last executing test programs: 8m43.942440795s ago: executing program 3 (id=2528): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='loginuid\x00') write$P9_RVERSION(r0, &(0x7f00000026c0)=ANY=[@ANYRESDEC], 0x15) 8m43.734037576s ago: executing program 3 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) 8m43.329761209s ago: executing program 3 (id=2536): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x0, "a099c0f51ac457a0b8ae219ee49ead58e9df11", 0x0, 0xfffffffa}) 8m43.047232725s ago: executing program 3 (id=2541): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m42.06141854s ago: executing program 3 (id=2549): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xdd424137562ad8cc}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) 8m40.952297882s ago: executing program 3 (id=2565): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x806b0bfc1350e395}) 8m40.556795965s ago: executing program 32 (id=2565): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x806b0bfc1350e395}) 1.708724544s ago: executing program 4 (id=9633): syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x200001, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U9rE0EYx/Hv7E52AyZEMELwYHIzGoT8QW8SsmIwYFxRBPEUiCsKCRED6tHg1UPAaw62vZa+haTtobQkl76KXnIr9LhldhuW9jU8n9v8nuH3JLMvnq3KisTz0fDb92A8Dj6V3vrd9ruz+bxlcgeX9LV5fH/Rgi9oFhrWEzDxYRY+fx0EVn80MOd1C1zAu3WVM8xt9nl5zURDjdDeZAdudM+CaGWc3YUPDIIGqeh8T4OXi/uqwHILHhDiOXFWA87fgA1KOUDoxkWdSvGOgl+zyt7uyevlcefxo2bwt96ePswU7AqwjafSR1byJKtl95Xf9VeNev1pulqzeHJqCvk9Rb/M/ICPCrTps4j6HAr39Xv4o+BftGu9r7LmT/y/8Ifx72iagp92CVRx1u8VUju9/G0Lu6zNNOQG84miSfIiQgghhBBCCCGEEEIIIYQQQgghROIyAAD///VXTgE=") creat(&(0x7f0000000240)='./file1\x00', 0xd) 1.654043038s ago: executing program 0 (id=9636): add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0) 1.392427942s ago: executing program 0 (id=9639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x2400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b) 1.388092442s ago: executing program 5 (id=9640): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 1.346627535s ago: executing program 4 (id=9642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 1.237819221s ago: executing program 1 (id=9643): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.222702081s ago: executing program 0 (id=9644): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) 1.205877932s ago: executing program 2 (id=9645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x10000003, 0xfffffffa, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x8}, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.181065293s ago: executing program 5 (id=9646): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0xc, @capture={0x1000, 0x1, {0x5, 0x4}, 0x8, 0x7}}) 1.06909627s ago: executing program 4 (id=9647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 1.045590191s ago: executing program 1 (id=9648): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@block={'block', 0x3d, 0x800}, 0x0}, {@unhide}, {@utf8}, {@map_normal}, {@map_off, 0x41}, {@session={'session', 0x3d, 0x61}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}.]&['}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x0, 0x633, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) 1.005994674s ago: executing program 2 (id=9649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r0, &(0x7f0000000540), 0x0}, 0x20) 955.201546ms ago: executing program 5 (id=9650): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 954.653376ms ago: executing program 0 (id=9651): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 796.210275ms ago: executing program 4 (id=9652): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0b47d150827b"], 0x0, 0x26, 0x0, 0x0, 0xfffffffd}, 0x28) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e130100"], 0x16) 786.844536ms ago: executing program 1 (id=9653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 764.932507ms ago: executing program 5 (id=9654): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 685.770071ms ago: executing program 2 (id=9655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 649.044454ms ago: executing program 4 (id=9656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x558, 0xffffffff, 0x3d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010100, @multicast2, 0xff000000, 0x0, 'nr0\x00', 'pimreg\x00', {}, {}, 0xe9, 0x3, 0x28}, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x318, 0x340, 0x0, {0x122}, [@common=@inet=@hashlimit3={{0x158}, {'ip_vti0\x00', {0x80, 0x1, 0x1e, 0x3, 0xffff61e9, 0x1, 0x9, 0x3, 0x80, 0x80}, {0x7}}}, @common=@inet=@hashlimit2={{0x150}, {'macsec0\x00', {0x1, 0xe0b6, 0x54, 0x40f, 0xf, 0x1000, 0x1000, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 541.23734ms ago: executing program 1 (id=9657): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x1000000, 0x2, {0x4, 0x1}, 0x3, 0x800}) 489.425603ms ago: executing program 0 (id=9658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 488.789093ms ago: executing program 2 (id=9659): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x460, 0x2041}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 446.771315ms ago: executing program 4 (id=9660): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x4000000, &(0x7f00000001c0)={[{@nolazytime}, {@lazytime}, {@pquota}, {@dax_never}, {}]}, 0xff, 0x98d0, &(0x7f0000013040)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) 446.456705ms ago: executing program 5 (id=9661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 274.766195ms ago: executing program 1 (id=9662): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xfffffffffeffffff) 225.112017ms ago: executing program 2 (id=9663): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x19, 0x1, 0x0, "4749570000000000000000000e00000047002000000000001400", 0x55595659}) 159.411831ms ago: executing program 5 (id=9664): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 28.300269ms ago: executing program 1 (id=9665): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf0, 0x401, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) 25.330638ms ago: executing program 0 (id=9666): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x4, 0x1) 0s ago: executing program 2 (id=9667): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000100)=0xdf9f, 0x12) kernel console output (not intermixed with test programs): ][T30866] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 638.790600][T30866] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 639.081094][T30889] loop4: detected capacity change from 0 to 128 [ 639.108363][T30889] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 639.155930][T30889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.454268][T30906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.503269][T30906] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 639.786822][T30873] loop1: detected capacity change from 0 to 32768 [ 639.861581][T30873] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 639.906005][T30873] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 640.111302][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 640.495101][ T27] audit: type=1326 audit(640.447:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30946 comm="syz.1.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 640.608539][ T27] audit: type=1326 audit(640.477:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30946 comm="syz.1.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 640.726397][ T27] audit: type=1326 audit(640.477:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30946 comm="syz.1.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 640.834716][ T27] audit: type=1326 audit(640.477:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30946 comm="syz.1.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 640.891690][T30913] loop5: detected capacity change from 0 to 32768 [ 640.918315][T30957] loop4: detected capacity change from 0 to 1024 [ 640.937267][T30913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.7500 (30913) [ 641.063182][T30957] hfsplus: trying to free free bnode 0(1) [ 641.073991][T30913] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 641.118552][T30913] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 641.182010][T30913] BTRFS info (device loop5): using free space tree [ 641.304497][ T1105] hfsplus: b-tree write err: -5, ino 4 [ 641.640834][T31014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7523'. [ 641.673375][T30913] BTRFS info (device loop5): enabling ssd optimizations [ 641.820873][ C1] sd 0:0:1:0: [sda] tag#2127 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 641.831426][ C1] sd 0:0:1:0: [sda] tag#2127 CDB: Read(6) 08 00 00 00 03 44 [ 642.070599][T31035] loop1: detected capacity change from 0 to 2048 [ 642.139896][T31035] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.141432][T10952] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.557721][T31055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7535'. [ 642.587824][T31055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7535'. [ 642.609250][T31055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7535'. [ 644.029622][T31141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7560'. [ 644.073201][T31141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7560'. [ 644.097406][T31141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7560'. [ 644.121426][T31145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.434366][T31168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7569'. [ 644.711534][T31179] netlink: 1392 bytes leftover after parsing attributes in process `syz.0.7572'. [ 644.767943][T31183] xt_ecn: cannot match TCP bits for non-tcp packets [ 644.960734][T31189] device bond1 entered promiscuous mode [ 644.973479][T31189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.984442][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7578'. [ 645.262595][T31238] xt_connbytes: Forcing CT accounting to be enabled [ 645.331694][T31247] siw: device registration error -23 [ 647.026810][T31338] loop1: detected capacity change from 0 to 2048 [ 647.158574][T31338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 647.203238][T31338] fscrypt (loop1, inode 14): Error -61 getting encryption context [ 647.368634][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 647.564178][T31366] loop2: detected capacity change from 0 to 4096 [ 647.619116][T31366] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 647.729690][T31366] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 647.783022][T31366] ntfs3: loop2: mft corrupted [ 647.787982][T31366] ntfs3: loop2: Failed to load $Extend. [ 647.860208][T31366] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 648.289464][T31407] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7634'. [ 648.621129][T31423] netlink: 'syz.1.7638': attribute type 7 has an invalid length. [ 648.666275][T31423] netlink: 'syz.1.7638': attribute type 8 has an invalid length. [ 648.711809][T31429] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 648.783314][T31432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7642'. [ 648.929950][T31440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7645'. [ 648.943273][T31440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7645'. [ 649.170702][T31453] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 649.289046][T31461] netlink: 'syz.1.7650': attribute type 2 has an invalid length. [ 649.321707][T31461] netlink: 'syz.1.7650': attribute type 1 has an invalid length. [ 649.623849][T31477] netlink: 'syz.1.7657': attribute type 21 has an invalid length. [ 649.743184][T31487] netlink: 'syz.2.7661': attribute type 21 has an invalid length. [ 649.797087][T31487] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.807237][T31487] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.816197][T31487] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.825111][T31487] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.956242][T31496] loop1: detected capacity change from 0 to 512 [ 650.013900][T31496] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 650.027134][T31502] libceph: resolve '4.' (ret=-3): failed [ 650.079140][T31496] EXT4-fs (loop1): orphan cleanup on readonly fs [ 650.112481][T31496] EXT4-fs error (device loop1): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 650.203696][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.211504][T31496] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #11: comm syz.1.7663: corrupted inode contents [ 650.241497][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.249340][T31496] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #11: comm syz.1.7663: mark_inode_dirty error [ 650.303366][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.323356][T31496] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7663: invalid indirect mapped block 327680 (level 0) [ 650.391045][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.420337][T31496] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #11: comm syz.1.7663: corrupted inode contents [ 650.512274][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.542010][T31496] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 650.564538][T31527] netlink: 'syz.5.7672': attribute type 2 has an invalid length. [ 650.609010][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.618523][T31496] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #11: comm syz.1.7663: corrupted inode contents [ 650.673559][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.680448][T31496] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.7663: mark_inode_dirty error [ 650.721577][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.729402][T31496] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 650.764503][T31496] EXT4-fs (loop1): Remounting filesystem read-only [ 650.771849][T31496] EXT4-fs (loop1): 1 truncate cleaned up [ 650.786172][T31496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 650.988561][T31547] netlink: 'syz.2.7678': attribute type 10 has an invalid length. [ 651.051016][T31547] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7678'. [ 651.066815][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 651.191493][T31551] loop5: detected capacity change from 0 to 2048 [ 651.216702][T31557] netlink: 'syz.4.7680': attribute type 1 has an invalid length. [ 651.267692][T31551] loop5: p1 < > p4 < > [ 651.418643][T31571] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 651.581684][T31592] loop5: detected capacity change from 0 to 64 [ 651.635158][ T4336] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 651.760584][T31601] loop4: detected capacity change from 0 to 16 [ 651.833100][ T4336] usb 2-1: Using ep0 maxpacket: 32 [ 651.840290][T31601] erofs: (device loop4): mounted with root inode @ nid 36. [ 651.855536][ T4336] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 651.893426][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.924957][ T4336] usb 2-1: config 0 descriptor?? [ 651.935245][ T4336] gspca_main: sunplus-2.14.0 probing 041e:400b [ 651.961065][T31601] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 652.025450][T31601] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 652.072414][T31601] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 652.203262][ T4329] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 652.281546][T31629] netlink: 'syz.0.7695': attribute type 10 has an invalid length. [ 652.340025][ T4336] gspca_sunplus: reg_w_riv err -71 [ 652.345819][ T4336] sunplus: probe of 2-1:0.0 failed with error -71 [ 652.359308][T31629] team0: Port device syz_tun added [ 652.384425][ T4336] usb 2-1: USB disconnect, device number 46 [ 652.414968][ T4329] usb 6-1: config 2 interface 0 has no altsetting 0 [ 652.457196][ T4329] usb 6-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 652.493662][ T4329] usb 6-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 652.501861][ T4329] usb 6-1: Product: syz [ 652.525767][ T4329] usb 6-1: Manufacturer: syz [ 652.530472][ T4329] usb 6-1: SerialNumber: syz [ 652.574478][ T4329] usb 6-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 652.615253][ T4329] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 652.661678][ T4329] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 652.675569][ T4329] usb 6-1: media controller created [ 652.727966][ T4329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.786232][ T4329] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 652.796133][ T4329] error writing reg: 0xff, val: 0x00 [ 652.837895][ T4329] dvb_usb_mxl111sf: probe of 6-1:2.0 failed with error -22 [ 652.988849][T31673] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7701'. [ 653.067706][ T4329] usb 6-1: USB disconnect, device number 20 [ 653.639938][T31711] loop4: detected capacity change from 0 to 2048 [ 653.678103][T31711] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 653.823594][T31725] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.957590][T31711] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 653.967545][T31732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7715'. [ 653.989925][T31711] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 654.060485][T31711] Remounting filesystem read-only [ 654.068056][T31711] NILFS (loop4): error -5 truncating bmap (ino=15) [ 654.134661][T31711] syz.4.7708 (31711) used greatest stack depth: 19832 bytes left [ 654.232303][ T4281] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 654.750592][T31778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.767217][T31778] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 655.418508][T31820] loop1: detected capacity change from 0 to 2048 [ 655.447313][T31820] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 655.521413][T31820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.623007][T17426] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 655.700063][T31837] validate_nla: 1 callbacks suppressed [ 655.700084][T31837] netlink: 'syz.2.7747': attribute type 10 has an invalid length. [ 655.807828][T31837] team0: Port device syz_tun added [ 655.823068][T17426] usb 5-1: Using ep0 maxpacket: 8 [ 655.829998][T17426] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 655.843124][T17426] usb 5-1: config 0 has no interface number 0 [ 655.877046][T17426] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 655.903263][T17426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.931978][T17426] usb 5-1: Product: syz [ 655.943136][T17426] usb 5-1: Manufacturer: syz [ 655.948158][T17426] usb 5-1: SerialNumber: syz [ 655.984379][T17426] usb 5-1: config 0 descriptor?? [ 656.126810][T31852] loop0: detected capacity change from 0 to 1764 [ 656.197147][T17426] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 656.209738][T17426] usb 5-1: No valid video chain found. [ 656.406113][ T4329] usb 5-1: USB disconnect, device number 39 [ 656.414444][T17426] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 656.614913][T17426] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 656.631316][T17426] usb 6-1: config 0 has no interface number 0 [ 656.654514][T17426] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 656.683008][T17426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.703003][T17426] usb 6-1: Product: syz [ 656.707260][T17426] usb 6-1: Manufacturer: syz [ 656.733004][T17426] usb 6-1: SerialNumber: syz [ 656.749474][T17426] usb 6-1: config 0 descriptor?? [ 656.833545][T31908] loop2: detected capacity change from 0 to 256 [ 656.850928][T31908] exfat: Deprecated parameter 'utf8' [ 656.949655][T31913] loop1: detected capacity change from 0 to 64 [ 656.984761][ T4329] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 656.985183][T17426] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 657.039191][T17426] usb 6-1: No valid video chain found. [ 657.094564][T17426] usb 6-1: USB disconnect, device number 21 [ 657.184467][ T4329] usb 1-1: Using ep0 maxpacket: 32 [ 657.200851][ T4329] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 657.230549][ T4329] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 657.273199][ T4329] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 657.296809][ T4329] usb 1-1: config 0 interface 0 has no altsetting 1 [ 657.340999][ T4329] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 657.380941][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 657.401220][ T4329] usb 1-1: SerialNumber: syz [ 657.414383][ T4329] usb 1-1: config 0 descriptor?? [ 657.432819][ T4329] usb-storage 1-1:0.0: USB Mass Storage device detected [ 657.471580][ T4329] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 657.691679][ T4979] usb 1-1: USB disconnect, device number 32 [ 657.878424][ T27] audit: type=1326 audit(657.827:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31976 comm="syz.5.7779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 657.935724][ T27] audit: type=1326 audit(657.827:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31976 comm="syz.5.7779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 657.992206][ T27] audit: type=1326 audit(657.827:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31976 comm="syz.5.7779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 658.320300][T31995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7785'. [ 658.585247][T31962] loop4: detected capacity change from 0 to 32768 [ 658.757936][T31962] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 658.853732][T31962] XFS (loop4): Mounting V5 Filesystem [ 659.136824][T31962] XFS (loop4): Ending clean mount [ 659.222558][T32053] loop2: detected capacity change from 0 to 64 [ 659.341846][ T4281] XFS (loop4): Unmounting Filesystem [ 659.399189][T32057] loop0: detected capacity change from 0 to 2048 [ 659.432981][ T5175] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 659.562268][T32057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 659.643071][ T5175] usb 2-1: Using ep0 maxpacket: 32 [ 659.651400][ T5175] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 659.670527][ T5175] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 659.679968][ T5175] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 659.689524][ T5175] usb 2-1: config 1 has no interface number 0 [ 659.696078][ T5175] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.707609][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.715462][ T5175] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 659.731680][T32057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7802: bg 0: block 345: padding at end of block bitmap is not set [ 659.748180][ T5175] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 659.770252][ T5175] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 659.812921][T32057] EXT4-fs (loop0): Remounting filesystem read-only [ 659.820976][ T5175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.877085][ T5175] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 659.989590][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 660.079387][ T5175] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 660.109839][ T5175] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 660.142753][ T5175] snd_usb_pod: probe of 2-1:1.1 failed with error -90 [ 660.197754][T32091] loop5: detected capacity change from 0 to 2048 [ 660.238104][T32091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 660.303753][ T5175] usb 2-1: USB disconnect, device number 47 [ 661.262781][T32155] loop2: detected capacity change from 0 to 4096 [ 661.269437][ T4329] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 661.307746][T32155] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 661.465302][ T4329] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 661.486119][ T4329] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 661.488673][T32166] netlink: 'syz.4.7829': attribute type 3 has an invalid length. [ 661.514151][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.543829][ T4329] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 661.604228][T32166] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7829'. [ 662.029206][T32147] loop1: detected capacity change from 0 to 32768 [ 662.142578][T32147] XFS (loop1): Mounting V5 Filesystem [ 662.289291][T32147] XFS (loop1): Ending clean mount [ 662.346446][T32147] XFS (loop1): Quotacheck needed: Please wait. [ 662.498700][T32147] XFS (loop1): Quotacheck: Done. [ 662.547906][T32225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7843'. [ 662.648277][ T4329] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 662.659136][T32231] No such timeout policy "syz0" [ 662.677354][ T4269] XFS (loop1): Unmounting Filesystem [ 662.826295][T32237] device ip6gre1 entered promiscuous mode [ 662.858840][ T4329] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 662.871041][ T4329] stv0680 6-1:4.0: last error: 85, command = 0x7f [ 662.906391][ T4329] usb 6-1: USB disconnect, device number 22 [ 663.216112][T32259] ipt_CLUSTERIP: bad num_local_nodes 32 [ 663.855371][T32292] IPv6: NLM_F_CREATE should be specified when creating new route [ 664.323114][ T4329] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 664.423056][ T5175] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 664.529905][ T4329] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 664.540378][ T4329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.560878][ T4329] usb 6-1: Product: syz [ 664.571071][ T4329] usb 6-1: Manufacturer: syz [ 664.586109][ T4329] usb 6-1: SerialNumber: syz [ 664.593472][T32341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.613842][ T5175] usb 3-1: Using ep0 maxpacket: 16 [ 664.621438][ T5175] usb 3-1: config 0 has no interfaces? [ 664.643572][ T4329] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 664.653650][ T5175] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 664.684169][ T5175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.710896][ T4329] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 664.712764][ T5175] usb 3-1: Product: syz [ 664.763896][ T5175] usb 3-1: Manufacturer: syz [ 664.768684][ T5175] usb 3-1: SerialNumber: syz [ 664.808540][ T5175] r8152-cfgselector 3-1: config 0 descriptor?? [ 664.930419][ T27] audit: type=1326 audit(664.877:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 665.054051][ T27] audit: type=1326 audit(664.907:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 665.077628][ T5175] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 665.186785][ T27] audit: type=1326 audit(664.907:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f92ae5573ac code=0x7ffc0000 [ 665.215162][T10341] usb 6-1: USB disconnect, device number 23 [ 665.244313][ T27] audit: type=1326 audit(664.907:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f92ae55740e code=0x7ffc0000 [ 665.301478][ T4315] usb 3-1: USB disconnect, device number 31 [ 665.307199][ T27] audit: type=1326 audit(664.907:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92ae59ab4b code=0x7ffc0000 [ 665.380453][ T27] audit: type=1326 audit(664.907:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 665.450028][ T27] audit: type=1326 audit(664.937:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92ae55b78e code=0x7ffc0000 [ 665.537644][ T27] audit: type=1326 audit(664.937:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 665.583217][ T27] audit: type=1326 audit(664.937:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 665.642423][ T27] audit: type=1326 audit(664.937:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.1.7878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 665.845822][ T4329] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 665.871312][ T4329] ath9k_htc: Failed to initialize the device [ 665.888552][T10341] usb 6-1: ath9k_htc: USB layer deinitialized [ 666.105965][T32418] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7894'. [ 666.133158][T32418] tc_dump_action: action bad kind [ 666.334854][T32427] loop1: detected capacity change from 0 to 4096 [ 666.382421][T32427] ntfs: volume version 3.1. [ 666.766061][T32436] loop2: detected capacity change from 0 to 4096 [ 666.797899][T32449] tmpfs: Bad value for 'mpol' [ 666.818671][T32436] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 666.922610][T32436] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 666.947834][T32436] ntfs3: loop2: mft corrupted [ 666.956159][T32436] ntfs3: loop2: Failed to load $Extend. [ 667.027700][T32436] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 668.006220][T32512] loop0: detected capacity change from 0 to 512 [ 668.092286][T32512] EXT4-fs (loop0): orphan cleanup on readonly fs [ 668.119848][T32512] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.7922: EA inode hash validation failed [ 668.149235][T32512] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 668.225744][T32512] EXT4-fs (loop0): 1 orphan inode deleted [ 668.257194][T32512] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 668.448220][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 669.141157][T32584] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (253) [ 669.213020][ T4329] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 669.423023][ T4329] usb 2-1: Using ep0 maxpacket: 16 [ 669.432208][ T4329] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 669.477518][ T4329] usb 2-1: config 0 has no interface number 0 [ 669.502321][ T4329] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 669.540660][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.552985][ T4329] usb 2-1: Product: syz [ 669.557280][ T4329] usb 2-1: Manufacturer: syz [ 669.572249][ T4329] usb 2-1: SerialNumber: syz [ 669.593397][ T4329] usb 2-1: config 0 descriptor?? [ 669.617178][ T4329] hub 2-1:0.132: bad descriptor, ignoring hub [ 669.623919][T32607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 669.643926][ T4329] hub: probe of 2-1:0.132 failed with error -5 [ 669.693687][ T4329] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input35 [ 669.975185][T32638] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 670.183437][ T4329] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 670.374873][ T4329] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 670.400095][ T4329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.449547][ T4329] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 670.471610][ T4329] usb 6-1: config 1 has no interface number 1 [ 670.483266][ T4329] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 670.541504][ T4329] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 670.583773][ T4329] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 670.640380][ T4329] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.678939][ T4329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.702043][ T4329] usb 6-1: Product: syz [ 670.713240][ T4329] usb 6-1: Manufacturer: syz [ 670.731233][ T4329] usb 6-1: SerialNumber: syz [ 670.787874][T32623] loop4: detected capacity change from 0 to 32768 [ 670.986187][ T4329] usb 6-1: MIDIStreaming interface descriptor not found [ 671.099123][ T4329] usb 6-1: USB disconnect, device number 24 [ 671.393624][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.319330][T32767] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 672.408128][T32718] loop1: detected capacity change from 0 to 32768 [ 672.448868][T32718] (syz.1.7976,32718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 672.476186][ T305] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7992'. [ 672.519575][T32718] (syz.1.7976,32718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 672.542985][ T305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.589570][T32718] JBD2: Ignoring recovery information on journal [ 672.763587][T32718] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 672.839934][T32718] ocfs2: Unmounting device (7,1) on (node local) [ 673.377202][ T354] netlink: 'syz.1.8006': attribute type 1 has an invalid length. [ 673.507354][ T358] ipt_CLUSTERIP: no such interface pim6reg0 [ 674.185640][ T4979] usb 2-1: USB disconnect, device number 48 [ 674.663451][ T376] loop4: detected capacity change from 0 to 32768 [ 674.689558][ T376] (syz.4.8013,376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 674.747827][ T376] (syz.4.8013,376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 674.850874][ T376] JBD2: Ignoring recovery information on journal [ 674.981569][ T436] loop5: detected capacity change from 0 to 512 [ 675.019374][ T436] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.8032: bad orphan inode 13 [ 675.041145][ T376] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 675.071445][ T436] ext4_test_bit(bit=12, block=4) = 1 [ 675.125347][ T436] is_bad_inode(inode)=0 [ 675.129594][ T436] NEXT_ORPHAN(inode)=0 [ 675.164250][ T436] max_ino=32 [ 675.167517][ T436] i_nlink=1 [ 675.191859][ T436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 675.277357][ T448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8034'. [ 675.294329][ T436] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.8032: Unrecognised inode hash code 20 [ 675.354703][ T436] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8032: Corrupt directory, running e2fsck is recommended [ 675.458082][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 675.471495][ T399] loop2: detected capacity change from 0 to 32768 [ 675.538551][ T399] [ 675.538551][ T399] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 675.538551][ T399] [ 675.698285][T10952] EXT4-fs (loop5): unmounting filesystem. [ 675.754998][ T4268] [ 675.754998][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 675.754998][ T4268] [ 675.797591][ T4268] [ 675.797591][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 675.797591][ T4268] [ 676.187994][ T483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8044'. [ 676.251944][ T483] netlink: 'syz.2.8044': attribute type 1 has an invalid length. [ 676.279700][ T481] device wlan0 entered promiscuous mode [ 676.413992][ T486] netlink: 'syz.1.8045': attribute type 13 has an invalid length. [ 676.421918][ T486] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8045'. [ 676.444485][ T486] syz_tun: refused to change device tx_queue_len [ 676.471474][ T486] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 676.540511][ T492] loop5: detected capacity change from 0 to 16 [ 676.569221][ T492] erofs: (device loop5): mounted with root inode @ nid 36. [ 676.660408][ T492] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 676.691266][ T492] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 676.739147][ T492] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 676.917172][ T466] loop0: detected capacity change from 0 to 32768 [ 676.969461][ T466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8041 (466) [ 677.068463][ T466] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 677.113023][ T466] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 677.149528][ T466] BTRFS info (device loop0): using free space tree [ 677.209650][ T473] loop4: detected capacity change from 0 to 32768 [ 677.394577][ T473] XFS (loop4): Mounting V5 Filesystem [ 677.446852][ T466] BTRFS info (device loop0): enabling ssd optimizations [ 677.585508][ T473] XFS (loop4): Ending clean mount [ 677.684288][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 677.801174][ T4281] XFS (loop4): Unmounting Filesystem [ 678.891370][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 678.891388][ T27] audit: type=1326 audit(678.837:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=606 comm="syz.1.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 678.974629][ T27] audit: type=1326 audit(678.887:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=606 comm="syz.1.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 679.009138][ T27] audit: type=1326 audit(678.887:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=606 comm="syz.1.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 679.088339][ T27] audit: type=1326 audit(678.887:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=606 comm="syz.1.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ae59aeb9 code=0x7ffc0000 [ 679.203522][ T27] audit: type=1326 audit(678.987:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=611 comm="syz.2.8075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 679.290860][ T27] audit: type=1326 audit(678.987:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=611 comm="syz.2.8075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 679.373033][ T27] audit: type=1326 audit(678.987:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=611 comm="syz.2.8075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 679.463415][ T27] audit: type=1326 audit(678.987:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=611 comm="syz.2.8075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 679.544646][ T27] audit: type=1326 audit(678.987:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=611 comm="syz.2.8075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 679.610641][ T638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8083'. [ 679.639512][ T27] audit: type=1326 audit(679.007:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=611 comm="syz.2.8075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 680.405878][ T688] loop1: detected capacity change from 0 to 128 [ 680.412954][ T5175] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 680.489293][ T688] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 680.523975][ T688] FAT-fs (loop1): Filesystem has been set read-only [ 680.613123][ T5175] usb 6-1: Using ep0 maxpacket: 8 [ 680.626581][ T5175] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 680.656271][ T5175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.673355][ T4269] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 680.686845][ T5175] usb 6-1: Product: syz [ 680.691089][ T5175] usb 6-1: Manufacturer: syz [ 680.731925][ T5175] usb 6-1: SerialNumber: syz [ 680.771265][ T5175] usb 6-1: config 0 descriptor?? [ 680.799205][ T5175] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 681.084789][ T720] loop2: detected capacity change from 0 to 128 [ 681.160896][ T720] syz.2.8105: attempt to access beyond end of device [ 681.160896][ T720] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 681.198519][ T5175] gspca_vc032x: reg_w err -71 [ 681.203654][ T5175] vc032x: probe of 6-1:0.0 failed with error -71 [ 681.238663][ T5175] usb 6-1: USB disconnect, device number 25 [ 681.274560][ T720] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 681.413961][ T4268] sysv_free_block: flc_count > flc_size [ 681.432509][ T4268] sysv_free_block: flc_count > flc_size [ 681.450225][ T4268] sysv_free_block: flc_count > flc_size [ 681.470504][ T4268] sysv_free_block: flc_count > flc_size [ 681.489220][ T741] device sit2 entered promiscuous mode [ 681.496448][ T4268] sysv_free_block: flc_count > flc_size [ 681.502106][ T4268] sysv_free_block: flc_count > flc_size [ 681.518359][ T4268] sysv_free_block: flc_count > flc_size [ 681.528496][ T4268] sysv_free_block: flc_count > flc_size [ 681.553253][ T4268] sysv_free_block: flc_count > flc_size [ 681.582914][ T4268] sysv_free_block: flc_count > flc_size [ 681.590083][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 681.952763][ T780] loop5: detected capacity change from 0 to 512 [ 681.978682][ T777] loop4: detected capacity change from 0 to 2048 [ 682.004730][ T780] EXT4-fs: Ignoring removed bh option [ 682.024726][ T777] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 682.049591][ T789] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2) [ 682.068361][ T777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 682.090818][ T780] EXT4-fs (loop5): orphan cleanup on readonly fs [ 682.181962][ T780] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #11: block 1: comm syz.5.8119: lblock 0 mapped to illegal pblock 1 (length 1) [ 682.231080][ T780] EXT4-fs (loop5): Remounting filesystem read-only [ 682.244205][ T780] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.8119: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 682.303780][ T780] EXT4-fs (loop5): Remounting filesystem read-only [ 682.323539][ T780] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.8119: ea_inode dec ref err=-117 [ 682.359742][ T780] EXT4-fs (loop5): 1 orphan inode deleted [ 682.382172][ T780] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 682.646974][T10952] EXT4-fs (loop5): unmounting filesystem. [ 683.307439][ T848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8139'. [ 683.325417][ T848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8139'. [ 683.610042][ T856] device bridge2 entered promiscuous mode [ 683.836687][ T870] netlink: 'syz.4.8146': attribute type 21 has an invalid length. [ 683.875395][ T870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8146'. [ 684.187552][ T890] device wlan0 entered promiscuous mode [ 684.837500][ T932] netlink: 'syz.1.8160': attribute type 21 has an invalid length. [ 684.862975][ T932] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8160'. [ 684.893184][ T932] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8160'. [ 684.931190][ T934] netlink: 'syz.5.8161': attribute type 21 has an invalid length. [ 685.208953][ T946] IPv6: Can't replace route, no match found [ 685.526481][ T911] loop0: detected capacity change from 0 to 32768 [ 685.630333][ T911] XFS (loop0): Mounting V5 Filesystem [ 685.729309][ T911] XFS (loop0): Ending clean mount [ 685.736535][ T911] XFS (loop0): Quotacheck needed: Please wait. [ 685.743079][ T5175] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 685.766513][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.773294][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.819166][ T981] netlink: 'syz.5.8174': attribute type 3 has an invalid length. [ 685.828424][ T981] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8174'. [ 685.932786][ T911] XFS (loop0): Quotacheck: Done. [ 685.938169][ T5175] usb 2-1: Using ep0 maxpacket: 8 [ 685.947474][ T5175] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 685.963142][ T5175] usb 2-1: config 179 has no interface number 0 [ 685.984545][ T5175] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 686.018821][ T5175] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 686.056961][ T5175] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 686.109094][ T5175] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 686.151470][ T5175] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 686.186096][ T5175] usb 2-1: config 179 interface 65 has no altsetting 0 [ 686.206360][ T5175] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 686.231136][ T5175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.297263][ T4273] XFS (loop0): Unmounting Filesystem [ 686.345175][ T5175] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input36 [ 686.478768][ T1011] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 686.669930][ T1019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8181'. [ 686.689585][ T1019] netlink: 'syz.4.8181': attribute type 2 has an invalid length. [ 686.770103][ T576] usb 2-1: USB disconnect, device number 49 [ 686.770276][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 686.786132][ T576] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 687.207910][ T1055] loop2: detected capacity change from 0 to 256 [ 687.318968][ T1065] loop4: detected capacity change from 0 to 1024 [ 687.344912][ T1065] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62564!=20869) [ 687.404539][ T1065] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.8189: Invalid inode table block 0 in block_group 0 [ 687.444153][ T1070] netlink: 'syz.1.8190': attribute type 1 has an invalid length. [ 687.469947][ T1065] EXT4-fs (loop4): no journal found [ 687.587210][ T576] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 687.813084][ T576] usb 3-1: Using ep0 maxpacket: 32 [ 687.838609][ T576] usb 3-1: config 4 has an invalid interface number: 228 but max is 0 [ 687.864727][ T576] usb 3-1: config 4 has no interface number 0 [ 687.870940][ T576] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 687.916669][ T576] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 687.943314][ T576] usb 3-1: config 4 interface 228 has no altsetting 0 [ 687.952575][ T576] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 687.973041][ T576] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 687.981646][ T576] usb 3-1: Product: syz [ 688.005159][ T576] usb 3-1: Manufacturer: syz [ 688.009936][ T576] usb 3-1: SerialNumber: syz [ 688.270355][ T576] usb 3-1: invalid MIDI in EP 0 [ 688.385120][ T576] snd-usb-audio: probe of 3-1:4.228 failed with error -22 [ 688.430066][ T576] usb 3-1: USB disconnect, device number 32 [ 688.719372][T19073] udevd[19073]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.785249][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 688.785266][ T27] audit: type=1326 audit(688.737:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 688.894648][ T27] audit: type=1326 audit(688.777:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 688.964759][ T27] audit: type=1326 audit(688.777:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1153 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 689.289017][ T1097] loop0: detected capacity change from 0 to 32768 [ 689.335691][ T1180] netlink: 'syz.1.8212': attribute type 9 has an invalid length. [ 689.461239][ T1185] tmpfs: Bad value for 'mpol' [ 689.822618][ T1209] loop4: detected capacity change from 0 to 1024 [ 689.945582][ T5175] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 690.143248][ T5175] usb 6-1: Using ep0 maxpacket: 8 [ 690.159692][ T5175] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 690.193024][ T5175] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.244909][ T5175] usb 6-1: config 0 has no interface number 0 [ 690.271936][ T5175] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 690.310000][ T1233] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 690.316718][ T5175] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 690.338151][ T5175] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.392968][ T5175] usb 6-1: config 0 interface 52 has no altsetting 0 [ 690.422386][ T5175] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 690.434681][ T5175] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 690.450197][ T5175] usb 6-1: Product: syz [ 690.455614][ T5175] usb 6-1: SerialNumber: syz [ 690.493581][ T5175] usb 6-1: config 0 descriptor?? [ 690.502182][ T1241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8230'. [ 690.541230][ T1241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8230'. [ 690.551931][ T1241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8230'. [ 690.587010][ T1249] loop4: detected capacity change from 0 to 512 [ 690.685542][ T1249] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.723370][ T5175] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input37 [ 690.769994][ T3623] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 690.867570][ T3623] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 690.932462][ T3623] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 690.949533][ T6774] usb 6-1: USB disconnect, device number 26 [ 691.199872][ T1295] vivid-000: ================= START STATUS ================= [ 691.264563][ T1295] vivid-000: Generate PTS: true [ 691.292703][ T1295] vivid-000: Generate SCR: true [ 691.298787][ T1295] tpg source WxH: 320x180 (R'G'B) [ 691.319933][ T1295] tpg field: 1 [ 691.324298][ T1295] tpg crop: 320x180@0x0 [ 691.329857][ T1295] tpg compose: 320x180@0x0 [ 691.338980][ T1304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8241'. [ 691.342932][ T1295] tpg colorspace: 3 [ 691.352161][ T1295] tpg transfer function: 2/2 [ 691.371706][ T1295] tpg quantization: 2/2 [ 691.382191][ T1295] tpg RGB range: 0/2 [ 691.387647][ T1295] vivid-000: ================== END STATUS ================== [ 691.889646][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.094156][ T1342] netlink: 'syz.2.8254': attribute type 10 has an invalid length. [ 692.351819][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 692.420421][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.427912][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.479482][ T1342] team0 (unregistering): Port device bridge0 removed [ 692.537264][ T1342] team0 (unregistering): Port device syz_tun removed [ 693.331938][ T1419] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 693.618327][ T576] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 693.699886][ T1472] comedi comedi0: Minor 2147483647 is invalid! [ 693.835078][ T576] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 693.854643][ T576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.882601][ T576] usb 6-1: config 0 descriptor?? [ 694.110940][ T576] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 694.132948][ T576] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 694.255256][ T1411] loop2: detected capacity change from 0 to 40427 [ 694.314202][ T576] [drm:udl_init] *ERROR* Selecting channel failed [ 694.332111][ T1411] F2FS-fs (loop2): Unrecognized mount option "ÿÿÿÿ" or missing value [ 694.372425][ T1411] F2FS-fs (loop2): invalid crc value [ 694.388030][ T1411] F2FS-fs (loop2): Found nat_bits in checkpoint [ 694.425737][ T576] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 694.458213][ T576] [drm] Initialized udl on minor 2 [ 694.485410][ T576] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 694.534829][ T576] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 694.571228][ T1411] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 694.583111][ T576] usb 6-1: USB disconnect, device number 27 [ 694.613623][ T6770] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 694.645629][ T6770] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 694.656722][ T1522] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 694.674705][ T6770] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 695.197745][ T1552] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8301'. [ 695.623092][ T6770] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 695.640225][ T1577] loop5: detected capacity change from 0 to 1024 [ 695.707214][ T1577] hfsplus: invalid file type 0174377 for inode 21 [ 695.854954][ T6770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 695.885617][ T6770] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 695.906572][ T1582] loop2: detected capacity change from 0 to 4096 [ 695.941092][ T6770] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 695.963360][ T6770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.004310][ T1582] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 696.024268][ T6770] usb 1-1: Product: syz [ 696.028730][ T1105] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 696.035435][ T1582] ntfs3: loop2: ntfs_sync_fs r=19 failed, -22. [ 696.042181][ T1582] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 696.062954][ T6770] usb 1-1: Manufacturer: syz [ 696.074681][ T6770] usb 1-1: SerialNumber: syz [ 696.080431][ T1582] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 696.114327][ T6770] usb 1-1: config 0 descriptor?? [ 696.126150][ T1582] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 696.163091][ T1597] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 696.176437][ T1582] ntfs3: loop2: ntfs_evict_inode r=19 failed, -22. [ 696.193050][ T1582] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 696.209228][ T1582] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 696.589670][ T5175] usb 1-1: USB disconnect, device number 33 [ 696.772074][ T1643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8318'. [ 696.921002][ T52] block nbd4: Attempted send on invalid socket [ 696.927823][ T52] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.953340][ T1648] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 697.947716][ T1709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8339'. [ 697.976854][ T1709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8339'. [ 698.375852][ T1735] netlink: 'syz.4.8349': attribute type 10 has an invalid length. [ 698.414648][ T1735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8349'. [ 698.469544][ T1735] batman_adv: batadv0: Adding interface: vlan1 [ 698.498343][ T1735] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.558290][ T1735] batman_adv: batadv0: Interface activated: vlan1 [ 698.740552][ T27] audit: type=1326 audit(698.687:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1751 comm="syz.5.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 698.832986][ T27] audit: type=1326 audit(698.717:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1751 comm="syz.5.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 698.923110][ T1760] netlink: 'syz.4.8358': attribute type 39 has an invalid length. [ 698.926593][ T27] audit: type=1326 audit(698.717:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1751 comm="syz.5.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 699.044541][ T27] audit: type=1326 audit(698.717:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1751 comm="syz.5.8354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 699.553102][ T6770] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 699.755870][ T6770] usb 5-1: unable to get BOS descriptor or descriptor too short [ 699.783280][ T6770] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.800316][ T1815] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8373'. [ 699.817695][ T6770] usb 5-1: New USB device found, idVendor=04b8, idProduct=ef02, bcdDevice= 0.3f [ 699.847294][ T6770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.866694][ T6770] usb 5-1: Product: syz [ 699.875754][ T6770] usb 5-1: Manufacturer: syz [ 699.890705][ T6770] usb 5-1: SerialNumber: syz [ 700.128849][ T6770] usb 5-1: USB disconnect, device number 40 [ 700.175416][ T576] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 700.373126][ T576] usb 1-1: Using ep0 maxpacket: 8 [ 700.381115][ T576] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 700.409858][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8385'. [ 700.419185][ T576] usb 1-1: config 179 has no interface number 0 [ 700.431053][ T576] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 700.483102][ T576] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 700.528635][ T576] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 700.571106][ T576] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 700.595498][ T576] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 700.613183][ T576] usb 1-1: config 179 interface 65 has no altsetting 0 [ 700.620296][ T576] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 700.629583][ T576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.653702][ T576] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input39 [ 700.801537][ T1886] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8388'. [ 700.909849][ T1888] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8390'. [ 701.099346][ T576] usb 1-1: USB disconnect, device number 34 [ 701.105446][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 701.170355][ T576] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 701.178225][ T1904] loop4: detected capacity change from 0 to 256 [ 701.274285][ T1907] netlink: 'syz.5.8394': attribute type 10 has an invalid length. [ 701.627350][ T1907] team0 (unregistering): Port device team_slave_0 removed [ 701.679170][ T1907] team0 (unregistering): Port device team_slave_1 removed [ 701.720392][ T1907] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.730549][ T1907] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.767175][ T1907] team0 (unregistering): Port device bridge0 removed [ 701.799269][ T1920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8395'. [ 702.314768][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8407'. [ 702.371622][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8407'. [ 702.420687][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8407'. [ 702.602999][ T5175] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 702.803436][ T5175] usb 3-1: Using ep0 maxpacket: 16 [ 702.828938][ T5175] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 702.859098][ T5175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.867418][ T5175] usb 3-1: Product: syz [ 702.871680][ T5175] usb 3-1: Manufacturer: syz [ 702.904046][ T5175] usb 3-1: SerialNumber: syz [ 702.924635][ T5175] r8152-cfgselector 3-1: config 0 descriptor?? [ 702.981733][ T1999] loop0: detected capacity change from 0 to 1024 [ 703.079518][ T1999] hfsplus: xattr searching failed [ 703.149345][T15690] hfsplus: b-tree write err: -5, ino 4 [ 703.167839][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 703.221987][T17426] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 703.238846][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 703.257411][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 703.270853][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 703.286995][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 703.301504][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 703.316764][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 703.333819][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 703.347574][ T5175] r8152-cfgselector 3-1: Unknown version 0x0000 [ 703.358787][ T5175] r8152-cfgselector 3-1: bad CDC descriptors [ 703.372343][ T5175] r8152-cfgselector 3-1: Unknown version 0x0000 [ 703.378941][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 703.395492][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 703.409720][ T5175] r8152-cfgselector 3-1: USB disconnect, device number 33 [ 703.426477][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 703.439971][T17426] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.460208][T17426] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.481470][T17426] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 703.482149][ T2005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 703.504745][T17426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 703.517581][T17426] usb 5-1: SerialNumber: syz [ 703.746973][T17426] usb 5-1: 0:2 : does not exist [ 703.780801][ T2001] loop5: detected capacity change from 0 to 32768 [ 703.813301][T17426] usb 5-1: USB disconnect, device number 41 [ 703.899739][ T2045] netlink: 'syz.1.8422': attribute type 2 has an invalid length. [ 703.900156][ T2001] ERROR: (device loop5): diAllocBit: iag inconsistent [ 703.900156][ T2001] [ 703.926646][ T2045] device .*! entered promiscuous mode [ 703.945304][ T2001] ERROR: (device loop5): remounting filesystem as read-only [ 703.957030][ T2001] ialloc: diAlloc returned -5! [ 704.046594][ T4608] udevd[4608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.307448][ T2061] VFS: could not find a valid V7 on nullb0. [ 704.488547][ T2073] loop1: detected capacity change from 0 to 128 [ 704.503486][ T2071] netlink: 'syz.5.8431': attribute type 10 has an invalid length. [ 704.812927][ T2083] loop0: detected capacity change from 0 to 512 [ 704.871568][ T2079] netlink: set zone limit has 4 unknown bytes [ 704.882635][ T2083] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 704.923159][ T2083] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 704.968072][ T2083] EXT4-fs (loop0): 1 truncate cleaned up [ 705.005418][ T2083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 705.123226][ T2083] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 705.149157][ T2102] netlink: 'syz.4.8438': attribute type 1 has an invalid length. [ 705.274332][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 705.652482][ T2146] afs: Bad value for 'source' [ 705.672930][ T6770] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 705.875427][ T6770] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 705.893517][ T6770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.949728][ T6770] usb 1-1: config 0 descriptor?? [ 706.174148][ T6770] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 706.207114][ T6770] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 706.233903][ T1126] block nbd1: Attempted send on invalid socket [ 706.240245][ T1126] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 706.271807][ T2186] rdma_rxe: rxe_register_device failed with error -23 [ 706.281278][ T1126] block nbd1: Attempted send on invalid socket [ 706.287868][ T1126] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 706.296809][ T2186] rdma_rxe: failed to add vcan0 [ 706.304634][ T2185] Mount JFS Failure: -5 [ 706.328661][ T2185] jfs_mount failed w/return code = -5 [ 706.384318][ T6770] [drm:udl_init] *ERROR* Selecting channel failed [ 706.474141][ T6770] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 706.482254][ T6770] [drm] Initialized udl on minor 2 [ 706.533048][ T6770] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 706.541262][ T6770] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 706.601669][ T6770] usb 1-1: USB disconnect, device number 35 [ 706.639914][ T126] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 706.667374][ T126] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 706.743016][ T126] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 706.979041][ T2236] loop2: detected capacity change from 0 to 16 [ 707.033854][ T2236] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 707.243133][ T576] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 707.462927][ T576] usb 2-1: Using ep0 maxpacket: 8 [ 707.470375][ T576] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.534215][ T576] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.582980][ T576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.611545][ T576] usb 2-1: Product: syz [ 707.621664][ T576] usb 2-1: Manufacturer: syz [ 707.629703][ T2214] loop5: detected capacity change from 0 to 32768 [ 707.636507][ T576] usb 2-1: SerialNumber: syz [ 707.647078][ T2269] overlayfs: missing 'lowerdir' [ 707.670953][ T576] usb 2-1: bad CDC descriptors [ 707.729099][ T2280] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 707.755845][ T2214] XFS (loop5): Mounting V5 Filesystem [ 707.874877][ T576] usb 2-1: USB disconnect, device number 50 [ 707.908077][ T2214] XFS (loop5): Ending clean mount [ 707.971497][T10952] XFS (loop5): Unmounting Filesystem [ 708.010603][ T2306] loop0: detected capacity change from 0 to 164 [ 708.060408][ T2306] Unable to read rock-ridge attributes [ 708.080605][ T2306] Unable to read rock-ridge attributes [ 708.105243][ T2306] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 708.133112][ T6770] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 708.363232][ T6770] usb 3-1: Using ep0 maxpacket: 8 [ 708.374768][ T6770] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 708.443157][ T6770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.471719][ T6770] usb 3-1: Product: syz [ 708.492113][ T6770] usb 3-1: Manufacturer: syz [ 708.523566][ T6770] usb 3-1: SerialNumber: syz [ 708.537690][ T6770] usb 3-1: config 0 descriptor?? [ 708.778891][ T6770] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 708.816479][ T27] audit: type=1326 audit(708.767:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.4.8485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 708.909373][ T27] audit: type=1326 audit(708.797:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.4.8485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 708.988100][ T6770] usb write operation failed. (-71) [ 709.018355][ T6770] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 709.041278][ T27] audit: type=1326 audit(708.797:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.4.8485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 709.067674][ T6770] dvbdev: DVB: registering new adapter (Terratec H7) [ 709.095411][ T6770] usb 3-1: media controller created [ 709.137359][ T27] audit: type=1326 audit(708.797:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.4.8485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 709.149151][ T6770] usb read operation failed. (-71) [ 709.198656][ T2356] netlink: 'syz.5.8488': attribute type 2 has an invalid length. [ 709.224687][ T6770] usb write operation failed. (-71) [ 709.230991][ T2356] __nla_validate_parse: 79 callbacks suppressed [ 709.231009][ T2356] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8488'. [ 709.252982][ T27] audit: type=1326 audit(708.797:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.4.8485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 709.290207][ T6770] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 709.374085][ T6770] usb 3-1: USB disconnect, device number 34 [ 709.550473][ T2374] xt_addrtype: ipv6 does not support BROADCAST matching [ 709.631080][ T2370] loop1: detected capacity change from 0 to 4096 [ 709.679572][ T2370] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 709.793097][ T2370] ntfs3: loop1: failed to convert "c46c" to cp1251 [ 710.059377][ T2403] netlink: 'syz.2.8498': attribute type 10 has an invalid length. [ 710.092965][ T2403] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8498'. [ 711.091034][ T2444] loop0: detected capacity change from 0 to 32768 [ 711.217914][ T2444] XFS (loop0): Mounting V5 Filesystem [ 711.223894][ T2447] device wlan0 left promiscuous mode [ 711.229664][ T2452] netlink: 'syz.1.8508': attribute type 10 has an invalid length. [ 711.413695][ T2444] XFS (loop0): Ending clean mount [ 711.598925][ T4273] XFS (loop0): Unmounting Filesystem [ 711.701340][ T2452] team0 (unregistering): Port device team_slave_0 removed [ 711.756665][ T2452] team0 (unregistering): Port device team_slave_1 removed [ 711.911389][ T2524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8515'. [ 712.194494][ T2566] netlink: 'syz.1.8524': attribute type 10 has an invalid length. [ 712.272626][ T2572] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 712.437779][ T2584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8528'. [ 712.468488][ T2583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8519'. [ 712.738969][ T2600] loop1: detected capacity change from 0 to 1024 [ 712.781655][ T2608] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 712.785489][ T2606] loop0: detected capacity change from 0 to 256 [ 712.794418][ T2608] (unnamed net_device) (uninitialized): peer notification delay (280) is not a multiple of miimon (100), value rounded to 200 ms [ 712.903685][ T2600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 712.927594][ T2600] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 7: comm syz.1.8534: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 712.963855][ T2600] EXT4-fs (loop1): Remounting filesystem read-only [ 712.995472][ T2608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.014328][ T2606] FAT-fs (loop0): Directory bread(block 64) failed [ 713.050482][ T2606] FAT-fs (loop0): Directory bread(block 65) failed [ 713.073935][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 713.093253][ T2606] FAT-fs (loop0): Directory bread(block 66) failed [ 713.140540][ T2606] FAT-fs (loop0): Directory bread(block 67) failed [ 713.186494][ T2606] FAT-fs (loop0): Directory bread(block 68) failed [ 713.230237][ T2606] FAT-fs (loop0): Directory bread(block 69) failed [ 713.279846][ T2606] FAT-fs (loop0): Directory bread(block 70) failed [ 713.291690][ T2606] FAT-fs (loop0): Directory bread(block 71) failed [ 713.312594][ T2606] FAT-fs (loop0): Directory bread(block 72) failed [ 713.333284][ T2606] FAT-fs (loop0): Directory bread(block 73) failed [ 713.440549][ T27] audit: type=1800 audit(713.387:307): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8533" name="file1" dev="loop0" ino=1048688 res=0 errno=0 [ 713.583945][ T2690] cgroup: subsys name conflicts with all [ 713.833091][ T2706] netlink: 'syz.1.8548': attribute type 21 has an invalid length. [ 713.883022][ T2706] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8548'. [ 713.933185][ T2706] netlink: 'syz.1.8548': attribute type 4 has an invalid length. [ 713.999843][ T2706] netlink: 'syz.1.8548': attribute type 5 has an invalid length. [ 714.033019][ T2706] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8548'. [ 714.090698][ T2718] netlink: 'syz.0.8550': attribute type 21 has an invalid length. [ 714.111364][ T2718] netlink: 'syz.0.8550': attribute type 6 has an invalid length. [ 714.146487][ T2718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8550'. [ 714.418854][ T27] audit: type=1326 audit(714.367:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2735 comm="syz.4.8555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x0 [ 714.736325][ T2743] loop1: detected capacity change from 0 to 4096 [ 714.764906][ T2743] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 714.874092][ T2743] ntfs3: loop1: failed to convert "c46c" to euc-jp [ 714.965019][ T2753] loop2: detected capacity change from 0 to 2048 [ 715.034221][ T2762] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 715.271131][ T2677] loop5: detected capacity change from 0 to 65536 [ 715.294711][ T2762] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 715.355573][ T2762] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 715.403921][ T2787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8569'. [ 715.415320][ T2762] Remounting filesystem read-only [ 715.443436][ T4268] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 715.472998][ T126] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 715.502803][ T2677] XFS (loop5): Mounting V5 Filesystem [ 715.662567][ T2677] XFS (loop5): Ending clean mount [ 715.697382][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 715.707604][ T126] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 715.722522][ T5461] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 715.734121][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.754242][ T126] usb 2-1: Product: syz [ 715.767518][ T126] usb 2-1: Manufacturer: syz [ 715.768602][ T5461] XFS (loop5): Unmount and run xfs_repair [ 715.787679][ T126] usb 2-1: SerialNumber: syz [ 715.812380][ T5461] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 715.827781][ T126] usb 2-1: config 0 descriptor?? [ 715.855795][ T5461] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 715.865610][ T126] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 715.899336][ T5461] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 715.913334][ T2824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8572'. [ 715.963007][ T5461] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 715.972038][ T5461] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 715.991713][ T5461] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 716.011614][ T5461] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 716.062992][ T5461] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 716.075281][ T5461] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 716.088095][ T2677] XFS (loop5): metadata I/O error in "xfs_read_agf+0x2b6/0x630" at daddr 0x1 len 1 error 74 [ 716.121165][ T2677] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54f/0x9c0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 716.174814][ T2677] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 716.283806][ T126] gspca_m5602: Failed to find a sensor [ 716.289351][ T126] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 716.320406][ T126] usb 2-1: USB disconnect, device number 51 [ 716.358577][T10952] XFS (loop5): Unmounting Filesystem [ 716.714534][ T2868] netlink: 'syz.4.8582': attribute type 1 has an invalid length. [ 716.777068][ T5461] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 716.995035][ T5461] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 717.012709][ T5461] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.058663][ T5461] usb 1-1: config 0 has no interface number 0 [ 717.076155][ T5461] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 717.110260][ T5461] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 717.139709][ T5461] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.169890][ T5461] usb 1-1: config 0 interface 52 has no altsetting 0 [ 717.200443][ T5461] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 717.244130][ T5461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 717.299331][ T5461] usb 1-1: SerialNumber: syz [ 717.338854][ T5461] usb 1-1: config 0 descriptor?? [ 717.564939][ T5461] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 717.591559][ T5461] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 717.656262][ T2911] No source specified [ 717.767847][ T6770] usb 1-1: USB disconnect, device number 36 [ 718.729406][ T2968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8608'. [ 718.797129][ T2971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 718.838994][ T2973] loop2: detected capacity change from 0 to 1764 [ 718.973195][ T6770] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 719.051978][ T2985] loop0: detected capacity change from 0 to 128 [ 719.192924][ T6770] usb 6-1: Using ep0 maxpacket: 8 [ 719.200880][ T6770] usb 6-1: unable to get BOS descriptor or descriptor too short [ 719.245640][ T6770] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 719.284675][ T6770] usb 6-1: config 8 has no interface number 0 [ 719.291116][ T6770] usb 6-1: config 8 interface 255 has no altsetting 0 [ 719.342005][ T6770] usb 6-1: string descriptor 0 read error: -22 [ 719.372064][ T6770] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 719.428967][ T6770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.494674][ T3005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 719.711268][ T3014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8621'. [ 719.730239][ T3022] tmpfs: Bad value for 'mpol' [ 719.919565][ T6770] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00. [ 719.978979][ T6770] usb 6-1: USB disconnect, device number 28 [ 720.123862][ T3054] netlink: 'syz.2.8629': attribute type 1 has an invalid length. [ 720.595377][ T3080] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8637'. [ 721.163037][ T5461] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 721.362983][ T5461] usb 6-1: Using ep0 maxpacket: 32 [ 721.384845][ T5461] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 721.420345][ T3136] loop1: detected capacity change from 0 to 64 [ 721.433403][ T5461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.441884][ T5461] usb 6-1: Product: syz [ 721.468843][ T5461] usb 6-1: Manufacturer: syz [ 721.479418][ T5461] usb 6-1: SerialNumber: syz [ 721.500801][ T5461] usb 6-1: config 0 descriptor?? [ 721.743008][ T5461] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 721.752175][ T5461] eb aa 3b 80 9b e4 7a f0 [ 721.800169][ T3159] ieee802154 phy0 wpan0: encryption failed: -90 [ 721.803291][ T5461] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 722.016201][ T5461] usb 6-1: USB disconnect, device number 29 [ 723.457699][ T3287] loop1: detected capacity change from 0 to 64 [ 723.708984][ T3297] netlink: 'syz.0.8691': attribute type 2 has an invalid length. [ 723.754088][ T3297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8691'. [ 723.998760][ T3251] loop4: detected capacity change from 0 to 32768 [ 724.094883][ T3316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8696'. [ 724.130512][ T3271] loop2: detected capacity change from 0 to 32768 [ 724.150540][ T3316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8696'. [ 724.193669][ T4314] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 724.271459][ T3320] loop1: detected capacity change from 0 to 2048 [ 724.367498][ T3320] loop1: p2 < > [ 724.384815][ T4314] usb 6-1: Using ep0 maxpacket: 16 [ 724.392732][ T4314] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 724.432964][ T4314] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 724.469594][ T4314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.509838][ T3638] loop1: p2 < > [ 724.520134][ T4314] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.572909][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.611704][ T4314] usb 6-1: Product: syz [ 724.642211][ T4314] usb 6-1: Manufacturer: syz [ 724.662524][ T4314] usb 6-1: SerialNumber: syz [ 724.782554][ T6821] udevd[6821]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 725.110618][ T4314] usb 6-1: 0:2 : does not exist [ 725.163031][ T4314] usb 6-1: USB disconnect, device number 30 [ 725.423863][ T4608] udevd[4608]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.149004][ T3431] loop1: detected capacity change from 0 to 256 [ 726.303274][ T3367] loop2: detected capacity change from 0 to 32768 [ 726.409066][ T3447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8726'. [ 726.441785][ T3367] XFS (loop2): Mounting V5 Filesystem [ 726.705355][ T3367] XFS (loop2): Ending clean mount [ 726.888743][ T3412] loop0: detected capacity change from 0 to 32768 [ 726.897493][ T4268] XFS (loop2): Unmounting Filesystem [ 726.995360][ T3412] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 726.995360][ T3412] [ 727.322897][ T3485] tmpfs: Bad value for 'mpol' [ 727.800276][ T3508] loop5: detected capacity change from 0 to 164 [ 727.926468][ T3516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8744'. [ 728.456274][ T3538] netlink: 'syz.5.8750': attribute type 10 has an invalid length. [ 728.505373][ T3538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8750'. [ 728.536654][ T3538] bridge0: port 3(dummy0) entered blocking state [ 728.550917][ T3538] bridge0: port 3(dummy0) entered disabled state [ 728.590777][ T3538] device dummy0 entered promiscuous mode [ 728.960088][ T3511] loop4: detected capacity change from 0 to 32768 [ 729.125652][ T3511] XFS (loop4): Mounting V5 Filesystem [ 729.337342][ T3511] XFS (loop4): Ending clean mount [ 729.505291][ T4281] XFS (loop4): Unmounting Filesystem [ 729.641273][ T3599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8768'. [ 730.055614][ T3629] sock: sock_timestamping_bind_phc: sock not bind to device [ 730.398297][ T3646] --map-set only usable from mangle table [ 731.083620][ T3680] loop2: detected capacity change from 0 to 4096 [ 731.160859][ T3680] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 731.193132][ T3680] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 731.213709][ T3694] xt_limit: Overflow, try lower: 65536/2147483648 [ 731.252024][ T3697] netlink: 'syz.0.8794': attribute type 21 has an invalid length. [ 731.273378][ T3680] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 731.321505][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8794'. [ 731.331117][ T3680] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 731.402755][ T3680] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 731.435428][ T3680] ntfs: volume version 3.1. [ 731.491857][ T3680] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 731.523588][ T3680] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 731.603451][ T3680] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 731.630910][ T3680] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 731.675624][ T3680] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 731.743984][ T576] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 731.901559][ T3725] futex_wake_op: syz.0.8803 tries to shift op by 32; fix this program [ 731.955053][ T576] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 731.972888][ T576] usb 2-1: config 0 has no interface number 0 [ 731.999438][ T576] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 732.043917][ T576] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 732.077665][ T576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.106507][ T576] usb 2-1: Product: syz [ 732.113108][ T576] usb 2-1: Manufacturer: syz [ 732.128462][ T3739] netlink: 'syz.2.8808': attribute type 10 has an invalid length. [ 732.136713][ T576] usb 2-1: SerialNumber: syz [ 732.152742][ T3739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8808'. [ 732.173023][ T4314] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 732.173381][ T576] usb 2-1: config 0 descriptor?? [ 732.202712][ T3739] device dummy0 left promiscuous mode [ 732.213660][ T3706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 732.228421][ T576] usb-storage 2-1:0.20: USB Mass Storage device detected [ 732.242168][ T3739] bridge0: port 3(dummy0) entered blocking state [ 732.261281][ T3739] bridge0: port 3(dummy0) entered disabled state [ 732.291107][ T3739] device dummy0 entered promiscuous mode [ 732.298264][ T576] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 732.387032][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 732.457182][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.470395][ T3756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8811'. [ 732.479722][ T576] scsi host1: usb-storage 2-1:0.20 [ 732.489157][ T3756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8811'. [ 732.517201][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.552788][ T4314] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.599208][ T4314] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.636295][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.665176][ T4314] usb 5-1: Product: syz [ 732.669450][ T4314] usb 5-1: Manufacturer: syz [ 732.678392][ T4314] usb 5-1: SerialNumber: syz [ 732.700078][ T576] usb 2-1: USB disconnect, device number 52 [ 732.742074][ T4314] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 732.766893][ T4314] cdc_ncm 5-1:1.0: bind() failure [ 732.994635][ T4314] usb 5-1: USB disconnect, device number 42 [ 733.226703][ T3810] loop2: detected capacity change from 0 to 4096 [ 733.318112][ T3810] ntfs: volume version 3.1. [ 733.493218][ T3821] loop1: detected capacity change from 0 to 2048 [ 733.559338][ T3821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.939967][ T3901] loop4: detected capacity change from 0 to 2048 [ 735.008643][ T3901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.117815][ T3858] loop5: detected capacity change from 0 to 32768 [ 735.239217][ T3922] loop0: detected capacity change from 0 to 1024 [ 735.364935][ T3858] XFS (loop5): Mounting V5 Filesystem [ 735.581250][ T3946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 735.588880][ T3946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 735.631982][ T3858] XFS (loop5): Ending clean mount [ 735.656251][ T3946] vhci_hcd vhci_hcd.0: Device attached [ 735.743521][ T3952] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 735.750138][ T3952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 735.763295][ T3952] vhci_hcd vhci_hcd.0: Device attached [ 735.834827][ T3954] vhci_hcd: connection closed [ 735.845301][ T1105] vhci_hcd: stop threads [ 735.862942][ T3947] vhci_hcd: connection closed [ 735.863725][T10952] XFS (loop5): Unmounting Filesystem [ 735.897649][ T1105] vhci_hcd: release socket [ 735.912944][ T5461] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 735.917512][ T1105] vhci_hcd: disconnect device [ 735.935227][ T3950] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 735.986835][ T1105] vhci_hcd: stop threads [ 735.994148][ T1105] vhci_hcd: release socket [ 736.042073][ T1105] vhci_hcd: disconnect device [ 736.146441][ T3968] loop4: detected capacity change from 0 to 4096 [ 736.188753][ T3968] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 736.251553][ T3974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8864'. [ 736.267082][ T3976] loop1: detected capacity change from 0 to 1024 [ 736.511928][ T1105] hfsplus: b-tree write err: -5, ino 4 [ 737.824762][ T4054] loop5: detected capacity change from 0 to 4096 [ 737.853156][ T4054] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 737.941357][ T4054] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 738.536448][ T4106] loop0: detected capacity change from 0 to 64 [ 738.805522][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.822893][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.849652][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.869806][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.237913][ T4086] loop2: detected capacity change from 0 to 32768 [ 739.337176][ T4086] XFS (loop2): Mounting V5 Filesystem [ 739.544059][ T4086] XFS (loop2): Ending clean mount [ 739.580688][ T4086] XFS (loop2): Quotacheck needed: Please wait. [ 739.709154][ T4086] XFS (loop2): Quotacheck: Done. [ 739.789477][ T4268] XFS (loop2): Unmounting Filesystem [ 740.413881][ T4163] loop4: detected capacity change from 0 to 32768 [ 740.468818][ T4163] (syz.4.8913,4163,0):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=7, slot=0 [ 740.486958][ T4163] (syz.4.8913,4163,0):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 740.507228][ T4163] (syz.4.8913,4163,0):ocfs2_mount_volume:1815 ERROR: status = -22 [ 740.546862][ T4163] (syz.4.8913,4163,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 741.042978][ T5461] vhci_hcd: vhci_device speed not set [ 741.475455][ T4226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8933'. [ 741.514776][ T4226] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 741.777810][ T4237] loop1: detected capacity change from 0 to 512 [ 741.804394][ T4237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 741.847028][ T4237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 741.926490][ T4237] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 741.940465][ T4249] xt_TCPMSS: Only works on TCP SYN packets [ 741.955118][ T4237] System zones: 0-2, 18-18, 34-34 [ 741.957049][ T4214] loop4: detected capacity change from 0 to 32768 [ 742.004169][ T4237] EXT4-fs error (device loop1): ext4_quota_enable:7043: inode #4: comm syz.1.8936: iget: immutable or append flags not allowed on symlinks [ 742.118974][ T4237] EXT4-fs error (device loop1): ext4_quota_enable:7046: comm syz.1.8936: Bad quota inode: 4, type: 1 [ 742.156324][T15699] read_mapping_page failed! [ 742.178105][T15699] ERROR: (device loop4): txCommit: [ 742.178105][T15699] [ 742.186752][ T4237] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 742.229408][T15699] ERROR: (device loop4): remounting filesystem as read-only [ 742.253181][T15699] jfs_write_inode: jfs_commit_inode failed! [ 742.277077][ T4237] EXT4-fs (loop1): mount failed [ 742.357382][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8943'. [ 742.672541][ T4288] loop2: detected capacity change from 0 to 4096 [ 742.804273][ T4317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.838362][ T4320] loop5: detected capacity change from 0 to 128 [ 742.874402][ T4288] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 742.958863][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.977389][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.986575][ T4288] Remounting filesystem read-only [ 743.014818][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.051156][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.785810][ T4407] libceph: resolve '0' (ret=-3): failed [ 744.224773][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.232554][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.293928][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.307616][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.340225][ T4441] QAT: failed to copy from user. [ 744.864089][ T4463] loop4: detected capacity change from 0 to 4096 [ 744.916888][ T4463] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 745.026036][ T4463] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 745.055608][ T4463] ntfs3: loop4: Failed to load $Extend. [ 745.263100][ T126] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 745.345730][ T4446] loop0: detected capacity change from 0 to 32768 [ 745.379534][ T4502] loop1: detected capacity change from 0 to 128 [ 745.397042][ T4502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 745.410744][ T4502] System zones: 1-3, 19-19, 35-36 [ 745.419791][ T4502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 745.456824][ T126] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 745.472912][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.483051][ T126] usb 6-1: Product: syz [ 745.487444][ T126] usb 6-1: Manufacturer: syz [ 745.492324][ T126] usb 6-1: SerialNumber: syz [ 745.499835][ T126] usb 6-1: config 0 descriptor?? [ 745.533362][ T4446] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 745.533362][ T4446] [ 745.546241][ T4446] ERROR: (device loop0): remounting filesystem as read-only [ 745.554216][ T4446] xtLookup: xtSearch returned -5 [ 745.566000][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 745.577662][ T4508] loop2: detected capacity change from 0 to 512 [ 745.610215][ T4446] syz.0.8977 (4446) used greatest stack depth: 19536 bytes left [ 745.626465][ T4508] EXT4-fs: Ignoring removed mblk_io_submit option [ 745.670413][ T4508] EXT4-fs: Ignoring removed bh option [ 745.716065][ T126] hso 6-1:0.0: Can't find BULK IN endpoint [ 745.722477][ T126] usb-storage 6-1:0.0: USB Mass Storage device detected [ 745.756960][ T4508] EXT4-fs (loop2): orphan cleanup on readonly fs [ 745.816169][ T4508] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.8993: bad orphan inode 14 [ 745.872970][ T4508] ext4_test_bit(bit=13, block=18) = 1 [ 745.878668][ T4508] is_bad_inode(inode)=0 [ 745.883376][ T4508] NEXT_ORPHAN(inode)=0 [ 745.887513][ T4508] max_ino=32 [ 745.890899][ T4508] i_nlink=1 [ 745.895829][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 745.954601][ T126] usb 6-1: USB disconnect, device number 31 [ 745.990580][ T4534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8996'. [ 746.043605][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 746.671537][ T4557] loop2: detected capacity change from 0 to 8192 [ 746.701458][ T4557] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 746.803024][ T4557] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 746.813435][ T4557] REISERFS (device loop2): using ordered data mode [ 746.820274][ T4557] reiserfs: using flush barriers [ 746.835745][ T4557] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 746.895763][ T4557] REISERFS (device loop2): checking transaction log (loop2) [ 746.917904][ T4557] REISERFS (device loop2): Using r5 hash to sort names [ 746.936775][ T4557] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 746.967055][ T4557] REISERFS warning (device loop2): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 747.010959][ T4557] REISERFS error (device loop2): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 747.052052][ T4557] REISERFS (device loop2): Remounting filesystem read-only [ 747.205670][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.212111][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.268960][ T4518] loop1: detected capacity change from 0 to 40427 [ 747.354974][ T4518] F2FS-fs (loop1): invalid crc value [ 747.405978][ T4518] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 747.565015][ T4518] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 747.574236][ T5461] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 747.589551][ T4518] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 747.613362][ T4518] F2FS-fs (loop1): Start checkpoint disabled! [ 747.673374][ T4518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 747.768291][ T5461] usb 1-1: config 1 has an invalid interface number: 253 but max is 1 [ 747.810183][ T5461] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.844067][ T5461] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 747.920224][ T5461] usb 1-1: config 1 has no interface number 2 [ 747.942939][ T5461] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.992905][ T5461] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 748.015497][ T4635] xt_hashlimit: max too large, truncated to 1048576 [ 748.026986][ T5461] usb 1-1: config 1 interface 1 has no altsetting 0 [ 748.046250][T15671] kworker/u4:11: attempt to access beyond end of device [ 748.046250][T15671] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 748.064994][ T5461] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.082888][ T5461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.118889][ T5461] usb 1-1: Product: syz [ 748.130651][ T5461] usb 1-1: Manufacturer: syz [ 748.163510][ T5461] usb 1-1: SerialNumber: syz [ 748.208286][ T5461] cdc_ncm 1-1:1.253: CDC Union missing and no IAD found [ 748.245362][ T5461] cdc_ncm 1-1:1.253: bind() failure [ 748.282425][ T4647] loop4: detected capacity change from 0 to 512 [ 748.320049][ T4647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 748.393833][ T4647] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 748.427139][ T4647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 748.485569][ T4647] EXT4-fs (loop4): orphan cleanup on readonly fs [ 748.543005][ T4647] __quota_error: 12 callbacks suppressed [ 748.543027][ T4647] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 748.596206][ T4647] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 748.648593][ T126] usb 1-1: USB disconnect, device number 37 [ 748.671930][ T4647] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 748.717104][ T4647] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9027: bg 0: block 40: padding at end of block bitmap is not set [ 748.767237][ T4647] EXT4-fs (loop4): Remounting filesystem read-only [ 748.774766][ T4647] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 748.787113][ T4647] EXT4-fs (loop4): Remounting filesystem read-only [ 748.794277][ T4647] EXT4-fs (loop4): 1 truncate cleaned up [ 748.800160][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 748.984044][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 749.229143][ T4696] loop4: detected capacity change from 0 to 4096 [ 749.294296][ T4696] ntfs3: loop4: MFT: r=b, expect seq=b instead of 1ff! [ 749.312341][ T4696] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 749.362657][ T4696] ntfs3: loop4: Failed to load $Extend. [ 749.389050][ T4713] netlink: 'syz.5.9040': attribute type 2 has an invalid length. [ 749.413143][ T4713] netlink: 'syz.5.9040': attribute type 1 has an invalid length. [ 749.465432][ T126] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 749.675320][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.722690][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.764115][ T126] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 749.833180][ T126] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 749.862690][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.901467][ T126] usb 2-1: config 0 descriptor?? [ 749.923708][ T126] hub 2-1:0.0: USB hub found [ 750.125106][ T126] hub 2-1:0.0: 14 ports detected [ 750.131447][ T126] hub 2-1:0.0: insufficient power available to use all downstream ports [ 750.332590][ T126] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 750.358562][ T126] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 750.448640][ T126] usb 2-1: USB disconnect, device number 53 [ 750.520724][ T4780] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 750.635264][ T4787] delete_channel: no stack [ 751.025916][ T4809] netlink: 'syz.2.9070': attribute type 8 has an invalid length. [ 751.034350][ T4813] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 751.428109][ T27] audit: type=1326 audit(751.377:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 751.524005][ T27] audit: type=1326 audit(751.377:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 751.644452][ T27] audit: type=1326 audit(751.427:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 751.685640][ T27] audit: type=1326 audit(751.427:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 751.775856][ T27] audit: type=1326 audit(751.427:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.2.9078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 751.860673][ T4858] loop1: detected capacity change from 0 to 256 [ 751.883036][ T27] audit: type=1326 audit(751.567:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.5.9081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 751.971996][ T4858] FAT-fs (loop1): Directory bread(block 64) failed [ 751.974523][ T27] audit: type=1326 audit(751.567:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.5.9081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 751.997510][ T4855] loop2: detected capacity change from 0 to 4096 [ 752.013221][ T4858] FAT-fs (loop1): Directory bread(block 65) failed [ 752.019939][ T4858] FAT-fs (loop1): Directory bread(block 66) failed [ 752.031735][ T27] audit: type=1326 audit(751.587:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.5.9081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 752.059115][ T4858] FAT-fs (loop1): Directory bread(block 67) failed [ 752.075444][ T4855] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 752.089817][ T4858] FAT-fs (loop1): Directory bread(block 68) failed [ 752.097493][ T4858] FAT-fs (loop1): Directory bread(block 69) failed [ 752.104791][ T4858] FAT-fs (loop1): Directory bread(block 70) failed [ 752.111813][ T4858] FAT-fs (loop1): Directory bread(block 71) failed [ 752.119286][ T4858] FAT-fs (loop1): Directory bread(block 72) failed [ 752.127161][ T4858] FAT-fs (loop1): Directory bread(block 73) failed [ 752.154170][ T4867] loop0: detected capacity change from 0 to 1024 [ 752.156299][ T4855] ntfs: volume version 3.1. [ 752.203075][ T5461] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 752.347144][ T4829] loop4: detected capacity change from 0 to 32768 [ 752.359220][T15671] hfsplus: b-tree write err: -5, ino 4 [ 752.396958][ T5461] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 752.418573][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 752.470215][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.480955][ T4829] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 752.480955][ T4829] [ 752.491359][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 752.515356][ T4829] ERROR: (device loop4): remounting filesystem as read-only [ 752.545887][ T4829] xtLookup: xtSearch returned -5 [ 752.551339][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 752.594216][ T4829] syz.4.9074 (4829) used greatest stack depth: 18456 bytes left [ 752.605894][ T5461] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 752.637549][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 752.679793][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.713950][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 752.770474][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 752.817950][ T5461] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 752.834702][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 752.872156][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.895360][ T4891] netlink: 'syz.1.9094': attribute type 10 has an invalid length. [ 752.906075][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 752.917880][ T4891] device netdevsim0 entered promiscuous mode [ 752.932984][ T5461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 752.961816][ T5461] usb 6-1: string descriptor 0 read error: -22 [ 752.975524][ T5461] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 752.986896][ T5461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.038988][ T5461] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 753.065536][ T4904] loop0: detected capacity change from 0 to 64 [ 753.277323][ T5461] usb 6-1: USB disconnect, device number 32 [ 753.378674][ T4933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9099'. [ 753.409098][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9099'. [ 753.508908][ T4941] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9101'. [ 753.613109][ T126] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 753.795697][ T4953] loop4: detected capacity change from 0 to 8192 [ 753.822894][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 753.829173][ T4953] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 753.844700][ T126] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 753.868019][ T126] usb 1-1: config 0 has no interface number 0 [ 753.878034][ T4953] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 753.897907][ T126] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 753.920997][ T4953] REISERFS (device loop4): using ordered data mode [ 753.941994][ T126] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 753.956329][ T4953] reiserfs: using flush barriers [ 753.979024][ T4953] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 753.999145][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.023207][ T126] usb 1-1: Product: syz [ 754.031981][ T126] usb 1-1: Manufacturer: syz [ 754.042293][ T4953] REISERFS (device loop4): checking transaction log (loop4) [ 754.057481][ T126] usb 1-1: SerialNumber: syz [ 754.068728][ T126] usb 1-1: config 0 descriptor?? [ 754.095073][ T4925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 754.248984][ T4974] netlink: 'syz.5.9110': attribute type 12 has an invalid length. [ 754.299046][ T4953] REISERFS (device loop4): Using tea hash to sort names [ 754.321566][ T4925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 754.329872][ T4953] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 754.380471][ T4953] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 754.533508][ T4992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9113'. [ 754.569589][ T126] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 754.613227][ T126] asix: probe of 1-1:0.188 failed with error -71 [ 754.653966][ T126] usb 1-1: USB disconnect, device number 38 [ 755.201587][ T5031] loop4: detected capacity change from 0 to 1024 [ 755.709470][ T5069] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 756.134518][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 756.134535][ T27] audit: type=1326 audit(756.087:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.253281][ T27] audit: type=1326 audit(756.087:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.352956][ T27] audit: type=1326 audit(756.087:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.400295][ T5117] comedi comedi0: pcm3724: I/O port conflict (0x3,16) [ 756.413008][ T27] audit: type=1326 audit(756.127:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.512005][ T27] audit: type=1326 audit(756.137:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.614347][ T6774] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 756.622894][ T27] audit: type=1326 audit(756.137:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.693149][ T27] audit: type=1326 audit(756.137:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.738854][ T27] audit: type=1326 audit(756.137:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.0.9143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 756.823011][ T6774] usb 3-1: Using ep0 maxpacket: 32 [ 756.830590][ T6774] usb 3-1: unable to get BOS descriptor or descriptor too short [ 756.860538][ T6774] usb 3-1: config 56 has an invalid interface number: 216 but max is 0 [ 756.894768][ T6774] usb 3-1: config 56 has no interface number 0 [ 756.922319][ T6774] usb 3-1: config 56 interface 216 has no altsetting 0 [ 756.947555][ T6774] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 756.962733][ T6774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.981577][ T6774] usb 3-1: Product: syz [ 756.991763][ T6774] usb 3-1: Manufacturer: syz [ 757.000076][ T6774] usb 3-1: SerialNumber: syz [ 757.029348][ T5152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9160'. [ 757.227524][ T6774] hub 3-1:56.216: bad descriptor, ignoring hub [ 757.244785][ T6774] hub: probe of 3-1:56.216 failed with error -5 [ 757.262609][ T6774] option 3-1:56.216: GSM modem (1-port) converter detected [ 757.323738][ T6774] usb 3-1: USB disconnect, device number 35 [ 757.339594][ T6774] option 3-1:56.216: device disconnected [ 757.639504][ T5204] loop0: detected capacity change from 0 to 512 [ 757.697966][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 757.712760][ T5204] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes [ 757.780792][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 757.956732][ T5223] cgroup: Invalid name [ 758.246762][ T5240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9181'. [ 758.290298][ T5242] netlink: 'syz.5.9182': attribute type 10 has an invalid length. [ 758.476618][ T5195] loop4: detected capacity change from 0 to 32768 [ 758.499577][ T5195] XFS: ikeep mount option is deprecated. [ 758.506090][ T5255] netlink: 'syz.2.9185': attribute type 21 has an invalid length. [ 758.516023][ T5255] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9185'. [ 758.605731][ T5195] XFS (loop4): Mounting V5 Filesystem [ 758.639500][ T5269] loop0: detected capacity change from 0 to 16 [ 758.668157][ T5269] erofs: (device loop0): mounted with root inode @ nid 36. [ 758.684879][ T5269] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 758.694166][ T5269] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 758.792988][ T5269] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 758.805255][ T5278] TCP: TCP_TX_DELAY enabled [ 758.824314][ T5269] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 758.861351][ T5269] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 758.881501][ T5195] XFS (loop4): Ending clean mount [ 758.888983][ T5269] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 758.911400][ T5195] XFS (loop4): Quotacheck needed: Please wait. [ 758.926372][ T27] audit: type=1800 audit(758.877:331): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9189" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 759.057368][ T5195] XFS (loop4): Quotacheck: Done. [ 759.153164][ T5288] netlink: 'syz.2.9193': attribute type 2 has an invalid length. [ 759.207842][ T5288] netlink: 'syz.2.9193': attribute type 2 has an invalid length. [ 759.220914][ T4281] XFS (loop4): Unmounting Filesystem [ 759.237830][ T5288] netlink: 'syz.2.9193': attribute type 1 has an invalid length. [ 759.271744][ T5288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9193'. [ 759.290911][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9196'. [ 759.320245][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9196'. [ 759.354606][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9196'. [ 759.457214][ T5305] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9199'. [ 760.387722][ T5366] overlayfs: missing 'lowerdir' [ 760.575038][ T27] audit: type=1326 audit(760.527:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.2.9223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 761.019380][ T5409] loop0: detected capacity change from 0 to 64 [ 761.706618][ T5403] loop5: detected capacity change from 0 to 32768 [ 761.720012][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 761.720059][ T27] audit: type=1326 audit(761.667:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.4.9243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 761.753223][ T5403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.9230 (5403) [ 761.790566][ T27] audit: type=1326 audit(761.677:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.4.9243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 761.832032][ T5403] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 761.884602][ T27] audit: type=1326 audit(761.677:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.4.9243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 761.886712][ T5403] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 761.967052][ T5403] BTRFS info (device loop5): using free space tree [ 761.986537][ T27] audit: type=1326 audit(761.677:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5444 comm="syz.4.9243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 762.072166][ T5457] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.9246'. [ 762.131801][ T27] audit: type=1326 audit(762.077:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.2.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 762.183269][ T27] audit: type=1326 audit(762.137:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.2.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 762.245928][ T27] audit: type=1326 audit(762.197:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.2.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 762.267718][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.294182][ T5403] BTRFS info (device loop5): enabling ssd optimizations [ 762.311629][ T27] audit: type=1326 audit(762.197:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.2.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 762.334795][ T27] audit: type=1326 audit(762.197:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.2.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fda39aeb9 code=0x7ffc0000 [ 762.357419][ T27] audit: type=1326 audit(762.257:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.4.9250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062419aeb9 code=0x7ffc0000 [ 762.505906][ T5493] overlayfs: unrecognized mount option "obj_role=(‹&À!+/$:\(" or missing value [ 762.576017][T10952] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 762.710286][ T5496] loop1: detected capacity change from 0 to 4096 [ 762.789327][ T5496] EXT4-fs: Ignoring removed mblk_io_submit option [ 762.868290][ T5496] EXT4-fs (loop1): Test dummy encryption mode enabled [ 762.938379][ T5496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 763.304854][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 763.883919][ T5544] loop4: detected capacity change from 0 to 512 [ 763.941042][ T5547] loop5: detected capacity change from 0 to 64 [ 763.953875][ T5544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 764.055408][ T5544] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9266: bg 0: block 384: padding at end of block bitmap is not set [ 764.162294][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.169756][ T5544] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 764.188992][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.203100][ T5544] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.9266: attempt to clear invalid blocks 983260 len 1 [ 764.263818][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.270479][ T5544] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.9266: Invalid inode table block 0 in block_group 0 [ 764.323629][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.330365][ T5544] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 764.375368][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.393236][ T5544] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 764.417079][ T5516] loop2: detected capacity change from 0 to 32768 [ 764.443856][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.450464][ T5544] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.9266: Invalid inode table block 0 in block_group 0 [ 764.516630][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.526553][ T5544] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 764.548913][ T5516] XFS (loop2): Mounting V5 Filesystem [ 764.553659][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.561029][ T5544] EXT4-fs error (device loop4): ext4_truncate:4318: inode #11: comm syz.4.9266: mark_inode_dirty error [ 764.575102][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.581693][ T5544] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 764.613163][ T5577] xt_hashlimit: size too large, truncated to 1048576 [ 764.629591][ T5577] xt_hashlimit: invalid interval [ 764.646638][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 764.659120][ T5544] EXT4-fs (loop4): 1 truncate cleaned up [ 764.692919][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 764.717456][ T5516] XFS (loop2): Ending clean mount [ 764.809478][ T5516] XFS: no-recovery mounts must be read-only. [ 764.873620][ T5544] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.9266: Invalid inode table block 0 in block_group 0 [ 764.931990][ T4268] XFS (loop2): Unmounting Filesystem [ 764.940982][ T5544] EXT4-fs (loop4): Remounting filesystem read-only [ 765.237842][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 765.577270][ T5618] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9286'. [ 765.603324][ T5618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9286'. [ 765.718899][ T5625] ipt_CLUSTERIP: Please specify destination IP [ 766.456272][ T5674] netlink: 'syz.5.9301': attribute type 1 has an invalid length. [ 766.705606][ T5691] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 767.028354][ T5710] loop2: detected capacity change from 0 to 256 [ 767.136041][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 767.136058][ T27] audit: type=1326 audit(767.087:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.0.9316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 767.238862][ T27] audit: type=1326 audit(767.087:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.0.9316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 767.279992][ T5724] loop4: detected capacity change from 0 to 164 [ 767.336091][ T5724] Unsupported NM flag settings (240) [ 767.341625][ T27] audit: type=1326 audit(767.117:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.0.9316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 767.442072][ T27] audit: type=1326 audit(767.117:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.0.9316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 767.508335][ T27] audit: type=1326 audit(767.117:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5714 comm="syz.0.9316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d14f9aeb9 code=0x7ffc0000 [ 768.019693][ T5766] xt_TCPMSS: Only works on TCP SYN packets [ 768.451545][ T5798] loop1: detected capacity change from 0 to 164 [ 768.852454][ T27] audit: type=1400 audit(768.797:356): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=5820 comm="syz.2.9349" [ 769.365827][ T5851] sctp: [Deprecated]: syz.1.9360 (pid 5851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.365827][ T5851] Use struct sctp_sack_info instead [ 769.482424][ T27] audit: type=1326 audit(769.427:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5856 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 769.545366][ T27] audit: type=1326 audit(769.437:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5856 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 769.632850][ T27] audit: type=1326 audit(769.447:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5856 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 769.694750][ T27] audit: type=1326 audit(769.447:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5856 comm="syz.5.9361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe7a939aeb9 code=0x7ffc0000 [ 770.256635][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9370'. [ 771.639191][ T5903] loop1: detected capacity change from 0 to 32768 [ 771.659832][ T5903] XFS: ikeep mount option is deprecated. [ 771.790121][ T5903] XFS (loop1): Mounting V5 Filesystem [ 772.025791][ T5903] XFS (loop1): Ending clean mount [ 772.074846][ T5903] XFS (loop1): Quotacheck needed: Please wait. [ 772.115625][ T5997] loop4: detected capacity change from 0 to 64 [ 772.313685][ T5903] XFS (loop1): Quotacheck: Done. [ 772.480996][ T4269] XFS (loop1): Unmounting Filesystem Stopping sshd: [ 773.309936][ T6052] cgroup: none used incorrectly stopped /usr/sbin/sshd (pid 4028) OK [ 773.671471][ T6068] loop0: detected capacity change from 0 to 512 [ 773.824108][ T6068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. Stopping crond: [ 774.110427][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9424'. [ 774.123938][ T4273] EXT4-fs (loop0): unmounting filesystem. stopped /usr/sbin/crond (pid 4013) OK [ 774.476733][ T6097] loop1: detected capacity change from 0 to 4096 [ 774.522928][ T6097] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 774.740929][ T6056] loop2: detected capacity change from 0 to 32768 [ 774.790166][ T6056] XFS: ikeep mount option is deprecated. [ 774.961865][ T6133] loop4: detected capacity change from 0 to 256 [ 774.979745][ T6056] XFS (loop2): Mounting V5 Filesystem [ 774.994672][ T6133] exfat: Deprecated parameter 'utf8' [ 775.078557][ T6133] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 775.222538][ T6056] XFS (loop2): Ending clean mount [ 775.268372][ T6056] XFS (loop2): Quotacheck needed: Please wait. Stopping dhcpcd... [ 775.417082][ T6056] XFS (loop2): Quotacheck: Done. [ 775.605200][ T4268] XFS (loop2): Unmounting Filesystem stopped /sbin/dhcpcd (pid 3933) Stopping network: [ 776.508759][ T6207] device bridge_slave_1 left promiscuous mode [ 776.548988][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.607685][ T6207] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 776.662110][ T6219] delete_channel: no stack [ 776.912876][ T576] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 777.113004][ T576] usb 6-1: Using ep0 maxpacket: 32 [ 777.120331][ T576] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 777.160837][ T576] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 777.189047][ T576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.208526][ T6246] netlink: 'syz.1.9463': attribute type 3 has an invalid length. [ 777.229247][ T576] usb 6-1: Product: syz [ 777.243318][ T576] usb 6-1: Manufacturer: syz [ 777.262182][ T576] usb 6-1: SerialNumber: syz [ 777.287664][ T576] usb 6-1: config 0 descriptor?? [ 777.304370][ T6214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 777.332166][ T576] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input42 [ 777.618263][ T6269] loop0: detected capacity change from 0 to 128 [ 777.712477][ T576] usb 6-1: USB disconnect, device number 33 [ 777.718662][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 777.738429][ T4608] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.657501][ T6321] loop1: detected capacity change from 0 to 256 [ 778.700295][ T6321] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 778.978452][ T6333] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9482'. OK [ 779.086020][ T6340] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 779.253410][ T6342] loop0: detected capacity change from 0 to 1764 [ 779.386772][ T6356] loop1: detected capacity change from 0 to 512 Stopping iptables: OK [ 779.903748][ T6385] kAFS: unable to lookup cell '(/' Stopping system message bus: [ 780.540187][ T6409] loop2: detected capacity change from 0 to 4096 [ 780.606710][ T6409] __ntfs_warning: 5 callbacks suppressed [ 780.606726][ T6409] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 780.633849][ T6424] sctp: [Deprecated]: syz.5.9506 (pid 6424) Use of int in maxseg socket option. [ 780.633849][ T6424] Use struct sctp_assoc_value instead [ 780.757637][ T6409] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 780.843057][ T6409] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 780.872941][ T6409] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 780.971508][ T6409] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 781.106775][ T6409] ntfs: volume version 3.1. [ 781.146071][ T6409] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 781.182905][ T6409] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 781.323072][ T6774] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 781.492513][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9517'. done [ 781.533270][ T6774] usb 6-1: Using ep0 maxpacket: 16 [ 781.545789][ T6774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 781.594217][ T6774] usb 6-1: config 4 has an invalid interface number: 108 but max is 0 [ 781.637860][ T6774] usb 6-1: config 4 has no interface number 0 [ 781.663377][ T6774] usb 6-1: config 4 interface 108 has no altsetting 0 [ 781.693180][ T6774] usb 6-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 781.744060][ T6774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.752143][ T6774] usb 6-1: Product: syz [ 781.807700][ T6774] usb 6-1: Manufacturer: syz [ 781.812424][ T6774] usb 6-1: SerialNumber: syz [ 781.905332][ T6488] tmpfs: Bad value for 'mpol' [ 782.075662][ T6774] usb 6-1: active config #4 != 1 ?? [ 782.109220][ T6774] usb 6-1: USB disconnect, device number 34 [ 782.158660][ T6482] loop2: detected capacity change from 0 to 4096 [ 782.184165][ T6482] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 782.382458][ T6482] ntfs3: loop2: failed to convert "c46c" to maciceland [ 782.533148][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9528'. [ 782.560579][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9528'. [ 782.600806][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9528'. [ 783.876657][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9551'. [ 784.324413][ T3638] printk: udevd: 244 output lines suppressed due to ratelimiting Stopping klogd: [ 784.772026][ T6610] loop1: detected capacity change from 0 to 32768 [ 784.801335][ T6610] (syz.1.9549,6610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 784.847714][ T6610] (syz.1.9549,6610,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 784.917406][ T6610] JBD2: Ignoring recovery information on journal [ 785.008767][ T6610] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. OK [ 785.273814][ T4269] ocfs2: Unmounting device (7,1) on (node local) Stopping acpid: [ 786.177370][ T6720] netlink: 'syz.0.9585': attribute type 30 has an invalid length. [ 786.199991][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9585'. [ 786.233928][ T6720] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 786.254632][ T6720] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 786.311920][ T6715] 9pnet: Could not find request transport: 0xffffffffffffffff [ 786.400903][ T6730] loop4: detected capacity change from 0 to 764 [ 786.503667][ T6737] loop0: detected capacity change from 0 to 256 [ 786.571292][ T6743] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 786.606457][ T6737] FAT-fs (loop0): Directory bread(block 64) failed [ 786.623035][ T6737] FAT-fs (loop0): Directory bread(block 65) failed [ 786.643174][ T6737] FAT-fs (loop0): Directory bread(block 66) failed [ 786.650812][ T6746] device netdevsim0 left promiscuous mode [ 786.653647][ T6737] FAT-fs (loop0): Directory bread(block 67) failed [ 786.663424][ T6737] FAT-fs (loop0): Directory bread(block 68) failed [ 786.670113][ T6737] FAT-fs (loop0): Directory bread(block 69) failed [ 786.687259][ T6737] FAT-fs (loop0): Directory bread(block 70) failed [ 786.707417][ T6737] FAT-fs (loop0): Directory bread(block 71) failed [ 786.723024][ T6737] FAT-fs (loop0): Directory bread(block 72) failed [ 786.730448][ T6737] FAT-fs (loop0): Directory bread(block 73) failed OK Stopping syslogd: [ 786.983042][ T576] usb 5-1: new high-speed USB device number 43 using dummy_hcd stopped /sbin/syslogd (pid 3620) OK [ 787.183329][ T576] usb 5-1: Using ep0 maxpacket: 8 [ 787.192916][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 787.237615][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 787.277635][ T576] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 787.310072][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 787.351393][ T576] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 787.385707][ T576] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 787.410789][ T576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.444530][ T576] usb 5-1: config 0 descriptor?? [ 787.467549][ T6748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.567480][ T6796] loop1: detected capacity change from 0 to 512 [ 787.671045][ T6796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 787.753999][ T6808] loop2: detected capacity change from 0 to 2048 [ 787.771092][ T6808] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 787.807693][ T6808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.830279][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 787.830470][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.847674][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.855076][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.861974][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.871733][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.878691][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.885738][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.892669][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.899668][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.912970][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.919870][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.927161][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.934124][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.941343][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.954738][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.961615][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.968595][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.975558][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.982415][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.992430][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 787.999354][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.006442][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.013418][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.020264][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.027185][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.034134][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.041016][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.048024][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.054628][ T6808] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 788.068036][ T6795] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 788.082750][ T576] usb 5-1: USB disconnect, device number 43 [ 788.089291][ T4286] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 788.217446][ T4269] EXT4-fs (loop1): unmounting filesystem. umount: can't remount debugfs read-only [ 788.474061][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9621'. [ 788.744757][ T27] audit: type=1326 audit(788.687:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6973 comm="syz.5.9624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7a939aeb9 code=0x0 [ 789.067485][ T7090] loop1: detected capacity change from 0 to 4096 [ 789.091986][ T7090] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 789.637103][ T7371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.864624][ T7381] loop4: detected capacity change from 0 to 16 [ 789.872296][ T7381] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 789.928018][ T7381] cramfs: Error -3 while decompressing! [ 789.977611][ T7381] cramfs: ffffffff96d8b0a8(453)->ffff88805842f000(4096) [ 790.518040][ T7416] loop1: detected capacity change from 0 to 164 [ 790.550787][ T7416] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 790.661860][ T7423] loop0: detected capacity change from 0 to 128 [ 790.704716][ T7423] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 790.743061][ T7423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.824218][ T7423] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 790.824241][ T7432] x_tables: unsorted underflow at hook 4 [ 790.863349][ T7423] UDF-fs: error (device loop0): udf_count_free_bitmap: udf_count_free failed [ 790.896903][ T7436] xt_hashlimit: max too large, truncated to 1048576 [ 791.006266][ T4273] UDF-fs: error (device loop0): udf_read_inode: (ino 104) failed !bh [ 791.041427][ T4273] UDF-fs: error (device loop0): udf_read_inode: (ino 104) failed !bh [ 791.354247][ T4273] team0: Port device syz_tun removed umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.49 closed by remote host. [ 791.754599][T15699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.055867][T15699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.331521][T15699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.581007][T15699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 793.848819][T15699] bond0: (slave wlan1): Releasing backup interface [ 793.856091][T15699] device wlan1 left promiscuous mode [ 794.081308][T15699] device hsr_slave_0 left promiscuous mode [ 794.087910][T15699] device hsr_slave_1 left promiscuous mode [ 794.094625][T15699] device bridge_slave_1 left promiscuous mode [ 794.100844][T15699] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.109179][T15699] device bridge_slave_0 left promiscuous mode [ 794.115717][T15699] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.145325][T15699] device veth1_macvtap left promiscuous mode [ 794.151473][T15699] device veth0_macvtap left promiscuous mode [ 794.158305][T15699] device veth1_vlan left promiscuous mode [ 794.396247][T15699] bond2 (unregistering): Released all slaves [ 794.644707][T15699] bond1 (unregistering): Released all slaves [ 794.885590][ T7499] kvm: exiting hardware virtualization [ 794.910313][T15699] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 794.925877][ T7499] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 794.965790][ T7499] ACPI: PM: Preparing to enter system sleep state S5 [ 794.977103][ T7499] reboot: Power down serialport: VM disconnected.