last executing test programs: 3.340610141s ago: executing program 3 (id=4126): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000580)={{}, 0x0, 0x0, 0x5}) 2.352953448s ago: executing program 2 (id=4143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) preadv(r0, 0x0, 0x0, 0x3, 0x1) 2.291761447s ago: executing program 2 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 2.260068197s ago: executing program 3 (id=4146): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x4) 2.223499007s ago: executing program 2 (id=4147): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff}) 2.182794477s ago: executing program 2 (id=4148): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='bew default user:syz '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.143016627s ago: executing program 2 (id=4149): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.921952466s ago: executing program 1 (id=4152): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0) 1.873513186s ago: executing program 1 (id=4153): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000010c0)=@rose={0xbb, 0x2, 0xbb, 0x1, 0x0}) 1.820840676s ago: executing program 1 (id=4155): r0 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/130, 0x82}], 0x1) 1.775477916s ago: executing program 1 (id=4156): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x0, 0x0) 1.684015135s ago: executing program 1 (id=4157): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="a4f6ed49e6271a36fb796e30c583550d325969093a350342ddeace2b7f5d3b77fc63d4e94985e1d025c8de24c53f93d008bed2975a9bc3c4f60c86598ca51bc8db288403f82c9b739a5fc68878ca46a27f193afd0c06e6c5a0880348", @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x1, 0x62bf, &(0x7f0000009400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10b242, 0x0) 1.456322095s ago: executing program 4 (id=4158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b3d, 0x0) 1.347399074s ago: executing program 4 (id=4159): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4c5, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24102, 0x1b4) 1.310046224s ago: executing program 3 (id=4160): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) 1.187404664s ago: executing program 3 (id=4161): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x201c44a, &(0x7f0000000040)=ANY=[@ANYBLOB='unhide,hide,iocharset=macgaelic,uid=', @ANYRESDEC=0x0, @ANYBLOB='2\x00'], 0x1, 0xaa3, &(0x7f0000000240)="$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") chdir(&(0x7f00000003c0)='./bus\x00') 1.055914594s ago: executing program 0 (id=4162): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000001c0)={0x3, @bcast}) 971.967333ms ago: executing program 0 (id=4163): syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0007ad5245b264fc205f4f4a5b37a8c556bafe5a8b213478cf15cb04e7f9478160433b46255a7978215c1749dac90e042ffb4386b4b1f5a3d7b4fc8314541442e972a4fd64bf25217367a48958321144956625a8f6c9c349d0a4c7006e28cfd917d73171c9bdc6fd4d03a75ac239fdff723e48a3342e4c8feca5e9bf1dcd33ee01b47ecae442fa1950323de2378361874f2e153012e3e9e6db3cb058c54443bd09dba3dea42143e1"], 0x1, 0x5a1, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0x4, 0xffffffff}}, 0x741801) 971.368393ms ago: executing program 3 (id=4164): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 909.881283ms ago: executing program 4 (id=4165): r0 = socket(0x40000000015, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x7, @mcast1, 0xfff, 0x8002}, 0x20) 726.941122ms ago: executing program 3 (id=4166): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f0000000340)={[{@nodiscard}, {@order_strict}, {@norecovery}, {@norecovery}, {@discard}, {}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 645.161602ms ago: executing program 4 (id=4167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003a00)=ANY=[@ANYBLOB="540100001900010000000000000000001db4"], 0x154}}, 0x0) 548.965922ms ago: executing program 2 (id=4168): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f00000001c0)={[{@numtail}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@uni_xlate}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 548.785152ms ago: executing program 4 (id=4169): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000a00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6b1, &(0x7f0000000240)="$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") lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 405.037902ms ago: executing program 0 (id=4170): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 280.585731ms ago: executing program 0 (id=4171): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x4000000, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 252.26248ms ago: executing program 1 (id=4172): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x78, 0x3d, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x3}]}, 0x34}}, 0x0) 98.05416ms ago: executing program 4 (id=4173): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x8, 0x0, 0x3e, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7, 0x20}}) 79.03453ms ago: executing program 0 (id=4174): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x36, 0x0, 0x0, @fd}]}, 0x28}], 0x1}, 0x0) 0s ago: executing program 0 (id=4175): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) bind$packet(r0, &(0x7f0000000080)={0x11, 0x11, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): 169.250397][ T9866] loop0: detected capacity change from 0 to 8 [ 169.314648][ T9866] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 169.369950][ T9866] cramfs: bad data blocksize 4291821208 [ 169.393863][ T9866] cramfs: bad data blocksize 4291821208 [ 169.560760][ T9876] loop2: detected capacity change from 0 to 256 [ 169.684763][ T2859] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.723309][ T9888] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 169.743712][ T9888] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 169.772329][ T9888] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 169.963920][ T2859] usb 2-1: Using ep0 maxpacket: 32 [ 170.093660][ T4209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.097205][ T9898] loop0: detected capacity change from 0 to 4096 [ 170.109761][ T2859] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.120449][ T2859] usb 2-1: config 0 interface 0 has no altsetting 1 [ 170.155189][ T9898] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 170.224089][ T2859] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 170.233996][ T2859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.242361][ T2859] usb 2-1: SerialNumber: syz [ 170.268061][ T2859] usb 2-1: config 0 descriptor?? [ 170.284986][ T9880] loop4: detected capacity change from 0 to 32768 [ 170.314913][ T2859] usb-storage 2-1:0.0: USB Mass Storage device detected [ 170.353684][ T4209] usb 3-1: Using ep0 maxpacket: 32 [ 170.357201][ T2859] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 170.400262][ T9880] XFS (loop4): Mounting V5 Filesystem [ 170.446127][ T9894] loop3: detected capacity change from 0 to 32768 [ 170.473812][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.485137][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.497181][ T4209] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.507354][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.517574][ T4209] usb 3-1: config 0 descriptor?? [ 170.521284][ T2859] usb 2-1: USB disconnect, device number 11 [ 170.556910][ T4209] hub 3-1:0.0: USB hub found [ 170.624535][ T9894] XFS (loop3): Mounting V5 Filesystem [ 170.651650][ T9880] XFS (loop4): Ending clean mount [ 170.734050][ T9894] XFS (loop3): Ending clean mount [ 170.734119][ T4177] XFS (loop4): Unmounting Filesystem [ 170.776462][ T4209] hub 3-1:0.0: 1 port detected [ 170.822172][ T4166] XFS (loop3): Unmounting Filesystem [ 170.923849][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 170.988437][ T4209] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 171.018298][ T4209] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 171.136142][ T4209] usbhid 3-1:0.0: can't add hid device: -71 [ 171.142189][ T4209] usbhid: probe of 3-1:0.0 failed with error -71 [ 171.207577][ T4209] usb 3-1: USB disconnect, device number 12 [ 171.273389][ T9940] loop1: detected capacity change from 0 to 64 [ 171.298184][ T9938] loop3: detected capacity change from 0 to 1764 [ 171.310321][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 171.336015][ T9936] loop4: detected capacity change from 0 to 4096 [ 171.423423][ T9936] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 171.494089][ T23] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=61.5b [ 171.509176][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.541421][ T23] usb 1-1: Product: syz [ 171.567090][ T23] usb 1-1: Manufacturer: syz [ 171.587914][ T23] usb 1-1: SerialNumber: syz [ 171.615181][ T23] usb 1-1: config 0 descriptor?? [ 171.682345][ T9953] loop3: detected capacity change from 0 to 64 [ 171.716371][ T9955] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 171.859479][ T23] usb 1-1: USB disconnect, device number 13 [ 171.865077][ T9964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.865159][ T9964] IPv6: NLM_F_CREATE should be set when creating new route [ 171.865193][ T9964] IPv6: NLM_F_CREATE should be set when creating new route [ 171.880524][ T9966] x_tables: duplicate entry at hook 3 [ 171.994577][ T9970] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2435'. [ 172.098011][ T9975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2437'. [ 172.098044][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 172.098095][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2437'. [ 172.098108][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2437'. [ 172.384688][ T9988] lo speed is unknown, defaulting to 1000 [ 172.392685][ T9988] lo speed is unknown, defaulting to 1000 [ 172.392794][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 172.392805][ T26] audit: type=1326 audit(1736476928.851:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.455259][ T9988] lo speed is unknown, defaulting to 1000 [ 172.481276][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 172.488205][ T9986] loop1: detected capacity change from 0 to 2048 [ 172.513221][ T26] audit: type=1326 audit(1736476928.891:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.562939][ T26] audit: type=1326 audit(1736476928.891:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.577415][ T9986] hpfs: filesystem error: improperly stopped; already mounted read-only [ 172.624161][ T9986] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 172.631932][ T9986] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 172.666926][ T26] audit: type=1326 audit(1736476928.891:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.709358][T10002] AppArmor: change_hat: Invalid input '0' [ 172.739502][ T26] audit: type=1326 audit(1736476928.891:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.788071][ T26] audit: type=1326 audit(1736476928.891:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.821273][ T26] audit: type=1326 audit(1736476928.891:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.879960][ T4209] lo speed is unknown, defaulting to 1000 [ 172.880137][ T26] audit: type=1326 audit(1736476928.891:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.879925][ T9988] infiniband syz2: set active [ 172.915849][ T26] audit: type=1326 audit(1736476928.891:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 172.985881][ T9988] infiniband syz2: added lo [ 172.989022][ T26] audit: type=1326 audit(1736476928.891:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz.3.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea95071d29 code=0x7ff00000 [ 173.055268][ T9988] RDS/IB: syz2: added [ 173.059508][ T9988] smc: adding ib device syz2 with port count 1 [ 173.067050][ T9988] smc: ib device syz2 port 1 has pnetid [ 173.075733][ T4209] lo speed is unknown, defaulting to 1000 [ 173.082925][ T9988] lo speed is unknown, defaulting to 1000 [ 173.193999][T10021] netlink: 'syz.0.2460': attribute type 10 has an invalid length. [ 173.227247][T10021] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 173.298130][ T9988] lo speed is unknown, defaulting to 1000 [ 173.348473][T10027] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 173.359196][ T4209] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 173.393945][T10027] netlink: 'syz.0.2463': attribute type 2 has an invalid length. [ 173.401988][T10029] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 173.612372][ T9988] lo speed is unknown, defaulting to 1000 [ 173.613675][ T4209] usb 3-1: Using ep0 maxpacket: 16 [ 173.707114][T10041] loop0: detected capacity change from 0 to 256 [ 173.753818][ T4209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.773635][ T4209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.856773][T10041] FAT-fs (loop0): Directory bread(block 64) failed [ 173.863369][T10041] FAT-fs (loop0): Directory bread(block 65) failed [ 173.897052][T10041] FAT-fs (loop0): Directory bread(block 66) failed [ 173.919498][T10041] FAT-fs (loop0): Directory bread(block 67) failed [ 173.929130][ T9988] lo speed is unknown, defaulting to 1000 [ 173.947044][ T4209] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.960831][T10041] FAT-fs (loop0): Directory bread(block 68) failed [ 173.976921][ T4209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.994296][T10041] FAT-fs (loop0): Directory bread(block 69) failed [ 174.000365][T10031] loop1: detected capacity change from 0 to 32768 [ 174.007586][ T4209] usb 3-1: Product: syz [ 174.010680][T10041] FAT-fs (loop0): Directory bread(block 70) failed [ 174.011774][ T4209] usb 3-1: Manufacturer: syz [ 174.023337][ T4209] usb 3-1: SerialNumber: syz [ 174.032045][T10041] FAT-fs (loop0): Directory bread(block 71) failed [ 174.038956][T10041] FAT-fs (loop0): Directory bread(block 72) failed [ 174.045936][T10041] FAT-fs (loop0): Directory bread(block 73) failed [ 174.098199][ T9988] lo speed is unknown, defaulting to 1000 [ 174.121238][T10031] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.177687][T10031] (syz.1.2465,10031,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 174.195820][T10031] (syz.1.2465,10031,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 174.205002][T10031] (syz.1.2465,10031,0):ocfs2_mknod:298 ERROR: status = -2 [ 174.212236][T10031] (syz.1.2465,10031,0):ocfs2_mknod:502 ERROR: status = -2 [ 174.219859][T10031] (syz.1.2465,10031,0):ocfs2_mkdir:659 ERROR: status = -2 [ 174.272808][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 174.523968][ T4209] usb 3-1: cannot find UAC_HEADER [ 174.531644][T10059] loop3: detected capacity change from 0 to 2048 [ 174.565154][ T4209] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 174.609949][T10059] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 174.619008][ T4209] usb 3-1: USB disconnect, device number 13 [ 174.646851][ T4160] udevd[4160]: incorrect nilfs2 checksum on /dev/loop3 [ 174.714471][T10065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.785901][T10059] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 174.848777][T10059] Remounting filesystem read-only [ 174.864495][T10059] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 174.869944][ T5386] udevd[5386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.883794][T10059] attempt to access beyond end of device [ 174.883794][T10059] loop3: rw=0, want=3122, limit=2048 [ 174.953749][T10059] Buffer I/O error on dev loop3, logical block 1560, async page read [ 174.993018][T10059] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 175.037289][T10059] attempt to access beyond end of device [ 175.037289][T10059] loop3: rw=0, want=3122, limit=2048 [ 175.068906][T10059] Buffer I/O error on dev loop3, logical block 1560, async page read [ 175.160489][T10055] loop0: detected capacity change from 0 to 32768 [ 175.266612][T10080] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 175.271223][T10064] loop4: detected capacity change from 0 to 32768 [ 175.344852][T10064] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2481 (10064) [ 175.370666][T10080] device bond1 entered promiscuous mode [ 175.414386][T10064] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 175.427022][T10092] program syz.2.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.433930][T10055] XFS (loop0): Mounting V5 Filesystem [ 175.459290][T10064] BTRFS info (device loop4): turning off barriers [ 175.466139][T10064] BTRFS info (device loop4): enabling all of the rescue options [ 175.474603][T10064] BTRFS info (device loop4): ignoring data csums [ 175.480959][T10064] BTRFS info (device loop4): ignoring bad roots [ 175.488390][T10064] BTRFS info (device loop4): disabling log replay at mount time [ 175.496484][T10064] BTRFS info (device loop4): disabling tree log [ 175.502919][T10064] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.515636][T10064] BTRFS info (device loop4): trying to use backup root at mount time [ 175.555323][T10064] BTRFS info (device loop4): using free space tree [ 175.561972][T10064] BTRFS info (device loop4): has skinny extents [ 175.649025][T10106] sctp: [Deprecated]: syz.2.2493 (pid 10106) Use of int in maxseg socket option. [ 175.649025][T10106] Use struct sctp_assoc_value instead [ 175.738494][T10055] XFS (loop0): Ending clean mount [ 175.794965][ T4209] Bluetooth: hci1: command 0x0406 tx timeout [ 175.801243][ T4209] Bluetooth: hci2: command 0x0406 tx timeout [ 175.832856][ T4209] Bluetooth: hci4: command 0x0406 tx timeout [ 175.907515][ T4209] Bluetooth: hci0: command 0x0406 tx timeout [ 175.913689][T10064] BTRFS info (device loop4): enabling ssd optimizations [ 175.930119][ T4209] Bluetooth: hci3: command 0x0406 tx timeout [ 175.944521][ T4172] XFS (loop0): Unmounting Filesystem [ 176.820882][T10159] loop1: detected capacity change from 0 to 1764 [ 177.076292][T10182] loop3: detected capacity change from 0 to 128 [ 177.083800][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 177.090463][T10188] x_tables: duplicate underflow at hook 3 [ 177.180959][T10182] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 177.206975][T10194] loop1: detected capacity change from 0 to 1764 [ 177.230363][T10182] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.272493][T10182] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.2522: checksumming directory block 0 [ 177.363746][ T4241] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 177.426330][T10194] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 177.605112][ T23] usb 3-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 177.623721][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.647442][ T23] usb 3-1: Product: syz [ 177.651649][ T23] usb 3-1: Manufacturer: syz [ 177.676826][ T23] usb 3-1: SerialNumber: syz [ 177.692374][ T23] usb 3-1: config 0 descriptor?? [ 177.900974][T10199] loop4: detected capacity change from 0 to 32768 [ 177.954558][ T4241] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 177.964349][T10199] XFS: attr2 mount option is deprecated. [ 177.968596][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.984136][ T4241] usb 1-1: Product: syz [ 177.988366][ T4241] usb 1-1: Manufacturer: syz [ 178.032041][ T4241] usb 1-1: SerialNumber: syz [ 178.066255][ T4241] usb 1-1: config 0 descriptor?? [ 178.088878][T10199] XFS (loop4): Mounting V5 Filesystem [ 178.105736][ T4241] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 178.155112][T10199] XFS (loop4): Ending clean mount [ 178.162455][T10199] XFS (loop4): Quotacheck needed: Please wait. [ 178.193866][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 178.213768][ T23] asix: probe of 3-1:0.0 failed with error -71 [ 178.227671][ T23] usb 3-1: USB disconnect, device number 14 [ 178.271087][T10199] XFS (loop4): Quotacheck: Done. [ 178.522744][ T4177] XFS (loop4): Unmounting Filesystem [ 178.558564][ T23] usb 1-1: USB disconnect, device number 14 [ 178.636301][T10260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.750906][T10264] loop3: detected capacity change from 0 to 1024 [ 178.864303][T10268] device bridge3 entered promiscuous mode [ 179.112654][T10274] loop4: detected capacity change from 0 to 256 [ 179.266061][T10274] FAT-fs (loop4): Directory bread(block 64) failed [ 179.294016][T10274] FAT-fs (loop4): Directory bread(block 65) failed [ 179.321040][T10274] FAT-fs (loop4): Directory bread(block 66) failed [ 179.338332][T10274] FAT-fs (loop4): Directory bread(block 67) failed [ 179.371573][T10274] FAT-fs (loop4): Directory bread(block 68) failed [ 179.401962][T10274] FAT-fs (loop4): Directory bread(block 69) failed [ 179.423255][T10274] FAT-fs (loop4): Directory bread(block 70) failed [ 179.445903][T10274] FAT-fs (loop4): Directory bread(block 71) failed [ 179.467405][T10274] FAT-fs (loop4): Directory bread(block 72) failed [ 179.481894][T10274] FAT-fs (loop4): Directory bread(block 73) failed [ 179.549128][T10266] loop1: detected capacity change from 0 to 32768 [ 179.565804][T10296] loop3: detected capacity change from 0 to 2048 [ 179.634695][ T6152] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 179.655093][T10296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.993891][ T6152] usb 1-1: not running at top speed; connect to a high speed hub [ 180.072798][T10312] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 180.093888][ T6152] usb 1-1: config 1 interface 0 altsetting 190 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.117478][ T6152] usb 1-1: config 1 interface 0 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.164275][ T6152] usb 1-1: config 1 interface 0 has no altsetting 0 [ 180.236112][ T150] block nbd1: Attempted send on invalid socket [ 180.242371][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.254646][T10322] vxfs: unable to read disk superblock at 1 [ 180.261317][ T263] block nbd1: Attempted send on invalid socket [ 180.267584][ T263] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.297053][T10322] vxfs: unable to read disk superblock at 8 [ 180.319164][T10330] rdma_rxe: rxe creation allowed on top of a real device only [ 180.339195][T10322] vxfs: can't find superblock. [ 180.374013][ T6152] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 180.393385][ T6152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.408714][T10336] loop2: detected capacity change from 0 to 164 [ 180.422124][ T6152] usb 1-1: Product: syz [ 180.428276][ T6152] usb 1-1: Manufacturer: syz [ 180.433526][ T6152] usb 1-1: SerialNumber: syz [ 180.504319][T10336] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 180.535365][T10340] loop1: detected capacity change from 0 to 1024 [ 180.670485][T10347] syz.2.2599 uses obsolete (PF_INET,SOCK_PACKET) [ 180.696539][T10348] loop1: detected capacity change from 0 to 256 [ 180.787734][T10348] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d16cac, utbl_chksum : 0xe619d30d) [ 180.804161][ T6152] usb 1-1: bad CDC descriptors [ 180.824073][ T6152] usbtest 1-1:1.0: couldn't get endpoints, -71 [ 180.836154][ T5592] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.836484][ T6152] usbtest: probe of 1-1:1.0 failed with error -71 [ 180.844121][ T5599] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 180.891999][ T6152] usb 1-1: USB disconnect, device number 15 [ 180.894050][T10348] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 180.923955][T10348] exFAT-fs (loop1): Filesystem has been set read-only [ 180.931599][T10348] exFAT-fs (loop1): error, failed to bmap (inode : ffff888074f9a860 iblock : 6, err : -5) [ 181.127046][ T5592] usb 5-1: Using ep0 maxpacket: 8 [ 181.243804][ T5592] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 181.259861][ T5599] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 181.280767][ T5592] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.291080][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.312739][ T5592] usb 5-1: config 0 has no interface number 1 [ 181.320144][ T5599] usb 4-1: config 0 descriptor?? [ 181.332293][ T5592] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 181.353829][T10366] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 181.512592][T10361] loop1: detected capacity change from 0 to 32768 [ 181.517196][ T5592] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 181.541327][ T5592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.553036][T10361] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2605 (10361) [ 181.573492][ T5592] usb 5-1: Product: syz [ 181.583861][ T5592] usb 5-1: Manufacturer: syz [ 181.596125][ T5592] usb 5-1: SerialNumber: syz [ 181.614864][ T5592] usb 5-1: config 0 descriptor?? [ 181.636831][T10361] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 181.664044][T10361] BTRFS info (device loop1): force clearing of disk cache [ 181.665840][ T5592] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 181.678886][T10361] BTRFS info (device loop1): setting nodatasum [ 181.711408][T10361] BTRFS info (device loop1): use zlib compression, level 3 [ 181.721531][T10361] BTRFS info (device loop1): allowing degraded mounts [ 181.739297][T10361] BTRFS info (device loop1): enabling disk space caching [ 181.746731][T10361] BTRFS info (device loop1): disk space caching is enabled [ 181.787826][T10361] BTRFS info (device loop1): has skinny extents [ 181.813881][ T5599] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 181.821879][ T5599] hackrf 4-1:0.0: Could not detect board [ 181.849771][ T5599] hackrf: probe of 4-1:0.0 failed with error -71 [ 181.880002][ T5592] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 181.888406][ T2420] pvrusb2: Invalid write control endpoint [ 181.917525][ T5599] usb 4-1: USB disconnect, device number 15 [ 181.930887][ T2420] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 182.024012][T10361] BTRFS info (device loop1): enabling ssd optimizations [ 182.031334][ T2420] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 182.068326][T10361] BTRFS info (device loop1): clearing free space tree [ 182.096487][T10361] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.127231][ T5592] usb 5-1: USB disconnect, device number 12 [ 182.170324][T10361] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.297477][T10403] loop0: detected capacity change from 0 to 1024 [ 182.402458][T10407] loop3: detected capacity change from 0 to 1764 [ 182.420844][T10410] syz.2.2621 (10410): attempted to duplicate a private mapping with mremap. This is not supported. [ 182.847072][ T4217] hfsplus: b-tree write err: -5, ino 4 [ 182.890493][T10422] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 182.973309][T10422] overlayfs: conflicting options: userxattr,metacopy=on [ 183.047879][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2631'. [ 183.356742][T10457] loop4: detected capacity change from 0 to 128 [ 183.402546][T10460] x_tables: unsorted entry at hook 1 [ 183.480301][T10457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.532467][T10457] ext4 filesystem being mounted at /519/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.645433][T10470] loop2: detected capacity change from 0 to 64 [ 183.652337][T10454] loop3: detected capacity change from 0 to 32768 [ 183.694405][T10475] device ip6_vti0 entered promiscuous mode [ 183.725389][T10454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2643 (10454) [ 183.803836][T10454] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 183.829668][T10454] BTRFS info (device loop3): using free space tree [ 183.882521][T10454] BTRFS info (device loop3): has skinny extents [ 183.905404][T10482] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (4) [ 184.077158][T10497] loop1: detected capacity change from 0 to 64 [ 184.245372][T10514] cgroup: subsys name conflicts with all [ 184.285536][T10454] BTRFS info (device loop3): enabling ssd optimizations [ 184.663081][T10525] loop0: detected capacity change from 0 to 1764 [ 184.762027][T10499] loop2: detected capacity change from 0 to 40427 [ 184.859240][T10499] F2FS-fs (loop2): invalid crc value [ 184.912379][T10499] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.101894][T10499] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 185.175299][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2680'. [ 185.402157][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2687'. [ 185.421981][T10571] openvswitch: netlink: Missing key (keys=40, expected=80) [ 185.545382][T10578] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 185.590813][T10578] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.2691'. [ 185.877580][T10597] netlink: 'syz.2.2686': attribute type 1 has an invalid length. [ 185.895791][T10597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2686'. [ 185.983822][ T5599] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 186.125915][T10618] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 186.162371][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2708'. [ 186.350044][ T5599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.493865][T10644] loop1: detected capacity change from 0 to 2048 [ 186.523987][ T5599] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 186.551731][ T5599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.566436][T10644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.585656][ T5599] usb 4-1: Product: syz [ 186.589941][ T5599] usb 4-1: Manufacturer: syz [ 186.638479][ T5599] usb 4-1: SerialNumber: syz [ 186.664778][ T5599] usb 4-1: config 0 descriptor?? [ 186.953063][ T5599] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 187.067442][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.147458][ T5599] usb 4-1: USB disconnect, device number 16 [ 187.206647][T10648] loop2: detected capacity change from 0 to 32768 [ 187.311582][T10648] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2723 (10648) [ 187.337278][T10651] loop4: detected capacity change from 0 to 40427 [ 187.344019][ T6154] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.362533][T10648] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 187.378626][T10648] BTRFS info (device loop2): force zlib compression, level 3 [ 187.391339][T10648] BTRFS info (device loop2): force clearing of disk cache [ 187.399235][T10648] BTRFS info (device loop2): setting nodatasum [ 187.416490][T10651] F2FS-fs (loop4): invalid crc value [ 187.454401][T10648] BTRFS info (device loop2): allowing degraded mounts [ 187.461309][T10648] BTRFS info (device loop2): enabling disk space caching [ 187.470258][T10648] BTRFS info (device loop2): disk space caching is enabled [ 187.478082][T10648] BTRFS info (device loop2): has skinny extents [ 187.500159][T10651] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (5162113437571155428, 2159216100) [ 187.605776][T10696] loop0: detected capacity change from 0 to 1024 [ 187.622563][T10651] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 187.630055][T10648] BTRFS info (device loop2): clearing free space tree [ 187.630300][T10651] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 187.638980][T10648] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.654695][T10648] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.728306][ T144] hfsplus: b-tree write err: -5, ino 4 [ 187.757469][ T6154] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.803979][ T6154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.944071][ T6154] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.954053][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.962132][ T6154] usb 2-1: SerialNumber: syz [ 188.066204][T10714] loop0: detected capacity change from 0 to 4096 [ 188.265584][T10714] ntfs: volume version 3.1. [ 188.278666][T10721] device gretap0 entered promiscuous mode [ 188.296331][ T6154] usb 2-1: 0:2 : does not exist [ 188.301315][ T6154] usb 2-1: unit 5: unexpected type 0x03 [ 188.343980][ T6154] usb 2-1: unit 255 not found! [ 188.374136][ T6154] usb 2-1: USB disconnect, device number 12 [ 188.674035][ T5603] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 188.685501][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.804785][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2760'. [ 188.973372][T10757] mmap: syz.2.2765 (10757): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 188.975699][T10760] netlink: 'syz.4.2764': attribute type 32 has an invalid length. [ 189.110149][T10764] 9pnet: Could not find request transport: xen [ 189.244053][ T5603] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.273758][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.300505][ T5603] usb 4-1: Product: syz [ 189.313728][ T5603] usb 4-1: Manufacturer: syz [ 189.328460][ T5603] usb 4-1: SerialNumber: syz [ 189.395610][ T5603] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 189.801791][T10804] loop0: detected capacity change from 0 to 512 [ 189.867953][T10804] EXT4-fs (loop0): Ignoring removed orlov option [ 189.877504][T10768] loop1: detected capacity change from 0 to 32768 [ 189.893708][T10804] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.962199][T10804] EXT4-fs (loop0): 1 truncate cleaned up [ 189.981836][T10768] (syz.1.2769,10768,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.993821][ T5603] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.011119][T10804] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,block_validity,lazytime,debug_want_extra_isize=0x0000000000000060,dioread_lock,max_dir_size_kb=0x0000000000000002,orlov,,errors=continue. Quota mode: none. [ 190.057854][T10768] (syz.1.2769,10768,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 190.108712][T10804] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:299: inode #15: comm syz.0.2788: verity file has no extents [ 190.153449][T10821] loop2: detected capacity change from 0 to 256 [ 190.170200][T10804] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 190.173316][T10768] JBD2: Ignoring recovery information on journal [ 190.299992][T10768] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 190.392644][T10818] loop4: detected capacity change from 0 to 32768 [ 190.473095][ T4209] usb 4-1: USB disconnect, device number 17 [ 190.484416][T10818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2794 (10818) [ 190.556374][T10818] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 190.585357][T10818] BTRFS info (device loop4): using free space tree [ 190.592440][T10818] BTRFS info (device loop4): has skinny extents [ 190.646420][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 190.823718][T10846] loop0: detected capacity change from 0 to 1024 [ 190.878255][T10846] EXT4-fs (loop0): Ignoring removed bh option [ 190.944004][T10846] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 69: comm syz.0.2805: lblock 8 mapped to illegal pblock 69 (length 1) [ 190.988859][T10818] BTRFS info (device loop4): enabling ssd optimizations [ 191.073852][ T5603] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 191.074700][T10846] __quota_error: 58 callbacks suppressed [ 191.074722][T10846] Quota error (device loop0): write_blk: dquota write failed [ 191.080877][ T5603] ath9k_htc: Failed to initialize the device [ 191.086800][T10846] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 68: comm syz.0.2805: lblock 7 mapped to illegal pblock 68 (length 1) [ 191.134716][T10846] Quota error (device loop0): write_blk: dquota write failed [ 191.170856][ T4209] usb 4-1: ath9k_htc: USB layer deinitialized [ 191.203359][T10846] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 67: comm syz.0.2805: lblock 6 mapped to illegal pblock 67 (length 1) [ 191.323030][T10846] Quota error (device loop0): write_blk: dquota write failed [ 191.366298][T10846] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 191.386803][T10888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.430659][T10883] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 191.442645][T10846] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.2805: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.520151][T10846] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 191.562138][T10846] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.2805: Failed to acquire dquot type 0 [ 191.582547][T10846] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 191.595750][T10846] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.2805: mark_inode_dirty error [ 191.615328][T10846] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 191.647881][T10846] EXT4-fs (loop0): 1 orphan inode deleted [ 191.679165][T10846] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 191.703735][ T144] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.736187][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 191.751046][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:1: Failed to release dquot type 0 [ 191.787874][T10846] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 191.850805][T10846] EXT4-fs error (device loop0): ext4_quota_off:6486: inode #3: comm syz.0.2805: mark_inode_dirty error [ 191.920993][T10906] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3) [ 192.397610][T10893] loop3: detected capacity change from 0 to 32768 [ 192.464657][T10893] XFS: attr2 mount option is deprecated. [ 192.493918][T10939] ptrace attach of "./syz-executor exec"[10941] was attempted by "./syz-executor exec"[10939] [ 192.614700][T10958] loop0: detected capacity change from 0 to 164 [ 192.639201][T10893] XFS (loop3): Mounting V5 Filesystem [ 192.738267][T10893] XFS (loop3): Ending clean mount [ 192.804377][T10893] XFS (loop3): Quotacheck needed: Please wait. [ 192.815337][T10971] loop2: detected capacity change from 0 to 64 [ 192.884800][T10893] XFS (loop3): Quotacheck: Done. [ 192.993115][ T4166] XFS (loop3): Unmounting Filesystem [ 193.599005][T11009] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2872'. [ 194.058941][T11023] xt_connbytes: Forcing CT accounting to be enabled [ 194.084163][T11023] --map-set only usable from mangle table [ 194.107638][T10992] loop4: detected capacity change from 0 to 40427 [ 194.123902][ T5581] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 194.145899][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2881'. [ 194.200782][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227806][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.245947][T10992] F2FS-fs (loop4): invalid crc value [ 194.330765][T10992] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.390363][T11042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2886'. [ 194.404739][T11042] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2886'. [ 194.430456][T11042] netlink: 'syz.2.2886': attribute type 6 has an invalid length. [ 194.439879][T10992] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 194.449678][T11042] netlink: 'syz.2.2886': attribute type 5 has an invalid length. [ 194.458203][T11042] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2886'. [ 194.493886][ T5581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.522517][ T5581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.622496][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2889'. [ 194.633636][T11049] netlink: 'syz.1.2890': attribute type 3 has an invalid length. [ 194.641381][T11049] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2890'. [ 194.664462][T11051] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 194.713868][ T5581] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 194.722940][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.751862][ T5581] usb 4-1: Product: syz [ 194.781284][ T5581] usb 4-1: Manufacturer: syz [ 194.791419][ T5581] usb 4-1: SerialNumber: syz [ 194.817803][ T5581] usb 4-1: config 0 descriptor?? [ 194.865554][ T5581] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 194.871947][ T5581] usb 4-1: No valid video chain found. [ 195.117716][ T4207] usb 4-1: USB disconnect, device number 18 [ 195.197245][T11031] loop0: detected capacity change from 0 to 32768 [ 195.325198][T11031] XFS (loop0): Mounting V5 Filesystem [ 195.440617][T11097] netlink: 'syz.4.2909': attribute type 11 has an invalid length. [ 195.448715][ T6144] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 195.464069][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 195.551134][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2911'. [ 195.558519][T11031] XFS (loop0): Ending clean mount [ 195.643824][ T4172] XFS (loop0): Unmounting Filesystem [ 195.863943][ T6144] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 195.872111][ T6144] usb 3-1: config 0 has no interface number 0 [ 195.910097][ T6144] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 195.942463][ T6144] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 196.163848][ T6144] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 196.172972][ T6144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.196042][ T6144] usb 3-1: Product: syz [ 196.200270][ T6144] usb 3-1: Manufacturer: syz [ 196.206757][ T6144] usb 3-1: SerialNumber: syz [ 196.234781][ T6144] usb 3-1: config 0 descriptor?? [ 196.259400][T11132] loop1: detected capacity change from 0 to 4096 [ 196.263907][T11074] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.272968][T11136] loop0: detected capacity change from 0 to 256 [ 196.319797][T11132] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 196.337870][ T6144] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 196.381690][T11132] ntfs: volume version 3.1. [ 196.387845][T11138] loop3: detected capacity change from 0 to 4096 [ 196.440964][T11136] FAT-fs (loop0): Directory bread(block 64) failed [ 196.459487][T11136] FAT-fs (loop0): Directory bread(block 65) failed [ 196.470100][T11138] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 196.487105][T11136] FAT-fs (loop0): Directory bread(block 66) failed [ 196.495856][T11138] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 196.505967][T11136] FAT-fs (loop0): Directory bread(block 67) failed [ 196.522129][ T6144] usb 3-1: USB disconnect, device number 15 [ 196.532107][ T6144] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 196.538921][T11136] FAT-fs (loop0): Directory bread(block 68) failed [ 196.565762][T11136] FAT-fs (loop0): Directory bread(block 69) failed [ 196.568861][T11138] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 196.601401][T11136] FAT-fs (loop0): Directory bread(block 70) failed [ 196.660000][T11136] FAT-fs (loop0): Directory bread(block 71) failed [ 196.680034][T11138] ntfs: volume version 3.1. [ 196.689701][T11136] FAT-fs (loop0): Directory bread(block 72) failed [ 196.707035][T11138] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 196.715356][T11136] FAT-fs (loop0): Directory bread(block 73) failed [ 196.758893][T11151] loop1: detected capacity change from 0 to 1024 [ 196.807496][T11154] loop4: detected capacity change from 0 to 164 [ 196.822284][T11151] EXT4-fs (loop1): Ignoring removed nobh option [ 196.865273][T11151] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.2932: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 196.899821][T11151] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2932: couldn't read orphan inode 11 (err -117) [ 196.919525][T11151] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 197.041937][T11151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.2932: Invalid block bitmap block 0 in block_group 0 [ 197.102327][T11151] Quota error (device loop1): write_blk: dquota write failed [ 197.127790][T11151] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 197.159403][T11151] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.2932: Failed to acquire dquot type 0 [ 197.214823][T11168] loop4: detected capacity change from 0 to 512 [ 197.382136][T11168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.404023][T11168] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.526897][T11168] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.2940: corrupted xattr block 33 [ 197.536392][T11184] loop3: detected capacity change from 0 to 164 [ 197.896977][T11196] loop3: detected capacity change from 0 to 512 [ 197.940869][T11166] loop0: detected capacity change from 0 to 32768 [ 197.989613][T11166] XFS (loop0): Mounting V5 Filesystem [ 198.027954][T11196] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.040773][T11196] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.171261][T11188] loop1: detected capacity change from 0 to 32768 [ 198.214538][T11166] XFS (loop0): Ending clean mount [ 198.221306][T11166] XFS (loop0): Quotacheck needed: Please wait. [ 198.237702][T11188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2949 (11188) [ 198.273714][T11188] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 198.285117][T11166] XFS (loop0): Quotacheck: Done. [ 198.294448][T11188] BTRFS info (device loop1): using free space tree [ 198.351053][T11188] BTRFS info (device loop1): has skinny extents [ 198.458016][ T4172] XFS (loop0): Unmounting Filesystem [ 198.616992][T11230] loop4: detected capacity change from 0 to 256 [ 198.705550][T11230] exfat: Deprecated parameter 'utf8' [ 198.711735][T11230] exfat: Deprecated parameter 'namecase' [ 198.737949][T11230] exfat: Deprecated parameter 'namecase' [ 198.758088][T11188] BTRFS info (device loop1): enabling ssd optimizations [ 198.765583][T11230] exfat: Deprecated parameter 'utf8' [ 198.843396][T11230] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 199.016451][ T4160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4160) [ 199.081497][T11262] loop3: detected capacity change from 0 to 64 [ 199.153986][ T4207] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 199.234944][T11262] NILFS (nullb0): couldn't find nilfs on the device [ 199.393625][ T4207] usb 3-1: Using ep0 maxpacket: 16 [ 199.459765][T11269] loop0: detected capacity change from 0 to 1764 [ 199.513980][ T4207] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.543624][ T4207] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.562142][T11279] xt_NFQUEUE: number of total queues is 0 [ 199.593016][T11269] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 199.703899][ T4207] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.733462][ T4207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.744315][ T4207] usb 3-1: Product: syz [ 199.748556][ T4207] usb 3-1: Manufacturer: syz [ 199.780711][ T4207] usb 3-1: SerialNumber: syz [ 200.320330][ T4207] usb 3-1: cannot find UAC_HEADER [ 200.352596][ T4207] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 200.399716][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.420800][ T4207] usb 3-1: USB disconnect, device number 16 [ 200.558311][T11276] loop4: detected capacity change from 0 to 40427 [ 200.677182][T11276] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 200.695627][T11276] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 200.800626][T11276] F2FS-fs (loop4): Found nat_bits in checkpoint [ 200.931384][T11322] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 200.984632][T11276] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 201.001940][T11276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.208184][T11297] loop3: detected capacity change from 0 to 32768 [ 201.354590][T11297] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 201.362793][T11297] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 201.466920][T11297] gfs2: fsid=syz:syz.0: journal 0 mapped with 20 extents in 0ms [ 201.537899][ T1325] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 201.555406][ T1325] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 201.734201][ T1325] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms [ 201.774717][ T1325] gfs2: fsid=syz:syz.0: jid=0: Done [ 201.779992][T11297] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 201.781446][T11362] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3005'. [ 202.029353][T11378] netlink: 'syz.0.3025': attribute type 2 has an invalid length. [ 202.094570][T11378] netlink: 'syz.0.3025': attribute type 8 has an invalid length. [ 202.123756][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3025'. [ 202.321569][T11390] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3023'. [ 202.343660][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3023'. [ 202.399362][T11390] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3023'. [ 202.433452][T11390] netlink: 'syz.3.3023': attribute type 3 has an invalid length. [ 202.473730][T11390] netlink: 'syz.3.3023': attribute type 2 has an invalid length. [ 202.498513][T11398] loop0: detected capacity change from 0 to 2048 [ 202.659830][T11398] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.797160][T11417] device netdevsim0 entered promiscuous mode [ 202.837300][T11417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.200696][T11452] loop1: detected capacity change from 0 to 256 [ 203.273150][T11452] FAT-fs (loop1): Directory bread(block 1285) failed [ 203.293804][T11452] FAT-fs (loop1): Directory bread(block 1286) failed [ 203.300589][T11452] FAT-fs (loop1): Directory bread(block 1287) failed [ 203.349087][T11452] FAT-fs (loop1): Directory bread(block 1288) failed [ 203.357163][T11452] FAT-fs (loop1): Directory bread(block 1289) failed [ 203.424956][T11452] FAT-fs (loop1): Directory bread(block 1290) failed [ 203.443740][ T4211] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 203.507619][T11452] FAT-fs (loop1): Directory bread(block 1291) failed [ 203.522613][T11463] loop0: detected capacity change from 0 to 512 [ 203.536677][T11452] FAT-fs (loop1): Directory bread(block 1292) failed [ 203.564495][T11452] FAT-fs (loop1): Directory bread(block 1293) failed [ 203.571316][T11452] FAT-fs (loop1): Directory bread(block 1294) failed [ 203.636947][T11463] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 203.665631][T11463] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 203.674008][T11463] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.3065: bad orphan inode 13 [ 203.693692][T11463] EXT4-fs (loop0): Remounting filesystem read-only [ 203.705305][T11463] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="nobarrier,noload,data_err=ignore,grpjquota="bh,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 203.870259][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 203.907658][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.946873][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 203.958026][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 204.068983][T11480] loop3: detected capacity change from 0 to 1024 [ 204.127416][T11484] loop0: detected capacity change from 0 to 128 [ 204.159634][T11480] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 204.180789][T11480] EXT4-fs (loop3): orphan cleanup on readonly fs [ 204.190640][T11480] Quota error (device loop3): v2_read_file_info: Block with free entry too big (1283 >= 6). [ 204.212441][T11480] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 204.234020][ T4211] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 204.234172][T11480] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 204.270321][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.284316][T11480] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.3073: Freeing blocks not in datazone - block = 0, count = 4096 [ 204.310465][T11493] loop1: detected capacity change from 0 to 64 [ 204.321339][T11480] EXT4-fs (loop3): 1 orphan inode deleted [ 204.328184][T11480] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.328852][ T4211] usb 3-1: Product: syz [ 204.356488][ T4211] usb 3-1: Manufacturer: syz [ 204.361314][ T4211] usb 3-1: SerialNumber: syz [ 204.382480][T11497] overlayfs: missing 'lowerdir' [ 204.383520][ T4211] usb 3-1: config 0 descriptor?? [ 204.445670][ T4211] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 204.481245][ T4211] cyphidcom ttyUSB0: required endpoint is missing [ 204.580059][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3087'. [ 204.625192][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'. [ 204.727944][T11503] loop3: detected capacity change from 0 to 4096 [ 204.805744][T11503] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 205.039694][T11526] netlink: 'syz.4.3096': attribute type 4 has an invalid length. [ 205.061878][T11529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3097'. [ 205.109653][T11529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3097'. [ 205.353997][ T1325] usb 3-1: USB disconnect, device number 17 [ 205.375017][ T1325] cypress_m8 3-1:0.0: device disconnected [ 205.389235][T11548] loop4: detected capacity change from 0 to 256 [ 205.451704][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3111'. [ 205.482936][T11548] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc5de6174, utbl_chksum : 0xe619d30d) [ 205.748576][T11569] loop4: detected capacity change from 0 to 2048 [ 205.831478][T11569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.833740][T11575] loop2: detected capacity change from 0 to 2048 [ 205.934624][T11587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.946262][T11588] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.013045][T11592] trusted_key: encrypted_key: master key parameter '' is invalid [ 206.031322][T11575] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 206.084894][T11575] Remounting filesystem read-only [ 206.231190][ T4178] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 206.250842][ T4178] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 206.261183][T11602] loop1: detected capacity change from 0 to 4096 [ 206.275920][ T4178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.306035][ T4178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.335503][ T4178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.350748][ T4178] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 206.378918][ T4178] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 206.386841][T11602] ntfs: volume version 3.1. [ 206.400095][ T4178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.421882][T11602] ntfs: (device loop1): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 206.430024][ T4178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.474726][ T4178] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 206.492580][T11602] ntfs: (device loop1): ntfs_lookup(): Failed to convert name to Unicode. [ 206.492930][ T4178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.532960][T11620] loop0: detected capacity change from 0 to 4096 [ 206.539613][T11602] ntfs: (device loop1): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 206.580826][T11602] ntfs: (device loop1): ntfs_lookup(): Failed to convert name to Unicode. [ 206.636540][T11620] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 206.695698][T11631] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 206.743961][T11620] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 207.300223][T11664] loop1: detected capacity change from 0 to 4096 [ 207.409485][T11664] ntfs3: loop1: ino=5, "/" directory corrupted [ 207.580591][T11678] loop0: detected capacity change from 0 to 512 [ 207.660885][T11678] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 207.744619][T11678] EXT4-fs (loop0): 1 truncate cleaned up [ 207.751478][T11678] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 208.036055][T11702] No such timeout policy "syz1" [ 208.405515][T11724] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.412656][T11718] loop1: detected capacity change from 0 to 4096 [ 208.512776][T11718] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 208.561517][T11718] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 208.601325][T11718] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 208.654586][T11718] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 208.726411][T11718] ntfs: volume version 3.1. [ 208.886241][T11755] loop0: detected capacity change from 0 to 256 [ 208.887601][ T1325] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 208.984909][T11755] FAT-fs (loop0): Directory bread(block 64) failed [ 208.993401][T11755] FAT-fs (loop0): Directory bread(block 65) failed [ 209.001025][T11755] FAT-fs (loop0): Directory bread(block 66) failed [ 209.008516][T11755] FAT-fs (loop0): Directory bread(block 67) failed [ 209.016821][T11755] FAT-fs (loop0): Directory bread(block 68) failed [ 209.033932][T11755] FAT-fs (loop0): Directory bread(block 69) failed [ 209.040561][T11755] FAT-fs (loop0): Directory bread(block 70) failed [ 209.070288][T11755] FAT-fs (loop0): Directory bread(block 71) failed [ 209.080234][T11755] FAT-fs (loop0): Directory bread(block 72) failed [ 209.088257][T11755] FAT-fs (loop0): Directory bread(block 73) failed [ 209.173980][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 209.504382][ T1325] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 209.540288][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.574242][ T1325] usb 4-1: Product: syz [ 209.578443][ T1325] usb 4-1: Manufacturer: syz [ 209.583061][ T1325] usb 4-1: SerialNumber: syz [ 209.633738][ T1325] usb 4-1: config 0 descriptor?? [ 209.676106][T11793] loop0: detected capacity change from 0 to 4096 [ 209.742238][T11804] __nla_validate_parse: 3 callbacks suppressed [ 209.742254][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 209.763151][T11793] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 209.834264][T11793] ntfs3: loop0: ino=5, "/" directory corrupted [ 209.847021][T11793] ntfs3: loop0: ino=5, "/" directory corrupted [ 209.904947][ T1325] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 210.023958][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3237'. [ 210.032999][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3237'. [ 210.170203][ T1325] usb 4-1: USB disconnect, device number 19 [ 210.362260][T11822] loop1: detected capacity change from 0 to 8192 [ 210.447012][T11822] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 210.464084][T11822] REISERFS (device loop1): using ordered data mode [ 210.476013][T11822] reiserfs: using flush barriers [ 210.486742][T11822] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.504137][T11822] REISERFS (device loop1): checking transaction log (loop1) [ 210.538246][T11822] REISERFS (device loop1): Using r5 hash to sort names [ 210.552569][T11822] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 210.590511][T11822] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 210.773743][T11843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3251'. [ 211.031125][T11833] loop2: detected capacity change from 0 to 32768 [ 211.073051][T11856] loop3: detected capacity change from 0 to 16 [ 211.147239][T11856] erofs: (device loop3): mounted with root inode @ nid 36. [ 211.353877][ T1108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.423482][T11875] tmpfs: Bad value for 'uid' [ 211.565668][T11883] tc_dump_action: action bad kind [ 211.713802][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.744288][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 211.753260][ T1108] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 211.778341][T11865] loop0: detected capacity change from 0 to 32768 [ 211.795066][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.818791][ T1108] usb 2-1: config 0 descriptor?? [ 211.845630][T11897] loop4: detected capacity change from 0 to 16 [ 211.892613][T11897] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 211.968382][T11897] erofs: (device loop4): mounted with root inode @ nid 36. [ 212.103793][ T1108] Bluetooth: Can't get state to change to load ram patch err [ 212.124938][ T1108] Bluetooth: Loading patch file failed [ 212.130481][ T1108] ath3k: probe of 2-1:0.0 failed with error -121 [ 212.225529][T11887] loop3: detected capacity change from 0 to 32768 [ 212.283045][T11887] (syz.3.3273,11887,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 2, needed 8) [ 212.316265][ T1108] usb 2-1: USB disconnect, device number 13 [ 212.596057][T11907] loop0: detected capacity change from 0 to 4096 [ 212.645169][T11899] loop2: detected capacity change from 0 to 32768 [ 212.694285][T11899] XFS: noikeep mount option is deprecated. [ 212.738766][T11907] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 212.774122][T11899] XFS (loop2): Mounting V5 Filesystem [ 212.985131][T11899] XFS (loop2): Ending clean mount [ 213.004608][T11899] XFS (loop2): Quotacheck needed: Please wait. [ 213.075779][T11935] netlink: 'syz.3.3294': attribute type 2 has an invalid length. [ 213.177873][T11899] XFS (loop2): Quotacheck: Done. [ 213.273660][ T4178] XFS (loop2): Unmounting Filesystem [ 213.419716][T11929] loop4: detected capacity change from 0 to 32768 [ 213.520468][T11952] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 213.586560][T11929] XFS (loop4): Mounting V5 Filesystem [ 213.793156][T11929] XFS (loop4): Ending clean mount [ 213.805014][ T26] audit: type=1400 audit(1736476970.261:85): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11967 comm="syz.1.3308" [ 213.825287][T11929] XFS (loop4): Quotacheck needed: Please wait. [ 213.928997][T11929] XFS (loop4): Quotacheck: Done. [ 214.053765][ T4207] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 214.062426][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 214.106554][T11978] loop1: detected capacity change from 0 to 4096 [ 214.120801][ T4177] XFS (loop4): Unmounting Filesystem [ 214.151782][T11978] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 214.160100][T11991] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 214.302761][T11997] loop0: detected capacity change from 0 to 256 [ 214.328907][ T4207] usb 3-1: Using ep0 maxpacket: 8 [ 214.373050][T11997] exfat: Deprecated parameter 'utf8' [ 214.380073][T11997] exfat: Deprecated parameter 'namecase' [ 214.386383][T11997] exfat: Deprecated parameter 'namecase' [ 214.443061][T11997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 214.453880][ T4207] usb 3-1: config 0 has an invalid interface number: 13 but max is 1 [ 214.463206][ T4207] usb 3-1: config 0 has no interface number 1 [ 214.643881][ T4207] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=ec.e4 [ 214.653000][ T4207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.691445][ T4207] usb 3-1: Product: syz [ 214.701008][ T4207] usb 3-1: Manufacturer: syz [ 214.706362][ T4207] usb 3-1: SerialNumber: syz [ 214.722925][ T4207] usb 3-1: config 0 descriptor?? [ 214.988501][ T4207] usb 3-1: USB disconnect, device number 18 [ 215.008487][T12027] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 215.209820][T12001] loop1: detected capacity change from 0 to 32768 [ 215.322271][T12001] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 215.333707][T12001] BTRFS info (device loop1): using free space tree [ 215.340249][T12001] BTRFS info (device loop1): has skinny extents [ 215.444098][T12056] netlink: 'syz.0.3346': attribute type 32 has an invalid length. [ 215.453818][T12056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3346'. [ 215.499008][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3348'. [ 215.504033][T12043] loop4: detected capacity change from 0 to 8192 [ 215.574414][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 215.603800][T12043] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 215.640677][T12043] REISERFS (device loop4): using ordered data mode [ 215.647777][T12043] reiserfs: using flush barriers [ 215.725361][T12043] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.744657][T12043] REISERFS (device loop4): checking transaction log (loop4) [ 215.755638][T12043] REISERFS (device loop4): Using r5 hash to sort names [ 215.789200][T12043] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 215.791164][T12001] BTRFS info (device loop1): enabling ssd optimizations [ 215.803436][T12043] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 215.826366][T12083] loop0: detected capacity change from 0 to 512 [ 215.899164][T12001] BTRFS warning (device loop1): qgroup rescan init failed, qgroup is not enabled [ 215.990460][T12083] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,bsdgroups,,errors=continue. Quota mode: writeback. [ 216.073400][T12083] ext4 filesystem being mounted at /709/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.350358][ T4211] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 216.623787][ T4211] usb 4-1: Using ep0 maxpacket: 16 [ 216.754061][ T4211] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 216.762808][ T4211] usb 4-1: config 0 has no interface number 0 [ 216.783276][ T4211] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.823741][ T4211] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.849871][T12132] netlink: 'syz.0.3376': attribute type 30 has an invalid length. [ 216.972437][T12133] loop1: detected capacity change from 0 to 4096 [ 217.054027][ T4211] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 217.096728][ T4211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.121572][ T4211] usb 4-1: Product: syz [ 217.126163][ T4211] usb 4-1: Manufacturer: syz [ 217.133443][ T4211] usb 4-1: SerialNumber: syz [ 217.161361][ T4211] usb 4-1: config 0 descriptor?? [ 217.204198][T12090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.230974][T12090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.499409][T12090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.517110][T12090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.528658][T12169] loop0: detected capacity change from 0 to 2048 [ 217.625791][T12169] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 217.763949][ T4211] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 217.812196][ T4211] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 217.857926][ T4211] asix: probe of 4-1:0.251 failed with error -5 [ 217.887512][T12163] loop2: detected capacity change from 0 to 32768 [ 217.901526][ T4211] usb 4-1: USB disconnect, device number 20 [ 217.977946][T12163] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.095161][ T4178] ocfs2: Unmounting device (7,2) on (node local) [ 218.320477][T12200] loop1: detected capacity change from 0 to 256 [ 218.381670][T12202] loop3: detected capacity change from 0 to 4096 [ 218.490108][T12202] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 218.573519][T12193] loop0: detected capacity change from 0 to 32768 [ 218.679060][T12193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3405 (12193) [ 218.778246][T12193] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 218.797322][T12193] BTRFS info (device loop0): using free space tree [ 218.825917][T12193] BTRFS info (device loop0): has skinny extents [ 219.177630][T12193] BTRFS info (device loop0): enabling ssd optimizations [ 219.209229][T12220] loop3: detected capacity change from 0 to 32768 [ 219.268245][T12220] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.3416 (12220) [ 219.497724][ T150] block nbd1: Attempted send on invalid socket [ 219.504104][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 219.523653][T12267] EXT4-fs (nbd1): unable to read superblock [ 219.577511][T12272] netlink: 'syz.2.3432': attribute type 11 has an invalid length. [ 220.237577][T12310] kAFS: unable to lookup cell '' [ 220.475282][ T6156] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 220.667405][T12344] netlink: 'syz.1.3467': attribute type 21 has an invalid length. [ 220.702591][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 220.770041][ T6156] usb 1-1: Using ep0 maxpacket: 32 [ 220.924093][ T6156] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 221.115353][ T6156] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a7.3a [ 221.149092][ T6156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.162280][T12370] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3478'. [ 221.181952][ T6156] usb 1-1: Product: syz [ 221.191703][ T6156] usb 1-1: Manufacturer: syz [ 221.225790][ T6156] usb 1-1: SerialNumber: syz [ 221.243097][ T6156] usb 1-1: config 0 descriptor?? [ 221.356015][T12376] loop1: detected capacity change from 0 to 2048 [ 221.414895][T12381] loop2: detected capacity change from 0 to 16 [ 221.488509][T12381] erofs: (device loop2): mounted with root inode @ nid 36. [ 221.505044][T12376] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 221.532201][T12381] attempt to access beyond end of device [ 221.532201][T12381] loop2: rw=0, want=15300821032, limit=16 [ 221.573853][ T6156] usb 1-1: unknown interface protocol 0x71, assuming v1 [ 221.583726][T12381] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -18 in[3072, 1024] out[4459] [ 221.606672][ T6156] usb 1-1: 0:2 : does not exist [ 221.686759][ T6156] usb 1-1: USB disconnect, device number 16 [ 221.919075][T12407] tmpfs: Bad value for 'size' [ 222.016570][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.179804][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 222.191255][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3503'. [ 222.229017][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3503'. [ 222.823068][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3522'. [ 222.955018][T12457] loop0: detected capacity change from 0 to 8 [ 222.992191][T12410] loop1: detected capacity change from 0 to 32768 [ 223.393348][T12410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3499 (12410) [ 223.653476][T12410] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 223.671439][T12410] BTRFS info (device loop1): using free space tree [ 223.713935][T12410] BTRFS info (device loop1): has skinny extents [ 224.094283][T12410] BTRFS info (device loop1): enabling ssd optimizations [ 224.148346][T12536] overlayfs: missing 'lowerdir' [ 224.159241][T12534] ip6t_srh: unknown srh invflags 92A7 [ 224.167969][T12533] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 224.667892][T12555] tmpfs: Bad value for 'nr_blocks' [ 224.674325][T12553] loop0: detected capacity change from 0 to 4096 [ 224.744739][T12553] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.780772][T12553] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 224.832544][T12560] loop4: detected capacity change from 0 to 256 [ 224.839556][T12559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.974298][T12560] exfat: Deprecated parameter 'utf8' [ 225.045731][T12560] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 225.089830][T12565] netlink: 'syz.0.3565': attribute type 21 has an invalid length. [ 225.119643][T12565] netlink: 'syz.0.3565': attribute type 20 has an invalid length. [ 225.167377][T12565] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.214800][T12549] loop2: detected capacity change from 0 to 32768 [ 225.252904][T12544] loop3: detected capacity change from 0 to 32768 [ 225.394331][ T6156] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.673833][ T6156] usb 2-1: Using ep0 maxpacket: 16 [ 225.687470][T12583] loop4: detected capacity change from 0 to 1024 [ 225.722677][T12589] loop0: detected capacity change from 0 to 256 [ 225.771601][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 225.807404][T12589] FAT-fs (loop0): Directory bread(block 64) failed [ 225.813923][ T6156] usb 2-1: config 0 has no interfaces? [ 225.831654][T12589] FAT-fs (loop0): Directory bread(block 65) failed [ 225.861123][T12589] FAT-fs (loop0): Directory bread(block 66) failed [ 225.868078][T12589] FAT-fs (loop0): Directory bread(block 67) failed [ 225.881040][T12589] FAT-fs (loop0): Directory bread(block 68) failed [ 225.900914][T12589] FAT-fs (loop0): Directory bread(block 69) failed [ 225.950108][T12589] FAT-fs (loop0): Directory bread(block 70) failed [ 225.963409][T12589] FAT-fs (loop0): Directory bread(block 71) failed [ 225.978299][T12589] FAT-fs (loop0): Directory bread(block 72) failed [ 225.988127][T12589] FAT-fs (loop0): Directory bread(block 73) failed [ 226.004019][ T6156] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 226.023300][ T6156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.047404][ T6156] usb 2-1: Product: syz [ 226.052567][ T6156] usb 2-1: Manufacturer: syz [ 226.067904][ T6156] usb 2-1: SerialNumber: syz [ 226.078500][ T6156] r8152-cfgselector 2-1: config 0 descriptor?? [ 226.106859][ T26] audit: type=1800 audit(1736476982.571:86): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3578" name="file1" dev="loop0" ino=1048628 res=0 errno=0 [ 226.135462][T12605] loop2: detected capacity change from 0 to 16 [ 226.184481][T12605] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 226.198081][T12608] loop3: detected capacity change from 0 to 256 [ 226.257052][T12608] FAT-fs (loop3): Directory bread(block 64) failed [ 226.270504][T12608] FAT-fs (loop3): Directory bread(block 65) failed [ 226.283891][T12608] FAT-fs (loop3): Directory bread(block 66) failed [ 226.320616][T12608] FAT-fs (loop3): Directory bread(block 67) failed [ 226.345261][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 226.354878][T12608] FAT-fs (loop3): Directory bread(block 68) failed [ 226.381110][T12608] FAT-fs (loop3): Directory bread(block 69) failed [ 226.394588][ T6156] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 226.426698][T12608] FAT-fs (loop3): Directory bread(block 70) failed [ 226.433314][T12608] FAT-fs (loop3): Directory bread(block 71) failed [ 226.471048][T12608] FAT-fs (loop3): Directory bread(block 72) failed [ 226.481632][T12619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.503656][T12608] FAT-fs (loop3): Directory bread(block 73) failed [ 226.596839][ T6156] usb 2-1: USB disconnect, device number 14 [ 226.776787][T12638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3601'. [ 226.827552][T12638] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3601'. [ 226.967125][T12645] loop4: detected capacity change from 0 to 4096 [ 227.320454][T12670] ipt_REJECT: TCP_RESET invalid for non-tcp [ 227.427735][T12668] loop3: detected capacity change from 0 to 4096 [ 227.547641][T12668] NILFS (loop3): mounting unchecked fs [ 227.565702][T12689] loop1: detected capacity change from 0 to 128 [ 227.572096][T12668] NILFS (loop3): recovery required for readonly filesystem [ 227.587228][T12668] NILFS (loop3): write access will be enabled during recovery [ 227.617420][T12668] NILFS (loop3): invalid segment: Checksum error in segment payload [ 227.638206][T12668] NILFS (loop3): trying rollback from an earlier position [ 227.653219][T12689] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 227.691953][T12668] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 227.702264][T12689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.793105][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3631'. [ 227.802887][T12668] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state [ 228.032440][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3637'. [ 228.033532][T12713] loop2: detected capacity change from 0 to 64 [ 228.143706][T12711] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 228.542600][T12692] loop0: detected capacity change from 0 to 32768 [ 228.647766][T12692] ea_get: invalid extended attribute [ 228.674572][T12745] loop2: detected capacity change from 0 to 512 [ 228.835110][T12745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 228.868608][T12759] loop1: detected capacity change from 0 to 24 [ 228.891682][T12745] System zones: 0-2, 18-18, 34-34 [ 228.902062][T12745] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3650: bg 0: block 248: padding at end of block bitmap is not set [ 228.910552][T12759] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 228.942205][T12761] loop3: detected capacity change from 0 to 256 [ 228.964050][T12759] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 229.044101][T12745] Quota error (device loop2): write_blk: dquota write failed [ 229.051570][T12745] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 229.066157][T12759] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 229.093426][T12761] FAT-fs (loop3): Directory bread(block 64) failed [ 229.123763][T12761] FAT-fs (loop3): Directory bread(block 65) failed [ 229.130386][T12761] FAT-fs (loop3): Directory bread(block 66) failed [ 229.180899][T12761] FAT-fs (loop3): Directory bread(block 67) failed [ 229.195304][T12761] FAT-fs (loop3): Directory bread(block 68) failed [ 229.222252][T12761] FAT-fs (loop3): Directory bread(block 69) failed [ 229.244141][T12776] loop1: detected capacity change from 0 to 24 [ 229.244295][T12745] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.3650: Failed to acquire dquot type 1 [ 229.279575][T12761] FAT-fs (loop3): Directory bread(block 70) failed [ 229.284362][T12776] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 229.290592][T12761] FAT-fs (loop3): Directory bread(block 71) failed [ 229.302478][T12761] FAT-fs (loop3): Directory bread(block 72) failed [ 229.309533][T12745] EXT4-fs (loop2): 1 truncate cleaned up [ 229.315759][T12745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.349834][T12776] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 229.352959][T12761] FAT-fs (loop3): Directory bread(block 73) failed [ 229.370655][T12780] loop4: detected capacity change from 0 to 2048 [ 229.377748][T12745] ext4 filesystem being mounted at /737/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.429415][T12776] romfs: read error for inode 0x70040 [ 229.431320][T12780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.534620][T12745] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.3650: deleted inode referenced: 12 [ 229.546369][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3671'. [ 229.597842][ T26] audit: type=1800 audit(1736476986.061:87): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3660" name="file1" dev="loop3" ino=1048630 res=0 errno=0 [ 229.667071][T12791] loop1: detected capacity change from 0 to 128 [ 230.125263][T12819] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 230.151022][T12819] netlink: 'syz.4.3687': attribute type 2 has an invalid length. [ 230.188122][T12819] netlink: 'syz.4.3687': attribute type 2 has an invalid length. [ 230.207936][T12819] netlink: 'syz.4.3687': attribute type 2 has an invalid length. [ 230.249718][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'. [ 230.377806][T12841] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 230.412584][T12841] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 230.442762][T12843] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3699'. [ 230.504379][T12847] usb usb8: usbfs: process 12847 (syz.1.3701) did not claim interface 0 before use [ 230.573786][ T6139] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 230.689228][T12861] loop1: detected capacity change from 0 to 1024 [ 230.838295][T12861] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.854391][ T6139] usb 4-1: Using ep0 maxpacket: 16 [ 230.919471][T12878] binder: 12875:12878 ioctl c018620c 20000040 returned -22 [ 230.929346][T12861] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #11: comm syz.1.3708: directory missing '..' [ 231.010310][ T6139] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 231.029008][ T6139] usb 4-1: config 0 has no interface number 0 [ 231.045533][ T6139] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 231.124952][T12890] xt_bpf: check failed: parse error [ 231.131260][T12891] dns_resolver: Unsupported server list version (0) [ 231.274025][ T6139] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 231.293349][ T6139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.321954][T12901] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 231.334614][ T6139] usb 4-1: Product: syz [ 231.338812][ T6139] usb 4-1: Manufacturer: syz [ 231.363725][ T6139] usb 4-1: SerialNumber: syz [ 231.389643][ T6139] usb 4-1: config 0 descriptor?? [ 231.803655][ T4208] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 231.890788][ T6139] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 231.920649][ T6139] usb 4-1: USB disconnect, device number 21 [ 231.968392][ T4211] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 232.053641][ T4208] usb 2-1: Using ep0 maxpacket: 16 [ 232.113209][T12933] loop2: detected capacity change from 0 to 32768 [ 232.173935][ T4208] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.241195][T12933] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3752 (12933) [ 232.253711][ T4211] usb 1-1: Using ep0 maxpacket: 8 [ 232.276400][T12933] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 232.286154][T12933] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.296620][T12933] BTRFS info (device loop2): use zstd compression, level 3 [ 232.304680][T12933] BTRFS info (device loop2): using free space tree [ 232.311764][T12933] BTRFS info (device loop2): has skinny extents [ 232.354482][ T4208] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 232.370315][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.384108][ T4211] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 232.395734][ T4208] usb 2-1: Product: syz [ 232.400288][ T4208] usb 2-1: Manufacturer: syz [ 232.403650][ T4211] usb 1-1: config 179 has no interface number 0 [ 232.409803][ T4208] usb 2-1: SerialNumber: syz [ 232.421398][ T4211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 232.456385][ T4208] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input17 [ 232.462727][ T4211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 232.494465][ T4211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.529507][ T4211] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 232.549001][ T4211] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 232.565063][ T4211] usb 1-1: config 179 interface 65 has no altsetting 0 [ 232.571968][ T4211] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 232.581931][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.639063][T12933] BTRFS info (device loop2): enabling ssd optimizations [ 232.651213][T12927] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 232.670782][T12987] netlink: 'syz.3.3760': attribute type 3 has an invalid length. [ 232.683388][T12987] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3760'. [ 232.693287][ T3531] bcm5974 2-1:1.0: could not read from device [ 232.706630][ T4208] usb 2-1: USB disconnect, device number 15 [ 232.713767][ T3531] bcm5974 2-1:1.0: could not read from device [ 232.722744][ T4211] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input18 [ 232.750976][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'. [ 232.760233][T12989] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 232.853335][T12992] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3763'. [ 232.925455][T12994] loop3: detected capacity change from 0 to 4096 [ 232.997993][T12994] ntfs: volume version 3.1. [ 233.255289][ T4208] usb 1-1: USB disconnect, device number 17 [ 233.284446][ T4208] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 233.289906][T12994] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 233.348190][T12994] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 233.399183][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 233.430085][T12994] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 233.462530][T12994] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 233.505419][T12994] ntfs: (device loop3): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 233.697675][ T4166] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 234.257177][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3790'. [ 234.408015][T13056] netlink: 'syz.3.3794': attribute type 30 has an invalid length. [ 234.531469][T13016] loop1: detected capacity change from 0 to 32768 [ 234.618162][T13016] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.3773 (13016) [ 234.656229][T13069] loop3: detected capacity change from 0 to 2048 [ 234.686430][T13016] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 234.704035][T13016] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 234.719669][T13016] BTRFS info (device loop1): use zstd compression, level 3 [ 234.727132][T13016] BTRFS info (device loop1): using free space tree [ 234.734129][T13016] BTRFS info (device loop1): has skinny extents [ 234.862719][T13016] BTRFS info (device loop1): enabling ssd optimizations [ 234.877961][T13069] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 234.928321][T13069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.053200][T13097] netlink: 'syz.2.3805': attribute type 21 has an invalid length. [ 235.343027][T13102] Sensor A: ================= START STATUS ================= [ 235.370581][T13102] Sensor A: Test Pattern: 75% Colorbar [ 235.441807][T13102] Sensor A: Show Information: All [ 235.503375][T13102] Sensor A: Vertical Flip: false [ 235.517124][T13102] Sensor A: Horizontal Flip: false [ 235.522310][T13102] Sensor A: Brightness: 128 [ 235.554340][T13102] Sensor A: Contrast: 128 [ 235.558734][T13102] Sensor A: Hue: 0 [ 235.562520][T13102] Sensor A: Saturation: 0 [ 235.576501][T13102] Sensor A: ================== END STATUS ================== [ 235.804448][ T26] audit: type=1326 audit(1736476992.271:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13111 comm="syz.2.3813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621e513d29 code=0x0 [ 235.860314][T13117] loop1: detected capacity change from 0 to 16 [ 235.930208][T13120] netlink: 'syz.0.3816': attribute type 10 has an invalid length. [ 235.948470][T13120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3816'. [ 235.966943][T13117] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 235.973179][T13120] device ipvlan1 entered promiscuous mode [ 235.986070][T13120] bridge0: port 3(ipvlan1) entered blocking state [ 235.994761][T13120] bridge0: port 3(ipvlan1) entered disabled state [ 236.078443][T13120] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 236.181171][T13134] netlink: 'syz.1.3822': attribute type 10 has an invalid length. [ 236.231234][T13134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3822'. [ 236.270044][T13134] batman_adv: batadv0: Adding interface: vlan1 [ 236.309591][T13134] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.385659][T13134] batman_adv: batadv0: Interface activated: vlan1 [ 236.521189][T13148] loop3: detected capacity change from 0 to 4096 [ 236.534607][T13159] xt_nat: multiple ranges no longer supported [ 236.545995][T13158] loop2: detected capacity change from 0 to 128 [ 236.607868][T13164] loop0: detected capacity change from 0 to 256 [ 236.701043][T13148] ntfs: volume version 3.1. [ 236.720216][T13170] netlink: 'syz.4.3841': attribute type 4 has an invalid length. [ 236.769447][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3841'. [ 236.802933][T13170] infiniband syz2: set active [ 236.813265][T13170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.862496][ T6152] lo speed is unknown, defaulting to 1000 [ 236.866331][T13175] xt_bpf: check failed: parse error [ 237.011603][T13188] netlink: 'syz.3.3850': attribute type 8 has an invalid length. [ 237.013290][T13185] fuse: blksize only supported for fuseblk [ 237.056832][T13190] loop1: detected capacity change from 0 to 256 [ 237.139720][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 237.203326][T13190] FAT-fs (loop1): Directory bread(block 64) failed [ 237.241660][T13190] FAT-fs (loop1): Directory bread(block 65) failed [ 237.259268][T13190] FAT-fs (loop1): Directory bread(block 66) failed [ 237.296424][T13190] FAT-fs (loop1): Directory bread(block 67) failed [ 237.303136][T13190] FAT-fs (loop1): Directory bread(block 68) failed [ 237.340507][T13190] FAT-fs (loop1): Directory bread(block 69) failed [ 237.360809][T13190] FAT-fs (loop1): Directory bread(block 70) failed [ 237.392496][T13190] FAT-fs (loop1): Directory bread(block 71) failed [ 237.429853][T13190] FAT-fs (loop1): Directory bread(block 72) failed [ 237.492714][T13190] FAT-fs (loop1): Directory bread(block 73) failed [ 237.713411][T13183] loop2: detected capacity change from 0 to 32768 [ 237.796285][T13210] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3862'. [ 237.841774][T13183] XFS (loop2): Mounting V5 Filesystem [ 237.860248][T13210] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3862'. [ 237.930416][T13210] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3862'. [ 237.959219][T13204] loop0: detected capacity change from 0 to 40427 [ 238.009179][T13183] XFS (loop2): Ending clean mount [ 238.030650][T13204] F2FS-fs (loop0): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 238.031559][T13183] XFS (loop2): Quotacheck needed: Please wait. [ 238.060677][T13204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 238.131631][T13183] XFS (loop2): Quotacheck: Done. [ 238.186467][T13204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 238.318505][ T4178] XFS (loop2): Unmounting Filesystem [ 238.458403][T13204] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 238.490304][T13204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 238.596832][T13251] loop3: detected capacity change from 0 to 164 [ 238.652730][ T4172] attempt to access beyond end of device [ 238.652730][ T4172] loop0: rw=2049, want=45104, limit=40427 [ 238.873761][ T6152] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.047941][T13262] loop3: detected capacity change from 0 to 4096 [ 239.100136][T13266] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.106233][T13262] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 239.118237][ T6152] usb 2-1: Using ep0 maxpacket: 8 [ 239.222348][T13262] ntfs3: loop3: failed to convert "c46c" to cp865 [ 239.243995][ T6152] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 239.453947][ T6152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.463024][ T6152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.511465][ T6152] usb 2-1: Product: syz [ 239.523590][ T6152] usb 2-1: Manufacturer: syz [ 239.529125][ T6152] usb 2-1: SerialNumber: syz [ 239.604811][ T6152] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 239.651722][T13294] CIFS: iocharset name too long [ 239.819263][ T4207] usb 2-1: USB disconnect, device number 16 [ 239.853252][T13301] syz.3.3901 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 239.902407][T13283] loop0: detected capacity change from 0 to 32768 [ 239.977677][T13283] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3892 (13283) [ 240.027755][T13283] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 240.051133][T13283] BTRFS info (device loop0): force zlib compression, level 3 [ 240.076995][T13283] BTRFS info (device loop0): force clearing of disk cache [ 240.101389][T13283] BTRFS info (device loop0): setting nodatasum [ 240.133681][T13283] BTRFS info (device loop0): use zlib compression, level 3 [ 240.156016][T13283] BTRFS info (device loop0): allowing degraded mounts [ 240.162831][T13283] BTRFS info (device loop0): enabling disk space caching [ 240.200267][T13283] BTRFS info (device loop0): disk space caching is enabled [ 240.223922][T13283] BTRFS info (device loop0): has skinny extents [ 240.294501][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3908'. [ 240.560642][T13283] BTRFS info (device loop0): enabling ssd optimizations [ 240.594650][T13283] BTRFS info (device loop0): clearing free space tree [ 240.646529][T13283] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.695613][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 240.708571][T13341] loop3: detected capacity change from 0 to 8192 [ 240.715143][T13283] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.726852][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 240.808141][T13341] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 240.858350][T13341] REISERFS (device loop3): using ordered data mode [ 240.912217][T13341] reiserfs: using flush barriers [ 240.942155][T13346] loop1: detected capacity change from 0 to 32768 [ 240.974852][T13341] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.980652][T13351] loop2: detected capacity change from 0 to 4096 [ 241.044154][T13341] REISERFS (device loop3): checking transaction log (loop3) [ 241.156677][T13341] REISERFS (device loop3): Using r5 hash to sort names [ 241.181655][T13341] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 241.198804][T13346] XFS (loop1): Mounting V5 Filesystem [ 241.224051][T13341] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 241.325996][T13346] XFS (loop1): Ending clean mount [ 241.461597][ T4167] XFS (loop1): Unmounting Filesystem [ 241.687771][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 242.038738][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'. [ 242.073866][ T23] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 242.089627][ T23] usb 3-1: config 0 has no interface number 0 [ 242.096499][ T23] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 242.126354][ T23] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.128284][T13401] MTD: Couldn't look up '': -22 [ 242.161624][T13401] : Can't open blockdev [ 242.303905][ T23] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 242.312980][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.370688][ T23] usb 3-1: Product: syz [ 242.375855][ T23] usb 3-1: Manufacturer: syz [ 242.398766][ T23] usb 3-1: SerialNumber: syz [ 242.410544][ T23] usb 3-1: config 0 descriptor?? [ 242.433959][T13369] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 242.454760][ T23] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 242.470849][T13391] loop3: detected capacity change from 0 to 32768 [ 242.481515][ T23] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 242.503722][ T6152] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 242.694158][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 242.761179][T13423] loop0: detected capacity change from 0 to 64 [ 242.803417][T13425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3942'. [ 242.812970][T13425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3942'. [ 242.915653][T13429] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3949'. [ 242.925203][ T6152] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 242.938562][ T6152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.944278][ T23] usb 3-1: USB disconnect, device number 19 [ 242.956075][ T6152] usb 2-1: config 0 descriptor?? [ 242.963815][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 243.005005][ T6152] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 243.014104][ T23] cyberjack 3-1:0.69: device disconnected [ 243.155564][T13443] loop3: detected capacity change from 0 to 64 [ 243.234145][ T6152] usb 2-1: Detected FT232BM [ 243.461110][ T6152] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 243.503779][ T6152] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 243.523053][ T6152] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 243.570115][ T6152] usb 2-1: USB disconnect, device number 17 [ 243.605014][ T6152] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 243.627811][T13473] loop3: detected capacity change from 0 to 128 [ 243.655025][ T6152] ftdi_sio 2-1:0.0: device disconnected [ 243.708997][T13473] befs: Unrecognized mount option "" or missing value [ 244.065184][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 244.079104][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 244.092168][T13463] loop4: detected capacity change from 0 to 32768 [ 244.247353][T13463] XFS (loop4): Mounting V5 Filesystem [ 244.313279][T13472] loop2: detected capacity change from 0 to 32768 [ 244.318094][T13463] XFS (loop4): Ending clean mount [ 244.417738][T13472] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3969 (13472) [ 244.494316][T13472] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 244.512713][ T4177] XFS (loop4): Unmounting Filesystem [ 244.553654][T13472] BTRFS info (device loop2): force zlib compression, level 3 [ 244.584399][T13472] BTRFS info (device loop2): force clearing of disk cache [ 244.591564][T13472] BTRFS info (device loop2): setting nodatasum [ 244.603924][ T23] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 244.623524][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.623875][T13472] BTRFS info (device loop2): allowing degraded mounts [ 244.636416][T13492] loop1: detected capacity change from 0 to 32768 [ 244.653655][ T23] usb 1-1: Product: syz [ 244.657873][ T23] usb 1-1: Manufacturer: syz [ 244.672827][ T23] usb 1-1: SerialNumber: syz [ 244.677980][T13472] BTRFS info (device loop2): enabling disk space caching [ 244.705118][ T23] usb 1-1: config 0 descriptor?? [ 244.723228][T13472] BTRFS info (device loop2): disk space caching is enabled [ 244.750246][T13492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3979 (13492) [ 244.773743][T13472] BTRFS info (device loop2): has skinny extents [ 244.830786][T13492] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 244.851087][T13492] BTRFS info (device loop1): using free space tree [ 244.866797][T13492] BTRFS info (device loop1): has skinny extents [ 244.973880][ T23] cdc_subset: probe of 1-1:0.0 failed with error -22 [ 245.000976][T13542] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 245.068591][T13472] BTRFS info (device loop2): clearing free space tree [ 245.083883][T13492] BTRFS info (device loop1): enabling ssd optimizations [ 245.091414][T13472] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 245.132027][T13557] cgroup: none used incorrectly [ 245.174974][T13472] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 245.232646][ T6158] usb 1-1: USB disconnect, device number 18 [ 245.375534][T13572] netlink: 'syz.4.3982': attribute type 4 has an invalid length. [ 245.505465][ T2420] pvrusb2: request_firmware fatal error with code=-110 [ 245.513638][ T2420] pvrusb2: Failure uploading firmware1 [ 245.519136][ T2420] pvrusb2: Device initialization was not successful. [ 245.575715][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 245.609804][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 245.669734][ T2420] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 245.707393][ T5592] pvrusb2: Device being rendered inoperable [ 245.714210][ T2420] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 245.800046][T13583] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3996'. [ 246.008027][T13589] loop0: detected capacity change from 0 to 512 [ 246.163010][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3998'. [ 246.209647][T13589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.249071][T13589] ext4 filesystem being mounted at /849/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.259834][T13602] netlink: 'syz.1.4008': attribute type 2 has an invalid length. [ 246.260757][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3998'. [ 246.726619][T13625] loop2: detected capacity change from 0 to 2048 [ 246.841187][T13625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.866934][T13640] program syz.3.4028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.065369][T13650] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.083152][T13642] loop1: detected capacity change from 0 to 4096 [ 247.159926][T13642] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 247.393121][ T4217] ntfs3: loop1: ino=1e, Internal error [ 247.429274][ T4217] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 247.517355][ T4213] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 247.669177][T13685] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4051'. [ 247.780603][T13690] loop2: detected capacity change from 0 to 1024 [ 247.785876][ T4213] usb 1-1: Using ep0 maxpacket: 16 [ 247.873725][T13690] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 247.914128][ T4213] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 247.930225][ T4213] usb 1-1: config 0 has no interface number 0 [ 247.953169][ T4213] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 247.975476][T13690] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,errors=continue,init_itable,norecovery,debug_want_extra_isize=0x0000000000000080,grpid,nogrpid,journal_ioprio=0x0000000000000001,nomblk_io_submit,,errors=continue. Quota mode: none. [ 248.001653][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.019011][ T4213] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 248.023072][T13686] loop1: detected capacity change from 0 to 32768 [ 248.045468][ T4213] usb 1-1: config 0 interface 41 has no altsetting 0 [ 248.053417][T13690] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 138 free clusters [ 248.117521][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4058'. [ 248.128778][T13700] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 248.165392][T13686] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.4050 (13686) [ 248.205292][ T4213] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 248.224857][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.242418][ T4213] usb 1-1: Product: syz [ 248.249311][ T4213] usb 1-1: Manufacturer: syz [ 248.256781][ T4213] usb 1-1: SerialNumber: syz [ 248.264417][T13686] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 248.275074][ T4213] usb 1-1: config 0 descriptor?? [ 248.280259][T13686] BTRFS info (device loop1): enabling auto defrag [ 248.288535][T13686] BTRFS info (device loop1): use no compression [ 248.295882][T13660] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.311672][T13660] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.319135][T13686] BTRFS info (device loop1): ignoring data csums [ 248.335177][T13686] BTRFS info (device loop1): ignoring bad roots [ 248.341483][T13686] BTRFS info (device loop1): turning off barriers [ 248.354034][T13686] BTRFS info (device loop1): enabling ssd optimizations [ 248.361107][T13686] BTRFS info (device loop1): using spread ssd allocation scheme [ 248.374966][T13686] BTRFS info (device loop1): using free space tree [ 248.381552][T13686] BTRFS info (device loop1): has skinny extents [ 248.441116][ T1271] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 248.463004][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.476520][ T9] BTRFS warning (device loop1): checksum verify failed on 5287936 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0 [ 248.557848][T13660] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.569876][T13660] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.577557][ T4217] BTRFS warning (device loop1): checksum verify failed on 5292032 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 248.635833][T13730] loop4: detected capacity change from 0 to 64 [ 248.654060][ T154] BTRFS warning (device loop1): checksum verify failed on 5341184 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 248.742669][T13704] loop2: detected capacity change from 0 to 32768 [ 248.775002][T13730] attempt to access beyond end of device [ 248.775002][T13730] loop4: rw=0, want=130064, limit=64 [ 248.801444][T13730] Buffer I/O error on dev loop4, logical block 65031, async page read [ 248.853921][ T4213] Error reading MAC address [ 248.883837][ T26] audit: type=1800 audit(1736477005.341:89): pid=13704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4057" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 248.923280][ T4213] sr9700: probe of 1-1:0.41 failed with error -71 [ 248.938797][ T4213] usb 1-1: USB disconnect, device number 19 [ 249.359669][T13744] infiniband syz0: set active [ 249.380457][T13744] infiniband syz0: added bond0 [ 249.520738][T13746] loop3: detected capacity change from 0 to 32768 [ 249.528980][T13744] RDS/IB: syz0: added [ 249.533025][T13744] smc: adding ib device syz0 with port count 1 [ 249.540650][T13744] smc: ib device syz0 port 1 has pnetid [ 249.568508][T13746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4072 (13746) [ 249.650377][T13746] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 249.675321][T13746] BTRFS info (device loop3): using free space tree [ 249.701209][T13746] BTRFS info (device loop3): has skinny extents [ 249.968649][T13746] BTRFS info (device loop3): enabling ssd optimizations [ 250.385978][T13791] netlink: 'syz.1.4083': attribute type 11 has an invalid length. [ 250.469196][T13791] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4083'. [ 250.695299][T13801] loop2: detected capacity change from 0 to 164 [ 251.121780][T13819] loop3: detected capacity change from 0 to 512 [ 251.156067][T13821] overlayfs: conflicting options: userxattr,redirect_dir=off [ 251.383800][ T6142] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 251.605719][T13841] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 251.773105][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4113'. [ 251.790290][ T6142] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 251.828425][ T6142] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 251.849499][ T6142] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 251.865435][ T6142] usb 2-1: config 1 has no interface number 0 [ 251.871874][ T6142] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.887311][ T6142] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 251.913743][ T5588] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 251.918221][ T6142] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 251.929727][T13861] loop4: detected capacity change from 0 to 128 [ 251.943068][ T6142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.960466][T13863] loop3: detected capacity change from 0 to 8 [ 252.013640][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 252.016162][ T6142] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 252.038387][T13863] SQUASHFS error: zlib decompression failed, data probably corrupt [ 252.046729][T13863] SQUASHFS error: Failed to read block 0x13e: -5 [ 252.053073][T13863] SQUASHFS error: Unable to read metadata cache entry [13c] [ 252.063363][T13863] SQUASHFS error: Unable to read directory block [13c:26] [ 252.163783][ T5588] usb 1-1: Using ep0 maxpacket: 8 [ 252.242890][T13872] loop4: detected capacity change from 0 to 256 [ 252.254344][ T6142] snd_usb_pod 2-1:1.1: invalid control EP [ 252.260105][ T6142] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 252.273866][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 252.276304][ T6142] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 252.284053][ T5588] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 252.286925][ T6142] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 252.303303][ T5588] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 252.322886][T13872] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 252.339236][ T5588] usb 1-1: config 135 has no interface number 0 [ 252.345755][ T5588] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 252.358716][ T5588] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 252.391694][ T5588] usb 1-1: config 135 interface 230 has no altsetting 0 [ 252.400061][T13872] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 252.413994][ T23] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.432540][ T23] usb 3-1: config 179 has no interface number 0 [ 252.448594][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 252.461431][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 252.474137][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.486399][ T23] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 252.497227][ T23] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.518138][ T23] usb 3-1: config 179 interface 65 has no altsetting 0 [ 252.528083][ T23] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 252.540346][ T1325] usb 2-1: USB disconnect, device number 18 [ 252.546000][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.563928][ T5588] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 252.585874][ T5588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.623226][ T5588] usb 1-1: Product: syz [ 252.642444][ T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input19 [ 252.663901][ T5588] usb 1-1: Manufacturer: syz [ 252.668993][ T5588] usb 1-1: SerialNumber: syz [ 252.718729][ T5588] usb 1-1: Found Unit with invalid ID 0. [ 252.875454][ T1325] usb 3-1: USB disconnect, device number 20 [ 252.898253][ T1325] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 252.990803][T13879] loop3: detected capacity change from 0 to 32768 [ 253.038511][T13879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4126 (13879) [ 253.125011][T13879] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 253.155609][T13879] BTRFS info (device loop3): using free space tree [ 253.162619][T13879] BTRFS info (device loop3): has skinny extents [ 253.354194][T13916] loop1: detected capacity change from 0 to 8 [ 253.400339][T13928] loop4: detected capacity change from 0 to 512 [ 253.427927][T13879] BTRFS info (device loop3): enabling ssd optimizations [ 253.495507][T13928] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 253.505070][T13928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 253.513137][T13928] System zones: 0-1, 15-15, 18-18, 34-34 [ 253.587014][T13942] trusted_key: encrypted_key: keyword 'bew' not recognized [ 253.598874][T13928] EXT4-fs (loop4): orphan cleanup on readonly fs [ 253.653282][T13928] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 253.664839][T13928] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 253.681335][T13928] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 253.688824][T13928] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.4142: bad orphan inode 16 [ 253.714017][T13928] ext4_test_bit(bit=15, block=18) = 1 [ 253.719442][T13928] is_bad_inode(inode)=0 [ 253.732990][T13928] NEXT_ORPHAN(inode)=0 [ 253.741476][T13948] binder: 13947:13948 ioctl c018620c 20000380 returned -22 [ 253.747217][T13928] max_ino=32 [ 253.751968][T13928] i_nlink=2 [ 253.762446][T13928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 253.830144][T13928] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 254.520633][T13975] loop4: detected capacity change from 0 to 512 [ 254.611982][T13975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.622996][T13985] loop3: detected capacity change from 0 to 1764 [ 254.657494][T13975] ext4 filesystem being mounted at /792/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.666857][ T7] usb 1-1: USB disconnect, device number 20 [ 254.856894][T13991] loop0: detected capacity change from 0 to 512 [ 254.915640][T13959] loop1: detected capacity change from 0 to 32768 [ 254.957749][T13991] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 254.979285][T13991] UDF-fs: Scanning with blocksize 512 failed [ 254.996849][T13959] [ 254.996849][T13959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.996849][T13959] [ 254.996948][T13991] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 254.996964][T13991] UDF-fs: Scanning with blocksize 1024 failed [ 255.047478][T13991] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 255.049134][T13959] [ 255.049134][T13959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.049134][T13959] [ 255.062014][T13991] UDF-fs: Scanning with blocksize 2048 failed [ 255.083374][T13991] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 255.130184][T13991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.174327][T13959] [ 255.174327][T13959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.174327][T13959] [ 255.189475][T14001] loop3: detected capacity change from 0 to 2048 [ 255.216339][T13959] [ 255.216339][T13959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.216339][T13959] [ 255.245425][T14010] loop2: detected capacity change from 0 to 256 [ 255.251142][T14001] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.263316][T14011] loop4: detected capacity change from 0 to 1024 [ 255.283105][T13959] [ 255.283105][T13959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.283105][T13959] [ 255.317115][T14001] attempt to access beyond end of device [ 255.317115][T14001] loop3: rw=524288, want=33554432, limit=2048 [ 255.328599][T14010] FAT-fs (loop2): Directory bread(block 64) failed [ 255.330439][T14012] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.350775][T13959] [ 255.350775][T13959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.350775][T13959] [ 255.371923][T14010] FAT-fs (loop2): Directory bread(block 65) failed [ 255.379655][T14015] netlink: 'syz.0.4170': attribute type 4 has an invalid length. [ 255.408425][T14010] FAT-fs (loop2): Directory bread(block 66) failed [ 255.412522][T14001] attempt to access beyond end of device [ 255.412522][T14001] loop3: rw=0, want=33554432, limit=2048 [ 255.436185][ T276] [ 255.436185][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.436185][ T276] [ 255.445560][T14011] hfsplus: invalid xattr key length: 0 [ 255.453856][T14010] FAT-fs (loop2): Directory bread(block 67) failed [ 255.460473][T14010] FAT-fs (loop2): Directory bread(block 68) failed [ 255.487663][T14010] FAT-fs (loop2): Directory bread(block 69) failed [ 255.501024][ T9] [ 255.501024][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.501024][ T9] [ 255.526651][T14010] FAT-fs (loop2): Directory bread(block 70) failed [ 255.534370][ T9] [ 255.534370][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.534370][ T9] [ 255.576399][T14010] FAT-fs (loop2): Directory bread(block 71) failed [ 255.587429][ T478] hfsplus: b-tree write err: -5, ino 8 [ 255.592415][T14001] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 255.593360][ T4167] [ 255.593360][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.593360][ T4167] [ 255.627372][ T4167] [ 255.627372][ T4167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.627372][ T4167] [ 255.640198][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640243][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.656488][T14010] FAT-fs (loop2): Directory bread(block 72) failed [ 255.663215][T14010] FAT-fs (loop2): Directory bread(block 73) failed [ 255.683731][T14001] NILFS (loop3): error -5 reading inode: ino=12 [ 255.703312][ T277] [ 255.703312][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.703312][ T277] [ 255.715410][T14017] attempt to access beyond end of device [ 255.715410][T14017] loop3: rw=0, want=33554432, limit=2048 [ 255.757891][T14017] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 255.796929][ T277] ================================================================== [ 255.805712][ T277] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 255.812151][ T277] Write of size 8 at addr ffff88807cdf6040 by task jfsCommit/277 [ 255.819875][ T277] [ 255.822216][ T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted 5.15.176-syzkaller #0 [ 255.830205][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.840271][ T277] Call Trace: [ 255.843558][ T277] [ 255.846503][ T277] dump_stack_lvl+0x1e3/0x2d0 [ 255.851196][ T277] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 255.856841][ T277] ? _printk+0xd1/0x120 [ 255.861010][ T277] ? __wake_up_klogd+0xcc/0x100 [ 255.865863][ T277] ? panic+0x860/0x860 [ 255.869940][ T277] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 255.875414][ T277] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 255.881066][ T277] print_address_description+0x63/0x3b0 [ 255.886630][ T277] ? txEnd+0x350/0x560 [ 255.890717][ T277] kasan_report+0x16b/0x1c0 [ 255.895237][ T277] ? txEnd+0x350/0x560 [ 255.899325][ T277] kasan_check_range+0x27e/0x290 [ 255.904277][ T277] txEnd+0x350/0x560 [ 255.908184][ T277] jfs_lazycommit+0x60d/0xc30 [ 255.912868][ T277] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 255.918769][ T277] ? lockdep_hardirqs_on+0x94/0x130 [ 255.924032][ T277] ? txFreelock+0x580/0x580 [ 255.928033][T14017] NILFS (loop3): error -5 reading inode: ino=12 [ 255.928544][ T277] ? sched_dynamic_update+0x240/0x240 [ 255.940139][ T277] kthread+0x3f6/0x4f0 [ 255.944241][ T277] ? txFreelock+0x580/0x580 [ 255.948756][ T277] ? kthread_blkcg+0xd0/0xd0 [ 255.953380][ T277] ret_from_fork+0x1f/0x30 [ 255.957927][ T277] [ 255.960954][ T277] [ 255.963282][ T277] Allocated by task 13959: [ 255.967696][ T277] ____kasan_kmalloc+0xba/0xf0 [ 255.972466][ T277] kmem_cache_alloc_trace+0x143/0x290 [ 255.977840][ T277] lmLogOpen+0x314/0x1030 [ 255.982185][ T277] jfs_mount_rw+0xe3/0x640 [ 255.986614][ T277] jfs_fill_super+0x69f/0xc70 [ 255.991307][ T277] mount_bdev+0x2c9/0x3f0 [ 255.995660][ T277] legacy_get_tree+0xeb/0x180 [ 256.000347][ T277] vfs_get_tree+0x88/0x270 [ 256.004767][ T277] do_new_mount+0x2ba/0xb40 [ 256.009266][ T277] __se_sys_mount+0x2d5/0x3c0 [ 256.013942][ T277] do_syscall_64+0x3b/0xb0 [ 256.018361][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.024270][ T277] [ 256.026595][ T277] Freed by task 4167: [ 256.030572][ T277] kasan_set_track+0x4b/0x80 [ 256.035174][ T277] kasan_set_free_info+0x1f/0x40 [ 256.040120][ T277] ____kasan_slab_free+0xd8/0x120 [ 256.045152][ T277] slab_free_freelist_hook+0xdd/0x160 [ 256.050539][ T277] kfree+0xf1/0x270 [ 256.054357][ T277] lmLogClose+0x29d/0x530 [ 256.058693][ T277] jfs_umount+0x298/0x370 [ 256.063028][ T277] jfs_put_super+0x86/0x180 [ 256.067543][ T277] generic_shutdown_super+0x130/0x310 [ 256.072923][ T277] kill_block_super+0x7a/0xe0 [ 256.077614][ T277] deactivate_locked_super+0xa0/0x110 [ 256.082995][ T277] cleanup_mnt+0x44e/0x500 [ 256.087415][ T277] task_work_run+0x129/0x1a0 [ 256.092012][ T277] exit_to_user_mode_loop+0x106/0x130 [ 256.097391][ T277] exit_to_user_mode_prepare+0xb1/0x140 [ 256.102945][ T277] syscall_exit_to_user_mode+0x5d/0x240 [ 256.108508][ T277] do_syscall_64+0x47/0xb0 [ 256.112932][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.118830][ T277] [ 256.121149][ T277] The buggy address belongs to the object at ffff88807cdf6000 [ 256.121149][ T277] which belongs to the cache kmalloc-1k of size 1024 [ 256.135198][ T277] The buggy address is located 64 bytes inside of [ 256.135198][ T277] 1024-byte region [ffff88807cdf6000, ffff88807cdf6400) [ 256.148484][ T277] The buggy address belongs to the page: [ 256.154126][ T277] page:ffffea0001f37c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cdf0 [ 256.164304][ T277] head:ffffea0001f37c00 order:3 compound_mapcount:0 compound_pincount:0 [ 256.172645][ T277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 256.180663][ T277] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888017441dc0 [ 256.189258][ T277] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 256.197630][T14034] loop0: detected capacity change from 0 to 256 [ 256.197836][ T277] page dumped because: kasan: bad access detected [ 256.210466][ T277] page_owner tracks the page as allocated [ 256.216186][ T277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3919, ts 28048196376, free_ts 28022229871 [ 256.235296][ T277] get_page_from_freelist+0x3b78/0x3d40 [ 256.240853][ T277] __alloc_pages+0x272/0x700 [ 256.245453][ T277] new_slab+0xbb/0x4b0 [ 256.249611][ T277] ___slab_alloc+0x6f6/0xe10 [ 256.254205][ T277] __kmalloc+0x1c9/0x300 [ 256.258456][ T277] load_elf_binary+0x2ec/0x2750 [ 256.263323][ T277] bprm_execve+0x8fd/0x17c0 [ 256.267842][ T277] do_execveat_common+0x583/0x720 [ 256.272879][ T277] __x64_sys_execve+0x8e/0xa0 [ 256.277564][ T277] do_syscall_64+0x3b/0xb0 [ 256.281992][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.287901][ T277] page last free stack trace: [ 256.292568][ T277] free_unref_page_prepare+0xc34/0xcf0 [ 256.298029][ T277] free_unref_page+0x95/0x2d0 [ 256.302708][ T277] __unfreeze_partials+0x1b7/0x210 [ 256.307837][ T277] put_cpu_partial+0x132/0x1a0 [ 256.312610][ T277] ___cache_free+0xe3/0x100 [ 256.317126][ T277] qlist_free_all+0x36/0x90 [ 256.321642][ T277] kasan_quarantine_reduce+0x162/0x180 [ 256.327115][ T277] __kasan_slab_alloc+0x2f/0xc0 [ 256.331974][ T277] slab_post_alloc_hook+0x53/0x380 [ 256.337092][ T277] kmem_cache_alloc+0xf3/0x280 [ 256.341862][ T277] getname_flags+0xb8/0x4e0 [ 256.346376][ T277] user_path_at_empty+0x2a/0x180 [ 256.351325][ T277] vfs_statx+0x106/0x3b0 [ 256.355575][ T277] __x64_sys_newfstatat+0x12c/0x1b0 [ 256.360787][ T277] do_syscall_64+0x3b/0xb0 [ 256.365318][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.371228][ T277] [ 256.373557][ T277] Memory state around the buggy address: [ 256.379190][ T277] ffff88807cdf5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 256.387260][ T277] ffff88807cdf5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 256.395332][ T277] >ffff88807cdf6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.403404][ T277] ^ [ 256.409564][ T277] ffff88807cdf6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.417628][ T277] ffff88807cdf6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 256.425694][ T277] ================================================================== [ 256.433758][ T277] Disabling lock debugging due to kernel taint [ 256.444596][ T277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.451805][ T277] CPU: 0 PID: 277 Comm: jfsCommit Tainted: G B 5.15.176-syzkaller #0 [ 256.461173][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.471234][ T277] Call Trace: [ 256.474517][ T277] [ 256.477446][ T277] dump_stack_lvl+0x1e3/0x2d0 [ 256.482139][ T277] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 256.487772][ T277] ? panic+0x860/0x860 [ 256.491850][ T277] ? preempt_schedule_common+0xa6/0xd0 [ 256.497317][ T277] ? preempt_schedule+0xd9/0xe0 [ 256.502185][ T277] panic+0x318/0x860 [ 256.506082][ T277] ? check_panic_on_warn+0x1d/0xa0 [ 256.511195][ T277] ? fb_is_primary_device+0xd0/0xd0 [ 256.516404][ T277] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 256.522398][ T277] ? _raw_spin_unlock+0x40/0x40 [ 256.527265][ T277] check_panic_on_warn+0x7e/0xa0 [ 256.532216][ T277] ? txEnd+0x350/0x560 [ 256.536287][ T277] end_report+0x6d/0xf0 [ 256.540455][ T277] kasan_report+0x18e/0x1c0 [ 256.544966][ T277] ? txEnd+0x350/0x560 [ 256.549041][ T277] kasan_check_range+0x27e/0x290 [ 256.553985][ T277] txEnd+0x350/0x560 [ 256.557890][ T277] jfs_lazycommit+0x60d/0xc30 [ 256.562572][ T277] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 256.568473][ T277] ? lockdep_hardirqs_on+0x94/0x130 [ 256.573690][ T277] ? txFreelock+0x580/0x580 [ 256.578207][ T277] ? sched_dynamic_update+0x240/0x240 [ 256.583591][ T277] kthread+0x3f6/0x4f0 [ 256.587668][ T277] ? txFreelock+0x580/0x580 [ 256.592176][ T277] ? kthread_blkcg+0xd0/0xd0 [ 256.596776][ T277] ret_from_fork+0x1f/0x30 [ 256.601203][ T277] [ 256.604431][ T277] Kernel Offset: disabled [ 256.608748][ T277] Rebooting in 86400 seconds..