last executing test programs: 2.509816213s ago: executing program 1 (id=1895): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x34f, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 1.961135909s ago: executing program 1 (id=1903): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.329108174s ago: executing program 1 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78269}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x482e}]}, 0x44}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 1.153009982s ago: executing program 1 (id=1918): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 1.059012972s ago: executing program 0 (id=1919): setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00007d8000/0x1000)=nil) 1.056041922s ago: executing program 1 (id=1921): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$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") lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0) 905.988267ms ago: executing program 0 (id=1923): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1280001000002020000000000080005007a010401a80016002000034004020000035c0461c900004f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c811dc0c1cd706ff2f41398d8e7369039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20014000) 805.091038ms ago: executing program 3 (id=1924): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x1, [{0x197c635ddab4da42, 0x2}, {0x0, 0x3, "da"}, {0x2, 0x11, "cafcc87693024c18551fa29c3f5bb5"}, {0x2, 0x7, "3f87598f58"}, {0x1, 0x2}, {0x1, 0x4, "be45"}]}]}}}], 0x40}}], 0x2, 0x4000800) 781.65682ms ago: executing program 2 (id=1925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="59eced8ec6dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 725.183636ms ago: executing program 0 (id=1926): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 665.436692ms ago: executing program 2 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) 646.623884ms ago: executing program 3 (id=1928): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) 538.392775ms ago: executing program 0 (id=1929): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@v={0x93, 0xa, 0x90, 0x1d, @MIDI_NOTEON=@special, 0x6, 0x9}) 502.947179ms ago: executing program 3 (id=1930): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 502.209449ms ago: executing program 2 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080006000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 342.130885ms ago: executing program 0 (id=1932): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 341.562255ms ago: executing program 3 (id=1933): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 310.929678ms ago: executing program 2 (id=1934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) 215.773178ms ago: executing program 0 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5336ae46a3975501}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 167.636483ms ago: executing program 3 (id=1936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xff, 0x4, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 167.440753ms ago: executing program 2 (id=1937): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0xa2a01, 0x104) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x06-\x06\xb5f\x00\x00\x00\x00\xb4\xbb\xe4\x92\x90\xdf\xd3\xb1\xe2\xde\xa5sW\xd9\xc0\x053#\x06X\x1ck\xd1D\xeeW\xa7\xab\xad\xd3<\x98y\"\xd7\xe4\xcexYw\xae\x1f&\xf0\x85Sno\xa2o\xe0BPA#\xe6\x8a\x06OV@\xa7\x8157\r\xe2\x8b[\xec\x18\x1c\x1c\x80\xf03\xb2D?`xr\xddV\x86`\x85\xc4&Q\xc5\x11\a\x00\x00\x00\xc8\xa9>L\xdd\xcb\x9d~\x91\x045\xf6'}, {0x20, '\x06\x00\xda\xb5f\x00\x00\x00\x00\xb4\xbb\x00\x00\x00\x80sW\xd9\xc0\x053#\x06X\x1ck\xd1D\xeeW\xa7\xab\xad\xd3<\x98y\"\xd7\xe4\xcexYw\xae\x1f&\xf0\x85Sno\xa2o\xe0BPA#\xe6\x8a\x06OV@\xa7\x8157\r\b\xf8[\xec\x18\x1c\x1c<[\xc6\x85D?`xr\xddV\x86`\x85\xc4&Q\xc5\x11\a\x00\x00\x00\xc8\xa9\xedy}\xc8\x9d~\x91\x045\xf6W4\xd5\x04 \x10wQ\xb4\x0e\xef\xf3?\xe5;\x1d$\xcb\xcd\x10)\xe26\x86M\xc6\x9b\aD\x1b\v\xdc\xdb\xad\a\xcaN\x12&\x15\x0e\xdfl\xd86N\x0e\xf1\xc9\xf6\x90\xd1j\xff;.\xf2\n\x86Y=\xe4;\nr\ad\"\xc0\x93\xb7\xa3\x1c\xd1\xa7zB\xde\xab\xf8aE\xb4\x10\x03L\xb8\xdcbX\xf8\xc5k'}]}, 0x14f) 62.767474ms ago: executing program 3 (id=1938): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 42.220246ms ago: executing program 1 (id=1939): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ff8}]}) semop(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) kernel console output (not intermixed with test programs): pca_vc032x: I2c Bus Busy Wait 00 [ 79.854164][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.863903][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.869470][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.876325][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.886826][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.892408][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.901049][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.920020][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.925371][ T5850] gspca_vc032x: I2c Bus Busy Wait 00 [ 79.940045][ T5850] gspca_vc032x: Unknown sensor... [ 79.945317][ T5850] vc032x: probe of 4-1:0.0 failed with error -22 [ 79.986145][ T5850] usb 4-1: USB disconnect, device number 2 [ 80.429987][ T6354] loop1: detected capacity change from 0 to 8192 [ 80.450252][ T6361] loop0: detected capacity change from 0 to 256 [ 80.470690][ T6361] exfat: Deprecated parameter 'utf8' [ 80.487701][ T6361] exfat: Deprecated parameter 'namecase' [ 80.530568][ T6354] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.577724][ T6361] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 80.611471][ T6354] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 80.656700][ T6354] FAT-fs (loop1): Filesystem has been set read-only [ 80.699173][ T6366] x_tables: duplicate entry at hook 3 [ 80.794532][ T5788] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1046) [ 80.987501][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 80.998043][ T6373] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 81.374446][ T6387] netlink: 'syz.1.246': attribute type 5 has an invalid length. [ 81.692466][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 81.850169][ T1196] cfg80211: failed to load regulatory.db [ 81.882766][ T6407] loop3: detected capacity change from 0 to 512 [ 81.933358][ T6407] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.256: inode has both inline data and extents flags [ 82.011216][ T6407] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.256: couldn't read orphan inode 15 (err -117) [ 82.069784][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.223274][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.665661][ T6435] syz.2.269: attempt to access beyond end of device [ 82.665661][ T6435] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 83.069914][ T6443] loop1: detected capacity change from 0 to 4096 [ 83.083151][ T6443] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 83.095334][ T6455] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.372620][ T6443] ntfs3: loop1: failed to convert "c46c" to iso8859-3 [ 83.406970][ T6463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.283'. [ 83.694681][ T6475] loop0: detected capacity change from 0 to 512 [ 83.715372][ T6475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.793397][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.835261][ T6483] loop2: detected capacity change from 0 to 1024 [ 83.845546][ T6475] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.097629][ T6475] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 84.117170][ T6475] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 84.154047][ T6475] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.289: Failed to acquire dquot type 1 [ 84.304523][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.677717][ T6510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.185557][ T6528] loop0: detected capacity change from 0 to 4096 [ 85.192804][ T6533] warning: `syz.1.316' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.252321][ T6528] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 85.329191][ T6528] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 85.366906][ T6528] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 85.424558][ T6528] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 85.540836][ T6528] ntfs: volume version 3.1. [ 85.685302][ T6528] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 85.708071][ T6528] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 85.864869][ T6556] syz.2.326 uses obsolete (PF_INET,SOCK_PACKET) [ 85.897832][ T6553] netlink: 84 bytes leftover after parsing attributes in process `syz.3.327'. [ 85.950637][ T6558] batadv0: entered promiscuous mode [ 86.283396][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 87.001668][ T6598] loop2: detected capacity change from 0 to 4096 [ 87.023729][ T6598] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 87.147017][ T1196] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.154442][ T6598] ntfs: (device loop2): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 87.210232][ T6598] ntfs: volume version 3.1. [ 87.343450][ T1196] usb 1-1: Using ep0 maxpacket: 16 [ 87.356749][ T1196] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 87.375440][ T1196] usb 1-1: config 0 has no interface number 0 [ 87.395780][ T1196] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 87.431467][ T1196] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 87.452832][ T6615] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 87.457571][ T1196] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 87.480710][ T1196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.500120][ T1196] usb 1-1: Product: syz [ 87.511942][ T1196] usb 1-1: Manufacturer: syz [ 87.519768][ T1196] usb 1-1: SerialNumber: syz [ 87.538035][ T1196] usb 1-1: config 0 descriptor?? [ 87.565341][ T6596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.585783][ T6596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.844924][ T6596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.876921][ T6596] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.997877][ T6631] netlink: 'syz.3.364': attribute type 13 has an invalid length. [ 88.112627][ T1196] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 88.144630][ T1196] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 88.167798][ T1196] asix: probe of 1-1:0.251 failed with error -5 [ 88.193985][ T1196] usb 1-1: USB disconnect, device number 2 [ 88.434635][ T6647] gre1: entered promiscuous mode [ 88.449363][ T6647] gre1: entered allmulticast mode [ 88.800929][ T6662] loop3: detected capacity change from 0 to 1024 [ 88.872358][ T6659] loop2: detected capacity change from 0 to 4096 [ 88.913033][ T6670] loop0: detected capacity change from 0 to 64 [ 88.920608][ T6662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.975463][ T6659] ntfs3: loop2: ino=3, Correct links count -> 2. [ 89.028541][ T6670] syz.0.382: attempt to access beyond end of device [ 89.028541][ T6670] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 89.046991][ T6670] Buffer I/O error on dev loop0, logical block 512, async page read [ 89.065095][ T6662] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 89.067836][ T6670] syz.0.382: attempt to access beyond end of device [ 89.067836][ T6670] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 89.184626][ T6670] Buffer I/O error on dev loop0, logical block 56576, async page read [ 89.302110][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.783919][ T6691] loop3: detected capacity change from 0 to 2048 [ 89.891755][ T6691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.870183][ T6738] xt_l2tp: v2 doesn't support IP mode [ 91.301685][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 91.301700][ T28] audit: type=1326 audit(1763382394.837:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa598f6c9 code=0x7ffc0000 [ 91.395221][ T28] audit: type=1326 audit(1763382394.837:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa598f6c9 code=0x7ffc0000 [ 91.461437][ T28] audit: type=1326 audit(1763382394.837:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fbfa598f6c9 code=0x7ffc0000 [ 91.477110][ T6759] netlink: 196 bytes leftover after parsing attributes in process `syz.1.427'. [ 91.518538][ T6759] netlink: 196 bytes leftover after parsing attributes in process `syz.1.427'. [ 91.573595][ T6759] netlink: 19 bytes leftover after parsing attributes in process `syz.1.427'. [ 91.589616][ T28] audit: type=1326 audit(1763382394.837:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa598f6c9 code=0x7ffc0000 [ 91.604518][ T6762] loop0: detected capacity change from 0 to 512 [ 91.683879][ T6762] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.693106][ T28] audit: type=1326 audit(1763382394.837:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa598f6c9 code=0x7ffc0000 [ 91.878858][ T6772] Unsupported ieee802154 address type: 0 [ 92.047679][ T6778] x_tables: unsorted underflow at hook 3 [ 92.639240][ T6800] netlink: 209860 bytes leftover after parsing attributes in process `syz.0.447'. [ 93.283359][ T6828] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 93.307274][ T6821] loop2: detected capacity change from 0 to 4096 [ 93.330971][ T6821] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 93.486980][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.677854][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 93.688358][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.721482][ T23] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 93.751079][ T23] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 93.786697][ T23] usb 2-1: config 7 has no interface number 0 [ 93.792908][ T23] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 93.836835][ T23] usb 2-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.890639][ T23] usb 2-1: config 7 interface 187 has no altsetting 0 [ 93.913426][ T23] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 93.931257][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.956958][ T23] usb 2-1: Product: syz [ 93.963200][ T23] usb 2-1: Manufacturer: syz [ 93.971815][ T23] usb 2-1: SerialNumber: syz [ 94.217209][ T23] usb 2-1: Limiting number of CPorts to U8_MAX [ 94.237902][ T23] usb 2-1: Unknown endpoint type found, address 0x07 [ 94.244693][ T23] usb 2-1: Not enough endpoints found in device, aborting! [ 94.259545][ T6856] loop3: detected capacity change from 0 to 4096 [ 94.281752][ T6856] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 94.469205][ T6856] ntfs3: loop3: failed to convert "c46c" to cp861 [ 94.503922][ T23] usb 2-1: USB disconnect, device number 2 [ 94.511326][ T6864] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 94.537013][ T6864] netlink: 236 bytes leftover after parsing attributes in process `syz.2.478'. [ 94.697598][ T6870] netlink: 'syz.3.480': attribute type 46 has an invalid length. [ 94.812015][ T6874] mmap: syz.2.483 (6874): VmData 47951872 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 94.955939][ T6879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.101828][ T6886] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 95.128814][ T6886] [U] J"—e:ÀÆ" [ 95.260520][ T6892] loop0: detected capacity change from 0 to 1024 [ 95.347200][ T1315] hfsplus: b-tree write err: -5, ino 4 [ 95.366921][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 95.405835][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 96.509561][ T6940] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 96.543758][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 96.925536][ T6952] can: request_module (can-proto-3) failed. [ 97.053610][ T6964] capability: warning: `syz.1.524' uses deprecated v2 capabilities in a way that may be insecure [ 97.067105][ T1196] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.266697][ T1196] usb 1-1: Using ep0 maxpacket: 32 [ 97.274321][ T1196] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 97.307304][ T1196] usb 1-1: config 0 has no interface number 0 [ 97.313485][ T1196] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.341913][ T6974] loop3: detected capacity change from 0 to 64 [ 97.363480][ T1196] usb 1-1: config 0 interface 2 has no altsetting 0 [ 97.372419][ T6974] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 97.385232][ T6976] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 97.391029][ T1196] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 97.411148][ T6976] netlink: 'syz.1.530': attribute type 29 has an invalid length. [ 97.427854][ T1196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.448450][ T1196] usb 1-1: Product: syz [ 97.460239][ T1196] usb 1-1: Manufacturer: syz [ 97.475169][ T1196] usb 1-1: SerialNumber: syz [ 97.498583][ T1196] usb 1-1: config 0 descriptor?? [ 97.696751][ T788] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.764440][ T1196] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 97.880259][ T6978] loop2: detected capacity change from 0 to 32768 [ 97.911761][ T788] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 97.924311][ T788] usb 4-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 97.946734][ T6978] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.968370][ T788] usb 4-1: config 0 has no interface number 0 [ 97.985080][ T788] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 98.017649][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.040016][ T788] usb 4-1: Product: syz [ 98.044259][ T788] usb 4-1: Manufacturer: syz [ 98.057925][ T1196] usb 1-1: USB disconnect, device number 3 [ 98.074429][ T788] usb 4-1: SerialNumber: syz [ 98.130385][ T788] usb 4-1: config 0 descriptor?? [ 98.164252][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.198122][ T6978] XFS (loop2): Ending clean mount [ 98.220794][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.319628][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.345093][ T788] qmi_wwan: probe of 4-1:0.207 failed with error -22 [ 98.360172][ T788] usb 4-1: USB disconnect, device number 3 [ 98.418896][ T23] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 98.442533][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.452552][ T23] usb 2-1: Product: syz [ 98.457503][ T23] usb 2-1: Manufacturer: syz [ 98.472255][ T23] usb 2-1: SerialNumber: syz [ 98.499519][ T23] usb 2-1: config 0 descriptor?? [ 98.739286][ T23] hso 2-1:0.0: Failed to find BULK IN ep [ 98.770954][ T23] usb-storage 2-1:0.0: USB Mass Storage device detected [ 99.004642][ T1196] usb 2-1: USB disconnect, device number 3 [ 99.291785][ T7018] loop2: detected capacity change from 0 to 4096 [ 99.408701][ T7018] ntfs: (device loop2): parse_options(): NLS character set is not found. Using previous one default. [ 99.439083][ T7018] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 99.561269][ T7018] ntfs: volume version 3.1. [ 99.733145][ T7034] loop1: detected capacity change from 0 to 512 [ 99.796031][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.796170][ T7034] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.858317][ T7034] EXT4-fs error (device loop1): ext4_xattr_block_get:600: inode #15: comm syz.1.552: corrupted xattr block 33: invalid ea_ino [ 99.874072][ T7034] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 99.962366][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.147536][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 100.789719][ T7078] syz.2.569 (7078): /proc/7075/oom_adj is deprecated, please use /proc/7075/oom_score_adj instead. [ 100.806721][ T788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.920723][ T7082] loop0: detected capacity change from 0 to 512 [ 100.982466][ T7082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.027465][ T788] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 101.028950][ T7082] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.035632][ T788] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.118383][ T7082] EXT4-fs error (device loop0): ext4_xattr_block_get:600: inode #15: comm syz.0.573: corrupted xattr block 33: overlapping e_value [ 101.131297][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.166169][ T788] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.177850][ T788] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.186086][ T788] usb 2-1: Product: syz [ 101.206775][ T788] usb 2-1: Manufacturer: syz [ 101.216913][ T788] usb 2-1: SerialNumber: syz [ 101.225803][ T788] usb 2-1: config 0 descriptor?? [ 101.256327][ T788] hub 2-1:0.0: bad descriptor, ignoring hub [ 101.260454][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.272717][ T788] hub: probe of 2-1:0.0 failed with error -5 [ 101.289887][ T788] usb 2-1: selecting invalid altsetting 0 [ 101.718989][ T7105] loop2: detected capacity change from 0 to 256 [ 101.733525][ T7107] lo speed is unknown, defaulting to 1000 [ 101.740852][ T7107] lo speed is unknown, defaulting to 1000 [ 101.750152][ T7107] lo speed is unknown, defaulting to 1000 [ 101.765564][ T7107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.776861][ T7105] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 101.785514][ T7107] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.829784][ T5868] usb 2-1: USB disconnect, device number 4 [ 101.902889][ T7107] lo speed is unknown, defaulting to 1000 [ 101.956726][ T7107] lo speed is unknown, defaulting to 1000 [ 101.974279][ T7107] lo speed is unknown, defaulting to 1000 [ 102.019324][ T7107] lo speed is unknown, defaulting to 1000 [ 102.446196][ T7125] loop2: detected capacity change from 0 to 764 [ 102.525445][ T7125] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 102.597597][ T7128] loop0: detected capacity change from 0 to 4096 [ 102.605778][ T7128] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 102.719307][ T7128] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 102.739319][ T7128] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 102.771459][ T7128] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 102.784668][ T7128] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 102.909587][ T7128] ntfs: volume version 3.1. [ 102.938580][ T7128] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 102.971387][ T7128] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 102.982928][ T7128] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 103.130775][ T7128] process 'syz.0.594' launched './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 103.482490][ T7154] loop0: detected capacity change from 0 to 4096 [ 103.628436][ T7154] ntfs: volume version 3.1. [ 104.188670][ T7185] loop3: detected capacity change from 0 to 512 [ 104.219830][ T7185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.236826][ T7185] EXT4-fs: Ignoring removed i_version option [ 104.269247][ T7185] EXT4-fs (loop3): 1 orphan inode deleted [ 104.292112][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.497501][ T5868] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.586822][ T5850] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 104.693946][ T7207] netlink: 'syz.2.632': attribute type 10 has an invalid length. [ 104.703059][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 104.712668][ T7207] bridge0: port 3(team0) entered disabled state [ 104.720159][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.729052][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.741820][ T5868] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 104.750372][ T5868] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 104.762271][ T5868] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 104.774149][ T5868] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 104.784584][ T5868] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 104.810467][ T5850] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 104.821410][ T7207] bridge0: port 3(team0) entered blocking state [ 104.824429][ T5850] usb 4-1: config 0 has no interface number 0 [ 104.827901][ T7207] bridge0: port 3(team0) entered forwarding state [ 104.840991][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.844227][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.848216][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.862150][ T5850] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 104.862851][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.881116][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.890679][ T5850] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 104.902811][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.912134][ T5868] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 104.923234][ T5868] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 104.934624][ T5868] usb 2-1: Product: syz [ 104.941890][ T5850] usb 4-1: config 0 descriptor?? [ 104.947484][ T5868] usb 2-1: Manufacturer: syz [ 104.952417][ T5868] usb 2-1: SerialNumber: syz [ 104.958733][ T7185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 104.971353][ T5850] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input8 [ 104.978089][ T7207] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.985915][ T5868] usb 2-1: config 0 descriptor?? [ 105.012896][ T5868] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.069652][ T5868] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.271876][ T788] usb 4-1: USB disconnect, device number 4 [ 105.324248][ T7188] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 105.345263][ T5850] usb 2-1: USB disconnect, device number 5 [ 105.383560][ T5850] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 105.848776][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.046560][ T7242] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 106.064671][ T7238] loop0: detected capacity change from 0 to 4096 [ 106.074366][ T7242] netlink: 17 bytes leftover after parsing attributes in process `syz.3.648'. [ 106.357977][ T7252] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.377595][ T7252] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.479562][ T7258] loop2: detected capacity change from 0 to 16 [ 106.486908][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 106.531941][ T7258] erofs: (device loop2): mounted with root inode @ nid 36. [ 106.589681][ T7258] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 106.627000][ T7258] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 106.636270][ T7258] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 106.666082][ T7258] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 106.693849][ T7258] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 106.695167][ T7265] loop1: detected capacity change from 0 to 64 [ 106.704053][ T7258] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 106.704155][ T7258] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 106.704177][ T7258] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 106.704193][ T7258] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 106.705675][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 106.705690][ T28] audit: type=1800 audit(1763382410.237:12): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.657" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 107.336871][ T789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.464542][ T7266] loop3: detected capacity change from 0 to 32768 [ 107.494874][ T7266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.661 (7266) [ 107.546442][ T7286] loop0: detected capacity change from 0 to 256 [ 107.554805][ T789] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 107.580258][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.588184][ T7286] exfat: Deprecated parameter 'utf8' [ 107.604646][ T7286] exfat: Deprecated parameter 'utf8' [ 107.614935][ T789] usb 2-1: Product: syz [ 107.615653][ T7266] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.626796][ T789] usb 2-1: Manufacturer: syz [ 107.645339][ T789] usb 2-1: SerialNumber: syz [ 107.655255][ T7266] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 107.666493][ T7266] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 107.698407][ T789] usb 2-1: config 0 descriptor?? [ 107.701167][ T7266] BTRFS info (device loop3): force zstd compression, level 3 [ 107.711495][ T7286] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 107.723312][ T7266] BTRFS info (device loop3): turning on sync discard [ 107.732374][ T7266] BTRFS info (device loop3): force clearing of disk cache [ 107.744511][ T7266] BTRFS info (device loop3): enabling disk space caching [ 107.775286][ T7266] BTRFS info (device loop3): turning off discard [ 107.785454][ T7266] BTRFS info (device loop3): disk space caching is enabled [ 107.812907][ T7286] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 107.975872][ T7266] BTRFS info (device loop3): enabling ssd optimizations [ 108.006045][ T789] hso 2-1:0.0: Failed to find BULK IN ep [ 108.037417][ T7266] BTRFS info (device loop3): rebuilding free space tree [ 108.050382][ T789] usb-storage 2-1:0.0: USB Mass Storage device detected [ 108.219482][ T7266] BTRFS info (device loop3): disabling free space tree [ 108.226533][ T7266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.288676][ T7266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.314230][ T789] usb 2-1: USB disconnect, device number 6 [ 108.432211][ T7266] BTRFS warning (device loop3: state M): 'nologreplay' is deprecated, use 'rescue=nologreplay' instead [ 108.467335][ T7266] BTRFS info (device loop3: state M): disabling log replay at mount time [ 108.491477][ T7266] BTRFS error (device loop3: state M): nologreplay must be used with ro mount option [ 108.522541][ T7322] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 108.531435][ T7322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.588531][ T5797] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.060572][ T7336] xt_hashlimit: size too large, truncated to 1048576 [ 109.289006][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.692'. [ 109.643751][ T7360] loop0: detected capacity change from 0 to 256 [ 109.764937][ T7360] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 109.835826][ T7360] tmpfs: Bad value for 'mpol' [ 109.918569][ T7369] xt_hashlimit: size too large, truncated to 1048576 [ 110.070548][ T7376] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 110.144417][ T7376] team0: Port device syz_tun added [ 110.768268][ T7373] loop3: detected capacity change from 0 to 32768 [ 110.834000][ T7373] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.011029][ T7373] XFS (loop3): Ending clean mount [ 111.052446][ T7373] XFS (loop3): Quotacheck needed: Please wait. [ 111.230761][ T7373] XFS (loop3): Quotacheck: Done. [ 111.349353][ T7385] loop0: detected capacity change from 0 to 32768 [ 111.369962][ T7407] loop2: detected capacity change from 0 to 128 [ 111.440787][ T7407] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 111.490373][ T7407] hpfs: filesystem error: improperly stopped [ 111.496447][ T7407] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 111.533161][ T7407] hpfs: You really don't want any checks? You are crazy... [ 111.542062][ T7385] read_mapping_page failed! [ 111.560856][ T7407] hpfs: hpfs_map_sector(): read error [ 111.566306][ T7407] hpfs: code page support is disabled [ 111.576289][ T5797] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.579587][ T7409] loop1: detected capacity change from 0 to 8 [ 111.603772][ T7407] hpfs: hpfs_map_4sectors(): unaligned read [ 111.610167][ T7407] hpfs: hpfs_map_4sectors(): unaligned read [ 111.624506][ T7407] hpfs: filesystem error: unable to find root dir [ 112.048253][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.274079][ T788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 112.291419][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.306690][ T788] usb 3-1: Product: syz [ 112.314448][ T788] usb 3-1: Manufacturer: syz [ 112.333524][ T788] usb 3-1: SerialNumber: syz [ 112.352818][ T788] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 112.391552][ T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 112.476874][ T5868] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.680409][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 112.696753][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 112.722709][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 112.735011][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 112.754595][ T5868] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 112.764391][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.791574][ T5868] usb 4-1: Product: syz [ 112.795801][ T5868] usb 4-1: Manufacturer: syz [ 112.817792][ T5868] usb 4-1: SerialNumber: syz [ 112.825945][ T5868] usb 4-1: config 0 descriptor?? [ 112.840644][ T5868] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 112.854453][ T7439] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.902717][ T788] usb 3-1: USB disconnect, device number 4 [ 112.951655][ T28] audit: type=1326 audit(1763382416.487:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853418f6c9 code=0x7ffc0000 [ 113.002569][ T28] audit: type=1326 audit(1763382416.487:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853418f6c9 code=0x7ffc0000 [ 113.025129][ T28] audit: type=1326 audit(1763382416.487:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f853418f6c9 code=0x7ffc0000 [ 113.048585][ T28] audit: type=1326 audit(1763382416.487:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853418f6c9 code=0x7ffc0000 [ 113.071593][ T28] audit: type=1326 audit(1763382416.487:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.0.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853418f6c9 code=0x7ffc0000 [ 113.120098][ T5868] scsi host1: usb-storage 4-1:0.0 [ 113.159754][ T5868] usb 4-1: USB disconnect, device number 5 [ 113.314300][ T7454] usb usb8: usbfs: process 7454 (syz.0.740) did not claim interface 0 before use [ 113.428899][ T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 113.442105][ T23] ath9k_htc: Failed to initialize the device [ 113.458295][ T788] usb 3-1: ath9k_htc: USB layer deinitialized [ 113.987410][ T7480] netlink: 196 bytes leftover after parsing attributes in process `syz.2.753'. [ 114.025562][ T7480] netlink: 196 bytes leftover after parsing attributes in process `syz.2.753'. [ 114.046737][ T7480] netlink: 19 bytes leftover after parsing attributes in process `syz.2.753'. [ 114.053505][ T7482] loop1: detected capacity change from 0 to 2048 [ 114.176019][ T7482] Alternate GPT is invalid, using primary GPT. [ 114.204376][ T7482] loop1: p1 p2 p3 [ 114.218241][ T7482] loop1: partition table partially beyond EOD, truncated [ 114.296573][ T7494] Unsupported ieee802154 address type: 0 [ 114.714986][ T5783] udevd[5783]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 114.730881][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 114.754480][ T6993] udevd[6993]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 115.016933][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.188850][ T7490] loop3: detected capacity change from 0 to 40427 [ 115.208772][ T7490] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 115.223101][ T5868] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 115.237006][ T7490] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.248016][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.276661][ T5868] usb 2-1: config 0 has no interface number 0 [ 115.282879][ T5868] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 115.316480][ T5868] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.349310][ T5868] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 115.360348][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.371851][ T7490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.395755][ T5868] usb 2-1: Product: syz [ 115.416677][ T5868] usb 2-1: Manufacturer: syz [ 115.421343][ T5868] usb 2-1: SerialNumber: syz [ 115.458189][ T5868] usb 2-1: config 0 descriptor?? [ 115.513430][ T7490] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.526743][ T7490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.678861][ T7513] loop2: detected capacity change from 0 to 32768 [ 115.735610][ T7513] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.772514][ C1] sd 0:0:1:0: [sda] tag#6160 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 115.783123][ C1] sd 0:0:1:0: [sda] tag#6160 CDB: Read(6) 08 00 00 00 03 44 [ 115.807982][ T7513] XFS (loop2): Ending clean mount [ 115.930964][ T788] usb 2-1: USB disconnect, device number 7 [ 116.039562][ T5791] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.413311][ T7550] loop0: detected capacity change from 0 to 128 [ 116.437165][ T7550] EXT4-fs: Ignoring removed nobh option [ 116.480189][ T7550] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.495138][ T7556] loop2: detected capacity change from 0 to 16 [ 116.506904][ T7556] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.534428][ T7550] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.663631][ T7550] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.789: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 116.746077][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.836799][ T5868] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.052003][ T5868] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 117.072970][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.092118][ T5868] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.136735][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.151955][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.173817][ T5868] usb 3-1: Product: syz [ 117.183942][ T5868] usb 3-1: Manufacturer: syz [ 117.196569][ T5868] usb 3-1: SerialNumber: syz [ 117.429871][ T5868] cdc_ncm 3-1:1.0: skipping garbage [ 117.447187][ T5868] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 117.469982][ T5868] cdc_ncm 3-1:1.0: bind() failure [ 117.489508][ T5868] usb 3-1: USB disconnect, device number 5 [ 117.658820][ T7566] loop1: detected capacity change from 0 to 32768 [ 117.737097][ T7566] JBD2: Ignoring recovery information on journal [ 117.790450][ T7592] loop3: detected capacity change from 0 to 1024 [ 117.820954][ T7566] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.928069][ T7592] hfsplus: invalid extended attribute record [ 117.935467][ T7566] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923141632 [ 117.959994][ T7566] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 117.975158][ T7566] OCFS2: File system is now read-only. [ 118.004110][ T7566] (syz.1.788,7566,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 118.041063][ T7566] (syz.1.788,7566,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 118.058203][ T1329] hfsplus: b-tree write err: -5, ino 4 [ 118.126923][ T7566] (syz.1.788,7566,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 118.135352][ T7566] (syz.1.788,7566,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 118.161715][ T7566] (syz.1.788,7566,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 118.187277][ T7566] (syz.1.788,7566,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 118.206170][ T7566] (syz.1.788,7566,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 118.234568][ T7566] (syz.1.788,7566,1):ocfs2_mknod:385 ERROR: status = -30 [ 118.277543][ T7566] (syz.1.788,7566,1):ocfs2_mknod:502 ERROR: status = -30 [ 118.285073][ T7566] (syz.1.788,7566,1):ocfs2_mkdir:659 ERROR: status = -30 [ 118.412913][ T7605] futex_wake_op: syz.3.804 tries to shift op by -1; fix this program [ 118.430759][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 118.745207][ T7615] loop0: detected capacity change from 0 to 4096 [ 118.790663][ T7615] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 118.876933][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 118.974067][ T7615] ntfs3: loop0: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 118.999106][ T7615] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 119.071099][ T23] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 119.111127][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.151766][ T23] usb 4-1: Product: syz [ 119.155996][ T23] usb 4-1: Manufacturer: syz [ 119.187873][ T23] usb 4-1: SerialNumber: syz [ 119.193972][ T1315] ntfs3: loop0: ino=1e, ntfs3_write_inode failed, -22. [ 119.208724][ T23] usb 4-1: config 0 descriptor?? [ 119.218409][ T23] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 119.415056][ T7619] loop2: detected capacity change from 0 to 32768 [ 119.625846][ T23] gspca_stk1135: reg_w 0x0 err -71 [ 119.636867][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.656676][ T23] gspca_stk1135: Sensor write failed [ 119.662033][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.681785][ T23] gspca_stk1135: Sensor write failed [ 119.694259][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.709917][ T23] gspca_stk1135: Sensor read failed [ 119.725461][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.746548][ T23] gspca_stk1135: Sensor read failed [ 119.762247][ T23] gspca_stk1135: Detected sensor type unknown (0x0) [ 119.770736][ T7637] loop0: detected capacity change from 0 to 16 [ 119.787483][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.793876][ T23] gspca_stk1135: Sensor read failed [ 119.807472][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.819988][ T7637] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.832664][ T23] gspca_stk1135: Sensor read failed [ 119.846954][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.856732][ T23] gspca_stk1135: Sensor write failed [ 119.862153][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 119.879674][ T7637] erofs: (device loop0): z_erofs_read_folio: read error -22 @ 43 of nid 36 [ 119.890062][ T23] gspca_stk1135: Sensor write failed [ 119.899752][ T23] stk1135: probe of 4-1:0.0 failed with error -71 [ 119.933218][ T23] usb 4-1: USB disconnect, device number 6 [ 120.060533][ T7643] netlink: 224 bytes leftover after parsing attributes in process `syz.1.825'. [ 120.633741][ T7662] xt_TCPMSS: Only works on TCP SYN packets [ 120.702644][ T7666] netlink: 92 bytes leftover after parsing attributes in process `syz.3.836'. [ 120.792425][ T28] audit: type=1326 audit(1763382424.317:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 120.875356][ T28] audit: type=1326 audit(1763382424.317:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 120.951680][ T28] audit: type=1326 audit(1763382424.357:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 120.988233][ T28] audit: type=1326 audit(1763382424.357:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 121.011121][ T28] audit: type=1326 audit(1763382424.357:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 121.081631][ T7652] loop1: detected capacity change from 0 to 32768 [ 121.099503][ T7672] bond2: entered promiscuous mode [ 121.120606][ T7652] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.204801][ T7687] netlink: 'syz.2.842': attribute type 21 has an invalid length. [ 121.213157][ T7687] netlink: 164 bytes leftover after parsing attributes in process `syz.2.842'. [ 121.302062][ T7690] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.332252][ T7652] XFS (loop1): Ending clean mount [ 121.375267][ T7652] XFS (loop1): Quotacheck needed: Please wait. [ 121.484842][ T7652] XFS (loop1): Quotacheck: Done. [ 121.644229][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.800911][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 121.862094][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 122.232685][ T7699] loop3: detected capacity change from 0 to 32768 [ 122.233057][ T7711] loop0: detected capacity change from 0 to 8 [ 122.255123][ T7699] (syz.3.848,7699,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.284305][ T7711] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 122.295132][ T7699] (syz.3.848,7699,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.333255][ T5906] udevd[5906]: incorrect cramfs checksum on /dev/loop0 [ 122.345638][ T7711] cramfs: bad data blocksize 4293972856 [ 122.380008][ T7711] cramfs: bad data blocksize 4293972856 [ 122.398247][ T7699] JBD2: Ignoring recovery information on journal [ 122.452864][ T5906] udevd[5906]: incorrect cramfs checksum on /dev/loop0 [ 122.589965][ T7699] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.731149][ T7718] loop2: detected capacity change from 0 to 4096 [ 122.976104][ T5797] ocfs2: Unmounting device (7,3) on (node local) [ 123.089457][ T7727] loop0: detected capacity change from 0 to 256 [ 123.190401][ T7727] FAT-fs (loop0): Directory bread(block 64) failed [ 123.223921][ T7727] FAT-fs (loop0): Directory bread(block 65) failed [ 123.245232][ T7727] FAT-fs (loop0): Directory bread(block 66) failed [ 123.254351][ T7727] FAT-fs (loop0): Directory bread(block 67) failed [ 123.270331][ T7727] FAT-fs (loop0): Directory bread(block 68) failed [ 123.302242][ T7727] FAT-fs (loop0): Directory bread(block 69) failed [ 123.314928][ T7727] FAT-fs (loop0): Directory bread(block 70) failed [ 123.336781][ T7727] FAT-fs (loop0): Directory bread(block 71) failed [ 123.348642][ T7727] FAT-fs (loop0): Directory bread(block 72) failed [ 123.365523][ T7727] FAT-fs (loop0): Directory bread(block 73) failed [ 123.593748][ T7710] loop1: detected capacity change from 0 to 32768 [ 123.605354][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.702463][ T7710] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.712246][ T7710] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.871737][ T7710] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 123.881816][ T7744] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 123.909496][ T7710] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent points beyond end of block (not first in block) [ 123.924118][ T7744] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.950182][ T7710] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 123.950182][ T7710] inode = 4 4153 [ 123.950182][ T7710] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 124.011470][ T7710] gfs2: fsid=syz:syz.0: G: s:SH n:2/1039 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 124.031718][ T7710] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:7710 [syz.1.850] gfs2_lookup_meta+0xa8/0x170 [ 124.049323][ T7710] gfs2: fsid=syz:syz.0: I: n:4/4153 t:4 f:0x00 d:0x00000201 s:1816 p:0 [ 124.085144][ T7710] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 124.130691][ T7710] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 124.152661][ T7710] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 124.169089][ T7710] gfs2: fsid=syz:syz.0: File system withdrawn [ 124.191097][ T7710] CPU: 0 PID: 7710 Comm: syz.1.850 Not tainted syzkaller #0 [ 124.198447][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.208537][ T7710] Call Trace: [ 124.211844][ T7710] [ 124.214583][ T7753] loop3: detected capacity change from 0 to 8 [ 124.214795][ T7710] dump_stack_lvl+0x16c/0x230 [ 124.225623][ T7710] ? show_regs_print_info+0x20/0x20 [ 124.230866][ T7710] ? load_image+0x3b0/0x3b0 [ 124.235403][ T7710] ? kobject_uevent_env+0x363/0x8c0 [ 124.240656][ T7710] gfs2_withdraw+0xe50/0x13b0 [ 124.245384][ T7710] ? gfs2_lm+0x220/0x220 [ 124.249672][ T7710] ? load_image+0x3b0/0x3b0 [ 124.254302][ T7710] ? gfs2_consist_inode_i+0xf5/0x110 [ 124.259618][ T7710] gfs2_dirent_scan+0x525/0x650 [ 124.264497][ T7710] ? gfs2_dirent_search+0x7e0/0x7e0 [ 124.269721][ T7710] ? gfs2_dirent_search+0x7e0/0x7e0 [ 124.274942][ T7710] gfs2_dirent_search+0x2e1/0x7e0 [ 124.279992][ T7710] ? inode_owner_or_capable+0x1c0/0x1c0 [ 124.285567][ T7710] ? gfs2_inode_metasync+0xf0/0xf0 [ 124.290711][ T7710] ? gfs2_dir_search+0x220/0x220 [ 124.295686][ T7710] ? gfs2_glock_nq+0xd4f/0x1420 [ 124.300551][ T7710] ? do_raw_spin_lock+0x121/0x2c0 [ 124.305599][ T7710] gfs2_dir_search+0x4d/0x220 [ 124.310312][ T7710] gfs2_lookupi+0x3d9/0x5a0 [ 124.314832][ T7710] ? gfs2_lookup_meta+0x170/0x170 [ 124.319876][ T7710] ? gfs2_lookup_meta+0xa8/0x170 [ 124.324833][ T7710] ? crc32_le_base+0x759/0xcf0 [ 124.329608][ T7710] ? sprintf+0xda/0x120 [ 124.333771][ T7710] gfs2_lookup_meta+0xa8/0x170 [ 124.338544][ T7710] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 124.343672][ T7710] init_journal+0x1290/0x2260 [ 124.348362][ T7710] ? init_inodes+0xdb/0x320 [ 124.352876][ T7710] ? _compound_head+0x120/0x120 [ 124.357746][ T7710] ? snprintf+0xdb/0x120 [ 124.361999][ T7710] ? init_inodes+0xdb/0x320 [ 124.366513][ T7710] ? vscnprintf+0x80/0x80 [ 124.370850][ T7710] ? gfs2_glock_nq_num+0x183/0x1c0 [ 124.375971][ T7710] init_inodes+0xdb/0x320 [ 124.380309][ T7710] gfs2_fill_super+0x1815/0x1f80 [ 124.385264][ T7710] ? gfs2_reconfigure+0xb10/0xb10 [ 124.390302][ T7710] ? init_locking+0xb8/0x200 [ 124.394908][ T7710] ? setup_bdev_super+0x56b/0x660 [ 124.399941][ T7710] get_tree_bdev+0x3e4/0x510 [ 124.404532][ T7710] ? end_current_label_crit_section+0x170/0x170 [ 124.410792][ T7710] ? gfs2_reconfigure+0xb10/0xb10 [ 124.415850][ T7710] ? setup_bdev_super+0x660/0x660 [ 124.420889][ T7710] gfs2_get_tree+0x51/0x1e0 [ 124.425407][ T7710] vfs_get_tree+0x8c/0x280 [ 124.429829][ T7710] do_new_mount+0x24b/0xa40 [ 124.434347][ T7710] __se_sys_mount+0x2da/0x3c0 [ 124.439029][ T7710] ? __x64_sys_mount+0xc0/0xc0 [ 124.444073][ T7710] ? lockdep_hardirqs_on+0x98/0x150 [ 124.449276][ T7710] ? __x64_sys_mount+0x20/0xc0 [ 124.454040][ T7710] do_syscall_64+0x55/0xb0 [ 124.458464][ T7710] ? clear_bhb_loop+0x40/0x90 [ 124.463144][ T7710] ? clear_bhb_loop+0x40/0x90 [ 124.467825][ T7710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.473723][ T7710] RIP: 0033:0x7f0ec4990e6a [ 124.478154][ T7710] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.497867][ T7710] RSP: 002b:00007f0ec57f9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.506304][ T7710] RAX: ffffffffffffffda RBX: 00007f0ec57f9ef0 RCX: 00007f0ec4990e6a [ 124.514280][ T7710] RDX: 0000200000000340 RSI: 0000200000000440 RDI: 00007f0ec57f9eb0 [ 124.522301][ T7710] RBP: 0000200000000340 R08: 00007f0ec57f9ef0 R09: 0000000000000000 [ 124.530280][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000440 [ 124.538267][ T7710] R13: 00007f0ec57f9eb0 R14: 000000000001f803 R15: 0000200000000000 [ 124.546263][ T7710] [ 124.565777][ T7753] SQUASHFS error: Failed to read block 0x636: -5 [ 124.574643][ T7753] SQUASHFS error: Unable to read metadata cache entry [634] [ 124.591394][ T7753] SQUASHFS error: Unable to read metadata cache entry [634] [ 124.602368][ T7753] SQUASHFS error: Unable to read directory block [629:0] [ 124.726867][ T7710] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 125.083768][ T7749] loop2: detected capacity change from 0 to 32768 [ 125.127163][ T7749] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.871 (7749) [ 125.182866][ T7749] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.219965][ T7749] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 125.256847][ T7749] BTRFS info (device loop2): using free space tree [ 125.365970][ T7778] netlink: 'syz.3.879': attribute type 5 has an invalid length. [ 125.456889][ T7749] BTRFS info (device loop2): enabling ssd optimizations [ 125.463901][ T7749] BTRFS info (device loop2): auto enabling async discard [ 125.480029][ T7778] : entered promiscuous mode [ 125.862713][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 125.916816][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'. [ 126.003716][ T5791] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.246653][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.606930][ T7821] ERROR: device name not specified. [ 127.284963][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.908'. [ 127.498934][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 127.603838][ T7854] ip6t_srh: unknown srh invflags 7D00 [ 127.903988][ T7866] loop1: detected capacity change from 0 to 256 [ 127.913914][ T7864] bond0: option arp_validate: invalid value (18446744073491447809) [ 127.914220][ T49] bond0: (slave bond_slave_0): interface is now down [ 127.924558][ T7866] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.946930][ T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.968083][ T49] bond0: (slave bond_slave_1): interface is now down [ 127.991998][ T49] bond0: now running without any active interface! [ 128.061673][ T7870] netlink: 104 bytes leftover after parsing attributes in process `syz.3.921'. [ 128.168450][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 128.175586][ T788] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 128.191691][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.225825][ T788] usb 1-1: config 0 has no interface number 0 [ 128.244149][ T788] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 128.259538][ T788] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 128.293458][ T788] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.326816][ T788] usb 1-1: config 0 interface 52 has no altsetting 0 [ 128.335615][ T788] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 128.345396][ T788] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 128.358182][ T788] usb 1-1: Product: syz [ 128.362588][ T788] usb 1-1: SerialNumber: syz [ 128.396955][ T788] usb 1-1: config 0 descriptor?? [ 128.419089][ T7874] loop1: detected capacity change from 0 to 4096 [ 128.633197][ T788] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 128.663061][ T788] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 128.872941][ T788] usb 1-1: USB disconnect, device number 4 [ 129.333656][ T7884] loop3: detected capacity change from 0 to 32768 [ 129.403093][ T7884] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 129.557551][ T7884] (syz.3.929,7884,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=0, rec_len=49, name_len=1 [ 129.597598][ T7888] loop1: detected capacity change from 0 to 32768 [ 129.625424][ T7884] (syz.3.929,7884,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 129.629933][ T7888] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.931 (7888) [ 129.683744][ T7884] (syz.3.929,7884,1):ocfs2_symlink:1867 ERROR: status = -2 [ 129.702932][ T7888] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.728772][ T7884] (syz.3.929,7884,1):ocfs2_symlink:2068 ERROR: status = -2 [ 129.746005][ T7888] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.798357][ T7888] BTRFS info (device loop1): using free space tree [ 129.902291][ T5797] ocfs2: Unmounting device (7,3) on (node local) [ 129.986888][ T7888] BTRFS info (device loop1): enabling ssd optimizations [ 129.993899][ T7888] BTRFS info (device loop1): auto enabling async discard [ 130.317514][ T5788] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.334244][ T7922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.941'. [ 130.361407][ T7922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.941'. [ 130.394118][ T7922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.941'. [ 130.516937][ T5799] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (5799) [ 131.083216][ T7939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.948'. [ 131.149716][ T7920] loop0: detected capacity change from 0 to 32768 [ 131.304477][ T7920] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.533467][ T5794] ocfs2: Unmounting device (7,0) on (node local) [ 131.745365][ T7958] loop3: detected capacity change from 0 to 4096 [ 131.806691][ T7958] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 131.907147][ T7958] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 132.435206][ T7985] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 132.988307][ T8011] loop2: detected capacity change from 0 to 22 [ 133.013014][ T8011] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 133.037253][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045555][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.067958][ T8011] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 133.070199][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 133.118392][ T8013] vlan0: entered promiscuous mode [ 133.354223][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 133.585764][ T8004] loop3: detected capacity change from 0 to 32768 [ 133.627077][ T8004] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 133.765905][ T5799] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 134.027113][ T8038] delete_channel: no stack [ 134.359154][ T8051] netlink: 104 bytes leftover after parsing attributes in process `syz.1.997'. [ 134.911090][ T8071] loop3: detected capacity change from 0 to 512 [ 134.931922][ T8071] EXT4-fs: Ignoring removed i_version option [ 134.969917][ T8071] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.990891][ T8071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.027682][ T8071] EXT4-fs (loop3): 1 truncate cleaned up [ 135.038034][ T8071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.066759][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.091187][ T8071] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 1029 (only 1 groups) [ 135.206734][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.317546][ T5830] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 135.328508][ T5830] usb 2-1: config 0 has no interface number 0 [ 135.334677][ T5830] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 135.365090][ T5830] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 135.386751][ T5830] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 135.413842][ T5830] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 135.423753][ T5830] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 135.437420][ T8063] loop2: detected capacity change from 0 to 32768 [ 135.444052][ T5830] usb 2-1: Product: syz [ 135.448809][ T5830] usb 2-1: Manufacturer: syz [ 135.453486][ T5830] usb 2-1: SerialNumber: syz [ 135.476359][ T8063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 135.496244][ T5830] usb 2-1: config 0 descriptor?? [ 135.510665][ T8063] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 135.551563][ T8069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.579600][ T8041] loop0: detected capacity change from 0 to 65536 [ 135.628468][ T5830] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 135.670506][ T8041] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 135.701182][ T8063] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 135.719193][ T5830] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 135.743507][ T5830] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 135.845383][ T789] usb 2-1: USB disconnect, device number 8 [ 135.857645][ T8041] XFS (loop0): Ending clean mount [ 135.875377][ T8041] XFS (loop0): Quotacheck needed: Please wait. [ 135.983259][ T8041] XFS (loop0): Quotacheck: Done. [ 136.019964][ T5830] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 276ms [ 136.031175][ T5830] gfs2: fsid=syz:syz.0: jid=0: Done [ 136.038920][ T8063] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.194189][ T5794] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 136.226284][ T8096] bond0: Unable to set up delay as MII monitoring is disabled [ 136.347989][ T8099] loop3: detected capacity change from 0 to 16 [ 136.363084][ T8099] erofs: (device loop3): mounted with root inode @ nid 36. [ 136.412911][ T8099] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 136.460155][ T8099] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 137.414440][ T8101] loop1: detected capacity change from 0 to 32768 [ 137.547064][ T5868] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.571818][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 137.746824][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 137.758720][ T5868] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 137.792118][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.811137][ T5868] usb 4-1: config 0 descriptor?? [ 137.821268][ T5868] as10x_usb: device has been detected [ 137.836496][ T5868] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 137.839973][ T8134] loop2: detected capacity change from 0 to 4096 [ 137.859692][ T8134] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 137.918095][ T5868] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 137.928755][ T8134] ntfs: volume version 3.1. [ 137.980250][ T5868] as10x_usb: error during firmware upload part1 [ 138.014449][ T5868] Registered device nBox DVB-T Dongle [ 138.058739][ T788] usb 4-1: USB disconnect, device number 7 [ 138.141734][ T788] Unregistered device nBox DVB-T Dongle [ 138.144711][ T788] as10x_usb: device has been disconnected [ 138.685500][ T8147] loop0: detected capacity change from 0 to 4096 [ 138.736946][ T8147] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 138.814235][ T8147] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 138.881268][ T8147] ntfs3: loop0: Failed to load $Extend (-22). [ 138.889619][ T8147] ntfs3: loop0: Failed to initialize $Extend. [ 139.407171][ T8167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1049'. [ 139.816521][ T8165] loop1: detected capacity change from 0 to 32768 [ 139.867059][ T8165] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1047 (8165) [ 140.450814][ T8165] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 140.472452][ T8159] syz.2.1044 (8159): drop_caches: 2 [ 140.497074][ T8165] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 140.536718][ T8165] BTRFS info (device loop1): using free space tree [ 140.727791][ T8175] loop3: detected capacity change from 0 to 32768 [ 140.800238][ T8165] BTRFS info (device loop1): enabling ssd optimizations [ 140.826795][ T8165] BTRFS info (device loop1): auto enabling async discard [ 141.007059][ T8208] tmpfs: User quota inode hardlimit too large. [ 141.049039][ T5788] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 141.326859][ T8216] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 141.656912][ T8226] veth1_vlan: mtu greater than device maximum [ 142.023471][ T8244] loop3: detected capacity change from 0 to 128 [ 142.891786][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 143.069228][ T8287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1098'. [ 143.079046][ T8287] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1098'. [ 143.089285][ T8287] netlink: 'syz.0.1098': attribute type 3 has an invalid length. [ 143.110242][ T8287] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1098'. [ 143.686860][ T8311] "syz.1.1110" (8311) uses obsolete ecb(arc4) skcipher [ 143.816870][ T788] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.971359][ T8297] loop0: detected capacity change from 0 to 32768 [ 144.001959][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 144.020322][ T788] usb 3-1: config 0 has no interfaces? [ 144.032834][ T788] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 144.059186][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.077369][ T788] usb 3-1: Product: syz [ 144.086696][ T788] usb 3-1: Manufacturer: syz [ 144.091361][ T788] usb 3-1: SerialNumber: syz [ 144.148218][ T788] r8152-cfgselector 3-1: config 0 descriptor?? [ 144.275247][ T8326] loop3: detected capacity change from 0 to 1024 [ 144.379045][ T788] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 144.399062][ T8326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.456320][ T8326] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #11: comm syz.3.1117: directory missing '..' [ 144.522110][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.606190][ T5868] usb 3-1: USB disconnect, device number 6 [ 144.688093][ T8340] xt_policy: neither incoming nor outgoing policy selected [ 144.708800][ T8336] loop1: detected capacity change from 0 to 4096 [ 144.719957][ T8336] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 144.733758][ T8338] loop0: detected capacity change from 0 to 4096 [ 144.766264][ T8336] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 144.822690][ T8336] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 144.850085][ T8341] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.912226][ T8336] ntfs: volume version 3.1. [ 146.052488][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 146.151391][ T8387] bond2: entered allmulticast mode [ 146.407024][ T8403] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 146.429483][ T8403] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 146.457294][ T8403] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.725141][ T8418] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1160'. [ 147.241053][ T8441] loop0: detected capacity change from 0 to 16 [ 147.271010][ T8441] erofs: (device loop0): mounted with root inode @ nid 36. [ 147.610916][ T8453] loop0: detected capacity change from 0 to 4096 [ 147.986911][ T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.135716][ T8456] loop1: detected capacity change from 0 to 32768 [ 148.216945][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 148.247190][ T788] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.259424][ T788] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 148.270280][ T8458] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.287351][ T8456] (syz.1.1179,8456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.308807][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.342037][ T788] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 148.356672][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.367266][ T8456] (syz.1.1179,8456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.398804][ T788] usb 3-1: Product: syz [ 148.412395][ T788] usb 3-1: Manufacturer: syz [ 148.432692][ T788] usb 3-1: SerialNumber: syz [ 148.449802][ T788] usb 3-1: config 0 descriptor?? [ 148.469766][ T8456] (syz.1.1179,8456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 148.557914][ T8448] syz.3.1176 (8448): drop_caches: 2 [ 148.565593][ T8456] JBD2: Ignoring recovery information on journal [ 148.620528][ T8456] (syz.1.1179,8456,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 148.657651][ T8456] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.892991][ T1196] usb 3-1: USB disconnect, device number 7 [ 148.943329][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 149.556185][ T8463] loop3: detected capacity change from 0 to 32768 [ 149.603490][ T8480] mmap: syz.0.1189 (8480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.632934][ T8463] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 149.676934][ T8463] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 149.849174][ T8483] syz.1.1190 (8483): drop_caches: 2 [ 149.860559][ T8463] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 149.906850][ T1196] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 149.927636][ T8489] loop0: detected capacity change from 0 to 2048 [ 149.934809][ T1196] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 149.983915][ T8489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.057271][ T1196] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 150.065905][ T1196] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.094086][ T8463] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.188663][ T8494] loop1: detected capacity change from 0 to 256 [ 150.345408][ T8494] FAT-fs (loop1): Directory bread(block 64) failed [ 150.401550][ T8494] FAT-fs (loop1): Directory bread(block 65) failed [ 150.436907][ T8494] FAT-fs (loop1): Directory bread(block 66) failed [ 150.443499][ T8494] FAT-fs (loop1): Directory bread(block 67) failed [ 150.467189][ T8494] FAT-fs (loop1): Directory bread(block 68) failed [ 150.473784][ T8494] FAT-fs (loop1): Directory bread(block 69) failed [ 150.511208][ T8494] FAT-fs (loop1): Directory bread(block 70) failed [ 150.536948][ T8494] FAT-fs (loop1): Directory bread(block 71) failed [ 150.543661][ T8494] FAT-fs (loop1): Directory bread(block 72) failed [ 150.566911][ T8494] FAT-fs (loop1): Directory bread(block 73) failed [ 150.869250][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 150.917274][ T8511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.925081][ T8511] IPv6: NLM_F_CREATE should be set when creating new route [ 150.932524][ T8511] IPv6: NLM_F_CREATE should be set when creating new route [ 151.336992][ T8530] program syz.0.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.355041][ T8532] loop2: detected capacity change from 0 to 256 [ 151.371938][ T8530] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 151.383652][ T8532] exfat: Deprecated parameter 'utf8' [ 151.389119][ T8532] exfat: Deprecated parameter 'namecase' [ 151.430214][ T8532] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 151.556556][ T8537] netlink: 'syz.1.1216': attribute type 3 has an invalid length. [ 151.728918][ T8544] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 151.929523][ T8556] loop2: detected capacity change from 0 to 64 [ 152.060880][ T8559] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 153.092202][ T8567] loop1: detected capacity change from 0 to 40427 [ 153.108265][ T8567] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 153.140959][ T8567] F2FS-fs (loop1): invalid crc value [ 153.162054][ T8567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.168959][ T788] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.279729][ T8567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.356728][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 153.369826][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.385218][ T8567] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 153.400792][ T788] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 153.416166][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.443321][ T788] usb 4-1: Product: syz [ 153.452283][ T788] usb 4-1: Manufacturer: syz [ 153.466932][ T788] usb 4-1: SerialNumber: syz [ 153.478628][ T788] usb 4-1: config 0 descriptor?? [ 153.489258][ T788] usb 4-1: bad CDC descriptors [ 153.504794][ T788] usb 4-1: unsupported MDLM descriptors [ 153.744368][ T788] usb 4-1: USB disconnect, device number 8 [ 154.452483][ T8635] QAT: failed to copy from user. [ 154.662903][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 154.665079][ T8643] loop1: detected capacity change from 0 to 512 [ 154.768917][ T8643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.858500][ T8643] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.984470][ T8643] EXT4-fs error (device loop1): ext4_xattr_block_get:600: inode #15: comm syz.1.1260: corrupted xattr block 33: e_value out of bounds [ 155.171517][ T8668] loop3: detected capacity change from 0 to 64 [ 155.216333][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.495453][ T8674] xt_CT: No such helper "snmp_trap" [ 155.525463][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 155.546655][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1276'. [ 156.134275][ T8666] loop0: detected capacity change from 0 to 32768 [ 156.190010][ T8666] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 156.212060][ T8666] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 156.278696][ T8702] loop3: detected capacity change from 0 to 128 [ 156.313519][ T8702] EXT4-fs (loop3): Test dummy encryption mode enabled [ 156.322496][ T8666] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 156.354130][ T789] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 156.367729][ T789] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 156.379347][ T8702] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.439083][ T8702] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.546985][ T789] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 179ms [ 156.555302][ T789] gfs2: fsid=syz:syz.0: jid=0: Done [ 156.570973][ T8666] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.571170][ T5797] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.131893][ T8727] loop1: detected capacity change from 0 to 128 [ 157.143175][ T8725] x_tables: unsorted entry at hook 1 [ 157.163389][ T8727] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.223388][ T8727] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.361215][ T8727] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.452919][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.533675][ T8740] netlink: 'syz.3.1302': attribute type 8 has an invalid length. [ 157.601414][ T8744] netlink: 'syz.1.1303': attribute type 2 has an invalid length. [ 157.620064][ T8744] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 157.632937][ T8744] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 157.658090][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.750530][ T8748] loop3: detected capacity change from 0 to 16 [ 157.782427][ T8748] erofs: (device loop3): mounted with root inode @ nid 36. [ 157.831098][ T8748] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 157.860814][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 157.891882][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.896844][ T8748] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 157.924323][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.957762][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.959031][ T8748] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 157.976089][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 157.985523][ T8748] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 157.995557][ T27] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 158.016884][ T28] audit: type=1800 audit(1763382461.537:23): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1306" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 158.036748][ T27] usb 1-1: Product: syz [ 158.040943][ T27] usb 1-1: Manufacturer: syz [ 158.045560][ T27] usb 1-1: SerialNumber: syz [ 158.084109][ T27] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 158.428233][ T27] usb 1-1: USB disconnect, device number 5 [ 158.463364][ T27] appletouch 1-1:1.0: input: appletouch disconnected [ 158.997852][ T8790] loop1: detected capacity change from 0 to 256 [ 159.008860][ T8790] exfat: Deprecated parameter 'utf8' [ 159.088734][ T8790] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 159.145440][ T8794] syz.0.1328 (8794): drop_caches: 2 [ 159.197382][ T1196] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.213528][ T8796] loop3: detected capacity change from 0 to 256 [ 159.239936][ T8796] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.276973][ T8796] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 159.354482][ T8796] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 159.406792][ T1196] usb 3-1: Using ep0 maxpacket: 32 [ 159.418643][ T1196] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.438397][ T1196] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 159.456716][ T1196] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 159.469892][ T1196] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 159.496109][ T1196] usb 3-1: config 7 has no interface number 0 [ 159.530658][ T1196] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 159.557617][ T1196] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 159.600129][ T1196] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 159.619235][ T8805] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1334'. [ 159.646420][ T1196] usb 3-1: config 7 interface 128 has no altsetting 0 [ 159.669530][ T1196] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 159.679286][ T8808] xt_hashlimit: Unknown mode mask E2, kernel too old? [ 159.682986][ T1196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.706737][ T1196] usb 3-1: Product: syz [ 159.721239][ T1196] usb 3-1: Manufacturer: syz [ 159.725899][ T1196] usb 3-1: SerialNumber: syz [ 159.744158][ T8786] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.831122][ T8814] loop1: detected capacity change from 0 to 256 [ 160.023973][ T1196] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 160.037082][ T1196] usb 3-1: MIDIStreaming interface descriptor not found [ 160.133754][ T1196] usb 3-1: USB disconnect, device number 8 [ 160.251697][ T6824] udevd[6824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.536758][ T789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.544617][ T5868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.726735][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 160.741668][ T789] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 160.756840][ T5868] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 160.786791][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.794931][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.810265][ T789] usb 1-1: Product: syz [ 160.817828][ T789] usb 1-1: Manufacturer: syz [ 160.823838][ T5868] usb 2-1: config 0 descriptor?? [ 160.834555][ T789] usb 1-1: SerialNumber: syz [ 160.843148][ T5868] gspca_main: sunplus-2.14.0 probing 041e:400b [ 160.856325][ T789] usb 1-1: config 0 descriptor?? [ 160.870538][ T789] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 160.888745][ T789] usb 1-1: Detected FT4232HP [ 161.122644][ T8836] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 161.136955][ T8836] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1348'. [ 161.256530][ T5868] gspca_sunplus: reg_w_riv err -71 [ 161.266863][ T5868] sunplus: probe of 2-1:0.0 failed with error -71 [ 161.294798][ T789] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 161.306110][ T5868] usb 2-1: USB disconnect, device number 9 [ 161.313686][ T789] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.346390][ T789] usb 1-1: USB disconnect, device number 6 [ 161.381130][ T789] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 161.408438][ T789] ftdi_sio 1-1:0.0: device disconnected [ 161.733160][ T8856] bridge0: port 4(bond0) entered blocking state [ 161.741405][ T8856] bridge0: port 4(bond0) entered disabled state [ 161.752207][ T8856] bond0: entered allmulticast mode [ 161.760052][ T8856] bond_slave_0: entered allmulticast mode [ 161.765947][ T8856] bond_slave_1: entered allmulticast mode [ 161.776181][ T8856] bridge0: entered allmulticast mode [ 161.786297][ T8856] bond0: left allmulticast mode [ 161.794708][ T8856] bond_slave_0: left allmulticast mode [ 161.800658][ T8856] bond_slave_1: left allmulticast mode [ 161.806224][ T8856] bridge0: left allmulticast mode [ 162.013763][ T8863] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 162.071678][ T8864] loop1: detected capacity change from 0 to 4096 [ 162.124137][ T8864] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 162.338212][ T8864] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 162.345235][ T8864] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.395374][ T8864] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 162.509218][ T11] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 162.829770][ T8894] tmpfs: Bad value for 'mpol' [ 163.079252][ T8902] loop0: detected capacity change from 0 to 1024 [ 163.213346][ T1315] hfsplus: b-tree write err: -5, ino 4 [ 163.301849][ T28] audit: type=1326 audit(1763382466.837:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec498f6c9 code=0x7ffc0000 [ 163.355084][ T8914] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 163.376903][ T28] audit: type=1326 audit(1763382466.877:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec498f6c9 code=0x7ffc0000 [ 163.433373][ T28] audit: type=1326 audit(1763382466.897:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f0ec498f6c9 code=0x7ffc0000 [ 163.476772][ T28] audit: type=1326 audit(1763382466.897:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec498f6c9 code=0x7ffc0000 [ 163.515130][ T28] audit: type=1326 audit(1763382466.897:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec498f6c9 code=0x7ffc0000 [ 163.563038][ T8920] netlink: 'syz.0.1392': attribute type 29 has an invalid length. [ 163.615916][ T8920] netlink: 'syz.0.1392': attribute type 29 has an invalid length. [ 163.657023][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 163.763600][ T8930] comedi comedi1: ni_at_a2150: I/O port conflict (0x3,28) [ 163.836971][ T27] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 164.058898][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.086959][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.128350][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 164.147918][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.166663][ T27] usb 2-1: SerialNumber: syz [ 164.197098][ T27] usb 2-1: 0:2 : does not exist [ 164.637144][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1410'. [ 164.678820][ T5830] usb 2-1: USB disconnect, device number 10 [ 164.813235][ T8963] loop3: detected capacity change from 0 to 64 [ 164.825602][ T8949] loop2: detected capacity change from 0 to 32768 [ 164.876432][ T8949] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 164.924609][ T8949] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 164.943951][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.952516][ T8949] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 164.963922][ T8949] OCFS2: Returning error to the calling process. [ 164.973744][ T8949] (syz.2.1405,8949,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 164.981555][ T8949] (syz.2.1405,8949,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 164.996751][ T8949] (syz.2.1405,8949,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 165.008409][ T8949] (syz.2.1405,8949,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 165.017554][ T8949] (syz.2.1405,8949,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 165.026059][ T8949] (syz.2.1405,8949,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 165.034335][ T8949] (syz.2.1405,8949,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 165.042737][ T8949] (syz.2.1405,8949,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 165.051908][ T8949] (syz.2.1405,8949,1):ocfs2_mknod:298 ERROR: status = -5 [ 165.104963][ T8949] (syz.2.1405,8949,1):ocfs2_mknod:502 ERROR: status = -5 [ 165.121602][ T8949] (syz.2.1405,8949,1):ocfs2_mkdir:659 ERROR: status = -5 [ 165.238611][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 166.245432][ T9011] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1433'. [ 166.427773][ T9021] autofs4:pid:9021:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 166.650270][ T9027] loop0: detected capacity change from 0 to 4096 [ 166.677074][ T9027] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 166.832570][ T9027] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 166.850459][ T9027] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 166.878175][ T9027] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 166.959118][ T79] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 167.397372][ T5850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.614897][ T5850] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 167.650249][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.678978][ T5850] usb 1-1: Product: syz [ 167.687711][ T5850] usb 1-1: Manufacturer: syz [ 167.696734][ T5850] usb 1-1: SerialNumber: syz [ 167.723314][ T5850] usb 1-1: config 0 descriptor?? [ 167.739235][ T5850] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 168.173221][ T5850] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 168.186988][ T5850] sq905c 1-1:0.0: Reading version command failed [ 168.217009][ T5850] sq905c: probe of 1-1:0.0 failed with error -71 [ 168.244979][ T5850] usb 1-1: USB disconnect, device number 7 [ 168.896757][ T9097] libceph: resolve '0..' (ret=-3): failed [ 169.321557][ T9119] overlay: Unknown parameter 'fsname' [ 169.505923][ T9125] libceph: resolve '0..' (ret=-3): failed [ 171.118648][ T9195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.141932][ T9195] overlayfs: missing 'lowerdir' [ 171.336951][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.526716][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 171.533735][ T23] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 171.546765][ T23] usb 1-1: config 0 has no interface number 1 [ 171.557894][ T9211] netlink: 'syz.3.1528': attribute type 32 has an invalid length. [ 171.576277][ T23] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 171.596697][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.622623][ T23] usb 1-1: Product: syz [ 171.630484][ T23] usb 1-1: Manufacturer: syz [ 171.645358][ T23] usb 1-1: SerialNumber: syz [ 171.659544][ T23] usb 1-1: config 0 descriptor?? [ 171.736118][ T23] snd-usb-audio: probe of 1-1:0.74 failed with error -22 [ 171.839748][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.898654][ T23] usb 1-1: USB disconnect, device number 8 [ 172.022975][ T9226] loop2: detected capacity change from 0 to 2048 [ 172.103784][ T9229] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.170787][ T9226] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 172.212411][ T9226] Remounting filesystem read-only [ 172.438106][ T9237] loop1: detected capacity change from 0 to 4096 [ 172.472969][ T9237] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 172.548878][ T9237] ntfs3: loop1: Failed to load $Extend (-22). [ 172.570103][ T9237] ntfs3: loop1: Failed to initialize $Extend. [ 172.749009][ T9250] loop2: detected capacity change from 0 to 64 [ 173.803277][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 174.086779][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.169606][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 174.197402][ T9314] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1576'. [ 174.300467][ T23] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 174.316745][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.336431][ T23] usb 3-1: Product: syz [ 174.341113][ T23] usb 3-1: Manufacturer: syz [ 174.345740][ T23] usb 3-1: SerialNumber: syz [ 174.367337][ T23] usb 3-1: config 0 descriptor?? [ 174.380052][ T23] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 174.481335][ T9308] loop0: detected capacity change from 0 to 32768 [ 174.542193][ T9308] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 174.803630][ T23] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 174.827894][ T9308] XFS (loop0): Starting recovery (logdev: internal) [ 174.846492][ T23] sq905c 3-1:0.0: Reading version command failed [ 174.861577][ T23] sq905c: probe of 3-1:0.0 failed with error -71 [ 174.894847][ T23] usb 3-1: USB disconnect, device number 9 [ 174.947212][ T9308] XFS (loop0): Ending recovery (logdev: internal) [ 175.073902][ T9342] loop3: detected capacity change from 0 to 4096 [ 175.103298][ T9342] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 175.208115][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 175.218701][ T9342] ntfs: volume version 3.1. [ 175.227606][ T5794] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 175.914139][ T9350] loop1: detected capacity change from 0 to 32768 [ 175.988964][ T9350] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.029670][ T9376] ALSA: mixer_oss: invalid OSS volume ';' [ 176.105558][ T9379] loop2: detected capacity change from 0 to 1024 [ 176.160281][ T9350] XFS (loop1): Ending clean mount [ 176.200094][ T9350] XFS (loop1): Quotacheck needed: Please wait. [ 176.217166][ T9383] xt_HMARK: spi-set and port-set can't be combined [ 176.284822][ T9350] XFS (loop1): Quotacheck: Done. [ 176.405821][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.650963][ T9391] cgroup: none used incorrectly [ 176.874794][ T9396] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.928050][ T9393] loop3: detected capacity change from 0 to 4096 [ 177.071256][ T9400] ALSA: mixer_oss: invalid OSS volume ';' [ 177.264058][ T9408] program syz.2.1615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.297828][ T9409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.325076][ T9409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.352173][ T9409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.372295][ T9409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.405674][ T9412] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1616'. [ 178.555625][ T9467] ip6gre1: entered promiscuous mode [ 178.561392][ T5830] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 178.746955][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 178.765866][ T5830] usb 1-1: config 0 has no interfaces? [ 178.782189][ T5830] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 178.802937][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.823173][ T5830] usb 1-1: Product: syz [ 178.836813][ T5830] usb 1-1: Manufacturer: syz [ 178.841498][ T5830] usb 1-1: SerialNumber: syz [ 178.874525][ T5830] r8152-cfgselector 1-1: config 0 descriptor?? [ 179.100369][ T5830] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 179.242640][ T9487] loop2: detected capacity change from 0 to 4096 [ 179.263438][ T9487] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 179.307521][ T5830] usb 1-1: USB disconnect, device number 9 [ 179.892007][ T9503] loop1: detected capacity change from 0 to 22 [ 179.911785][ T9503] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 179.947091][ T9503] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 179.981370][ T9491] loop3: detected capacity change from 0 to 32768 [ 180.059399][ T5868] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 180.134997][ T9491] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 180.270456][ T9491] XFS (loop3): Starting recovery (logdev: internal) [ 180.342104][ T9491] XFS (loop3): Ending recovery (logdev: internal) [ 180.592826][ T5797] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 180.650909][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 180.677105][ T5868] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 181.446943][ T5830] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 181.499582][ T9557] loop3: detected capacity change from 0 to 512 [ 181.535929][ T9557] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1683: inode has both inline data and extents flags [ 181.548227][ T9562] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 181.565331][ T9557] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1683: couldn't read orphan inode 15 (err -117) [ 181.590352][ T9557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.649213][ T5830] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 181.668188][ T49] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 181.671388][ T5830] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 181.713649][ T49] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 181.722211][ T5830] usb 1-1: config 0 has no interface number 0 [ 181.733942][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.753511][ T5830] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 181.800694][ T5830] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.837512][ T5830] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 181.866686][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.893477][ T5830] usb 1-1: config 0 descriptor?? [ 181.914554][ T9566] delete_channel: no stack [ 182.030630][ T9559] loop1: detected capacity change from 0 to 32768 [ 182.090756][ T9572] autofs4:pid:9572:autofs_fill_super: called with bogus options [ 182.092599][ T9559] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 182.092599][ T9559] [ 182.113712][ T9559] xtLookup: xtSearch returned -5 [ 182.122150][ T9559] free_index: error reading directory table [ 182.140956][ T9559] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 182.140956][ T9559] [ 182.166808][ T9559] xtLookup: xtSearch returned -5 [ 182.186768][ T9559] free_index: error reading directory table [ 182.192909][ T9559] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 182.192909][ T9559] [ 182.198715][ T9570] loop3: detected capacity change from 0 to 4096 [ 182.213592][ T9559] xtLookup: xtSearch returned -5 [ 182.237523][ T9570] ntfs3: loop3: ino=3, Correct links count -> 2. [ 182.249998][ T9559] free_index: error reading directory table [ 182.331517][ T5830] usb 1-1: USB disconnect, device number 10 [ 182.361807][ T9574] netlink: 'syz.2.1690': attribute type 8 has an invalid length. [ 182.565831][ T9577] libceph: resolve 'c' (ret=-3): failed [ 182.707892][ T789] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 182.749413][ T9584] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1691'. [ 183.015699][ T9593] loop2: detected capacity change from 0 to 256 [ 183.307233][ T9604] loop3: detected capacity change from 0 to 256 [ 183.353920][ T9604] FAT-fs (loop3): Directory bread(block 64) failed [ 183.378790][ T9604] FAT-fs (loop3): Directory bread(block 65) failed [ 183.385480][ T9604] FAT-fs (loop3): Directory bread(block 66) failed [ 183.410519][ T9604] FAT-fs (loop3): Directory bread(block 67) failed [ 183.434503][ T9604] FAT-fs (loop3): Directory bread(block 68) failed [ 183.444658][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.454701][ T9604] FAT-fs (loop3): Directory bread(block 69) failed [ 183.472061][ T9604] FAT-fs (loop3): Directory bread(block 70) failed [ 183.479003][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.491950][ T9604] FAT-fs (loop3): Directory bread(block 71) failed [ 183.509845][ T9604] FAT-fs (loop3): Directory bread(block 72) failed [ 183.519806][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.537472][ T9604] FAT-fs (loop3): Directory bread(block 73) failed [ 183.546762][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.638140][ T9615] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1709'. [ 184.002411][ T9623] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 184.165108][ T9627] xt_hashlimit: max too large, truncated to 1048576 [ 184.190991][ T9630] IPv6: Can't replace route, no match found [ 184.191077][ T9627] xt_hashlimit: overflow, try lower: 241/0 [ 184.446378][ T9639] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 184.480441][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 184.554167][ T9617] loop0: detected capacity change from 0 to 32768 [ 184.573367][ T9617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1710 (9617) [ 184.598770][ T9617] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.610255][ T9617] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 184.619350][ T9617] BTRFS info (device loop0): force clearing of disk cache [ 184.630998][ T9617] BTRFS info (device loop0): disabling free space tree [ 184.654679][ T9617] BTRFS info (device loop0): enabling auto defrag [ 184.662108][ T9617] BTRFS info (device loop0): max_inline at 0 [ 184.670323][ T9617] BTRFS info (device loop0): enabling disk space caching [ 184.677729][ T9617] BTRFS info (device loop0): disk space caching is enabled [ 184.754169][ T9617] BTRFS info (device loop0): enabling ssd optimizations [ 184.764391][ T9617] BTRFS info (device loop0): auto enabling async discard [ 184.773865][ T9617] BTRFS info (device loop0): rebuilding free space tree [ 184.794154][ T9617] BTRFS info (device loop0): disabling free space tree [ 184.803497][ T9617] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.814841][ T9617] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.871378][ T9617] BTRFS info (device loop0: state M): disabling disk space caching [ 184.882124][ T9617] BTRFS info (device loop0: state M): cleaning free space cache v1 [ 184.938693][ T5794] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.243224][ T9671] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1722'. [ 185.344246][ T9673] loop3: detected capacity change from 0 to 512 [ 185.388150][ T9673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.488044][ T9679] openvswitch: netlink: Message has 4 unknown bytes. [ 185.496337][ T9673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.517529][ T9673] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.744901][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.756795][ T28] audit: type=1326 audit(1763382489.287:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 185.790482][ T9688] xt_TCPMSS: Only works on TCP SYN packets [ 185.829808][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 185.866991][ T28] audit: type=1326 audit(1763382489.287:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 185.955124][ T28] audit: type=1326 audit(1763382489.297:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 185.955168][ T28] audit: type=1326 audit(1763382489.297:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254d38f6c9 code=0x7ffc0000 [ 186.023523][ T9701] cgroup: noprefix used incorrectly [ 186.311691][ T9632] Bluetooth: hci2: command 0x0406 tx timeout [ 186.315687][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 186.317815][ T9632] Bluetooth: hci0: command 0x0406 tx timeout [ 186.323764][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 186.510160][ T9716] loop3: detected capacity change from 0 to 4096 [ 186.874190][ T9732] loop1: detected capacity change from 0 to 512 [ 186.906294][ T9732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.946228][ T9732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.980455][ T9732] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 186.988523][ T9732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 186.998518][ T9732] System zones: 0-1, 15-15, 18-18, 34-34 [ 187.007428][ T9732] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.013928][ T9732] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 187.028048][ T9732] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.042879][ T9732] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 187.070105][ T9732] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1756: bg 0: block 40: padding at end of block bitmap is not set [ 187.099683][ T9732] EXT4-fs (loop1): Remounting filesystem read-only [ 187.106358][ T9732] EXT4-fs (loop1): 1 truncate cleaned up [ 187.109904][ T9739] loop0: detected capacity change from 0 to 512 [ 187.148076][ T9732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.174853][ T9739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.214125][ T9739] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.348541][ T9747] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 187.363259][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.389401][ T9739] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 187.437495][ T9739] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512 [ 187.476714][ T9739] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1760: Failed to acquire dquot type 0 [ 187.628750][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.782289][ T9741] loop2: detected capacity change from 0 to 32768 [ 187.809013][ T9741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1759 (9741) [ 187.866828][ T9741] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.887655][ T9756] loop1: detected capacity change from 0 to 4096 [ 187.888601][ T9741] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.927049][ T9741] BTRFS info (device loop2): force clearing of disk cache [ 187.945204][ T9741] BTRFS info (device loop2): disabling free space tree [ 187.976001][ T9741] BTRFS info (device loop2): enabling auto defrag [ 187.984169][ T9741] BTRFS info (device loop2): max_inline at 0 [ 188.021730][ T9741] BTRFS info (device loop2): enabling disk space caching [ 188.044321][ T9741] BTRFS info (device loop2): disk space caching is enabled [ 188.174687][ T9784] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 188.194443][ T9741] BTRFS info (device loop2): enabling ssd optimizations [ 188.236544][ T9741] BTRFS info (device loop2): auto enabling async discard [ 188.259722][ T9741] BTRFS info (device loop2): rebuilding free space tree [ 188.324749][ T9741] BTRFS info (device loop2): disabling free space tree [ 188.347368][ T9741] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.366045][ T9741] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.628084][ T9741] BTRFS info (device loop2: state M): disabling disk space caching [ 188.679225][ T9741] BTRFS info (device loop2: state M): cleaning free space cache v1 [ 188.797683][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.954632][ T9807] loop0: detected capacity change from 0 to 2048 [ 189.012481][ T9807] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.033237][ T9811] xt_connbytes: Forcing CT accounting to be enabled [ 189.309069][ T9816] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.612312][ T9821] loop3: detected capacity change from 0 to 256 [ 189.639464][ T9821] exfat: Deprecated parameter 'namecase' [ 189.721671][ T9821] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 190.127934][ T9837] loop1: detected capacity change from 0 to 1764 [ 190.134540][ T9835] loop3: detected capacity change from 0 to 4096 [ 190.152833][ T9835] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 190.257316][ T9835] ntfs3: loop3: failed to convert "c46c" to macromanian [ 190.896897][ T789] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.041805][ T9877] loop2: detected capacity change from 0 to 1024 [ 191.050541][ T9877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.073433][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.092083][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.108013][ T9877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.118756][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.148545][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.150390][ T789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 191.158113][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.176310][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.189475][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.194212][ T9877] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.1810: missing EA_INODE flag [ 191.200216][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.214613][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.220104][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.237277][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 191.249483][ T789] usb 2-1: Product: syz [ 191.261852][ T9877] EXT4-fs (loop2): Remounting filesystem read-only [ 191.276723][ T789] usb 2-1: Manufacturer: syz [ 191.282871][ T789] usb 2-1: SerialNumber: syz [ 191.287181][ T5830] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 191.308588][ T789] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 191.342534][ T5868] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 191.409123][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.797277][ T789] usb 2-1: USB disconnect, device number 11 [ 191.987507][ T23] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 192.387458][ T5868] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 192.412785][ T5868] ath9k_htc: Failed to initialize the device [ 192.434146][ T789] usb 2-1: ath9k_htc: USB layer deinitialized [ 192.438024][ T9933] loop0: detected capacity change from 0 to 64 [ 192.472847][ T9933] hfs: unable to locate alternate MDB [ 192.508263][ T9933] hfs: continuing without an alternate MDB [ 192.570464][ T9936] loop2: detected capacity change from 0 to 1764 [ 193.070925][ T9956] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.230205][ T9960] loop3: detected capacity change from 0 to 4096 [ 193.277423][ T9960] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 193.306345][ T9960] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 193.376974][ T9960] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 193.412296][ T9960] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 193.443289][ T9960] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 193.477882][ T9960] ntfs: volume version 3.1. [ 193.498227][ T9960] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 193.545980][ T9960] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 193.576088][ T9960] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 193.594534][ T9973] loop1: detected capacity change from 0 to 512 [ 193.601328][ T9960] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 193.614256][ T9973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.622053][ T9960] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 193.622145][ T9973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.668182][ T9973] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.730938][ T9973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 193.773701][ T9973] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 193.823164][ T9973] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 193.832263][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 193.846573][ T9973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.865530][ T5868] IPVS: starting estimator thread 0... [ 193.873248][ T9973] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 194.016869][ T9979] IPVS: using max 20 ests per chain, 48000 per kthread [ 194.057286][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.488183][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.494979][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.510130][ T9999] loop1: detected capacity change from 0 to 4096 [ 194.577086][ T9999] ntfs: volume version 3.1. [ 195.066816][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.246529][T10037] loop1: detected capacity change from 0 to 512 [ 195.289511][ T23] usb 1-1: config index 0 descriptor too short (expected 133, got 72) [ 195.310993][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 195.328077][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.336146][ T23] usb 1-1: Product: syz [ 195.351774][T10037] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.360766][ T23] usb 1-1: Manufacturer: syz [ 195.366542][ T23] usb 1-1: SerialNumber: syz [ 195.402062][ T23] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 195.431648][T10037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.474610][ T5830] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.516398][T10037] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.642461][T10048] loop2: detected capacity change from 0 to 4096 [ 195.665312][T10048] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 195.698496][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.836030][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 196.035169][T10056] loop1: detected capacity change from 0 to 256 [ 196.050176][ T5868] usb 1-1: USB disconnect, device number 11 [ 196.114009][T10056] FAT-fs (loop1): Directory bread(block 64) failed [ 196.140310][T10056] FAT-fs (loop1): Directory bread(block 65) failed [ 196.193438][T10056] FAT-fs (loop1): Directory bread(block 66) failed [ 196.224056][T10056] FAT-fs (loop1): Directory bread(block 67) failed [ 196.249351][T10056] FAT-fs (loop1): Directory bread(block 68) failed [ 196.255926][T10056] FAT-fs (loop1): Directory bread(block 69) failed [ 196.287436][T10056] FAT-fs (loop1): Directory bread(block 70) failed [ 196.294025][T10056] FAT-fs (loop1): Directory bread(block 71) failed [ 196.316776][T10056] FAT-fs (loop1): Directory bread(block 72) failed [ 196.323365][T10056] FAT-fs (loop1): Directory bread(block 73) failed [ 196.562543][ T5830] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 196.588801][ T5830] ath9k_htc: Failed to initialize the device [ 196.602849][ T5868] usb 1-1: ath9k_htc: USB layer deinitialized [ 196.981072][T10090] loop3: detected capacity change from 0 to 512 [ 197.009552][T10090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.097194][T10090] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.201655][T10100] __nla_validate_parse: 70 callbacks suppressed [ 197.201673][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 197.229245][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 197.232169][T10090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:421: comm syz.3.1909: bg 0: bad block bitmap checksum [ 197.295020][T10090] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Filesystem failed CRC [ 197.397103][T10108] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 197.404883][T10108] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 197.442638][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.608624][T10116] netlink: 'syz.3.1920': attribute type 5 has an invalid length. [ 197.646845][T10118] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 198.051524][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1931'. [ 198.066986][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1931'. [ 198.224504][T10111] loop1: detected capacity change from 0 to 32768 [ 198.262611][T10111] [ 198.262611][T10111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.262611][T10111] [ 198.339844][T10111] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 198.444245][ T79] [ 198.444245][ T79] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.444245][ T79] [ 198.469092][ T79] [ 198.469092][ T79] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.469092][ T79] [ 198.497190][ T5788] [ 198.497190][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.497190][ T5788] [ 198.524755][ T5788] [ 198.524755][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.524755][ T5788] [ 198.555374][T10149] trusted_key: encrypted_key: master key parameter '' is invalid [ 198.571201][ T113] ================================================================== [ 198.579306][ T113] BUG: KASAN: slab-use-after-free in __mutex_lock+0x6cb/0xcc0 [ 198.586800][ T113] Read of size 8 at addr ffff88807d27d108 by task jfsCommit/113 [ 198.594462][ T113] [ 198.596789][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 198.604000][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.614067][ T113] Call Trace: [ 198.617350][ T113] [ 198.620289][ T113] dump_stack_lvl+0x16c/0x230 [ 198.624981][ T113] ? __lock_acquire+0x7c80/0x7c80 [ 198.630019][ T113] ? show_regs_print_info+0x20/0x20 [ 198.635238][ T113] ? load_image+0x3b0/0x3b0 [ 198.639757][ T113] ? __virt_addr_valid+0x469/0x540 [ 198.644887][ T113] print_report+0xac/0x220 [ 198.649315][ T113] ? __mutex_lock+0x6cb/0xcc0 [ 198.654002][ T113] kasan_report+0x117/0x150 [ 198.658507][ T113] ? __mutex_lock+0x6cb/0xcc0 [ 198.663178][ T113] __mutex_lock+0x6cb/0xcc0 [ 198.667673][ T113] ? __mutex_lock+0x4e8/0xcc0 [ 198.672344][ T113] ? jfs_syncpt+0x25/0x90 [ 198.676659][ T113] ? mutex_lock_nested+0x20/0x20 [ 198.681587][ T113] ? __rwlock_init+0x150/0x150 [ 198.686340][ T113] jfs_syncpt+0x25/0x90 [ 198.690481][ T113] txEnd+0x2e5/0x520 [ 198.694362][ T113] jfs_lazycommit+0x5a6/0xa60 [ 198.699030][ T113] ? txFreelock+0x5a0/0x5a0 [ 198.703520][ T113] ? do_task_dead+0xd0/0xd0 [ 198.708017][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 198.712955][ T113] kthread+0x2fa/0x390 [ 198.717010][ T113] ? txFreelock+0x5a0/0x5a0 [ 198.721503][ T113] ? kthread_blkcg+0xd0/0xd0 [ 198.726080][ T113] ret_from_fork+0x48/0x80 [ 198.730483][ T113] ? kthread_blkcg+0xd0/0xd0 [ 198.735061][ T113] ret_from_fork_asm+0x11/0x20 [ 198.739820][ T113] [ 198.742825][ T113] [ 198.745145][ T113] Allocated by task 10111: [ 198.749544][ T113] kasan_set_track+0x4e/0x70 [ 198.754121][ T113] __kasan_kmalloc+0x8f/0xa0 [ 198.758698][ T113] lmLogOpen+0x2df/0xfb0 [ 198.762926][ T113] jfs_mount_rw+0xea/0x670 [ 198.767327][ T113] jfs_fill_super+0x592/0xac0 [ 198.772003][ T113] mount_bdev+0x22b/0x2d0 [ 198.776314][ T113] legacy_get_tree+0xea/0x180 [ 198.780978][ T113] vfs_get_tree+0x8c/0x280 [ 198.785378][ T113] do_new_mount+0x24b/0xa40 [ 198.789865][ T113] __se_sys_mount+0x2da/0x3c0 [ 198.794526][ T113] do_syscall_64+0x55/0xb0 [ 198.798934][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.804811][ T113] [ 198.807121][ T113] Freed by task 5788: [ 198.811080][ T113] kasan_set_track+0x4e/0x70 [ 198.815655][ T113] kasan_save_free_info+0x2e/0x50 [ 198.820669][ T113] ____kasan_slab_free+0x126/0x1e0 [ 198.825766][ T113] slab_free_freelist_hook+0x130/0x1b0 [ 198.831218][ T113] __kmem_cache_free+0xba/0x1f0 [ 198.836056][ T113] lmLogClose+0x297/0x520 [ 198.840369][ T113] jfs_umount+0x2ef/0x3c0 [ 198.844687][ T113] jfs_put_super+0x8c/0x190 [ 198.849175][ T113] generic_shutdown_super+0x134/0x2b0 [ 198.854537][ T113] kill_block_super+0x44/0x90 [ 198.859201][ T113] deactivate_locked_super+0x97/0x100 [ 198.864573][ T113] cleanup_mnt+0x429/0x4c0 [ 198.868986][ T113] task_work_run+0x1ce/0x250 [ 198.873565][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 198.878838][ T113] exit_to_user_mode_prepare+0xf6/0x180 [ 198.884370][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 198.889812][ T113] do_syscall_64+0x61/0xb0 [ 198.894217][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.900095][ T113] [ 198.902408][ T113] The buggy address belongs to the object at ffff88807d27d000 [ 198.902408][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 198.916444][ T113] The buggy address is located 264 bytes inside of [ 198.916444][ T113] freed 1024-byte region [ffff88807d27d000, ffff88807d27d400) [ 198.930309][ T113] [ 198.932617][ T113] The buggy address belongs to the physical page: [ 198.939029][ T113] page:ffffea0001f49e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d278 [ 198.949186][ T113] head:ffffea0001f49e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 198.958116][ T113] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 198.966138][ T113] page_type: 0xffffffff() [ 198.970459][ T113] raw: 00fff00000000840 ffff888017841dc0 dead000000000100 dead000000000122 [ 198.979028][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 198.987605][ T113] page dumped because: kasan: bad access detected [ 198.994011][ T113] page_owner tracks the page as allocated [ 198.999707][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5797, tgid 5797 (syz-executor), ts 63275138039, free_ts 63254200058 [ 199.021052][ T113] post_alloc_hook+0x1cd/0x210 [ 199.025814][ T113] get_page_from_freelist+0x195c/0x19f0 [ 199.031350][ T113] __alloc_pages+0x1e3/0x460 [ 199.035933][ T113] alloc_slab_page+0x5d/0x170 [ 199.040605][ T113] new_slab+0x87/0x2e0 [ 199.044679][ T113] ___slab_alloc+0xc6d/0x1300 [ 199.049345][ T113] __kmem_cache_alloc_node+0x1a2/0x260 [ 199.054792][ T113] __kmalloc_node+0xa4/0x230 [ 199.059490][ T113] qdisc_alloc+0x94/0xa50 [ 199.063866][ T113] qdisc_create_dflt+0x63/0x430 [ 199.068734][ T113] dev_activate+0x397/0x11a0 [ 199.073322][ T113] __dev_open+0x338/0x430 [ 199.077655][ T113] __dev_change_flags+0x20e/0x6a0 [ 199.082668][ T113] dev_change_flags+0x88/0x1a0 [ 199.087419][ T113] do_setlink+0xc74/0x3fb0 [ 199.091833][ T113] rtnl_newlink+0x175b/0x2020 [ 199.096496][ T113] page last free stack trace: [ 199.101155][ T113] free_unref_page_prepare+0x7ce/0x8e0 [ 199.106604][ T113] free_unref_page+0x32/0x2e0 [ 199.111269][ T113] __unfreeze_partials+0x1cf/0x210 [ 199.116369][ T113] put_cpu_partial+0x17c/0x250 [ 199.121121][ T113] __slab_free+0x31d/0x410 [ 199.125528][ T113] qlist_free_all+0x75/0xe0 [ 199.130020][ T113] kasan_quarantine_reduce+0x143/0x160 [ 199.135464][ T113] __kasan_slab_alloc+0x22/0x80 [ 199.140383][ T113] slab_post_alloc_hook+0x6e/0x4d0 [ 199.145480][ T113] __kmem_cache_alloc_node+0x13e/0x260 [ 199.151106][ T113] kmalloc_trace+0x2a/0xe0 [ 199.155517][ T113] __ipv6_dev_mc_inc+0x3fa/0xa90 [ 199.160443][ T113] addrconf_dad_work+0x3c5/0x14e0 [ 199.165466][ T113] process_scheduled_works+0xa45/0x15b0 [ 199.171090][ T113] worker_thread+0xa55/0xfc0 [ 199.175945][ T113] kthread+0x2fa/0x390 [ 199.179998][ T113] [ 199.182299][ T113] Memory state around the buggy address: [ 199.187932][ T113] ffff88807d27d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.195990][ T113] ffff88807d27d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.204034][ T113] >ffff88807d27d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.212077][ T113] ^ [ 199.216385][ T113] ffff88807d27d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.224428][ T113] ffff88807d27d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.232470][ T113] ================================================================== [ 199.241221][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.248433][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 199.255631][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.265696][ T113] Call Trace: [ 199.268985][ T113] [ 199.271939][ T113] dump_stack_lvl+0x16c/0x230 [ 199.276625][ T113] ? show_regs_print_info+0x20/0x20 [ 199.281832][ T113] ? load_image+0x3b0/0x3b0 [ 199.286347][ T113] panic+0x2c0/0x710 [ 199.290250][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 199.294756][ T113] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 199.300659][ T113] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 199.306802][ T113] ? _raw_spin_unlock+0x40/0x40 [ 199.311685][ T113] ? print_memory_metadata+0x314/0x400 [ 199.317157][ T113] ? __mutex_lock+0x6cb/0xcc0 [ 199.321849][ T113] check_panic_on_warn+0x84/0xa0 [ 199.326800][ T113] ? __mutex_lock+0x6cb/0xcc0 [ 199.331477][ T113] end_report+0x6f/0x140 [ 199.335712][ T113] kasan_report+0x128/0x150 [ 199.340289][ T113] ? __mutex_lock+0x6cb/0xcc0 [ 199.344960][ T113] __mutex_lock+0x6cb/0xcc0 [ 199.349455][ T113] ? __mutex_lock+0x4e8/0xcc0 [ 199.354122][ T113] ? jfs_syncpt+0x25/0x90 [ 199.358438][ T113] ? mutex_lock_nested+0x20/0x20 [ 199.363365][ T113] ? __rwlock_init+0x150/0x150 [ 199.368117][ T113] jfs_syncpt+0x25/0x90 [ 199.372262][ T113] txEnd+0x2e5/0x520 [ 199.376143][ T113] jfs_lazycommit+0x5a6/0xa60 [ 199.380811][ T113] ? txFreelock+0x5a0/0x5a0 [ 199.385303][ T113] ? do_task_dead+0xd0/0xd0 [ 199.389790][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 199.394721][ T113] kthread+0x2fa/0x390 [ 199.398776][ T113] ? txFreelock+0x5a0/0x5a0 [ 199.403263][ T113] ? kthread_blkcg+0xd0/0xd0 [ 199.407840][ T113] ret_from_fork+0x48/0x80 [ 199.412244][ T113] ? kthread_blkcg+0xd0/0xd0 [ 199.416816][ T113] ret_from_fork_asm+0x11/0x20 [ 199.421572][ T113] [ 199.424861][ T113] Kernel Offset: disabled [ 199.429172][ T113] Rebooting in 86400 seconds..