] netlink: 'syz.2.2428': attribute type 24 has an invalid length. [ 197.703271][ T9612] loop3: detected capacity change from 0 to 128 [ 197.732914][ T9613] netlink: 'syz.1.2438': attribute type 2 has an invalid length. [ 197.770071][ T9607] loop2: detected capacity change from 0 to 4096 [ 197.910799][ T9621] loop1: detected capacity change from 0 to 8 [ 197.916880][ T9607] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 197.982617][ T9617] loop0: detected capacity change from 0 to 4096 [ 198.042829][ T9617] ntfs3: loop0: ino=3, Correct links count -> 2. [ 198.175715][ T9630] netlink: 'syz.2.2446': attribute type 1 has an invalid length. [ 198.251539][ T9633] tmpfs: Bad value for 'mpol' [ 198.350370][ T9636] loop2: detected capacity change from 0 to 256 [ 198.417432][ T9636] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.460008][ T9636] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 198.527225][ T9636] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 198.555458][ T9640] loop0: detected capacity change from 0 to 1764 [ 198.628296][ T9646] loop3: detected capacity change from 0 to 512 [ 198.692648][ T9646] EXT4-fs (loop3): inline encryption not supported [ 198.748314][ T9646] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 198.837687][ T9646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 198.899239][ T9646] System zones: 1-12 [ 198.904399][ T9646] EXT4-fs (loop3): orphan cleanup on readonly fs [ 199.022554][ T9646] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2454: invalid indirect mapped block 12 (level 1) [ 199.134267][ T9646] EXT4-fs (loop3): Remounting filesystem read-only [ 199.149130][ T9646] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2454: invalid indirect mapped block 2 (level 2) [ 199.248197][ T9646] EXT4-fs (loop3): Remounting filesystem read-only [ 199.264487][ T9646] EXT4-fs (loop3): 1 truncate cleaned up [ 199.295205][ T9646] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,inlinecrypt,noload,errors=remount-ro,data_err=ignore. Quota mode: none. [ 199.413466][ T9679] loop1: detected capacity change from 0 to 2048 [ 199.501220][ T9679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.615502][ T9685] loop0: detected capacity change from 0 to 4096 [ 199.703203][ T9685] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 199.732391][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2480'. [ 199.800497][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2480'. [ 199.826670][ T9685] ntfs3: loop0: failed to convert "c46c" to iso8859-6 [ 199.849245][ T9701] netlink: 'syz.4.2480': attribute type 4 has an invalid length. [ 199.859519][ T9685] ntfs3: loop0: failed to convert "0030" to iso8859-6 [ 199.895268][ T9685] ntfs3: loop0: failed to convert "0031" to iso8859-6 [ 199.910615][ T9685] ntfs3: loop0: failed to convert "0032" to iso8859-6 [ 199.929142][ T9709] loop1: detected capacity change from 0 to 2048 [ 200.060354][ T9718] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.170211][ T9709] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 200.256355][ T9709] Remounting filesystem read-only [ 200.563533][ T9749] loop3: detected capacity change from 0 to 1764 [ 200.574531][ T9744] loop4: detected capacity change from 0 to 4096 [ 200.609643][ T9751] loop0: detected capacity change from 0 to 2048 [ 200.639850][ T9744] __ntfs_warning: 2861 callbacks suppressed [ 200.639867][ T9744] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 200.705790][ T9751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.733820][ T9744] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 200.770777][ T9744] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 200.866897][ T9744] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 200.898780][ T9744] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 200.948093][ T9761] loop3: detected capacity change from 0 to 128 [ 200.957820][ T9764] loop2: detected capacity change from 0 to 64 [ 200.962112][ T9744] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 200.973480][ T9766] netlink: 'syz.0.2510': attribute type 8 has an invalid length. [ 201.003018][ T9744] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 201.025546][ T9744] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.055976][ T9761] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 201.078727][ T9744] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 201.131790][ T9761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.167587][ T9744] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.234914][ T9769] loop1: detected capacity change from 0 to 4096 [ 201.235432][ T9744] ntfs: volume version 3.1. [ 201.309991][ T9769] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 201.472259][ T9781] netlink: 'syz.0.2519': attribute type 3 has an invalid length. [ 201.619061][ T9781] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2519'. [ 201.912385][ T9785] loop3: detected capacity change from 0 to 4096 [ 202.166237][ T9785] ntfs3: loop3: try to read out of volume at offset 0x3fffffc7000 [ 202.404601][ T9811] loop2: detected capacity change from 0 to 512 [ 202.502567][ T9811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 202.531080][ T9811] System zones: 1-12 [ 202.536240][ T9811] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.618991][ T9811] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.2535: invalid block [ 202.637635][ T9811] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2535: invalid indirect mapped block 8 (level 2) [ 202.667796][ T9811] EXT4-fs (loop2): 1 truncate cleaned up [ 202.718774][ T9811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.101570][ T9853] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 203.229687][ T9860] SET target dimension over the limit! [ 203.245003][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2559'. [ 203.337694][ T9869] netlink: 'syz.0.2562': attribute type 10 has an invalid length. [ 203.371425][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.381163][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.411222][ T9865] loop2: detected capacity change from 0 to 4096 [ 203.466940][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.474139][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.483231][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.490656][ T9869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.508680][ T4874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 203.540515][ T9865] ntfs: volume version 3.1. [ 203.550986][ T9869] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.778725][ T4874] usb 5-1: Using ep0 maxpacket: 8 [ 203.880693][ T9889] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 204.098934][ T4874] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 204.119103][ T4874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.163352][ T4874] usb 5-1: Product: syz [ 204.167642][ T4874] usb 5-1: Manufacturer: syz [ 204.187748][ T4874] usb 5-1: SerialNumber: syz [ 204.205390][ T4874] usb 5-1: config 0 descriptor?? [ 204.291038][ T4874] gspca_main: sq930x-2.14.0 probing 2770:930c [ 204.333661][ T9913] loop2: detected capacity change from 0 to 1024 [ 204.390159][ T9913] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 204.390159][ T9913] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 204.390159][ T9913] [ 204.457715][ T9921] loop3: detected capacity change from 0 to 1024 [ 204.532998][ T9913] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,init_itable=0x0000000000000006,nouser_xattr,abort,,errors=continue. Quota mode: none. [ 204.592766][ T9928] netlink: 'syz.1.2590': attribute type 4 has an invalid length. [ 204.694396][ T9913] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.738819][ T4874] gspca_sq930x: ucbus_write failed -71 [ 204.795253][ T144] hfsplus: b-tree write err: -5, ino 4 [ 204.962646][ T9942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 204.989204][ T4874] gspca_sq930x: Sensor ov9630 not yet treated [ 205.005590][ T4874] sq930x: probe of 5-1:0.0 failed with error -22 [ 205.040304][ T4874] usb 5-1: USB disconnect, device number 14 [ 205.082894][ T9946] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2600'. [ 205.373511][ T9964] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2608'. [ 205.572096][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2609'. [ 205.581632][ T4244] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.628917][ T4874] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.839818][ T4244] usb 1-1: Using ep0 maxpacket: 8 [ 206.038738][ T4874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.059372][ T4874] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 206.088637][ T4874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.115288][ T4874] usb 3-1: config 0 descriptor?? [ 206.118984][ T4244] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 206.141576][ T4244] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 206.166863][ T4244] usb 1-1: Product: syz [ 206.181448][ T4244] usb 1-1: Manufacturer: syz [ 206.186458][ T4244] usb 1-1: SerialNumber: syz [ 206.204305][ T9983] infiniband syz1: set active [ 206.209685][ T9983] infiniband syz1: added bond_slave_1 [ 206.242206][ T4244] usb 1-1: config 0 descriptor?? [ 206.280903][ T4244] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 206.290025][ T9983] RDS/IB: syz1: added [ 206.301739][ T9983] smc: adding ib device syz1 with port count 1 [ 206.308198][ T9983] smc: ib device syz1 port 1 has pnetid [ 206.345777][T10000] loop3: detected capacity change from 0 to 256 [ 206.625248][ T2281] usb 3-1: USB disconnect, device number 12 [ 206.709115][ T4244] gspca_zc3xx: reg_r err -71 [ 206.713993][ T4244] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 206.730895][T10010] xt_bpf: check failed: parse error [ 206.743857][ T4244] usb 1-1: USB disconnect, device number 11 [ 207.146096][T10026] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2638'. [ 207.197837][T10030] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2640'. [ 207.842264][T10067] loop0: detected capacity change from 0 to 256 [ 208.262201][T10076] loop4: detected capacity change from 0 to 1024 [ 208.488832][T10056] loop2: detected capacity change from 0 to 32768 [ 208.528821][ T4880] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 208.626888][T10056] XFS (loop2): Mounting V5 Filesystem [ 208.702542][T10106] netlink: 'syz.3.2674': attribute type 49 has an invalid length. [ 208.766983][T10056] XFS (loop2): Ending clean mount [ 208.845510][ T4171] XFS (loop2): Unmounting Filesystem [ 208.867505][T10114] loop1: detected capacity change from 0 to 256 [ 208.989738][ T4880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.006881][T10120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 209.035500][ T4880] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.142127][T10122] loop3: detected capacity change from 0 to 256 [ 209.171381][T10119] loop4: detected capacity change from 0 to 4096 [ 209.243951][T10119] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 209.278993][ T4880] usb 1-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 209.302487][ T4880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.347868][ T4880] usb 1-1: Product: syz [ 209.363549][ T4880] usb 1-1: Manufacturer: syz [ 209.368256][ T4880] usb 1-1: SerialNumber: syz [ 209.449917][ T4880] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 209.487429][ T4880] cdc_mbim 1-1:1.0: bind() failure [ 209.724208][ T4880] usb 1-1: USB disconnect, device number 12 [ 209.894674][T10147] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.004791][T10150] loop1: detected capacity change from 0 to 1024 [ 210.064667][T10154] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 210.073350][T10154] netlink: 'syz.4.2698': attribute type 2 has an invalid length. [ 210.089808][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 210.158389][T10158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.165781][T10158] IPv6: NLM_F_CREATE should be set when creating new route [ 210.173097][T10158] IPv6: NLM_F_CREATE should be set when creating new route [ 210.228160][T10150] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 210.253190][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.317234][T10133] loop3: detected capacity change from 0 to 32768 [ 210.369449][T10133] XFS: attr2 mount option is deprecated. [ 210.437161][T10133] XFS (loop3): Mounting V5 Filesystem [ 210.825145][T10133] XFS (loop3): Ending clean mount [ 210.866146][T10133] XFS (loop3): Quotacheck needed: Please wait. [ 210.976468][T10199] netlink: 'syz.0.2716': attribute type 1 has an invalid length. [ 211.011721][T10133] XFS (loop3): Quotacheck: Done. [ 211.050057][T10199] netlink: 'syz.0.2716': attribute type 2 has an invalid length. [ 211.106977][ T4180] XFS (loop3): Unmounting Filesystem [ 211.208180][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 211.208195][ T26] audit: type=1326 audit(1750191364.043:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.2.2719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85a570929 code=0x0 [ 211.376082][T10218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2726'. [ 211.539647][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 211.860093][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2738'. [ 212.344695][T10265] loop3: detected capacity change from 0 to 256 [ 212.522312][T10228] loop4: detected capacity change from 0 to 32768 [ 212.537103][T10267] loop2: detected capacity change from 0 to 4096 [ 212.656762][T10270] loop0: detected capacity change from 0 to 1024 [ 212.668211][T10228] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 212.821172][ T4168] ocfs2: Unmounting device (7,4) on (node local) [ 213.725651][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'. [ 213.788203][T10276] loop4: detected capacity change from 0 to 32768 [ 213.967852][T10331] netlink: 'syz.1.2778': attribute type 2 has an invalid length. [ 213.977486][T10331] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 213.986058][T10331] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2778'. [ 214.004057][T10276] XFS (loop4): Mounting V5 Filesystem [ 214.178450][T10276] XFS (loop4): Ending clean mount [ 214.302038][ T4168] XFS (loop4): Unmounting Filesystem [ 214.307927][T10353] netlink: 'syz.2.2783': attribute type 5 has an invalid length. [ 214.598295][T10368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.055923][T10390] loop1: detected capacity change from 0 to 1024 [ 215.174062][T10403] loop3: detected capacity change from 0 to 128 [ 215.223398][T10403] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 215.237593][T10390] fuse: Bad value for 'fd' [ 215.368507][ T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 215.671921][T10427] loop2: detected capacity change from 0 to 64 [ 216.104320][T10443] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 216.120337][ T4216] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 216.359886][T10412] loop4: detected capacity change from 0 to 32768 [ 216.515489][T10458] device geneve3 entered promiscuous mode [ 216.521715][ T4216] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 216.530641][ T4216] usb 2-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 216.544380][ T4216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.553893][ T4216] usb 2-1: config 1 has no interface number 0 [ 216.560137][ T4216] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.700499][T10412] XFS (loop4): Mounting V5 Filesystem [ 216.759135][ T4216] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.789209][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.840446][T10412] XFS (loop4): Ending clean mount [ 216.850620][T10412] XFS (loop4): Quotacheck needed: Please wait. [ 216.871303][ T4216] usb 2-1: Product: syz [ 216.882494][ T4216] usb 2-1: Manufacturer: syz [ 216.924673][ T4216] usb 2-1: SerialNumber: syz [ 216.947710][T10412] XFS (loop4): Quotacheck: Done. [ 216.983270][ T4216] cdc_wdm 2-1:1.128: skipping garbage [ 216.995292][ T4216] cdc_wdm 2-1:1.128: invalid descriptor buffer length [ 216.998749][ T2281] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 217.017829][ T4216] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 217.058140][T10483] loop2: detected capacity change from 0 to 1024 [ 217.072178][ T4168] XFS (loop4): Unmounting Filesystem [ 217.179088][T10483] attempt to access beyond end of device [ 217.179088][T10483] loop2: rw=0, want=5780, limit=1024 [ 217.188082][ T4216] usb 2-1: USB disconnect, device number 10 [ 217.368970][ T2281] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 217.388412][ T2281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.430991][ T2281] usb 4-1: config 0 descriptor?? [ 217.514249][T10498] overlayfs: missing 'lowerdir' [ 217.699058][T10507] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 217.870552][T10509] loop0: detected capacity change from 0 to 4096 [ 217.890357][T10518] dlm: no locking on control device [ 217.918871][ T2281] mxuport 4-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 217.959028][ T2281] mxuport: probe of 4-1:0.0 failed with error -5 [ 218.009947][ T2281] usb 4-1: USB disconnect, device number 11 [ 218.072310][T10509] ntfs: (device loop0): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 218.142568][T10509] ntfs: volume version 3.1. [ 218.208880][ T4888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 218.304793][ T4874] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.478662][ T4888] usb 2-1: Using ep0 maxpacket: 16 [ 218.598692][ T4874] usb 5-1: Using ep0 maxpacket: 8 [ 218.718765][ T4874] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 218.727428][ T4874] usb 5-1: config 0 has an invalid interface number: 255 but max is 2 [ 218.737886][ T4874] usb 5-1: config 0 has no interface number 0 [ 218.744832][ T4874] usb 5-1: config 0 has no interface number 1 [ 218.751094][ T4874] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 218.762404][ T4874] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 218.775913][ T4874] usb 5-1: config 0 interface 255 has no altsetting 0 [ 218.782928][ T4888] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 218.792188][ T4874] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 218.801366][ T4888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.809448][ T4874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.818619][ T4888] usb 2-1: Product: syz [ 218.822823][ T4888] usb 2-1: Manufacturer: syz [ 218.827800][ T4888] usb 2-1: SerialNumber: syz [ 218.835254][ T4874] usb 5-1: config 0 descriptor?? [ 218.849479][ T4888] r8152-cfgselector 2-1: config 0 descriptor?? [ 218.936136][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.943368][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.098859][ T4874] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 219.122946][ T4874] usb 5-1: selecting invalid altsetting 0 [ 219.129194][ T4874] usb 5-1: Could not set interface, error -22 [ 219.325001][ T4874] usb 5-1: USB disconnect, device number 15 [ 219.331622][ T4888] r8152-cfgselector 2-1: Unknown version 0x0000 [ 219.346537][ T4874] qcserial 5-1:0.2: device disconnected [ 219.371365][ T4888] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 219.526348][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.547104][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.768386][T10536] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.777768][T10536] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.789587][T10536] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.801250][T10536] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.224932][T10557] loop4: detected capacity change from 0 to 4096 [ 220.230196][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'. [ 220.315224][T10574] damon: invalid nr_regions. min (2047) > max (1) [ 220.352898][T10557] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 220.374312][T10577] loop0: detected capacity change from 0 to 8 [ 220.495573][T10557] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 220.517887][T10583] loop2: detected capacity change from 0 to 1024 [ 220.564284][T10577] SQUASHFS error: xz decompression failed, data probably corrupt [ 220.593710][T10577] SQUASHFS error: Failed to read block 0xa8: -5 [ 220.628225][ T4168] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 220.645374][T10577] SQUASHFS error: xz decompression failed, data probably corrupt [ 220.686376][T10583] hfsplus: bad catalog entry type [ 220.698726][ T4168] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 220.709096][T10577] SQUASHFS error: Failed to read block 0xa8: -5 [ 220.724291][ T26] audit: type=1800 audit(1750191373.563:2888): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2887" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 220.801434][ T4254] hfsplus: b-tree write err: -5, ino 4 [ 221.666937][T10632] loop2: detected capacity change from 0 to 4096 [ 221.707139][T10642] loop0: detected capacity change from 0 to 1024 [ 221.719149][T10638] loop3: detected capacity change from 0 to 1764 [ 221.773007][T10642] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 221.782750][T10632] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 221.816380][T10642] EXT4-fs (loop0): Ignoring removed bh option [ 221.878229][T10642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e018, mo2=0000] [ 222.075290][T10632] ntfs3: loop2: failed to convert "c46c" to cp737 [ 222.105241][T10642] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.2917: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.167217][T10642] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 222.187778][T10642] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.2917: lblock 0 mapped to illegal pblock 48 (length 1) [ 222.246207][T10642] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 222.257620][T10660] loop3: detected capacity change from 0 to 256 [ 222.292103][T10642] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.2917: Failed to acquire dquot type 0 [ 222.354598][T10642] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 222.422134][T10642] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.2917: mark_inode_dirty error [ 222.509166][T10642] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 222.574728][T10642] EXT4-fs (loop0): 1 orphan inode deleted [ 222.599046][ T512] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.602468][T10642] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,lazytime,,errors=continue. Quota mode: none. [ 222.682331][ T512] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 222.683574][T10672] netlink: 'syz.1.2931': attribute type 4 has an invalid length. [ 222.717670][T10674] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 222.739372][ T512] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:3: Failed to release dquot type 0 [ 222.748831][T10672] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2931'. [ 222.810593][T10672] rdma_rxe: ignoring netdev event = 23 for bond_slave_1 [ 222.843969][T10672] rdma_rxe: bond_slave_1 changed mtu to 68 [ 222.878927][T10672] wlan1: mtu less than device minimum [ 222.895870][T10672] rdma_rxe: ignoring netdev event = 23 for bond_slave_1 [ 222.900272][ T4221] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.913654][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 222.927403][T10679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2934'. [ 222.940562][T10672] rdma_rxe: bond_slave_1 changed mtu to 1500 [ 222.953662][ T4221] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 222.958813][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 222.983545][ T4221] EXT4-fs error (device loop0): ext4_release_dquot:6240: comm kworker/u4:5: Failed to release dquot type 0 [ 223.015121][ T4169] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 223.036360][T10646] loop4: detected capacity change from 0 to 32768 [ 223.052007][ T4169] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 223.085005][ T4169] EXT4-fs error (device loop0): ext4_quota_off:6510: inode #3: comm syz-executor: mark_inode_dirty error [ 223.120293][T10646] XFS: attr2 mount option is deprecated. [ 223.142988][T10685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.297894][T10683] loop2: detected capacity change from 0 to 4096 [ 223.478080][T10646] XFS (loop4): Mounting V5 Filesystem [ 223.527690][T10683] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 223.565904][T10699] loop1: detected capacity change from 0 to 2048 [ 223.698327][T10683] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 223.730720][T10712] loop0: detected capacity change from 0 to 512 [ 223.781219][T10699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.797262][T10683] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 223.813855][T10646] XFS (loop4): Ending clean mount [ 223.848092][T10646] XFS (loop4): Quotacheck needed: Please wait. [ 223.858946][T10712] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.868680][T10683] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 223.894155][T10712] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 223.923940][T10683] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 223.999851][T10712] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 224.014835][T10683] ntfs: volume version 3.1. [ 224.034649][T10712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 224.057025][T10683] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 224.066296][T10646] XFS (loop4): Quotacheck: Done. [ 224.074757][T10683] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 224.128856][T10712] System zones: 0-2, 18-18, 34-34 [ 224.141677][T10712] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 224.174636][T10683] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 224.180734][T10723] loop3: detected capacity change from 0 to 16 [ 224.219740][T10712] EXT4-fs (loop0): 1 truncate cleaned up [ 224.238731][T10712] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000003,. Quota mode: none. [ 224.260804][T10683] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 224.272597][T10683] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 224.301483][T10723] erofs: (device loop3): mounted with root inode @ nid 36. [ 224.314828][ T4168] XFS (loop4): Unmounting Filesystem [ 224.526302][T10729] loop1: detected capacity change from 0 to 512 [ 224.705437][T10729] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 224.740999][T10729] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 224.753211][T10729] EXT4-fs (loop1): 1 truncate cleaned up [ 224.758975][T10729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.771271][T10740] loop2: detected capacity change from 0 to 1024 [ 224.883294][T10747] netlink: 'syz.3.2960': attribute type 1 has an invalid length. [ 224.912408][T10747] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2960'. [ 225.343378][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 225.413129][T10775] PKCS8: Unsupported PKCS#8 version [ 225.690955][T10789] loop2: detected capacity change from 0 to 256 [ 226.336117][T10815] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 226.486031][T10819] [U]  [ 226.489343][ T4940] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.536158][T10783] loop0: detected capacity change from 0 to 32768 [ 226.539583][T10823] loop1: detected capacity change from 0 to 256 [ 226.637529][T10823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 226.680548][T10823] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 226.706105][T10823] exFAT-fs (loop1): Filesystem has been set read-only [ 226.709834][T10783] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 226.784360][ T4940] usb 5-1: Using ep0 maxpacket: 32 [ 226.791729][T10783] (syz.0.2979,10783,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 226.886646][ T4169] (syz-executor,4169,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 226.944285][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 226.970781][ T4940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.032753][T10845] loop1: detected capacity change from 0 to 64 [ 227.063232][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 227.072899][ T4940] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 227.081889][ T4940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.098619][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3012'. [ 227.108832][ T4940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.126512][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3012'. [ 227.318954][ T4940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.338700][ T4940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.379981][ T4940] usb 5-1: Product: syz [ 227.398983][ T4940] usb 5-1: Manufacturer: syz [ 227.426912][ T4940] usb 5-1: SerialNumber: syz [ 227.603926][T10867] loop3: detected capacity change from 0 to 764 [ 227.649274][T10867] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.769259][T10873] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 227.833211][ T4940] usb 5-1: 0:2 : does not exist [ 227.949583][ T4940] usb 5-1: USB disconnect, device number 16 [ 228.148986][T10893] tmpfs: Bad value for 'mpol' [ 228.242195][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.353499][T10902] loop0: detected capacity change from 0 to 4096 [ 228.371774][T10906] device bond4 entered promiscuous mode [ 228.378036][T10906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.398173][T10909] loop4: detected capacity change from 0 to 164 [ 228.407676][T10906] bond4 (unregistering): Released all slaves [ 228.460584][T10902] ntfs: volume version 3.1. [ 228.471756][T10909] Unable to read rock-ridge attributes [ 228.514086][T10909] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 228.679318][T10915] tmpfs: Bad value for 'mpol' [ 228.756761][T10919] usb usb8: usbfs: process 10919 (syz.0.3046) did not claim interface 0 before use [ 229.188800][ T4211] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 229.598691][ T4211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.644666][ T4211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.703475][T10931] loop4: detected capacity change from 0 to 32768 [ 229.736106][T10931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3052 (10931) [ 229.768828][ T4211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 229.777921][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.820849][ T4211] usb 2-1: SerialNumber: syz [ 229.855028][T10931] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 229.880111][T10931] BTRFS info (device loop4): using free space tree [ 229.901485][ T4211] usb 2-1: 0:2 : does not exist [ 229.939220][T10931] BTRFS info (device loop4): has skinny extents [ 230.207037][T10973] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 230.207037][T10973] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 230.334419][ T4940] usb 2-1: USB disconnect, device number 12 [ 230.409337][T10998] device wlan1 entered promiscuous mode [ 230.464249][T10931] BTRFS info (device loop4): enabling ssd optimizations [ 230.934562][T11025] netlink: 'syz.3.3089': attribute type 16 has an invalid length. [ 230.972799][T11027] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 231.176176][T11044] xt_TCPMSS: Only works on TCP SYN packets [ 231.443441][T11056] No such timeout policy "syz1" [ 231.502031][T11062] loop3: detected capacity change from 0 to 164 [ 231.846479][T11039] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 231.959877][T11077] loop1: detected capacity change from 0 to 4096 [ 231.994608][T11085] ALSA: mixer_oss: invalid OSS volume 'u' [ 232.010576][T11077] __ntfs_error: 26 callbacks suppressed [ 232.010593][T11077] ntfs: (device loop1): parse_options(): NLS character set ií^åÀÒÄeÔKÜö+Uso8ow_sys_films=ŽHš [ 232.010593][T11077] ~Yì˜tc’ÝHye`Íer not found. Using previous one ascii. [ 232.068447][T11077] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 232.094288][T11092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3120'. [ 232.108089][T11077] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 232.128586][T11039] usb 5-1: Using ep0 maxpacket: 16 [ 232.135646][T11077] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 232.149342][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 232.154209][T11077] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 232.183432][T11077] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 232.196277][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'. [ 232.206896][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'. [ 232.217248][T11077] ntfs: volume version 3.1. [ 232.232244][T11077] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 232.258813][T11039] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.288691][T11039] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.299884][T11077] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 232.318586][T11039] usb 5-1: config 1 has no interface number 1 [ 232.335066][T11039] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 232.355793][T11077] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 232.377616][T11039] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 232.389055][T11043] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 232.396809][T11077] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 232.418798][T11039] usb 5-1: config 1 interface 2 has no altsetting 0 [ 232.595723][T11097] netlink: 'syz.1.3122': attribute type 21 has an invalid length. [ 232.618788][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.624925][T11039] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.645927][T11039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.664886][T11039] usb 5-1: Product: syz [ 232.669549][T11039] usb 5-1: Manufacturer: syz [ 232.674507][T11039] usb 5-1: SerialNumber: syz [ 232.695076][T11089] loop0: detected capacity change from 0 to 32768 [ 232.739571][T11089] XFS: ikeep mount option is deprecated. [ 232.761967][T11102] netlink: 'syz.1.3124': attribute type 9 has an invalid length. [ 232.816582][T11089] XFS (loop0): Mounting V5 Filesystem [ 232.979297][T11043] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=e1.35 [ 232.988743][T11043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.997315][T11043] usb 4-1: Product: syz [ 233.003159][T11043] usb 4-1: Manufacturer: syz [ 233.007853][T11043] usb 4-1: SerialNumber: syz [ 233.018212][T11043] usb 4-1: config 0 descriptor?? [ 233.023807][T11039] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 233.032033][T11039] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 233.040524][T11039] usb 5-1: selecting invalid altsetting 0 [ 233.040525][T11089] XFS (loop0): Ending clean mount [ 233.058982][T11039] usb 5-1: selecting invalid altsetting 0 [ 233.082387][T11043] (null): radio-mr800 - initialization failed [ 233.085989][T11089] XFS (loop0): Quotacheck needed: Please wait. [ 233.095627][T11043] radio-mr800: probe of 4-1:0.0 failed with error -22 [ 233.114874][T11043] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 233.151072][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.166480][T11039] usb 5-1: USB disconnect, device number 17 [ 233.202972][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.258434][ T23] usb 3-1: Product: syz [ 233.276503][ T23] usb 3-1: Manufacturer: syz [ 233.283899][T11043] usb 4-1: USB disconnect, device number 12 [ 233.295990][ T23] usb 3-1: SerialNumber: syz [ 233.323250][T11126] loop1: detected capacity change from 0 to 64 [ 233.347188][T11089] XFS (loop0): Quotacheck: Done. [ 233.369539][ T23] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.400125][ T4169] XFS (loop0): Unmounting Filesystem [ 233.448488][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.913153][T11141] netlink: 'syz.3.3139': attribute type 6 has an invalid length. [ 233.991894][ T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 234.302197][T11157] loop0: detected capacity change from 0 to 1024 [ 234.366870][T11157] EXT4-fs (loop0): Ignoring removed bh option [ 234.445989][ T4211] usb 3-1: USB disconnect, device number 13 [ 234.489266][T11157] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,bh,usrjquota=,nodelalloc,auto_da_alloc,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,abort,nombcache,,errors=continue. Quota mode: none. [ 234.664214][T11157] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.3146: missing EA_INODE flag [ 234.694645][T11157] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3146: error while reading EA inode 11 err=-117 [ 235.028753][T11043] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 235.113785][ T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 235.130642][ T23] ath9k_htc: Failed to initialize the device [ 235.157562][ T4211] usb 3-1: ath9k_htc: USB layer deinitialized [ 235.390883][T11043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 235.402058][T11043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 235.445932][T11043] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 235.473650][T11231] unsupported nla_type 40 [ 235.488625][T11043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.524852][T11232] loop0: detected capacity change from 0 to 1024 [ 235.525271][T11043] usb 5-1: config 0 descriptor?? [ 235.572245][T11234] netlink: 'syz.1.3182': attribute type 8 has an invalid length. [ 235.638041][T11236] loop2: detected capacity change from 0 to 8 [ 235.732494][T11236] SQUASHFS error: lzo decompression failed, data probably corrupt [ 235.757941][T11236] SQUASHFS error: Failed to read block 0x91: -5 [ 235.764853][T11236] SQUASHFS error: Unable to read metadata cache entry [8f] [ 235.784364][T11236] SQUASHFS error: Unable to read inode 0x11f [ 235.879322][T11039] usb 5-1: USB disconnect, device number 18 [ 236.015743][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3194'. [ 236.067661][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3194'. [ 236.978272][T11284] netlink: 'syz.4.3206': attribute type 10 has an invalid length. [ 237.035182][T11284] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 237.107113][T11263] loop2: detected capacity change from 0 to 32768 [ 237.137839][T11263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3197 (11263) [ 237.201556][T11290] loop3: detected capacity change from 0 to 256 [ 237.227456][T11263] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 237.249581][T11263] BTRFS info (device loop2): using free space tree [ 237.256154][T11263] BTRFS info (device loop2): has skinny extents [ 237.257167][T11296] xt_l2tp: v2 doesn't support IP mode [ 237.278457][T11290] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x1782a9fb, utbl_chksum : 0xe619d30d) [ 237.384419][T11309] netlink: set zone limit has 8 unknown bytes [ 237.502787][T11039] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 237.533325][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3217'. [ 237.559107][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3217'. [ 237.584503][T11323] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3217'. [ 237.666373][T11263] BTRFS info (device loop2): enabling ssd optimizations [ 237.826601][T11335] 9pnet: Insufficient options for proto=fd [ 237.852328][T11334] loop4: detected capacity change from 0 to 24 [ 237.875669][T11334] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 237.985348][T11334] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 238.052707][T11328] loop3: detected capacity change from 0 to 32768 [ 238.110836][T11039] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 238.120107][T11039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.128304][T11039] usb 1-1: Product: syz [ 238.133104][T11039] usb 1-1: Manufacturer: syz [ 238.137734][T11039] usb 1-1: SerialNumber: syz [ 238.144234][T11328] resize option for remount only [ 238.175818][T11039] usb 1-1: config 0 descriptor?? [ 238.232780][T11039] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 238.250682][T11039] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 238.277546][T11039] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 238.500778][ T23] usb 1-1: USB disconnect, device number 13 [ 238.597669][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 238.757518][T11364] loop1: detected capacity change from 0 to 128 [ 238.772388][T11358] loop3: detected capacity change from 0 to 4096 [ 238.874683][T11358] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 238.889241][T11364] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 238.946152][T11364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.970014][T11358] ntfs3: loop3: Failed to load $Extend. [ 239.489688][T11399] loop3: detected capacity change from 0 to 256 [ 239.521478][T11400] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.582006][T11399] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 239.791860][T11416] loop4: detected capacity change from 0 to 256 [ 239.821410][T11410] loop1: detected capacity change from 0 to 4096 [ 239.859860][T11422] openvswitch: netlink: Message has 4 unknown bytes. [ 239.909556][T11410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.982745][T11427] netlink: 'syz.3.3266': attribute type 11 has an invalid length. [ 240.066088][T11410] EXT4-fs error (device loop1): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.1.3259: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 240.146638][T11410] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.3259: directory missing '..' [ 240.201366][T11433] IPv6: Can't replace route, no match found [ 240.381068][T11442] netlink: 'syz.0.3275': attribute type 79 has an invalid length. [ 240.447622][T11448] loop3: detected capacity change from 0 to 64 [ 240.728754][T11464] loop2: detected capacity change from 0 to 16 [ 240.804221][T11462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.823110][T11464] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 240.842547][T11462] bond0: (slave rose0): Enslaving as an active interface with an up link [ 240.866402][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 241.021020][T11351] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.064174][T11475] device netdevsim0 entered promiscuous mode [ 241.115259][T11475] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.165462][T11456] infiniband syz2: set active [ 241.211678][T11456] infiniband syz2: added veth0_vlan [ 241.351297][T11456] RDS/IB: syz2: added [ 241.360079][T11490] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 241.381548][T11456] smc: adding ib device syz2 with port count 1 [ 241.408223][T11456] smc: ib device syz2 port 1 has pnetid [ 241.468850][T11351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.549105][T11351] usb 4-1: config 2 has an invalid interface number: 24 but max is 0 [ 241.558453][T11351] usb 4-1: config 2 has no interface number 0 [ 241.603718][T11351] usb 4-1: config 2 interface 24 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 241.629032][T11351] usb 4-1: config 2 interface 24 has no altsetting 0 [ 241.818056][T11505] loop0: detected capacity change from 0 to 4096 [ 241.846949][T11351] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=23.12 [ 241.868722][T11351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.876862][T11351] usb 4-1: Product: syz [ 241.888609][T11351] usb 4-1: Manufacturer: syz [ 241.898892][T11351] usb 4-1: SerialNumber: syz [ 241.914450][T11513] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3303'. [ 241.930539][T11505] __ntfs_warning: 7 callbacks suppressed [ 241.930557][T11505] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.054328][T11505] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 242.091718][T11505] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 242.244182][T11505] ntfs: volume version 3.1. [ 242.252887][T11524] XFS (nullb0): Invalid superblock magic number [ 242.299661][T11351] gl620a: probe of 4-1:2.24 failed with error -22 [ 242.319324][T11351] usb 4-1: USB disconnect, device number 13 [ 242.969628][T11562] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3318'. [ 243.283289][T11580] i2c i2c-0: Invalid block write size 34 [ 243.409204][T11587] netlink: 'syz.2.3328': attribute type 3 has an invalid length. [ 243.440430][T11589] loop3: detected capacity change from 0 to 256 [ 243.467449][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'. [ 243.650322][T11600] affs: No valid root block on device nbd4 [ 244.569711][T11663] xt_hashlimit: max too large, truncated to 1048576 [ 244.576669][T11661] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3360'. [ 244.661122][T11666] loop2: detected capacity change from 0 to 256 [ 244.688916][ T4940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 244.807029][T11678] loop4: detected capacity change from 0 to 256 [ 244.831848][T11680] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 244.847005][T11678] exfat: Deprecated parameter 'namecase' [ 244.894446][T11678] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 244.974350][ T4940] usb 2-1: Using ep0 maxpacket: 16 [ 245.101482][T11682] loop3: detected capacity change from 0 to 4096 [ 245.129147][ T4940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 245.155247][ T4940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 245.181505][T11682] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 245.207543][ T4940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 128 [ 245.335427][T11682] ntfs3: loop3: failed to convert "c46c" to iso8859-15 [ 245.448986][ T4940] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 245.471619][ T4940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.538565][ T4940] usb 2-1: Product: syz [ 245.551413][ T4940] usb 2-1: Manufacturer: syz [ 245.573208][ T4940] usb 2-1: SerialNumber: syz [ 245.610318][ T4940] usb 2-1: config 0 descriptor?? [ 245.639684][T11650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.646958][T11650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.688685][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 245.695238][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 245.714844][ T4940] port100 2-1:0.0: NFC: Could not get supported command types [ 245.867080][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3389'. [ 245.885951][ T4940] usb 2-1: USB disconnect, device number 13 [ 246.090259][T11728] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 246.394076][T11740] loop4: detected capacity change from 0 to 2048 [ 246.482131][T11740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.683549][T11756] loop3: detected capacity change from 0 to 64 [ 246.785405][T11756] MINIX-fs: mounting file system with errors, running fsck is recommended [ 247.024607][T11723] loop2: detected capacity change from 0 to 40427 [ 247.196510][T11780] loop1: detected capacity change from 0 to 1024 [ 247.219659][T11723] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 247.227450][T11723] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 247.262074][T11723] F2FS-fs (loop2): invalid crc value [ 247.309031][T11780] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x000000000000000e,noauto_da_alloc,init_itable=0x0000000000000005,user_xattr,errors=remount-ro,. Quota mode: writeback. [ 247.354962][T11795] loop3: detected capacity change from 0 to 2048 [ 247.388456][T11723] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 247.426852][T11780] EXT4-fs error (device loop1): ext4_lookup:1858: inode #14: comm syz.1.3419: iget: immutable or append flags not allowed on symlinks [ 247.448486][T11795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.476000][T11780] EXT4-fs (loop1): Remounting filesystem read-only [ 247.591118][T11723] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.605629][T11723] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.913863][T11815] loop1: detected capacity change from 0 to 128 [ 248.008932][ T4940] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 248.061507][T11819] libceph: resolve '0.' (ret=-3): failed [ 248.343985][T11828] loop4: detected capacity change from 0 to 256 [ 248.418985][ T4940] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 248.439434][T11828] exfat: Deprecated parameter 'namecase' [ 248.447962][ T4940] usb 4-1: config 0 has no interface number 0 [ 248.506250][T11828] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 248.508637][ T4301] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 248.660033][ T4940] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 248.698276][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.711246][T11837] netlink: 'syz.4.3437': attribute type 1 has an invalid length. [ 248.717229][ T4940] usb 4-1: Product: syz [ 248.737505][ T4940] usb 4-1: Manufacturer: syz [ 248.757265][T11837] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3437'. [ 248.763065][ T4940] usb 4-1: SerialNumber: syz [ 248.784450][ T4940] usb 4-1: config 0 descriptor?? [ 248.803719][T11837] nbd: couldn't find a device at index 1024 [ 248.828739][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 248.843143][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3439'. [ 248.871168][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3439'. [ 248.948822][ T4301] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 248.967351][ T4301] usb 2-1: config 0 has no interface number 0 [ 248.996091][T11850] nftables ruleset with unbound set [ 249.003185][T11848] netlink: 'syz.0.3441': attribute type 21 has an invalid length. [ 249.073339][ T4940] cdc_subset: probe of 4-1:0.114 failed with error -22 [ 249.148842][ T4301] usb 2-1: New USB device found, idVendor=7e16, idProduct=1bd1, bcdDevice=16.38 [ 249.178292][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.213579][ T4301] usb 2-1: Product: syz [ 249.217807][ T4301] usb 2-1: Manufacturer: syz [ 249.243394][ T4301] usb 2-1: SerialNumber: syz [ 249.277191][ T4301] usb 2-1: config 0 descriptor?? [ 249.307427][ T4244] usb 4-1: USB disconnect, device number 14 [ 249.329812][ T4301] usb-storage 2-1:0.135: USB Mass Storage device detected [ 249.488854][ T4940] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 249.567326][ T23] usb 2-1: USB disconnect, device number 14 [ 249.614532][ T1106] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 249.766785][T11895] loop4: detected capacity change from 0 to 64 [ 249.782306][ T4940] usb 3-1: Using ep0 maxpacket: 16 [ 250.006218][ T26] audit: type=1400 audit(1750191402.843:2889): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=11907 comm="syz.3.3458" [ 250.090997][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3459'. [ 250.144605][ T4940] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 250.155063][T11911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 250.168562][ T4940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 250.178988][ T4940] usb 3-1: Product: syz [ 250.183215][ T4940] usb 3-1: Manufacturer: syz [ 250.197743][T11916] loop4: detected capacity change from 0 to 16 [ 250.204536][ T4940] usb 3-1: SerialNumber: syz [ 250.231545][ T4940] r8152-cfgselector 3-1: config 0 descriptor?? [ 250.248846][ T1106] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 250.258650][ T1106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.267327][ T1106] usb 1-1: Product: syz [ 250.295144][ T1106] usb 1-1: Manufacturer: syz [ 250.300381][ T1106] usb 1-1: SerialNumber: syz [ 250.314907][ T1106] usb 1-1: config 0 descriptor?? [ 250.341765][T11916] erofs: (device loop4): mounted with root inode @ nid 36. [ 250.365022][T11916] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 250.416097][ T1106] usb 1-1: selecting invalid altsetting 3 [ 250.427132][T11916] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -47 in[61, 4035] out[1851] [ 250.451223][T11928] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 250.480309][ T1106] comedi comedi0: could not set alternate setting 3 in high speed [ 250.490558][T11916] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 250.517931][ T1106] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 250.543521][ T1106] usbdux: probe of 1-1:0.0 failed with error -22 [ 250.650281][ T1106] usb 1-1: USB disconnect, device number 14 [ 250.685801][T11934] AppArmor: change_hat: Invalid input '°' [ 250.748917][ T4940] r8152-cfgselector 3-1: Unknown version 0x0000 [ 250.792047][T11940] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 250.799135][ T4940] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 251.012726][T11953] loop4: detected capacity change from 0 to 164 [ 251.618837][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 251.825085][T12001] Cannot find del_set index 2 as target [ 251.868645][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 251.990679][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.018611][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.069132][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 252.078325][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.168700][ T4940] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 252.170001][ T23] hub 3-1:4.0: USB hub found [ 252.389036][ T23] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 252.478885][ T4940] usb 2-1: Using ep0 maxpacket: 16 [ 252.624438][ T4940] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 252.648792][ T4940] usb 2-1: config 0 has no interface number 0 [ 252.656030][ T4940] usb 2-1: config 0 interface 237 has no altsetting 0 [ 252.709126][ T4211] usb 3-1: USB disconnect, device number 15 [ 252.889073][ T4940] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 252.918763][ T4940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.947400][ T4940] usb 2-1: Product: syz [ 252.952110][ T4940] usb 2-1: Manufacturer: syz [ 252.956745][ T4940] usb 2-1: SerialNumber: syz [ 252.985743][ T4940] usb 2-1: config 0 descriptor?? [ 253.051632][ T4940] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 253.081047][T12026] loop3: detected capacity change from 0 to 40427 [ 253.114383][T12026] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 253.138740][T12026] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 253.224322][T12026] F2FS-fs (loop3): invalid crc value [ 253.232816][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3518'. [ 253.279762][ T4940] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 253.298163][T12026] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.313806][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3519'. [ 253.318779][ T4940] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 253.390317][ T4940] snd_usb_podhd: probe of 2-1:0.237 failed with error -22 [ 253.507539][T11351] usb 2-1: USB disconnect, device number 15 [ 253.524028][T12026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.684769][T12084] loop2: detected capacity change from 0 to 1024 [ 253.734570][T12049] loop0: detected capacity change from 0 to 32768 [ 253.779100][T12084] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.891156][T12049] read_mapping_page failed! [ 254.194219][T12107] xt_limit: Overflow, try lower: 0/0 [ 254.481856][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3540'. [ 254.625510][T12116] loop4: detected capacity change from 0 to 4096 [ 254.722671][T12116] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 254.878285][T12116] ntfs: volume version 3.1. [ 254.969973][ T4940] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.248843][ T4211] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.369249][T12166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3562'. [ 255.383808][ T4940] usb 3-1: config 4 has an invalid interface number: 92 but max is 0 [ 255.413096][ T4940] usb 3-1: config 4 has no interface number 0 [ 255.420462][ T4940] usb 3-1: config 4 interface 92 has no altsetting 0 [ 255.594114][T12178] loop3: detected capacity change from 0 to 512 [ 255.613310][ T4211] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 255.628791][ T4940] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 1.4f [ 255.636475][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.647294][ T4940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.665908][ T4940] usb 3-1: Product: syz [ 255.671995][ T4211] usb 1-1: config 0 descriptor?? [ 255.693169][T12178] EXT4-fs (loop3): Ignoring removed oldalloc option [ 255.710557][T12178] EXT4-fs (loop3): Ignoring removed nobh option [ 255.717276][ T4940] usb 3-1: Manufacturer: syz [ 255.725149][ T4211] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 255.732374][ T4940] usb 3-1: SerialNumber: syz [ 255.760867][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767266][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.821543][T12178] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc,. Quota mode: writeback. [ 255.851653][T12178] ext4 filesystem being mounted at /733/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.078262][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3576'. [ 256.113550][ T4940] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.92/input/input15 [ 256.158751][ T3531] bcm5974 3-1:4.92: could not read from device [ 256.183268][ T4940] usb 3-1: USB disconnect, device number 16 [ 256.198061][T12201] loop1: detected capacity change from 0 to 512 [ 256.221850][T12203] netlink: 'syz.3.3580': attribute type 3 has an invalid length. [ 256.232278][T12203] netlink: 'syz.3.3580': attribute type 3 has an invalid length. [ 256.282888][T12201] EXT4-fs (loop1): Ignoring removed nobh option [ 256.319289][T12201] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.3579: bad orphan inode 15 [ 256.384145][T12201] ext4_test_bit(bit=14, block=5) = 0 [ 256.427818][T12201] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,nobh,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 256.432184][T12212] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 256.450621][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.467312][T12212] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 256.671693][T12218] tmpfs: Bad value for 'mpol' [ 256.818611][ T4211] gspca_cpia1: usb_control_msg 05, error -110 [ 256.838667][ T4211] gspca_cpia1: usb_control_msg 01, error -32 [ 256.877499][ T4211] gspca_cpia1: usb_control_msg 01, error -32 [ 256.898662][ T4211] gspca_cpia1: usb_control_msg 01, error -32 [ 256.929579][ T4211] gspca_cpia1: usb_control_msg 01, error -32 [ 256.935789][ T4211] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 257.199249][T12143] loop0: detected capacity change from 0 to 40427 [ 257.281316][T12143] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 257.329172][T12143] F2FS-fs (loop0): invalid crc value [ 257.338213][T12250] loop3: detected capacity change from 0 to 64 [ 257.357572][T12143] F2FS-fs (loop0): invalid crc value [ 257.380918][T12143] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 257.447291][ T4211] usb 1-1: USB disconnect, device number 15 [ 257.513550][ T23] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 257.768767][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 257.858851][T12275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3609'. [ 257.888794][ T23] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 257.896939][ T23] usb 5-1: config 0 has no interface number 0 [ 257.947133][ T23] usb 5-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 258.009231][ T4211] Bluetooth: hci4: command 0x0405 tx timeout [ 258.123806][T12279] loop2: detected capacity change from 0 to 4096 [ 258.158838][ T23] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 258.168002][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.222700][T12279] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 258.245001][ T23] usb 5-1: Product: syz [ 258.271325][ T23] usb 5-1: Manufacturer: syz [ 258.289158][ T23] usb 5-1: SerialNumber: syz [ 258.307765][ T23] usb 5-1: config 0 descriptor?? [ 258.359012][T12247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.462289][ T23] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 258.922963][T12329] loop0: detected capacity change from 0 to 4096 [ 258.979765][T12329] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 259.085942][T12329] ntfs: volume version 3.1. [ 259.179513][ T4940] usb 5-1: USB disconnect, device number 19 [ 259.189080][ T512] usb 5-1: Failed to submit usb control message: -71 [ 259.206182][ T512] usb 5-1: unable to send the bmi data to the device: -71 [ 259.268611][ T512] usb 5-1: unable to get target info from device [ 259.291858][T12353] loop3: detected capacity change from 0 to 4096 [ 259.298936][ T512] usb 5-1: could not get target info (-71) [ 259.326936][ T512] usb 5-1: could not probe fw (-71) [ 259.467090][T12371] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3653'. [ 259.561158][T12353] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 259.578489][T12376] loop4: detected capacity change from 0 to 8 [ 259.645168][T12376] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 259.691085][ T9] ntfs3: loop3: ino=1c, Internal error [ 259.697948][ T9] ntfs3: loop3: ntfs3_write_inode r=1c failed, -22. [ 259.855173][T12376] cramfs: Error -3 while decompressing! [ 259.880341][T12376] cramfs: ffffffff961ca228(26)->ffff888054444000(4096) [ 259.912074][T12376] cramfs: Error -5 while decompressing! [ 259.917840][T12376] cramfs: ffffffff961ca242(26)->ffff888054443000(4096) [ 259.949536][T12376] cramfs: Error -3 while decompressing! [ 259.973573][T12376] cramfs: ffffffff961ca25c(16)->ffff88807f7cf000(4096) [ 260.007803][T12376] cramfs: Error -3 while decompressing! [ 260.024463][T12401] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 260.032767][T12376] cramfs: ffffffff961ca228(26)->ffff888054444000(4096) [ 260.153774][T12406] loop0: detected capacity change from 0 to 256 [ 260.226063][ T26] audit: type=1800 audit(260.171:2890): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.3664" name="/" dev="sockfs" ino=57162 res=0 errno=0 [ 260.247113][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.475262][T12424] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 260.582659][T12418] loop4: detected capacity change from 0 to 4096 [ 260.686580][T12418] ntfs: volume version 3.1. [ 260.829318][T12444] syz.2.3688 (12444): drop_caches: 0 [ 260.878930][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'. [ 260.887879][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3691'. [ 260.941200][T12450] loop2: detected capacity change from 0 to 64 [ 261.068755][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 261.123510][ T4211] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 261.264233][T12462] loop2: detected capacity change from 0 to 512 [ 261.345408][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 261.356571][T12462] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 261.379845][ T4211] usb 2-1: Using ep0 maxpacket: 32 [ 261.401069][T12462] UDF-fs: Scanning with blocksize 512 failed [ 261.435540][T12462] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 261.468967][ T23] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 261.498979][ T4211] usb 2-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 261.522937][T12462] UDF-fs: Scanning with blocksize 1024 failed [ 261.534541][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.559367][ T4211] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 261.576954][T12462] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 261.584741][ T23] usb 1-1: config 0 has no interface number 0 [ 261.619293][T12462] UDF-fs: Scanning with blocksize 2048 failed [ 261.658787][T12462] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 261.679049][ T4211] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.691989][T12462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.698645][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.738151][ T4211] usb 2-1: SerialNumber: syz [ 261.770553][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 261.799813][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.837730][ T23] usb 1-1: Product: syz [ 261.856906][ T23] usb 1-1: Manufacturer: syz [ 261.867037][ T23] usb 1-1: SerialNumber: syz [ 261.885326][ T23] usb 1-1: config 0 descriptor?? [ 262.043838][ T4211] usb 2-1: USB disconnect, device number 16 [ 262.088466][T12458] loop3: detected capacity change from 0 to 32768 [ 262.143644][ T23] usb 1-1: USB disconnect, device number 16 [ 262.153775][T12458] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 262.240137][T12458] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 262.266140][T12458] (syz.3.3694,12458,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 262.309533][ T4180] ocfs2: Unmounting device (7,3) on (node local) [ 262.470231][T12492] loop4: detected capacity change from 0 to 1024 [ 262.578665][T12492] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 262.596160][T12492] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 262.626164][T12492] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.660325][T12503] ieee802154 phy0 wpan0: encryption failed: -90 [ 262.786068][T12492] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 262.893020][T12514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3720'. [ 263.197186][T12533] netlink: 'syz.4.3727': attribute type 8 has an invalid length. [ 263.218789][T12528] libceph: resolve '. [ 263.218789][T12528] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 263.218789][T12528] ' (ret=-3): failed [ 263.263042][T12535] netlink: 'syz.0.3731': attribute type 13 has an invalid length. [ 263.451137][T12543] loop0: detected capacity change from 0 to 256 [ 263.461807][T12546] netlink: 'syz.4.3736': attribute type 32 has an invalid length. [ 263.581232][T12549] tipc: Can't bind to reserved service type 0 [ 263.783401][T12556] loop2: detected capacity change from 0 to 1024 [ 263.854265][T12559] netlink: 'syz.4.3743': attribute type 27 has an invalid length. [ 263.909631][ T4254] hfsplus: b-tree write err: -5, ino 4 [ 263.939508][T12559] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 264.040616][T12524] loop3: detected capacity change from 0 to 32768 [ 264.146588][T12524] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 264.230581][ T4180] ocfs2: Unmounting device (7,3) on (node local) [ 264.429446][T12547] loop1: detected capacity change from 0 to 32768 [ 264.546009][T12547] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 264.578634][ T1106] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 264.588189][T12595] netlink: 'syz.3.3759': attribute type 24 has an invalid length. [ 264.847692][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 264.978959][ T1106] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.997551][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'. [ 265.010715][ T1106] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 265.031614][ T1106] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 265.054654][T12614] netlink: 'syz.0.3769': attribute type 1 has an invalid length. [ 265.078343][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.100099][ T4940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.102704][T12614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3769'. [ 265.136756][ T1106] usb 3-1: config 0 descriptor?? [ 265.187672][T12616] damon: min_nr_regions (0) must be at least 3 [ 265.214787][T12618] loop1: detected capacity change from 0 to 2048 [ 265.231996][T12620] cgroup: Invalid name [ 265.343684][T12618] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,data_err=ignore,max_batch_time=0x0000000000000009,sysvgroups,,errors=continue. Quota mode: none. [ 265.429301][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 265.561549][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3781'. [ 265.579220][ T4940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.608455][ T4940] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.628882][ T1106] Bluetooth: Can't get version to change to load ram patch err [ 265.636676][ T1106] Bluetooth: Loading patch file failed [ 265.652517][ T1106] ath3k: probe of 3-1:0.0 failed with error -71 [ 265.667724][T12638] loop4: detected capacity change from 0 to 4096 [ 265.675891][ T1106] usb 3-1: USB disconnect, device number 17 [ 265.804771][T12651] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.825039][T12638] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 265.840920][ T4940] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 265.860501][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.877154][T12638] Remounting filesystem read-only [ 265.903847][ T4940] usb 4-1: Product: syz [ 265.919417][ T4940] usb 4-1: Manufacturer: syz [ 265.936693][ T4940] usb 4-1: SerialNumber: syz [ 265.949428][ T4940] r8152-cfgselector 4-1: config 0 descriptor?? [ 266.135476][T12661] loop1: detected capacity change from 0 to 256 [ 266.182712][T12661] exfat: Deprecated parameter 'namecase' [ 266.213855][T12661] exfat: Deprecated parameter 'namecase' [ 266.229965][ T4940] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 266.292941][T12661] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 266.323754][T12667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 266.446306][T12669] loop2: detected capacity change from 0 to 512 [ 266.452283][ T4940] usb 4-1: USB disconnect, device number 15 [ 266.665552][T12669] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 266.808824][T12669] Quota error (device loop2): write_blk: dquota write failed [ 266.816378][T12669] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 266.880729][T12669] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.3795: Failed to acquire dquot type 0 [ 266.889696][T12689] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3803'. [ 266.916019][T12669] EXT4-fs (loop2): 1 truncate cleaned up [ 266.958603][T12669] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.054326][T12669] Quota error (device loop2): write_blk: dquota write failed [ 267.118949][T12669] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 267.178486][T12669] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.3795: Failed to acquire dquot type 0 [ 267.518852][ T4940] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.534694][T12711] loop1: detected capacity change from 0 to 1024 [ 267.596912][T12716] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 267.643310][T12711] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 267.658655][T12716] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 267.679382][T12716] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 267.808758][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 267.845311][T12687] loop0: detected capacity change from 0 to 32768 [ 268.050429][T12687] XFS (loop0): Mounting V5 Filesystem [ 268.140301][ T4940] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 268.202164][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.264185][ T4940] usb 4-1: Product: syz [ 268.268911][ T4940] usb 4-1: Manufacturer: syz [ 268.273557][ T4940] usb 4-1: SerialNumber: syz [ 268.317894][ T4940] usb 4-1: config 0 descriptor?? [ 268.335138][T12687] XFS (loop0): Ending clean mount [ 268.368305][T12687] XFS (loop0): Quotacheck needed: Please wait. [ 268.391726][T12755] loop2: detected capacity change from 0 to 512 [ 268.474622][T12687] XFS (loop0): Quotacheck: Done. [ 268.536211][T12755] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 268.566431][ T4169] XFS (loop0): Unmounting Filesystem [ 268.587000][ T4940] snd-usb-hiface: probe of 4-1:0.0 failed with error -22 [ 268.811803][ T4940] usb 4-1: USB disconnect, device number 16 [ 269.038941][T12782] ipt_CLUSTERIP: Please specify destination IP [ 269.049119][T12781] loop4: detected capacity change from 0 to 1024 [ 269.079621][T12784] overlayfs: missing 'lowerdir' [ 269.097647][T12786] xt_TCPMSS: Only works on TCP SYN packets [ 269.262813][T12790] device wireguard0 entered promiscuous mode [ 269.417701][T12797] netlink: 'syz.1.3853': attribute type 30 has an invalid length. [ 269.603147][T12814] loop3: detected capacity change from 0 to 512 [ 269.694298][T12814] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.784876][T12814] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 269.922770][T12794] loop2: detected capacity change from 0 to 32768 [ 269.935146][T12814] EXT4-fs (loop3): 1 truncate cleaned up [ 269.947426][T12820] loop1: detected capacity change from 0 to 4096 [ 269.966665][T12814] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,block_validity,quota,nombcache,,errors=continue. Quota mode: writeback. [ 269.980932][T12827] netlink: 'syz.0.3864': attribute type 10 has an invalid length. [ 270.002458][T12820] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 270.053424][T12825] loop4: detected capacity change from 0 to 4096 [ 270.084616][T12794] XFS (loop2): Mounting V5 Filesystem [ 270.126099][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 270.201678][T12839] cgroup: Unexpected value for 'cpuset_v2_mode' [ 270.228755][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 270.248623][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 270.276497][T12814] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.3859: corrupted xattr block 19 [ 270.297125][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 270.318732][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 270.367608][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 270.414071][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 270.424924][T12794] XFS (loop2): Ending clean mount [ 270.468882][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 270.488679][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 270.496617][T12825] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 270.593353][T12794] XFS (loop2): Quotacheck needed: Please wait. [ 270.707521][T12850] delete_channel: no stack [ 270.785476][T12794] XFS (loop2): Quotacheck: Done. [ 270.918464][ T4171] XFS (loop2): Unmounting Filesystem [ 270.927258][T12860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3877'. [ 271.178631][ T2856] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 271.209015][T12872] loop3: detected capacity change from 0 to 1024 [ 271.290579][T12872] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 271.548836][ T2856] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 271.585405][ T2856] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 271.611684][ T2856] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 271.659721][ T2856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.692210][T12894] netlink: 'syz.4.3893': attribute type 1 has an invalid length. [ 271.714052][T12894] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3893'. [ 271.720769][T12896] netlink: 'syz.0.3894': attribute type 3 has an invalid length. [ 271.741026][ T2856] usbhid 2-1:241.0: couldn't find an input interrupt endpoint [ 271.868828][ T1106] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 271.987240][T11351] usb 2-1: USB disconnect, device number 17 [ 272.158924][ T1106] usb 3-1: Using ep0 maxpacket: 8 [ 272.278972][ T1106] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.298710][ T1106] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.335901][ T1106] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.377833][T12928] loop4: detected capacity change from 0 to 512 [ 272.448955][ T1106] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 272.460876][T12928] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 272.488574][ T1106] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 272.496763][ T1106] usb 3-1: Product: syz [ 272.508731][T12928] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 272.544348][ T1106] usb 3-1: config 0 descriptor?? [ 272.583574][T12928] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 272.626022][T12928] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 272.638623][T12928] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 272.649410][T12928] EXT4-fs (loop4): failed to initialize system zone (-117) [ 272.656783][T12928] EXT4-fs (loop4): mount failed [ 272.924418][ T1106] usbhid 3-1:0.0: can't add hid device: -71 [ 272.930598][ T1106] usbhid: probe of 3-1:0.0 failed with error -71 [ 272.944852][T12955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3923'. [ 272.960899][ T1106] usb 3-1: USB disconnect, device number 18 [ 272.998780][T12955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3923'. [ 273.028309][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3923'. [ 273.321337][T12981] loop1: detected capacity change from 0 to 512 [ 273.339025][T11351] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 273.381509][T12981] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 273.426785][T12987] device veth1_to_team entered promiscuous mode [ 273.468668][ T4244] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 273.486498][T12981] EXT4-fs (loop1): 1 truncate cleaned up [ 273.514217][T12981] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,nobarrier,nodiscard,noquota,. Quota mode: none. [ 273.545418][T12991] xt_socket: unknown flags 0x50 [ 273.613574][ T2856] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 273.618605][T11351] usb 4-1: Using ep0 maxpacket: 32 [ 273.633345][T12993] loop2: detected capacity change from 0 to 16 [ 273.671305][T12993] erofs: (device loop2): mounted with root inode @ nid 36. [ 273.760254][T11351] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 273.773345][T11351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.819065][T11351] usb 4-1: config 0 descriptor?? [ 273.860439][T11351] rndis_host: probe of 4-1:0.0 failed with error -22 [ 273.879081][ T4244] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 273.887312][ T4244] usb 5-1: config 0 has no interface number 0 [ 273.903772][ T4244] usb 5-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 273.967660][T13003] loop2: detected capacity change from 0 to 64 [ 273.998948][ T2856] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.021796][ T2856] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.038136][ T2856] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.047641][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.070724][T11351] usb 4-1: USB disconnect, device number 17 [ 274.080158][ T4244] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 274.092619][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.101535][ T4244] usb 5-1: Product: syz [ 274.105830][ T4244] usb 5-1: Manufacturer: syz [ 274.110927][ T4244] usb 5-1: SerialNumber: syz [ 274.118234][ T2856] hub 1-1:4.0: USB hub found [ 274.125038][ T4244] usb 5-1: config 0 descriptor?? [ 274.181121][ T4244] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 274.187715][ T4244] usb 5-1: No valid video chain found. [ 274.319320][ T2856] hub 1-1:4.0: 13 ports detected [ 274.324350][ T2856] usb 1-1: selecting invalid altsetting 1 [ 274.336541][T13013] loop1: detected capacity change from 0 to 256 [ 274.343151][ T2856] hub 1-1:4.0: Using single TT (err -22) [ 274.388938][ T2856] hub 1-1:4.0: insufficient power available to use all downstream ports [ 274.414955][T11351] usb 5-1: USB disconnect, device number 20 [ 274.460691][T13013] FAT-fs (loop1): Directory bread(block 64) failed [ 274.477585][T13013] FAT-fs (loop1): Directory bread(block 65) failed [ 274.487793][T13013] FAT-fs (loop1): Directory bread(block 66) failed [ 274.513676][T13013] FAT-fs (loop1): Directory bread(block 67) failed [ 274.522176][T13013] FAT-fs (loop1): Directory bread(block 68) failed [ 274.538620][T13013] FAT-fs (loop1): Directory bread(block 69) failed [ 274.549165][ T2856] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 274.561115][T13013] FAT-fs (loop1): Directory bread(block 70) failed [ 274.566671][ T2856] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 274.567885][T13013] FAT-fs (loop1): Directory bread(block 71) failed [ 274.590791][T13013] FAT-fs (loop1): Directory bread(block 72) failed [ 274.597402][T13013] FAT-fs (loop1): Directory bread(block 73) failed [ 274.619437][ T2856] usb 1-1: USB disconnect, device number 17 [ 274.713518][T13017] netlink: 'syz.3.3953': attribute type 1 has an invalid length. [ 274.738873][T13017] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3953'. [ 274.876472][T13015] loop2: detected capacity change from 0 to 32768 [ 274.954835][T13015] attempt to access beyond end of device [ 274.954835][T13015] loop2: rw=1, want=4701704, limit=32768 [ 275.010168][T13015] metapage_write_end_io: I/O error [ 275.017237][T13015] ERROR: (device loop2): diWrite: ixpxd invalid [ 275.017237][T13015] [ 275.034241][T13025] loop4: detected capacity change from 0 to 256 [ 275.089047][T13015] ERROR: (device loop2): remounting filesystem as read-only [ 275.096646][T13015] ERROR: (device loop2): txCommit: [ 275.096646][T13015] [ 275.151704][T13027] loop1: detected capacity change from 0 to 256 [ 275.207572][T13015] blkno = 8f7c0, nblocks = 1 [ 275.216764][T13015] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 275.216764][T13015] [ 275.231889][T13030] loop3: detected capacity change from 0 to 2048 [ 275.241571][T13015] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 275.241571][T13015] [ 275.255010][T13015] ialloc: diAlloc returned -5! [ 275.311162][T13027] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.364663][T13030] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 275.411164][T13030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.429020][ T4171] attempt to access beyond end of device [ 275.429020][ T4171] loop2: rw=1, want=4701704, limit=32768 [ 275.469348][ T4171] metapage_write_end_io: I/O error [ 275.504100][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3964'. [ 275.533940][T13037] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3964'. [ 275.898023][T13060] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.039294][T13068] netlink: 'syz.2.3963': attribute type 5 has an invalid length. [ 276.072966][T13073] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 276.226013][T13085] loop4: detected capacity change from 0 to 1024 [ 276.288461][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.299682][T11351] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 276.312867][T13085] EXT4-fs (loop4): Ignoring removed bh option [ 276.321673][T13085] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 276.417549][T13085] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 276.558765][ T4211] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 276.677618][T13106] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 276.709100][T11351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.758848][T11351] usb 4-1: not running at top speed; connect to a high speed hub [ 276.839177][T11351] usb 4-1: config 7 has an invalid interface number: 68 but max is 0 [ 276.848680][T11351] usb 4-1: config 7 has no interface number 0 [ 276.868848][ T4211] usb 3-1: Using ep0 maxpacket: 8 [ 276.869145][T11351] usb 4-1: config 7 interface 68 has no altsetting 0 [ 276.892146][T13116] x_tables: duplicate underflow at hook 3 [ 277.018731][ T4211] usb 3-1: config 2 has an invalid interface number: 241 but max is 0 [ 277.027057][ T4211] usb 3-1: config 2 has no interface number 0 [ 277.039891][ T4211] usb 3-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.053878][ T4211] usb 3-1: config 2 interface 241 has no altsetting 0 [ 277.058941][T11351] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=9d.96 [ 277.099000][T11351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.101460][T13128] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4001'. [ 277.125818][T11351] usb 4-1: Product: syz [ 277.128403][T13127] loop0: detected capacity change from 0 to 2048 [ 277.130864][T11351] usb 4-1: Manufacturer: syz [ 277.174619][T13127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.188741][T11351] usb 4-1: SerialNumber: syz [ 277.244809][ T4211] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 277.271355][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.293183][ T4211] usb 3-1: Product: syz [ 277.297854][ T4211] usb 3-1: Manufacturer: syz [ 277.303982][ T4211] usb 3-1: SerialNumber: syz [ 277.360654][ T4211] ti_usb_3410_5052 3-1:2.241: TI USB 3410 1 port adapter converter detected [ 277.389185][ T4211] ti_usb_3410_5052 3-1:2.241: missing endpoints [ 277.431654][T13140] xt_NFQUEUE: number of total queues is 0 [ 277.487410][T11351] usb 4-1: USB disconnect, device number 18 [ 277.536205][T13145] netlink: zone id is out of range [ 277.569080][T13145] netlink: zone id is out of range [ 277.593062][ T4301] usb 3-1: USB disconnect, device number 19 [ 277.728966][ T4211] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 277.958787][ T2856] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 277.967886][T13158] loop1: detected capacity change from 0 to 32768 [ 278.000638][ T4211] usb 1-1: Using ep0 maxpacket: 16 [ 278.013015][T13158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4016 (13158) [ 278.067523][T13158] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 278.090538][T13158] BTRFS info (device loop1): using free space tree [ 278.104519][T13158] BTRFS info (device loop1): has skinny extents [ 278.148954][ T4211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 278.208978][ T2856] usb 5-1: Using ep0 maxpacket: 32 [ 278.214685][ T4211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 278.228174][ T4211] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 278.237842][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.249045][ T4211] usb 1-1: config 0 descriptor?? [ 278.279096][T13139] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 278.301294][ T4211] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 278.308230][ T4211] usb 1-1: No valid video chain found. [ 278.344792][T13158] BTRFS info (device loop1): enabling ssd optimizations [ 278.359549][T13187] device ip_vti0 entered promiscuous mode [ 278.405802][T13187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4022'. [ 278.502571][T11351] usb 1-1: USB disconnect, device number 18 [ 278.534860][T13192] loop3: detected capacity change from 0 to 256 [ 278.548986][ T2856] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 278.558077][ T2856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.583668][ T2856] usb 5-1: Product: syz [ 278.587997][ T2856] usb 5-1: Manufacturer: syz [ 278.629501][ T2856] usb 5-1: SerialNumber: syz [ 278.636290][ T2856] usb 5-1: config 0 descriptor?? [ 278.674678][ T4160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4160) [ 278.697050][T13192] FAT-fs (loop3): Directory bread(block 64) failed [ 278.725920][T13192] FAT-fs (loop3): Directory bread(block 65) failed [ 278.753983][T13192] FAT-fs (loop3): Directory bread(block 66) failed [ 278.780349][T13192] FAT-fs (loop3): Directory bread(block 67) failed [ 278.808843][T13192] FAT-fs (loop3): Directory bread(block 68) failed [ 278.815497][T13192] FAT-fs (loop3): Directory bread(block 69) failed [ 278.841530][T13192] FAT-fs (loop3): Directory bread(block 70) failed [ 278.858699][T13192] FAT-fs (loop3): Directory bread(block 71) failed [ 278.865499][T13192] FAT-fs (loop3): Directory bread(block 72) failed [ 278.917093][T13192] FAT-fs (loop3): Directory bread(block 73) failed [ 279.123958][ T2856] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 279.146322][ T2856] airspy 5-1:0.0: Could not detect board [ 279.168615][ T2856] airspy: probe of 5-1:0.0 failed with error -71 [ 279.200411][ T2856] usb 5-1: USB disconnect, device number 21 [ 279.412007][ T2281] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 279.415451][T13223] loop2: detected capacity change from 0 to 128 [ 279.542128][T13227] loop0: detected capacity change from 0 to 64 [ 279.561803][T13223] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.589244][T13230] loop3: detected capacity change from 0 to 1024 [ 279.605358][T13223] EXT4-fs warning (device loop2): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 279.730197][T13232] loop4: detected capacity change from 0 to 8 [ 279.802215][ T2281] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.836393][ T2281] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.858101][ T2281] usb 2-1: config 220 has no interface number 2 [ 279.881650][T13232] SQUASHFS error: Unable to read directory block [629:26] [ 279.893471][ T2281] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 279.944973][ T2281] usb 2-1: config 220 interface 0 has no altsetting 0 [ 279.962387][ T2281] usb 2-1: config 220 interface 76 has no altsetting 0 [ 279.996833][ T2281] usb 2-1: config 220 interface 1 has no altsetting 0 [ 280.067010][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4047'. [ 280.084315][T13242] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.178763][ T2281] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 280.188133][ T2281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.236781][ T2281] usb 2-1: Product: syz [ 280.258618][ T2281] usb 2-1: Manufacturer: syz [ 280.273677][ T2281] usb 2-1: SerialNumber: syz [ 280.367459][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 280.660359][T13269] loop3: detected capacity change from 0 to 16 [ 280.668914][ T2281] usb 2-1: selecting invalid altsetting 0 [ 280.675216][ T2281] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 280.688351][T13270] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.694964][T13269] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 280.713190][T13240] loop2: detected capacity change from 0 to 32768 [ 280.717665][ T2281] usb 2-1: No valid video chain found. [ 280.778342][T13274] loop4: detected capacity change from 0 to 16 [ 280.817848][ T2281] usb 2-1: selecting invalid altsetting 0 [ 280.831802][T13274] erofs: (device loop4): mounted with root inode @ nid 36. [ 280.858140][ T2281] usbtest: probe of 2-1:220.1 failed with error -22 [ 280.907324][ T2281] usb 2-1: USB disconnect, device number 18 [ 280.927197][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 280.995185][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 281.324016][T13298] loop1: detected capacity change from 0 to 128 [ 281.383359][T13305] loop4: detected capacity change from 0 to 764 [ 281.436980][T13298] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 281.459100][T13309] netlink: 'syz.0.4080': attribute type 8 has an invalid length. [ 281.524999][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_0 [ 281.537713][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.557199][ T4170] sysv_free_block: flc_count > flc_size [ 281.569012][ T4170] sysv_free_block: flc_count > flc_size [ 281.574747][ T4170] sysv_free_block: flc_count > flc_size [ 281.594424][ T4170] sysv_free_block: flc_count > flc_size [ 281.610309][ T4170] sysv_free_block: flc_count > flc_size [ 281.628682][ T4170] sysv_free_block: flc_count > flc_size [ 281.674386][ T4170] sysv_free_block: flc_count > flc_size [ 281.688825][ T4170] sysv_free_block: flc_count > flc_size [ 281.694827][ T4170] sysv_free_block: flc_count > flc_size [ 281.723041][ T4170] sysv_free_block: flc_count > flc_size [ 281.752309][ T4170] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 281.858083][T13327] netlink: 'syz.2.4091': attribute type 3 has an invalid length. [ 282.002526][T13339] loop2: detected capacity change from 0 to 1024 [ 282.093921][T13345] loop4: detected capacity change from 0 to 4096 [ 282.155308][T13345] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 282.208966][T13345] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 282.284453][ T2281] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 282.414568][ T4210] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 282.439819][ T4168] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 282.447435][T13371] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 282.488705][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4111'. [ 282.499972][T13371] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.519440][T13375] loop1: detected capacity change from 0 to 1024 [ 282.528862][ T2281] usb 1-1: Using ep0 maxpacket: 8 [ 282.649034][ T2281] usb 1-1: config index 0 descriptor too short (expected 4096, got 18) [ 282.662506][ T2281] usb 1-1: config 0 has too many interfaces: 72, using maximum allowed: 32 [ 282.681544][ T2281] usb 1-1: config 0 has an invalid interface descriptor of length 4, skipping [ 282.701862][ T2281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.746945][ T2281] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 72 [ 282.787471][ T2281] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 282.801672][ T2281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.826696][ T2281] usb 1-1: config 0 descriptor?? [ 282.975382][T13401] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.4126'. [ 283.128763][ T2281] usb 1-1: string descriptor 0 read error: -71 [ 283.147147][ T2281] usb 1-1: USB disconnect, device number 19 [ 283.147876][T13412] loop1: detected capacity change from 0 to 128 [ 283.257454][T13412] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 283.577763][ T2281] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.620638][T13441] netlink: 'syz.2.4145': attribute type 13 has an invalid length. [ 283.848641][ T2281] usb 4-1: Using ep0 maxpacket: 32 [ 283.933722][T13465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.008764][ T2281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 284.087408][T13470] device netdevsim0 entered promiscuous mode [ 284.088903][ T2281] usb 4-1: config 5 has an invalid interface number: 61 but max is 0 [ 284.123026][ T4874] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 284.130328][ T2281] usb 4-1: config 5 has no interface number 0 [ 284.150080][T13470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 284.167928][ T2856] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.176998][ T2281] usb 4-1: config 5 interface 61 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 284.232852][ T2281] usb 4-1: config 5 interface 61 has no altsetting 0 [ 284.321728][T13472] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4160'. [ 284.394374][ T4874] usb 5-1: Using ep0 maxpacket: 16 [ 284.399133][ T2281] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 284.419083][ T2856] usb 3-1: Using ep0 maxpacket: 32 [ 284.438831][ T2281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.471397][ T2281] usb 4-1: Product: syz [ 284.475723][ T2281] usb 4-1: Manufacturer: syz [ 284.495801][T13474] [ 284.498313][T13474] ====================================================== [ 284.505450][T13474] WARNING: possible circular locking dependency detected [ 284.512510][T13474] 5.15.185-syzkaller #0 Not tainted [ 284.517729][T13474] ------------------------------------------------------ [ 284.521122][ T2281] usb 4-1: SerialNumber: syz [ 284.524779][T13474] syz.1.4161/13474 is trying to acquire lock: [ 284.524792][T13474] ffff888074b00c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 284.524844][T13474] [ 284.524844][T13474] but task is already holding lock: [ 284.524849][T13474] ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 284.524891][T13474] [ 284.524891][T13474] which lock already depends on the new lock. [ 284.524891][T13474] [ 284.524897][T13474] [ 284.524897][T13474] the existing dependency chain (in reverse order) is: [ 284.524904][T13474] [ 284.524904][T13474] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 284.524932][T13474] __mutex_lock_common+0x1eb/0x2390 [ 284.524955][T13474] mutex_lock_nested+0x17/0x20 [ 284.524972][T13474] rfkill_register+0x33/0x8a0 [ 284.524994][T13474] hci_register_dev+0x452/0x970 [ 284.525013][T13474] vhci_create_device+0x32c/0x5c0 [ 284.525031][T13474] vhci_write+0x391/0x450 [ 284.525048][T13474] vfs_write+0x712/0xd00 [ 284.525065][T13474] ksys_write+0x14d/0x250 [ 284.525082][T13474] do_syscall_64+0x4c/0xa0 [ 284.578891][T13423] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 284.583382][T13474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.627146][T13476] loop0: detected capacity change from 0 to 4096 [ 284.628229][T13474] [ 284.628229][T13474] -> #3 (&data->open_mutex){+.+.}-{3:3} [ 284.647417][T13476] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 284.651594][T13474] : [ 284.651602][T13474] __mutex_lock_common+0x1eb/0x2390 [ 284.651631][T13474] mutex_lock_nested+0x17/0x20 [ 284.651650][T13474] vhci_send_frame+0x88/0x100 [ 284.651667][T13474] hci_send_frame+0x1a9/0x2e0 [ 284.651689][T13474] hci_tx_work+0x9f9/0x1710 [ 284.651709][T13474] process_one_work+0x863/0x1000 [ 284.651729][T13474] worker_thread+0xaa8/0x12a0 [ 284.714632][T13474] kthread+0x436/0x520 [ 284.719245][T13474] ret_from_fork+0x1f/0x30 [ 284.724294][T13474] [ 284.724294][T13474] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 284.733605][T13474] __flush_work+0xdd/0x1b0 [ 284.738560][T13474] hci_dev_do_close+0x1e7/0x1030 [ 284.744311][T13474] hci_dev_close+0xd7/0x180 [ 284.749360][T13474] sock_do_ioctl+0xd3/0x2f0 [ 284.754429][T13474] sock_ioctl+0x4ed/0x6e0 [ 284.759366][T13474] __se_sys_ioctl+0xfa/0x170 [ 284.764568][T13474] do_syscall_64+0x4c/0xa0 [ 284.769600][T13474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.776030][T13474] [ 284.776030][T13474] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 284.783677][T13474] __mutex_lock_common+0x1eb/0x2390 [ 284.789423][T13474] mutex_lock_nested+0x17/0x20 [ 284.794707][T13474] bg_scan_update+0x44/0x3b0 [ 284.799817][T13474] process_one_work+0x863/0x1000 [ 284.805366][T13474] worker_thread+0xaa8/0x12a0 [ 284.810658][T13474] kthread+0x436/0x520 [ 284.815248][T13474] ret_from_fork+0x1f/0x30 [ 284.820289][T13474] [ 284.820289][T13474] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 284.830294][T13474] __lock_acquire+0x2c33/0x7c60 [ 284.835699][T13474] lock_acquire+0x197/0x3f0 [ 284.840728][T13474] __flush_work+0xdd/0x1b0 [ 284.845665][T13474] __cancel_work_timer+0x3ac/0x520 [ 284.851383][T13474] hci_request_cancel_all+0xcc/0x300 [ 284.857194][T13474] hci_dev_do_close+0x4e/0x1030 [ 284.862583][T13474] hci_rfkill_set_block+0x10a/0x190 [ 284.868600][T13474] rfkill_set_block+0x1c6/0x420 [ 284.873989][T13474] rfkill_fop_write+0x458/0x560 [ 284.879369][T13474] vfs_write+0x300/0xd00 [ 284.884139][T13474] ksys_write+0x14d/0x250 [ 284.888991][T13474] do_syscall_64+0x4c/0xa0 [ 284.894033][T13474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.900459][T13474] [ 284.900459][T13474] other info that might help us debug this: [ 284.900459][T13474] [ 284.910782][T13474] Chain exists of: [ 284.910782][T13474] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 284.910782][T13474] [ 284.926796][T13474] Possible unsafe locking scenario: [ 284.926796][T13474] [ 284.934484][T13474] CPU0 CPU1 [ 284.939969][T13474] ---- ---- [ 284.945432][T13474] lock(rfkill_global_mutex); [ 284.950204][T13474] lock(&data->open_mutex); [ 284.957405][T13474] lock(rfkill_global_mutex); [ 284.964775][T13474] lock((work_completion)(&hdev->bg_scan_update)); [ 284.971466][T13474] [ 284.971466][T13474] *** DEADLOCK *** [ 284.971466][T13474] [ 284.979702][T13474] 1 lock held by syz.1.4161/13474: [ 284.984986][T13474] #0: ffffffff8d4b2748 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 284.995257][T13474] [ 284.995257][T13474] stack backtrace: [ 285.001145][T13474] CPU: 1 PID: 13474 Comm: syz.1.4161 Not tainted 5.15.185-syzkaller #0 [ 285.009391][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.019464][T13474] Call Trace: [ 285.022754][T13474] [ 285.025686][T13474] dump_stack_lvl+0x168/0x230 [ 285.030371][T13474] ? load_image+0x3b0/0x3b0 [ 285.034876][T13474] ? show_regs_print_info+0x20/0x20 [ 285.040125][T13474] ? print_circular_bug+0x12b/0x1a0 [ 285.045429][T13474] check_noncircular+0x274/0x310 [ 285.050371][T13474] ? add_chain_block+0x940/0x940 [ 285.055306][T13474] ? lockdep_lock+0xdc/0x1e0 [ 285.059903][T13474] ? __lock_acquire+0x12d9/0x7c60 [ 285.064935][T13474] ? lockdep_lock+0x1e0/0x1e0 [ 285.069621][T13474] ? mark_lock+0x94/0x320 [ 285.073955][T13474] ? _find_first_zero_bit+0xce/0xf0 [ 285.079306][T13474] __lock_acquire+0x2c33/0x7c60 [ 285.084274][T13474] ? verify_lock_unused+0x140/0x140 [ 285.089746][T13474] ? verify_lock_unused+0x140/0x140 [ 285.095007][T13474] ? mark_lock+0x94/0x320 [ 285.099521][T13474] lock_acquire+0x197/0x3f0 [ 285.104032][T13474] ? __flush_work+0xc1/0x1b0 [ 285.108631][T13474] ? __lock_acquire+0x7c60/0x7c60 [ 285.113662][T13474] ? read_lock_is_recursive+0x10/0x10 [ 285.119041][T13474] ? start_flush_work+0x776/0x820 [ 285.124068][T13474] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 285.129968][T13474] ? _raw_spin_unlock+0x40/0x40 [ 285.134915][T13474] __flush_work+0xdd/0x1b0 [ 285.139509][T13474] ? __flush_work+0xc1/0x1b0 [ 285.144115][T13474] ? flush_work+0x20/0x20 [ 285.148448][T13474] ? try_to_grab_pending+0xf3/0x7e0 [ 285.153649][T13474] ? lockdep_hardirqs_off+0x70/0x100 [ 285.159266][T13474] ? mark_lock+0x94/0x320 [ 285.163622][T13474] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 285.169620][T13474] ? lock_chain_count+0x20/0x20 [ 285.174484][T13474] ? mark_lock+0x94/0x320 [ 285.178912][T13474] ? __cancel_work_timer+0x331/0x520 [ 285.184204][T13474] __cancel_work_timer+0x3ac/0x520 [ 285.189332][T13474] ? cancel_work_sync+0x20/0x20 [ 285.194186][T13474] ? __cancel_work+0x1f4/0x2d0 [ 285.198954][T13474] ? lockdep_hardirqs_on+0x94/0x140 [ 285.204279][T13474] ? __cancel_work+0x26f/0x2d0 [ 285.209062][T13474] ? cancel_work+0x20/0x20 [ 285.213478][T13474] ? lock_chain_count+0x20/0x20 [ 285.218335][T13474] hci_request_cancel_all+0xcc/0x300 [ 285.223632][T13474] hci_dev_do_close+0x4e/0x1030 [ 285.228515][T13474] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 285.234505][T13474] ? _raw_spin_unlock+0x40/0x40 [ 285.239368][T13474] hci_rfkill_set_block+0x10a/0x190 [ 285.244678][T13474] ? rcu_lock_release+0x20/0x20 [ 285.249542][T13474] rfkill_set_block+0x1c6/0x420 [ 285.254409][T13474] rfkill_fop_write+0x458/0x560 [ 285.259370][T13474] ? rfkill_fop_read+0x4b0/0x4b0 [ 285.264326][T13474] ? common_file_perm+0x160/0x1c0 [ 285.269369][T13474] ? fsnotify_perm+0x5d/0x560 [ 285.274490][T13474] ? security_file_permission+0x75/0xa0 [ 285.280057][T13474] ? rfkill_fop_read+0x4b0/0x4b0 [ 285.284999][T13474] vfs_write+0x300/0xd00 [ 285.289251][T13474] ? file_end_write+0x250/0x250 [ 285.294123][T13474] ? __fget_files+0x40f/0x480 [ 285.298815][T13474] ? __fdget_pos+0x1e2/0x370 [ 285.303411][T13474] ? ksys_write+0x71/0x250 [ 285.308109][T13474] ksys_write+0x14d/0x250 [ 285.312465][T13474] ? __ia32_sys_read+0x80/0x80 [ 285.317251][T13474] ? lockdep_hardirqs_on+0x94/0x140 [ 285.322471][T13474] do_syscall_64+0x4c/0xa0 [ 285.326999][T13474] ? clear_bhb_loop+0x30/0x80 [ 285.331717][T13474] ? clear_bhb_loop+0x30/0x80 [ 285.336401][T13474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.342433][T13474] RIP: 0033:0x7f56fee93929 [ 285.346855][T13474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.366518][T13474] RSP: 002b:00007f56fccfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.374942][T13474] RAX: ffffffffffffffda RBX: 00007f56ff0bafa0 RCX: 00007f56fee93929 [ 285.383274][T13474] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 285.391477][T13474] RBP: 00007f56fef15b39 R08: 0000000000000000 R09: 0000000000000000 [ 285.399464][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.407448][T13474] R13: 0000000000000000 R14: 00007f56ff0bafa0 R15: 00007fff682c0418 [ 285.415547][T13474] [ 285.488818][ T2281] ath6kl: Failed to submit usb control message: -71 [ 285.495501][ T2281] ath6kl: unable to send the bmi data to the device: -71 [ 285.508883][ T4874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.512856][ T2281] ath6kl: Unable to send get target info: -71 [ 285.532829][ T2281] ath6kl: Failed to init ath6kl core: -71 [ 285.545521][ T2281] ath6kl_usb: probe of 4-1:5.61 failed with error -71 [ 285.567460][ T2281] usb 4-1: USB disconnect, device number 19 [ 285.649652][ T2856] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 285.658839][ T2856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.666838][ T2856] usb 3-1: Product: syz [ 285.671432][ T2856] usb 3-1: Manufacturer: syz [ 285.676072][ T2856] usb 3-1: SerialNumber: syz [ 285.682742][ T2856] usb 3-1: config 0 descriptor?? [ 285.708675][ T4874] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 285.718215][ T4874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.729446][ T4874] usb 5-1: Product: syz [ 285.733656][ T4874] usb 5-1: Manufacturer: syz [ 285.738282][ T4874] usb 5-1: SerialNumber: syz [ 285.744603][ T4874] usb 5-1: config 0 descriptor?? [ 285.789084][ T4874] hub 5-1:0.0: bad descriptor, ignoring hub [ 285.795110][ T4874] hub: probe of 5-1:0.0 failed with error -5 [ 285.803431][ T4874] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 285.929839][ T2856] usb 3-1: USB disconnect, device number 20 [ 286.278938][ T2281] usb 5-1: USB disconnect, device number 22