last executing test programs: 6m30.162008525s ago: executing program 3 (id=444): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000380)=[{0x1, 0x7401, 0x97, &(0x7f0000001640)="7707a17ba71ab8fbfffc9b32b319f7a8d61acdb2490fe8564f3b9f1fb11c977b2f30988e029278e676fdfa99f4aa43a5c86599ef8d2cb914002ee17e02024365bdd1a24f4d5d1886476b2f0153b783197410bde5d364a8dea76ff6a5fcacd96a0b6a3e61f8ee6d5a8109ec68ba02e13dc4fcf2f93bfbe7d74af77f024b0233798cd0c579685e76d591efb506ba7915c2c0cfc33733f237"}, {0xff, 0x4c00, 0x0, 0x0}], 0x2}) 6m29.937426074s ago: executing program 3 (id=448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x2}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}]}]}, 0x13c}}, 0x0) 6m29.714890922s ago: executing program 3 (id=451): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000800000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 6m29.629495039s ago: executing program 3 (id=452): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 6m29.274641577s ago: executing program 3 (id=455): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x2, 0xffffffffffffffff, 0x9, 0x2}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x3e}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 6m28.617625971s ago: executing program 3 (id=464): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000fc0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESOCT=0x0], 0xfe, 0xc25, &(0x7f0000000380)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x502, 0x40) 6m28.179840106s ago: executing program 32 (id=464): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000fc0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESOCT=0x0], 0xfe, 0xc25, &(0x7f0000000380)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x502, 0x40) 6.332092718s ago: executing program 2 (id=5759): r0 = semget(0x0, 0x2, 0x27c) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000240)=""/90) 6.081482748s ago: executing program 2 (id=5762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.748666415s ago: executing program 2 (id=5766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 5.501582385s ago: executing program 2 (id=5768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 5.328373049s ago: executing program 2 (id=5772): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x60, 0xf, 0x1, 0x20, @empty, @empty, 0x7800, 0x1, 0x6, 0x7}}) 5.022651904s ago: executing program 2 (id=5776): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1.85399271s ago: executing program 1 (id=5819): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000380)={0x0, 0x10086f3, 0x2, 0x1, 0x99}, &(0x7f0000000080), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) 1.702687903s ago: executing program 1 (id=5821): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000022, &(0x7f0000000340)='heartbeat=none') 1.530468737s ago: executing program 4 (id=5824): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x1000000) 1.374232349s ago: executing program 4 (id=5825): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)=0x90) 1.154705517s ago: executing program 4 (id=5827): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000a00)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e64de6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) 1.100477831s ago: executing program 0 (id=5828): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept(r0, 0x0, 0x0) 1.001290489s ago: executing program 4 (id=5829): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) 943.427074ms ago: executing program 0 (id=5830): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @multicast1}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xd8}}, 0x0) 825.179083ms ago: executing program 4 (id=5831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 744.44193ms ago: executing program 4 (id=5832): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181200) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/78, 0x4e}, {0x0}], 0x2) 618.81637ms ago: executing program 0 (id=5833): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) 618.58634ms ago: executing program 1 (id=5834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 511.817019ms ago: executing program 0 (id=5835): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0x12000000000) 384.418259ms ago: executing program 1 (id=5836): r0 = syz_io_uring_setup(0x47ea, &(0x7f0000000400)={0x0, 0xba32, 0x1, 0x1, 0x1a2}, &(0x7f00000000c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000300)={0xf5, 0x1, 0x0, 0x0, &(0x7f0000000240)=[0xe6]}, 0x20) 263.464089ms ago: executing program 0 (id=5837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@can_delroute={0x34, 0x19, 0x1, 0x70bd27, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "ab4f1d4c1a008a89"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x3, 0x7, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) 115.861051ms ago: executing program 1 (id=5838): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d", 0x5d) 6.56678ms ago: executing program 0 (id=5839): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@nouuid}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x979e, &(0x7f0000009780)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 0s ago: executing program 1 (id=5840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@allocspi={0x12c, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0x0, 0x169d}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @address_filter={0x28, 0x1a, {@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x2, 0x3}}]}, 0x12c}}, 0x0) kernel console output (not intermixed with test programs): im0: entered allmulticast mode [ 362.349927][T14261] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 362.363790][T14261] bridge0: port 3(netdevsim0) entered blocking state [ 362.371473][T14261] bridge0: port 3(netdevsim0) entered forwarding state [ 362.509277][T14270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 362.636320][T14274] loop4: detected capacity change from 0 to 164 [ 362.680752][T14274] isofs: Unable to find the ".." directory for NFS. [ 362.924451][T14282] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 362.932302][T14285] loop2: detected capacity change from 0 to 2048 [ 362.993226][T14285] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 363.048022][T14289] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.102494][T14282] veth0_vlan: left promiscuous mode [ 363.184230][T14282] veth0_vlan: entered promiscuous mode [ 363.186540][T14285] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 363.232441][T14285] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 363.238070][T14282] team0: Device veth0_vlan failed to register rx_handler [ 363.283450][T14285] Remounting filesystem read-only [ 363.338017][T14285] NILFS (loop2): error -5 truncating bmap (ino=16) [ 363.506447][ T5787] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 363.538288][ T5787] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 363.545824][ T5787] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.585521][ T5787] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.614797][ T5787] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 363.648798][ T5787] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 363.808371][T14309] loop2: detected capacity change from 0 to 256 [ 364.304493][T14322] IPv6: Can't replace route, no match found [ 364.612916][T14336] loop1: detected capacity change from 0 to 128 [ 364.738193][T14336] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.747557][T14338] loop2: detected capacity change from 0 to 8192 [ 364.791750][T14336] ext4 filesystem being mounted at /986/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.824307][T14336] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 2 (only 1 groups) [ 364.825832][T14338] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.883467][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.025231][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 366.158758][T14390] loop2: detected capacity change from 0 to 16 [ 366.255030][T14390] erofs: (device loop2): mounted with root inode @ nid 36. [ 366.906138][T14422] netlink: 'syz.2.3787': attribute type 10 has an invalid length. [ 366.935780][T14422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3787'. [ 366.967248][T14422] bridge0: port 4(batadv0) entered blocking state [ 366.980305][T14422] bridge0: port 4(batadv0) entered disabled state [ 367.023421][T14422] batadv0: entered allmulticast mode [ 367.059829][T14422] batadv0: entered promiscuous mode [ 367.066239][T14422] bridge0: port 4(batadv0) entered blocking state [ 367.073562][T14422] bridge0: port 4(batadv0) entered forwarding state [ 367.098915][T14426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'. [ 367.149284][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 367.159901][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 367.814098][T14453] loop2: detected capacity change from 0 to 2048 [ 367.827601][T14457] SET target dimension over the limit! [ 367.830157][T14453] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 367.843811][T14459] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 367.878098][T14459] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 367.905676][T14459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.971995][T14461] netlink: 'syz.4.3806': attribute type 10 has an invalid length. [ 368.143524][T14465] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 368.159095][T14461] veth0_vlan: left promiscuous mode [ 368.192584][T14461] veth0_vlan: entered promiscuous mode [ 368.224176][T14461] team0: Device veth0_vlan failed to register rx_handler [ 368.538845][T14475] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 368.892858][T14489] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3820'. [ 369.322312][T14507] loop4: detected capacity change from 0 to 1024 [ 369.609397][T14513] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 369.635532][T14507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.642564][T14513] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.662996][T14507] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz.4.3829: directory missing '..' [ 369.851709][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.070607][T14528] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3836'. [ 370.213075][ T27] audit: type=1326 audit(1756509598.589:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 370.277899][ T27] audit: type=1326 audit(1756509598.589:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 370.359618][ T27] audit: type=1326 audit(1756509598.589:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 370.361247][T14536] loop0: detected capacity change from 0 to 8 [ 370.381900][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.428251][T14538] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 370.440630][ T27] audit: type=1326 audit(1756509598.589:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14530 comm="syz.0.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 370.888508][T14520] loop2: detected capacity change from 0 to 32768 [ 370.926695][T14520] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3835 (14520) [ 370.955972][T14520] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 370.988391][T14520] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 370.997961][T14520] BTRFS info (device loop2): force zlib compression, level 3 [ 371.022744][T14520] BTRFS info (device loop2): force clearing of disk cache [ 371.035607][T14520] BTRFS info (device loop2): setting nodatasum [ 371.046850][T14520] BTRFS info (device loop2): allowing degraded mounts [ 371.075683][T14520] BTRFS info (device loop2): enabling disk space caching [ 371.106880][T14520] BTRFS info (device loop2): disk space caching is enabled [ 371.367970][T14520] BTRFS info (device loop2): auto enabling async discard [ 371.418889][T14520] BTRFS info (device loop2): rebuilding free space tree [ 371.511234][T14520] BTRFS info (device loop2): disabling free space tree [ 371.518974][T14520] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 371.557991][T14520] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 371.783241][T14590] loop4: detected capacity change from 0 to 1024 [ 371.839665][ T5787] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 372.168751][T14601] caif0: entered allmulticast mode [ 372.226897][T14603] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3862'. [ 372.280294][T14603] openvswitch: netlink: Key type 29 is not supported [ 372.818068][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 372.826219][T14619] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 373.008182][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 373.021358][ T788] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 373.038556][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.057196][ T788] usb 5-1: Product: syz [ 373.061817][ T788] usb 5-1: Manufacturer: syz [ 373.066625][ T788] usb 5-1: SerialNumber: syz [ 373.091551][ T788] usb 5-1: config 0 descriptor?? [ 373.279661][T14614] loop0: detected capacity change from 0 to 32768 [ 373.304224][ T788] snd-usb-audio: probe of 5-1:0.0 failed with error -71 [ 373.316495][T14614] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3871 (14614) [ 373.322551][ T788] usb 5-1: USB disconnect, device number 9 [ 373.400337][T14614] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 373.422545][T14614] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 373.445138][T14614] BTRFS info (device loop0): force zlib compression, level 3 [ 373.454425][T14614] BTRFS info (device loop0): force clearing of disk cache [ 373.467464][T14614] BTRFS info (device loop0): setting nodatasum [ 373.475046][T14614] BTRFS info (device loop0): allowing degraded mounts [ 373.486897][T14614] BTRFS info (device loop0): enabling disk space caching [ 373.498184][T14614] BTRFS info (device loop0): disk space caching is enabled [ 373.586039][T14615] loop2: detected capacity change from 0 to 40427 [ 373.621431][T14615] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 373.642187][T14615] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 373.664101][T14615] F2FS-fs (loop2): invalid crc value [ 373.701703][T14614] BTRFS info (device loop0): auto enabling async discard [ 373.743038][T14615] F2FS-fs (loop2): Found nat_bits in checkpoint [ 373.750669][T14614] BTRFS info (device loop0): rebuilding free space tree [ 373.832532][T14614] BTRFS info (device loop0): disabling free space tree [ 373.858440][T14614] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 373.901733][T14614] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 373.944530][T14615] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 374.000000][T14615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 374.017620][ T27] audit: type=1326 audit(1756509602.399:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 374.084989][ T27] audit: type=1326 audit(1756509602.399:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 374.143254][ T27] audit: type=1326 audit(1756509602.399:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 374.182497][T14615] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 374.233386][ T27] audit: type=1326 audit(1756509602.469:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 374.307743][ T27] audit: type=1326 audit(1756509602.469:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 374.334599][ T5786] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 374.338229][ T27] audit: type=1326 audit(1756509602.469:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14654 comm="syz.1.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde8c3c14a5 code=0x7ffc0000 [ 374.948566][T14670] netlink: 'syz.0.3888': attribute type 8 has an invalid length. [ 375.868974][T14701] kernel read not supported for file /  (pid: 14701 comm: syz.4.3902) [ 375.888299][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 375.888316][ T27] audit: type=1800 audit(1756509604.279:124): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3902" name=200120 dev="mqueue" ino=35037 res=0 errno=0 [ 375.908028][ T5794] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 375.996091][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 376.129109][ T5794] usb 2-1: Using ep0 maxpacket: 8 [ 376.136681][ T5794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.184395][ T5794] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 376.206933][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.234840][ T5794] usb 2-1: config 0 descriptor?? [ 376.237118][ T27] audit: type=1326 audit(1756509604.619:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.2.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 376.256046][ T5794] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 376.278036][ T27] audit: type=1326 audit(1756509604.659:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.2.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 376.309093][ T27] audit: type=1326 audit(1756509604.669:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.2.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 376.339950][ T27] audit: type=1326 audit(1756509604.669:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.2.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 376.370422][ T27] audit: type=1326 audit(1756509604.669:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.2.3909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 376.669845][ T5794] gspca_vc032x: reg_w err -71 [ 376.677085][ T5794] vc032x: probe of 2-1:0.0 failed with error -71 [ 376.700111][ T5794] usb 2-1: USB disconnect, device number 11 [ 377.277995][ T5794] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 377.470402][ T5794] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 377.479464][ T5794] usb 5-1: config 0 has no interface number 0 [ 377.485861][ T5794] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 377.518731][ T5794] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 377.539433][ T5794] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 377.559767][ T5794] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 377.577907][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.599901][ T5794] usb 5-1: config 0 descriptor?? [ 377.609163][ T5794] gspca_main: spca561-2.14.0 probing abcd:cdee [ 377.688041][ T788] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 377.751012][T14742] loop0: detected capacity change from 0 to 32768 [ 377.849185][ T5794] spca561: probe of 5-1:0.156 failed with error -22 [ 377.872142][ T5794] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 377.887452][ T5794] usb 5-1: MIDIStreaming interface descriptor not found [ 377.900749][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 377.921820][ T788] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 377.948064][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3932'. [ 377.957741][ T788] usb 3-1: config 0 has no interface number 0 [ 377.985026][ T788] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.002211][T14760] xt_bpf: check failed: parse error [ 378.018353][ T5794] usb 5-1: USB disconnect, device number 10 [ 378.040269][ T788] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 378.079324][ T788] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 378.108954][ T788] usb 3-1: Product: syz [ 378.113282][ T788] usb 3-1: SerialNumber: syz [ 378.171751][ T788] usb 3-1: config 0 descriptor?? [ 378.203264][ T788] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 378.275358][T14763] loop1: detected capacity change from 0 to 512 [ 378.548918][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.549769][ T5794] usb 3-1: USB disconnect, device number 21 [ 378.556605][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 378.620099][ T5794] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 378.802567][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.802632][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.854046][T14774] netlink: 'syz.1.3939': attribute type 1 has an invalid length. [ 378.883127][T14774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3939'. [ 379.129399][T14781] usb usb1: usbfs: process 14781 (syz.0.3942) did not claim interface 0 before use [ 379.667260][T14803] bridge2: entered promiscuous mode [ 379.807997][T14807] loop2: detected capacity change from 0 to 2048 [ 379.855563][T14807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.184873][T14822] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 380.192173][T14822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.208677][T14818] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 380.215268][T14818] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 380.240631][T14822] vhci_hcd vhci_hcd.0: Device attached [ 380.241809][T14818] vhci_hcd vhci_hcd.0: Device attached [ 380.311612][T14823] vhci_hcd: connection closed [ 380.314663][ T12] vhci_hcd: stop threads [ 380.325238][T14820] vhci_hcd: connection closed [ 380.337922][ T12] vhci_hcd: release socket [ 380.347436][ T12] vhci_hcd: disconnect device [ 380.356040][ T12] vhci_hcd: stop threads [ 380.366264][ T12] vhci_hcd: release socket [ 380.377617][ T12] vhci_hcd: disconnect device [ 380.454615][T14831] loop1: detected capacity change from 0 to 8 [ 380.462180][T14831] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 380.509588][T14831] cramfs: bad data blocksize 4293972856 [ 380.515160][ T8700] udevd[8700]: incorrect cramfs checksum on /dev/loop1 [ 380.523404][T14831] cramfs: bad data blocksize 4293972856 [ 380.704099][T14837] netlink: 'syz.0.3967': attribute type 21 has an invalid length. [ 381.009657][T14844] loop1: detected capacity change from 0 to 256 [ 381.091980][T14844] FAT-fs (loop1): Directory bread(block 64) failed [ 381.098990][T14844] FAT-fs (loop1): Directory bread(block 65) failed [ 381.115973][T14844] FAT-fs (loop1): Directory bread(block 66) failed [ 381.163996][T14844] FAT-fs (loop1): Directory bread(block 67) failed [ 381.173369][T14844] FAT-fs (loop1): Directory bread(block 68) failed [ 381.180245][T14844] FAT-fs (loop1): Directory bread(block 69) failed [ 381.186902][T14844] FAT-fs (loop1): Directory bread(block 70) failed [ 381.194050][T14844] FAT-fs (loop1): Directory bread(block 71) failed [ 381.202541][T14844] FAT-fs (loop1): Directory bread(block 72) failed [ 381.209591][T14844] FAT-fs (loop1): Directory bread(block 73) failed [ 381.492412][T14833] loop2: detected capacity change from 0 to 40427 [ 381.516270][T14833] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 381.544394][T14833] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 381.606712][T14833] F2FS-fs (loop2): Found nat_bits in checkpoint [ 381.626713][T14860] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3977'. [ 381.749517][T14833] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 381.767727][T14833] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 381.842423][T14865] loop4: detected capacity change from 0 to 256 [ 381.985940][T14865] FAT-fs (loop4): Directory bread(block 64) failed [ 382.028306][T14865] FAT-fs (loop4): Directory bread(block 65) failed [ 382.049945][T14865] FAT-fs (loop4): Directory bread(block 66) failed [ 382.081426][T14865] FAT-fs (loop4): Directory bread(block 67) failed [ 382.090172][T14865] FAT-fs (loop4): Directory bread(block 68) failed [ 382.100220][T14865] FAT-fs (loop4): Directory bread(block 69) failed [ 382.111664][T14865] FAT-fs (loop4): Directory bread(block 70) failed [ 382.119802][T14865] FAT-fs (loop4): Directory bread(block 71) failed [ 382.127633][T14865] FAT-fs (loop4): Directory bread(block 72) failed [ 382.164254][T14865] FAT-fs (loop4): Directory bread(block 73) failed [ 383.093102][T14896] __vm_enough_memory: pid: 14896, comm: syz.0.3995, not enough memory for the allocation [ 383.110462][T14898] loop2: detected capacity change from 0 to 1024 [ 383.166587][T14900] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 383.210391][T14898] fuse: Bad value for 'fd' [ 383.278372][ T1088] hfsplus: b-tree write err: -5, ino 4 [ 383.365846][T14905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3997'. [ 383.389184][T14905] unsupported nlmsg_type 40 [ 383.572007][T14912] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4001'. [ 383.624258][T14917] loop1: detected capacity change from 0 to 512 [ 383.638368][ T5102] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 383.693391][T14917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.780477][T14917] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 383.792252][T14917] System zones: 0-2, 18-18, 34-34 [ 383.817122][T14915] loop0: detected capacity change from 0 to 4096 [ 383.828817][T14925] overlayfs: missing 'lowerdir' [ 383.837061][T14917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.863593][T14915] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 383.873523][T14917] ext4 filesystem being mounted at /1065/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.969332][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.001920][T14915] ntfs3: loop0: failed to convert "c46c" to iso8859-2 [ 384.382357][T14934] loop2: detected capacity change from 0 to 2048 [ 384.432813][T14934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.634384][T14943] usb usb8: usbfs: process 14943 (syz.4.4015) did not claim interface 0 before use [ 384.801767][T14949] loop2: detected capacity change from 0 to 1024 [ 384.889249][T14949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.099694][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.284047][T14964] ip6t_srh: unknown srh invflags 4449 [ 385.673353][T14956] loop4: detected capacity change from 0 to 32768 [ 385.695265][T14979] loop0: detected capacity change from 0 to 256 [ 385.733665][T14979] exfat: Deprecated parameter 'namecase' [ 385.747122][T14979] exfat: Deprecated parameter 'utf8' [ 385.775995][T14956] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 385.824826][T14979] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36de3a14, utbl_chksum : 0xe619d30d) [ 385.882654][T14956] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 385.994835][T14979] exFAT-fs (loop0): error, found bogus dentry(7) beyond unused empty group(6) (start_clu : 5, cur_clu : 5) [ 386.153404][T14987] loop2: detected capacity change from 0 to 256 [ 386.278963][ T6920] ocfs2: Unmounting device (7,4) on (node local) [ 386.281957][T14987] FAT-fs (loop2): Directory bread(block 64) failed [ 386.339546][T14987] FAT-fs (loop2): Directory bread(block 65) failed [ 386.346346][T14987] FAT-fs (loop2): Directory bread(block 66) failed [ 386.377978][T14987] FAT-fs (loop2): Directory bread(block 67) failed [ 386.384695][T14987] FAT-fs (loop2): Directory bread(block 68) failed [ 386.438065][T14987] FAT-fs (loop2): Directory bread(block 69) failed [ 386.444776][T14987] FAT-fs (loop2): Directory bread(block 70) failed [ 386.493767][T14987] FAT-fs (loop2): Directory bread(block 71) failed [ 386.501022][T14987] FAT-fs (loop2): Directory bread(block 72) failed [ 386.540584][T14987] FAT-fs (loop2): Directory bread(block 73) failed [ 386.630174][T14991] loop4: detected capacity change from 0 to 4096 [ 386.675229][T14991] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 386.740595][T14982] loop1: detected capacity change from 0 to 32768 [ 386.781099][T14991] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 386.852565][T14982] ea_get: invalid extended attribute [ 386.871176][T14991] ntfs3: loop4: failed to convert "c46c" to cp860 [ 386.884292][T14982] ea_get: invalid extended attribute [ 386.887744][ T27] audit: type=1800 audit(1756509615.269:130): pid=14982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4034" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 387.021026][T14995] loop0: detected capacity change from 0 to 4096 [ 387.447965][T15004] loop1: detected capacity change from 0 to 256 [ 387.559321][T15004] FAT-fs (loop1): Directory bread(block 64) failed [ 387.583637][T15004] FAT-fs (loop1): Directory bread(block 65) failed [ 387.614602][T15004] FAT-fs (loop1): Directory bread(block 66) failed [ 387.648311][T15004] FAT-fs (loop1): Directory bread(block 67) failed [ 387.655053][T15004] FAT-fs (loop1): Directory bread(block 68) failed [ 387.688094][T15004] FAT-fs (loop1): Directory bread(block 69) failed [ 387.694852][T15004] FAT-fs (loop1): Directory bread(block 70) failed [ 387.718466][T15004] FAT-fs (loop1): Directory bread(block 71) failed [ 387.725457][T15004] FAT-fs (loop1): Directory bread(block 72) failed [ 387.740284][T15004] FAT-fs (loop1): Directory bread(block 73) failed [ 387.977393][T15017] netlink: 'syz.4.4050': attribute type 4 has an invalid length. [ 388.002395][T15017] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4050'. [ 388.078501][T15017] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 388.356241][T15026] netlink: 'syz.2.4054': attribute type 21 has an invalid length. [ 388.551639][T15034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.559907][T15034] IPv6: NLM_F_CREATE should be set when creating new route [ 388.947569][T15052] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4067'. [ 389.658209][T15078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4079'. [ 389.841873][T15083] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.064178][ T27] audit: type=1326 audit(1756509618.449:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15092 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 390.166334][ T27] audit: type=1326 audit(1756509618.479:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15092 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 390.256647][ T27] audit: type=1326 audit(1756509618.479:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15092 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 390.279157][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.328972][T15101] lo: entered promiscuous mode [ 390.333823][T15101] lo: entered allmulticast mode [ 390.348695][ T27] audit: type=1326 audit(1756509618.479:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15092 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 390.374456][T15101] tunl0: entered promiscuous mode [ 390.423056][ T27] audit: type=1326 audit(1756509618.479:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15092 comm="syz.1.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 390.425227][T15101] tunl0: entered allmulticast mode [ 390.445429][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.469877][T15101] gre0: entered promiscuous mode [ 390.494856][T15101] gre0: entered allmulticast mode [ 390.629871][T15101] gretap0: entered promiscuous mode [ 390.636970][T15101] gretap0: entered allmulticast mode [ 390.646722][T15101] erspan0: entered promiscuous mode [ 390.662916][T15101] erspan0: entered allmulticast mode [ 390.672900][T15101] ip_vti0: entered promiscuous mode [ 390.684518][T15101] ip_vti0: entered allmulticast mode [ 390.692582][T15101] ip6_vti0: entered promiscuous mode [ 390.706355][T15101] ip6_vti0: entered allmulticast mode [ 390.713761][T15101] sit0: entered promiscuous mode [ 390.719468][T15101] sit0: entered allmulticast mode [ 390.725382][T15101] ip6tnl0: entered promiscuous mode [ 390.730812][T15101] ip6tnl0: entered allmulticast mode [ 390.737137][T15101] ip6gre0: entered promiscuous mode [ 390.742547][T15101] ip6gre0: entered allmulticast mode [ 390.749107][T15101] syz_tun: entered promiscuous mode [ 390.754351][T15101] syz_tun: entered allmulticast mode [ 390.760695][T15101] ip6gretap0: entered promiscuous mode [ 390.766262][T15101] ip6gretap0: entered allmulticast mode [ 390.772753][T15101] bridge0: entered promiscuous mode [ 390.778320][T15101] bridge0: entered allmulticast mode [ 390.784226][T15101] vcan0: entered promiscuous mode [ 390.789825][T15101] vcan0: entered allmulticast mode [ 390.795529][T15101] bond0: entered promiscuous mode [ 390.801293][T15101] bond_slave_0: entered promiscuous mode [ 390.807491][T15101] bond_slave_1: entered promiscuous mode [ 390.816356][T15101] bond0: entered allmulticast mode [ 390.821640][T15101] bond_slave_0: entered allmulticast mode [ 390.827473][T15101] bond_slave_1: entered allmulticast mode [ 390.834332][T15101] team0: entered promiscuous mode [ 390.839601][T15101] team_slave_0: entered promiscuous mode [ 390.845366][T15101] team_slave_1: entered promiscuous mode [ 390.851868][T15101] team0: entered allmulticast mode [ 390.857035][T15101] team_slave_0: entered allmulticast mode [ 390.863483][T15101] team_slave_1: entered allmulticast mode [ 390.870786][T15101] dummy0: entered promiscuous mode [ 390.876015][T15101] dummy0: entered allmulticast mode [ 390.883382][T15101] nlmon0: entered promiscuous mode [ 390.888878][T15101] nlmon0: entered allmulticast mode [ 390.895017][T15101] caif0: entered promiscuous mode [ 390.900461][T15101] caif0: entered allmulticast mode [ 390.905598][T15101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.931331][T15109] netlink: 'syz.2.4093': attribute type 4 has an invalid length. [ 390.939399][T15109] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4093'. [ 390.969004][T15109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 391.085601][T15112] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4095'. [ 391.282374][T15118] vivid-007: disconnect [ 391.289939][T15116] vivid-007: reconnect [ 391.568846][T15123] loop1: detected capacity change from 0 to 4096 [ 391.579934][T15123] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 391.666356][T15126] loop4: detected capacity change from 0 to 4096 [ 391.689222][T15126] ntfs3: loop4: It is recommened to use chkdsk. [ 391.729908][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 391.752649][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 391.761681][T15123] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 391.788357][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 391.796350][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 391.887896][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 391.940835][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 391.967632][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 392.003641][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 392.016577][T15135] loop2: detected capacity change from 0 to 4096 [ 392.026963][T15126] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 392.039400][ T5785] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 392.213510][T15141] netlink: 'syz.1.4108': attribute type 4 has an invalid length. [ 392.252299][T15141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4108'. [ 392.452102][T15143] netlink: 'syz.0.4110': attribute type 6 has an invalid length. [ 392.575472][T15147] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4112'. [ 393.224405][T15173] loop4: detected capacity change from 0 to 128 [ 393.265929][T15175] sctp: [Deprecated]: syz.1.4127 (pid 15175) Use of int in max_burst socket option deprecated. [ 393.265929][T15175] Use struct sctp_assoc_value instead [ 393.297957][T15173] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 393.557541][T15181] loop1: detected capacity change from 0 to 4096 [ 393.616381][ T6920] sysv_free_block: flc_count > flc_size [ 393.648827][ T6920] sysv_free_block: flc_count > flc_size [ 393.654451][ T6920] sysv_free_block: flc_count > flc_size [ 393.678860][T15181] ntfs: volume version 3.1. [ 393.680427][ T6920] sysv_free_block: flc_count > flc_size [ 393.696888][T15185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4132'. [ 393.701578][ T6920] sysv_free_block: flc_count > flc_size [ 393.739132][ T6920] sysv_free_block: flc_count > flc_size [ 393.744804][ T6920] sysv_free_block: flc_count > flc_size [ 393.778514][ T6920] sysv_free_block: flc_count > flc_size [ 393.784138][ T6920] sysv_free_block: flc_count > flc_size [ 393.797851][ T6920] sysv_free_block: flc_count > flc_size [ 393.804996][ T6920] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 393.942106][T15189] loop2: detected capacity change from 0 to 512 [ 394.001981][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 394.004358][T15189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 394.078858][T15189] EXT4-fs (loop2): 1 truncate cleaned up [ 394.089471][T15189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.274897][T15189] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 394.327761][T15189] EXT4-fs (loop2): Remounting filesystem read-only [ 394.482759][T15206] loop4: detected capacity change from 0 to 256 [ 394.499737][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.590389][T15206] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 394.845430][T15217] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4146'. [ 394.859681][ T27] audit: type=1326 audit(1756509623.239:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15215 comm="syz.1.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 394.882139][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.958096][ T27] audit: type=1326 audit(1756509623.239:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15215 comm="syz.1.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 395.017129][ T27] audit: type=1326 audit(1756509623.279:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15215 comm="syz.1.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 395.094848][T15226] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 395.111362][ T27] audit: type=1326 audit(1756509623.279:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15215 comm="syz.1.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 395.163873][ T27] audit: type=1326 audit(1756509623.279:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15215 comm="syz.1.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 395.404291][ T27] audit: type=1326 audit(1756509623.789:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 395.461034][ T27] audit: type=1326 audit(1756509623.789:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 395.526855][T15240] futex_wake_op: syz.0.4158 tries to shift op by 32; fix this program [ 395.537405][ T27] audit: type=1326 audit(1756509623.789:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 395.567246][ T27] audit: type=1326 audit(1756509623.789:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 395.657892][ T27] audit: type=1326 audit(1756509623.789:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15235 comm="syz.4.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 396.151306][T15263] loop4: detected capacity change from 0 to 16 [ 396.199798][T15263] erofs: (device loop4): mounted with root inode @ nid 36. [ 396.640521][T15279] loop1: detected capacity change from 0 to 1024 [ 396.724024][T15281] xt_connbytes: Forcing CT accounting to be enabled [ 396.758137][T15281] xt_bpf: check failed: parse error [ 397.267415][T15269] loop2: detected capacity change from 0 to 32768 [ 397.344102][T15269] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 397.344102][T15269] [ 397.389303][T15269] ERROR: (device loop2): remounting filesystem as read-only [ 397.406223][T15269] jfs_lookup: dtSearch returned -5 [ 397.797700][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4193'. [ 397.824555][T15315] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4193'. [ 397.851294][T15318] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.682661][T15316] loop4: detected capacity change from 0 to 32768 [ 398.706330][T15316] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.4194 (15316) [ 398.772099][T15316] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 398.799781][T15316] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 398.832209][T15316] BTRFS info (device loop4): force zlib compression, level 3 [ 398.859755][T15316] BTRFS info (device loop4): force clearing of disk cache [ 398.867046][T15316] BTRFS info (device loop4): setting nodatasum [ 398.877006][T15316] BTRFS info (device loop4): use zlib compression, level 3 [ 398.912094][T15316] BTRFS info (device loop4): allowing degraded mounts [ 398.933419][T15316] BTRFS info (device loop4): enabling disk space caching [ 398.967890][T15316] BTRFS info (device loop4): disk space caching is enabled [ 399.138781][T15316] BTRFS info (device loop4): enabling ssd optimizations [ 399.166101][ T788] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 399.173667][T15316] BTRFS info (device loop4): auto enabling async discard [ 399.200506][T15316] BTRFS info (device loop4): rebuilding free space tree [ 399.216938][T15316] BTRFS info (device loop4): disabling free space tree [ 399.224436][T15316] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 399.235124][T15316] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 399.380507][ T788] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 399.397848][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.425450][T15316] BTRFS info (device loop4): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2305843009213694464,usage=512..536870912,devid=0 [ 399.426947][ T788] usb 3-1: config 0 descriptor?? [ 399.494798][ T788] gspca_main: spca508-2.14.0 probing 8086:0110 [ 399.528168][T15316] BTRFS info (device loop4): balance: ended with status: 0 [ 399.629768][ T6920] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 399.907390][ T788] gspca_spca508: reg_read err -71 [ 399.919327][ T788] gspca_spca508: reg_read err -71 [ 399.928450][T15390] netlink: 'syz.1.4223': attribute type 3 has an invalid length. [ 399.947136][ T788] gspca_spca508: reg_read err -71 [ 399.957001][ T788] gspca_spca508: reg_read err -71 [ 399.977318][ T788] gspca_spca508: reg write: error -71 [ 399.987446][ T788] spca508: probe of 3-1:0.0 failed with error -71 [ 400.028265][ T788] usb 3-1: USB disconnect, device number 22 [ 400.404760][T15404] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4229'. [ 400.414561][T15404] hsr_slave_0: left promiscuous mode [ 400.421025][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 400.421041][ T27] audit: type=1326 audit(1756509628.809:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.0.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 400.451046][T15404] hsr_slave_1: left promiscuous mode [ 400.456343][ T27] audit: type=1326 audit(1756509628.809:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.0.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 400.478821][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.490715][ T27] audit: type=1326 audit(1756509628.809:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.0.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 400.513596][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.525297][ T27] audit: type=1326 audit(1756509628.809:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.0.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 400.547755][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.555427][ T27] audit: type=1326 audit(1756509628.809:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.0.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 400.577994][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.658024][ T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 400.882791][ T54] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 400.908308][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.916378][ T54] usb 5-1: Product: syz [ 400.939790][ T54] usb 5-1: Manufacturer: syz [ 400.977960][ T54] usb 5-1: SerialNumber: syz [ 401.013076][ T54] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.024855][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 401.033632][ T5872] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.062355][T15428] loop1: detected capacity change from 0 to 256 [ 401.246609][T15434] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 401.305882][T15434] CIFS mount error: No usable UNC path provided in device string! [ 401.305882][T15434] [ 401.327702][T15434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 401.580517][ T5838] usb 5-1: USB disconnect, device number 11 [ 402.167964][ T5872] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 402.189498][ T5872] ath9k_htc: Failed to initialize the device [ 402.196453][ T5838] usb 5-1: ath9k_htc: USB layer deinitialized [ 402.327966][ T5794] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 402.487425][T15478] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4265'. [ 402.535808][T15478] hsr_slave_0: left promiscuous mode [ 402.541426][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 402.555054][ T5794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.567277][ T5794] usb 3-1: config 0 has no interfaces? [ 402.574185][T15478] hsr_slave_1: left promiscuous mode [ 402.582509][ T5794] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 402.593782][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.625020][ T5794] usb 3-1: Product: syz [ 402.636521][ T5794] usb 3-1: Manufacturer: syz [ 402.654007][ T5794] usb 3-1: SerialNumber: syz [ 402.675771][ T5794] r8152-cfgselector 3-1: config 0 descriptor?? [ 402.938358][ T5794] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 403.142324][T15496] tmpfs: Bad value for 'huge' [ 403.176689][ T5872] usb 3-1: USB disconnect, device number 23 [ 403.201574][ T27] audit: type=1326 audit(1756509631.579:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.0.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 403.276973][ T27] audit: type=1326 audit(1756509631.609:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.0.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 403.347925][ T27] audit: type=1326 audit(1756509631.639:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.0.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 403.371207][T15502] MTD: Couldn't look up '/dev/sg0': -15 [ 403.412667][ T27] audit: type=1326 audit(1756509631.639:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.0.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 403.745520][T15516] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 403.771886][T15516] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 403.799275][T15516] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 403.828291][T15516] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 403.847931][T15516] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 403.866503][T15516] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 403.877136][T15516] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 403.885612][T15516] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 403.917914][T15516] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 403.938113][T15516] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 403.949043][T15516] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 403.967719][T15516] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 403.977996][T15516] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 404.008769][T15516] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 404.131391][T15510] loop4: detected capacity change from 0 to 32768 [ 404.149248][T15510] (syz.4.4283,15510,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 404.187720][T15510] (syz.4.4283,15510,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 404.291621][T15510] JBD2: Ignoring recovery information on journal [ 404.444022][T15510] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 404.493336][T15510] (syz.4.4283,15510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 404.764337][T15510] (syz.4.4283,15510,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 404.821847][T15510] (syz.4.4283,15510,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 404.846716][T15510] (syz.4.4283,15510,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 404.878556][T15510] (syz.4.4283,15510,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 404.897935][T15510] (syz.4.4283,15510,0):ocfs2_quota_read:201 ERROR: status = -5 [ 404.915911][T15510] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 404.944208][T15510] (syz.4.4283,15510,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 404.964438][T15510] (syz.4.4283,15510,0):ocfs2_mknod:314 ERROR: status = -5 [ 405.007940][T15510] (syz.4.4283,15510,0):ocfs2_mknod:502 ERROR: status = -5 [ 405.015141][T15510] (syz.4.4283,15510,0):ocfs2_mkdir:659 ERROR: status = -5 [ 405.100924][T15561] ./file0: Can't open blockdev [ 405.201026][ T6920] ocfs2: Unmounting device (7,4) on (node local) [ 405.567976][ T788] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 405.777997][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 405.800061][ T788] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 405.814329][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.845269][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.860893][ T788] usb 2-1: config 1 has no interface number 0 [ 405.877253][T15588] loop4: detected capacity change from 0 to 1764 [ 405.877406][ T788] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.930579][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.951872][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.968626][ T788] usb 2-1: Product: syz [ 405.976894][ T788] usb 2-1: Manufacturer: syz [ 405.988023][ T788] usb 2-1: SerialNumber: syz [ 406.001826][ T788] cdc_wdm 2-1:1.128: skipping garbage [ 406.017528][ T788] cdc_wdm 2-1:1.128: invalid descriptor buffer length [ 406.027682][ T788] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 406.126321][T15597] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.236533][ T5794] usb 2-1: USB disconnect, device number 12 [ 406.433660][T15610] netlink: 'syz.0.4327': attribute type 4 has an invalid length. [ 406.452542][T15610] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4327'. [ 406.484098][T15610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 406.918245][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4338'. [ 407.211137][T15640] loop4: detected capacity change from 0 to 2048 [ 407.280253][T15643] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.313564][T15645] binder: 15644:15645 ioctl 400c620e 200000000000 returned -22 [ 407.376162][T15640] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 407.456200][T15640] Remounting filesystem read-only [ 407.469457][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4347'. [ 407.478906][T15640] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 407.734052][T15661] usb usb3: usbfs: process 15661 (syz.2.4353) did not claim interface 0 before use [ 407.798751][ T5794] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 407.918170][ T5872] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 407.998086][ T5794] usb 1-1: Using ep0 maxpacket: 32 [ 408.013061][ T5794] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 408.027188][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.044505][ T5794] usb 1-1: config 0 descriptor?? [ 408.062970][ T5794] gspca_main: sunplus-2.14.0 probing 041e:400b [ 408.108410][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 408.118698][T15677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4361'. [ 408.139064][ T5872] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 408.148918][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.169667][ T5872] usb 2-1: config 0 descriptor?? [ 408.200695][ T5872] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 408.477623][T15687] loop2: detected capacity change from 0 to 512 [ 408.485710][ T5794] gspca_sunplus: reg_w_riv err -71 [ 408.503150][ T5794] sunplus: probe of 1-1:0.0 failed with error -71 [ 408.514977][ T5794] usb 1-1: USB disconnect, device number 19 [ 408.550915][T15687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.574280][T15687] ext4 filesystem being mounted at /1048/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.599523][ T5872] gspca_vc032x: reg_w err -71 [ 408.604287][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.646351][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.647376][T15694] loop4: detected capacity change from 0 to 256 [ 408.663363][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.673089][T15694] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.684554][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.686776][T15694] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 408.708666][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.721393][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.727109][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.734465][T15694] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 408.735880][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.755368][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.761879][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.787897][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.793459][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.803671][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.809719][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.819439][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.829498][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.857901][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.863560][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.873670][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.890543][ T5872] gspca_vc032x: Unknown sensor... [ 408.895714][ T5872] vc032x: probe of 2-1:0.0 failed with error -22 [ 408.949598][ T5872] usb 2-1: USB disconnect, device number 13 [ 409.238924][T15705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.268790][T15705] batadv_slave_0: entered promiscuous mode [ 409.274789][T15705] batadv_slave_0: entered allmulticast mode [ 409.325644][T15705] netlink: 'syz.2.4373': attribute type 8 has an invalid length. [ 409.737985][ T5872] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 409.766784][T15728] vivid-004: disconnect [ 409.772300][T15726] vivid-004: reconnect [ 409.918352][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 409.942259][ T5872] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 409.968214][ T5872] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 409.989006][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4388'. [ 410.008048][ T5872] usb 1-1: config 135 has no interface number 0 [ 410.014406][ T5872] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.053552][ T5872] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 410.064927][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.077927][ T5872] usb 1-1: Product: syz [ 410.104985][ T5872] usb 1-1: Manufacturer: syz [ 410.125134][T15738] loop4: detected capacity change from 0 to 512 [ 410.136303][ T5872] usb 1-1: SerialNumber: syz [ 410.251515][T15738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.281321][T15738] ext4 filesystem being mounted at /942/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.367945][ T5872] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 410.374419][ T5872] usb 1-1: No valid video chain found. [ 410.390078][ T5872] usb 1-1: USB disconnect, device number 20 [ 410.451459][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.632191][T15754] loop4: detected capacity change from 0 to 256 [ 410.730079][T15754] FAT-fs (loop4): Directory bread(block 64) failed [ 410.753587][T15754] FAT-fs (loop4): Directory bread(block 65) failed [ 410.773954][T15754] FAT-fs (loop4): Directory bread(block 66) failed [ 410.797922][T15754] FAT-fs (loop4): Directory bread(block 67) failed [ 410.825116][T15754] FAT-fs (loop4): Directory bread(block 68) failed [ 410.843810][T15754] FAT-fs (loop4): Directory bread(block 69) failed [ 410.868273][T15754] FAT-fs (loop4): Directory bread(block 70) failed [ 410.885121][T15754] FAT-fs (loop4): Directory bread(block 71) failed [ 410.897090][T15754] FAT-fs (loop4): Directory bread(block 72) failed [ 410.931535][T15754] FAT-fs (loop4): Directory bread(block 73) failed [ 411.393800][T15772] netlink: 456 bytes leftover after parsing attributes in process `syz.4.4405'. [ 411.403422][T15772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4405'. [ 411.633754][T15783] delete_channel: no stack [ 411.769025][ T5872] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 411.865137][T15790] xt_CT: No such helper "netbios-ns" [ 411.973874][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 411.987498][ T5872] usb 1-1: not running at top speed; connect to a high speed hub [ 412.009124][T15798] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4417'. [ 412.013502][ T5872] usb 1-1: config 5 has an invalid interface number: 64 but max is 0 [ 412.030702][ T5872] usb 1-1: config 5 has no interface number 0 [ 412.047205][ T5872] usb 1-1: config 5 interface 64 has no altsetting 0 [ 412.064790][ T5838] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 412.075588][ T5872] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 412.097948][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.115250][ T5872] usb 1-1: Product: syz [ 412.120601][ T5872] usb 1-1: Manufacturer: syz [ 412.125362][ T5872] usb 1-1: SerialNumber: syz [ 412.268203][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 412.279723][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.298026][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.323375][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.352596][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.382476][ T5838] usb 3-1: Product: syz [ 412.386773][ T5838] usb 3-1: Manufacturer: syz [ 412.429237][ T5838] usb 3-1: SerialNumber: syz [ 412.487729][ T5872] snd-usb-audio: probe of 1-1:5.64 failed with error -71 [ 412.517277][ T5872] usb 1-1: USB disconnect, device number 21 [ 412.656153][T15815] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 412.674398][T15815] bridge3: entered promiscuous mode [ 412.680769][T15815] bridge3: entered allmulticast mode [ 412.889030][ T5838] usb 3-1: cannot find UAC_HEADER [ 412.950269][ T5838] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 412.967704][T15821] loop4: detected capacity change from 0 to 4096 [ 412.971917][ T5838] usb 3-1: USB disconnect, device number 24 [ 413.035746][ T8700] udevd[8700]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.578620][T15837] netlink: 'syz.4.4437': attribute type 21 has an invalid length. [ 413.586525][T15837] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4437'. [ 413.942780][T15853] loop1: detected capacity change from 0 to 256 [ 413.951768][T15853] exfat: Deprecated parameter 'utf8' [ 413.957193][T15853] exfat: Deprecated parameter 'utf8' [ 414.050659][T15853] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 414.452066][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 414.477143][T15871] netlink: zone id is out of range [ 414.504054][T15871] netlink: del zone limit has 4 unknown bytes [ 415.122041][T15901] loop2: detected capacity change from 0 to 256 [ 415.130373][T15898] loop4: detected capacity change from 0 to 1764 [ 415.165049][T15901] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 415.201978][T15898] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 415.212707][T15901] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 415.237129][T15901] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 415.267198][T15901] UDF-fs: Scanning with blocksize 512 failed [ 415.286002][T15901] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 415.350877][T15901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.677730][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4478'. [ 415.696287][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4478'. [ 415.771821][T15921] loop4: detected capacity change from 0 to 128 [ 415.813452][T15921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 416.128421][ T5838] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 416.337991][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 416.352989][ T5838] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 416.372760][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.387921][ T5838] usb 3-1: Product: syz [ 416.392176][ T5838] usb 3-1: Manufacturer: syz [ 416.408779][ T5838] usb 3-1: SerialNumber: syz [ 416.417898][T15945] "syz.1.4491" (15945) uses obsolete ecb(arc4) skcipher [ 416.427475][ T5838] r8152-cfgselector 3-1: config 0 descriptor?? [ 416.660741][ T5838] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 416.677333][T15953] netlink: 'syz.0.4495': attribute type 1 has an invalid length. [ 416.706082][T15953] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4495'. [ 416.865051][ T5838] usb 3-1: USB disconnect, device number 25 [ 417.214538][T15977] UBIFS error (pid: 15977): cannot open "./file0", error -22 [ 417.490691][T15989] loop4: detected capacity change from 0 to 256 [ 417.527532][T15989] exfat: Deprecated parameter 'utf8' [ 417.545405][T15989] exfat: Deprecated parameter 'utf8' [ 417.596655][T15989] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 417.831157][T15997] IPv6: Can't replace route, no match found [ 418.139018][ T5872] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 418.233770][T16019] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4528'. [ 418.347956][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 418.359217][ T5872] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 418.378258][ T5872] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 418.397272][ T5872] usb 3-1: Product: syz [ 418.407909][ T5872] usb 3-1: Manufacturer: syz [ 418.412691][ T5872] usb 3-1: SerialNumber: syz [ 418.426330][ T5872] usb 3-1: config 0 descriptor?? [ 418.442369][ T5872] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 418.636560][T16033] netlink: 'syz.0.4535': attribute type 1 has an invalid length. [ 418.663656][T16033] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.4535'. [ 418.857863][T16041] netlink: 'syz.1.4539': attribute type 10 has an invalid length. [ 418.866337][T16041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4539'. [ 418.878137][T16041] ipvlan1: entered promiscuous mode [ 418.883742][ T5872] gspca_zc3xx: reg_r err -71 [ 418.890145][T16041] ipvlan1: entered allmulticast mode [ 418.895622][T16041] veth0_vlan: entered allmulticast mode [ 418.912227][T16041] bridge0: port 3(ipvlan1) entered blocking state [ 418.924673][ T5872] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 418.929500][T16041] bridge0: port 3(ipvlan1) entered disabled state [ 418.949510][ T5872] usb 3-1: USB disconnect, device number 26 [ 418.977233][T16041] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 420.183412][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4565'. [ 420.404592][T16105] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4571'. [ 421.238311][ T788] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 421.382479][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.389069][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.403055][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.415713][T16147] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 421.428471][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 421.436586][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.453531][T16147] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 421.459137][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.474933][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.485091][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.493487][ T788] usb 2-1: Product: syz [ 421.498195][ T788] usb 2-1: Manufacturer: syz [ 421.502900][ T788] usb 2-1: SerialNumber: syz [ 421.539029][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.559654][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.571927][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.588848][T16147] wg1 speed is unknown, defaulting to 1000 [ 421.817572][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'. [ 421.826924][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4597'. [ 421.838743][T16157] netlink: 'syz.2.4597': attribute type 1 has an invalid length. [ 421.952947][ T788] usb 2-1: cannot find UAC_HEADER [ 422.016615][ T788] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 422.049555][ T788] usb 2-1: USB disconnect, device number 14 [ 422.127330][ T8700] udevd[8700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.387086][T16175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4606'. [ 422.711516][T16187] IPVS: Error joining to the multicast group [ 422.863435][T16193] vlan0: entered promiscuous mode [ 423.037186][T16199] netlink: 'syz.1.4618': attribute type 1 has an invalid length. [ 423.051695][T16199] netlink: 'syz.1.4618': attribute type 2 has an invalid length. [ 423.081821][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4618'. [ 423.577689][T16257] loop1: detected capacity change from 0 to 1024 [ 423.889219][T16272] xt_ecn: cannot match TCP bits for non-tcp packets [ 423.938580][T16271] loop1: detected capacity change from 0 to 512 [ 423.949408][T16271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.034648][T16271] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 424.083096][T16271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 424.100720][T16271] EXT4-fs (loop1): orphan cleanup on readonly fs [ 424.115011][T16271] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4632: invalid indirect mapped block 2185560079 (level 1) [ 424.134904][T16271] EXT4-fs (loop1): Remounting filesystem read-only [ 424.142416][T16271] EXT4-fs (loop1): 1 truncate cleaned up [ 424.150027][T16271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 424.167489][T16271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 424.375990][T16296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4641'. [ 424.567558][T16305] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4644'. [ 424.581897][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 424.814796][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 425.424960][T16354] loop1: detected capacity change from 0 to 256 [ 425.571034][T16354] FAT-fs (loop1): Directory bread(block 64) failed [ 425.582963][T16354] FAT-fs (loop1): Directory bread(block 65) failed [ 425.593463][T16354] FAT-fs (loop1): Directory bread(block 66) failed [ 425.600963][T16354] FAT-fs (loop1): Directory bread(block 67) failed [ 425.609308][T16354] FAT-fs (loop1): Directory bread(block 68) failed [ 425.616695][T16354] FAT-fs (loop1): Directory bread(block 69) failed [ 425.624862][T16354] FAT-fs (loop1): Directory bread(block 70) failed [ 425.647433][T16354] FAT-fs (loop1): Directory bread(block 71) failed [ 425.666509][T16364] loop4: detected capacity change from 0 to 1024 [ 425.678053][T16354] FAT-fs (loop1): Directory bread(block 72) failed [ 425.684658][T16354] FAT-fs (loop1): Directory bread(block 73) failed [ 425.819743][ T11] hfsplus: b-tree write err: -5, ino 4 [ 426.183980][T16392] netlink: 'syz.4.4675': attribute type 9 has an invalid length. [ 426.212469][T16392] netlink: 'syz.4.4675': attribute type 7 has an invalid length. [ 426.237974][T16392] netlink: 'syz.4.4675': attribute type 8 has an invalid length. [ 426.844392][T16421] loop2: detected capacity change from 0 to 4096 [ 426.902502][T16421] __ntfs_error: 1 callbacks suppressed [ 426.902533][T16421] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 426.939140][T16421] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 426.961056][T16421] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 426.996080][T16421] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 427.064813][T16421] ntfs: volume version 3.1. [ 427.227913][T16421] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 427.237119][T16421] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 428.321369][T16494] loop2: detected capacity change from 0 to 256 [ 428.376079][T16494] FAT-fs (loop2): Directory bread(block 64) failed [ 428.398104][T16494] FAT-fs (loop2): Directory bread(block 65) failed [ 428.404819][T16494] FAT-fs (loop2): Directory bread(block 66) failed [ 428.431851][T16494] FAT-fs (loop2): Directory bread(block 67) failed [ 428.447938][T16494] FAT-fs (loop2): Directory bread(block 68) failed [ 428.454545][T16494] FAT-fs (loop2): Directory bread(block 69) failed [ 428.478005][T16494] FAT-fs (loop2): Directory bread(block 70) failed [ 428.484606][T16494] FAT-fs (loop2): Directory bread(block 71) failed [ 428.508321][T16494] FAT-fs (loop2): Directory bread(block 72) failed [ 428.514937][T16494] FAT-fs (loop2): Directory bread(block 73) failed [ 429.001355][ T27] audit: type=1800 audit(1756509657.379:166): pid=16519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.4715" name="/newroot/1130/file0" dev="tmpfs" ino=5779 res=0 errno=0 [ 429.026200][ T5838] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 429.167436][T16534] loop2: detected capacity change from 0 to 512 [ 429.182369][T16534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 429.196041][T16534] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 429.220132][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 429.224417][T16534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 429.234509][T16534] EXT4-fs (loop2): orphan cleanup on readonly fs [ 429.245809][T16534] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4718: invalid indirect mapped block 2185560079 (level 1) [ 429.251624][ T5838] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 429.292730][T16534] EXT4-fs (loop2): Remounting filesystem read-only [ 429.304667][T16534] EXT4-fs (loop2): 1 truncate cleaned up [ 429.317294][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.339361][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4721'. [ 429.348091][T16534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 429.365206][ T5838] usb 5-1: Product: syz [ 429.375013][ T5838] usb 5-1: Manufacturer: syz [ 429.387416][ T5838] usb 5-1: SerialNumber: syz [ 429.392796][T16534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 429.423407][ T5838] r8152-cfgselector 5-1: config 0 descriptor?? [ 429.652255][ T5838] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 429.686515][T16558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4723'. [ 429.921801][ T5838] usb 5-1: USB disconnect, device number 12 [ 430.853580][T16621] loop4: detected capacity change from 0 to 2048 [ 430.939817][T16630] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.985751][T16633] netlink: 'syz.0.4744': attribute type 1 has an invalid length. [ 431.054812][T16621] NILFS (loop4): error -2 truncating bmap (ino=16) [ 431.205993][T16630] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 431.241811][T16630] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 431.286279][T16630] Remounting filesystem read-only [ 431.294739][ T11] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 431.306337][T16645] loop1: detected capacity change from 0 to 4096 [ 431.330852][ T11] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 431.369126][ T11] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 431.386920][ T11] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 431.400713][T16645] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 431.413100][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.424596][ T11] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 431.439384][ T11] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 431.447094][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.458183][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.475072][T16645] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 431.491722][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.511137][ T11] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 431.541514][ T11] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 431.567956][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.576950][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.597550][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.615969][T16645] ntfs3: loop1: ino=5, "/" directory corrupted [ 431.650924][ T6920] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 431.678300][ T6920] NILFS (loop4): discard dirty page: offset=0, ino=16 [ 431.687107][ T6920] NILFS (loop4): discard dirty block: blocknr=23, size=1024 [ 431.701060][ T6920] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.713268][ T6920] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.726007][ T6920] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.941993][T16672] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 433.098016][ T27] audit: type=1326 audit(1756509661.479:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 433.145766][ T27] audit: type=1326 audit(1756509661.479:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 433.210989][ T27] audit: type=1326 audit(1756509661.509:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 433.267664][ T27] audit: type=1326 audit(1756509661.509:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 433.327344][ T27] audit: type=1326 audit(1756509661.509:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 433.350098][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.689671][T16770] usb usb8: usbfs: process 16770 (syz.1.4791) did not claim interface 0 before use [ 433.719580][T16772] loop4: detected capacity change from 0 to 1024 [ 433.732945][T16772] EXT4-fs: Ignoring removed bh option [ 433.754756][T16772] EXT4-fs: inline encryption not supported [ 433.814855][T16772] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 433.850080][T16772] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 433.934818][T16772] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.4792: lblock 2 mapped to illegal pblock 2 (length 1) [ 433.956342][T16772] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 433.975008][T16772] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 48: comm syz.4.4792: lblock 0 mapped to illegal pblock 48 (length 1) [ 434.073409][T16772] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 434.102739][T16772] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.4792: Failed to acquire dquot type 0 [ 434.142860][T16772] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 434.162208][T16795] loop1: detected capacity change from 0 to 164 [ 434.175278][T16772] EXT4-fs error (device loop4): ext4_evict_inode:252: inode #11: comm syz.4.4792: mark_inode_dirty error [ 434.192302][T16772] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 434.204125][T16772] EXT4-fs (loop4): 1 orphan inode deleted [ 434.219294][T16772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.238093][ T12] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 434.285456][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 434.317215][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6976: comm kworker/u4:1: Failed to release dquot type 0 [ 434.331864][T16772] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm syz.4.4792: lblock 1 mapped to illegal pblock 1 (length 1) [ 434.392898][T16795] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 434.401264][T16772] Quota error (device loop4): find_next_id: Can't read quota tree block 1 [ 434.566670][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.615114][ T6920] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 434.657934][ T6920] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 434.684359][ T6920] EXT4-fs error (device loop4): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 435.884787][T16884] netlink: 'syz.1.4828': attribute type 5 has an invalid length. [ 436.047925][T16890] sock: sock_timestamping_bind_phc: sock not bind to device [ 436.103369][T16899] SET target dimension over the limit! [ 436.529389][T16920] ip6erspan0: entered allmulticast mode [ 437.196826][T16913] loop1: detected capacity change from 0 to 32768 [ 437.224505][T16913] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4838 (16913) [ 437.335964][T16913] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 437.374816][T16913] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 437.407892][T16913] BTRFS info (device loop1): force zlib compression, level 3 [ 437.418362][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4855'. [ 437.427414][T16961] netlink: 'syz.2.4855': attribute type 1 has an invalid length. [ 437.447322][T16913] BTRFS info (device loop1): force clearing of disk cache [ 437.469097][T16913] BTRFS info (device loop1): turning off barriers [ 437.475608][T16913] BTRFS info (device loop1): doing ref verification [ 437.495980][T16961] netlink: 'syz.2.4855': attribute type 2 has an invalid length. [ 437.519418][T16913] BTRFS info (device loop1): enabling disk space caching [ 437.526566][T16913] BTRFS info (device loop1): disk space caching is enabled [ 437.542543][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4855'. [ 437.646750][T16913] BTRFS info (device loop1): enabling ssd optimizations [ 437.667817][T16913] BTRFS info (device loop1): auto enabling async discard [ 437.702914][T16913] BTRFS info (device loop1): rebuilding free space tree [ 437.762074][T16913] BTRFS info (device loop1): disabling free space tree [ 437.787856][T16913] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.797724][T16913] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 437.952939][ T5785] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 438.033401][T16997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.119648][ T8700] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (8700) [ 438.302514][T17008] netlink: 'syz.2.4868': attribute type 5 has an invalid length. [ 438.493402][ T27] audit: type=1326 audit(1756509666.879:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 438.598250][ T27] audit: type=1326 audit(1756509666.879:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 438.729040][ T27] audit: type=1326 audit(1756509666.909:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 438.780088][ T27] audit: type=1326 audit(1756509666.909:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 438.797976][T17023] netlink: 'syz.0.4875': attribute type 6 has an invalid length. [ 438.843723][ T27] audit: type=1326 audit(1756509666.909:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.0.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 438.944222][T17031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4877'. [ 439.005105][T17033] loop1: detected capacity change from 0 to 512 [ 439.022395][T17028] loop2: detected capacity change from 0 to 4096 [ 439.068021][T17033] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 439.114093][T17033] System zones: 0-2, 18-18, 34-34 [ 439.157025][T17028] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 439.162710][T17033] EXT4-fs (loop1): orphan cleanup on readonly fs [ 439.192313][T17033] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4878: bg 0: block 248: padding at end of block bitmap is not set [ 439.237326][T17028] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 439.261757][T17033] Quota error (device loop1): write_blk: dquota write failed [ 439.293298][T17033] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 439.324205][T17033] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.4878: Failed to acquire dquot type 1 [ 439.382092][T17033] EXT4-fs (loop1): 1 orphan inode deleted [ 439.389364][ T59] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 439.444365][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:4: Failed to release dquot type 1 [ 439.489408][T17033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.663230][T17033] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.4878: deleted inode referenced: 12 [ 439.781064][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.004436][T17075] loop4: detected capacity change from 0 to 128 [ 440.067732][T17075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.134548][T17075] ext4 filesystem being mounted at /1075/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 440.164363][T17075] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 440.224170][ T6920] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.243375][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.249843][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.369017][T17096] netlink: 'syz.1.4898': attribute type 32 has an invalid length. [ 440.561828][T17109] netlink: 'syz.1.4902': attribute type 1 has an invalid length. [ 440.977985][ T27] audit: type=1326 audit(1756509669.359:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17129 comm="syz.0.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 441.055808][ T27] audit: type=1326 audit(1756509669.359:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17129 comm="syz.0.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 441.078415][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.102688][T17139] loop2: detected capacity change from 0 to 256 [ 441.185113][T17139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 441.251293][T17148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 441.959629][T17184] program syz.4.4928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.617883][ T788] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 442.737288][T17229] dlm: non-version read from control device 0 [ 442.764836][T17226] loop1: detected capacity change from 0 to 4096 [ 442.788076][T17226] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 442.818504][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 442.827530][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.857966][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.887427][ T788] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.898497][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.915655][ T788] usb 5-1: config 0 descriptor?? [ 442.944329][ T788] hub 5-1:0.0: USB hub found [ 443.177976][ T788] hub 5-1:0.0: 1 port detected [ 443.379972][ T788] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 443.387503][ T788] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 443.411663][ T788] usbhid 5-1:0.0: can't add hid device: -71 [ 443.417738][ T788] usbhid: probe of 5-1:0.0 failed with error -71 [ 443.498925][ T788] usb 5-1: USB disconnect, device number 13 [ 444.119866][T17292] CIFS: VFS: Malformed UNC in devname [ 444.508290][ T788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 444.718149][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 444.729035][ T788] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 444.752388][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.773045][ T788] usb 2-1: config 0 has no interface number 0 [ 444.781195][ T788] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.795230][ T788] usb 2-1: config 0 interface 52 has no altsetting 0 [ 444.823268][ T788] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice= 8.00 [ 444.838057][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=184 [ 444.864605][ T788] usb 2-1: SerialNumber: syz [ 444.879876][T17329] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4973'. [ 444.906945][ T788] usb 2-1: config 0 descriptor?? [ 445.426777][ T5872] usb 2-1: USB disconnect, device number 15 [ 445.769066][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4988'. [ 445.783068][T17384] netlink: 'syz.2.4988': attribute type 1 has an invalid length. [ 446.570975][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5011'. [ 447.186607][T17454] infiniband syz1: set active [ 447.191755][T17432] loop2: detected capacity change from 0 to 32768 [ 447.212812][T17432] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 447.342512][ T8700] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 447.516014][T17457] loop2: detected capacity change from 0 to 4096 [ 447.800560][T17448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.823622][T17472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5015'. [ 447.973803][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5017'. [ 447.983407][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5018'. [ 448.029758][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 448.029775][ T27] audit: type=1326 audit(1756509676.409:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.2.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 448.108800][ T27] audit: type=1326 audit(1756509676.409:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.2.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 448.188510][ T27] audit: type=1326 audit(1756509676.419:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.2.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 448.221544][T17488] loop2: detected capacity change from 0 to 2048 [ 448.228729][ T27] audit: type=1326 audit(1756509676.419:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.2.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 448.260458][T17488] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 448.269485][T17488] UDF-fs: Scanning with blocksize 512 failed [ 448.275858][ T27] audit: type=1326 audit(1756509676.419:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.2.5019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07998ebe9 code=0x7ffc0000 [ 448.326601][T17488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.038406][ T5102] Bluetooth: hci0: command 0x080f tx timeout [ 449.320657][T17557] loop2: detected capacity change from 0 to 64 [ 449.666321][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5048'. [ 449.686922][T17577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5048'. [ 450.165773][T17605] loop1: detected capacity change from 0 to 64 [ 450.225447][T17605] syz.1.5056: attempt to access beyond end of device [ 450.225447][T17605] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 450.259384][T17605] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 451.217872][T17652] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 451.231966][T17648] loop4: detected capacity change from 0 to 1024 [ 451.464276][ T1088] hfsplus: b-tree write err: -5, ino 4 [ 452.505250][T17715] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 453.008207][T17745] netlink: 'syz.1.5101': attribute type 2 has an invalid length. [ 453.419891][T17768] netlink: 'syz.0.5109': attribute type 6 has an invalid length. [ 454.603045][T17841] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5133'. [ 455.005424][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5142'. [ 455.005459][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5142'. [ 455.603951][T17893] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 455.876165][T17911] Zero length message leads to an empty skb [ 456.289305][T17930] netlink: 'syz.4.5166': attribute type 8 has an invalid length. [ 456.581754][T17943] loop4: detected capacity change from 0 to 512 [ 456.687412][T17943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.713554][T17943] ext4 filesystem being mounted at /1151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.892686][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.739860][T18007] binder: 18006:18007 ioctl 400c620e ffffffffffffffff returned -14 [ 458.542308][T18051] netlink: 'syz.0.5208': attribute type 2 has an invalid length. [ 459.240087][T18087] delete_channel: no stack [ 459.812042][T18100] loop2: detected capacity change from 0 to 4096 [ 459.882200][T18100] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 459.912066][T18100] ntfs3: loop2: Failed to load $Extend (-22). [ 459.932287][T18100] ntfs3: loop2: Failed to initialize $Extend. [ 460.634993][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5234'. [ 460.771184][T18142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5238'. [ 461.305739][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5250'. [ 461.410056][T18180] x_tables: unsorted entry at hook 3 [ 461.741064][T18201] tmpfs: Bad value for 'mpol' [ 461.899194][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5261'. [ 462.207762][T18224] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5267'. [ 462.786302][T18240] loop2: detected capacity change from 0 to 8192 [ 462.825072][T18240] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 462.922909][T18240] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 462.957304][T18240] ntfs3: loop2: Failed to load $Extend (-2). [ 462.966474][T18240] ntfs3: loop2: Failed to initialize $Extend. [ 463.345799][T18280] netlink: 'syz.0.5283': attribute type 1 has an invalid length. [ 463.504437][T18287] loop1: detected capacity change from 0 to 1024 [ 464.076150][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5296'. [ 464.090933][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 464.659749][ T27] audit: type=1326 audit(1756509692.903:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.1.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 464.721416][ T27] audit: type=1326 audit(1756509692.903:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.1.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 464.781147][ T27] audit: type=1326 audit(1756509692.941:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.1.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 464.876175][ T27] audit: type=1326 audit(1756509692.941:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.1.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8c38ebe9 code=0x7ffc0000 [ 465.035406][T18364] netlink: 'syz.2.5313': attribute type 27 has an invalid length. [ 465.064970][T18364] netlink: 'syz.2.5313': attribute type 3 has an invalid length. [ 465.075643][T18364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5313'. [ 465.558182][T18392] loop1: detected capacity change from 0 to 4096 [ 465.610561][T18403] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 465.666603][T18392] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 465.694058][T18405] SET target dimension over the limit! [ 465.762919][T18392] Remounting filesystem read-only [ 465.815819][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'. [ 466.617629][T18456] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 467.111956][T18479] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 467.304639][T18492] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5353'. [ 467.432126][T18497] loop2: detected capacity change from 0 to 1024 [ 467.440907][T18497] EXT4-fs: Ignoring removed nobh option [ 467.464557][T18497] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 467.530715][T18497] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.5354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 467.584416][T18497] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5354: couldn't read orphan inode 11 (err -117) [ 467.639892][T18497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.877171][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.109967][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 468.861624][ T27] audit: type=1326 audit(1756509696.888:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 468.939875][ T27] audit: type=1326 audit(1756509696.888:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 468.996811][ T27] audit: type=1326 audit(1756509696.944:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 469.069734][ T27] audit: type=1326 audit(1756509696.944:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.4.5381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b538ebe9 code=0x7ffc0000 [ 469.221129][ T5851] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 469.444242][ T5851] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 469.454129][ T5851] usb 2-1: config 0 has no interface number 1 [ 469.475204][ T5851] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 469.492776][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 469.521847][ T5851] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 469.540478][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.564967][ T5851] usb 2-1: SerialNumber: syz [ 469.589889][ T5851] usb 2-1: config 0 descriptor?? [ 469.600519][ T5851] usb 2-1: Found UVC 0.00 device (0002:0000) [ 469.619539][ T5851] usb 2-1: No valid video chain found. [ 469.896122][ T5851] usb 2-1: USB disconnect, device number 16 [ 469.926662][T18645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5401'. [ 470.370039][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5410'. [ 471.305549][T18701] program syz.1.5420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.488926][ T9] kworker/dying (9) used greatest stack depth: 19344 bytes left [ 471.552919][T18688] loop2: detected capacity change from 0 to 32768 [ 471.585573][T18688] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.5416 (18688) [ 471.701538][T18688] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 471.723285][T18718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5425'. [ 471.751613][T18688] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 471.784346][T18688] BTRFS info (device loop2): using free space tree [ 471.978301][T18688] BTRFS info (device loop2): enabling ssd optimizations [ 472.019342][T18688] BTRFS info (device loop2): auto enabling async discard [ 472.187546][ T5787] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 472.307292][ T5851] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 472.433835][T18761] loop4: detected capacity change from 0 to 512 [ 472.535806][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 472.557251][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 472.567088][ T5851] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 472.569306][T18761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 472.578892][ T5851] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 472.612192][ T5851] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 472.634551][ T5851] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 472.657006][ T5851] usb 2-1: config 1 interface 0 has no altsetting 0 [ 472.663723][ T5851] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 472.673355][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.681884][T18761] ext4 filesystem being mounted at /1228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.743217][ T5851] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 472.838586][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 472.977106][ T5851] scsi host1: usb-storage 2-1:1.0 [ 473.163538][T18799] loop4: detected capacity change from 0 to 512 [ 473.212608][ T5794] usb 2-1: USB disconnect, device number 17 [ 473.269970][T18799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.354528][T18799] ext4 filesystem being mounted at /1230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.598743][T18831] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5448'. [ 473.676489][T18833] No such timeout policy "syz0" [ 473.683232][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.799018][T18840] fuse: Bad value for 'rootmode' [ 473.906300][ T5851] IPVS: starting estimator thread 0... [ 474.032022][T18844] IPVS: using max 16 ests per chain, 38400 per kthread [ 474.346479][T18872] loop4: detected capacity change from 0 to 512 [ 474.433602][T18872] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.5463: casefold flag without casefold feature [ 474.524136][T18872] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5463: couldn't read orphan inode 15 (err -117) [ 474.573435][T18872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.780261][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.315822][T18924] loop1: detected capacity change from 0 to 512 [ 475.337181][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5482'. [ 475.371053][T18924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 475.427169][T18924] EXT4-fs (loop1): 1 truncate cleaned up [ 475.491553][T18924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.789893][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.111584][T18968] binder: 18967:18968 ioctl 40046205 0 returned -22 [ 476.481854][T18992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5500'. [ 476.542938][T18995] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 476.707799][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5504'. [ 477.015152][T19022] netlink: 'syz.2.5508': attribute type 1 has an invalid length. [ 477.031947][T19022] netlink: 'syz.2.5508': attribute type 3 has an invalid length. [ 477.042945][T19022] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5508'. [ 477.075422][T19025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5511'. [ 477.095819][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 477.133318][T19028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5512'. [ 477.269462][T19036] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5514'. [ 477.309772][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5514'. [ 478.452878][ T5794] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 478.570443][ T5838] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 478.645358][ T5794] usb 3-1: Using ep0 maxpacket: 32 [ 478.650468][T19074] loop4: detected capacity change from 0 to 32768 [ 478.665780][ T5794] usb 3-1: config 0 has an invalid interface number: 66 but max is 1 [ 478.682968][ T5794] usb 3-1: config 0 has no interface number 1 [ 478.689135][T19074] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 478.730833][ T5794] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 478.763571][ T5794] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 478.784186][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 478.800616][ T5838] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 478.811427][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.822054][ T5794] usb 3-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 478.838597][ T5838] usb 2-1: config 0 descriptor?? [ 478.853261][ T5794] usb 3-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 478.878035][ T5838] as10x_usb: device has been detected [ 478.890495][ T5838] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 478.908789][ T5794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.921621][ T5794] usb 3-1: config 0 interface 66 has no altsetting 0 [ 478.948896][ T8700] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 478.970374][ T5794] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 478.998902][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 479.024691][ T5794] usb 3-1: SerialNumber: syz [ 479.035446][ T5838] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 479.084480][ T5794] usb 3-1: config 0 descriptor?? [ 479.110175][ T5794] usb-storage 3-1:0.0: USB Mass Storage device detected [ 479.159644][ T5794] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 479.184770][ T5838] as10x_usb: error during firmware upload part1 [ 479.206778][ T5838] Registered device nBox DVB-T Dongle [ 479.210852][ T5838] usb 2-1: USB disconnect, device number 18 [ 479.313940][ T5794] usb-storage 3-1:0.66: USB Mass Storage device detected [ 479.336748][ T5838] Unregistered device nBox DVB-T Dongle [ 479.342944][ T5838] as10x_usb: device has been disconnected [ 479.369167][ T5794] usb-storage 3-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 479.459430][ T5794] usb 3-1: USB disconnect, device number 27 [ 479.690433][T19166] netlink: 'syz.0.5541': attribute type 10 has an invalid length. [ 479.704425][T19166] __nla_validate_parse: 1 callbacks suppressed [ 479.704443][T19166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5541'. [ 479.726300][T19166] veth0_vlan: left promiscuous mode [ 479.732005][T19166] veth0_vlan: entered promiscuous mode [ 479.741368][T19166] veth0_vlan: entered allmulticast mode [ 479.755144][T19166] bridge0: port 3(veth0_vlan) entered blocking state [ 479.765263][T19166] bridge0: port 3(veth0_vlan) entered disabled state [ 479.792705][T19166] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 479.833155][T19125] loop4: detected capacity change from 0 to 32768 [ 479.976737][T19125] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 480.107155][T19186] loop2: detected capacity change from 0 to 64 [ 480.113932][ T5851] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 480.132686][ T6920] ocfs2: Unmounting device (7,4) on (node local) [ 480.337409][ T5851] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 480.360523][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.410232][ T5851] usb 2-1: config 0 descriptor?? [ 480.417781][ T5851] cp210x 2-1:0.0: cp210x converter detected [ 480.552553][T19209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5551'. [ 480.675657][ T5851] usb 2-1: cp210x converter now attached to ttyUSB0 [ 480.761381][ T5794] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 480.843370][T19223] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.5555'. [ 480.920524][ T5851] usb 2-1: USB disconnect, device number 19 [ 480.952715][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 480.970494][ T5851] cp210x 2-1:0.0: device disconnected [ 480.985577][ T5794] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 481.008605][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.018790][ T5794] usb 5-1: Product: syz [ 481.023298][ T5794] usb 5-1: Manufacturer: syz [ 481.027941][ T5794] usb 5-1: SerialNumber: syz [ 481.289088][ T5794] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 481.323939][ T5794] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 481.349779][ T5794] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 481.369831][ T5794] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 481.387893][ T5794] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 481.413507][ T5794] lan78xx: probe of 5-1:1.0 failed with error -71 [ 481.432590][ T5794] usb 5-1: USB disconnect, device number 14 [ 481.592159][T19270] netlink: 'syz.2.5565': attribute type 10 has an invalid length. [ 481.611927][T19270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5565'. [ 481.645961][T19270] veth0_vlan: entered allmulticast mode [ 481.657472][T19270] bridge0: port 5(veth0_vlan) entered blocking state [ 481.676081][T19270] bridge0: port 5(veth0_vlan) entered disabled state [ 481.709424][T19270] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 481.732518][T19280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5569'. [ 481.895084][T19285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5572'. [ 481.919508][T19285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5572'. [ 481.958526][T19285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5572'. [ 482.400829][T19312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5582'. [ 482.444791][T19312] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 483.112400][T19296] loop2: detected capacity change from 0 to 32768 [ 483.195511][T19296] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 483.195511][T19296] [ 483.220851][T19345] netlink: 'syz.1.5593': attribute type 10 has an invalid length. [ 483.237066][T19296] ERROR: (device loop2): remounting filesystem as read-only [ 483.274652][T19296] ERROR: (device loop2): jfs_unlink: [ 483.274652][T19296] [ 483.279025][T19348] overlayfs: missing 'lowerdir' [ 483.290667][T19345] team0: left promiscuous mode [ 483.298304][T19345] team_slave_0: left promiscuous mode [ 483.306545][T19345] team_slave_1: left promiscuous mode [ 483.325006][T19345] team0: left allmulticast mode [ 483.346020][T19345] team_slave_0: left allmulticast mode [ 483.369967][T19345] team_slave_1: left allmulticast mode [ 483.396633][ T5787] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 483.396633][ T5787] [ 483.411323][T19345] team0: Cannot enslave team device to itself [ 483.580018][T19355] openvswitch: netlink: Message has 8 unknown bytes. [ 483.881474][T19373] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 483.927910][T19379] netlink: 'syz.4.5603': attribute type 9 has an invalid length. [ 484.369438][T19405] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 484.764270][T19428] loop1: detected capacity change from 0 to 16 [ 484.790072][T19428] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 484.814943][T19428] cramfs: empty filesystem [ 486.054968][T19492] SET target dimension over the limit! [ 486.695330][ T788] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 486.897181][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 486.922157][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 486.942244][ T788] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.974129][ T788] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 486.993380][ T788] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 487.005857][ T788] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 487.017072][ T788] usb 3-1: config 1 interface 0 has no altsetting 0 [ 487.023907][ T788] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 487.033860][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.074614][ T788] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 487.316129][ T788] scsi host1: usb-storage 3-1:1.0 [ 487.410429][T19570] netlink: 'syz.0.5664': attribute type 9 has an invalid length. [ 487.575475][ T5872] usb 3-1: USB disconnect, device number 28 [ 488.183777][T19619] sp0: Synchronizing with TNC [ 488.194629][T19624] loop4: detected capacity change from 0 to 128 [ 488.237802][T19617] [U] è [ 488.268172][ T8700] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 488.356924][T19632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5678'. [ 488.379045][T19632] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5678'. [ 488.704156][T19654] netlink: 'syz.1.5685': attribute type 2 has an invalid length. [ 488.877056][T19665] loop1: detected capacity change from 0 to 256 [ 488.891047][T19665] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.891067][T19665] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 488.931191][T19665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x881c1f2f, utbl_chksum : 0xe619d30d) [ 488.952613][T19665] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 488.952702][T19665] exFAT-fs (loop1): Filesystem has been set read-only [ 488.995728][T19672] xt_hashlimit: max too large, truncated to 1048576 [ 489.075299][T19672] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 489.919756][T19721] xt_TCPMSS: Only works on TCP SYN packets [ 490.639679][T19756] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5719'. [ 490.639704][T19756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5719'. [ 490.639755][T19756] vlan0: entered promiscuous mode [ 490.978320][T19727] loop2: detected capacity change from 0 to 32768 [ 491.051225][T19766] bond3: entered promiscuous mode [ 491.051563][T19766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.106870][T19727] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 491.332432][T19727] XFS (loop2): Ending clean mount [ 491.440305][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 491.661984][T19827] loop2: detected capacity change from 0 to 512 [ 491.709444][T19827] EXT4-fs: Ignoring removed oldalloc option [ 491.715517][T19827] EXT4-fs: inline encryption not supported [ 491.764335][T19830] cgroup: Bad value for 'name' [ 491.772029][T19827] EXT4-fs: Ignoring removed mblk_io_submit option [ 491.794177][T19827] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 491.942330][T19827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5730: bg 0: block 64: padding at end of block bitmap is not set [ 491.992145][T19827] Quota error (device loop2): write_blk: dquota write failed [ 492.008876][T19827] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 492.041465][T19827] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.5730: Failed to acquire dquot type 0 [ 492.078670][T19827] EXT4-fs (loop2): 1 truncate cleaned up [ 492.101418][T19827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.187275][T19827] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 492.368301][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.666245][T19877] loop4: detected capacity change from 0 to 8 [ 492.724491][T19877] SQUASHFS error: Failed to read block 0x636: -5 [ 492.744846][T19877] SQUASHFS error: Unable to read metadata cache entry [634] [ 492.783666][T19877] SQUASHFS error: Unable to read metadata cache entry [634] [ 492.809207][T19877] SQUASHFS error: Unable to read directory block [629:0] [ 493.192199][T19869] loop1: detected capacity change from 0 to 32768 [ 493.246669][T19869] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5745 (19869) [ 493.295638][T19869] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.297288][T19892] loop2: detected capacity change from 0 to 4096 [ 493.308292][T19869] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 493.334868][T19892] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 493.352127][T19869] BTRFS info (device loop1): using free space tree [ 493.493178][T19869] BTRFS info (device loop1): enabling ssd optimizations [ 493.543286][T19869] BTRFS info (device loop1): auto enabling async discard [ 493.776387][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.282463][ T27] audit: type=1326 audit(1756509720.674:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.0.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 494.380583][ T27] audit: type=1326 audit(1756509720.674:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.0.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 494.455573][ T27] audit: type=1326 audit(1756509720.674:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.0.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 494.540845][ T27] audit: type=1326 audit(1756509720.674:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.0.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 494.623937][ T27] audit: type=1326 audit(1756509720.674:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.0.5760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 495.715853][T19998] gre0: left promiscuous mode [ 495.715881][T19998] gre0: left allmulticast mode [ 496.087512][T20008] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5782'. [ 496.137687][ T27] audit: type=1326 audit(1756509722.414:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20010 comm="syz.0.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 496.139589][ T27] audit: type=1326 audit(1756509722.414:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20010 comm="syz.0.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae618ebe9 code=0x7ffc0000 [ 496.186557][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.397872][T20021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5786'. [ 496.635849][T20032] loop4: detected capacity change from 0 to 64 [ 497.935032][T20087] trusted_key: encrypted_key: master key parameter '' is invalid [ 498.710886][ T5102] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 499.426162][T20122] loop1: detected capacity change from 0 to 32768 [ 499.600967][T20122] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 499.639449][T20122] (syz.1.5821,20122,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 499.711675][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 500.412936][T20173] ================================================================== [ 500.412952][T20173] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 500.412989][T20173] Read of size 4 at addr ffff888025e9e0a0 by task syz.1.5840/20173 [ 500.413016][T20173] [ 500.413022][T20173] CPU: 0 PID: 20173 Comm: syz.1.5840 Not tainted syzkaller #0 [ 500.413043][T20173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.413055][T20173] Call Trace: [ 500.413064][T20173] [ 500.413072][T20173] dump_stack_lvl+0x16c/0x230 [ 500.413098][T20173] ? __lock_acquire+0x7c80/0x7c80 [ 500.413121][T20173] ? show_regs_print_info+0x20/0x20 [ 500.413143][T20173] ? load_image+0x3b0/0x3b0 [ 500.413165][T20173] ? __virt_addr_valid+0x469/0x540 [ 500.413191][T20173] print_report+0xac/0x220 [ 500.413212][T20173] ? xfrm_alloc_spi+0x598/0x11f0 [ 500.413234][T20173] kasan_report+0x117/0x150 [ 500.413256][T20173] ? xfrm_alloc_spi+0x598/0x11f0 [ 500.413283][T20173] xfrm_alloc_spi+0x598/0x11f0 [ 500.413314][T20173] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 500.413337][T20173] ? verify_spi_info+0x120/0x120 [ 500.413361][T20173] ? xfrm_find_acq+0x79/0x90 [ 500.413386][T20173] xfrm_alloc_userspi+0x5d1/0xa90 [ 500.413404][T20173] ? end_current_label_crit_section+0x170/0x170 [ 500.413432][T20173] ? apparmor_capable+0x137/0x1a0 [ 500.413450][T20173] ? xfrm_dump_policy_done+0x90/0x90 [ 500.413469][T20173] ? __nla_parse+0x40/0x50 [ 500.413495][T20173] xfrm_user_rcv_msg+0x596/0x870 [ 500.413514][T20173] ? lockdep_hardirqs_on+0x98/0x150 [ 500.413541][T20173] ? xfrm_netlink_rcv+0x90/0x90 [ 500.413569][T20173] ? __local_bh_enable_ip+0x12e/0x1c0 [ 500.413601][T20173] ? __dev_queue_xmit+0x245/0x35a0 [ 500.413626][T20173] ? __mutex_trylock_common+0x153/0x250 [ 500.413660][T20173] netlink_rcv_skb+0x216/0x480 [ 500.413684][T20173] ? xfrm_netlink_rcv+0x90/0x90 [ 500.413714][T20173] ? netlink_ack+0x1110/0x1110 [ 500.413742][T20173] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.413766][T20173] ? __lock_acquire+0x7c80/0x7c80 [ 500.413791][T20173] xfrm_netlink_rcv+0x79/0x90 [ 500.413821][T20173] netlink_unicast+0x751/0x8d0 [ 500.413848][T20173] netlink_sendmsg+0x8c1/0xbe0 [ 500.413876][T20173] ? netlink_getsockopt+0x580/0x580 [ 500.413901][T20173] ? aa_sock_msg_perm+0x94/0x150 [ 500.413923][T20173] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.413946][T20173] ? security_socket_sendmsg+0x80/0xa0 [ 500.413966][T20173] ? netlink_getsockopt+0x580/0x580 [ 500.413989][T20173] ____sys_sendmsg+0x5bf/0x950 [ 500.414029][T20173] ? __asan_memset+0x22/0x40 [ 500.414058][T20173] ? __sys_sendmsg_sock+0x30/0x30 [ 500.414083][T20173] ? __import_iovec+0x5f2/0x860 [ 500.414115][T20173] ? import_iovec+0x73/0xa0 [ 500.414143][T20173] ___sys_sendmsg+0x220/0x290 [ 500.414170][T20173] ? __sys_sendmsg+0x270/0x270 [ 500.414221][T20173] __se_sys_sendmsg+0x1a5/0x270 [ 500.414248][T20173] ? __x64_sys_sendmsg+0x80/0x80 [ 500.414280][T20173] ? lockdep_hardirqs_on+0x98/0x150 [ 500.414308][T20173] do_syscall_64+0x55/0xb0 [ 500.414329][T20173] ? clear_bhb_loop+0x40/0x90 [ 500.414348][T20173] ? clear_bhb_loop+0x40/0x90 [ 500.414367][T20173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.414397][T20173] RIP: 0033:0x7fde8c38ebe9 [ 500.414413][T20173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.414431][T20173] RSP: 002b:00007fde8d2c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.414455][T20173] RAX: ffffffffffffffda RBX: 00007fde8c5c5fa0 RCX: 00007fde8c38ebe9 [ 500.414470][T20173] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 500.414484][T20173] RBP: 00007fde8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 500.414497][T20173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.414510][T20173] R13: 00007fde8c5c6038 R14: 00007fde8c5c5fa0 R15: 00007ffc04bc4638 [ 500.414531][T20173] [ 500.414538][T20173] [ 500.414542][T20173] Allocated by task 19462: [ 500.414551][T20173] kasan_set_track+0x4e/0x70 [ 500.414569][T20173] __kasan_slab_alloc+0x6c/0x80 [ 500.414587][T20173] slab_post_alloc_hook+0x6e/0x4d0 [ 500.414612][T20173] kmem_cache_alloc+0x11e/0x2e0 [ 500.414634][T20173] xfrm_state_alloc+0x22/0x2a0 [ 500.414652][T20173] xfrm_add_sa+0xfe5/0x30a0 [ 500.414666][T20173] xfrm_user_rcv_msg+0x596/0x870 [ 500.414680][T20173] netlink_rcv_skb+0x216/0x480 [ 500.414698][T20173] xfrm_netlink_rcv+0x79/0x90 [ 500.414722][T20173] netlink_unicast+0x751/0x8d0 [ 500.414738][T20173] netlink_sendmsg+0x8c1/0xbe0 [ 500.414758][T20173] ____sys_sendmsg+0x5bf/0x950 [ 500.414807][T20173] ___sys_sendmsg+0x220/0x290 [ 500.414831][T20173] __se_sys_sendmsg+0x1a5/0x270 [ 500.414855][T20173] do_syscall_64+0x55/0xb0 [ 500.414876][T20173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.414904][T20173] [ 500.414908][T20173] The buggy address belongs to the object at ffff888025e9e000 [ 500.414908][T20173] which belongs to the cache xfrm_state of size 848 [ 500.414926][T20173] The buggy address is located 160 bytes inside of [ 500.414926][T20173] freed 848-byte region [ffff888025e9e000, ffff888025e9e350) [ 500.414947][T20173] [ 500.414951][T20173] The buggy address belongs to the physical page: [ 500.414959][T20173] page:ffffea000097a700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25e9c [ 500.414981][T20173] head:ffffea000097a700 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 500.415006][T20173] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 500.415025][T20173] page_type: 0xffffffff() [ 500.415043][T20173] raw: 00fff00000000840 ffff888140ad28c0 dead000000000122 0000000000000000 [ 500.415060][T20173] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 500.415070][T20173] page dumped because: kasan: bad access detected [ 500.415078][T20173] page_owner tracks the page as allocated [ 500.415085][T20173] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6094, tgid 6092 (syz.3.97), ts 85370536780, free_ts 85347457628 [ 500.415119][T20173] post_alloc_hook+0x1cd/0x210 [ 500.415146][T20173] get_page_from_freelist+0x195c/0x19f0 [ 500.415173][T20173] __alloc_pages+0x1e3/0x460 [ 500.415199][T20173] alloc_slab_page+0x5d/0x170 [ 500.415225][T20173] new_slab+0x87/0x2e0 [ 500.415249][T20173] ___slab_alloc+0xc6d/0x12f0 [ 500.415273][T20173] kmem_cache_alloc+0x1b7/0x2e0 [ 500.415297][T20173] xfrm_state_alloc+0x22/0x2a0 [ 500.415315][T20173] pfkey_add+0x6e1/0x2da0 [ 500.415338][T20173] pfkey_sendmsg+0xbed/0x1050 [ 500.415361][T20173] ____sys_sendmsg+0x5bf/0x950 [ 500.415384][T20173] ___sys_sendmsg+0x220/0x290 [ 500.415406][T20173] __se_sys_sendmsg+0x1a5/0x270 [ 500.415430][T20173] do_syscall_64+0x55/0xb0 [ 500.415449][T20173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.415475][T20173] page last free stack trace: [ 500.415482][T20173] free_unref_page_prepare+0x7ce/0x8e0 [ 500.415506][T20173] free_unref_page+0x32/0x2e0 [ 500.415528][T20173] __slab_free+0x35e/0x410 [ 500.415553][T20173] qlist_free_all+0x75/0xe0 [ 500.415575][T20173] kasan_quarantine_reduce+0x143/0x160 [ 500.415598][T20173] __kasan_slab_alloc+0x22/0x80 [ 500.415617][T20173] slab_post_alloc_hook+0x6e/0x4d0 [ 500.415640][T20173] kmem_cache_alloc+0x11e/0x2e0 [ 500.415663][T20173] getname_flags+0xbb/0x500 [ 500.415686][T20173] user_path_at_empty+0x2c/0x60 [ 500.415710][T20173] do_readlinkat+0xd8/0x480 [ 500.415728][T20173] __x64_sys_readlink+0x7f/0x90 [ 500.415745][T20173] do_syscall_64+0x55/0xb0 [ 500.415763][T20173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.415789][T20173] [ 500.415794][T20173] Memory state around the buggy address: [ 500.415803][T20173] ffff888025e9df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 500.415815][T20173] ffff888025e9e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 500.415826][T20173] >ffff888025e9e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 500.415835][T20173] ^ [ 500.415845][T20173] ffff888025e9e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 500.415855][T20173] ffff888025e9e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 500.415864][T20173] ================================================================== [ 500.415898][T20173] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 500.415908][T20173] CPU: 0 PID: 20173 Comm: syz.1.5840 Not tainted syzkaller #0 [ 500.415927][T20173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.415938][T20173] Call Trace: [ 500.415946][T20173] [ 500.415953][T20173] dump_stack_lvl+0x16c/0x230 [ 500.415977][T20173] ? show_regs_print_info+0x20/0x20 [ 500.416008][T20173] ? load_image+0x3b0/0x3b0 [ 500.416031][T20173] panic+0x2c0/0x710 [ 500.416062][T20173] ? bpf_jit_dump+0xd0/0xd0 [ 500.416089][T20173] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 500.416120][T20173] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 500.416149][T20173] ? _raw_spin_unlock+0x40/0x40 [ 500.416177][T20173] ? print_memory_metadata+0x314/0x400 [ 500.416200][T20173] ? xfrm_alloc_spi+0x598/0x11f0 [ 500.416223][T20173] check_panic_on_warn+0x84/0xa0 [ 500.416246][T20173] ? xfrm_alloc_spi+0x598/0x11f0 [ 500.416267][T20173] end_report+0x6f/0x140 [ 500.416287][T20173] kasan_report+0x128/0x150 [ 500.416308][T20173] ? xfrm_alloc_spi+0x598/0x11f0 [ 500.416334][T20173] xfrm_alloc_spi+0x598/0x11f0 [ 500.416364][T20173] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 500.416387][T20173] ? verify_spi_info+0x120/0x120 [ 500.416409][T20173] ? xfrm_find_acq+0x79/0x90 [ 500.416434][T20173] xfrm_alloc_userspi+0x5d1/0xa90 [ 500.416452][T20173] ? end_current_label_crit_section+0x170/0x170 [ 500.416478][T20173] ? apparmor_capable+0x137/0x1a0 [ 500.416495][T20173] ? xfrm_dump_policy_done+0x90/0x90 [ 500.416515][T20173] ? __nla_parse+0x40/0x50 [ 500.416542][T20173] xfrm_user_rcv_msg+0x596/0x870 [ 500.416561][T20173] ? lockdep_hardirqs_on+0x98/0x150 [ 500.416587][T20173] ? xfrm_netlink_rcv+0x90/0x90 [ 500.416615][T20173] ? __local_bh_enable_ip+0x12e/0x1c0 [ 500.416646][T20173] ? __dev_queue_xmit+0x245/0x35a0 [ 500.416669][T20173] ? __mutex_trylock_common+0x153/0x250 [ 500.416702][T20173] netlink_rcv_skb+0x216/0x480 [ 500.416726][T20173] ? xfrm_netlink_rcv+0x90/0x90 [ 500.416755][T20173] ? netlink_ack+0x1110/0x1110 [ 500.416782][T20173] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.416805][T20173] ? __lock_acquire+0x7c80/0x7c80 [ 500.416830][T20173] xfrm_netlink_rcv+0x79/0x90 [ 500.416858][T20173] netlink_unicast+0x751/0x8d0 [ 500.416885][T20173] netlink_sendmsg+0x8c1/0xbe0 [ 500.416911][T20173] ? netlink_getsockopt+0x580/0x580 [ 500.416932][T20173] ? aa_sock_msg_perm+0x94/0x150 [ 500.416953][T20173] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.416975][T20173] ? security_socket_sendmsg+0x80/0xa0 [ 500.416993][T20173] ? netlink_getsockopt+0x580/0x580 [ 500.417023][T20173] ____sys_sendmsg+0x5bf/0x950 [ 500.417050][T20173] ? __asan_memset+0x22/0x40 [ 500.417073][T20173] ? __sys_sendmsg_sock+0x30/0x30 [ 500.417097][T20173] ? __import_iovec+0x5f2/0x860 [ 500.417128][T20173] ? import_iovec+0x73/0xa0 [ 500.417155][T20173] ___sys_sendmsg+0x220/0x290 [ 500.417181][T20173] ? __sys_sendmsg+0x270/0x270 [ 500.417228][T20173] __se_sys_sendmsg+0x1a5/0x270 [ 500.417253][T20173] ? __x64_sys_sendmsg+0x80/0x80 [ 500.417286][T20173] ? lockdep_hardirqs_on+0x98/0x150 [ 500.417313][T20173] do_syscall_64+0x55/0xb0 [ 500.417334][T20173] ? clear_bhb_loop+0x40/0x90 [ 500.417352][T20173] ? clear_bhb_loop+0x40/0x90 [ 500.417371][T20173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.417399][T20173] RIP: 0033:0x7fde8c38ebe9 [ 500.417414][T20173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.417431][T20173] RSP: 002b:00007fde8d2c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.417451][T20173] RAX: ffffffffffffffda RBX: 00007fde8c5c5fa0 RCX: 00007fde8c38ebe9 [ 500.417463][T20173] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 500.417475][T20173] RBP: 00007fde8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 500.417488][T20173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.417500][T20173] R13: 00007fde8c5c6038 R14: 00007fde8c5c5fa0 R15: 00007ffc04bc4638 [ 500.417522][T20173] [ 500.417827][T20173] Kernel Offset: disabled