last executing test programs: 2.799850859s ago: executing program 2 (id=1565): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xff00) 2.726789143s ago: executing program 2 (id=1566): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c60e0000010902120001000000000904"], 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") 2.270236749s ago: executing program 0 (id=1567): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)="79cdaab5", 0x4}], 0x1) 2.172477955s ago: executing program 0 (id=1568): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000000080)={[{@order_strict}, {@order_relaxed}]}, 0x41, 0xa0f, &(0x7f0000002080)="$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") 1.856971063s ago: executing program 0 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000600)="3fa3f7", &(0x7f0000000780)=""/130}, 0x20) 1.750400139s ago: executing program 0 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x70, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "062e346aa0f99857"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8}}]}, 0x70}}, 0x0) 1.73028676s ago: executing program 0 (id=1576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c25000000000a2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100b180850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0x2c) 1.614660007s ago: executing program 0 (id=1578): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x40, 0x12, 0x6, "92895cc31925"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.283636076s ago: executing program 4 (id=1586): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:trusted: '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.22219205s ago: executing program 4 (id=1588): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\\', 0x3a, '[', 0x3a, './file0'}, 0x29) 1.181319352s ago: executing program 4 (id=1589): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) 1.109747806s ago: executing program 4 (id=1591): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x40}) fspick(0xffffffffffffffff, 0x0, 0x1) 1.009323541s ago: executing program 4 (id=1593): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x2, 0xc040) 897.497168ms ago: executing program 4 (id=1596): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='#u'], &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) 862.31271ms ago: executing program 2 (id=1598): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x0, 0x663, &(0x7f0000000540)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 697.205489ms ago: executing program 3 (id=1603): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000300)=0x28, 0x4) 583.446916ms ago: executing program 3 (id=1604): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xef48, @local}}}, 0x84) 451.668474ms ago: executing program 1 (id=1606): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x0, 0x300, 0x690, 0x1000, 0xbb3a, 0x2, 0x0, 0x100, {0x0, 0x40002000}, {0x5, 0x2, 0x1}, {0x4000000, 0x7}, {0x0, 0x8, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e7cd3d73bda6125, 0x2, 0x9}) 432.392375ms ago: executing program 3 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f00000002c0), 0x0}, 0x20) 369.235828ms ago: executing program 2 (id=1608): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f00000001c0)) 337.35563ms ago: executing program 1 (id=1609): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x2, 0x3, &(0x7f0000000180)}, &(0x7f0000000280)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 306.815412ms ago: executing program 3 (id=1610): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x29) 241.215726ms ago: executing program 3 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 239.319556ms ago: executing program 1 (id=1612): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x0, 0xc2, 0x5}}) 200.476048ms ago: executing program 2 (id=1613): capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfaf00000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffd06, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 169.022579ms ago: executing program 1 (id=1614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x76) 103.973273ms ago: executing program 2 (id=1615): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@gid}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@part={'part', 0x3d, 0xc}}]}, 0x2, 0x34b, &(0x7f00000008c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 89.755854ms ago: executing program 1 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x50}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) 54.793036ms ago: executing program 3 (id=1617): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808054, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/784], 0x2, 0x558b, &(0x7f00000079c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000240)='.\x00') 0s ago: executing program 1 (id=1618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) kernel console output (not intermixed with test programs): ddresses unique to avoid problems! [ 58.207267][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.215892][ T4306] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 58.218675][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.238286][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.250760][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.256202][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,grpjquota=.,stripe=0x0000000000000000,init_itable,. Quota mode: writeback. [ 58.261717][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.279883][ T4306] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.296305][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.312992][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.347725][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.366011][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.391117][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.399395][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.399427][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.399451][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.399480][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.440029][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.462813][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.475913][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.524542][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.547717][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.571044][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.596832][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.629190][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.669942][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.714087][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.726771][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.751367][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.801378][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.818676][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.829437][ T4323] comedi comedi0: Minor 3 could not be opened [ 58.902572][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.919287][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.977996][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.030855][ T4329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 59.085039][ T4331] loop3: detected capacity change from 0 to 1024 [ 59.383407][ T150] hfsplus: b-tree write err: -5, ino 4 [ 59.501329][ T4240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.544537][ T4347] xt_hashlimit: max too large, truncated to 1048576 [ 59.559162][ T4319] loop4: detected capacity change from 0 to 32768 [ 59.632777][ T4347] No such timeout policy "syz1" [ 59.638395][ T4319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4319) [ 59.665765][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 59.693604][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 59.724881][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 59.751300][ T4240] usb 1-1: Using ep0 maxpacket: 32 [ 59.764096][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 59.779394][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 59.809509][ T4319] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 59.844906][ T4319] BTRFS info (device loop4): using free space tree [ 59.878041][ T4319] BTRFS info (device loop4): has skinny extents [ 59.989090][ T4380] overlayfs: conflicting options: nfs_export=on,index=off [ 60.031698][ T4240] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 60.068457][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.082425][ T4240] usb 1-1: Product: syz [ 60.086717][ T4240] usb 1-1: Manufacturer: syz [ 60.092124][ T4240] usb 1-1: SerialNumber: syz [ 60.101081][ T4240] usb 1-1: config 0 descriptor?? [ 60.187841][ T4319] BTRFS info (device loop4): enabling ssd optimizations [ 60.231322][ T4255] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.348941][ T4405] loop2: detected capacity change from 0 to 256 [ 60.370602][ T4405] ======================================================= [ 60.370602][ T4405] WARNING: The mand mount option has been deprecated and [ 60.370602][ T4405] and is ignored by this kernel. Remove the mand [ 60.370602][ T4405] option from the mount to silence this warning. [ 60.370602][ T4405] ======================================================= [ 60.410337][ T4240] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 002 [ 60.481409][ T4255] usb 4-1: Using ep0 maxpacket: 32 [ 60.516107][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.584220][ T4405] FAT-fs (loop2): Directory bread(block 64) failed [ 60.598217][ T4405] FAT-fs (loop2): Directory bread(block 65) failed [ 60.610618][ T4255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.652916][ T4405] FAT-fs (loop2): Directory bread(block 66) failed [ 60.657622][ T4240] usb 1-1: USB disconnect, device number 2 [ 60.659476][ T4405] FAT-fs (loop2): Directory bread(block 67) failed [ 60.679569][ T4405] FAT-fs (loop2): Directory bread(block 68) failed [ 60.686483][ T4405] FAT-fs (loop2): Directory bread(block 69) failed [ 60.694941][ T4405] FAT-fs (loop2): Directory bread(block 70) failed [ 60.704874][ T4405] FAT-fs (loop2): Directory bread(block 71) failed [ 60.712393][ T4405] FAT-fs (loop2): Directory bread(block 72) failed [ 60.722146][ T4405] FAT-fs (loop2): Directory bread(block 73) failed [ 60.748640][ T4405] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.771766][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 60.791542][ T4255] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 60.850542][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.862824][ T4255] usb 4-1: Product: syz [ 60.867438][ T4255] usb 4-1: Manufacturer: syz [ 60.887646][ T4255] usb 4-1: SerialNumber: syz [ 60.900187][ T4255] usb 4-1: config 0 descriptor?? [ 60.912588][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 60.937712][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.953330][ T4255] usb 4-1: bad CDC descriptors [ 60.960680][ T4255] usb 4-1: unsupported MDLM descriptors [ 60.978202][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.022018][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 61.032294][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 61.042863][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 61.062052][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.080282][ T23] usb 2-1: config 0 descriptor?? [ 61.117436][ T4431] netlink: 'syz.4.47': attribute type 10 has an invalid length. [ 61.126651][ T4431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 61.144696][ T4202] Bluetooth: hci5: urb ffff88802519c100 submission failed (90) [ 61.158669][ T4431] batman_adv: batadv0: Adding interface: virt_wifi0 [ 61.178600][ T4431] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.199760][ T4255] usb 4-1: USB disconnect, device number 2 [ 61.204785][ C1] vkms_vblank_simulate: vblank timer overrun [ 61.205975][ T4431] batman_adv: batadv0: Interface activated: virt_wifi0 [ 61.323067][ T4436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'. [ 61.340576][ T4437] xt_connbytes: Forcing CT accounting to be enabled [ 61.348671][ T4437] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.384822][ T23] usb 2-1: USB disconnect, device number 2 [ 61.636702][ T4451] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 61.643519][ T4453] netlink: 'syz.0.57': attribute type 22 has an invalid length. [ 61.657812][ T4453] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 61.839331][ T4466] netlink: 830 bytes leftover after parsing attributes in process `syz.2.64'. [ 61.850414][ T4466] device veth0_to_bond entered promiscuous mode [ 61.979074][ T4477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'. [ 62.028518][ T4477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'. [ 62.289639][ T4492] loop4: detected capacity change from 0 to 8 [ 62.296958][ T4416] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.323261][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop4 [ 62.331022][ T4492] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 62.427339][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop4 [ 62.442857][ T4492] cramfs: Error -5 while decompressing! [ 62.453137][ T4492] cramfs: ffffffff96401088(18)->ffff88805d700000(4096) [ 62.460738][ T4492] cramfs: Error -5 while decompressing! [ 62.468570][ T4492] cramfs: ffffffff96401088(18)->ffff88805d700000(4096) [ 62.477425][ T26] audit: type=1800 audit(1771296898.813:2): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.76" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 62.628032][ T4474] loop2: detected capacity change from 0 to 32768 [ 62.657851][ T4505] loop3: detected capacity change from 0 to 512 [ 62.692449][ T4416] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 62.706482][ T4505] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 62.717834][ T4416] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.753515][ T4474] [ 62.753515][ T4474] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 62.753515][ T4474] [ 62.768019][ T4505] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 62.799124][ T4505] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.83: attempt to clear invalid blocks 2 len 1 [ 62.822494][ T4474] jfs_rename: dtInsert returned -EIO [ 62.826280][ T4416] usb 1-1: config 0 has no interface number 0 [ 62.888490][ T4416] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 62.917052][ T4505] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 62.951554][ T4505] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.83: invalid indirect mapped block 1819239214 (level 0) [ 62.974284][ T4519] netlink: 'syz.4.90': attribute type 4 has an invalid length. [ 62.984720][ T4416] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.988854][ T4519] netlink: 'syz.4.90': attribute type 10 has an invalid length. [ 63.006920][ T4519] netlink: 152 bytes leftover after parsing attributes in process `syz.4.90'. [ 63.016408][ T4505] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.83: invalid indirect mapped block 1819239214 (level 1) [ 63.042472][ T4186] [ 63.042472][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.042472][ T4186] [ 63.042710][ T4505] EXT4-fs (loop3): 1 truncate cleaned up [ 63.068783][ T4505] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 63.081404][ T4186] [ 63.081404][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.081404][ T4186] [ 63.111986][ T4519] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 63.252665][ T4416] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 63.271923][ T4416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.291434][ T4416] usb 1-1: Product: syz [ 63.295732][ T4416] usb 1-1: Manufacturer: syz [ 63.300351][ T4416] usb 1-1: SerialNumber: syz [ 63.350520][ T4416] usb 1-1: config 0 descriptor?? [ 63.476406][ T4523] loop1: detected capacity change from 0 to 4096 [ 63.536487][ T4523] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 63.624684][ T4539] loop2: detected capacity change from 0 to 2048 [ 63.669813][ T4523] ntfs3: loop1: failed to convert "c46c" to cp437 [ 63.695352][ T4539] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 63.731081][ T4539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.841752][ T4416] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 63.887653][ T4416] usb 1-1: USB disconnect, device number 3 [ 64.177520][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 64.242239][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 64.254375][ T4573] netlink: 44 bytes leftover after parsing attributes in process `syz.4.115'. [ 64.268844][ T4563] loop3: detected capacity change from 0 to 4096 [ 64.765932][ T4255] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.146842][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 65.179231][ T4255] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 65.219921][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 65.283355][ T4255] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 65.318842][ T4255] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 65.363907][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.410245][ T4255] usb 2-1: config 0 descriptor?? [ 65.681500][ T4255] hdpvr 2-1:0.0: firmware version 0xbb dated ‘ÿOgôoSÛÌà-\âÛÊHü„”Ùkƒ<¸×ãÓ¶ÚJò#/Yûê [ 65.708967][ T4255] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 65.916102][ T4255] hdpvr 2-1:0.0: device init failed [ 65.922042][ T4255] hdpvr: probe of 2-1:0.0 failed with error -12 [ 65.955948][ T4255] usb 2-1: USB disconnect, device number 3 [ 65.985825][ T4688] loop2: detected capacity change from 0 to 256 [ 66.043410][ T4240] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.066590][ T4688] FAT-fs (loop2): Directory bread(block 64) failed [ 66.081359][ T4688] FAT-fs (loop2): Directory bread(block 65) failed [ 66.098497][ T4688] FAT-fs (loop2): Directory bread(block 66) failed [ 66.098687][ T4694] loop4: detected capacity change from 0 to 4096 [ 66.108608][ T4688] FAT-fs (loop2): Directory bread(block 67) failed [ 66.122829][ T4688] FAT-fs (loop2): Directory bread(block 68) failed [ 66.129974][ T4688] FAT-fs (loop2): Directory bread(block 69) failed [ 66.138427][ T4688] FAT-fs (loop2): Directory bread(block 70) failed [ 66.145590][ T4688] FAT-fs (loop2): Directory bread(block 71) failed [ 66.152765][ T4688] FAT-fs (loop2): Directory bread(block 72) failed [ 66.158519][ T4694] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 66.171450][ T4688] FAT-fs (loop2): Directory bread(block 73) failed [ 66.205617][ T4668] loop0: detected capacity change from 0 to 32768 [ 66.220393][ T4694] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 66.259581][ T4694] ntfs3: loop4: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 66.294343][ T4240] usb 4-1: Using ep0 maxpacket: 32 [ 66.411500][ T4240] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.539893][ T4715] netlink: 288 bytes leftover after parsing attributes in process `syz.1.157'. [ 66.596499][ T4240] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 66.642426][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.681653][ T4725] netlink: 'syz.2.159': attribute type 21 has an invalid length. [ 66.681956][ T4240] usb 4-1: Product: syz [ 66.727079][ T4728] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 66.749888][ T4240] usb 4-1: Manufacturer: syz [ 66.765141][ T4240] usb 4-1: SerialNumber: syz [ 66.780103][ T4240] usb 4-1: config 0 descriptor?? [ 66.807316][ T4737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 66.835054][ T4240] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 66.842123][ T4737] netlink: 212 bytes leftover after parsing attributes in process `syz.2.163'. [ 66.941151][ T4742] loop1: detected capacity change from 0 to 256 [ 67.017871][ T4756] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 67.019485][ T4742] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.051319][ T4742] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 67.060938][ T4758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'. [ 67.080652][ T4758] tc_dump_action: action bad kind [ 67.081847][ T4742] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 67.211638][ T4770] process 'syz.2.173' launched './file1' with NULL argv: empty string added [ 67.261460][ T4240] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 67.269735][ T4240] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 67.326104][ T4240] usb 4-1: USB disconnect, device number 3 [ 67.482599][ T4802] loop1: detected capacity change from 0 to 4096 [ 67.517936][ T4802] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 67.729590][ T4815] loop0: detected capacity change from 0 to 4096 [ 67.791717][ T4815] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 67.932394][ T4815] ntfs3: loop0: Failed to load $Extend. [ 68.070998][ T4845] cgroup: Invalid name [ 68.228549][ T4862] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 68.299991][ T4867] Cannot find add_set index 3 as target [ 68.317311][ T4870] netlink: 'syz.0.197': attribute type 11 has an invalid length. [ 68.363418][ T4874] loop2: detected capacity change from 0 to 256 [ 68.370751][ T4875] ubi0: attaching mtd0 [ 68.383507][ T4875] ubi0: scanning is finished [ 68.410580][ T4875] ubi0: empty MTD device detected [ 68.444061][ T4883] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.478918][ T4883] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.493416][ T4883] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.503022][ T4875] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 68.504238][ T4885] loop4: detected capacity change from 0 to 8192 [ 68.510599][ T4875] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 68.523914][ T4883] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.525262][ T4875] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 68.541844][ T4875] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 68.547773][ T4883] device geneve2 entered promiscuous mode [ 68.552045][ T4875] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 68.566215][ T4875] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 68.587615][ T4883] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.589407][ T4875] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1266051635 [ 68.615308][ T4885] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 68.626934][ T4883] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.655809][ T4883] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.726921][ T4885] REISERFS (device loop4): using ordered data mode [ 68.740492][ T4875] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 68.757542][ T4883] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.772670][ T4889] ubi0: background thread "ubi_bgt0d" started, PID 4889 [ 68.801275][ T4885] reiserfs: using flush barriers [ 68.817972][ T4885] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.870632][ T4885] REISERFS (device loop4): checking transaction log (loop4) [ 68.960658][ T4885] REISERFS (device loop4): Using rupasov hash to sort names [ 69.001703][ T4885] REISERFS (device loop4): using 3.5.x disk format [ 69.052811][ T4885] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 69.075614][ T4883] syz.1.202 (4883) used greatest stack depth: 20240 bytes left [ 69.100245][ T4912] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 69.121458][ T4885] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 69.143761][ T4912] netlink: 'syz.3.205': attribute type 9 has an invalid length. [ 69.218321][ T4885] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 69.306383][ T4885] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 69.474368][ T4937] netlink: 'syz.3.214': attribute type 8 has an invalid length. [ 69.508149][ T4885] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 69.601013][ T4885] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 69.623046][ T4885] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 69.841379][ T4968] netlink: 'syz.3.225': attribute type 21 has an invalid length. [ 69.877384][ T4970] netlink: 180 bytes leftover after parsing attributes in process `syz.0.224'. [ 69.940039][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 70.170834][ T4991] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.233'. [ 70.349549][ T5008] loop4: detected capacity change from 0 to 256 [ 70.371507][ T4243] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.412114][ T5008] exfat: Deprecated parameter 'namecase' [ 70.477717][ T5008] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 70.621375][ T4243] usb 3-1: Using ep0 maxpacket: 16 [ 70.741491][ T4243] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 70.780553][ T4243] usb 3-1: config 0 has no interface number 0 [ 70.813226][ T4243] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 70.850560][ T4243] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid maxpacket 47349, setting to 1024 [ 70.934502][ T4243] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 71.131622][ T4243] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 71.146952][ T5073] netlink: 52 bytes leftover after parsing attributes in process `syz.3.260'. [ 71.157469][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.161554][ T5072] loop0: detected capacity change from 0 to 512 [ 71.191340][ T4243] usb 3-1: Product: syz [ 71.196654][ T4243] usb 3-1: Manufacturer: syz [ 71.211279][ T4243] usb 3-1: SerialNumber: syz [ 71.235540][ T5072] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 71.242250][ T4243] usb 3-1: config 0 descriptor?? [ 71.279164][ T5072] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.292649][ T5072] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.259: Block bitmap for bg 0 marked uninitialized [ 71.309114][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.360597][ T4987] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.407665][ T5072] EXT4-fs (loop0): Remounting filesystem read-only [ 71.423948][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.430984][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.482112][ T5072] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 71.505155][ T5072] EXT4-fs (loop0): Remounting filesystem read-only [ 71.532395][ T5072] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.259: Block bitmap for bg 0 marked uninitialized [ 71.560549][ T5099] loop4: detected capacity change from 0 to 2048 [ 71.578058][ T5072] EXT4-fs (loop0): Remounting filesystem read-only [ 71.595509][ T5072] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 71.637049][ T5099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.664578][ T5109] kAFS: No cell specified [ 71.670090][ T5072] EXT4-fs (loop0): Remounting filesystem read-only [ 71.681828][ T4243] usb 3-1: USB disconnect, device number 2 [ 71.689492][ T5072] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.259: Block bitmap for bg 0 marked uninitialized [ 71.753175][ T5072] EXT4-fs (loop0): Remounting filesystem read-only [ 71.805182][ T5072] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 71.875247][ T5072] EXT4-fs (loop0): Remounting filesystem read-only [ 71.902900][ T5072] EXT4-fs (loop0): 1 orphan inode deleted [ 71.927427][ T5072] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 72.329936][ T5144] loop1: detected capacity change from 0 to 4096 [ 72.402199][ T5161] capability: warning: `syz.4.285' uses deprecated v2 capabilities in a way that may be insecure [ 72.439897][ T5144] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 72.510722][ T5144] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 72.528272][ T5144] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 72.610521][ T5144] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 72.661436][ T5144] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 72.725745][ T5144] ntfs: volume version 3.1. [ 72.797298][ T5144] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 72.857179][ T5144] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 72.956352][ T5202] hsr0: VLAN not yet supported [ 72.974451][ T5144] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 73.018410][ T5207] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 73.046995][ T5144] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 73.084826][ T5207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.301'. [ 73.102762][ T5144] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 73.122297][ T5207] batman_adv: batadv0: Adding interface: virt_wifi0 [ 73.171119][ T5207] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.238168][ T5207] batman_adv: batadv0: Interface activated: virt_wifi0 [ 73.456038][ T5236] syz.2.312: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 73.637165][ T5236] CPU: 0 PID: 5236 Comm: syz.2.312 Not tainted syzkaller #0 [ 73.644927][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.655010][ T5236] Call Trace: [ 73.658309][ T5236] [ 73.661393][ T5236] dump_stack_lvl+0x188/0x250 [ 73.666268][ T5236] ? rcu_lock_release+0x5/0x20 [ 73.671147][ T5236] ? show_regs_print_info+0x20/0x20 [ 73.676645][ T5236] ? load_image+0x400/0x400 [ 73.681603][ T5236] warn_alloc+0x243/0x320 [ 73.686383][ T5236] ? rcu_lock_release+0x20/0x20 [ 73.691368][ T5236] ? zone_watermark_ok_safe+0x240/0x240 [ 73.697030][ T5236] ? dvb_demux_do_ioctl+0x313/0x530 [ 73.702268][ T5236] ? kfree+0xef/0x2a0 [ 73.706460][ T5236] __vmalloc_node_range+0x2b1/0x8b0 [ 73.711763][ T5236] ? mutex_lock_io_nested+0x60/0x60 [ 73.717138][ T5236] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 73.723217][ T5236] vmalloc+0x75/0x80 [ 73.727321][ T5236] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 73.733301][ T5236] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 73.739452][ T5236] dvb_demux_do_ioctl+0x450/0x530 [ 73.744640][ T5236] dvb_usercopy+0x191/0x2b0 [ 73.749347][ T5236] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 73.755062][ T5236] ? dvb_generic_ioctl+0xb0/0xb0 [ 73.760101][ T5236] ? dvb_demux_poll+0x210/0x210 [ 73.765297][ T5236] dvb_demux_ioctl+0x25/0x30 [ 73.770193][ T5236] __se_sys_ioctl+0xfa/0x170 [ 73.774877][ T5236] do_syscall_64+0x4c/0xa0 [ 73.779387][ T5236] ? clear_bhb_loop+0x30/0x80 [ 73.784060][ T5236] ? clear_bhb_loop+0x30/0x80 [ 73.788857][ T5236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.794763][ T5236] RIP: 0033:0x7f52bf8c4f79 [ 73.799408][ T5236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.819709][ T5236] RSP: 002b:00007f52bdb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.828480][ T5236] RAX: ffffffffffffffda RBX: 00007f52bfb3efa0 RCX: 00007f52bf8c4f79 [ 73.836802][ T5236] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 73.844866][ T5236] RBP: 00007f52bf95b7e0 R08: 0000000000000000 R09: 0000000000000000 [ 73.853146][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.861634][ T5236] R13: 00007f52bfb3f038 R14: 00007f52bfb3efa0 R15: 00007ffdaf389788 [ 73.869983][ T5236] [ 74.009654][ T5236] Mem-Info: [ 74.061029][ T5236] active_anon:313 inactive_anon:9734 isolated_anon:0 [ 74.061029][ T5236] active_file:4487 inactive_file:36909 isolated_file:0 [ 74.061029][ T5236] unevictable:768 dirty:742 writeback:0 [ 74.061029][ T5236] slab_reclaimable:20244 slab_unreclaimable:96244 [ 74.061029][ T5236] mapped:29786 shmem:5489 pagetables:661 bounce:0 [ 74.061029][ T5236] kernel_misc_reclaimable:0 [ 74.061029][ T5236] free:1390344 free_pcp:5867 free_cma:0 [ 74.106643][ T5223] loop0: detected capacity change from 0 to 32768 [ 74.160079][ T5236] Node 0 active_anon:1220kB inactive_anon:41228kB active_file:17756kB inactive_file:147636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119144kB dirty:2964kB writeback:0kB shmem:22780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11808kB pagetables:2644kB all_unreclaimable? no [ 74.211602][ T5223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.305 (5223) [ 74.266298][ T5223] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 74.311888][ T5223] BTRFS info (device loop0): using free space tree [ 74.322589][ T5236] Node 1 active_anon:32kB inactive_anon:508kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 74.352127][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.381513][ T5223] BTRFS info (device loop0): has skinny extents [ 74.444767][ T5236] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.476517][ T5236] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 74.486614][ T5236] Node 0 DMA32 free:1628348kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1520kB inactive_anon:38828kB active_file:17756kB inactive_file:147936kB unevictable:1536kB writepending:2964kB present:3129332kB managed:2606556kB mlocked:0kB bounce:0kB free_pcp:9580kB local_pcp:4708kB free_cma:0kB [ 74.518834][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.562758][ T5236] lowmem_reserve[]: 0 0 0 0 0 [ 74.568477][ T5236] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.581633][ T5317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 74.595497][ T5236] lowmem_reserve[]: 0 0 0 0 0 [ 74.609363][ T5236] Node 1 Normal free:3917164kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11040kB local_pcp:3704kB free_cma:0kB [ 74.638713][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.695301][ T5236] lowmem_reserve[]: 0 0 0 0 0 [ 74.700062][ T5236] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 74.714392][ T5236] Node 0 DMA32: 191*4kB (UME) 182*8kB (UME) 7*16kB (UME) 98*32kB (UM) 16*64kB (UME) 9*128kB (UM) 8*256kB (UM) 5*512kB (ME) 4*1024kB (UM) 3*2048kB (UME) 392*4096kB (M) = 1628124kB [ 74.742721][ T5236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 74.756088][ T5236] Node 1 Normal: 98*4kB (UME) 29*8kB (UME) 19*16kB (UME) 65*32kB (UME) 37*64kB (UME) 11*128kB (UM) 9*256kB (U) 1*512kB (U) 0*1024kB 2*2048kB (UM) 953*4096kB (ME) = 3917184kB [ 74.777011][ T5236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.793823][ T5236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.806581][ T5236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.816460][ T5236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.826792][ T5236] 47181 total pagecache pages [ 74.832515][ T5236] 0 pages in swap cache [ 74.837010][ T5236] Swap cache stats: add 0, delete 0, find 0/0 [ 74.843639][ T5236] Free swap = 124996kB [ 74.848112][ T5236] Total swap = 124996kB [ 74.852419][ T5236] 2097051 pages RAM [ 74.856339][ T5236] 0 pages HighMem/MovableOnly [ 74.861261][ T5236] 411489 pages reserved [ 74.865863][ T5236] 0 pages cma reserved [ 74.883945][ T5223] BTRFS info (device loop0): enabling ssd optimizations [ 75.458934][ T5379] loop4: detected capacity change from 0 to 4096 [ 75.564612][ T5409] loop1: detected capacity change from 0 to 164 [ 75.598975][ T5379] ntfs: volume version 3.1. [ 75.634514][ T5413] loop2: detected capacity change from 0 to 512 [ 75.714423][ T5423] loop3: detected capacity change from 0 to 256 [ 75.743505][ T5409] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 75.823862][ T5413] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.350: Failed to acquire dquot type 1 [ 75.841415][ T5423] FAT-fs (loop3): Directory bread(block 64) failed [ 75.886759][ T5423] FAT-fs (loop3): Directory bread(block 65) failed [ 75.925114][ T5413] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.350: Failed to acquire dquot type 1 [ 75.945150][ T5423] FAT-fs (loop3): Directory bread(block 66) failed [ 76.002393][ T5423] FAT-fs (loop3): Directory bread(block 67) failed [ 76.008384][ T5413] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.350: bg 0: block 248: padding at end of block bitmap is not set [ 76.037140][ T5423] FAT-fs (loop3): Directory bread(block 68) failed [ 76.064280][ T5423] FAT-fs (loop3): Directory bread(block 69) failed [ 76.071440][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.081835][ T5423] FAT-fs (loop3): Directory bread(block 70) failed [ 76.111479][ T5423] FAT-fs (loop3): Directory bread(block 71) failed [ 76.138436][ T5413] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 76.139383][ T5423] FAT-fs (loop3): Directory bread(block 72) failed [ 76.195372][ T5413] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.350: Failed to acquire dquot type 1 [ 76.203306][ T5423] FAT-fs (loop3): Directory bread(block 73) failed [ 76.298319][ T5413] EXT4-fs (loop2): 1 orphan inode deleted [ 76.351321][ T5413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.381348][ T4415] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.397629][ T5413] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.534127][ T1326] cfg80211: failed to load regulatory.db [ 76.642341][ T4415] usb 2-1: Using ep0 maxpacket: 8 [ 76.661628][ T23] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 76.681366][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.699870][ T23] usb 1-1: Product: syz [ 76.704688][ T23] usb 1-1: Manufacturer: syz [ 76.714810][ T23] usb 1-1: SerialNumber: syz [ 76.742494][ T23] usb 1-1: config 0 descriptor?? [ 76.791556][ T4415] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.854406][ T23] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 76.911579][ T4415] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 76.926704][ T4415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 76.963547][ T4415] usb 2-1: SerialNumber: syz [ 77.012010][ T4415] usb 2-1: config 0 descriptor?? [ 77.063581][ T4415] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 77.078426][ T4415] usb 2-1: Failed to create links for entity 255 [ 77.100898][ T4415] usb 2-1: Failed to register entities (-22). [ 77.282619][ T4416] usb 2-1: USB disconnect, device number 4 [ 77.291483][ T23] gspca_sunplus: reg_w_riv err -71 [ 77.296821][ T23] sunplus: probe of 1-1:0.0 failed with error -71 [ 77.351385][ T23] usb 1-1: USB disconnect, device number 4 [ 78.189157][ T5535] device bridge1 entered promiscuous mode [ 78.316453][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.383'. [ 78.474945][ T5561] x_tables: duplicate underflow at hook 4 [ 78.495888][ T5564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.976764][ T5586] loop2: detected capacity change from 0 to 8192 [ 79.022937][ T5611] xt_bpf: check failed: parse error [ 79.083823][ T5586] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 79.104597][ T5586] REISERFS (device loop2): using ordered data mode [ 79.114669][ T5586] reiserfs: using flush barriers [ 79.144863][ T5586] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.162946][ T5586] REISERFS (device loop2): checking transaction log (loop2) [ 79.200418][ T5586] REISERFS (device loop2): Using tea hash to sort names [ 79.211729][ T5586] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 79.231461][ T5394] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.481468][ T5394] usb 1-1: Using ep0 maxpacket: 16 [ 79.572469][ T5644] device wlan0 entered promiscuous mode [ 79.633030][ T5651] loop1: detected capacity change from 0 to 4096 [ 79.634215][ T5654] loop2: detected capacity change from 0 to 1024 [ 79.690903][ T5654] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 79.702938][ T5654] EXT4-fs (loop2): orphan cleanup on readonly fs [ 79.714921][ T5654] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.418: Invalid inode table block 0 in block_group 0 [ 79.761722][ T5394] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 79.771094][ T5394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.773167][ T5654] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 79.791574][ T5394] usb 1-1: Product: syz [ 79.795799][ T5394] usb 1-1: Manufacturer: syz [ 79.800789][ T5394] usb 1-1: SerialNumber: syz [ 79.808062][ T5394] r8152-cfgselector 1-1: config 0 descriptor?? [ 79.881275][ T5654] EXT4-fs error (device loop2): ext4_quota_write:6646: inode #3: comm syz.2.418: mark_inode_dirty error [ 79.896022][ T5654] __quota_error: 27 callbacks suppressed [ 79.896039][ T5654] Quota error (device loop2): write_blk: dquota write failed [ 79.912610][ T5654] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 79.912647][ T5654] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.418: Failed to acquire dquot type 0 [ 79.957922][ T5654] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.418: Invalid inode table block 0 in block_group 0 [ 79.975082][ T5654] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 79.999900][ T5654] EXT4-fs error (device loop2): ext4_ext_truncate:4456: inode #15: comm syz.2.418: mark_inode_dirty error [ 80.001683][ T5654] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.418: Invalid inode table block 0 in block_group 0 [ 80.002997][ T5654] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 80.003221][ T5654] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 80.003440][ T5654] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.418: Invalid inode table block 0 in block_group 0 [ 80.003623][ T5654] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 80.003781][ T5654] EXT4-fs error (device loop2): ext4_truncate:4279: inode #15: comm syz.2.418: mark_inode_dirty error [ 80.010034][ T5654] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 80.010330][ T5654] EXT4-fs (loop2): 1 truncate cleaned up [ 80.010842][ T5654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.071452][ T5394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.346000][ T5394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.364128][ T5703] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 80.385019][ T5394] r8152-cfgselector 1-1: bad CDC descriptors [ 80.421294][ T5703] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 80.442871][ T5394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 80.461517][ T5703] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 80.491336][ T5394] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 80.501594][ T5703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.429'. [ 80.522119][ T5720] Cannot find add_set index 0 as target [ 80.619721][ T5726] device sit0 entered promiscuous mode [ 80.627512][ T5728] i2c i2c-0: Invalid block write size 150 [ 80.669813][ T5734] loop1: detected capacity change from 0 to 256 [ 80.691423][ T5726] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 80.729671][ T5726] netlink: 'syz.4.436': attribute type 3 has an invalid length. [ 80.736410][ T5734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 80.743220][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.437'. [ 80.934729][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 80.956092][ T5753] loop2: detected capacity change from 0 to 256 [ 80.982050][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 80.998565][ T5759] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.447'. [ 81.015650][ T5751] netlink: 5 bytes leftover after parsing attributes in process `syz.0.443'. [ 81.047344][ T5753] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea62c, utbl_chksum : 0x7319d30d) [ 81.058322][ T5759] openvswitch: netlink: Key type 541 is out of range max 29 [ 81.458545][ T5790] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 81.553550][ T5797] loop4: detected capacity change from 0 to 64 [ 81.728399][ T5810] loop3: detected capacity change from 0 to 1024 [ 81.877547][ T5810] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.932296][ T5810] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.123316][ T5756] loop1: detected capacity change from 0 to 40427 [ 82.184598][ T5756] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 82.241995][ T5756] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 82.330738][ T5756] F2FS-fs (loop1): invalid crc value [ 82.360020][ T5756] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 82.374187][ T5866] device wlan0 entered promiscuous mode [ 82.387408][ T5866] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 82.411504][ T5868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'. [ 82.435283][ T5756] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.464732][ T5868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'. [ 82.489721][ T5872] loop0: detected capacity change from 0 to 8 [ 82.501672][ T4243] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.549466][ T5756] F2FS-fs (loop1): recover fsync data on readonly fs [ 82.568572][ T5756] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 82.585615][ T5872] SQUASHFS error: Unable to read inode 0xe3 [ 82.598607][ T5756] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.763435][ T4243] usb 4-1: Using ep0 maxpacket: 16 [ 82.884987][ T4243] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 82.926620][ T4243] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 82.956019][ T4243] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 82.991381][ T4243] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 83.051297][ T4243] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.060773][ T5913] loop0: detected capacity change from 0 to 512 [ 83.071928][ T4243] usb 4-1: config 0 has no interface number 0 [ 83.078510][ T4243] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 83.121422][ T4243] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 83.133312][ T4243] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.143979][ T4243] usb 4-1: config 0 interface 125 has no altsetting 1 [ 83.194769][ T5920] xt_connbytes: Forcing CT accounting to be enabled [ 83.213499][ T5913] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.227947][ T5920] Cannot find set identified by id 0 to match [ 83.321495][ T4243] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 83.330755][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.339226][ T5366] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.341579][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 83.358682][ T4243] usb 4-1: Product: syz [ 83.366736][ T4243] usb 4-1: Manufacturer: syz [ 83.376168][ T4243] usb 4-1: SerialNumber: syz [ 83.386341][ T4243] usb 4-1: config 0 descriptor?? [ 83.391527][ T4415] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.467995][ T5939] loop0: detected capacity change from 0 to 512 [ 83.537417][ T5939] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.544838][ T5939] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 83.554340][ T5939] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 83.574922][ T5939] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.493: attempt to clear invalid blocks 2 len 1 [ 83.589936][ T5939] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.493: invalid indirect mapped block 1819239214 (level 0) [ 83.602506][ T5366] usb 5-1: Using ep0 maxpacket: 16 [ 83.610085][ T5939] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.493: invalid indirect mapped block 1819239214 (level 1) [ 83.626371][ T5939] EXT4-fs (loop0): 1 truncate cleaned up [ 83.633706][ T5939] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 83.681405][ T4415] usb 3-1: Using ep0 maxpacket: 8 [ 83.695035][ T5939] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.493: 'file1' linked to parent dir [ 83.722858][ T5366] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 83.735623][ T5366] usb 5-1: config 0 has no interface number 0 [ 83.747455][ T5366] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 83.813595][ T4415] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 83.829281][ T4415] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.832044][ T5394] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 83.843824][ T4415] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.862621][ T4415] usb 3-1: config 1 has no interface number 0 [ 83.869316][ T4415] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.886633][ T5366] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 83.920172][ T5366] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 83.932285][ T5366] usb 5-1: Product: syz [ 83.936963][ T5366] usb 5-1: SerialNumber: syz [ 83.946499][ T5366] usb 5-1: config 0 descriptor?? [ 83.955596][ T4243] usb 4-1: USB disconnect, device number 4 [ 83.995915][ T5366] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 84.051656][ T4415] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.062609][ T4415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.090497][ T4415] usb 3-1: Product: syz [ 84.096445][ T4415] usb 3-1: Manufacturer: syz [ 84.101459][ T5394] usb 2-1: Using ep0 maxpacket: 16 [ 84.102066][ T4415] usb 3-1: SerialNumber: syz [ 84.176250][ T4415] cdc_wdm 3-1:1.128: skipping garbage [ 84.185761][ T4415] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 84.228912][ T5376] usb 5-1: USB disconnect, device number 2 [ 84.275721][ T5987] overlayfs: missing 'lowerdir' [ 84.341623][ T5394] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 84.351759][ T5993] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 84.358028][ T5394] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 84.370088][ T5394] usb 2-1: Product: syz [ 84.383614][ T5394] usb 2-1: SerialNumber: syz [ 84.390492][ T4415] usb 3-1: USB disconnect, device number 3 [ 84.397733][ T5394] usb 2-1: config 0 descriptor?? [ 84.439189][ T6003] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 84.454172][ T5394] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 84.478633][ T5394] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 84.493012][ T5394] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 84.522533][ T5394] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 84.724722][ T6028] No such timeout policy "syz0" [ 84.746439][ T5376] usb 2-1: USB disconnect, device number 5 [ 84.818658][ T6040] set_capacity_and_notify: 1 callbacks suppressed [ 84.818678][ T6040] loop3: detected capacity change from 0 to 256 [ 84.842723][ T6040] exfat: Deprecated parameter 'utf8' [ 84.875607][ T6046] ..: renamed from ipvlan0 [ 84.884340][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 84.906156][ T6040] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 84.927996][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.520'. [ 84.959283][ T6048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.520'. [ 84.997457][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 85.150508][ T6073] device vlan1 entered promiscuous mode [ 85.244147][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 85.293374][ T6089] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 85.333738][ T6089] netlink: 56 bytes leftover after parsing attributes in process `syz.0.532'. [ 85.387977][ T6093] loop4: detected capacity change from 0 to 1024 [ 85.408361][ T6087] loop2: detected capacity change from 0 to 4096 [ 85.455706][ T6093] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 85.480134][ T6093] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 85.505194][ T6093] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.537980][ T6087] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 85.589781][ T6093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 85.615593][ T6093] System zones: 0-1, 3-36 [ 85.649446][ T6093] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,debug,errors=continue,,errors=continue. Quota mode: writeback. [ 85.678182][ T6087] ntfs3: loop2: failed to convert "c46c" to cp852 [ 86.053858][ T6149] netlink: 'syz.2.549': attribute type 32 has an invalid length. [ 86.218806][ T6166] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 86.262346][ T6166] device hsr0 entered promiscuous mode [ 86.304112][ T6166] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 86.342620][ T6166] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 86.360956][ T6166] bond0: (slave hsr0): Error -95 calling set_mac_address [ 86.517341][ T6175] loop1: detected capacity change from 0 to 4096 [ 86.619216][ T6175] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 86.649511][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 86.718455][ T6175] ntfs3: loop1: Failed to load $Extend. [ 86.854050][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.929842][ T6219] loop4: detected capacity change from 0 to 1024 [ 87.151378][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 87.271443][ T23] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 87.279920][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.302190][ T6248] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 87.321528][ T23] usb 4-1: config 0 has no interface number 0 [ 87.341781][ T23] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 87.373699][ T23] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.402693][ T6253] loop4: detected capacity change from 0 to 512 [ 87.411478][ T23] usb 4-1: config 0 interface 52 has no altsetting 0 [ 87.462449][ T6253] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.501736][ T23] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 87.521754][ T23] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 87.530405][ T23] usb 4-1: Manufacturer: syz [ 87.576226][ T23] usb 4-1: config 0 descriptor?? [ 87.586466][ T6253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 87.623354][ T6253] EXT4-fs (loop4): Remounting filesystem read-only [ 87.635508][ T6253] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.583: invalid indirect mapped block 4278190080 (level 0) [ 87.646341][ T6205] loop0: detected capacity change from 0 to 32768 [ 87.676477][ T6253] EXT4-fs (loop4): Remounting filesystem read-only [ 87.699366][ T6253] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.583: invalid indirect mapped block 1 (level 1) [ 87.716978][ T23] hub 4-1:0.52: bad descriptor, ignoring hub [ 87.722120][ T6253] EXT4-fs (loop4): Remounting filesystem read-only [ 87.730777][ T23] hub: probe of 4-1:0.52 failed with error -5 [ 87.731147][ T6253] EXT4-fs (loop4): 1 truncate cleaned up [ 87.743771][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 87.799507][ T6253] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.583: bad inode number: 1 [ 87.827155][ T6253] EXT4-fs (loop4): Remounting filesystem read-only [ 87.842309][ T6205] XFS (loop0): Mounting V5 Filesystem [ 87.925922][ T23] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input7 [ 88.030884][ T6314] loop4: detected capacity change from 0 to 764 [ 88.185092][ T6205] XFS (loop0): Ending clean mount [ 88.235415][ T6314] Symlink component flag not implemented [ 88.252576][ T6314] Symlink component flag not implemented [ 88.283846][ T6314] Symlink component flag not implemented (129) [ 88.283863][ T6314] Symlink component flag not implemented (6) [ 88.308403][ T6325] loop2: detected capacity change from 0 to 1024 [ 88.331568][ T4243] usb 4-1: USB disconnect, device number 5 [ 88.361143][ T4185] XFS (loop0): Unmounting Filesystem [ 88.440192][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'. [ 88.540653][ T6325] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.582987][ T6345] i2c i2c-0: Invalid block write size 33 [ 88.583968][ T6325] EXT4-fs (loop2): 1 truncate cleaned up [ 88.617530][ T6325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.954046][ T6372] cgroup: none used incorrectly [ 89.235917][ T6403] loop0: detected capacity change from 0 to 512 [ 89.376702][ T6403] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 89.416303][ T6403] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.757017][ T6462] xt_cgroup: path and classid specified [ 89.808136][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 89.952641][ T6487] loop1: detected capacity change from 0 to 128 [ 90.024280][ T6499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.646'. [ 90.185313][ T6512] netlink: 'syz.3.653': attribute type 9 has an invalid length. [ 90.248442][ T26] audit: type=1800 audit(1771296926.583:3): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.644" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 90.248783][ T6512] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.653'. [ 90.340560][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.676436][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'. [ 90.717714][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.763457][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'. [ 91.056834][ T6570] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.180434][ T6571] block device autoloading is deprecated and will be removed. [ 91.213029][ T6582] netlink: 'syz.1.673': attribute type 27 has an invalid length. [ 91.437110][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.679'. [ 91.468265][ T6597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.679'. [ 91.668110][ T6566] loop3: detected capacity change from 0 to 32768 [ 91.737533][ T6623] loop1: detected capacity change from 0 to 256 [ 91.754940][ T6566] __jfs_setxattr: xattr_size = 75, new_size = 12821 [ 91.822930][ T6629] 9pnet: p9_fd_create_tcp (6629): problem connecting socket to 127.0.0.1 [ 91.839465][ T6623] FAT-fs (loop1): Directory bread(block 64) failed [ 91.881838][ T6623] FAT-fs (loop1): Directory bread(block 65) failed [ 91.911435][ T6623] FAT-fs (loop1): Directory bread(block 66) failed [ 91.931412][ T6623] FAT-fs (loop1): Directory bread(block 67) failed [ 91.965574][ T6623] FAT-fs (loop1): Directory bread(block 68) failed [ 91.987230][ T6623] FAT-fs (loop1): Directory bread(block 69) failed [ 92.003198][ T6638] loop2: detected capacity change from 0 to 512 [ 92.015416][ T6623] FAT-fs (loop1): Directory bread(block 70) failed [ 92.044516][ T6623] FAT-fs (loop1): Directory bread(block 71) failed [ 92.066549][ T6623] FAT-fs (loop1): Directory bread(block 72) failed [ 92.098860][ T6623] FAT-fs (loop1): Directory bread(block 73) failed [ 92.122194][ T6638] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.191038][ T6638] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 92.227281][ T6638] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 92.291883][ T6638] System zones: 0-2, 18-18, 34-35 [ 92.298763][ T6638] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 92.620099][ T6627] loop4: detected capacity change from 0 to 32768 [ 92.759489][ T6688] netlink: 72 bytes leftover after parsing attributes in process `syz.2.704'. [ 92.786168][ T6692] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 92.798715][ T6692] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.706'. [ 92.811644][ T6692] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 92.923022][ T6627] XFS (loop4): Mounting V5 Filesystem [ 93.165590][ T6667] loop0: detected capacity change from 0 to 32768 [ 93.179513][ T6627] XFS (loop4): Ending clean mount [ 93.250041][ T6627] XFS (loop4): Quotacheck needed: Please wait. [ 93.346580][ T6736] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 93.430482][ T6627] XFS (loop4): Quotacheck: Done. [ 93.717288][ T4184] XFS (loop4): Unmounting Filesystem [ 94.407684][ T6815] __nla_validate_parse: 1 callbacks suppressed [ 94.407699][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 94.448127][ T6746] loop1: detected capacity change from 0 to 32768 [ 94.604006][ T6841] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 94.696834][ T6746] XFS (loop1): Mounting V5 Filesystem [ 94.909547][ T6876] loop0: detected capacity change from 0 to 64 [ 94.954302][ T6746] XFS (loop1): Ending clean mount [ 95.060931][ T4187] XFS (loop1): Unmounting Filesystem [ 95.067299][ T6876] Bad inode number on dev loop0: 6 is out of range [ 95.070968][ T6892] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 95.236991][ T6892] team0: Port device macvlan1 added [ 95.386764][ T6892] syz.2.763 (6892) used greatest stack depth: 19672 bytes left [ 95.796639][ T6945] sctp: [Deprecated]: syz.1.780 (pid 6945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.796639][ T6945] Use struct sctp_sack_info instead [ 95.837866][ T6947] device geneve2 entered promiscuous mode [ 95.964569][ T6964] loop2: detected capacity change from 0 to 128 [ 96.098465][ T26] audit: type=1800 audit(1771296932.433:4): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.783" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.224003][ T6907] loop3: detected capacity change from 0 to 32768 [ 96.416772][ T6971] loop1: detected capacity change from 0 to 8192 [ 96.474472][ T6971] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 96.502084][ T6971] REISERFS (device loop1): using ordered data mode [ 96.510485][ T6971] reiserfs: using flush barriers [ 96.562012][ T6971] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.579097][ T6971] REISERFS (device loop1): checking transaction log (loop1) [ 96.678880][ T6950] loop4: detected capacity change from 0 to 40427 [ 96.712058][ T6907] JBD2: Ignoring recovery information on journal [ 96.744375][ T6971] REISERFS (device loop1): Using tea hash to sort names [ 96.769530][ T6971] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.791246][ T6950] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 96.799196][ T6950] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.862810][ T6907] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 96.909284][ T6950] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.090241][ T6950] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.112160][ T6950] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.192656][ T6950] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 97.205528][ T6950] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 97.216855][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 97.408184][ T7034] loop1: detected capacity change from 0 to 1764 [ 97.590904][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 97.736715][ T7058] ip6t_srh: unknown srh invflags 4000 [ 98.109377][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'. [ 98.529919][ T7147] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.835'. [ 98.575093][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 98.606134][ T7147] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.835'. [ 98.610569][ T7150] netlink: 76 bytes leftover after parsing attributes in process `syz.3.836'. [ 98.727648][ T7159] loop0: detected capacity change from 0 to 512 [ 98.800450][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.840'. [ 98.872420][ T7159] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.989117][ T7159] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.839: Directory block failed checksum [ 99.089222][ T7141] loop1: detected capacity change from 0 to 32768 [ 99.254870][ T7141] ERROR: (device loop1): diWrite: ixpxd invalid [ 99.254870][ T7141] [ 99.289796][ T7204] device geneve2 entered promiscuous mode [ 99.301893][ T7141] ERROR: (device loop1): remounting filesystem as read-only [ 99.309551][ T7141] ERROR: (device loop1): txCommit: [ 99.309551][ T7141] [ 99.754224][ T7253] loop3: detected capacity change from 0 to 64 [ 100.001454][ T4416] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.271723][ T4416] usb 3-1: Using ep0 maxpacket: 16 [ 100.297926][ T7288] netlink: 'syz.3.876': attribute type 2 has an invalid length. [ 100.317446][ T7288] netlink: 'syz.3.876': attribute type 3 has an invalid length. [ 100.432284][ T4416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.467107][ T4416] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 100.506314][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.507404][ T7310] device geneve2 entered promiscuous mode [ 100.556314][ T4416] usb 3-1: config 0 descriptor?? [ 100.573972][ T7236] loop0: detected capacity change from 0 to 40427 [ 100.607557][ T7236] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 100.619330][ T4416] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 100.638386][ T7236] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 100.644348][ T5394] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.689355][ T7236] F2FS-fs (loop0): invalid crc value [ 100.709990][ T7236] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.720398][ T7326] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.722038][ T7327] loop3: detected capacity change from 0 to 128 [ 100.799600][ T7236] F2FS-fs (loop0): Start checkpoint disabled! [ 100.829393][ T7327] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.849883][ T7236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 100.887790][ T7236] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 100.898906][ T7236] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 100.911295][ T5394] usb 2-1: Using ep0 maxpacket: 8 [ 100.923822][ T4416] usbhid 3-1:0.0: can't add hid device: -71 [ 100.923917][ T4416] usbhid: probe of 3-1:0.0 failed with error -71 [ 100.939360][ T4416] usb 3-1: USB disconnect, device number 4 [ 100.940911][ T7327] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.174074][ T7357] loop4: detected capacity change from 0 to 164 [ 101.191526][ T5394] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 101.211330][ T5394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.226168][ T5394] usb 2-1: Product: syz [ 101.255664][ T5394] usb 2-1: Manufacturer: syz [ 101.262396][ T7364] binder: 7362:7364 ioctl c018620c 200000000080 returned -22 [ 101.270190][ T5394] usb 2-1: SerialNumber: syz [ 101.284985][ T5394] usb 2-1: config 0 descriptor?? [ 101.296709][ T7357] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.335455][ T7357] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 101.346751][ T5394] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 101.379266][ T7357] Symlink component flag not implemented [ 101.454732][ T7357] Symlink component flag not implemented [ 101.507949][ T7357] Symlink component flag not implemented (7) [ 101.532171][ T7357] Symlink component flag not implemented (116) [ 101.599973][ T7384] syz.0.902 uses old SIOCAX25GETINFO [ 101.791672][ T5394] gspca_vc032x: reg_w err -71 [ 101.802306][ T5394] vc032x: probe of 2-1:0.0 failed with error -71 [ 101.824654][ T5394] usb 2-1: USB disconnect, device number 6 [ 101.977515][ T7417] loop2: detected capacity change from 0 to 1024 [ 102.155979][ T7373] loop3: detected capacity change from 0 to 32768 [ 102.177325][ T1267] hfsplus: b-tree write err: -5, ino 4 [ 102.347990][ T7373] XFS (loop3): Mounting V5 Filesystem [ 102.593920][ T7373] XFS (loop3): Ending clean mount [ 102.677493][ T7483] loop0: detected capacity change from 0 to 8192 [ 102.742256][ T4189] XFS (loop3): Unmounting Filesystem [ 102.758878][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 102.792191][ T7483] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 102.854897][ T7483] REISERFS (device loop0): using ordered data mode [ 102.862172][ T7483] reiserfs: using flush barriers [ 102.877458][ T7483] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.917957][ T7483] REISERFS (device loop0): checking transaction log (loop0) [ 102.943524][ T7483] REISERFS (device loop0): Using r5 hash to sort names [ 102.978266][ T7483] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 103.234606][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 103.559570][ T7551] loop1: detected capacity change from 0 to 2048 [ 103.669102][ T7551] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.737801][ T7574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.958'. [ 103.810712][ T7578] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.831776][ T4415] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 103.906573][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 103.927037][ T7588] loop2: detected capacity change from 0 to 16 [ 103.935004][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 103.960555][ T7551] Remounting filesystem read-only [ 103.967088][ T7588] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 103.991437][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.014743][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop2 [ 104.037246][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.069698][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop2 [ 104.071627][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.088097][ T7596] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.111380][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.129458][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.193408][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.217643][ T7607] sctp: [Deprecated]: syz.2.966 (pid 7607) Use of int in maxseg socket option. [ 104.217643][ T7607] Use struct sctp_assoc_value instead [ 104.232893][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.269430][ T7610] netlink: 280 bytes leftover after parsing attributes in process `syz.3.969'. [ 104.286678][ T4415] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.302251][ T4415] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.325309][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.341136][ T4415] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 858, setting to 64 [ 104.353900][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.374488][ T4415] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.397911][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.410546][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.426752][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.441044][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.456672][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.469719][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.487792][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.500068][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.518568][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.539041][ T4415] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 104.549812][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.567227][ T4415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.576424][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.592654][ T4415] usb 1-1: SerialNumber: syz [ 104.600741][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.615090][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.618947][ T7553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.626301][ T5366] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.642862][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.658910][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.664063][ T7623] loop4: detected capacity change from 0 to 32768 [ 104.671426][ T4415] usb-storage 1-1:1.0: USB Mass Storage device detected [ 104.698316][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.712655][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.725032][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.736713][ T7623] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 104.748876][ T4415] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 104.770753][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.790148][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.800804][ T7551] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 104.812524][ T7551] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.841305][ T26] audit: type=1800 audit(1771296941.183:5): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.953" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 104.854207][ T7551] syz.1.953 (7551) used greatest stack depth: 19600 bytes left [ 104.881330][ T5366] usb 3-1: Using ep0 maxpacket: 16 [ 104.928861][ T4184] ocfs2: Unmounting device (7,4) on (node local) [ 104.954536][ T4415] usb 1-1: USB disconnect, device number 6 [ 105.161672][ T5366] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 105.181678][ T5366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.207148][ T5366] usb 3-1: Product: syz [ 105.214209][ T5366] usb 3-1: Manufacturer: syz [ 105.219954][ T5366] usb 3-1: SerialNumber: syz [ 105.238975][ T7660] netlink: 'syz.3.979': attribute type 3 has an invalid length. [ 105.257842][ T5366] r8152-cfgselector 3-1: config 0 descriptor?? [ 105.511518][ T5394] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.528177][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.988'. [ 105.603347][ T5376] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.761434][ T5366] r8152-cfgselector 3-1: Unknown version 0x0000 [ 105.766425][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.996'. [ 105.768408][ T5366] r8152-cfgselector 3-1: bad CDC descriptors [ 105.785293][ T5394] usb 2-1: Using ep0 maxpacket: 8 [ 105.831884][ T7723] loop3: detected capacity change from 0 to 64 [ 105.844304][ T7725] netlink: 'syz.0.998': attribute type 8 has an invalid length. [ 105.861612][ T5366] r8152-cfgselector 3-1: Unknown version 0x0000 [ 105.883745][ T5366] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 105.973449][ T5376] usb 5-1: config index 0 descriptor too short (expected 29, got 18) [ 106.012786][ T5376] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.048597][ T5376] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 106.060775][ T5376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.071951][ T5394] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 106.087605][ T5394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.098758][ T5376] usb 5-1: config 0 descriptor?? [ 106.104353][ T5394] usb 2-1: Product: syz [ 106.108720][ T5394] usb 2-1: Manufacturer: syz [ 106.115941][ T5394] usb 2-1: SerialNumber: syz [ 106.123447][ T5394] usb 2-1: config 0 descriptor?? [ 106.164092][ T5394] gspca_main: sq930x-2.14.0 probing 2770:930c [ 106.353419][ T7770] loop3: detected capacity change from 0 to 16 [ 106.380581][ T7770] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.392744][ T5376] usb 5-1: string descriptor 0 read error: -71 [ 106.401292][ T5376] ldusb 5-1:0.0: Interrupt in endpoint not found [ 106.449742][ T7770] attempt to access beyond end of device [ 106.449742][ T7770] loop3: rw=524288, want=32, limit=16 [ 106.455260][ T7778] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 106.477578][ T7770] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 106.491277][ T5376] usb 5-1: USB disconnect, device number 3 [ 106.552809][ T7778] netlink: 'syz.2.1011': attribute type 2 has an invalid length. [ 106.631410][ T5394] gspca_sq930x: ucbus_write failed -71 [ 106.637289][ T5394] sq930x: probe of 2-1:0.0 failed with error -71 [ 106.677936][ T5394] usb 2-1: USB disconnect, device number 7 [ 106.771073][ T7806] Unknown options in mask b7f2 [ 107.078103][ T26] audit: type=1800 audit(1771296943.413:6): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.1019" name="/" dev="sockfs" ino=39517 res=0 errno=0 [ 107.139863][ T7839] loop4: detected capacity change from 0 to 512 [ 107.293800][ T7839] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1026: invalid indirect mapped block 4294967295 (level 1) [ 107.311751][ T7839] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1026: invalid indirect mapped block 4294967295 (level 1) [ 107.377795][ T7849] loop1: detected capacity change from 0 to 4096 [ 107.389338][ T7839] EXT4-fs (loop4): 2 truncates cleaned up [ 107.398411][ T7839] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 107.418602][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.477797][ T7849] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 107.550161][ T7849] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 107.565499][ T7868] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 107.572502][ T7853] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 107.627908][ T7849] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 107.682284][ T7849] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 107.721289][ T7849] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 107.769506][ T7849] ntfs: volume version 3.1. [ 107.809553][ T7849] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 107.813212][ T7888] loop4: detected capacity change from 0 to 1024 [ 107.892155][ T7849] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 107.927289][ T7849] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 108.005855][ T4311] hfsplus: b-tree write err: -5, ino 4 [ 108.040328][ T7904] loop0: detected capacity change from 0 to 1024 [ 108.309787][ T7936] sctp: [Deprecated]: syz.4.1057 (pid 7936) Use of int in max_burst socket option. [ 108.309787][ T7936] Use struct sctp_assoc_value instead [ 108.461631][ T7955] loop4: detected capacity change from 0 to 1024 [ 108.483073][ T7962] loop2: detected capacity change from 0 to 512 [ 108.525956][ T7955] EXT4-fs (loop4): Ignoring removed orlov option [ 108.532885][ T7948] loop3: detected capacity change from 0 to 4096 [ 108.537432][ T7968] loop1: detected capacity change from 0 to 764 [ 108.549010][ T7955] EXT4-fs (loop4): inline encryption not supported [ 108.556604][ T7955] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 108.578285][ T7955] EXT4-fs (loop4): invalid journal inode [ 108.578281][ T7948] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 108.600844][ T7962] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 108.625736][ T7955] EXT4-fs (loop4): can't get journal size [ 108.637758][ T7968] rock: directory entry would overflow storage [ 108.649951][ T7948] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 108.663414][ T7968] rock: sig=0x4654, size=5, remaining=4 [ 108.673602][ T7955] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 108.679207][ T7962] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 108.720246][ T7968] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 108.797054][ T7968] overlayfs: missing 'lowerdir' [ 108.822417][ T7962] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 108.833288][ T7948] ntfs3: loop3: failed to convert "c46c" to cp863 [ 108.945948][ T7962] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.971492][ T7962] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 108.993027][ T7962] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.033689][ T7962] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1064: bg 0: block 34: padding at end of block bitmap is not set [ 109.045455][ T7998] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.1069' sets config #0 [ 109.147317][ T7962] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1064: Failed to acquire dquot type 1 [ 109.208076][ T8007] loop1: detected capacity change from 0 to 128 [ 109.237720][ T7962] EXT4-fs (loop2): 1 truncate cleaned up [ 109.250674][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.318809][ T7962] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 109.396683][ T8007] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.447174][ T8007] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.484319][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 109.877633][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 109.877657][ T26] audit: type=1326 audit(1771296946.213:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.1.1090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d1ff89f79 code=0x0 [ 109.996203][ T26] audit: type=1326 audit(1771296946.293:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.1.1090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f5d1ff89f79 code=0x0 [ 109.997709][ T8072] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 110.133000][ T8075] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 110.172705][ T8075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 110.217406][ T8075] device ÿÿÿÿÿÿ entered promiscuous mode [ 110.250587][ T8075] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 110.421954][ T4228] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.691588][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 110.823255][ T8139] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1115'. [ 110.851643][ T4228] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 110.880606][ T4228] usb 3-1: config 0 has no interface number 0 [ 110.901016][ T4228] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 111.111612][ T4228] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 111.156967][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.184326][ T4228] usb 3-1: Product: syz [ 111.192180][ T4228] usb 3-1: Manufacturer: syz [ 111.197742][ T4228] usb 3-1: SerialNumber: syz [ 111.209182][ T4228] usb 3-1: config 0 descriptor?? [ 111.222450][ T8166] device geneve1 entered promiscuous mode [ 111.231836][ T8081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.475637][ T8081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.569558][ T4228] net1080 3-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 8e:29:7f:c2:31:6d [ 111.742018][ T4228] usb 3-1: USB disconnect, device number 6 [ 111.751342][ T5371] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.769216][ T4228] net1080 3-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 111.991289][ T5371] usb 5-1: Using ep0 maxpacket: 16 [ 112.271498][ T5371] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 112.302857][ T5371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.340268][ T5371] usb 5-1: Product: syz [ 112.365056][ T5371] usb 5-1: Manufacturer: syz [ 112.372805][ T5371] usb 5-1: SerialNumber: syz [ 112.399125][ T5371] usb 5-1: config 0 descriptor?? [ 112.506485][ T8270] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 112.561486][ T8270] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 112.600597][ T8270] overlayfs: missing 'lowerdir' [ 112.672394][ T5371] usb 5-1: ignoring: not an USB2CAN converter [ 112.875159][ T5371] usb 5-1: USB disconnect, device number 4 [ 113.253746][ T8323] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 113.281886][ T8323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1162'. [ 113.438993][ T8333] loop0: detected capacity change from 0 to 256 [ 113.517670][ T8282] loop2: detected capacity change from 0 to 32768 [ 113.586417][ T8333] FAT-fs (loop0): Directory bread(block 64) failed [ 113.655125][ T8282] JBD2: Can't enable checksumming v2 and v3 at the same time! [ 113.671397][ T8282] (syz.2.1152,8282,0):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 113.675332][ T8333] FAT-fs (loop0): Directory bread(block 65) failed [ 113.679820][ T8282] (syz.2.1152,8282,0):ocfs2_check_volume:2424 ERROR: status = -22 [ 113.687993][ T8333] FAT-fs (loop0): Directory bread(block 66) failed [ 113.703541][ T8333] FAT-fs (loop0): Directory bread(block 67) failed [ 113.711299][ T8333] FAT-fs (loop0): Directory bread(block 68) failed [ 113.718882][ T8333] FAT-fs (loop0): Directory bread(block 69) failed [ 113.726186][ T8333] FAT-fs (loop0): Directory bread(block 70) failed [ 113.741345][ T8282] (syz.2.1152,8282,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 113.749612][ T8282] (syz.2.1152,8282,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 113.762523][ T8333] FAT-fs (loop0): Directory bread(block 71) failed [ 113.770838][ T8333] FAT-fs (loop0): Directory bread(block 72) failed [ 113.774640][ T8355] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.799380][ T8333] FAT-fs (loop0): Directory bread(block 73) failed [ 113.808263][ T8355] FAT-fs (loop9): unable to read boot sector [ 113.817877][ T8359] loop3: detected capacity change from 0 to 64 [ 113.843352][ T8282] (syz.2.1152,8282,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 114.084368][ T8359] hfs: unable to load iocharset "Sp—" [ 114.090555][ T8359] hfs: unable to parse mount options [ 114.376473][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 114.560589][ T8419] device veth3 entered promiscuous mode [ 114.757269][ T8455] loop3: detected capacity change from 0 to 64 [ 114.875108][ T8468] blk_update_request: I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 114.921511][ T8468] gfs2: error 10 reading superblock [ 115.018338][ T8487] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1206'. [ 115.322444][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1220'. [ 115.413758][ T8533] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1222'. [ 115.435707][ T8537] loop1: detected capacity change from 0 to 164 [ 115.701766][ T5376] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.902660][ T8588] loop1: detected capacity change from 0 to 128 [ 116.105232][ T5376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.147055][ T5376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 116.202912][ T8626] loop4: detected capacity change from 0 to 16 [ 116.254530][ T8626] erofs: (device loop4): mounted with root inode @ nid 36. [ 116.261596][ T8631] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 116.342232][ T5394] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.356302][ T5376] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.371685][ T5376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.380783][ T8637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.390793][ T5376] usb 3-1: Product: syz [ 116.400266][ T5376] usb 3-1: Manufacturer: syz [ 116.409642][ T5376] usb 3-1: SerialNumber: syz [ 116.419338][ T5376] usb 3-1: config 0 descriptor?? [ 116.511511][ T4415] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 116.711443][ T5394] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.727382][ T5394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.822246][ T5394] usb 4-1: config 0 descriptor?? [ 116.875071][ T5394] cp210x 4-1:0.0: cp210x converter detected [ 116.894930][ T5376] usb 3-1: USB disconnect, device number 7 [ 116.898245][ T4415] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 116.955679][ T8680] loop0: detected capacity change from 0 to 1764 [ 116.965718][ T4415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.035948][ T4415] usb 2-1: config 0 descriptor?? [ 117.105816][ T4415] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 117.118205][ T5394] usb 4-1: cp210x converter now attached to ttyUSB0 [ 117.207422][ T8708] loop4: detected capacity change from 0 to 64 [ 117.331091][ T23] usb 4-1: USB disconnect, device number 6 [ 117.337825][ T4228] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.380527][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 117.430619][ T23] cp210x 4-1:0.0: device disconnected [ 117.493554][ T8688] udevd[8688]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.531509][ T4415] gp8psk: usb in 137 operation failed. [ 117.538077][ T4415] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 117.572226][ T4415] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 117.590952][ T4415] usb 2-1: USB disconnect, device number 8 [ 117.667048][ T8745] loop4: detected capacity change from 0 to 4096 [ 117.748770][ T8748] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.781501][ T4228] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 117.793996][ T4228] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 117.806196][ T4228] usb 1-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 117.818646][ T4228] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.828813][ T4228] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 117.839411][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.873559][ T4416] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.900666][ T4228] usb 1-1: config 0 descriptor?? [ 117.941694][ T8680] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.979640][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1275'. [ 118.241868][ T4228] usb 1-1: string descriptor 0 read error: -71 [ 118.242668][ T4228] usb 1-1: ucan: probing device on interface #0 [ 118.242694][ T4228] usb 1-1: ucan: invalid endpoint configuration [ 118.242708][ T4228] usb 1-1: ucan: probe failed; try to update the device firmware [ 118.245974][ T4228] usb 1-1: USB disconnect, device number 7 [ 118.321886][ T4416] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 118.338515][ T4416] usb 3-1: config 0 has no interface number 0 [ 118.531799][ T4416] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 118.559464][ T4416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.589327][ T4416] usb 3-1: Product: syz [ 118.604341][ T4416] usb 3-1: Manufacturer: syz [ 118.624867][ T4416] usb 3-1: SerialNumber: syz [ 118.645338][ T4416] usb 3-1: config 0 descriptor?? [ 118.677885][ T8824] loop3: detected capacity change from 0 to 512 [ 118.853482][ T8824] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 118.863253][ T8824] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 118.880087][ T8824] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.1292: iget: bad i_size value: 12154757448730 [ 118.911342][ T8824] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1292: couldn't read orphan inode 13 (err -117) [ 118.948094][ T8824] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 119.111582][ T4416] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 119.118266][ T4416] usb 3-1: No valid video chain found. [ 119.139051][ T4416] usb 3-1: USB disconnect, device number 8 [ 119.231365][ T5376] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.471425][ T5376] usb 1-1: Using ep0 maxpacket: 16 [ 119.591542][ T5376] usb 1-1: config 0 has no interfaces? [ 119.591677][ T4228] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 119.726860][ T8932] loop3: detected capacity change from 0 to 128 [ 119.751388][ T5376] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.767984][ T5376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.776393][ T5376] usb 1-1: Product: syz [ 119.781315][ T5376] usb 1-1: Manufacturer: syz [ 119.786106][ T5376] usb 1-1: SerialNumber: syz [ 119.792382][ T5376] r8152-cfgselector 1-1: config 0 descriptor?? [ 119.804306][ T8939] loop4: detected capacity change from 0 to 2048 [ 119.882415][ T8939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.052343][ T4228] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 120.052868][ T5376] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 120.063417][ T4228] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 120.063444][ T4228] usb 2-1: config 0 has no interface number 0 [ 120.063475][ T4228] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 120.150355][ T4228] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.164021][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1328'. [ 120.202872][ T4228] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 120.248409][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.287964][ T4228] usb 2-1: config 0 descriptor?? [ 120.307464][ T23] usb 1-1: USB disconnect, device number 8 [ 120.310832][ T8965] netlink: 'syz.4.1332': attribute type 11 has an invalid length. [ 120.333010][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 120.641015][ T8998] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 120.666235][ T151] block nbd2: Attempted send on invalid socket [ 120.676607][ T151] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.695966][ T9004] hpfs: hpfs_map_sector(): read error [ 120.738732][ T9008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1342'. [ 120.775046][ T4228] usb 2-1: USB disconnect, device number 9 [ 121.235957][ T9039] netlink: 'syz.0.1351': attribute type 13 has an invalid length. [ 121.498741][ T9061] binder: 9058:9061 ioctl c0306201 200000000280 returned -14 [ 121.765445][ T5376] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.794988][ T4243] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 121.841523][ T9100] kAFS: unable to lookup cell '@mTsyz0' [ 121.991420][ T5394] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.021269][ T5376] usb 5-1: Using ep0 maxpacket: 8 [ 122.181544][ T5376] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.192500][ T4243] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 122.209635][ T4243] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 122.231269][ T5394] usb 1-1: Using ep0 maxpacket: 32 [ 122.238510][ T4243] usb 2-1: config 0 has no interface number 1 [ 122.249726][ T4243] usb 2-1: config 0 has no interface number 2 [ 122.257629][ T4243] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 122.277074][ T5376] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.291333][ T5376] usb 5-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.309467][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.327365][ T4243] usb 2-1: config 0 descriptor?? [ 122.333319][ T5376] usb 5-1: config 1 interface 0 has no altsetting 0 [ 122.368800][ T5394] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 122.390897][ T5394] usb 1-1: config 0 has no interface number 0 [ 122.398163][ T5394] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 122.501554][ T5376] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.521474][ T5376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.541006][ T5376] usb 5-1: Product: syz [ 122.550892][ T5376] usb 5-1: Manufacturer: syz [ 122.565518][ T5376] usb 5-1: SerialNumber: syz [ 122.595003][ T5394] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 122.608466][ T9062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.631306][ T4243] qcserial 2-1:0.3: Qualcomm USB modem converter detected [ 122.659713][ T5394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.688184][ T5394] usb 1-1: Product: syz [ 122.698037][ T5394] usb 1-1: Manufacturer: syz [ 122.704797][ T5394] usb 1-1: SerialNumber: syz [ 122.719228][ T5394] usb 1-1: config 0 descriptor?? [ 122.752031][ T9089] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 122.862342][ T23] usb 2-1: USB disconnect, device number 10 [ 122.870607][ T23] qcserial 2-1:0.3: device disconnected [ 122.928814][ T5376] usb 5-1: bad CDC descriptors [ 122.988488][ T5376] usb 5-1: USB disconnect, device number 5 [ 123.019632][ T9089] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 123.019873][ T9190] xt_TCPMSS: Only works on TCP SYN packets [ 123.083503][ T5394] net1080 1-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, a6:91:31:78:e7:41 [ 123.289141][ T23] usb 1-1: USB disconnect, device number 9 [ 123.315984][ T23] net1080 1-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 123.620561][ T9236] loop3: detected capacity change from 0 to 256 [ 123.738654][ T9236] exfat: Deprecated parameter 'utf8' [ 123.754034][ T9220] loop4: detected capacity change from 0 to 4096 [ 123.793400][ T9236] exfat: Deprecated parameter 'utf8' [ 123.799595][ T9236] exfat: Deprecated parameter 'utf8' [ 123.826151][ T9220] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 123.861808][ T9220] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 123.909960][ T9220] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 123.936709][ T9236] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 123.987549][ T9220] ntfs: volume version 3.1. [ 124.033535][ T9220] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 124.191546][ T4228] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.369784][ T9231] loop1: detected capacity change from 0 to 32768 [ 124.465662][ T151] block nbd0: Attempted send on invalid socket [ 124.472900][ T151] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.488803][ T9307] hpfs: hpfs_map_sector(): read error [ 124.497013][ T9272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.504912][ T9231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1400 (9231) [ 124.657700][ T9231] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 124.702324][ T4228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.710251][ T9231] BTRFS error (device loop1): superblock checksum mismatch [ 124.747396][ T4174] udevd[4174]: incorrect btrfs checksum on /dev/loop1 [ 124.769833][ T9231] BTRFS error (device loop1): open_ctree failed: -22 [ 124.832105][ T9320] loop3: detected capacity change from 0 to 8192 [ 124.911572][ T4228] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 124.931521][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.980007][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 124.984280][ T4228] usb 3-1: Product: syz [ 125.025380][ T9320] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 125.056944][ T4228] usb 3-1: Manufacturer: syz [ 125.092021][ T4228] usb 3-1: SerialNumber: syz [ 125.105959][ T9320] REISERFS (device loop3): using ordered data mode [ 125.115570][ T9320] reiserfs: using flush barriers [ 125.129964][ T9320] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.153361][ T4228] usb 3-1: config 0 descriptor?? [ 125.208463][ T9320] REISERFS (device loop3): checking transaction log (loop3) [ 125.221911][ T9364] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 125.243686][ T4228] gspca_main: pac207-2.14.0 probing 093a:2476 [ 125.423428][ T4228] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 125.507930][ T4228] usb 3-1: USB disconnect, device number 9 [ 125.593941][ T9320] REISERFS (device loop3): Using tea hash to sort names [ 125.644162][ T9320] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 125.953244][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'. [ 125.993521][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'. [ 126.147778][ T9408] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1433'. [ 126.211759][ T9408] unsupported nla_type 34 [ 126.307689][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 126.340739][ T9433] loop0: detected capacity change from 0 to 64 [ 126.354820][ T9427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.446060][ T9440] loop2: detected capacity change from 0 to 128 [ 126.519337][ T9440] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.627270][ T9440] hpfs: filesystem error: improperly stopped [ 126.657922][ T9440] hpfs: You really don't want any checks? You are crazy... [ 126.678256][ T9440] hpfs: hpfs_map_sector(): read error [ 126.699189][ T9440] hpfs: code page support is disabled [ 126.757544][ T9440] hpfs: hpfs_map_sector(): read error [ 126.796433][ T9440] hpfs: hpfs_map_sector(): read error [ 126.834433][ T9440] hpfs: filesystem error: unable to find root dir [ 127.149937][ T9484] loop4: detected capacity change from 0 to 8192 [ 127.235587][ T9484] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 127.312602][ T9484] REISERFS (device loop4): using ordered data mode [ 127.320640][ T9484] reiserfs: using flush barriers [ 127.329340][ T9484] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.350762][ T9484] REISERFS (device loop4): checking transaction log (loop4) [ 127.362467][ T9484] REISERFS (device loop4): Using r5 hash to sort names [ 127.392521][ T9484] REISERFS (device loop4): using 3.5.x disk format [ 127.435394][ T9511] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1463'. [ 127.560489][ T9515] loop2: detected capacity change from 0 to 4096 [ 127.633219][ T9515] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 127.727124][ T9515] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 127.778144][ T9515] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 127.817968][ T9547] device ipip0 entered promiscuous mode [ 127.834531][ T9515] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 127.881697][ T9515] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 127.909311][ T9515] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 127.932154][ T9551] device lo entered promiscuous mode [ 127.963944][ T9515] ntfs: volume version 3.1. [ 127.972312][ T9551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.011459][ T4243] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 128.100174][ T9562] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 128.125053][ T9562] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 128.139084][ T9562] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 128.155113][ T9562] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 128.205888][ T9572] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.396406][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 128.417287][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 128.443186][ T9594] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.521395][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 128.547531][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 128.557648][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 128.661337][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 128.691115][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 128.741516][ T5394] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.816022][ T9620] loop2: detected capacity change from 0 to 4096 [ 128.879504][ T9620] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.892412][ T4243] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 128.931853][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.946776][ T4243] usb 2-1: Product: syz [ 128.980671][ T4243] usb 2-1: Manufacturer: syz [ 128.991348][ T5394] usb 4-1: Using ep0 maxpacket: 8 [ 128.997338][ T4243] usb 2-1: SerialNumber: syz [ 129.032459][ T4243] usb 2-1: config 0 descriptor?? [ 129.083213][ T4243] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 129.100025][ T4243] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 129.116698][ T5394] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.209691][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 129.221616][ T4186] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 129.228735][ T4186] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 129.265287][ T4186] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 129.296186][ T9669] netlink: 'syz.0.1510': attribute type 21 has an invalid length. [ 129.301669][ T5394] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 129.320158][ T9669] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 129.338477][ T5394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.350207][ T5394] usb 4-1: Product: syz [ 129.396692][ T5394] usb 4-1: Manufacturer: syz [ 129.411445][ T5394] usb 4-1: SerialNumber: syz [ 129.440769][ T5394] usb 4-1: config 0 descriptor?? [ 129.453738][ T5366] usb 2-1: USB disconnect, device number 11 [ 129.483221][ T5394] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 129.490400][ T5394] usb 4-1: selecting invalid altsetting 1 [ 129.701691][ T5394] gspca_stk014: init reg: 0x00 [ 129.707406][ T5394] stk014: probe of 4-1:0.0 failed with error -5 [ 129.953365][ T4243] usb 4-1: USB disconnect, device number 7 [ 130.015241][ T9750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1529'. [ 130.182281][ T4228] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.318814][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 130.395643][ T9789] netlink: 'syz.2.1541': attribute type 21 has an invalid length. [ 130.405119][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.465785][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 130.601750][ T4228] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.620349][ T4228] usb 1-1: config 0 has no interface number 0 [ 130.671688][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 130.749125][ T9824] delete_channel: no stack [ 130.816912][ T9833] loop2: detected capacity change from 0 to 164 [ 130.824788][ T4228] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 130.834414][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.848958][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.867746][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.897838][ T4228] usb 1-1: Product: syz [ 130.907963][ T4228] usb 1-1: Manufacturer: syz [ 130.917560][ T9833] isofs: Unable to find the ".." directory for NFS. [ 130.922689][ T4228] usb 1-1: SerialNumber: syz [ 130.945596][ T4228] usb 1-1: config 0 descriptor?? [ 131.014902][ T4228] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 131.081524][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.101378][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.109867][ T23] usb 5-1: Product: syz [ 131.121190][ T23] usb 5-1: Manufacturer: syz [ 131.131283][ T23] usb 5-1: SerialNumber: syz [ 131.233954][ T4228] gspca_spca1528: reg_w err -71 [ 131.263835][ T4228] spca1528: probe of 1-1:0.1 failed with error -71 [ 131.277290][ T4228] usb 1-1: USB disconnect, device number 10 [ 131.321404][ T4416] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.462504][ T23] usb 5-1: 0:2 : does not exist [ 131.468670][ T23] usb 5-1: unit 9 not found! [ 131.641367][ T4415] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.701745][ T23] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 131.736770][ T23] usb 5-1: USB disconnect, device number 6 [ 131.761574][ T4416] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.847611][ T4416] usb 4-1: config 160 has an invalid interface number: 40 but max is 0 [ 131.861463][ T4416] usb 4-1: config 160 has no interface number 0 [ 131.899047][ T4416] usb 4-1: config 160 interface 40 has no altsetting 0 [ 131.904503][ T9893] loop0: detected capacity change from 0 to 2048 [ 131.975147][ T9893] NILFS (loop0): corrupt root inode [ 132.041583][ T9900] xt_cgroup: xt_cgroup: no path or classid specified [ 132.071741][ T4416] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=2a.c1 [ 132.098150][ T4416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.116701][ T9903] loop1: detected capacity change from 0 to 256 [ 132.123614][ T4415] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 132.134536][ T4416] usb 4-1: Product: syz [ 132.139099][ T4416] usb 4-1: Manufacturer: syz [ 132.145729][ T4415] usb 3-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 132.155189][ T4416] usb 4-1: SerialNumber: syz [ 132.161028][ T4415] usb 3-1: Manufacturer: syz [ 132.192633][ T9903] FAT-fs (loop1): Unrecognized mount option "nonum‡ail=0" or missing value [ 132.202937][ T4415] usb 3-1: config 0 descriptor?? [ 132.242519][ T4415] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 132.261038][ T4415] usb 3-1: Detected FT-X [ 132.342463][ T9903] devtmpfs: Unknown parameter 'shortname' [ 132.455020][ T9872] loop2: detected capacity change from 0 to 256 [ 132.482384][ T4416] usb 4-1: bad CDC descriptors [ 132.492203][ T4416] usb 4-1: unsupported MDLM descriptors [ 132.516503][ T4416] usb 4-1: USB disconnect, device number 8 [ 132.524138][ T9872] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 132.581574][ T4415] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 132.601485][ T4415] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 132.622629][ T4415] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 132.642837][ T4415] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 132.666234][ T4415] usb 3-1: USB disconnect, device number 10 [ 132.692815][ T4415] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 132.721361][ T5366] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.723526][ T4415] ftdi_sio 3-1:0.0: device disconnected [ 132.782624][ T9976] trusted_key: encrypted_key: hex blob is missing [ 132.853540][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860379][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.961423][ T5366] usb 1-1: Using ep0 maxpacket: 8 [ 133.026121][ T9995] AppArmor: change_hat: Invalid input '0x000000000000' [ 133.180315][T10007] loop4: detected capacity change from 0 to 512 [ 133.267144][ T5366] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 133.295893][T10007] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 133.315832][ T5366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.342569][T10007] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.344808][T10023] loop2: detected capacity change from 0 to 1024 [ 133.349301][T10007] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 133.354704][ T5366] usb 1-1: Product: syz [ 133.369248][ T5366] usb 1-1: Manufacturer: syz [ 133.370220][T10025] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 133.374137][ T5366] usb 1-1: SerialNumber: syz [ 133.390577][T10007] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1596: attempt to clear invalid blocks 2 len 1 [ 133.392801][ T5366] usb 1-1: config 0 descriptor?? [ 133.435677][T10023] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 133.465635][T10007] EXT4-fs (loop4): Remounting filesystem read-only [ 133.528634][T10007] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 133.607495][T10023] hfsplus: filesystem is marked journaled, leaving read-only. [ 133.607796][T10007] EXT4-fs (loop4): Remounting filesystem read-only [ 133.661476][T10007] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1596: invalid indirect mapped block 1819239214 (level 0) [ 133.665264][ T5366] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 133.709638][T10007] EXT4-fs (loop4): Remounting filesystem read-only [ 133.719235][T10007] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1596: invalid indirect mapped block 1819239214 (level 1) [ 133.805014][T10007] EXT4-fs (loop4): Remounting filesystem read-only [ 133.871468][ T5366] usb write operation failed. (-71) [ 133.879550][T10007] EXT4-fs (loop4): 1 truncate cleaned up [ 133.889109][ T5366] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.917945][T10007] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 133.951752][ T5366] dvbdev: DVB: registering new adapter (Terratec H7) [ 133.955977][T10076] loop2: detected capacity change from 0 to 64 [ 133.960045][ T5366] usb 1-1: media controller created [ 133.978420][ T5366] usb read operation failed. (-71) [ 134.012111][ T5366] usb write operation failed. (-71) [ 134.019935][ T5366] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 134.051304][ T5366] usb 1-1: USB disconnect, device number 11 [ 134.124840][T10093] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 134.134944][T10093] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 10093, name: syz.1.1618 [ 134.144830][T10093] 1 lock held by syz.1.1618/10093: [ 134.150052][T10093] #0: ffffffff8c3443b8 (css_set_lock){....}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 134.160319][T10093] irq event stamp: 184 [ 134.164557][T10093] hardirqs last enabled at (183): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 134.175711][T10093] hardirqs last disabled at (184): [] _raw_spin_lock_irq+0x86/0xf0 [ 134.185352][T10093] softirqs last enabled at (166): [] ip_setsockopt+0x58a/0x3130 [ 134.195075][T10093] softirqs last disabled at (164): [] release_sock+0x2b/0x1b0 [ 134.204446][T10093] Preemption disabled at: [ 134.204453][T10093] [<0000000000000000>] 0x0 [ 134.213955][T10093] CPU: 0 PID: 10093 Comm: syz.1.1618 Not tainted syzkaller #0 [ 134.221500][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.231707][T10093] Call Trace: [ 134.235233][T10093] [ 134.238144][T10093] dump_stack_lvl+0x188/0x250 [ 134.242889][T10093] ? ip_setsockopt+0x58a/0x3130 [ 134.247899][T10093] ? show_regs_print_info+0x20/0x20 [ 134.253250][T10093] ? load_image+0x400/0x400 [ 134.258066][T10093] ___might_sleep+0x493/0x610 [ 134.262846][T10093] ? __might_sleep+0xf0/0xf0 [ 134.267670][T10093] down_read+0x20/0x2e0 [ 134.271931][T10093] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 134.277605][T10093] ? kernfs_find_ns+0x510/0x510 [ 134.282705][T10093] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 134.288936][T10093] cgroup_get_from_path+0x5f/0x2f0 [ 134.294144][T10093] cgroup_mt_check_v1+0x1ae/0x2c0 [ 134.299251][T10093] xt_check_match+0x425/0xaf0 [ 134.304105][T10093] ? xt_check_proc_name+0x240/0x240 [ 134.309780][T10093] ? pcpu_alloc+0x1121/0x1770 [ 134.314569][T10093] ? xt_find_match+0x1e1/0x210 [ 134.319587][T10093] translate_table+0x1551/0x20e0 [ 134.324633][T10093] ? ipt_register_table+0x800/0x800 [ 134.329920][T10093] ? __might_fault+0xb7/0x110 [ 134.334663][T10093] ? __lock_acquire+0x7d10/0x7d10 [ 134.339699][T10093] ? _copy_from_user+0x111/0x170 [ 134.344820][T10093] do_ipt_set_ctl+0x964/0xd80 [ 134.349833][T10093] ? futex_wait_queue_me+0x178/0x440 [ 134.355118][T10093] ? nf_setsockopt+0x218/0x280 [ 134.359956][T10093] ? ipt_unregister_table_exit+0x220/0x220 [ 134.366026][T10093] ? __lock_acquire+0x7d10/0x7d10 [ 134.371223][T10093] ? __mutex_lock_common+0x465/0x2400 [ 134.376860][T10093] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 134.382807][T10093] ? mutex_unlock+0x10/0x10 [ 134.387487][T10093] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.393019][T10093] ? lockdep_hardirqs_on+0x94/0x140 [ 134.398629][T10093] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.404149][T10093] nf_setsockopt+0x25f/0x280 [ 134.408989][T10093] ip_setsockopt+0x207d/0x3130 [ 134.414342][T10093] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 134.421870][T10093] ? __might_sleep+0xf0/0xf0 [ 134.426922][T10093] ? rcu_lock_release+0x9/0x20 [ 134.431876][T10093] tcp_setsockopt+0x240/0x1e90 [ 134.436751][T10093] ? aa_sk_perm+0x7dc/0x910 [ 134.441883][T10093] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 134.447533][T10093] ? aa_af_perm+0x340/0x340 [ 134.452128][T10093] ? __fget_files+0x40f/0x480 [ 134.457058][T10093] ? aa_sock_opt_perm+0x74/0x100 [ 134.462816][T10093] ? sock_common_setsockopt+0x32/0xb0 [ 134.468190][T10093] ? sock_common_recvmsg+0x1c0/0x1c0 [ 134.474224][T10093] __sys_setsockopt+0x2bf/0x3d0 [ 134.479195][T10093] __x64_sys_setsockopt+0xb1/0xc0 [ 134.484239][T10093] do_syscall_64+0x4c/0xa0 [ 134.488929][T10093] ? clear_bhb_loop+0x30/0x80 [ 134.493762][T10093] ? clear_bhb_loop+0x30/0x80 [ 134.498639][T10093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.504707][T10093] RIP: 0033:0x7f5d1ff89f79 [ 134.509252][T10093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.530313][T10093] RSP: 002b:00007f5d1e1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.538803][T10093] RAX: ffffffffffffffda RBX: 00007f5d20203fa0 RCX: 00007f5d1ff89f79 [ 134.546755][T10093] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 134.554730][T10093] RBP: 00007f5d200207e0 R08: 00000000000022f8 R09: 0000000000000000 [ 134.562799][T10093] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 134.571291][T10093] R13: 00007f5d20204038 R14: 00007f5d20203fa0 R15: 00007ffdf8f79948 [ 134.579270][T10093] [ 134.582272][T10093] [ 134.584573][T10093] ============================= [ 134.589597][T10093] [ BUG: Invalid wait context ] [ 134.594507][T10093] syzkaller #0 Tainted: G W [ 134.600476][T10093] ----------------------------- [ 134.605392][T10093] syz.1.1618/10093 is trying to lock: [ 134.610830][T10093] ffffffff8c44f9d0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 134.620554][T10093] other info that might help us debug this: [ 134.626614][T10093] context-{4:4} [ 134.630076][T10093] 1 lock held by syz.1.1618/10093: [ 134.635776][T10093] #0: ffffffff8c3443b8 (css_set_lock){....}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 134.646303][T10093] stack backtrace: [ 134.650001][T10093] CPU: 0 PID: 10093 Comm: syz.1.1618 Tainted: G W syzkaller #0 [ 134.659243][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.669595][T10093] Call Trace: [ 134.672872][T10093] [ 134.675900][T10093] dump_stack_lvl+0x188/0x250 [ 134.680599][T10093] ? show_regs_print_info+0x20/0x20 [ 134.686055][T10093] ? load_image+0x400/0x400 [ 134.690954][T10093] __lock_acquire+0x1bf8/0x7d10 [ 134.695898][T10093] ? 0xffffffffa002c000 [ 134.700381][T10093] ? verify_lock_unused+0x140/0x140 [ 134.705748][T10093] ? __printk_cpu_unlock+0x5f/0x70 [ 134.711205][T10093] ? dump_stack_lvl+0x1fd/0x250 [ 134.716490][T10093] ? ip_setsockopt+0x58a/0x3130 [ 134.721421][T10093] ? show_regs_print_info+0x20/0x20 [ 134.726750][T10093] ? load_image+0x400/0x400 [ 134.731252][T10093] lock_acquire+0x19e/0x400 [ 134.735858][T10093] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 134.741545][T10093] ? __might_sleep+0xf0/0xf0 [ 134.746216][T10093] ? read_lock_is_recursive+0x10/0x10 [ 134.751658][T10093] down_read+0x44/0x2e0 [ 134.755994][T10093] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 134.761786][T10093] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 134.767230][T10093] ? kernfs_find_ns+0x510/0x510 [ 134.772240][T10093] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 134.778554][T10093] cgroup_get_from_path+0x5f/0x2f0 [ 134.783915][T10093] cgroup_mt_check_v1+0x1ae/0x2c0 [ 134.788953][T10093] xt_check_match+0x425/0xaf0 [ 134.793979][T10093] ? xt_check_proc_name+0x240/0x240 [ 134.799445][T10093] ? pcpu_alloc+0x1121/0x1770 [ 134.804301][T10093] ? xt_find_match+0x1e1/0x210 [ 134.809416][T10093] translate_table+0x1551/0x20e0 [ 134.814472][T10093] ? ipt_register_table+0x800/0x800 [ 134.819660][T10093] ? __might_fault+0xb7/0x110 [ 134.824425][T10093] ? __lock_acquire+0x7d10/0x7d10 [ 134.829716][T10093] ? _copy_from_user+0x111/0x170 [ 134.835347][T10093] do_ipt_set_ctl+0x964/0xd80 [ 134.840287][T10093] ? futex_wait_queue_me+0x178/0x440 [ 134.845780][T10093] ? nf_setsockopt+0x218/0x280 [ 134.850812][T10093] ? ipt_unregister_table_exit+0x220/0x220 [ 134.856818][T10093] ? __lock_acquire+0x7d10/0x7d10 [ 134.862093][T10093] ? __mutex_lock_common+0x465/0x2400 [ 134.867904][T10093] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 134.873699][T10093] ? mutex_unlock+0x10/0x10 [ 134.878201][T10093] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.883745][T10093] ? lockdep_hardirqs_on+0x94/0x140 [ 134.889434][T10093] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.894974][T10093] nf_setsockopt+0x25f/0x280 [ 134.899904][T10093] ip_setsockopt+0x207d/0x3130 [ 134.904757][T10093] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 134.910214][T10093] ? __might_sleep+0xf0/0xf0 [ 134.915021][T10093] ? rcu_lock_release+0x9/0x20 [ 134.919933][T10093] tcp_setsockopt+0x240/0x1e90 [ 134.925246][T10093] ? aa_sk_perm+0x7dc/0x910 [ 134.930051][T10093] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 134.937881][T10093] ? aa_af_perm+0x340/0x340 [ 134.942847][T10093] ? __fget_files+0x40f/0x480 [ 134.948281][T10093] ? aa_sock_opt_perm+0x74/0x100 [ 134.954172][T10093] ? sock_common_setsockopt+0x32/0xb0 [ 134.960167][T10093] ? sock_common_recvmsg+0x1c0/0x1c0 [ 134.965461][T10093] __sys_setsockopt+0x2bf/0x3d0 [ 134.970863][T10093] __x64_sys_setsockopt+0xb1/0xc0 [ 134.976498][T10093] do_syscall_64+0x4c/0xa0 [ 134.981904][T10093] ? clear_bhb_loop+0x30/0x80 [ 134.986672][T10093] ? clear_bhb_loop+0x30/0x80 [ 134.992093][T10093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.998377][T10093] RIP: 0033:0x7f5d1ff89f79 [ 135.002787][T10093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.023690][T10093] RSP: 002b:00007f5d1e1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.032284][T10093] RAX: ffffffffffffffda RBX: 00007f5d20203fa0 RCX: 00007f5d1ff89f79 [ 135.040678][T10093] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 135.048899][T10093] RBP: 00007f5d200207e0 R08: 00000000000022f8 R09: 0000000000000000 [ 135.058727][T10093] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000000 [ 135.067764][T10093] R13: 00007f5d20204038 R14: 00007f5d20203fa0 R15: 00007ffdf8f79948 [ 135.076461][T10093] [ 135.141215][T10093] xt_cgroup: invalid path, errno=-2 [ 135.311645][T10079] loop3: detected capacity change from 0 to 40427 [ 135.391952][T10079] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 135.401440][T10079] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.412880][T10079] F2FS-fs (loop3): invalid crc value [ 135.432109][T10079] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.455004][T10079] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.463092][T10079] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5