last executing test programs: 5m8.066189536s ago: executing program 0 (id=1599): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x101000) fadvise64(r0, 0x2, 0x6, 0x5) 5m7.812003111s ago: executing program 0 (id=1603): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffff, {"2c8b42d5bb6c7a3f461813a3c240739c"}, 0x80000000000, 0x2, 0x8000000000000001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x118) 5m7.573716205s ago: executing program 0 (id=1607): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) 5m7.397758496s ago: executing program 0 (id=1611): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3210842, &(0x7f000000ad80)={[{@discard_size={'discard', 0x3d, 0x738c}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@quota}, {@noquota}, {@grpquota}, {@noquota}, {@nodiscard}]}, 0x24, 0x62cf, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m5.537310215s ago: executing program 0 (id=1631): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000040)={[{@inode32}, {@swalloc}, {@prjquota}]}, 0x1, 0x97e9, &(0x7f000001c700)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0xffffffffffff8001, 0x0, 0x8, 0x7, 0x20000005, 0x4035}) 5m4.837795067s ago: executing program 0 (id=1638): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x40) 5m4.190235285s ago: executing program 32 (id=1638): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x40) 2.512396682s ago: executing program 1 (id=6012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.300346044s ago: executing program 5 (id=6014): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002740)='/sys/kernel/oops_count', 0x161000, 0xd8) preadv(r0, &(0x7f0000004a40)=[{&(0x7f0000004a00)=""/39, 0x27}], 0x1, 0x2, 0x8) 2.189294611s ago: executing program 1 (id=6016): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT], 0x0, 0x687, &(0x7f0000000fc0)="$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") setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) 1.943929365s ago: executing program 5 (id=6019): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x21, 0x9e84, &(0x7f000000a180)="$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") sync() 1.86337818s ago: executing program 1 (id=6021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0xc00, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 1.768236655s ago: executing program 3 (id=6023): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.587384426s ago: executing program 1 (id=6025): r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) 1.580435687s ago: executing program 3 (id=6026): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 1.383637648s ago: executing program 2 (id=6028): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, &(0x7f0000000bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x20b, 0xc5, 0x4ab}}], 0x20, 0x20000040}], 0x1, 0x1) 1.34181357s ago: executing program 1 (id=6029): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x7}, {}, {0x0, 0x9}, {0x0, 0x1}, {}, {0x0, 0x7}], 0x20}) 1.329933501s ago: executing program 3 (id=6031): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[], 0x58) 1.136573823s ago: executing program 4 (id=6032): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000003c0)={0x1, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) 1.136061613s ago: executing program 1 (id=6033): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e720c81010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10, 0x4, "fb5b1ff5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.116072634s ago: executing program 2 (id=6034): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000300)={0x12}) 1.076597867s ago: executing program 3 (id=6035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1.031901659s ago: executing program 5 (id=6036): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 933.341865ms ago: executing program 2 (id=6037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x30f5c62a, r0, 0x4}, 0x38) 893.922337ms ago: executing program 4 (id=6038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x41) 669.84935ms ago: executing program 4 (id=6039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 609.345624ms ago: executing program 2 (id=6040): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 556.160017ms ago: executing program 5 (id=6041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000140)=0xfffffffb) 487.020201ms ago: executing program 4 (id=6042): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 463.951602ms ago: executing program 3 (id=6043): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) 343.589269ms ago: executing program 5 (id=6044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 323.092531ms ago: executing program 2 (id=6045): unshare(0x2a020480) bpf$LINK_DETACH(0x22, &(0x7f00000008c0), 0x4) 285.315043ms ago: executing program 4 (id=6046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x810) 149.79187ms ago: executing program 3 (id=6047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000ffff21bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="10000000440001000a000100aaaaaaaaaabb000008000400b80f0000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 91.249295ms ago: executing program 4 (id=6048): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) 69.000115ms ago: executing program 5 (id=6049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 0s ago: executing program 2 (id=6050): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x700, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) kernel console output (not intermixed with test programs): 8.702158][T11215] ntfs: volume version 3.1. [ 298.741639][T11215] syz.3.2997: attempt to access beyond end of device [ 298.741639][T11215] loop3: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 298.803661][T11215] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x8a0222. [ 298.827681][T11217] ntfs: volume version 3.1. [ 298.857914][T11215] syz.3.2997: attempt to access beyond end of device [ 298.857914][T11215] loop3: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 298.934933][T11215] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x8a0223. [ 298.979281][T11215] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 299.030804][T11215] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 299.109479][T11215] syz.3.2997: attempt to access beyond end of device [ 299.109479][T11215] loop3: rw=0, sector=36178056, nr_sectors = 4 limit=4096 [ 299.153767][ T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 299.156538][T11215] syz.3.2997: attempt to access beyond end of device [ 299.156538][T11215] loop3: rw=0, sector=36178060, nr_sectors = 4 limit=4096 [ 299.348685][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 299.359141][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 299.421139][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.447091][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.500440][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 299.537508][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 299.574655][ T22] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 299.608866][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.648507][ T22] usb 3-1: config 0 descriptor?? [ 299.664907][T11235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 299.673472][T11253] loop4: detected capacity change from 0 to 64 [ 299.706810][T11251] loop3: detected capacity change from 0 to 2048 [ 299.785347][T11251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.789023][T11259] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 299.953450][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 299.961014][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 299.968276][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 299.976063][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 299.982929][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 299.989899][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 299.996927][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.003879][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.011629][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.018620][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.025501][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.032368][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.039381][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.046656][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.053762][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.060695][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.067658][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.074585][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.081453][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.088401][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.095295][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.102167][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.109116][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.116103][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.122969][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.129940][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.136885][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.143875][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.150739][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.161136][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 300.196465][ T8570] usb 3-1: USB disconnect, device number 14 [ 300.200981][ T4278] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 300.358375][T11270] overlayfs: missing 'lowerdir' [ 300.857014][T11289] loop1: detected capacity change from 0 to 1024 [ 300.969672][T11294] loop5: detected capacity change from 0 to 256 [ 300.978657][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3032'. [ 301.025945][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 301.041863][T11294] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 301.084040][ T8570] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 301.283622][ T8570] usb 4-1: Using ep0 maxpacket: 16 [ 301.290505][ T8570] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 301.311066][ T8570] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.331923][ T8570] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.345372][ T8570] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 301.381999][ T8570] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 301.431262][ T8570] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.453632][ T8570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.473929][ T8570] usb 4-1: Product: syz [ 301.478142][ T8570] usb 4-1: Manufacturer: syz [ 301.479207][T11301] loop4: detected capacity change from 0 to 4096 [ 301.533772][ T8570] usb 4-1: SerialNumber: syz [ 301.557661][T11301] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 301.601384][T11301] ntfs3: loop4: Failed to load $Extend. [ 301.630945][T11310] xt_limit: Overflow, try lower: 1207959552/384 [ 301.807206][ T8570] usb 4-1: USB disconnect, device number 13 [ 302.034493][T11321] xt_hashlimit: size too large, truncated to 1048576 [ 302.050321][T11321] xt_hashlimit: max too large, truncated to 1048576 [ 302.084449][ T6656] udevd[6656]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.432973][T11332] loop4: detected capacity change from 0 to 4096 [ 302.483437][T11332] ntfs3: loop4: ino=3, Correct links count -> 2. [ 302.531073][T11337] loop3: detected capacity change from 0 to 256 [ 302.574663][T11332] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 303.498528][T11373] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3072'. [ 303.686606][T11380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3075'. [ 303.703782][T11379] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3074'. [ 304.427809][T11407] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 304.620806][T11415] loop5: detected capacity change from 0 to 128 [ 304.800989][T11420] xt_limit: Overflow, try lower: 65536/2147483648 [ 305.175097][T11437] netlink: 'syz.4.3103': attribute type 1 has an invalid length. [ 305.454763][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 305.639287][T11455] loop5: detected capacity change from 0 to 2048 [ 305.716686][T11455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.019548][T11468] device wlan0 entered promiscuous mode [ 306.279806][T11478] program syz.2.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.371341][T11483] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 306.490871][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3128'. [ 306.524037][T11488] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 306.653820][ T6652] udevd[6652]: inotify_add_watch(7, /dev/nbd4p5, 10) failed: No such file or directory [ 307.698817][T11532] xt_TCPMSS: Only works on TCP SYN packets [ 307.788786][T11504] loop3: detected capacity change from 0 to 32768 [ 307.817390][T11504] (syz.3.3137,11504,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.884677][T11504] (syz.3.3137,11504,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.968538][T11538] device wg1 entered promiscuous mode [ 307.990173][T11504] JBD2: Ignoring recovery information on journal [ 308.144109][T11504] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 308.350194][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 308.992604][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3170'. [ 309.113611][ T8570] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 309.259803][T11587] netlink: 'syz.3.3176': attribute type 2 has an invalid length. [ 309.303752][ T8570] usb 2-1: Using ep0 maxpacket: 32 [ 309.325307][ T8570] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 309.355001][ T8570] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.464211][ T8570] usb 2-1: config 0 has no interface number 0 [ 309.471043][ T8570] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.546088][ T8570] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 309.556660][ T8570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.564926][ T8570] usb 2-1: Product: syz [ 309.569197][ T8570] usb 2-1: Manufacturer: syz [ 309.587405][ T8570] usb 2-1: SerialNumber: syz [ 309.620647][ T8570] usb 2-1: config 0 descriptor?? [ 309.637263][ T8570] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 309.654136][ T8570] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 309.783626][T11603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.816005][T11603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.843041][ T8570] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 309.854860][ T8570] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 309.855247][T11603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.064026][ T8570] usb 2-1: USB disconnect, device number 11 [ 310.437097][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 311.336537][T11664] loop4: detected capacity change from 0 to 8 [ 311.363881][ T8570] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 311.384481][T11664] SQUASHFS error: Unable to read inode 0xa7 [ 311.553662][ T8570] usb 3-1: Using ep0 maxpacket: 32 [ 311.560757][ T8570] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 311.593705][ T8570] usb 3-1: config 0 has no interface number 0 [ 311.633715][ T8570] usb 3-1: config 0 interface 6 has no altsetting 0 [ 311.669720][ T8570] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=ab.5a [ 311.689194][ T8570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.707860][ T8570] usb 3-1: Product: syz [ 311.712078][ T8570] usb 3-1: Manufacturer: syz [ 311.727272][ T8570] usb 3-1: SerialNumber: syz [ 311.738511][T11674] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3218'. [ 311.757725][ T8570] usb 3-1: config 0 descriptor?? [ 311.987462][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3222'. [ 312.009054][ T8570] cdc_subset: probe of 3-1:0.6 failed with error -22 [ 312.222004][ T4317] usb 3-1: USB disconnect, device number 15 [ 312.506372][T11698] loop4: detected capacity change from 0 to 164 [ 312.694925][T11701] netlink: 'syz.3.3232': attribute type 1 has an invalid length. [ 313.126705][T11714] loop3: detected capacity change from 0 to 2048 [ 313.163746][ T4317] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 313.173015][T11714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.373673][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 313.389291][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.435462][ T4317] usb 3-1: config 3 has an invalid interface number: 182 but max is 0 [ 313.460821][ T4317] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 313.506654][ T4317] usb 3-1: config 3 has no interface number 0 [ 313.533952][ T4317] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0xF has an invalid bInterval 18, changing to 7 [ 313.563639][ T4317] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 313.593649][ T4317] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 313.617828][ T4317] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 313.699827][ T4317] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.723559][ T4317] usb 3-1: config 3 interface 182 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 313.763970][ T4317] usb 3-1: config 3 interface 182 has no altsetting 0 [ 313.796948][ T4317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 313.823602][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.831664][ T4317] usb 3-1: Product: syz [ 313.875613][ T4317] usb 3-1: Manufacturer: syz [ 313.880267][ T4317] usb 3-1: SerialNumber: syz [ 314.137572][ T4317] usbtest 3-1:3.182: couldn't get endpoints, -71 [ 314.163643][ T4317] usbtest: probe of 3-1:3.182 failed with error -71 [ 314.182337][ T4317] usb 3-1: USB disconnect, device number 16 [ 314.452113][T11746] overlayfs: conflicting options: nfs_export=on,index=off [ 314.657875][T11754] netlink: 'syz.4.3259': attribute type 1 has an invalid length. [ 314.749858][ T4317] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 314.829374][T11756] device veth3 entered promiscuous mode [ 314.953906][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 314.961577][ T4317] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 314.980359][ T4317] usb 4-1: config 0 has no interface number 0 [ 315.023101][ T4317] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 315.077624][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.109702][ T4317] usb 4-1: Product: syz [ 315.127265][ T4317] usb 4-1: Manufacturer: syz [ 315.145682][ T4317] usb 4-1: SerialNumber: syz [ 315.164299][ T4317] usb 4-1: config 0 descriptor?? [ 315.186047][ T4317] hub 4-1:0.132: bad descriptor, ignoring hub [ 315.194904][ T4317] hub: probe of 4-1:0.132 failed with error -5 [ 315.245401][ T4317] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input18 [ 315.463648][ T22] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 315.534980][T11777] libceph: resolve '0' (ret=-3): failed [ 315.608214][ T14] usb 4-1: USB disconnect, device number 14 [ 315.665537][ T22] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 315.683881][ T22] usb 5-1: config 8 has no interface number 0 [ 315.696557][ T22] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 315.758276][ T22] usb 5-1: config 8 interface 177 has no altsetting 0 [ 315.784301][ T22] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 315.793395][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.838719][T11768] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 315.977825][T11784] loop5: detected capacity change from 0 to 4096 [ 316.019014][T11784] __ntfs_error: 10 callbacks suppressed [ 316.019034][T11784] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 316.074578][ T22] usb 5-1: string descriptor 0 read error: -71 [ 316.091905][ C1] ir_toy 5-1:8.177: out urb status: -71 [ 316.126598][T11784] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 316.165882][T11784] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 316.216044][T11784] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 316.260591][T11784] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 316.307416][T11784] ntfs: volume version 3.1. [ 316.331520][T11784] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 316.370017][T11784] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 316.404831][T11784] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 316.424405][T11784] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 316.448227][T11799] loop2: detected capacity change from 0 to 4096 [ 316.469742][T11784] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 316.505981][T11799] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 316.523091][T11798] loop3: detected capacity change from 0 to 4096 [ 316.614507][ T22] ir_toy 5-1:8.177: could not write reset command: -110 [ 316.626604][ T22] ir_toy: probe of 5-1:8.177 failed with error -110 [ 316.641968][T11798] ntfs3: loop3: ino=5, "/" directory corrupted [ 316.697263][ T22] usb 5-1: USB disconnect, device number 8 [ 316.997705][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.004096][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.554047][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3295'. [ 317.603728][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3295'. [ 317.701503][T11837] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3298'. [ 317.726470][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3298'. [ 318.819076][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 318.830435][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 318.839595][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 318.853749][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 319.044893][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 319.065985][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 319.086142][ T22] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 319.110100][ T22] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 319.138763][ T22] usb 5-1: Product: syz [ 319.142976][ T22] usb 5-1: Manufacturer: syz [ 319.164354][ T22] usb 5-1: SerialNumber: syz [ 319.270029][T11890] loop5: detected capacity change from 0 to 4096 [ 319.397552][ T22] usb 5-1: Invalid connection information received from device [ 319.430040][T11890] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 319.430040][T11890] [ 319.623212][ T6025] usb 5-1: USB disconnect, device number 9 [ 319.833586][ T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 320.023706][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 320.035447][ T22] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 320.062135][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.080700][ T22] usb 2-1: Product: syz [ 320.090828][ T22] usb 2-1: Manufacturer: syz [ 320.096654][ T22] usb 2-1: SerialNumber: syz [ 320.128750][ T22] usb 2-1: config 0 descriptor?? [ 320.182302][T11923] loop5: detected capacity change from 0 to 16 [ 320.225073][T11923] erofs: (device loop5): mounted with root inode @ nid 36. [ 320.270212][T11923] syz.5.3340: attempt to access beyond end of device [ 320.270212][T11923] loop5: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 320.333690][T11923] syz.5.3340: attempt to access beyond end of device [ 320.333690][T11923] loop5: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 320.359336][ T22] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -5 [ 320.372538][ T22] f81534a_ctrl 2-1:0.0: failed to enable ports: -5 [ 320.389721][ T22] f81534a_ctrl: probe of 2-1:0.0 failed with error -5 [ 320.413718][ T6025] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 320.431795][ T22] usb 2-1: USB disconnect, device number 12 [ 320.619814][ T6025] usb 3-1: Using ep0 maxpacket: 32 [ 320.644136][ T6025] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 320.661568][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.672406][ T6025] usb 3-1: config 0 descriptor?? [ 320.682996][ T6025] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 320.733763][ T6033] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 320.962964][ T6033] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 320.981722][ T6033] usb 5-1: config 0 has no interface number 0 [ 321.019392][ T6033] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 321.052594][ T6033] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.075754][ T6033] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 321.087484][ T6033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.096306][ T6033] usb 5-1: Product: syz [ 321.101756][ T6025] gspca_nw80x: reg_r err -71 [ 321.119952][ T6025] nw80x: probe of 3-1:0.0 failed with error -71 [ 321.130080][ T6033] usb 5-1: Manufacturer: syz [ 321.145945][ T6025] usb 3-1: USB disconnect, device number 17 [ 321.152048][ T6033] usb 5-1: SerialNumber: syz [ 321.188631][ T6033] usb 5-1: config 0 descriptor?? [ 321.218659][T11927] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.230642][ T6033] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 321.247136][ T6033] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 321.369463][T11952] sctp: [Deprecated]: syz.5.3355 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.369463][T11952] Use struct sctp_sack_info instead [ 321.621876][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3359'. [ 321.668966][ T6025] usb 5-1: USB disconnect, device number 10 [ 321.700354][ T6025] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 321.749200][ T6025] cyberjack 5-1:0.69: device disconnected [ 321.797608][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 321.797624][ T26] audit: type=1326 audit(1769468365.037:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 321.878827][ T26] audit: type=1326 audit(1769468365.057:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd62b39c747 code=0x7ffc0000 [ 321.904957][T11966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3361'. [ 321.945113][ T26] audit: type=1326 audit(1769468365.057:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd62b35b78e code=0x7ffc0000 [ 322.013299][ T26] audit: type=1326 audit(1769468365.077:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd62b35b78e code=0x7ffc0000 [ 322.132435][ T26] audit: type=1326 audit(1769468365.077:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd62b35b78e code=0x7ffc0000 [ 322.160406][T11973] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3365'. [ 322.215006][ T26] audit: type=1326 audit(1769468365.077:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd62b35b78e code=0x7ffc0000 [ 322.293707][ T26] audit: type=1326 audit(1769468365.077:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 322.316078][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.388008][ T26] audit: type=1326 audit(1769468365.077:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11962 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 323.051304][T11977] loop3: detected capacity change from 0 to 32768 [ 323.059412][ T4324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 323.097600][T11977] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3367 (11977) [ 323.133738][ T8570] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 323.141621][T11977] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 323.182343][T11977] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 323.201460][T11977] BTRFS info (device loop3): force zlib compression, level 3 [ 323.211527][T11977] BTRFS info (device loop3): force clearing of disk cache [ 323.221948][T11977] BTRFS info (device loop3): setting nodatasum [ 323.239853][T11977] BTRFS info (device loop3): allowing degraded mounts [ 323.263728][T11977] BTRFS info (device loop3): enabling disk space caching [ 323.272477][ T4324] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 323.293754][T11977] BTRFS info (device loop3): disk space caching is enabled [ 323.324297][ T4324] usb 2-1: config 0 has no interface number 0 [ 323.343660][ T4324] usb 2-1: config 0 interface 122 has no altsetting 0 [ 323.353956][ T8570] usb 5-1: Using ep0 maxpacket: 8 [ 323.361167][ T8570] usb 5-1: unable to get BOS descriptor set [ 323.385530][ T4324] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 323.407320][ T8570] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 323.466666][ T8570] usb 5-1: config 0 has no interface number 0 [ 323.472812][ T8570] usb 5-1: config 0 interface 125 has no altsetting 0 [ 323.480276][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.500063][ T4324] usb 2-1: Product: syz [ 323.504717][ T4324] usb 2-1: Manufacturer: syz [ 323.509595][ T4324] usb 2-1: SerialNumber: syz [ 323.525405][ T8570] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 323.535335][ T8570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.552546][ T4324] usb 2-1: config 0 descriptor?? [ 323.557941][ T8570] usb 5-1: Product: syz [ 323.567851][ T8570] usb 5-1: Manufacturer: syz [ 323.572530][ T8570] usb 5-1: SerialNumber: syz [ 323.590233][ T8570] usb 5-1: config 0 descriptor?? [ 323.597242][ T8570] hub 5-1:0.125: bad descriptor, ignoring hub [ 323.604924][ T8570] hub: probe of 5-1:0.125 failed with error -5 [ 323.613262][ T8570] usb 5-1: Found UVC 0.00 device syz (17dc:0202) [ 323.619813][ T8570] usb 5-1: No valid video chain found. [ 323.627068][T11977] BTRFS info (device loop3): rebuilding free space tree [ 323.665609][T11977] BTRFS info (device loop3): disabling free space tree [ 323.704133][T11977] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 323.743164][T11977] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 323.787365][T12033] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 323.943837][ T4317] usb 5-1: USB disconnect, device number 11 [ 323.997091][ T4317] usb 2-1: USB disconnect, device number 13 [ 324.027961][ T4317] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 324.064287][ T4273] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 324.210292][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 324.331396][ T6652] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (6652) [ 324.552337][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3395'. [ 324.757375][T12057] netlink: 'syz.1.3398': attribute type 16 has an invalid length. [ 324.783682][T12057] netlink: 'syz.1.3398': attribute type 17 has an invalid length. [ 324.837263][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.866868][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.907224][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.921584][T12057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.197335][T12074] loop2: detected capacity change from 0 to 512 [ 325.258785][T12074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.286092][T12074] EXT4-fs: Ignoring removed bh option [ 325.406960][T12074] EXT4-fs error (device loop2): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 325.442430][T12074] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #11: comm syz.2.3404: corrupted inode contents [ 325.483982][T12074] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #11: comm syz.2.3404: mark_inode_dirty error [ 325.495823][ T6033] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 325.537655][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3409'. [ 325.564223][T12074] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3404: invalid indirect mapped block 1 (level 1) [ 325.584909][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 325.650583][T12074] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #11: comm syz.2.3404: corrupted inode contents [ 325.694954][ T6033] usb 6-1: not running at top speed; connect to a high speed hub [ 325.718310][ T6033] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 325.746869][T12074] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 325.763569][ T6033] usb 6-1: config 95 has no interface number 0 [ 325.780059][ T6033] usb 6-1: config 95 interface 1 has no altsetting 0 [ 325.792784][T12074] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #11: comm syz.2.3404: corrupted inode contents [ 325.807530][ T6033] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 325.825935][T12074] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.3404: mark_inode_dirty error [ 325.837448][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.857550][ T6033] usb 6-1: Product: syz [ 325.861770][ T6033] usb 6-1: Manufacturer: syz [ 325.873678][ T6033] usb 6-1: SerialNumber: syz [ 325.883989][T12074] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 325.921616][T12074] EXT4-fs (loop2): 1 truncate cleaned up [ 325.941794][T12074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 326.045999][T12074] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.3404: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 326.264430][ T6033] usb 6-1: USB disconnect, device number 6 [ 326.301645][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 326.347003][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.522028][T12107] loop2: detected capacity change from 0 to 47 [ 326.643255][ T6652] udevd[6652]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.738517][T12151] netlink: 'syz.3.3442': attribute type 9 has an invalid length. [ 327.774318][T12151] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3442'. [ 327.850589][T12157] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.753863][ T6033] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 328.886088][T12200] netlink: 'syz.5.3467': attribute type 21 has an invalid length. [ 328.918716][T12200] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3467'. [ 328.936870][ T6033] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 328.946132][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 328.983619][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.023736][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 329.091831][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 329.111668][ T6033] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 329.129520][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 329.176233][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.212899][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 329.261521][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 329.289078][ T6033] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 329.313626][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 329.333666][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.369327][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 329.401394][ T6033] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 329.464399][ T6033] usb 5-1: string descriptor 0 read error: -22 [ 329.470693][ T6033] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.505128][ T6033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.554238][ T6033] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 329.581402][T12224] QAT: Invalid ioctl 1075883590 [ 329.609771][T12224] QAT: Invalid ioctl 1075883590 [ 329.621187][T12224] QAT: Invalid ioctl 1075883590 [ 329.626542][T12224] QAT: Invalid ioctl 1075883590 [ 329.631722][T12224] QAT: Invalid ioctl 1075883590 [ 329.658897][T12224] QAT: Invalid ioctl 1075883590 [ 329.674829][T12224] QAT: Invalid ioctl 1075883590 [ 329.690077][T12224] QAT: Invalid ioctl 1075883590 [ 329.702501][T12224] QAT: Invalid ioctl 1075883590 [ 329.708217][T12224] QAT: Invalid ioctl 1075883590 [ 329.822530][ T8569] usb 5-1: USB disconnect, device number 12 [ 329.861593][T12232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3483'. [ 330.144341][T12242] unsupported nlmsg_type 40 [ 331.141455][T12284] loop4: detected capacity change from 0 to 64 [ 331.332455][ T26] audit: type=1326 audit(1769468374.567:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 331.423618][ T26] audit: type=1326 audit(1769468374.617:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 331.445989][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.490598][ T26] audit: type=1326 audit(1769468374.617:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 331.512961][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.642237][ T26] audit: type=1326 audit(1769468374.617:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 331.664692][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.750184][ T26] audit: type=1326 audit(1769468374.617:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 331.804638][T12305] xt_TCPMSS: Only works on TCP SYN packets [ 331.921310][T12312] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 332.378810][T12330] netlink: 'syz.3.3532': attribute type 2 has an invalid length. [ 332.783679][ T8569] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 332.856466][T12348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3540'. [ 332.983671][ T8569] usb 2-1: Using ep0 maxpacket: 8 [ 332.991954][ T8569] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 333.031958][ T8569] usb 2-1: config 0 has no interface number 0 [ 333.059072][ T8569] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 333.106903][ T8569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.143794][ T8569] usb 2-1: Product: syz [ 333.165866][ T8569] usb 2-1: Manufacturer: syz [ 333.180782][ T8569] usb 2-1: SerialNumber: syz [ 333.192669][ T8569] usb 2-1: config 0 descriptor?? [ 333.421214][ T8569] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 333.430732][ T8569] usb 2-1: No valid video chain found. [ 333.656758][ T8569] usb 2-1: USB disconnect, device number 14 [ 333.818867][T12342] loop2: detected capacity change from 0 to 32768 [ 334.047764][T12342] XFS (loop2): Mounting V5 Filesystem [ 334.137056][T12389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.161837][T12342] XFS (loop2): Ending clean mount [ 334.168889][T12342] XFS (loop2): Quotacheck needed: Please wait. [ 334.234484][T12342] XFS (loop2): Quotacheck: Done. [ 334.493143][ T4281] XFS (loop2): Unmounting Filesystem [ 334.879426][T12411] loop4: detected capacity change from 0 to 2048 [ 335.013791][T12411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 335.022372][T12411] ext4 filesystem being mounted at /774/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.108291][T12420] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3571'. [ 335.131918][T12411] fscrypt (loop4, inode 14): Error -61 getting encryption context [ 335.374067][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 335.417025][T12422] loop1: detected capacity change from 0 to 4096 [ 335.482624][T12422] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 335.576014][T12422] ntfs3: loop1: Failed to load $Extend. [ 336.048363][T12444] loop4: detected capacity change from 0 to 4096 [ 336.163222][T12444] ntfs: volume version 3.1. [ 336.381463][ T66] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 336.450440][T12458] netlink: 'syz.3.3589': attribute type 1 has an invalid length. [ 336.471667][T12458] netlink: 'syz.3.3589': attribute type 12 has an invalid length. [ 336.522949][T12458] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3589'. [ 337.070221][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3597'. [ 337.514952][T12457] loop1: detected capacity change from 0 to 40427 [ 337.533880][T12490] netlink: 'syz.2.3604': attribute type 2 has an invalid length. [ 337.541690][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 337.567442][T12457] F2FS-fs (loop1): invalid crc value [ 337.615881][T12457] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 337.767765][T12497] loop3: detected capacity change from 0 to 256 [ 337.850658][T12497] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.897897][T12457] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 337.940453][T12457] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 337.980572][T12457] F2FS-fs (loop1): Start checkpoint disabled! [ 338.053337][T12457] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 338.259257][T12511] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 338.410214][ T4294] kworker/u4:5: attempt to access beyond end of device [ 338.410214][ T4294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 338.881824][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 339.146733][T12539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.369561][T12550] device wlan0 entered promiscuous mode [ 339.603994][T12560] program syz.3.3636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.744414][T12566] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 340.081006][T12579] loop3: detected capacity change from 0 to 2048 [ 340.156070][T12579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.258431][T12585] xt_TCPMSS: Only works on TCP SYN packets [ 342.628141][T12673] netlink: 'syz.1.3689': attribute type 2 has an invalid length. [ 342.638016][T12648] loop4: detected capacity change from 0 to 32768 [ 342.672700][T12648] (syz.4.3678,12648,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 342.686624][ T6024] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 342.710734][T12648] (syz.4.3678,12648,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 342.753118][T12648] JBD2: Ignoring recovery information on journal [ 342.799320][T12648] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 342.883726][ T6024] usb 3-1: Using ep0 maxpacket: 32 [ 342.890991][ T6024] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 342.905259][ T6024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.921165][ T6024] usb 3-1: config 0 has no interface number 0 [ 342.947861][ T6024] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.991023][ T6024] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 343.028162][ T6024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.058493][ T6024] usb 3-1: Product: syz [ 343.062723][ T6024] usb 3-1: Manufacturer: syz [ 343.087893][ T6024] usb 3-1: SerialNumber: syz [ 343.110350][ T6024] usb 3-1: config 0 descriptor?? [ 343.144707][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 343.156784][ T6024] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 343.183848][ T6024] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 343.341670][ T6024] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 343.351639][ T6024] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 343.460778][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.476217][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.511982][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.582672][ T6024] usb 3-1: USB disconnect, device number 18 [ 343.654595][T12700] loop5: detected capacity change from 0 to 64 [ 343.867472][T12706] loop5: detected capacity change from 0 to 8 [ 343.928631][T12706] SQUASHFS error: Unable to read inode 0xa7 [ 344.345308][T12718] loop4: detected capacity change from 0 to 2048 [ 344.414299][T12718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.502748][T12724] loop3: detected capacity change from 0 to 164 [ 344.800695][T12730] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 345.071139][T12714] loop5: detected capacity change from 0 to 32768 [ 345.127293][T12714] (syz.5.3707,12714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 345.187173][T12714] (syz.5.3707,12714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 345.341267][T12714] JBD2: Ignoring recovery information on journal [ 345.453598][ T8569] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 345.504835][T12714] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 345.572339][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 345.663600][ T8569] usb 4-1: Using ep0 maxpacket: 32 [ 345.670975][ T8569] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 345.702717][ T8569] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.754600][ T8569] usb 4-1: config 0 has no interface number 0 [ 345.796099][ T8569] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.832739][ T8569] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 345.856888][ T8065] ocfs2: Unmounting device (7,5) on (node local) [ 345.913471][ T8569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.921968][ T8569] usb 4-1: Product: syz [ 345.953650][ T8569] usb 4-1: Manufacturer: syz [ 345.958312][ T8569] usb 4-1: SerialNumber: syz [ 345.986235][ T8569] usb 4-1: config 0 descriptor?? [ 346.028118][ T8569] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 346.043711][ T8569] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 346.206117][ T8569] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 346.223713][ T8569] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 346.455387][ T8570] usb 4-1: USB disconnect, device number 15 [ 346.665119][T12786] device veth3 entered promiscuous mode [ 346.829539][T12798] loop1: detected capacity change from 0 to 8 [ 346.906741][T12798] SQUASHFS error: Unable to read inode 0xa7 [ 347.063726][T12804] libceph: resolve '0' (ret=-3): failed [ 347.733608][ T8569] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 347.753310][T12832] loop3: detected capacity change from 0 to 8 [ 347.820962][T12832] SQUASHFS error: Unable to read inode 0xa7 [ 347.840072][T12834] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.3767'. [ 347.923571][ T8569] usb 3-1: Using ep0 maxpacket: 16 [ 347.938837][ T8569] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 347.965804][ T8569] usb 3-1: config 0 has no interface number 0 [ 347.985613][ T8569] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 348.029834][ T8569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.053869][ T8569] usb 3-1: Product: syz [ 348.058075][ T8569] usb 3-1: Manufacturer: syz [ 348.062701][ T8569] usb 3-1: SerialNumber: syz [ 348.081574][T12836] loop4: detected capacity change from 0 to 4096 [ 348.104089][ T8569] usb 3-1: config 0 descriptor?? [ 348.141665][ T8569] hub 3-1:0.132: bad descriptor, ignoring hub [ 348.148102][ T8569] hub: probe of 3-1:0.132 failed with error -5 [ 348.182204][ T8569] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input20 [ 348.204999][T12836] ntfs3: loop4: ino=5, "/" directory corrupted [ 348.352496][T12846] netlink: 'syz.3.3774': attribute type 1 has an invalid length. [ 348.581827][ T8569] usb 3-1: USB disconnect, device number 19 [ 348.812667][T12860] loop1: detected capacity change from 0 to 2048 [ 348.844768][T12860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.929137][T12864] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 349.187402][T12872] netlink: 'syz.5.3797': attribute type 1 has an invalid length. [ 349.228645][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3786'. [ 349.278714][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3786'. [ 349.517003][T12886] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3790'. [ 349.546576][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3790'. [ 350.066851][ T8570] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 350.279044][ T8570] usb 6-1: Using ep0 maxpacket: 16 [ 350.289203][ T8570] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 350.317764][ T8570] usb 6-1: config 0 has no interface number 0 [ 350.336730][ T8570] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 350.354891][ T8570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.372148][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 350.381258][ T8570] usb 6-1: Product: syz [ 350.385822][ T8570] usb 6-1: Manufacturer: syz [ 350.390479][ T8570] usb 6-1: SerialNumber: syz [ 350.410158][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 350.421224][ T8570] usb 6-1: config 0 descriptor?? [ 350.437022][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 350.456970][ T8570] hub 6-1:0.132: bad descriptor, ignoring hub [ 350.463094][ T8570] hub: probe of 6-1:0.132 failed with error -5 [ 350.482462][ T8570] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input21 [ 350.840250][T12927] loop1: detected capacity change from 0 to 4096 [ 350.974747][T12927] ntfs3: loop1: ino=5, "/" directory corrupted [ 351.079210][T12937] overlayfs: conflicting options: nfs_export=on,index=off [ 351.513927][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 351.532828][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 351.549531][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3824'. [ 351.804782][ T8570] usb 6-1: USB disconnect, device number 7 [ 352.064027][ T14] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 352.143801][ T8569] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 352.253674][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 352.264060][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 352.276120][ T14] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 352.285453][ T14] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 352.293629][ T14] usb 2-1: Product: syz [ 352.301993][ T14] usb 2-1: Manufacturer: syz [ 352.306903][ T14] usb 2-1: SerialNumber: syz [ 352.333710][ T8569] usb 3-1: Using ep0 maxpacket: 32 [ 352.367173][ T8569] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 352.385723][ T8569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.402328][ T26] audit: type=1326 audit(1769468395.637:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a599aeb9 code=0x7ffc0000 [ 352.403894][ T8569] usb 3-1: Product: syz [ 352.466569][ T8569] usb 3-1: Manufacturer: syz [ 352.473615][ T8569] usb 3-1: SerialNumber: syz [ 352.478686][ T26] audit: type=1326 audit(1769468395.677:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a599c747 code=0x7ffc0000 [ 352.509756][ T8569] usb 3-1: config 0 descriptor?? [ 352.528369][ T26] audit: type=1326 audit(1769468395.677:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb9a595b78e code=0x7ffc0000 [ 352.556674][ T26] audit: type=1326 audit(1769468395.677:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb9a595b78e code=0x7ffc0000 [ 352.578562][ T14] usb 2-1: Invalid connection information received from device [ 352.623802][ T26] audit: type=1326 audit(1769468395.677:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb9a595b78e code=0x7ffc0000 [ 352.679018][ T26] audit: type=1326 audit(1769468395.677:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9a595b78e code=0x7ffc0000 [ 352.790822][ T26] audit: type=1326 audit(1769468395.677:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a599aeb9 code=0x7ffc0000 [ 352.829139][ T8569] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 352.857844][ T8569] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 352.889223][ T8569] f81534a_ctrl: probe of 3-1:0.0 failed with error -5 [ 352.902030][ T26] audit: type=1326 audit(1769468395.677:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.3.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a599aeb9 code=0x7ffc0000 [ 352.954979][ T8569] usb 3-1: USB disconnect, device number 20 [ 352.988318][ T7413] usb 2-1: USB disconnect, device number 15 [ 353.299990][T12995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3848'. [ 353.397433][ T22] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 353.462424][T12999] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3851'. [ 353.510347][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3851'. [ 353.605651][ T22] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 353.634493][ T22] usb 4-1: config 8 has no interface number 0 [ 353.661433][ T22] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 353.694035][ T22] usb 4-1: config 8 interface 177 has no altsetting 0 [ 353.703272][ T22] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 353.719317][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.746409][T12988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.794105][ T7413] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 353.972492][ T22] usb 4-1: string descriptor 0 read error: -71 [ 353.993026][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 354.000097][ T7413] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 354.040968][ T7413] usb 6-1: config 0 has no interface number 0 [ 354.058772][ T7413] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 354.092472][ T7413] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.132917][ T7413] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 354.154573][ T7413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.162890][ T7413] usb 6-1: Product: syz [ 354.184990][ T7413] usb 6-1: Manufacturer: syz [ 354.190026][ T7413] usb 6-1: SerialNumber: syz [ 354.197991][ T7413] usb 6-1: config 0 descriptor?? [ 354.203763][T13001] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 354.212929][ T7413] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 354.235690][ T7413] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 354.493783][ T22] ir_toy 4-1:8.177: could not write reset command: -110 [ 354.503936][ T22] ir_toy: probe of 4-1:8.177 failed with error -110 [ 354.534681][ T22] usb 4-1: USB disconnect, device number 16 [ 354.670296][ T7413] usb 6-1: USB disconnect, device number 8 [ 354.697440][ T7413] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 354.727888][ T7413] cyberjack 6-1:0.69: device disconnected [ 355.520016][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 355.554168][T13039] loop4: detected capacity change from 0 to 32768 [ 355.571065][T13039] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 355.583695][ T8569] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 355.643886][ T7413] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 355.774811][ T8569] usb 4-1: Using ep0 maxpacket: 32 [ 355.789003][ T8569] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 355.810055][ T8569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.823319][ T8569] usb 4-1: config 0 descriptor?? [ 355.833021][ T6652] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 355.840684][ T7413] usb 6-1: Using ep0 maxpacket: 32 [ 355.853287][ T7413] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 355.865751][ T8569] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 355.880962][ T7413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.891940][ T7413] usb 6-1: Product: syz [ 355.902157][ T7413] usb 6-1: Manufacturer: syz [ 355.909855][ T7413] usb 6-1: SerialNumber: syz [ 355.922618][ T7413] usb 6-1: config 0 descriptor?? [ 355.963653][ T14] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 356.139744][ T7413] f81534a_ctrl 6-1:0.0: failed to set register 0x116: -5 [ 356.147251][ T7413] f81534a_ctrl 6-1:0.0: failed to enable ports: -5 [ 356.153890][ T7413] f81534a_ctrl: probe of 6-1:0.0 failed with error -5 [ 356.167032][ T14] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 356.175836][ T7413] usb 6-1: USB disconnect, device number 9 [ 356.182804][ T14] usb 3-1: config 8 has no interface number 0 [ 356.198261][ T14] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 356.209627][ T14] usb 3-1: config 8 interface 177 has no altsetting 0 [ 356.216551][ T14] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 356.225888][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.237589][T13067] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 356.256078][ T8569] gspca_nw80x: reg_r err -71 [ 356.260926][ T8569] nw80x: probe of 4-1:0.0 failed with error -71 [ 356.280309][ T8569] usb 4-1: USB disconnect, device number 17 [ 356.455176][ T14] usb 3-1: string descriptor 0 read error: -71 [ 356.468393][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 356.912686][T13082] netlink: 'syz.4.3890': attribute type 16 has an invalid length. [ 356.941527][T13082] netlink: 'syz.4.3890': attribute type 17 has an invalid length. [ 356.956845][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.964518][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.977048][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.987870][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.994071][ T14] ir_toy 3-1:8.177: could not write reset command: -110 [ 357.002334][ T14] ir_toy: probe of 3-1:8.177 failed with error -110 [ 357.020992][ T14] usb 3-1: USB disconnect, device number 21 [ 357.482779][T13100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3900'. [ 357.517439][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 357.722465][T13108] sctp: [Deprecated]: syz.3.3904 (pid 13108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.722465][T13108] Use struct sctp_sack_info instead [ 357.783055][T13112] loop4: detected capacity change from 0 to 512 [ 357.827145][T13112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.857544][T13112] EXT4-fs: Ignoring removed bh option [ 357.957184][T13112] EXT4-fs error (device loop4): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 358.062003][T13112] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #11: comm syz.4.3907: corrupted inode contents [ 358.084317][T13112] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #11: comm syz.4.3907: mark_inode_dirty error [ 358.097989][T13112] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3907: invalid indirect mapped block 1 (level 1) [ 358.122615][T13112] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #11: comm syz.4.3907: corrupted inode contents [ 358.151011][T13112] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 358.160541][T13112] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #11: comm syz.4.3907: corrupted inode contents [ 358.213639][T13112] EXT4-fs error (device loop4): ext4_truncate:4318: inode #11: comm syz.4.3907: mark_inode_dirty error [ 358.239383][T13112] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 358.269094][T13112] EXT4-fs (loop4): 1 truncate cleaned up [ 358.285004][T13112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 358.357051][T13126] loop3: detected capacity change from 0 to 4096 [ 358.363654][T13112] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.3907: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 358.393574][ T14] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 358.479227][ T26] audit: type=1326 audit(1769468401.717:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da539aeb9 code=0x7ffc0000 [ 358.567641][ T26] audit: type=1326 audit(1769468401.717:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3da539c747 code=0x7ffc0000 [ 358.597664][ T14] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 358.609390][T13126] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 358.609390][T13126] [ 358.623821][ T14] usb 6-1: config 8 has no interface number 0 [ 358.629974][ T14] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 358.691766][ T14] usb 6-1: config 8 interface 177 has no altsetting 0 [ 358.694166][ T26] audit: type=1326 audit(1769468401.717:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3da535b78e code=0x7ffc0000 [ 358.711424][T13134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3915'. [ 358.730862][ T14] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 358.750453][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.785686][ T26] audit: type=1326 audit(1769468401.717:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3da535b78e code=0x7ffc0000 [ 358.814862][T13125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 358.825914][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 358.914708][ T26] audit: type=1326 audit(1769468401.717:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3da535b78e code=0x7ffc0000 [ 359.060971][ T14] usb 6-1: string descriptor 0 read error: -71 [ 359.063832][ T26] audit: type=1326 audit(1769468401.717:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3da535b78e code=0x7ffc0000 [ 359.096862][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 359.148360][T13144] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3919'. [ 359.158622][ T26] audit: type=1326 audit(1769468401.717:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13131 comm="syz.1.3914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da539aeb9 code=0x7ffc0000 [ 359.447607][T13153] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 359.604836][ T14] ir_toy 6-1:8.177: could not write reset command: -110 [ 359.612023][ T14] ir_toy: probe of 6-1:8.177 failed with error -110 [ 359.648627][ T14] usb 6-1: USB disconnect, device number 10 [ 359.780497][T13162] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.058552][T13148] loop2: detected capacity change from 0 to 32768 [ 360.112992][T13148] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 360.475869][ T6652] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 360.507541][T13187] netlink: 'syz.5.3943': attribute type 9 has an invalid length. [ 360.539963][T13187] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3943'. [ 360.993929][ T14] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 361.195528][ T14] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 361.214880][ T14] usb 2-1: config 8 has no interface number 0 [ 361.221064][ T14] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 361.252777][ T14] usb 2-1: config 8 interface 177 has no altsetting 0 [ 361.283177][ T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 361.304821][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.360883][T13196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.584974][ T14] usb 2-1: string descriptor 0 read error: -71 [ 361.596097][ C0] ir_toy 2-1:8.177: out urb status: -71 [ 361.877302][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3966'. [ 361.993804][ T7413] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 362.079952][T13244] loop3: detected capacity change from 0 to 512 [ 362.099126][T13244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.106364][ T14] ir_toy 2-1:8.177: could not write reset command: -110 [ 362.109424][T13219] loop5: detected capacity change from 0 to 32768 [ 362.117607][ T14] ir_toy: probe of 2-1:8.177 failed with error -110 [ 362.133040][T13244] EXT4-fs: Ignoring removed bh option [ 362.164475][T13219] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 362.181740][ T14] usb 2-1: USB disconnect, device number 16 [ 362.215405][ T7413] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 362.226262][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 362.226793][T13244] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 362.237116][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.261527][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 362.273375][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.284935][ T7413] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 362.292395][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 362.302514][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.313021][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 362.324285][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.343625][T13244] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.3969: corrupted inode contents [ 362.356812][ T7413] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 362.367471][T13244] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #11: comm syz.3.3969: mark_inode_dirty error [ 362.383570][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 362.404409][T13244] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3969: invalid indirect mapped block 1 (level 1) [ 362.419363][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.438931][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 362.460381][T13244] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.3969: corrupted inode contents [ 362.478791][ T7413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.498957][T13244] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 362.520526][ T7413] usb 3-1: string descriptor 0 read error: -22 [ 362.534175][T13244] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.3969: corrupted inode contents [ 362.546608][ T7413] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 362.563993][T13244] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.3969: mark_inode_dirty error [ 362.583364][ T7413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.602524][T13252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3971'. [ 362.628149][T13244] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 362.632281][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 362.666003][ T7413] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 362.674638][T13244] EXT4-fs (loop3): 1 truncate cleaned up [ 362.680345][T13244] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 362.719826][ T5753] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 362.753862][T13254] netlink: 'syz.5.3974': attribute type 16 has an invalid length. [ 362.777193][T13244] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.3969: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 362.797659][T13254] netlink: 'syz.5.3974': attribute type 17 has an invalid length. [ 362.846418][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.913207][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.944893][ T22] usb 3-1: USB disconnect, device number 22 [ 362.974912][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.982417][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.038667][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 363.341932][T13266] loop4: detected capacity change from 0 to 47 [ 363.834929][T13283] loop5: detected capacity change from 0 to 47 [ 363.884802][T13286] loop2: detected capacity change from 0 to 64 [ 364.737077][T13280] loop1: detected capacity change from 0 to 32768 [ 364.773964][T13280] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 365.099130][T13323] netlink: 'syz.4.4006': attribute type 2 has an invalid length. [ 365.215020][ T6652] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 365.597527][T13344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4014'. [ 365.663655][ T6033] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 365.865603][ T6033] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 365.873114][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 365.928156][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.963901][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 365.980142][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.011304][ T6033] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 366.020941][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 366.050810][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.061009][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 366.102990][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.150464][ T6033] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 366.168908][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 366.189538][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.239703][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 366.289625][ T6033] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.306881][ T6033] usb 2-1: string descriptor 0 read error: -22 [ 366.313338][ T6033] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 366.323047][ T6033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.380636][ T6033] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 366.404443][ T7413] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 366.439150][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4027'. [ 366.591321][ T6024] usb 2-1: USB disconnect, device number 17 [ 366.609403][ T7413] usb 6-1: Using ep0 maxpacket: 8 [ 366.631522][ T7413] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 366.667328][ T7413] usb 6-1: config 0 has no interface number 0 [ 366.687281][ T7413] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 366.704005][ T7413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.724345][ T7413] usb 6-1: Product: syz [ 366.728561][ T7413] usb 6-1: Manufacturer: syz [ 366.758976][ T7413] usb 6-1: SerialNumber: syz [ 366.784486][ T7413] usb 6-1: config 0 descriptor?? [ 366.825510][T13381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.010476][ T7413] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 367.027338][ T7413] usb 6-1: No valid video chain found. [ 367.052320][T13387] netlink: 'syz.2.4038': attribute type 16 has an invalid length. [ 367.098236][T13387] netlink: 'syz.2.4038': attribute type 17 has an invalid length. [ 367.146948][T13387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.166357][T13387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.200653][T13387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.208354][T13387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.233126][ T14] usb 6-1: USB disconnect, device number 11 [ 367.496799][T13401] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4044'. [ 367.839163][T13413] loop3: detected capacity change from 0 to 64 [ 368.269439][T13430] xt_TCPMSS: Only works on TCP SYN packets [ 368.303733][T13433] netlink: 'syz.3.4056': attribute type 16 has an invalid length. [ 368.322928][T13433] netlink: 'syz.3.4056': attribute type 17 has an invalid length. [ 368.352446][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 368.382795][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 368.414872][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.415005][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.428231][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.428367][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.520504][T13438] netlink: 'syz.5.4062': attribute type 1 has an invalid length. [ 368.520566][T13438] netlink: 'syz.5.4062': attribute type 12 has an invalid length. [ 368.520581][T13438] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4062'. [ 368.526331][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 368.623831][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 368.995357][T13446] loop1: detected capacity change from 0 to 4096 [ 369.109144][T13446] ntfs: volume version 3.1. [ 369.370093][ T4364] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 369.888353][T13450] loop5: detected capacity change from 0 to 32768 [ 370.000912][T13450] XFS (loop5): Mounting V5 Filesystem [ 370.124757][T13450] XFS (loop5): Ending clean mount [ 370.147528][T13450] XFS (loop5): Quotacheck needed: Please wait. [ 370.218440][T13450] XFS (loop5): Quotacheck: Done. [ 370.261582][T13493] loop2: detected capacity change from 0 to 4096 [ 370.380004][ T8065] XFS (loop5): Unmounting Filesystem [ 370.399096][T13493] ntfs: volume version 3.1. [ 370.620004][ T4364] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 371.128254][T13517] netlink: 'syz.4.4097': attribute type 16 has an invalid length. [ 371.183785][T13517] netlink: 'syz.4.4097': attribute type 17 has an invalid length. [ 371.215833][T13517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 371.249752][T13517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.295599][T13517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.455727][T13529] netlink: 'syz.5.4103': attribute type 2 has an invalid length. [ 371.494451][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4103'. [ 372.030667][T13541] loop4: detected capacity change from 0 to 4096 [ 372.050306][ T14] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 372.067964][T13541] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 372.127696][T13519] loop3: detected capacity change from 0 to 40427 [ 372.142135][T13541] ntfs3: loop4: failed to convert "c46c" to macgreek [ 372.181250][T13519] F2FS-fs (loop3): invalid crc value [ 372.199040][T13547] loop2: detected capacity change from 0 to 1764 [ 372.228146][T13519] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 372.264311][ T7413] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 372.288184][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.334854][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.368168][ T14] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 372.413597][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.421655][ T14] usb 2-1: SerialNumber: syz [ 372.474253][T13519] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 372.476653][ T14] usb 2-1: 0:2 : does not exist [ 372.501605][T13519] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 372.532821][ T7413] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.549046][T13519] F2FS-fs (loop3): Start checkpoint disabled! [ 372.568667][T13519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 372.578120][ T7413] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 372.640290][ T7413] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.686360][ T7413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.723360][ T7413] usb 6-1: Product: syz [ 372.746122][ T7413] usb 6-1: Manufacturer: syz [ 372.762957][ T7413] usb 6-1: SerialNumber: syz [ 372.783413][T13554] loop2: detected capacity change from 0 to 1024 [ 372.861051][ T4294] kworker/u4:5: attempt to access beyond end of device [ 372.861051][ T4294] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.931112][ T8570] usb 2-1: USB disconnect, device number 18 [ 373.059601][T13558] loop4: detected capacity change from 0 to 256 [ 373.119946][T13558] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.135096][ T7413] usb 6-1: USB disconnect, device number 12 [ 373.308702][T13560] netlink: 'syz.2.4129': attribute type 16 has an invalid length. [ 373.319746][T13560] netlink: 'syz.2.4129': attribute type 17 has an invalid length. [ 373.331607][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.341781][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.349792][T13560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.508013][ T4557] udevd[4557]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.671254][T13567] xt_hashlimit: size too large, truncated to 1048576 [ 373.691292][T13568] netlink: 'syz.3.4117': attribute type 2 has an invalid length. [ 373.693349][T13567] xt_hashlimit: overflow, try lower: 0/0 [ 373.701484][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4117'. [ 374.567081][T13598] loop3: detected capacity change from 0 to 1764 [ 374.673763][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 374.856406][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 374.866992][ T22] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 374.897047][ T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.943561][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.951616][ T22] usb 5-1: Product: syz [ 374.983541][ T22] usb 5-1: Manufacturer: syz [ 374.988199][ T22] usb 5-1: SerialNumber: syz [ 375.000122][T13608] loop2: detected capacity change from 0 to 4096 [ 375.027842][T13608] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 375.153785][T13608] ntfs3: loop2: failed to convert "c46c" to macgreek [ 375.324745][ T22] usb 5-1: USB disconnect, device number 13 [ 375.409309][ T4557] udevd[4557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.306387][T13626] loop5: detected capacity change from 0 to 32768 [ 376.431201][T13626] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 376.431201][T13626] [ 376.470977][T13628] loop2: detected capacity change from 0 to 32768 [ 376.475580][T13626] ERROR: (device loop5): remounting filesystem as read-only [ 376.501614][T13628] XFS: noikeep mount option is deprecated. [ 376.544652][T13626] xtLookup: xtSearch returned -5 [ 376.570065][T13646] loop1: detected capacity change from 0 to 4096 [ 376.605532][T13626] syz.5.4151 (13626) used greatest stack depth: 19408 bytes left [ 376.626744][T13646] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 376.730000][T13628] XFS (loop2): Mounting V5 Filesystem [ 376.808536][T13646] ntfs3: loop1: failed to convert "c46c" to macgreek [ 376.886507][T13628] XFS (loop2): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 376.927540][T13628] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 377.087633][T13628] XFS (loop2): Starting recovery (logdev: internal) [ 377.131038][T13628] XFS (loop2): Ending recovery (logdev: internal) [ 377.404274][ T4281] XFS (loop2): Unmounting Filesystem [ 377.669738][T13682] xt_hashlimit: size too large, truncated to 1048576 [ 377.684305][T13682] xt_hashlimit: overflow, try lower: 0/0 [ 377.888176][T13686] ax25_connect(): syz.5.4178 uses autobind, please contact jreuter@yaina.de [ 378.437419][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.443889][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.696471][T13676] loop3: detected capacity change from 0 to 40427 [ 378.735984][T13712] ax25_connect(): syz.2.4191 uses autobind, please contact jreuter@yaina.de [ 378.756861][T13676] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 378.803582][T13676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 378.811949][T13676] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 378.849976][T13676] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x5 [ 378.864581][T13718] xt_ecn: cannot match TCP bits for non-tcp packets [ 378.873446][T13676] F2FS-fs (loop3): invalid crc value [ 378.916080][T13676] F2FS-fs (loop3): Found nat_bits in checkpoint [ 379.109346][T13676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 379.124057][T13676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 379.446234][ T4273] syz-executor: attempt to access beyond end of device [ 379.446234][ T4273] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 379.836499][T13748] xt_ecn: cannot match TCP bits for non-tcp packets [ 379.882826][T13751] ax25_connect(): syz.4.4206 uses autobind, please contact jreuter@yaina.de [ 380.382955][T13770] netlink: 'syz.2.4215': attribute type 1 has an invalid length. [ 380.398752][T13770] netlink: 'syz.2.4215': attribute type 3 has an invalid length. [ 380.408244][T13770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4215'. [ 380.762657][T13784] xt_ecn: cannot match TCP bits for non-tcp packets [ 381.254156][T13801] netlink: 'syz.2.4230': attribute type 1 has an invalid length. [ 381.318400][T13801] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4230'. [ 381.347986][T13807] netlink: 'syz.1.4232': attribute type 1 has an invalid length. [ 381.396723][T13807] netlink: 'syz.1.4232': attribute type 3 has an invalid length. [ 381.443577][T13807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4232'. [ 381.785368][T13786] loop3: detected capacity change from 0 to 32768 [ 381.792692][T13786] XFS: noikeep mount option is deprecated. [ 381.950775][T13786] XFS (loop3): Mounting V5 Filesystem [ 381.975571][T13834] loop5: detected capacity change from 0 to 256 [ 382.003695][T13834] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 382.159013][T13786] XFS (loop3): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 382.214742][T13786] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 382.273404][T13786] XFS (loop3): Starting recovery (logdev: internal) [ 382.352427][T13786] XFS (loop3): Ending recovery (logdev: internal) [ 382.519568][T13851] netlink: 'syz.4.4248': attribute type 1 has an invalid length. [ 382.573741][T13851] netlink: 'syz.4.4248': attribute type 3 has an invalid length. [ 382.604745][T13851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4248'. [ 382.616470][ T4273] XFS (loop3): Unmounting Filesystem [ 383.047741][T13865] netlink: 'syz.4.4259': attribute type 1 has an invalid length. [ 383.104434][T13865] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4259'. [ 384.014357][T13902] loop4: detected capacity change from 0 to 256 [ 384.022401][T13902] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 384.181411][T13898] loop2: detected capacity change from 0 to 8192 [ 384.207642][T13906] netlink: 'syz.3.4277': attribute type 1 has an invalid length. [ 384.231535][T13898] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 384.289051][T13880] loop1: detected capacity change from 0 to 32768 [ 384.297137][T13880] XFS: noikeep mount option is deprecated. [ 384.303396][T13906] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4277'. [ 384.328077][T13898] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 384.340577][T13898] REISERFS (device loop2): using ordered data mode [ 384.354131][T13880] XFS (loop1): Mounting V5 Filesystem [ 384.363806][T13898] reiserfs: using flush barriers [ 384.417021][T13898] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 384.491396][T13880] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 384.542564][T13880] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 384.574168][T13898] REISERFS (device loop2): checking transaction log (loop2) [ 384.647526][T13898] REISERFS (device loop2): Using r5 hash to sort names [ 384.656212][T13880] XFS (loop1): Starting recovery (logdev: internal) [ 384.688085][T13898] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 384.741088][T13880] XFS (loop1): Ending recovery (logdev: internal) [ 385.065666][ T4268] XFS (loop1): Unmounting Filesystem [ 385.099897][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4286'. [ 385.367842][T13942] loop3: detected capacity change from 0 to 256 [ 385.457679][T13942] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 385.617582][T13949] loop4: detected capacity change from 0 to 22 [ 385.671148][T13949] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 385.710478][T13949] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 385.795064][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4294'. [ 386.049271][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4301'. [ 386.077183][T13965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4300'. [ 386.445756][T13975] loop3: detected capacity change from 0 to 2048 [ 386.477009][T13975] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 386.539038][T13975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.815061][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4311'. [ 387.053426][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4316'. [ 387.095874][T13990] loop3: detected capacity change from 0 to 8192 [ 387.128184][T13990] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 387.179817][T13990] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 387.202616][T13990] REISERFS (device loop3): using ordered data mode [ 387.210617][T13990] reiserfs: using flush barriers [ 387.223975][T13990] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 387.272763][T13990] REISERFS (device loop3): checking transaction log (loop3) [ 387.296470][T14002] loop5: detected capacity change from 0 to 64 [ 387.328558][T13990] REISERFS (device loop3): Using r5 hash to sort names [ 387.350682][T13990] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 387.712021][T14013] loop2: detected capacity change from 0 to 2048 [ 387.752303][T14013] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 387.790819][T14013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.979179][T14019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4327'. [ 388.127510][T14025] loop2: detected capacity change from 0 to 256 [ 388.167541][T14025] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 388.364641][T14033] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 388.483929][T14033] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 388.502410][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4337'. [ 389.553895][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4351'. [ 389.600550][T14072] set_capacity_and_notify: 2 callbacks suppressed [ 389.600568][T14072] loop2: detected capacity change from 0 to 22 [ 389.634624][T14072] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 389.653792][T14072] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 390.078886][T14053] loop4: detected capacity change from 0 to 32768 [ 390.109957][T14053] XFS: noikeep mount option is deprecated. [ 390.181284][T14060] loop3: detected capacity change from 0 to 32768 [ 390.300409][T14053] XFS (loop4): Mounting V5 Filesystem [ 390.393057][T14060] XFS (loop3): Mounting V5 Filesystem [ 390.456713][T14068] loop5: detected capacity change from 0 to 32768 [ 390.468646][T14053] XFS (loop4): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 390.509873][T14068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4350 (14068) [ 390.529520][T14060] XFS (loop3): Ending clean mount [ 390.545225][T14053] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 390.558116][T14060] XFS (loop3): Quotacheck needed: Please wait. [ 390.587157][T14068] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.613797][T14068] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 390.622515][T14068] BTRFS info (device loop5): using free space tree [ 390.659611][T14060] XFS (loop3): Quotacheck: Done. [ 390.668655][T14053] XFS (loop4): Starting recovery (logdev: internal) [ 390.725157][T14053] XFS (loop4): Ending recovery (logdev: internal) [ 390.764047][T14100] loop1: detected capacity change from 0 to 8192 [ 390.793675][T14100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 390.810646][T14100] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 390.820838][T14100] REISERFS (device loop1): using ordered data mode [ 390.828054][T14100] reiserfs: using flush barriers [ 390.835711][T14100] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 390.852474][T14100] REISERFS (device loop1): checking transaction log (loop1) [ 390.865150][T14100] REISERFS (device loop1): Using r5 hash to sort names [ 390.877370][ T4273] XFS (loop3): Unmounting Filesystem [ 390.908083][T14100] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 390.935624][T14068] BTRFS info (device loop5): enabling ssd optimizations [ 391.123879][ T4283] XFS (loop4): Unmounting Filesystem [ 391.141266][ T8065] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.310892][ T5753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5753) [ 391.434361][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.308598][T14151] loop4: detected capacity change from 0 to 2048 [ 392.332932][T14151] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 392.390203][T14151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.675485][T14161] netlink: 'syz.3.4378': attribute type 21 has an invalid length. [ 392.695053][T14161] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4378'. [ 392.774023][T14161] netlink: 'syz.3.4378': attribute type 5 has an invalid length. [ 392.781806][T14161] netlink: 'syz.3.4378': attribute type 6 has an invalid length. [ 392.840497][T14161] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4378'. [ 393.293581][ T6030] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 393.483529][ T6030] usb 4-1: Using ep0 maxpacket: 16 [ 393.490685][ T6030] usb 4-1: config 0 has no interfaces? [ 393.517290][ T6030] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 393.531132][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.539657][ T6030] usb 4-1: Product: syz [ 393.545011][ T6030] usb 4-1: Manufacturer: syz [ 393.549725][ T6030] usb 4-1: SerialNumber: syz [ 393.569642][ T6030] r8152-cfgselector 4-1: config 0 descriptor?? [ 393.787843][T14201] netlink: 'syz.1.4397': attribute type 21 has an invalid length. [ 393.791016][ T6030] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 393.824935][T14201] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4397'. [ 393.893211][T14201] netlink: 'syz.1.4397': attribute type 5 has an invalid length. [ 393.927265][T14201] netlink: 'syz.1.4397': attribute type 6 has an invalid length. [ 393.971592][T14201] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4397'. [ 394.024085][ T6030] usb 4-1: USB disconnect, device number 18 [ 394.196649][T14209] netlink: 'syz.4.4412': attribute type 3 has an invalid length. [ 394.743604][T14225] kernel profiling enabled (shift: 9) [ 395.056451][T14235] netlink: 'syz.2.4416': attribute type 3 has an invalid length. [ 395.278136][T14243] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 395.833558][ T7413] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 396.023595][ T7413] usb 5-1: Using ep0 maxpacket: 16 [ 396.031802][ T7413] usb 5-1: config 0 has no interfaces? [ 396.072076][ T7413] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 396.090207][ T7413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.117323][ T7413] usb 5-1: Product: syz [ 396.133131][T14274] netlink: 'syz.1.4432': attribute type 3 has an invalid length. [ 396.154925][ T7413] usb 5-1: Manufacturer: syz [ 396.159576][ T7413] usb 5-1: SerialNumber: syz [ 396.181255][ T7413] r8152-cfgselector 5-1: config 0 descriptor?? [ 396.410974][ T7413] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 396.527227][ T4352] usb 5-1: config 0 descriptor?? [ 396.577503][T14287] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.616446][ T4352] usb 5-1: can't set config #0, error -71 [ 396.616820][ T7413] usb 5-1: USB disconnect, device number 14 [ 396.789049][T14290] netlink: 'syz.2.4442': attribute type 21 has an invalid length. [ 396.803598][ T8570] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 396.818927][T14290] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4442'. [ 396.830935][T14290] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4442'. [ 396.993972][ T8570] usb 4-1: Using ep0 maxpacket: 16 [ 397.000952][ T8570] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 397.022284][ T8570] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.082954][ T8570] usb 4-1: config 0 has no interface number 0 [ 397.139938][ T8570] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 397.193517][ T8570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.232008][ T8570] usb 4-1: Product: syz [ 397.242124][ T8570] usb 4-1: Manufacturer: syz [ 397.276137][ T8570] usb 4-1: SerialNumber: syz [ 397.291609][ T8570] usb 4-1: config 0 descriptor?? [ 397.312778][ T8570] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 397.329344][ T8570] usb 4-1: No valid video chain found. [ 397.353985][T14305] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4448'. [ 397.508926][ T6030] usb 4-1: USB disconnect, device number 19 [ 397.766861][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4454'. [ 397.914652][T14320] vivid-007: ================= START STATUS ================= [ 397.953708][T14320] vivid-007: Enable Output Cropping: true [ 397.983627][T14320] vivid-007: Enable Output Composing: true [ 397.999787][T14320] vivid-007: Enable Output Scaler: true [ 398.023548][T14320] vivid-007: Tx RGB Quantization Range: Automatic [ 398.046168][T14320] vivid-007: Transmit Mode: HDMI [ 398.083536][T14320] vivid-007: Display Present: true inactive [ 398.089581][T14320] vivid-007: Hotplug Present: 0x00000001 [ 398.103601][T14320] vivid-007: RxSense Present: 0x00000001 [ 398.154735][T14320] vivid-007: EDID Present: 0x00000001 [ 398.173608][T14320] vivid-007: ================== END STATUS ================== [ 398.435055][T14337] vivid-007: ================= START STATUS ================= [ 398.481350][T14337] vivid-007: Enable Output Cropping: true [ 398.583800][ T6025] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 398.585201][T14337] vivid-007: Enable Output Composing: true [ 398.661629][T14337] vivid-007: Enable Output Scaler: true [ 398.680952][T14337] vivid-007: Tx RGB Quantization Range: Automatic [ 398.703697][T14337] vivid-007: Transmit Mode: HDMI [ 398.708752][T14337] vivid-007: Display Present: true inactive [ 398.724405][T14337] vivid-007: Hotplug Present: 0x00000001 [ 398.783613][ T6025] usb 2-1: Using ep0 maxpacket: 16 [ 398.803805][T14337] vivid-007: RxSense Present: 0x00000001 [ 398.809804][ T6025] usb 2-1: config 0 has no interfaces? [ 398.823773][T14337] vivid-007: EDID Present: 0x00000001 [ 398.843634][T14337] vivid-007: ================== END STATUS ================== [ 398.854050][ T6025] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 398.863175][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.903673][ T6025] usb 2-1: Product: syz [ 398.913586][T14348] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 398.933662][ T6025] usb 2-1: Manufacturer: syz [ 398.938308][ T6025] usb 2-1: SerialNumber: syz [ 398.964800][ T6025] r8152-cfgselector 2-1: config 0 descriptor?? [ 399.214024][ T6025] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 399.308951][T14357] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4474'. [ 399.431058][ T6025] usb 2-1: USB disconnect, device number 19 [ 400.008223][T14377] vivid-007: ================= START STATUS ================= [ 400.043575][T14377] vivid-007: Enable Output Cropping: true [ 400.049389][T14377] vivid-007: Enable Output Composing: true [ 400.058285][T14377] vivid-007: Enable Output Scaler: true [ 400.068584][T14380] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 400.074153][T14377] vivid-007: Tx RGB Quantization Range: Automatic [ 400.101554][T14377] vivid-007: Transmit Mode: HDMI [ 400.113931][T14377] vivid-007: Display Present: true inactive [ 400.124655][T14377] vivid-007: Hotplug Present: 0x00000001 [ 400.171782][T14377] vivid-007: RxSense Present: 0x00000001 [ 400.178271][T14377] vivid-007: EDID Present: 0x00000001 [ 400.213569][T14377] vivid-007: ================== END STATUS ================== [ 400.463023][T14392] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4492'. [ 400.828009][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4498'. [ 400.890354][T14405] loop4: detected capacity change from 0 to 1024 [ 400.914013][ T4274] Bluetooth: hci0: command 0x080f tx timeout [ 400.953857][T14405] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 401.034056][T14405] hfsplus: filesystem is marked journaled, leaving read-only. [ 401.305160][T14415] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 401.513622][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 401.723639][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 401.775717][ T14] usb 6-1: config 0 has an invalid interface number: 250 but max is 0 [ 401.793758][ T14] usb 6-1: config 0 has no interface number 0 [ 401.799901][ T14] usb 6-1: config 0 interface 250 has no altsetting 0 [ 401.870702][ T14] usb 6-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 401.900317][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.923840][ T14] usb 6-1: Product: syz [ 401.928055][ T14] usb 6-1: Manufacturer: syz [ 401.953023][ T14] usb 6-1: SerialNumber: syz [ 401.966689][ T14] usb 6-1: config 0 descriptor?? [ 401.995495][ T14] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 402.099705][T14439] loop4: detected capacity change from 0 to 64 [ 402.404238][ T14] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 402.411128][ T14] gspca_pac7302: probe of 6-1:0.250 failed with error -71 [ 402.458153][ T14] usb 6-1: USB disconnect, device number 13 [ 403.146679][T14471] loop1: detected capacity change from 0 to 4096 [ 403.314508][ T4274] Bluetooth: hci0: command 0x080f tx timeout [ 403.329407][T14471] ntfs: volume version 3.1. [ 403.439317][T14459] loop3: detected capacity change from 0 to 32768 [ 403.458776][T14471] ntfs: (device loop1): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 403.516601][T14459] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 403.516601][T14459] [ 403.585602][T14459] ERROR: (device loop3): remounting filesystem as read-only [ 403.612485][T14459] ERROR: (device loop3): jfs_unlink: [ 403.612485][T14459] [ 403.793748][ T4273] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 403.793748][ T4273] [ 403.924214][ T26] audit: type=1326 audit(1769468447.167:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.5.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 403.943761][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4539'. [ 403.985104][ T26] audit: type=1326 audit(1769468447.217:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.5.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 404.071924][ T26] audit: type=1326 audit(1769468447.217:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.5.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 404.178858][ T26] audit: type=1326 audit(1769468447.217:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.5.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 404.284614][ T26] audit: type=1326 audit(1769468447.217:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.5.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 404.493712][ T8570] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 404.505448][T14504] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4546'. [ 404.553980][T14504] 0ªX¹¦À: renamed from caif0 [ 404.586799][T14504] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 404.684288][ T8570] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 404.707372][ T8570] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.724610][ T8570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.732654][ T8570] usb 2-1: Product: syz [ 404.773522][ T8570] usb 2-1: Manufacturer: syz [ 404.780966][ T8570] usb 2-1: SerialNumber: syz [ 404.814518][ T8570] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 404.884603][ T8570] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 405.013102][T14515] loop3: detected capacity change from 0 to 8 [ 405.123364][T14515] unable to read xattr id index table [ 405.137980][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 405.169021][ T26] audit: type=1326 audit(1769468448.407:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.4552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9576d9aeb9 code=0x0 [ 405.346313][ T6032] usb 2-1: USB disconnect, device number 20 [ 405.395135][T14525] loop5: detected capacity change from 0 to 64 [ 405.953884][ T8570] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 405.960964][ T8570] ath9k_htc: Failed to initialize the device [ 405.989030][T14543] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4565'. [ 406.010379][ T6032] usb 2-1: ath9k_htc: USB layer deinitialized [ 406.234857][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'. [ 406.293851][T14555] validate_nla: 2 callbacks suppressed [ 406.293866][T14555] netlink: 'syz.3.4571': attribute type 6 has an invalid length. [ 406.761924][T14573] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4579'. [ 406.793754][T14573] 0ªX¹¦À: renamed from caif0 [ 406.824826][T14573] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 407.135325][T14580] loop2: detected capacity change from 0 to 4096 [ 407.186652][T14580] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 407.297980][T14580] ntfs3: loop2: failed to convert "c46c" to macromanian [ 408.060776][T14617] loop5: detected capacity change from 0 to 512 [ 408.115119][T14617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.213815][T14617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 408.222986][T14617] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.281496][T14622] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4602'. [ 408.413202][ T8065] EXT4-fs (loop5): unmounting filesystem. [ 408.460490][T14597] loop4: detected capacity change from 0 to 32768 [ 408.482608][T14603] loop2: detected capacity change from 0 to 32768 [ 408.581768][T14603] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 408.581768][T14603] [ 408.586595][T14597] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.646758][T14603] ERROR: (device loop2): remounting filesystem as read-only [ 408.663921][T14597] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 408.693029][T14597] BTRFS info (device loop4): force clearing of disk cache [ 408.699320][T14603] ERROR: (device loop2): jfs_unlink: [ 408.699320][T14603] [ 408.738952][T14597] BTRFS info (device loop4): force zlib compression, level 3 [ 408.792715][T14597] BTRFS info (device loop4): enabling auto defrag [ 408.833315][T14597] BTRFS info (device loop4): max_inline at 0 [ 408.868860][T14597] BTRFS info (device loop4): enabling disk space caching [ 408.888484][T14597] BTRFS info (device loop4): disk space caching is enabled [ 408.983223][T14643] netlink: 'syz.1.4612': attribute type 6 has an invalid length. [ 408.992791][ T4281] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 408.992791][ T4281] [ 409.123616][T14597] BTRFS info (device loop4): enabling ssd optimizations [ 409.146927][T14597] BTRFS info (device loop4): rebuilding free space tree [ 409.231581][T14597] BTRFS info (device loop4): disabling free space tree [ 409.249577][T14597] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 409.315287][T14661] loop5: detected capacity change from 0 to 8 [ 409.323630][T14597] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 409.428015][T14663] syz.1.4614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 409.444013][T14661] unable to read xattr id index table [ 409.543560][ T6030] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 409.584214][ T4283] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.753718][ T6030] usb 3-1: Using ep0 maxpacket: 16 [ 409.769846][ T6030] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 409.793624][ T6030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.822056][ T6030] usb 3-1: config 0 has no interface number 0 [ 409.854439][ T6030] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 409.894617][ T6030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.902662][ T6030] usb 3-1: Product: syz [ 409.924772][ T6030] usb 3-1: Manufacturer: syz [ 409.929418][ T6030] usb 3-1: SerialNumber: syz [ 409.954301][ T6030] usb 3-1: config 0 descriptor?? [ 409.986773][ T6030] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 410.003367][ T6030] usb 3-1: No valid video chain found. [ 410.205779][ T7413] usb 3-1: USB disconnect, device number 23 [ 410.216970][T14669] netlink: 1096 bytes leftover after parsing attributes in process `syz.4.4616'. [ 410.544378][T14665] loop3: detected capacity change from 0 to 32768 [ 410.619893][T14665] XFS (loop3): Mounting V5 Filesystem [ 410.708770][T14665] XFS (loop3): Ending clean mount [ 410.911627][ T4273] XFS (loop3): Unmounting Filesystem [ 411.471642][T14709] loop2: detected capacity change from 0 to 4096 [ 411.513727][ T26] audit: type=1107 audit(1769468454.747:140): pid=14714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 411.535935][T14709] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 411.594498][T14719] netlink: 'syz.1.4638': attribute type 2 has an invalid length. [ 411.602971][T14709] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 411.620710][T14721] netlink: 1096 bytes leftover after parsing attributes in process `syz.5.4636'. [ 411.630001][T14719] netlink: 'syz.1.4638': attribute type 2 has an invalid length. [ 411.657097][T14709] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 411.744292][T14709] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 411.865390][T14709] ntfs: volume version 3.1. [ 411.937554][T14728] loop5: detected capacity change from 0 to 256 [ 411.958502][T14728] exfat: Deprecated parameter 'namecase' [ 411.988690][T14728] exfat: Deprecated parameter 'namecase' [ 412.022914][T14728] exfat: Deprecated parameter 'utf8' [ 412.070034][T14728] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d) [ 412.690910][ T26] audit: type=1107 audit(1769468455.927:141): pid=14751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 412.772828][T14755] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.4655'. [ 413.321040][T14777] loop1: detected capacity change from 0 to 256 [ 413.388487][T14781] ERROR: device name not specified. [ 413.833896][T14793] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 413.841691][T14793] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 414.143652][T14804] netlink: 'syz.3.4690': attribute type 2 has an invalid length. [ 414.161662][T14804] netlink: 'syz.3.4690': attribute type 2 has an invalid length. [ 414.297830][T14807] loop1: detected capacity change from 0 to 4096 [ 414.373317][T14807] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 414.414686][T14807] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 414.454679][T14807] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 414.479154][T14807] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 414.590858][T14807] ntfs: volume version 3.1. [ 414.655271][T14817] ERROR: device name not specified. [ 414.700377][T14789] loop5: detected capacity change from 0 to 32768 [ 414.748859][T14789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4673 (14789) [ 414.855165][T14789] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 414.899628][T14789] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 414.962651][T14789] BTRFS info (device loop5): force clearing of disk cache [ 414.972343][T14825] loop3: detected capacity change from 0 to 256 [ 415.007926][T14789] BTRFS info (device loop5): force zlib compression, level 3 [ 415.026728][T14825] exfat: Deprecated parameter 'namecase' [ 415.032469][T14825] exfat: Deprecated parameter 'namecase' [ 415.038430][T14789] BTRFS info (device loop5): enabling auto defrag [ 415.063690][T14825] exfat: Deprecated parameter 'utf8' [ 415.085930][T14789] BTRFS info (device loop5): max_inline at 0 [ 415.091982][T14789] BTRFS info (device loop5): enabling disk space caching [ 415.132296][T14825] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d) [ 415.147083][T14789] BTRFS info (device loop5): disk space caching is enabled [ 415.345299][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'. [ 415.354966][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'. [ 415.553238][T14789] BTRFS info (device loop5): enabling ssd optimizations [ 415.574100][T14789] BTRFS info (device loop5): rebuilding free space tree [ 415.660603][T14789] BTRFS info (device loop5): disabling free space tree [ 415.683649][T14789] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 415.708811][T14789] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 415.970890][ T8065] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 416.247768][T14880] loop2: detected capacity change from 0 to 256 [ 416.324361][T14880] exfat: Deprecated parameter 'namecase' [ 416.330167][T14880] exfat: Deprecated parameter 'namecase' [ 416.373731][T14880] exfat: Deprecated parameter 'utf8' [ 416.413810][T14880] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d) [ 417.394620][T14915] loop1: detected capacity change from 0 to 64 [ 417.450112][T14915] Trying to free block not in datazone [ 418.159790][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4740'. [ 418.199182][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4740'. [ 419.299857][T14992] netlink: 'syz.3.4764': attribute type 15 has an invalid length. [ 419.603774][T15003] netlink: 'syz.3.4770': attribute type 1 has an invalid length. [ 419.840825][T15013] loop4: detected capacity change from 0 to 64 [ 419.949753][T15013] Trying to free block not in datazone [ 420.737322][T15042] netlink: 'syz.5.4787': attribute type 1 has an invalid length. [ 421.557203][T15078] netlink: 'syz.1.4805': attribute type 1 has an invalid length. [ 421.763097][T15082] raw_sendmsg: syz.4.4807 forgot to set AF_INET. Fix it! [ 422.542837][ T26] audit: type=1326 audit(1769468465.777:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.2.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 422.600218][ T26] audit: type=1326 audit(1769468465.807:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.2.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 422.704001][ T26] audit: type=1326 audit(1769468465.827:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.2.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 422.778705][ T26] audit: type=1326 audit(1769468465.827:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.2.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 422.816642][ T26] audit: type=1326 audit(1769468465.827:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15113 comm="syz.2.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da239aeb9 code=0x7ffc0000 [ 423.029034][T15127] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 423.062501][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4831'. [ 423.122854][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4831'. [ 423.181356][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4831'. [ 423.254306][T15130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.827144][T15154] netlink: 'syz.1.4845': attribute type 1 has an invalid length. [ 423.866201][T15154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4845'. [ 424.193902][ T7413] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 424.393748][ T7413] usb 3-1: Using ep0 maxpacket: 32 [ 424.401515][ T7413] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.420871][ T7413] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 424.448757][ T7413] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 424.468643][T15182] netlink: 'syz.3.4858': attribute type 1 has an invalid length. [ 424.501668][ T7413] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 424.511912][T15182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4858'. [ 424.542851][ T7413] usb 3-1: config 128 has no interface number 0 [ 424.563205][ T7413] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 424.593781][ T7413] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.613582][ T7413] usb 3-1: config 128 interface 127 has no altsetting 0 [ 424.638179][ T7413] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 424.663491][ T7413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.682177][ T7413] usb 3-1: Product: syz [ 424.702388][ T7413] usb 3-1: Manufacturer: syz [ 424.712505][ T7413] usb 3-1: SerialNumber: syz [ 424.999948][ T7413] usb 3-1: USB disconnect, device number 24 [ 425.157540][T15202] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 425.231634][ T6652] udevd[6652]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.350032][T15210] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4869'. [ 425.584268][T15218] netlink: 'syz.4.4873': attribute type 1 has an invalid length. [ 425.592403][T15218] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4873'. [ 425.763682][ T7413] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 425.858352][T15232] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 425.872641][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'. [ 425.927620][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'. [ 425.940197][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'. [ 425.968811][T15230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.991031][ T7413] usb 6-1: config 0 interface 0 has no altsetting 0 [ 426.004158][ T7413] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 426.017580][ T7413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.028554][ T7413] usb 6-1: config 0 descriptor?? [ 426.037931][ T7413] usb 6-1: selecting invalid altsetting 0 [ 426.044140][ T7413] usb 6-1: can't set first interface for hiFace device. [ 426.051223][ T7413] snd-usb-hiface: probe of 6-1:0.0 failed with error -5 [ 426.113691][ T8570] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 426.267546][ T7413] usb 6-1: USB disconnect, device number 14 [ 426.313632][ T8570] usb 5-1: Using ep0 maxpacket: 16 [ 426.320652][ T8570] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 426.340511][ T8570] usb 5-1: config 252 has no interface number 0 [ 426.383588][ T8570] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.406110][ T8570] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 426.446154][ T8570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.484790][ T8570] usb 5-1: Product: syz [ 426.499239][ T8570] usb 5-1: Manufacturer: syz [ 426.515208][ T8570] usb 5-1: SerialNumber: syz [ 426.534174][T15248] Error parsing options; rc = [-22] [ 426.556555][T15251] loop3: detected capacity change from 0 to 256 [ 426.593824][T15251] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.609206][ T8570] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 426.665776][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 426.692312][T15251] FAT-fs (loop3): Filesystem has been set read-only [ 426.713775][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 426.761749][ T4352] usb 5-1: Failed to submit usb control message: -71 [ 426.761856][ T8570] usb 5-1: USB disconnect, device number 15 [ 426.766083][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 426.785733][ T4352] usb 5-1: unable to send the bmi data to the device: -71 [ 426.792948][ T4352] usb 5-1: unable to get target info from device [ 426.843510][ T4352] usb 5-1: could not get target info (-71) [ 426.843714][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 426.859101][ T4352] usb 5-1: could not probe fw (-71) [ 426.888678][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 426.946329][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 426.993625][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.031855][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.042682][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.052224][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.069116][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.081668][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.090646][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.099788][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.108797][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.120630][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.140127][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.159102][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.190775][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.202460][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.232142][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.278699][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.313994][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.343968][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.353213][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.387194][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.453830][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.493874][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.502518][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.523537][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.558951][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.589743][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.629150][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.683588][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.723569][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.732146][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.803577][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.813285][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.880127][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.903272][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.941522][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.951580][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 427.960969][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.010969][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.029327][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.094456][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.103108][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.123883][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.143752][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.178896][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.197191][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.259219][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.313678][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.322336][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.343678][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.352283][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.401420][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.432316][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.458305][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.482289][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.500816][T15303] loop1: detected capacity change from 0 to 4096 [ 428.511671][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.520551][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.535392][T15303] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 428.573787][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.585471][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.614744][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.623325][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.645502][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.673038][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.702378][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.738235][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.749816][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.763194][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.764529][ T8570] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 428.786899][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.823617][T15251] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 428.859401][ T26] audit: type=1800 audit(1769468472.097:147): pid=15251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4891" name="file1" dev="loop3" ino=1048634 res=0 errno=0 [ 429.003719][ T8570] usb 3-1: Using ep0 maxpacket: 16 [ 429.010571][ T8570] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.043745][ T8570] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 429.063185][ T8570] usb 3-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 429.072335][ T8570] usb 3-1: Product: syz [ 429.079931][ T8570] usb 3-1: config 0 descriptor?? [ 429.122310][ T8570] gspca_main: spca501-2.14.0 probing 0000:0000 [ 429.554956][ T8570] gspca_spca501: reg write: error -71 [ 429.560484][ T8570] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 429.590911][ T8570] spca501: probe of 3-1:0.0 failed with error -22 [ 429.622177][ T8570] usb 3-1: USB disconnect, device number 25 [ 429.706893][T15340] __nla_validate_parse: 2 callbacks suppressed [ 429.706910][T15340] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4934'. [ 429.860608][T15346] netlink: 'syz.1.4937': attribute type 2 has an invalid length. [ 430.353684][ T4317] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 430.555345][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0 [ 430.583564][ T4317] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 430.603979][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.650961][ T4317] usb 2-1: config 0 descriptor?? [ 430.669408][ T4317] usb 2-1: selecting invalid altsetting 0 [ 430.677260][ T4317] usb 2-1: can't set first interface for hiFace device. [ 430.684547][ T4317] snd-usb-hiface: probe of 2-1:0.0 failed with error -5 [ 430.720698][T15380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4952'. [ 430.823646][ T8569] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 430.881905][ T4317] usb 2-1: USB disconnect, device number 21 [ 430.939689][T15388] netlink: 'syz.3.4956': attribute type 1 has an invalid length. [ 430.956230][T15388] netlink: 'syz.3.4956': attribute type 1 has an invalid length. [ 430.965938][T15388] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4956'. [ 430.980511][T15388] NCSI netlink: No device for ifindex 2151022881 [ 431.023593][ T8569] usb 6-1: Using ep0 maxpacket: 16 [ 431.036453][ T8569] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 431.068952][ T8569] usb 6-1: config 252 has no interface number 0 [ 431.080927][ T8570] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 431.098468][ T8569] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.114742][T15392] netlink: 'syz.2.4959': attribute type 10 has an invalid length. [ 431.123334][ T8569] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 431.133866][ T8569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.141894][ T8569] usb 6-1: Product: syz [ 431.146434][ T8569] usb 6-1: Manufacturer: syz [ 431.151086][ T8569] usb 6-1: SerialNumber: syz [ 431.188396][ T8569] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 431.293915][ T8570] usb 5-1: Using ep0 maxpacket: 16 [ 431.305123][ T8570] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.351871][ T8570] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 431.361718][ T8570] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 431.384349][ T4352] usb 6-1: Failed to submit usb control message: -71 [ 431.391815][ T4352] usb 6-1: unable to send the bmi data to the device: -71 [ 431.399297][ T8570] usb 5-1: Product: syz [ 431.410668][ T8569] usb 6-1: USB disconnect, device number 15 [ 431.430023][ T8570] usb 5-1: config 0 descriptor?? [ 431.435265][ T4352] usb 6-1: unable to get target info from device [ 431.442270][ T4352] usb 6-1: could not get target info (-71) [ 431.452982][ T8570] gspca_main: spca501-2.14.0 probing 0000:0000 [ 431.469698][ T4352] usb 6-1: could not probe fw (-71) [ 431.629996][T15405] No such timeout policy "syz1" [ 431.862902][ T8570] gspca_spca501: reg write: error -71 [ 431.868617][ T8570] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 431.890016][ T8570] spca501: probe of 5-1:0.0 failed with error -22 [ 431.907200][ T8570] usb 5-1: USB disconnect, device number 16 [ 431.915950][T15414] netlink: 'syz.2.4969': attribute type 2 has an invalid length. [ 432.109130][T15421] loop2: detected capacity change from 0 to 16 [ 432.109404][T15422] loop1: detected capacity change from 0 to 64 [ 432.142163][T15421] erofs: (device loop2): mounted with root inode @ nid 36. [ 432.212632][T15421] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 432.289208][T15421] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -24 in[64, 4032] out[1851] [ 432.301957][T15421] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 432.724970][T15439] loop5: detected capacity change from 0 to 256 [ 432.839436][T15439] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.893636][T15446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4983'. [ 432.919561][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 432.963827][T15439] FAT-fs (loop5): Filesystem has been set read-only [ 432.971125][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.013621][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.022942][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.037079][ T8570] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 433.043083][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.064999][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.088087][T15452] netlink: 'syz.1.4985': attribute type 10 has an invalid length. [ 433.094270][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.123643][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.171155][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.220716][T15454] netlink: 'syz.4.4988': attribute type 5 has an invalid length. [ 433.228529][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.228734][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.270125][T15456] loop3: detected capacity change from 0 to 64 [ 433.286598][ T8570] usb 3-1: Using ep0 maxpacket: 16 [ 433.296308][T15454] device ip6erspan0 entered promiscuous mode [ 433.308166][ T8570] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 433.338165][ T8570] usb 3-1: config 252 has no interface number 0 [ 433.360311][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.379246][ T8570] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.403053][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.442596][ T8570] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 433.463135][ T8570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.477833][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.486570][ T8570] usb 3-1: Product: syz [ 433.490857][ T8570] usb 3-1: Manufacturer: syz [ 433.504056][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.512911][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.521910][ T8570] usb 3-1: SerialNumber: syz [ 433.551810][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.564782][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.584356][ T8570] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 433.606785][T15463] No such timeout policy "syz1" [ 433.615127][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.641341][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.677728][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.719566][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.746102][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.779892][T15439] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 433.794053][ T32] usb 3-1: Failed to submit usb control message: -71 [ 433.801777][ T8570] usb 3-1: USB disconnect, device number 26 [ 433.810253][ T32] usb 3-1: unable to send the bmi data to the device: -71 [ 433.827684][ T32] usb 3-1: unable to get target info from device [ 433.837974][ T26] audit: type=1800 audit(1769468477.077:148): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4979" name="file1" dev="loop5" ino=1048635 res=0 errno=0 [ 433.863641][ T32] usb 3-1: could not get target info (-71) [ 433.879551][ T32] usb 3-1: could not probe fw (-71) [ 434.471357][T15490] Timeout policy `syz1' can only be used by L3 protocol number 33790 [ 434.583552][ T4317] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 434.792484][T15499] loop1: detected capacity change from 0 to 4096 [ 434.797812][ T4317] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.821373][T15502] loop4: detected capacity change from 0 to 256 [ 434.831405][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5021'. [ 434.857832][ T4317] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.862980][T15499] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 434.900630][T15502] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.901022][ T4317] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 434.958518][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 434.992005][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.000524][T15502] FAT-fs (loop4): Filesystem has been set read-only [ 435.021329][ T4317] usb 6-1: SerialNumber: syz [ 435.063742][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.102771][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.134916][T15499] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 435.165865][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.203779][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.236285][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.251833][ T4317] usb 6-1: 0:2 : does not exist [ 435.291789][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.303745][ T4317] usb 6-1: USB disconnect, device number 16 [ 435.344067][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.396685][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.453850][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.493793][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.523694][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.563726][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.574872][ T6656] udevd[6656]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.592885][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.663950][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.700127][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.724199][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.752258][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.754898][T15521] netlink: 'syz.1.5018': attribute type 5 has an invalid length. [ 435.799223][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.826214][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.844993][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.854593][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.881711][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.890641][T15502] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 435.919736][ T26] audit: type=1800 audit(1769468479.157:149): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5011" name="file1" dev="loop4" ino=1048636 res=0 errno=0 [ 435.992432][T15525] loop2: detected capacity change from 0 to 2048 [ 436.078407][T15525] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 436.145064][T15525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.407801][T15539] loop4: detected capacity change from 0 to 512 [ 436.495391][T15539] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.537475][T15539] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 436.622290][T15539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 436.636101][T15539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 436.714559][T15539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5029: bg 0: block 361: padding at end of block bitmap is not set [ 436.838894][T15539] EXT4-fs (loop4): Remounting filesystem read-only [ 436.851902][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'. [ 436.861355][T15539] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 436.880912][T15539] EXT4-fs (loop4): Remounting filesystem read-only [ 436.903972][T15539] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.5029: attempt to clear invalid blocks 33619980 len 1 [ 437.009277][T15539] EXT4-fs (loop4): Remounting filesystem read-only [ 437.030126][T15539] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5029: invalid indirect mapped block 1811939328 (level 0) [ 437.052926][T15565] loop2: detected capacity change from 0 to 256 [ 437.073243][T15539] EXT4-fs (loop4): Remounting filesystem read-only [ 437.100647][T15539] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5029: invalid indirect mapped block 2185560079 (level 1) [ 437.122289][T15565] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.142874][T15539] EXT4-fs (loop4): Remounting filesystem read-only [ 437.157357][T15539] EXT4-fs (loop4): 1 truncate cleaned up [ 437.181886][T15562] loop3: detected capacity change from 0 to 4096 [ 437.194111][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.202826][T15539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 437.228480][T15562] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 437.237626][T15565] FAT-fs (loop2): Filesystem has been set read-only [ 437.237700][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.305700][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.342365][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.420031][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.508393][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.537430][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.569045][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.579170][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 437.613573][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.673637][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.683911][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.731962][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.793697][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.843896][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.899538][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 437.965482][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.023875][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.042614][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.153548][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.162207][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.202489][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.235950][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.273873][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.282445][T15565] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 438.353739][ T26] audit: type=1800 audit(1769468481.587:150): pid=15565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5040" name="file1" dev="loop2" ino=1048637 res=0 errno=0 [ 438.899320][T15616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5067'. [ 438.973511][ T8570] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 439.204863][ T8570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.233587][ T8570] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.251757][ T8570] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.271471][T15631] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 439.283542][ T8570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.303569][ T8570] usb 3-1: SerialNumber: syz [ 439.403421][T15634] loop4: detected capacity change from 0 to 2048 [ 439.428565][T15634] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 439.470017][T15634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.549729][ T8570] usb 3-1: 0:2 : does not exist [ 439.613928][ T8570] usb 3-1: USB disconnect, device number 27 [ 439.865350][ T6656] udevd[6656]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.888037][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.894405][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.227001][T15650] loop4: detected capacity change from 0 to 4096 [ 440.242203][T15658] loop3: detected capacity change from 0 to 764 [ 440.251469][T15650] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 440.372829][T15658] rock: directory entry would overflow storage [ 440.393541][T15658] rock: sig=0x4f50, size=4, remaining=3 [ 440.437078][T15658] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 441.327708][T15696] loop1: detected capacity change from 0 to 764 [ 441.530198][T15696] rock: directory entry would overflow storage [ 441.549324][T15696] rock: sig=0x4f50, size=4, remaining=3 [ 441.573086][T15696] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 441.997760][T15720] loop3: detected capacity change from 0 to 1024 [ 442.041623][T15720] hfsplus: Filesystem is marked locked, mounting read-only. [ 442.094991][T15720] hfsplus: filesystem is marked locked, leaving read-only. [ 442.434780][T15736] loop4: detected capacity change from 0 to 764 [ 442.495700][T15736] rock: directory entry would overflow storage [ 442.501907][T15736] rock: sig=0x4f50, size=4, remaining=3 [ 442.553663][T15736] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 442.583633][T15742] x_tables: duplicate underflow at hook 4 [ 444.948782][T15844] netlink: 'syz.3.5180': attribute type 10 has an invalid length. [ 444.976659][T15844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5180'. [ 445.096076][T15844] team0: Port device geneve0 added [ 446.732388][T15916] loop5: detected capacity change from 0 to 4096 [ 446.795259][T15916] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 446.924378][T15916] ntfs3: loop5: ino=5, "/" directory corrupted [ 447.012435][T15929] loop3: detected capacity change from 0 to 1764 [ 447.157435][T15929] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 447.894855][T15966] device batadv0 entered promiscuous mode [ 448.004825][ T8569] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 448.263683][ T8569] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 448.271850][ T8569] usb 5-1: config 0 has no interface number 0 [ 448.295107][ T8569] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 448.310387][ T8569] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 448.352757][ T8569] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 448.393590][ T8569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.401638][ T8569] usb 5-1: Product: syz [ 448.465462][ T8569] usb 5-1: Manufacturer: syz [ 448.472897][ T8569] usb 5-1: SerialNumber: syz [ 448.490333][ T8569] usb 5-1: config 0 descriptor?? [ 448.504210][T15987] netlink: 'syz.5.5259': attribute type 1 has an invalid length. [ 448.512862][T15960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.521878][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5259'. [ 448.749697][ T8569] kaweth 5-1:0.58: Firmware present in device. [ 448.950577][ T8569] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 448.967769][ T8569] kaweth: probe of 5-1:0.58 failed with error -5 [ 449.020315][ T8569] usb 5-1: USB disconnect, device number 17 [ 449.181486][T16010] device batadv0 entered promiscuous mode [ 449.271132][T16007] loop2: detected capacity change from 0 to 4096 [ 449.349426][T16007] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 449.410177][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5262'. [ 449.436850][T16016] netlink: 'syz.1.5263': attribute type 1 has an invalid length. [ 449.455846][T16007] ntfs3: loop2: ino=5, "/" directory corrupted [ 449.483567][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5263'. [ 450.333159][T16049] netlink: 'syz.2.5280': attribute type 1 has an invalid length. [ 450.361230][T16044] loop4: detected capacity change from 0 to 4096 [ 450.375023][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5280'. [ 450.452216][T16044] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 450.577532][T16044] ntfs3: loop4: ino=5, "/" directory corrupted [ 450.852870][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5283'. [ 451.099084][T16071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.576604][T16093] syz.1.5301 (16093): /proc/16088/oom_adj is deprecated, please use /proc/16088/oom_score_adj instead. [ 451.605196][T16095] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5304'. [ 451.759856][T16099] loop2: detected capacity change from 0 to 512 [ 451.865912][T16099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 451.911477][T16099] ext4 filesystem being mounted at /1045/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.006560][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 452.321990][T16126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.579878][T16136] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5318'. [ 453.993355][T16186] loop1: detected capacity change from 0 to 8192 [ 454.019541][T16186] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 454.042823][T16186] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 454.052833][T16186] REISERFS (device loop1): using ordered data mode [ 454.060283][T16186] reiserfs: using flush barriers [ 454.071233][T16186] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 454.088351][T16186] REISERFS (device loop1): checking transaction log (loop1) [ 454.194979][T16186] REISERFS (device loop1): Using tea hash to sort names [ 454.212556][T16186] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 454.460222][T16175] loop5: detected capacity change from 0 to 32768 [ 454.626323][T16175] XFS (loop5): Mounting V5 Filesystem [ 454.783739][T16175] XFS (loop5): Ending clean mount [ 454.889039][T16221] loop3: detected capacity change from 0 to 64 [ 455.028102][ T8065] XFS (loop5): Unmounting Filesystem [ 455.081876][T16224] loop2: detected capacity change from 0 to 512 [ 455.134642][T16227] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 455.180420][T16224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 455.192999][T16224] ext4 filesystem being mounted at /1056/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.257545][T16224] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 455.308162][T16231] binfmt_misc: register: failed to install interpreter file ./file0 [ 455.316701][T16224] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 455.345285][T16224] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.5358: Failed to acquire dquot type 0 [ 455.627911][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 455.682494][T16239] loop3: detected capacity change from 0 to 512 [ 455.768954][T16239] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 455.877294][T16239] ext4 filesystem being mounted at /1062/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.054876][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 456.096765][ T6025] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 456.295218][ T6025] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 456.308725][ T6025] usb 3-1: config 0 has no interface number 0 [ 456.343615][ T6025] usb 3-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 456.362024][ T6025] usb 3-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 456.404988][ T6025] usb 3-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 456.433952][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.443511][ T6025] usb 3-1: Product: syz [ 456.447748][ T6025] usb 3-1: Manufacturer: syz [ 456.466731][ T6025] usb 3-1: SerialNumber: syz [ 456.483700][ T8570] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 456.493692][ T6025] usb 3-1: config 0 descriptor?? [ 456.515966][T16243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 456.677796][ T8570] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 456.694879][ T8570] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 456.758456][ T8570] usb 5-1: config 0 has no interface number 1 [ 456.776625][T16267] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 456.784032][ T8570] usb 5-1: config 0 has no interface number 2 [ 456.788359][ T6025] kaweth 3-1:0.58: Firmware present in device. [ 456.833341][ T8570] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 456.862956][ T8570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.900013][ T8570] usb 5-1: config 0 descriptor?? [ 456.970711][ T6025] kaweth 3-1:0.58: Error reading configuration (-71), no net device created [ 456.983754][ T6025] kaweth: probe of 3-1:0.58 failed with error -5 [ 457.029911][ T6025] usb 3-1: USB disconnect, device number 28 [ 457.140306][ T8570] usb 5-1: Could not set interface, error -71 [ 457.207560][ T8570] usb 5-1: USB disconnect, device number 18 [ 457.313019][T16279] netlink: 'syz.3.5385': attribute type 3 has an invalid length. [ 457.684827][T16293] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 457.723543][T16293] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 457.733167][T16293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.363679][ T6025] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 458.560648][ T6025] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.581512][ T6025] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 458.603503][ T6025] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 458.653574][ T6025] usb 2-1: config 1 interface 0 has no altsetting 0 [ 458.677727][ T6025] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.723584][ T6025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.741070][ T6025] usb 2-1: SerialNumber: syz [ 458.786252][ T6025] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 458.803178][ T6025] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 458.813287][ T6025] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 458.841644][ T6025] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 459.012987][T16341] x_tables: unsorted underflow at hook 2 [ 459.021033][ T6025] usb 2-1: USB disconnect, device number 22 [ 459.324412][T16347] loop3: detected capacity change from 0 to 4096 [ 459.543300][T16357] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 459.807051][T16367] 9pnet_fd: Insufficient options for proto=fd [ 460.542381][T16395] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 460.573569][T16399] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 460.585797][T16395] [U] J"—e:ÀÆ" [ 460.706600][T16403] netlink: 'syz.3.5447': attribute type 10 has an invalid length. [ 460.786124][T16403] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 460.840540][T16409] loop5: detected capacity change from 0 to 256 [ 461.303557][ T6025] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 461.385644][T16428] loop1: detected capacity change from 0 to 256 [ 461.465595][T16428] FAT-fs (loop1): Directory bread(block 64) failed [ 461.484562][T16428] FAT-fs (loop1): Directory bread(block 65) failed [ 461.491269][T16428] FAT-fs (loop1): Directory bread(block 66) failed [ 461.497933][ T6025] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.497958][ T6025] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.497981][ T6025] usb 5-1: config 1 has no interface number 0 [ 461.498047][ T6025] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.580316][ T6025] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.599905][T16428] FAT-fs (loop1): Directory bread(block 67) failed [ 461.610082][T16428] FAT-fs (loop1): Directory bread(block 68) failed [ 461.620091][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.643582][T16428] FAT-fs (loop1): Directory bread(block 69) failed [ 461.662853][T16438] loop5: detected capacity change from 0 to 128 [ 461.669256][ T6025] usb 5-1: Product: syz [ 461.674025][T16428] FAT-fs (loop1): Directory bread(block 70) failed [ 461.680601][T16428] FAT-fs (loop1): Directory bread(block 71) failed [ 461.693544][ T6025] usb 5-1: Manufacturer: syz [ 461.693565][ T6025] usb 5-1: SerialNumber: syz [ 461.719609][ T6025] usb 5-1: selecting invalid altsetting 1 [ 461.723240][T16428] FAT-fs (loop1): Directory bread(block 72) failed [ 461.723280][T16428] FAT-fs (loop1): Directory bread(block 73) failed [ 461.755498][T16438] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 461.755601][T16438] FAT-fs (loop5): Filesystem has been set read-only [ 462.103284][ T6025] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 462.119709][ T6025] cdc_ncm 5-1:1.1: bind() failure [ 462.126741][T16445] netlink: 'syz.3.5468': attribute type 10 has an invalid length. [ 462.148546][ T6025] usb 5-1: USB disconnect, device number 19 [ 462.162532][T16445] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 462.210387][T16445] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 462.241360][T16445] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 462.281377][T16445] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 462.376961][T16454] device wlan0 entered promiscuous mode [ 462.663831][T16463] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.903800][T16473] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 463.110237][T16481] loop4: detected capacity change from 0 to 8 [ 463.191663][T16481] SQUASHFS error: Unable to read inode 0xa7 [ 463.538699][T16497] ALSA: mixer_oss: invalid OSS volume 'u' [ 464.105559][T16522] netlink: 'syz.4.5506': attribute type 3 has an invalid length. [ 464.265838][T16526] loop2: detected capacity change from 0 to 64 [ 464.553265][T16534] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5511'. [ 464.612596][T16504] loop5: detected capacity change from 0 to 32768 [ 464.705206][T16504] JBD2: Ignoring recovery information on journal [ 464.800108][T16545] loop1: detected capacity change from 0 to 256 [ 464.955081][T16504] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 465.037629][ T26] audit: type=1800 audit(1769468508.277:151): pid=16504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5497" name="file0" dev="loop5" ino=17058 res=0 errno=0 [ 465.058542][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.223724][ T8065] ocfs2: Unmounting device (7,5) on (node local) [ 465.547246][T16568] ksmbd: Unknown IPC event: 4, ignore. [ 465.589336][T16565] loop1: detected capacity change from 0 to 4096 [ 465.642223][T16565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 465.839503][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 466.275620][ T26] audit: type=1326 audit(1769468509.517:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576d9aeb9 code=0x7ffc0000 [ 466.349223][ T26] audit: type=1326 audit(1769468509.547:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576d9aeb9 code=0x7ffc0000 [ 466.480869][ T26] audit: type=1326 audit(1769468509.547:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9576d9aeb9 code=0x7ffc0000 [ 466.553534][ T26] audit: type=1326 audit(1769468509.547:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576d9aeb9 code=0x7ffc0000 [ 466.673643][ T26] audit: type=1326 audit(1769468509.547:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16595 comm="syz.4.5541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576d9aeb9 code=0x7ffc0000 [ 467.349804][T16634] xt_nat: multiple ranges no longer supported [ 467.528545][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5564'. [ 468.569204][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5586'. [ 468.597109][T16688] netlink: 2120 bytes leftover after parsing attributes in process `syz.3.5588'. [ 468.753533][ T27] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 468.945835][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.963571][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.010491][ T27] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.041357][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.093539][ T27] usb 5-1: SerialNumber: syz [ 469.129224][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5596'. [ 469.153978][T16706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5596'. [ 469.172915][T16706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5596'. [ 469.323999][ T27] usb 5-1: 0:2 : does not exist [ 469.389201][ T27] usb 5-1: USB disconnect, device number 20 [ 469.644368][ T6652] udevd[6652]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.742646][T16728] IPv6: sit1: Disabled Multicast RS [ 469.748110][T16727] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5606'. [ 470.543209][T16758] ipt_CLUSTERIP: Please specify an interface name [ 470.711872][T16762] cgroup: name respecified [ 471.216053][T16785] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 471.241063][T16786] loop3: detected capacity change from 0 to 1024 [ 471.280528][T16786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.326359][T16786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 471.361308][T16786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 471.470085][T16786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 471.749917][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 471.778098][T16803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5641'. [ 471.862413][T16803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5641'. [ 471.897366][T16807] loop3: detected capacity change from 0 to 128 [ 471.930991][T16803] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5641'. [ 471.941110][T16807] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 471.975533][T16807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.015144][T16809] loop2: detected capacity change from 0 to 64 [ 472.960043][T16842] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5659'. [ 473.250787][T16846] loop4: detected capacity change from 0 to 4096 [ 473.297008][T16846] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 473.333546][T16846] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 473.369269][T16857] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5668'. [ 473.377988][T16846] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 473.426773][T16857] netlink: 'syz.1.5668': attribute type 1 has an invalid length. [ 473.442838][T16846] ntfs: volume version 3.1. [ 473.501623][T16846] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 473.507639][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5668'. [ 473.531574][T16846] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 473.764011][ T4352] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 473.764918][ T4283] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 474.536490][T16899] netlink: 'syz.5.5688': attribute type 2 has an invalid length. [ 474.593841][T16899] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5688'. [ 474.678123][T16897] loop1: detected capacity change from 0 to 4096 [ 474.703224][T16897] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 474.780649][T16893] xt_CT: No such helper "pptp" [ 474.851384][T16897] ntfs3: loop1: failed to convert "c46c" to macroman [ 474.947337][T16908] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 475.156402][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5695'. [ 475.201332][ T26] audit: type=1326 audit(1769468518.437:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.4.5696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9576d9aeb9 code=0x0 [ 475.955939][T16940] loop2: detected capacity change from 0 to 256 [ 476.020945][T16940] FAT-fs (loop2): Directory bread(block 64) failed [ 476.058585][T16940] FAT-fs (loop2): Directory bread(block 65) failed [ 476.083677][T16940] FAT-fs (loop2): Directory bread(block 66) failed [ 476.090257][T16940] FAT-fs (loop2): Directory bread(block 67) failed [ 476.123709][T16940] FAT-fs (loop2): Directory bread(block 68) failed [ 476.130286][T16940] FAT-fs (loop2): Directory bread(block 69) failed [ 476.164403][T16940] FAT-fs (loop2): Directory bread(block 70) failed [ 476.192778][T16940] FAT-fs (loop2): Directory bread(block 71) failed [ 476.214516][T16940] FAT-fs (loop2): Directory bread(block 72) failed [ 476.233563][T16940] FAT-fs (loop2): Directory bread(block 73) failed [ 476.491786][T16927] loop1: detected capacity change from 0 to 32768 [ 476.626929][T16927] XFS (loop1): Mounting V5 Filesystem [ 476.780066][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5722'. [ 476.795854][T16927] XFS (loop1): Ending clean mount [ 476.864858][T16927] XFS (loop1): Quotacheck needed: Please wait. [ 476.956276][T16927] XFS (loop1): Quotacheck: Done. [ 477.132989][ T4268] XFS (loop1): Unmounting Filesystem [ 477.322082][T16992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5731'. [ 477.382541][T16988] loop3: detected capacity change from 0 to 4096 [ 477.425557][T16990] loop5: detected capacity change from 0 to 4096 [ 477.487331][T16990] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 477.514212][ T46] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 477.520956][T16990] ntfs3: loop5: ntfs_sync_fs r=19 failed, -22. [ 477.529266][T16988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 477.544266][T16990] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 477.550609][T16990] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 477.582587][T16990] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 477.600166][T16988] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 477.622419][T16988] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 477.636825][T16990] ntfs3: loop5: ntfs_evict_inode r=19 failed, -22. [ 477.642932][T16988] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.5729: Failed to acquire dquot type 0 [ 477.683694][T16990] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 477.690289][T16990] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 477.761975][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 478.765427][T17032] loop2: detected capacity change from 0 to 8192 [ 478.806097][T17032] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 478.878732][T17039] loop1: detected capacity change from 0 to 1024 [ 478.890700][T17032] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 478.900179][T17032] REISERFS (device loop2): using ordered data mode [ 478.906923][T17032] reiserfs: using flush barriers [ 478.917750][T17032] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 478.935183][T17032] REISERFS (device loop2): checking transaction log (loop2) [ 479.057178][T17042] xt_nat: multiple ranges no longer supported [ 479.102212][ T46] hfsplus: b-tree write err: -5, ino 4 [ 479.373079][T17032] REISERFS (device loop2): Using tea hash to sort names [ 479.381660][T17032] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 479.717277][T17060] loop3: detected capacity change from 0 to 256 [ 479.754344][T17060] exfat: Deprecated parameter 'namecase' [ 479.760066][T17060] exfat: Deprecated parameter 'utf8' [ 479.868440][T17060] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 480.079081][T17060] overlayfs: filesystem on './file0' not supported [ 480.280947][T17070] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 481.720836][T17113] loop5: detected capacity change from 0 to 4096 [ 481.783324][T17113] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 481.882989][T17113] ntfs3: loop5: failed to convert "c46c" to macroman [ 482.370095][T17124] loop4: detected capacity change from 0 to 8192 [ 482.424720][T17124] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 482.487963][T17136] netlink: 'syz.2.5796': attribute type 3 has an invalid length. Stopping sshd: [ 482.516512][T17124] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 482.553756][T17136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5796'. [ 482.563005][T17124] REISERFS (device loop4): using ordered data mode [ 482.623552][T17124] reiserfs: using flush barriers [ 482.691656][T17124] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 482.770793][T17124] REISERFS (device loop4): checking transaction log (loop4) [ 482.819943][T17124] REISERFS (device loop4): Using rupasov hash to sort names [ 482.861348][T17124] REISERFS (device loop4): using 3.5.x disk format [ 482.885029][T17124] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP stopped /usr/sbi[ 482.925099][ T7413] usb 4-1: new high-speed USB device number 20 using dummy_hcd n/sshd (pid 4028) [ 482.973529][T17124] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP OK [ 483.002700][T17124] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 483.039178][T17124] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 483.143591][ T7413] usb 4-1: Using ep0 maxpacket: 32 [ 483.150386][T17124] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 483.174337][ T7413] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 483.203578][ T7413] usb 4-1: config 1 has no interface number 1 [ 483.220638][T17150] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 483.240759][ T7413] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.272841][T17124] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 483.276748][T17150] overlayfs: missing 'lowerdir' [ 483.298786][ T7413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.322668][ T7413] usb 4-1: Product: syz [ 483.334001][ T7413] usb 4-1: Manufacturer: syz Stopping crond: [ 483.352047][ T7413] usb 4-1: SerialNumber: syz [ 483.363686][T17124] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 483.385869][T17155] Unsupported ieee802154 address type: 0 [ 483.620517][ T7413] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 483.643724][ T7413] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 483.680304][ T7413] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes stopped /usr/sbin/crond (pid 4013) OK [ 483.758882][ T7413] usb 4-1: USB disconnect, device number 20 [ 483.814589][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5808'. [ 483.991946][T17170] loop1: detected capacity change from 0 to 764 [ 484.016923][T17170] rock: directory entry would overflow storage [ 484.038981][T17170] rock: sig=0x4654, size=5, remaining=4 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3933) [ 485.167652][T17215] loop2: detected capacity change from 0 to 256 [ 485.214645][T17215] exfat: Deprecated parameter 'namecase' [ 485.266434][T17215] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 485.715813][T17229] netlink: 'syz.5.5834': attribute type 3 has an invalid length. [ 485.756436][T17231] loop2: detected capacity change from 0 to 128 [ 485.757672][T17229] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5834'. Stopping network: [ 485.863642][T17231] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 485.873280][T17231] FAT-fs (loop2): Filesystem has been set read-only [ 485.988252][T17236] loop3: detected capacity change from 0 to 1024 [ 486.198182][ T32] hfsplus: b-tree write err: -5, ino 4 [ 486.918150][T17261] loop3: detected capacity change from 0 to 512 [ 487.097667][T17268] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 487.107405][T17268] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 487.116206][T17261] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.5848: inode has both inline data and extents flags [ 487.143301][T17261] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5848: couldn't read orphan inode 15 (err -117) [ 487.194727][T17261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 487.438041][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 487.500329][T17275] loop4: detected capacity change from 0 to 128 [ 487.596925][T17275] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 487.618992][T17241] loop5: detected capacity change from 0 to 32768 [ 487.623041][T17280] IPv6: sit1: Disabled Multicast RS [ 487.667065][T17275] FAT-fs (loop4): Filesystem has been set read-only [ 487.788288][T17241] XFS (loop5): Mounting V5 Filesystem [ 487.842016][T17289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5854'. [ 487.979755][T17241] XFS (loop5): Ending clean mount [ 488.041222][T17296] netlink: 'syz.4.5855': attribute type 10 has an invalid length. [ 488.150651][T17296] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 488.319603][ T8065] XFS (loop5): Unmounting Filesystem OK Stopping iptables: [ 489.303201][T17334] netlink: 'syz.2.5875': attribute type 10 has an invalid length. [ 489.411192][ T26] audit: type=1326 audit(1769468532.647:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17337 comm="syz.5.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 489.473070][T17334] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 489.539913][ T26] audit: type=1326 audit(1769468532.697:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17337 comm="syz.5.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 OK [ 489.669361][ T26] audit: type=1326 audit(1769468532.697:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17337 comm="syz.5.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 489.783517][ T26] audit: type=1326 audit(1769468532.697:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17337 comm="syz.5.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 [ 489.909875][ T26] audit: type=1326 audit(1769468532.697:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17337 comm="syz.5.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x7ffc0000 Stopping system message bus: [ 490.183615][T17364] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5886'. [ 490.240564][T17364] device vlan0 entered promiscuous mode [ 490.621237][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 490.621266][ T52] block nbd5: Attempted send on invalid socket [ 490.633366][ T52] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.654669][T17375] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 490.891917][T17358] loop3: detected capacity change from 0 to 32768 [ 490.988112][T17358] JBD2: Ignoring recovery information on journal [ 491.121937][T17358] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 491.304087][ T26] audit: type=1800 audit(1769468534.547:163): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5884" name="file0" dev="loop3" ino=17058 res=0 errno=0 [ 491.527663][T17399] loop1: detected capacity change from 0 to 16 [ 491.569596][ T4273] ocfs2: Unmounting device (7,3) on (node local) done [ 491.625693][T17399] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 492.520264][T17432] IPv6: sit2: Disabled Multicast RS [ 492.819680][T17435] loop5: detected capacity change from 0 to 2048 [ 492.888370][T17435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.606184][T17467] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5929'. [ 493.646728][T17471] overlayfs: unrecognized mount option "smackfstransmute=l-\]\" or missing value [ 493.911277][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5934'. [ 494.370646][T17496] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 494.424122][T17498] openvswitch: netlink: IP tunnel dst address not specified [ 494.670772][T17511] loop3: detected capacity change from 0 to 16 [ 494.704839][T17511] erofs: (device loop3): mounted with root inode @ nid 36. [ 494.768393][T17511] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 494.825779][ T4274] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 494.836978][T17511] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 494.914200][ T26] audit: type=1800 audit(1769468538.157:164): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5952" name="file3" dev="loop3" ino=9895604650073 res=0 errno=0 Stopping klogd: [ 495.169481][T17533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5960'. [ 495.360374][T17540] netlink: 'syz.1.5963': attribute type 5 has an invalid length. OK Stopping acpid: [ 495.943820][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5976'. [ 496.691313][T17562] loop4: detected capacity change from 0 to 32768 [ 496.756382][T17562] jfs_lookup: iget failed on inum 4 [ 496.889640][T17596] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5990'. OK [ 497.332828][T17613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5998'. Stopping syslogd: [ 497.413044][T17587] loop3: detected capacity change from 0 to 32768 [ 497.497561][T17587] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. stopped /sbin/syslogd (pid 3620) OK [ 497.757972][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 497.795087][T17629] xt_CONNSECMARK: invalid mode: 0 [ 497.971256][ T26] audit: type=1326 audit(1769468541.207:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17635 comm="syz.5.6009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd62b39aeb9 code=0x0 [ 498.033826][ T8570] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 498.091344][T17639] netlink: 'syz.4.6010': attribute type 33 has an invalid length. [ 498.105199][T17639] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6010'. [ 498.263644][ T8570] usb 3-1: Using ep0 maxpacket: 16 [ 498.270807][ T8570] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 498.313900][ T8570] usb 3-1: config 0 has no interface number 0 [ 498.328300][ T8570] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 498.363448][ T8570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.371495][ T8570] usb 3-1: Product: syz [ 498.393464][ T8570] usb 3-1: Manufacturer: syz [ 498.398654][ T8570] usb 3-1: SerialNumber: syz [ 498.424360][ T8570] usb 3-1: config 0 descriptor?? [ 498.454966][ T8570] usb-storage 3-1:0.102: USB Mass Storage device detected [ 498.487162][ T8570] usb-storage 3-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 498.503511][ T8570] usb-storage 3-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 498.503511][ T8570] Please send a copy of this message to and [ 498.551909][T17656] kAFS: unable to lookup cell '.,' [ 498.609644][T17659] loop1: detected capacity change from 0 to 1024 [ 498.685218][ T8569] usb 3-1: USB disconnect, device number 29 [ 498.757521][T17664] loop5: detected capacity change from 0 to 128 [ 498.798858][T17664] VFS: Found a Xenix FS (block size = 1024) on device loop5 umount: can't remount debugfs read-only [ 499.166735][T17678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6026'. [ 499.186117][T17678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6026'. [ 499.595575][ T8065] sysv_free_block: flc_count > flc_size [ 499.620557][ T8065] sysv_free_block: flc_count > flc_size [ 499.632264][ T8065] sysv_free_block: flc_count > flc_size [ 499.639727][ T8065] sysv_free_block: flc_count > flc_size [ 499.663750][ T8065] sysv_free_block: flc_count > flc_size [ 499.669343][ T8065] sysv_free_block: flc_count > flc_size [ 499.703611][ T8065] sysv_free_block: flc_count > flc_size [ 499.723456][ T8065] sysv_free_block: flc_count > flc_size [ 499.729409][ T8065] sysv_free_block: flc_count > flc_size [ 499.746710][ T8065] sysv_free_block: flc_count > flc_size [ 499.767113][ T8065] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 499.913506][ T8569] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 500.123800][ T8569] usb 2-1: Using ep0 maxpacket: 16 [ 500.144394][ T8569] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 500.187397][ T8569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.216997][ T8569] usb 2-1: Product: syz [ 500.221245][ T8569] usb 2-1: Manufacturer: syz [ 500.246884][ T8569] usb 2-1: SerialNumber: syz [ 500.273147][ T8569] r8152-cfgselector 2-1: config 0 descriptor?? [ 500.561085][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6047'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.160 closed by remote host. [ 500.819524][ T8569] r8152-cfgselector 2-1: Unknown version 0x0000 [ 500.848029][ T8569] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 501.317771][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.334066][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 Sent SIGKILL to all processes Requesting system poweroff [ 501.840019][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.942881][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.079166][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.188156][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.994439][ T46] IPVS: stopping backup sync thread 11259 ... [ 503.041834][ T46] bond0: (slave wlan1): Releasing backup interface [ 503.224296][ T46] device hsr_slave_0 left promiscuous mode [ 503.230589][ T46] device hsr_slave_1 left promiscuous mode [ 503.237472][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.245138][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.252960][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.260443][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.268313][ T46] device bridge_slave_1 left promiscuous mode [ 503.274614][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.285201][ T46] device bridge_slave_0 left promiscuous mode [ 503.291933][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.324290][ T46] device veth1_macvtap left promiscuous mode [ 503.330395][ T46] device veth0_macvtap left promiscuous mode [ 503.336772][ T46] device veth1_vlan left promiscuous mode [ 503.342616][ T46] device veth0_vlan left promiscuous mode [ 503.606214][ T46] bond1 (unregistering): Released all slaves [ 503.806528][T17724] kvm: exiting hardware virtualization [ 503.830605][T17724] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 503.852754][T17724] ACPI: PM: Preparing to enter system sleep state S5 [ 503.870161][T17724] reboot: Power down serialport: VM disconnected.