last executing test programs: 2m41.468345405s ago: executing program 3 (id=811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0) 2m40.935714747s ago: executing program 3 (id=820): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00034b0000004b03"]}, 0x0) 2m38.814957358s ago: executing program 3 (id=839): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000006180)=""/138, 0x98}], 0x2000000000000043, &(0x7f0000000100)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1e, 0x0) 2m38.471274302s ago: executing program 3 (id=845): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0) 2m37.828287868s ago: executing program 3 (id=853): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sched_rr_get_interval(0x0, &(0x7f00000000c0)) 2m34.405391083s ago: executing program 3 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m33.687640272s ago: executing program 32 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.494089614s ago: executing program 5 (id=2417): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.955002944s ago: executing program 5 (id=2425): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x33, 0x0, 0x0) 3.492060232s ago: executing program 5 (id=2429): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000240)={0x0, 0x2d207b81, 0x9, 0x1, 0x3}) 3.158840447s ago: executing program 5 (id=2435): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4) 2.851092191s ago: executing program 4 (id=2438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x80) 2.836384549s ago: executing program 6 (id=2439): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x8e5c3f41fd9764b2}) 2.71073166s ago: executing program 5 (id=2441): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f000000cb40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 2.651787689s ago: executing program 0 (id=2442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="e0b9547ed3810001004e7e6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.479074546s ago: executing program 6 (id=2444): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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") listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.45582736s ago: executing program 2 (id=2445): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xffffffff, 0x3, 0x9, 0x0, 0x4, 0xfff, 0x2}) 2.455321281s ago: executing program 4 (id=2446): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 2.284205927s ago: executing program 0 (id=2447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x8}, {0x0, 0x94e, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_thresh={0x8, 0xb, 0xa6d0}]}, 0x10c}}, 0x4000084) 2.193571549s ago: executing program 1 (id=2448): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000014c0)=[0x0]}) 2.120007557s ago: executing program 4 (id=2449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) 2.056211142s ago: executing program 2 (id=2450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 1.954420865s ago: executing program 0 (id=2451): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17) 1.932738231s ago: executing program 6 (id=2452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newae={0x70, 0x1e, 0x301, 0x70bd2d, 0x25dfdbfd, {{@in=@multicast2, 0x4d4, 0x2, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x8, 0x3507}, [@lifetime_val={0x24, 0x9, {0xffffffffffff8001, 0x10000, 0xeb1d, 0x101}}, @mark={0xc, 0x15, {0x35075b, 0x11}}]}, 0x70}}, 0x0) 1.782529548s ago: executing program 1 (id=2453): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) close(0x3) 1.782019832s ago: executing program 4 (id=2454): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000280)={'veth1_macvtap\x00', @ifru_ivalue=0x4}) 1.730968931s ago: executing program 2 (id=2455): r0 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2008c11, &(0x7f0000001500)={[{@showassoc}, {@mode={'mode', 0x3d, 0x1000}}, {@map_acorn}, {@nocompress}, {@nocompress}, {@block={'block', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@hide}, {}, {@map_normal}, {@check_relaxed}], [{@uid_eq}]}, 0x0, 0xa8c, &(0x7f00000015c0)="$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") getdents64(r0, &(0x7f0000000140)=""/236, 0x132) 1.627243357s ago: executing program 0 (id=2456): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x100ef, 0x7fa962bfffff, 0x13012, r0, 0x0) 1.462915339s ago: executing program 6 (id=2457): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0xa, 0x4, 0x1, 0x80, {0x77359400}, {0x5, 0x2, 0xd, 0x8, 0x7, 0x3, "6cf9d31e"}, 0x2, 0x2, {&(0x7f0000000040)}, 0x1}) 1.38084172s ago: executing program 1 (id=2458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 1.361210693s ago: executing program 4 (id=2459): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f00000001c0)) 1.1460929s ago: executing program 2 (id=2460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x3}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) 1.102427087s ago: executing program 0 (id=2461): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) 1.0354136s ago: executing program 4 (id=2462): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 928.250847ms ago: executing program 1 (id=2463): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 894.819037ms ago: executing program 6 (id=2464): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x4, &(0x7f0000000100)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x29, 0x1, 0x0, 0x0, "77e17f629c2d9367962e6cede671328f027bf3ad562e8e7b9015d3edb19386ad561b36369f7e8d825a043e895a016c23e1d38524d6b4325ea469106653619963"}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0xc0) 662.565744ms ago: executing program 2 (id=2465): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x20303159}}) 625.1265ms ago: executing program 0 (id=2466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffffff, 0xe40, 0x1}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 508.644979ms ago: executing program 6 (id=2467): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) exit(0x8) 431.994084ms ago: executing program 1 (id=2468): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x49, 0x0, &(0x7f0000000080)) 319.091092ms ago: executing program 2 (id=2469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0x8}, 0x0) 244.695494ms ago: executing program 5 (id=2470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d25c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x1}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) 0s ago: executing program 1 (id=2471): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) kernel console output (not intermixed with test programs): 064][ T7762] FAT-fs (loop5): Directory bread(block 72) failed [ 183.717818][ T7762] FAT-fs (loop5): Directory bread(block 73) failed [ 183.878803][ T972] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 183.932452][ T972] usb 4-1: Failed to initialize entity for entity 6 [ 183.939112][ T972] usb 4-1: Failed to register entities (-22). [ 184.038931][ T7778] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 184.090311][ T972] usb 4-1: USB disconnect, device number 5 [ 184.335672][ T7756] loop0: detected capacity change from 0 to 32768 [ 184.443157][ T7756] (syz.0.817,7756,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.529027][ T7756] (syz.0.817,7756,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.640388][ T7756] JBD2: Ignoring recovery information on journal [ 184.845976][ T7756] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 185.356498][ T7811] loop3: detected capacity change from 0 to 1024 [ 185.425463][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.537223][ T7811] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.551421][ T30] audit: type=1326 audit(1753693210.064:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 185.615744][ T30] audit: type=1326 audit(1753693210.084:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 185.730915][ T30] audit: type=1326 audit(1753693210.084:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 185.762045][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 185.782350][ T5840] EXT4-fs error (device loop3): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /132/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 185.839594][ T5840] EXT4-fs error (device loop3): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 185.891252][ T30] audit: type=1326 audit(1753693210.084:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 185.959878][ T7827] loop2: detected capacity change from 0 to 64 [ 185.960972][ T30] audit: type=1326 audit(1753693210.084:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 185.977066][ T5840] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 186.089455][ T7827] Trying to free block not in datazone [ 186.113823][ T5840] EXT4-fs error (device loop3): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 186.244792][ T5840] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 186.263371][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.298513][ T7831] loop4: detected capacity change from 0 to 1024 [ 186.356477][ T5840] EXT4-fs error (device loop3): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 186.456666][ T5840] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 186.503364][ T7831] fuse: Bad value for 'fd' [ 186.585812][ T5840] EXT4-fs error (device loop3): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 186.701671][ T5840] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 186.755274][ T994] hfsplus: b-tree write err: -5, ino 4 [ 186.771881][ T5840] EXT4-fs error (device loop3): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /132/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 187.480758][ T7857] loop1: detected capacity change from 0 to 512 [ 187.535428][ T7857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.622759][ T7857] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 187.657079][ T7857] EXT4-fs (loop1): 1 truncate cleaned up [ 187.733302][ T7857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.049442][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.147145][ T30] audit: type=1400 audit(1753693212.644:51): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7878 comm="syz.2.877" [ 188.646298][ T7886] loop5: detected capacity change from 0 to 4096 [ 188.700579][ T30] audit: type=1326 audit(1753693213.204:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 188.859730][ T30] audit: type=1326 audit(1753693213.294:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 188.941053][ T30] audit: type=1326 audit(1753693213.294:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 189.011566][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.034641][ T7886] ntfs3(loop5): ino=21, The size of extended attributes must not exceed 64KiB [ 189.093621][ T30] audit: type=1326 audit(1753693213.294:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 189.535626][ T2908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.558586][ T2908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 189.755633][ T2908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.778853][ T2908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 189.881409][ T2908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.891784][ T2908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 190.038481][ T2908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.065680][ T2908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 190.690367][ T2908] bridge_slave_1: left allmulticast mode [ 190.725003][ T2908] bridge_slave_1: left promiscuous mode [ 190.732347][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.913198][ T2908] bridge_slave_0: left allmulticast mode [ 190.962866][ T2908] bridge_slave_0: left promiscuous mode [ 190.968746][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.049555][ T7945] loop0: detected capacity change from 0 to 256 [ 191.071016][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.104215][ T7945] exfat: Deprecated parameter 'utf8' [ 191.109629][ T7945] exfat: Deprecated parameter 'namecase' [ 191.185254][ T7945] exfat: Deprecated parameter 'namecase' [ 191.206628][ T7945] exfat: Deprecated parameter 'utf8' [ 191.272353][ T10] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 191.300439][ T7945] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 191.312176][ T10] usb 3-1: config 0 has no interface number 1 [ 191.349007][ T10] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.412411][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.469694][ T10] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 191.510865][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.569275][ T10] usb 3-1: SerialNumber: syz [ 191.574744][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.583822][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.592196][ T10] usb 3-1: config 0 descriptor?? [ 191.601018][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.609131][ T7956] sock: sock_timestamping_bind_phc: sock not bind to device [ 191.635931][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.651231][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.692644][ T10] usb 3-1: Found UVC 0.00 device (0002:0000) [ 191.761672][ T10] usb 3-1: No valid video chain found. [ 191.885406][ T10] usb 3-1: USB disconnect, device number 7 [ 192.031311][ T7970] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 192.039021][ T7970] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 192.240165][ T7973] loop4: detected capacity change from 0 to 256 [ 192.362929][ T7973] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 192.397681][ T7973] FAT-fs (loop4): Filesystem has been set read-only [ 192.451581][ T7977] loop1: detected capacity change from 0 to 1024 [ 192.808814][ T7985] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 192.879275][ T7986] ALSA: mixer_oss: invalid OSS volume '' [ 192.901391][ T7986] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 192.909811][ T7986] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 193.010679][ T7986] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 193.030330][ T7992] xt_cgroup: invalid path, errno=-2 [ 193.057222][ T7986] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 193.131194][ T7986] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 193.149816][ T7986] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 193.196966][ T7986] ALSA: mixer_oss: invalid OSS volume '|~\' [ 193.225435][ T7986] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 193.245664][ T7986] ALSA: mixer_oss: invalid OSS volume 'I :' [ 193.277727][ T7997] loop5: detected capacity change from 0 to 256 [ 193.290949][ T7986] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 193.292209][ T7997] exfat: Deprecated parameter 'namecase' [ 193.318963][ T7986] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 193.347697][ T7986] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 193.348793][ T7997] exfat: Deprecated parameter 'namecase' [ 193.366496][ T7986] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 193.519917][ T7997] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 193.692381][ T5860] Bluetooth: hci1: command tx timeout [ 193.792316][ T55] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 193.832768][ T8007] loop2: detected capacity change from 0 to 512 [ 193.842527][ T8007] EXT4-fs: Ignoring removed oldalloc option [ 193.895667][ T8007] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.953461][ T55] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 193.971664][ T8007] EXT4-fs (loop2): 1 truncate cleaned up [ 193.983811][ T8007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.987656][ T55] usb 1-1: config 0 has no interface number 0 [ 194.006837][ T55] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.023389][ T55] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 194.035942][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.047047][ T55] usb 1-1: Product: syz [ 194.051524][ T55] usb 1-1: Manufacturer: syz [ 194.056287][ T55] usb 1-1: SerialNumber: syz [ 194.066519][ T55] usb 1-1: config 0 descriptor?? [ 194.070407][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.134553][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.169292][ T2908] bond0 (unregistering): Released all slaves [ 194.217376][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.266100][ T7994] warning: `syz.1.927' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.525872][ T55] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 194.599940][ T55] usb 1-1: USB disconnect, device number 5 [ 194.820704][ T8025] loop2: detected capacity change from 0 to 24 [ 195.278881][ T8034] loop4: detected capacity change from 0 to 16 [ 195.349756][ T8034] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 195.717507][ T8047] loop2: detected capacity change from 0 to 8 [ 195.771222][ T5860] Bluetooth: hci1: command tx timeout [ 195.852219][ T8047] SQUASHFS error: Unable to read directory block [1d0:0] [ 196.079579][ T2908] hsr_slave_0: left promiscuous mode [ 196.221432][ T2908] hsr_slave_1: left promiscuous mode [ 196.234446][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.269579][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.321275][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.360391][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.577982][ T2908] veth1_macvtap: left promiscuous mode [ 196.625772][ T2908] veth0_macvtap: left promiscuous mode [ 196.658019][ T2908] veth1_vlan: left promiscuous mode [ 196.681397][ T2908] veth0_vlan: left promiscuous mode [ 197.538685][ T8093] Cannot find map_set index 0 as target [ 197.633516][ T8094] loop4: detected capacity change from 0 to 2048 [ 197.695051][ T8094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.858054][ T5860] Bluetooth: hci1: command tx timeout [ 198.424098][ T8096] loop1: detected capacity change from 0 to 32768 [ 198.445464][ T8096] XFS: attr2 mount option is deprecated. [ 198.491869][ T8096] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 198.538745][ T8096] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.633543][ T8096] XFS (loop1): Ending clean mount [ 198.679456][ T8096] XFS (loop1): Quotacheck needed: Please wait. [ 198.823101][ T8114] xt_ecn: cannot match TCP bits for non-tcp packets [ 198.848642][ T8096] XFS (loop1): Quotacheck: Done. [ 199.077642][ T5849] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.175412][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 199.378437][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 199.803023][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 199.919433][ T8134] loop1: detected capacity change from 0 to 8 [ 199.932479][ T5860] Bluetooth: hci1: command tx timeout [ 199.986136][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.004058][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 200.028466][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.041936][ T9] usb 5-1: config 0 descriptor?? [ 200.064196][ T9] xbox_remote_probe: Unexpected endpoint_in [ 200.089555][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 200.283496][ T55] usb 5-1: USB disconnect, device number 5 [ 200.821796][ T55] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.043001][ T55] usb 2-1: config 0 has no interfaces? [ 201.100988][ T55] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 201.110147][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.126452][ T55] usb 2-1: Product: syz [ 201.130678][ T55] usb 2-1: Manufacturer: syz [ 201.136503][ T55] usb 2-1: SerialNumber: syz [ 201.168700][ T55] usb 2-1: config 0 descriptor?? [ 201.355673][ T8156] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 201.452212][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.516054][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.573310][ T55] usb 2-1: USB disconnect, device number 6 [ 201.761263][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 201.888612][ T7957] chnl_net:caif_netlink_parms(): no params data found [ 201.966387][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 202.001232][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 202.009373][ T9] usb 6-1: SerialNumber: syz [ 202.083914][ T9] usb 6-1: config 0 descriptor?? [ 202.456480][ T8190] loop1: detected capacity change from 0 to 256 [ 202.554912][ T8190] FAT-fs (loop1): Directory bread(block 64) failed [ 202.581185][ T8190] FAT-fs (loop1): Directory bread(block 65) failed [ 202.596389][ T9] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f [ 202.599833][ T8190] FAT-fs (loop1): Directory bread(block 66) failed [ 202.639764][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.641726][ T9] hackrf 6-1:0.0: Could not detect board [ 202.652259][ T8190] FAT-fs (loop1): Directory bread(block 67) failed [ 202.690252][ T8190] FAT-fs (loop1): Directory bread(block 68) failed [ 202.710926][ T9] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 202.721080][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.735407][ T8190] FAT-fs (loop1): Directory bread(block 69) failed [ 202.745672][ T7957] bridge_slave_0: entered allmulticast mode [ 202.781155][ T9] usb 6-1: USB disconnect, device number 4 [ 202.784618][ T8190] FAT-fs (loop1): Directory bread(block 70) failed [ 202.800748][ T7957] bridge_slave_0: entered promiscuous mode [ 202.838322][ T8190] FAT-fs (loop1): Directory bread(block 71) failed [ 202.880500][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.888227][ T8190] FAT-fs (loop1): Directory bread(block 72) failed [ 202.908491][ T8190] FAT-fs (loop1): Directory bread(block 73) failed [ 202.922894][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.961872][ T7957] bridge_slave_1: entered allmulticast mode [ 203.042793][ T7957] bridge_slave_1: entered promiscuous mode [ 203.076630][ T8200] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1007'. [ 203.369930][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.463813][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.839676][ T8209] loop0: detected capacity change from 0 to 8192 [ 203.863097][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.869629][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.920092][ T7957] team0: Port device team_slave_0 added [ 203.950212][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 204.049968][ T7957] team0: Port device team_slave_1 added [ 204.714212][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.751195][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.825268][ T8241] netlink: 'syz.0.1024': attribute type 17 has an invalid length. [ 204.881592][ T8241] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1024'. [ 204.901004][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.037684][ T8241] macvtap0: entered allmulticast mode [ 205.071292][ T8241] veth0_macvtap: entered allmulticast mode [ 205.098372][ T8241] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 205.161775][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.189146][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.277626][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.639865][ T7957] hsr_slave_0: entered promiscuous mode [ 205.640005][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1035'. [ 205.703143][ T7957] hsr_slave_1: entered promiscuous mode [ 205.716589][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 205.734438][ T7957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.756688][ T8262] loop5: detected capacity change from 0 to 2048 [ 205.786247][ T7957] Cannot create hsr debugfs directory [ 205.862084][ T8268] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.885379][ T8267] netlink: 'syz.2.1036': attribute type 3 has an invalid length. [ 205.921941][ T8267] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 205.937895][ T8267] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1036'. [ 205.996833][ T8262] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 206.110472][ T8262] Remounting filesystem read-only [ 206.157140][ T8262] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 206.189854][ T8262] NILFS (loop5): error -5 truncating bmap (ino=16) [ 206.488066][ T5845] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 206.615509][ T8282] loop0: detected capacity change from 0 to 256 [ 206.727554][ T8282] FAT-fs (loop0): Directory bread(block 64) failed [ 206.766445][ T8282] FAT-fs (loop0): Directory bread(block 65) failed [ 206.815022][ T8282] FAT-fs (loop0): Directory bread(block 66) failed [ 206.844126][ T8282] FAT-fs (loop0): Directory bread(block 67) failed [ 206.888111][ T8282] FAT-fs (loop0): Directory bread(block 68) failed [ 206.940954][ T8282] FAT-fs (loop0): Directory bread(block 69) failed [ 206.962567][ T8282] FAT-fs (loop0): Directory bread(block 70) failed [ 206.989686][ T8282] FAT-fs (loop0): Directory bread(block 71) failed [ 207.018795][ T8282] FAT-fs (loop0): Directory bread(block 72) failed [ 207.060085][ T8282] FAT-fs (loop0): Directory bread(block 73) failed [ 207.345177][ T7957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.426152][ T7957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.526294][ T7957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.648394][ T8306] loop5: detected capacity change from 0 to 8 [ 207.667245][ T7957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 207.770413][ T8306] SQUASHFS error: Failed to read block 0x738: -5 [ 207.810404][ T8306] SQUASHFS error: Unable to read metadata cache entry [736] [ 208.366165][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.556283][ T7957] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.657187][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.664488][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.749220][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.756512][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.861229][ T8341] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1063'. [ 210.378167][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.960911][ T5954] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.123682][ T8405] xt_hashlimit: overflow, rate too high: 0 [ 211.159519][ T5954] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 211.202400][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 211.240578][ T5954] usb 2-1: SerialNumber: syz [ 211.270635][ T5954] usb 2-1: config 0 descriptor?? [ 211.586200][ T8417] netlink: 'syz.0.1090': attribute type 2 has an invalid length. [ 211.600985][ T8417] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 211.771671][ T5954] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 211.790953][ T5954] hackrf 2-1:0.0: Could not detect board [ 211.796702][ T5954] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 211.865965][ T5954] usb 2-1: USB disconnect, device number 7 [ 212.045829][ T8376] loop2: detected capacity change from 0 to 32768 [ 212.083388][ T8376] XFS: ikeep mount option is deprecated. [ 212.160321][ T7957] veth0_vlan: entered promiscuous mode [ 212.250623][ T7957] veth1_vlan: entered promiscuous mode [ 212.261445][ T8376] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.505919][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 212.547850][ T7957] veth0_macvtap: entered promiscuous mode [ 212.616758][ T7957] veth1_macvtap: entered promiscuous mode [ 212.715723][ T8376] XFS (loop2): Ending clean mount [ 212.757963][ T8376] XFS (loop2): Quotacheck needed: Please wait. [ 212.799824][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.854063][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.011249][ T5954] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.064380][ T7957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.116251][ T7957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.151080][ T8376] XFS (loop2): Quotacheck: Done. [ 213.179298][ T7957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.192772][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 213.209484][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.212249][ T7957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.238817][ T5954] usb 6-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 213.285150][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.354891][ T5954] usb 6-1: Product: syz [ 213.376455][ T5954] usb 6-1: Manufacturer: syz [ 213.389945][ T5846] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.431123][ T5954] usb 6-1: SerialNumber: syz [ 213.447776][ T5954] usb 6-1: config 0 descriptor?? [ 213.465439][ T5954] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 213.890982][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.912815][ T5954] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 213.919971][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.972148][ T5954] pac7311 6-1:0.0: probe with driver pac7311 failed with error -71 [ 214.019516][ T5954] usb 6-1: USB disconnect, device number 5 [ 214.218932][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.237451][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.622384][ T8475] SET target dimension over the limit! [ 214.867514][ T8480] netlink: 52 bytes leftover after parsing attributes in process `syz.6.894'. [ 215.138860][ T8491] loop2: detected capacity change from 0 to 256 [ 215.472826][ T8491] FAT-fs (loop2): Directory bread(block 64) failed [ 215.498976][ T8491] FAT-fs (loop2): Directory bread(block 65) failed [ 215.537504][ T8491] FAT-fs (loop2): Directory bread(block 66) failed [ 215.611707][ T8491] FAT-fs (loop2): Directory bread(block 67) failed [ 215.618392][ T8491] FAT-fs (loop2): Directory bread(block 68) failed [ 215.689816][ T8491] FAT-fs (loop2): Directory bread(block 69) failed [ 215.769530][ T8491] FAT-fs (loop2): Directory bread(block 70) failed [ 215.793134][ T8491] FAT-fs (loop2): Directory bread(block 71) failed [ 215.799810][ T8491] FAT-fs (loop2): Directory bread(block 72) failed [ 215.869946][ T8491] FAT-fs (loop2): Directory bread(block 73) failed [ 215.896559][ T8513] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 215.963507][ T8513] overlayfs: missing 'lowerdir' [ 216.621623][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.878544][ T10] usb 2-1: config index 0 descriptor too short (expected 63506, got 18) [ 216.918659][ T10] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 216.971075][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.979149][ T10] usb 2-1: Product: syz [ 217.031436][ T10] usb 2-1: Manufacturer: syz [ 217.036121][ T10] usb 2-1: SerialNumber: syz [ 217.391422][ T10] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 217.493214][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 217.589237][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 217.696426][ T10] usb 2-1: USB disconnect, device number 8 [ 217.700724][ T8562] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1147'. [ 217.784029][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 217.803985][ T8562] netlink: zone id is out of range [ 217.831108][ T8562] netlink: get zone limit has 8 unknown bytes [ 217.853424][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 217.930765][ T10] visor 2-1:1.0: device disconnected [ 218.644337][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 219.158884][ T8605] loop1: detected capacity change from 0 to 64 [ 219.397223][ T8605] Trying to free block not in datazone [ 219.454523][ T8605] Trying to free block not in datazone [ 219.491561][ T8605] Trying to free block not in datazone [ 219.497064][ T8605] Trying to free block not in datazone [ 219.541158][ T8605] minix_free_block (loop1:6): bit already cleared [ 219.547989][ T8605] Trying to free block not in datazone [ 219.660945][ T8605] Trying to free block not in datazone [ 219.938552][ T8624] loop0: detected capacity change from 0 to 16 [ 219.946535][ T8619] loop5: detected capacity change from 0 to 512 [ 220.127906][ T30] audit: type=1326 audit(1753693244.634:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34f18e9a9 code=0x7ffc0000 [ 220.230998][ T30] audit: type=1326 audit(1753693244.634:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.6.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34f18e9a9 code=0x7ffc0000 [ 220.386678][ T8624] erofs (device loop0): mounted with root inode @ nid 36. [ 220.455182][ T8619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.501970][ T8619] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.519881][ T8624] erofs (device loop0): invalid tail-packing pclustersize 32768 [ 220.554469][ T8624] erofs (device loop0): invalid tail-packing pclustersize 32768 [ 220.612496][ T8624] erofs (device loop0): read error -117 @ 32811 of nid 36 [ 220.627878][ T8630] loop2: detected capacity change from 0 to 512 [ 220.659414][ T8636] loop6: detected capacity change from 0 to 64 [ 220.772055][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.811261][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 221.022946][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.097606][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 221.161218][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 221.223412][ T8643] loop5: detected capacity change from 0 to 1024 [ 221.244330][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.293458][ T9] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 221.317046][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.361016][ T5954] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 221.388840][ T9] usb 5-1: Product: syz [ 221.413741][ T9] usb 5-1: Manufacturer: syz [ 221.418378][ T9] usb 5-1: SerialNumber: syz [ 221.423836][ T8647] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 221.478380][ T24] kernel write not supported for file /406/clear_refs (pid: 24 comm: kworker/1:0) [ 221.481054][ T9] usb 5-1: config 0 descriptor?? [ 221.549310][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 221.590404][ T5954] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 221.612193][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.666697][ T5954] usb 1-1: Product: syz [ 221.684725][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 221.703220][ T5954] usb 1-1: Manufacturer: syz [ 221.720914][ T5954] usb 1-1: SerialNumber: syz [ 221.784022][ T5954] usb 1-1: config 0 descriptor?? [ 221.841128][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 221.914304][ T5954] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 221.942360][ T5954] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 221.972785][ T5954] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 222.143478][ T24] usb 5-1: USB disconnect, device number 6 [ 222.190440][ T972] usb 1-1: USB disconnect, device number 6 [ 222.585791][ T8672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1191'. [ 224.432467][ T8733] loop5: detected capacity change from 0 to 64 [ 224.719342][ T8740] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1221'. [ 225.226249][ T8757] loop0: detected capacity change from 0 to 1024 [ 225.290463][ T8757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.480723][ T8757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.711996][ T8757] EXT4-fs warning (device loop0): empty_inline_dir:1773: bad inline directory (dir #12) - no `..' [ 226.033141][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.268086][ T8790] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 226.412125][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 226.418523][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 226.424638][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 226.431169][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 226.437201][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 226.808305][ T8809] binder: 8808:8809 ioctl 400c620e 200000000140 returned -22 [ 226.826845][ T8807] ip6t_srh: unknown srh invflags 5F00 [ 227.250979][ T5954] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 227.454503][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.486272][ T5954] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 227.531388][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.622078][ T5954] usb 2-1: config 0 descriptor?? [ 227.822611][ T8841] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1260'. [ 227.901211][ T5954] ath6kl: Failed to submit usb control message: -71 [ 227.907919][ T5954] ath6kl: unable to send the bmi data to the device: -71 [ 227.970869][ T5954] ath6kl: Unable to send get target info: -71 [ 228.014496][ T5954] ath6kl: Failed to init ath6kl core: -71 [ 228.031877][ T5954] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 228.145410][ T5954] usb 2-1: USB disconnect, device number 9 [ 228.928830][ T8883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1273'. [ 229.132462][ T8894] netlink: 'syz.5.1274': attribute type 11 has an invalid length. [ 229.175052][ T8894] netlink: 'syz.5.1274': attribute type 11 has an invalid length. [ 229.230919][ T8894] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1274'. [ 229.284490][ T8898] loop0: detected capacity change from 0 to 2048 [ 229.351905][ T8898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.980350][ T8932] xt_limit: Overflow, try lower: 2147483649/32768 [ 230.042637][ T8939] Cannot find add_set index 0 as target [ 230.391909][ T8953] vlan1: entered allmulticast mode [ 230.424102][ T8953] veth0_vlan: entered allmulticast mode [ 230.576941][ T8962] QAT: failed to copy from user cfg_data. [ 230.620917][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 230.869645][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 230.899248][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.939678][ T24] usb 5-1: Product: syz [ 230.949897][ T24] usb 5-1: Manufacturer: syz [ 230.951281][ T8979] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 230.992508][ T8979] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 230.995532][ T24] usb 5-1: SerialNumber: syz [ 231.099529][ T24] usb 5-1: config 0 descriptor?? [ 231.222323][ T8992] loop2: detected capacity change from 0 to 256 [ 231.289217][ T8996] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 231.384695][ T24] usb-storage 5-1:0.0: USB Mass Storage device detected [ 231.389853][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.592982][ T24] usb 5-1: USB disconnect, device number 7 [ 231.942589][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 231.961016][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 231.971108][ T5954] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 232.153461][ T5954] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 232.191220][ T5954] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 232.199313][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 232.199370][ T5954] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 232.280421][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 232.317358][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 232.428418][ T5954] usb 2-1: string descriptor 0 read error: -22 [ 232.434957][ T5954] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 232.470869][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.534030][ T5954] usb 2-1: config 0 descriptor?? [ 232.547055][ T5954] hub 2-1:0.0: bad descriptor, ignoring hub [ 232.580864][ T5954] hub 2-1:0.0: probe with driver hub failed with error -5 [ 233.051488][ T9] usb 2-1: USB disconnect, device number 10 [ 233.138451][ T5954] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 233.333069][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 233.383646][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.393561][ T9139] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1323'. [ 233.420883][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.483997][ T5954] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.511252][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.547963][ T5954] usb 3-1: Product: syz [ 233.562157][ T5954] usb 3-1: Manufacturer: syz [ 233.588525][ T5954] usb 3-1: SerialNumber: syz [ 234.144860][ T5954] usb 3-1: cannot find UAC_HEADER [ 234.302466][ T5954] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 234.354543][ T5954] usb 3-1: USB disconnect, device number 8 [ 234.653227][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.040596][ T9215] capability: warning: `syz.5.1340' uses deprecated v2 capabilities in a way that may be insecure [ 235.067361][ T9213] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1338'. [ 235.126699][ T9213] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1338'. [ 235.186730][ T9146] loop4: detected capacity change from 0 to 32768 [ 235.294656][ T9146] loop4: p1 p2 p3 [ 235.589189][ T9238] Invalid source name [ 235.711374][ T9242] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 235.794553][ T9253] loop6: detected capacity change from 0 to 24 [ 235.895507][ T9253] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 235.989951][ T9261] netlink: 'syz.2.1349': attribute type 21 has an invalid length. [ 236.023170][ T9253] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 236.089438][ T9253] romfs: read error for inode 0x70040 [ 236.207729][ T9265] tmpfs: Bad value for 'mpol' [ 236.747542][ T9271] loop1: detected capacity change from 0 to 4096 [ 236.824684][ T9271] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 236.966116][ T9271] ntfs3(loop1): ino=19, mi_enum_attr [ 237.099382][ T9271] ntfs3(loop1): failed to convert "c46c" to cp936 [ 237.149067][ T9271] ntfs3(loop1): ino=20, mi_enum_attr [ 237.378559][ T6858] udevd[6858]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 237.442052][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 237.445204][ T6057] udevd[6057]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 237.701933][ T9342] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1367'. [ 238.137781][ T9362] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1371'. [ 238.221047][ T9362] 0: renamed from hsr0 (while UP) [ 238.318188][ T9362] 0: entered allmulticast mode [ 238.334826][ T9362] hsr_slave_0: entered allmulticast mode [ 238.375306][ T9362] hsr_slave_1: entered allmulticast mode [ 238.406307][ T9362] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 238.722875][ T9377] syz.4.1376 (9377): /proc/9376/oom_adj is deprecated, please use /proc/9376/oom_score_adj instead. [ 239.140934][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 239.164393][ T9310] loop0: detected capacity change from 0 to 32768 [ 239.281520][ T9310] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 239.281520][ T9310] [ 239.327628][ T9310] ERROR: (device loop0): remounting filesystem as read-only [ 239.343257][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.384149][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 239.396804][ T9310] jfs_lookup: dtSearch returned -5 [ 239.411772][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.445088][ T24] usb 6-1: config 0 descriptor?? [ 239.611383][ T9406] loop2: detected capacity change from 0 to 512 [ 239.651920][ T9406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.686529][ T24] ath6kl: Failed to submit usb control message: -71 [ 239.720997][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 239.748149][ T9406] EXT4-fs (loop2): Test dummy encryption mode enabled [ 239.769706][ T24] ath6kl: Unable to send get target info: -71 [ 239.778308][ T9406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.820346][ T24] ath6kl: Failed to init ath6kl core: -71 [ 239.857491][ T24] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 239.877902][ T9406] EXT4-fs (loop2): 1 truncate cleaned up [ 239.910508][ T24] usb 6-1: USB disconnect, device number 6 [ 239.926327][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.072649][ T9361] loop1: detected capacity change from 0 to 32768 [ 240.104187][ T9406] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 240.149725][ T9361] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 240.405645][ T9361] XFS (loop1): Ending clean mount [ 240.456870][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.747510][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.357930][ T9504] geneve2: entered promiscuous mode [ 242.389850][ T9504] geneve2: entered allmulticast mode [ 242.834238][ T9534] loop0: detected capacity change from 0 to 1024 [ 242.898662][ T9534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.939314][ T9534] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.013143][ T9534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 243.105248][ T9550] loop6: detected capacity change from 0 to 256 [ 243.128422][ T9534] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.1414: lblock 2 mapped to illegal pblock 2 (length 1) [ 243.250861][ T9534] EXT4-fs (loop0): Remounting filesystem read-only [ 243.271840][ T9534] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 243.291661][ T9534] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 243.326568][ T9534] EXT4-fs (loop0): 1 orphan inode deleted [ 243.376676][ T9534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.472348][ T9534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.443176][ T9600] loop4: detected capacity change from 0 to 2048 [ 244.550481][ T9609] loop2: detected capacity change from 0 to 256 [ 244.633744][ T9600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.717103][ T9600] /dev/loop4: Can't open blockdev [ 244.755896][ T9609] FAT-fs (loop2): Directory bread(block 64) failed [ 244.796555][ T9609] FAT-fs (loop2): Directory bread(block 65) failed [ 244.828798][ T9609] FAT-fs (loop2): Directory bread(block 66) failed [ 244.845425][ T9609] FAT-fs (loop2): Directory bread(block 67) failed [ 244.860025][ T9609] FAT-fs (loop2): Directory bread(block 68) failed [ 244.870532][ T9609] FAT-fs (loop2): Directory bread(block 69) failed [ 244.910971][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 244.918460][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.918787][ T9609] FAT-fs (loop2): Directory bread(block 70) failed [ 244.971720][ T9609] FAT-fs (loop2): Directory bread(block 71) failed [ 245.006397][ T9609] FAT-fs (loop2): Directory bread(block 72) failed [ 245.051046][ T9609] FAT-fs (loop2): Directory bread(block 73) failed [ 245.120457][ T30] audit: type=1800 audit(1753693269.624:58): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1433" name="file1" dev="loop2" ino=1048640 res=0 errno=0 [ 245.221918][ T24] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 245.234403][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.242718][ T9553] loop5: detected capacity change from 0 to 32768 [ 245.296658][ T24] usb 7-1: config 0 descriptor?? [ 245.312077][ T9553] XFS: ikeep mount option is deprecated. [ 245.421014][ T9553] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 245.441171][ T9553] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.747580][ T9553] XFS (loop5): Ending clean mount [ 245.757694][ T24] usb 7-1: Cannot read MAC address [ 245.781114][ T9553] XFS (loop5): Quotacheck needed: Please wait. [ 245.788160][ T24] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 245.808432][ T9589] loop1: detected capacity change from 0 to 32768 [ 245.873651][ T24] usb 7-1: USB disconnect, device number 2 [ 245.881286][ T9553] XFS (loop5): Quotacheck: Done. [ 245.901255][ T9589] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1427 (9589) [ 246.021050][ T9589] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 246.076077][ T9589] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 246.126796][ T9589] BTRFS info (device loop1): using free-space-tree [ 246.186458][ T5845] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 246.238232][ T9684] trusted_key: encrypted_key: keylen parameter is missing [ 246.812880][ T9715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 246.819744][ T9715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 246.953143][ T5849] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 247.853957][ T9749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.295652][ T9765] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 248.341433][ T9755] loop4: detected capacity change from 0 to 4096 [ 248.390892][ T9765] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1462'. [ 248.525594][ T9755] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 249.475248][ T30] audit: type=1326 audit(1753693273.984:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 249.620911][ T30] audit: type=1326 audit(1753693273.984:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 249.771090][ T30] audit: type=1326 audit(1753693274.034:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 249.809496][ T30] audit: type=1326 audit(1753693274.034:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 249.831950][ T30] audit: type=1326 audit(1753693274.034:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 250.029934][ T9834] loop4: detected capacity change from 0 to 512 [ 250.125812][ T9834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.170673][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 250.343980][ T9834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.411467][ T9834] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.683452][ T9867] netlink: 'syz.1.1490': attribute type 3 has an invalid length. [ 250.782939][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.482609][ T9906] Cannot find del_set index 4 as target [ 251.620597][ T9913] openvswitch: netlink: Missing valid actions attribute. [ 251.687231][ T9913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.557054][ T5954] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 252.801941][ T5848] Bluetooth: hci4: unexpected subevent 0x03 length: 232 > 9 [ 252.818457][ T5954] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.842548][ T5954] usb 2-1: no configurations [ 252.854899][ T5954] usb 2-1: can't read configurations, error -22 [ 254.787100][T10050] comedi comedi0: Minor 14 could not be opened [ 254.881526][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 254.926803][T10052] loop6: detected capacity change from 0 to 2048 [ 255.046397][T10049] loop5: detected capacity change from 0 to 4096 [ 255.050376][T10052] NILFS (loop6): invalid segment: Checksum error in segment payload [ 255.086828][T10052] NILFS (loop6): trying rollback from an earlier position [ 255.109164][T10067] netlink: 'syz.2.1547': attribute type 8 has an invalid length. [ 255.110054][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 255.154886][T10052] NILFS (loop6): norecovery option specified, skipping roll-forward recovery [ 255.178199][T10049] ntfs3(loop5): ino=1a, mi_enum_attr [ 255.201149][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.218107][T10049] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 255.220136][ T24] usb 1-1: config 0 has no interface number 0 [ 255.269040][T10052] NILFS (loop6): couldn't remount because the filesystem is in an incomplete recovery state [ 255.277072][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 255.319465][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.381709][ T24] usb 1-1: Product: syz [ 255.401762][ T24] usb 1-1: Manufacturer: syz [ 255.421017][ T24] usb 1-1: SerialNumber: syz [ 255.480055][ T24] usb 1-1: config 0 descriptor?? [ 255.577086][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 255.610528][ T24] usb 1-1: selecting invalid altsetting 1 [ 255.647597][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 255.728761][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 255.786782][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 255.844092][ T24] usb 1-1: media controller created [ 255.991233][T10101] openvswitch: netlink: IP tunnel dst address not specified [ 255.996031][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.031838][T10098] loop6: detected capacity change from 0 to 1024 [ 256.243383][T10090] loop5: detected capacity change from 0 to 4096 [ 256.287429][T10100] loop2: detected capacity change from 0 to 4096 [ 256.350541][T10100] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 256.430135][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 256.537311][T10100] ntfs3(loop2): ino=19, mi_enum_attr [ 256.571980][T10100] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 256.726174][ T24] usb 1-1: USB disconnect, device number 7 [ 256.780364][T10100] ntfs3(loop2): failed to convert "c46c" to maccyrillic [ 256.865501][T10100] ntfs3(loop2): ino=20, mi_enum_attr [ 257.655906][T10160] CIFS: iocharset name too long [ 257.761010][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 257.860348][T10169] loop0: detected capacity change from 0 to 128 [ 257.983261][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 257.999491][T10169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.057534][T10169] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.095184][ T24] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 258.153152][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.181137][T10169] EXT4-fs warning (device loop0): verify_group_input:136: Cannot add at group 7 (only 1 groups) [ 258.201070][ T24] usb 2-1: Product: syz [ 258.205264][ T24] usb 2-1: Manufacturer: syz [ 258.209884][ T24] usb 2-1: SerialNumber: syz [ 258.278476][ T24] usb 2-1: config 0 descriptor?? [ 258.315279][ T24] usb 2-1: bad CDC descriptors [ 258.457938][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.466079][T10196] loop2: detected capacity change from 0 to 16 [ 258.498633][T10196] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 258.530473][T10199] loop4: detected capacity change from 0 to 256 [ 258.595936][ T972] usb 2-1: USB disconnect, device number 13 [ 258.719084][T10199] FAT-fs (loop4): Directory bread(block 64) failed [ 258.767731][T10199] FAT-fs (loop4): Directory bread(block 65) failed [ 258.836104][T10199] FAT-fs (loop4): Directory bread(block 66) failed [ 258.847590][T10220] macsec0: entered promiscuous mode [ 258.877590][T10199] FAT-fs (loop4): Directory bread(block 67) failed [ 258.881315][T10220] macsec0: entered allmulticast mode [ 258.918032][T10199] FAT-fs (loop4): Directory bread(block 68) failed [ 258.921051][T10220] veth1_macvtap: entered allmulticast mode [ 258.996107][T10199] FAT-fs (loop4): Directory bread(block 69) failed [ 259.036082][T10199] FAT-fs (loop4): Directory bread(block 70) failed [ 259.073552][T10199] FAT-fs (loop4): Directory bread(block 71) failed [ 259.080198][T10199] FAT-fs (loop4): Directory bread(block 72) failed [ 259.166758][T10199] FAT-fs (loop4): Directory bread(block 73) failed [ 259.475841][ T30] audit: type=1800 audit(1753693283.984:64): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1573" name="file1" dev="loop4" ino=1048641 res=0 errno=0 [ 260.408695][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1591'. [ 260.513942][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 260.685887][ T55] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.731073][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.781381][ T55] usb 1-1: Product: syz [ 260.785597][ T55] usb 1-1: Manufacturer: syz [ 260.790222][ T55] usb 1-1: SerialNumber: syz [ 260.810195][T10299] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 260.930637][ T55] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 261.051602][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 261.682586][ T9] usb 1-1: USB disconnect, device number 8 [ 261.871381][T10364] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967069 > 32) [ 262.270937][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 262.278035][ T24] ath9k_htc: Failed to initialize the device [ 262.350314][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 262.366946][T10374] loop5: detected capacity change from 0 to 1764 [ 262.782645][ T5954] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 262.970918][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 262.996629][ T5954] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 263.027431][ T5954] usb 5-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 263.100859][ T5954] usb 5-1: config 0 has no interface number 0 [ 263.125781][ T5954] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 263.200248][ T5954] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 263.265437][ T5954] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 263.326999][ T5954] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29797, setting to 1024 [ 263.389424][ T5954] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 263.459304][ T5954] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 263.500912][ T5954] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 263.550958][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.610990][ T5954] usb 5-1: config 0 descriptor?? [ 263.656323][T10389] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.672972][T10389] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.687748][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.118514][ T55] usb 5-1: USB disconnect, device number 8 [ 264.129485][T10471] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 264.151945][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 264.336807][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.372117][T10488] loop2: detected capacity change from 0 to 512 [ 264.380985][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.389016][ T24] usb 2-1: Product: syz [ 264.446673][T10488] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 264.459051][ T24] usb 2-1: Manufacturer: syz [ 264.483632][ T24] usb 2-1: SerialNumber: syz [ 264.494269][T10488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 264.566166][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 264.611635][ T30] audit: type=1326 audit(1753693289.114:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 264.648187][T10488] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 264.675142][T10488] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 264.691389][ T55] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.738829][T10488] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.1624: Failed to acquire dquot type 1 [ 264.810554][T10516] xt_addrtype: ipv6 does not support BROADCAST matching [ 264.829351][ T30] audit: type=1326 audit(1753693289.114:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 264.833148][T10488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1624: bg 0: block 40: padding at end of block bitmap is not set [ 265.010998][ T30] audit: type=1326 audit(1753693289.124:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 265.085147][ T30] audit: type=1326 audit(1753693289.514:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 265.117803][T10488] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 265.121295][ T30] audit: type=1326 audit(1753693289.514:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10505 comm="syz.0.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 265.211236][T10488] EXT4-fs (loop2): 1 truncate cleaned up [ 265.273681][T10488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.307565][ T5954] usb 2-1: USB disconnect, device number 14 [ 265.314149][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.332429][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.376938][T10529] loop6: detected capacity change from 0 to 256 [ 265.480962][T10529] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x586fd6de, utbl_chksum : 0xe619d30d) [ 265.498689][T10488] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1624: bad symlink. [ 265.549105][T10536] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 265.769611][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.861434][ T55] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 265.868519][ T55] ath9k_htc: Failed to initialize the device [ 265.882203][T10544] loop0: detected capacity change from 0 to 256 [ 265.929042][ T5954] usb 2-1: ath9k_htc: USB layer deinitialized [ 265.975613][T10544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 266.096001][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 266.719789][ T30] audit: type=1326 audit(1753693291.224:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 266.842137][ T30] audit: type=1326 audit(1753693291.224:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 266.958373][ T30] audit: type=1326 audit(1753693291.224:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 267.201174][T10534] loop5: detected capacity change from 0 to 32768 [ 267.249220][T10534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1631 (10534) [ 267.338943][T10534] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.394135][T10534] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 267.467523][T10534] BTRFS info (device loop5): disk space caching is enabled [ 267.487176][T10623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1654'. [ 267.518066][T10534] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 267.561085][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 267.782136][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.805338][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.822008][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.837573][ T9] usb 7-1: Product: syz [ 267.854512][ T9] usb 7-1: Manufacturer: syz [ 267.855653][T10645] ipt_REJECT: TCP_RESET invalid for non-tcp [ 267.859117][ T9] usb 7-1: SerialNumber: syz [ 267.883177][ T9] usb 7-1: config 0 descriptor?? [ 267.941969][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 267.979500][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.993999][T10534] BTRFS info (device loop5): rebuilding free space tree [ 268.113489][T10534] BTRFS info (device loop5): disabling free space tree [ 268.120442][T10534] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 268.171630][T10534] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 268.256834][ T55] usb 7-1: USB disconnect, device number 3 [ 268.376498][T10675] loop0: detected capacity change from 0 to 1024 [ 268.544470][T10675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.592189][T10675] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.709826][ T5845] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.749276][T10675] EXT4-fs error (device loop0): ext4_free_blocks:6586: comm syz.0.1660: Freeing blocks not in datazone - block = 0, count = 16 [ 269.243414][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.296959][T10718] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 269.380892][T10718] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1670'. [ 269.389980][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 269.480219][T10722] loop4: detected capacity change from 0 to 1024 [ 269.540334][T10727] loop2: detected capacity change from 0 to 64 [ 269.567268][T10722] hfsplus: Filesystem is marked locked, mounting read-only. [ 269.632190][T10722] hfsplus: invalid catalog entry type in lookup [ 269.706747][T10727] hfs: request for non-existent node 56 in B*Tree [ 269.730908][T10727] hfs: request for non-existent node 56 in B*Tree [ 269.779805][T10727] hfs: request for non-existent node 57 in B*Tree [ 269.851398][T10727] hfs: request for non-existent node 57 in B*Tree [ 270.177042][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1677'. [ 270.735638][T10785] ip6t_srh: unknown srh invflags 7863 [ 270.781113][ T5954] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 271.031918][ T5848] Bluetooth: hci5: Malformed LE Event: 0x0b [ 271.041325][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.059524][ T5954] usb 5-1: no configurations [ 271.064195][ T5954] usb 5-1: can't read configurations, error -22 [ 271.127715][T10806] overlayfs: overlapping lowerdir path [ 271.408092][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 271.408118][ T30] audit: type=1326 audit(1753693295.914:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 271.494967][ T30] audit: type=1326 audit(1753693295.954:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 271.623049][ T30] audit: type=1326 audit(1753693296.004:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 271.737342][ T30] audit: type=1326 audit(1753693296.004:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 271.851186][ T30] audit: type=1326 audit(1753693296.004:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.1.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121b8e9a9 code=0x7ffc0000 [ 272.931416][ T55] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 273.140946][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 273.191655][ T55] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.215044][ T55] usb 2-1: config 0 has no interface number 0 [ 273.236072][ T55] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 273.281082][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.289105][ T55] usb 2-1: Product: syz [ 273.355056][ T55] usb 2-1: Manufacturer: syz [ 273.359691][ T55] usb 2-1: SerialNumber: syz [ 273.393844][ T55] usb 2-1: config 0 descriptor?? [ 273.428255][ T55] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 273.466534][T10912] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 273.487178][ T55] usb 2-1: selecting invalid altsetting 1 [ 273.493259][ T55] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 273.503045][T10912] xt_HMARK: spi-set and port-set can't be combined [ 273.548501][ T55] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.591213][ T55] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 273.599518][ T55] usb 2-1: media controller created [ 273.668412][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.873178][T10925] tmpfs: User quota inode hardlimit too large. [ 273.948434][ T55] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 274.186154][ T55] usb 2-1: USB disconnect, device number 15 [ 274.208210][T10889] loop6: detected capacity change from 0 to 32768 [ 274.368617][T10889] ea_get: invalid extended attribute [ 274.400006][T10889] ffff888054dfc3b8: 04 00 00 00 .... [ 274.583219][T10961] x_tables: duplicate entry at hook 1 [ 274.822856][ T30] audit: type=1400 audit(1753693299.334:80): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10966 comm="syz.0.1741" [ 275.308377][T10992] [U] M٭q& K4 [ 275.347234][T10988] [U] [)U}ǔJ}Nsef* nZf[F_h'W"x~;vA)^`1C':zFOb *?۟czs<8zN񷐚Ey TT<$cR斻/Vg {y~Y5\;zDxyA"xIf{`A$㭡55?samo*K [ 276.308534][T11040] deleting an unspecified loop device is not supported. [ 277.260584][T11084] netlink: 'syz.5.1776': attribute type 2 has an invalid length. [ 277.735232][T11111] netlink: 'syz.6.1781': attribute type 1 has an invalid length. [ 277.756901][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1781'. [ 277.870926][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 278.041639][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 278.069924][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 278.082837][T11125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.120185][ T5927] usb 6-1: config 120 has an invalid interface number: 86 but max is 0 [ 278.160134][ T5927] usb 6-1: config 120 has no interface number 0 [ 278.204887][ T5927] usb 6-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 278.220881][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.239272][ T5927] usb 6-1: Product: syz [ 278.261378][ T5927] usb 6-1: Manufacturer: syz [ 278.278610][ T5927] usb 6-1: SerialNumber: syz [ 278.538574][T11139] loop1: detected capacity change from 0 to 1024 [ 278.561979][ T5927] huawei_cdc_ncm 6-1:120.86: CDC Union missing and no IAD found [ 278.616662][ T5927] huawei_cdc_ncm 6-1:120.86: bind() failure [ 278.672487][ T5927] usb 6-1: USB disconnect, device number 7 [ 278.921338][ T60] hfsplus: b-tree write err: -5, ino 4 [ 279.642388][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 279.981106][ T5927] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 280.073924][T11211] loop5: detected capacity change from 0 to 64 [ 280.177125][ T5927] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.205987][ T5927] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.281805][ T5927] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 280.325104][ T5927] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.354935][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.383132][ T5927] usb 7-1: Product: syz [ 280.387417][ T5927] usb 7-1: Manufacturer: syz [ 280.409518][ T5927] usb 7-1: SerialNumber: syz [ 280.446330][T11193] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 280.488841][ T5927] usb 7-1: selecting invalid altsetting 1 [ 280.631219][ T972] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 280.784082][ T5927] cdc_ncm 7-1:1.0: bind() failure [ 280.831016][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 280.851634][ T972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.872254][ T5927] usb 7-1: USB disconnect, device number 4 [ 280.896249][ T972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.973153][ T972] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.007786][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.028288][ T972] usb 1-1: Product: syz [ 281.040905][ T972] usb 1-1: Manufacturer: syz [ 281.045560][ T972] usb 1-1: SerialNumber: syz [ 281.307389][ T972] usb 1-1: 0:2 : does not exist [ 281.369996][ T972] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 281.452055][ T972] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 281.501642][T11272] loop5: detected capacity change from 0 to 256 [ 281.510735][T11273] loop1: detected capacity change from 0 to 512 [ 281.550780][T11273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 281.600455][ T972] usb 1-1: USB disconnect, device number 9 [ 281.611398][T11272] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 281.663543][T11273] EXT4-fs (loop1): 1 truncate cleaned up [ 281.735987][T11273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.899139][ T6057] udevd[6057]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.947507][T11295] loop6: detected capacity change from 0 to 128 [ 281.967490][T11273] EXT4-fs error (device loop1): ext4_generic_delete_entry:2667: inode #2: block 13: comm syz.1.1822: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 282.121212][T11273] EXT4-fs (loop1): Remounting filesystem read-only [ 282.169685][T11273] EXT4-fs warning (device loop1): ext4_rename_delete:3724: inode #2: comm syz.1.1822: Deleting old file: nlink 4, error=-117 [ 282.450333][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.470726][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1827'. [ 282.479960][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 282.701630][T11317] netlink: 'syz.4.1831': attribute type 1 has an invalid length. [ 282.993721][T11256] loop2: detected capacity change from 0 to 32768 [ 283.024074][T11256] (syz.2.1819,11256,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.049051][T11329] loop0: detected capacity change from 0 to 2048 [ 283.074414][T11256] (syz.2.1819,11256,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.101473][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 283.164178][T11340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.191370][T11337] netlink: 'syz.6.1834': attribute type 10 has an invalid length. [ 283.242119][T11256] JBD2: Ignoring recovery information on journal [ 283.251073][T11329] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 283.284738][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 283.296889][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.333202][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 283.363424][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 283.410922][ T9] usb 6-1: SerialNumber: syz [ 283.459399][ T9] usb 6-1: config 0 descriptor?? [ 283.469771][T11256] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 283.486399][T11329] Remounting filesystem read-only [ 283.523616][ T9] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 283.560708][ T9] usb 6-1: No valid video chain found. [ 283.872326][ T24] usb 6-1: USB disconnect, device number 8 [ 284.011341][ T5846] ocfs2: Unmounting device (7,2) on (node local) [ 284.082595][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'. [ 284.119458][T11373] loop6: detected capacity change from 0 to 2048 [ 284.239297][T11373] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 284.281981][T11373] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 284.330488][T11373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.412823][T11386] loop4: detected capacity change from 0 to 512 [ 284.616438][T11386] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1846: bad orphan inode 11862016 [ 284.714041][T11386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 284.789781][T11386] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.145102][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 285.553493][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1855'. [ 285.570891][T11435] loop1: detected capacity change from 0 to 1024 [ 285.855049][ T55] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 285.870949][T11440] loop5: detected capacity change from 0 to 4096 [ 285.894565][ T13] hfsplus: b-tree write err: -5, ino 4 [ 285.912022][T11440] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 286.020911][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 286.069539][ T55] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 286.110273][ T55] usb 1-1: config 179 has no interface number 0 [ 286.132388][ T55] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 286.193304][ T55] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 286.240021][ T55] usb 1-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0x3C, changing to 0xC [ 286.289877][ T55] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xC has an invalid bInterval 114, changing to 10 [ 286.361172][ T55] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xC has invalid maxpacket 33648, setting to 1024 [ 286.389085][ T55] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 286.480317][ T55] usb 1-1: config 179 interface 65 has no altsetting 0 [ 286.527785][ T55] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 286.556383][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.690904][ T972] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 286.735850][T11478] netlink: 'syz.5.1867': attribute type 5 has an invalid length. [ 286.900628][ T972] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 286.919041][ T24] usb 1-1: USB disconnect, device number 10 [ 286.946919][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.003591][ T972] usb 5-1: Product: syz [ 287.020668][ T972] usb 5-1: Manufacturer: syz [ 287.033176][T11426] loop6: detected capacity change from 0 to 32768 [ 287.038758][ T972] usb 5-1: SerialNumber: syz [ 287.047634][T11493] loop2: detected capacity change from 0 to 512 [ 287.094297][ T972] usb 5-1: config 0 descriptor?? [ 287.120208][T11426] (syz.6.1856,11426,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 287.142536][ T972] hub 5-1:0.0: bad descriptor, ignoring hub [ 287.144737][T11493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.155867][ T972] hub 5-1:0.0: probe with driver hub failed with error -5 [ 287.203661][T11426] (syz.6.1856,11426,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 287.204657][ T972] f81232 5-1:0.0: f81534a converter detected [ 287.294566][T11493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 287.356692][T11493] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.409719][T11513] Illegal XDP return value 3906258178 on prog (id 76) dev N/A, expect packet loss! [ 287.431041][T11426] JBD2: Ignoring recovery information on journal [ 287.449748][ T972] usb 5-1: f81534a converter now attached to ttyUSB0 [ 287.642645][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 287.644725][T11426] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 287.971631][ T24] usb 5-1: USB disconnect, device number 11 [ 288.010426][ T24] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 288.066418][ T24] f81232 5-1:0.0: device disconnected [ 288.554950][ T7957] ocfs2: Unmounting device (7,6) on (node local) [ 289.217918][T11570] loop0: detected capacity change from 0 to 16 [ 289.287137][T11570] erofs (device loop0): mounted with root inode @ nid 36. [ 289.528353][T11581] loop6: detected capacity change from 0 to 2048 [ 289.609206][T11581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.621230][ T5927] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 289.830973][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 289.911335][ T5927] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 289.920548][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.958579][ T5927] usb 6-1: Product: syz [ 289.968683][ T5927] usb 6-1: Manufacturer: syz [ 289.982393][ T5927] usb 6-1: SerialNumber: syz [ 290.010131][ T5927] usb 6-1: config 0 descriptor?? [ 290.296306][ T5927] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 009 [ 290.610980][ T5927] usb 6-1: USB disconnect, device number 9 [ 291.596474][T11601] loop0: detected capacity change from 0 to 32768 [ 291.849643][T11682] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 291.973973][T11688] loop1: detected capacity change from 0 to 64 [ 292.094997][T11688] Trying to free block not in datazone [ 292.887806][T11722] loop2: detected capacity change from 0 to 16 [ 292.934429][T11722] erofs (device loop2): mounted with root inode @ nid 36. [ 294.051475][T11764] loop4: detected capacity change from 0 to 256 [ 294.058925][T11764] exfat: Deprecated parameter 'utf8' [ 294.149797][T11764] exfat: Deprecated parameter 'namecase' [ 294.192480][T11764] exfat: Deprecated parameter 'namecase' [ 294.198387][T11764] exfat: Deprecated parameter 'utf8' [ 294.273269][T11764] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 294.311105][T11776] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 294.371108][T11776] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1943'. [ 294.399165][T11771] loop2: detected capacity change from 0 to 4096 [ 294.635064][T11771] ntfs3(loop2): ino=1f, mi_enum_attr [ 294.680686][T11771] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 294.705934][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 295.334081][T11815] netlink: 'syz.2.1951': attribute type 8 has an invalid length. [ 295.669296][T11828] loop0: detected capacity change from 0 to 1024 [ 295.740924][ T5954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 295.910939][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 295.940609][ T5954] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 295.973920][ T49] hfsplus: b-tree write err: -5, ino 4 [ 295.983252][ T5954] usb 5-1: config 0 has no interface number 1 [ 295.990382][ T5954] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 296.064427][ T5954] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 296.121933][T11845] netlink: 'syz.2.1961': attribute type 2 has an invalid length. [ 296.124968][ T5954] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 296.147011][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 296.170191][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.215806][ T5954] usb 5-1: Product: syz [ 296.238368][ T5954] usb 5-1: Manufacturer: syz [ 296.260476][ T5954] usb 5-1: SerialNumber: syz [ 296.296965][ T5954] usb 5-1: config 0 descriptor?? [ 296.324614][ T5954] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 296.330623][T11845] : entered promiscuous mode [ 296.392013][T11783] loop6: detected capacity change from 0 to 32768 [ 296.513418][T11783] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.583789][ T2338] pvrusb2: Invalid read control endpoint [ 296.612395][ T5954] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 296.686848][ T2338] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 296.694757][ T30] audit: type=1326 audit(1753693321.204:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 296.766201][ T2338] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 296.819187][ T5954] usb 5-1: USB disconnect, device number 12 [ 296.838898][ T30] audit: type=1326 audit(1753693321.234:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 296.891108][T11783] XFS (loop6): Ending clean mount [ 296.987687][ T30] audit: type=1326 audit(1753693321.254:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 297.051068][ T30] audit: type=1326 audit(1753693321.254:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 297.129961][ T30] audit: type=1326 audit(1753693321.254:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 297.284602][ T7957] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.916139][T11923] netlink: 'syz.5.1979': attribute type 15 has an invalid length. [ 297.960349][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1979'. [ 298.323089][T11938] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1984'. [ 298.684097][T11954] loop4: detected capacity change from 0 to 64 [ 298.713370][T11956] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1990'. [ 298.756254][T11956] bond_slave_0: entered promiscuous mode [ 298.762217][T11956] bond_slave_1: entered promiscuous mode [ 298.878589][T11963] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 298.938573][T11968] loop2: detected capacity change from 0 to 512 [ 298.974602][T11968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.121850][T11968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.203497][T11968] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.380862][T11968] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1993: corrupted xattr block 19: overlapping e_value [ 299.467265][T11968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.662102][T12000] loop6: detected capacity change from 0 to 1024 [ 299.763071][T12000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.773395][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.214401][ T7957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.217679][T12025] loop2: detected capacity change from 0 to 512 [ 300.302832][T12025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.360982][T12025] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.528262][T12025] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 300.591348][T12025] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 300.631006][T12025] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.2007: Failed to acquire dquot type 1 [ 300.868684][T12054] loop6: detected capacity change from 0 to 164 [ 300.970257][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.014348][T12061] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.2019'. [ 301.642112][T12090] loop6: detected capacity change from 0 to 128 [ 301.670662][T12090] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 301.830408][T12090] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 301.890913][T12090] FAT-fs (loop6): Filesystem has been set read-only [ 301.906130][T12101] loop0: detected capacity change from 0 to 256 [ 301.976541][T12107] loop1: detected capacity change from 0 to 256 [ 302.092139][T12101] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 302.100101][T12101] FAT-fs (loop0): Filesystem has been set read-only [ 302.155046][T12107] FAT-fs (loop1): Directory bread(block 64) failed [ 302.195560][T12107] FAT-fs (loop1): Directory bread(block 65) failed [ 302.240631][T12107] FAT-fs (loop1): Directory bread(block 66) failed [ 302.298617][T12107] FAT-fs (loop1): Directory bread(block 67) failed [ 302.322657][T12107] FAT-fs (loop1): Directory bread(block 68) failed [ 302.349356][T12107] FAT-fs (loop1): Directory bread(block 69) failed [ 302.373295][T12107] FAT-fs (loop1): Directory bread(block 70) failed [ 302.423700][T12107] FAT-fs (loop1): Directory bread(block 71) failed [ 302.430354][T12107] FAT-fs (loop1): Directory bread(block 72) failed [ 302.504435][T12107] FAT-fs (loop1): Directory bread(block 73) failed [ 302.645432][T12047] loop4: detected capacity change from 0 to 32768 [ 302.657348][T12120] loop6: detected capacity change from 0 to 4096 [ 302.779556][T12047] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.779913][T12120] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 302.984275][T12047] XFS (loop4): Ending clean mount [ 303.121492][T12154] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2041'. [ 303.151705][T12120] ntfs3(loop6): Failed to load $Extend (-22). [ 303.180994][T12120] ntfs3(loop6): Failed to initialize $Extend. [ 303.360144][ T5850] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 303.551877][T12166] loop5: detected capacity change from 0 to 16 [ 303.619394][T12166] erofs (device loop5): mounted with root inode @ nid 36. [ 303.677187][T12166] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 303.697901][T12171] netlink: 'syz.4.2044': attribute type 21 has an invalid length. [ 303.735566][T12166] erofs (device loop5): read error -117 @ 43 of nid 36 [ 303.972520][T12182] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2049'. [ 304.016426][T12182] unsupported nlmsg_type 40 [ 304.460834][ T30] audit: type=1326 audit(1753693328.954:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.0.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 304.483138][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.586631][ T30] audit: type=1326 audit(1753693328.954:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.0.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 304.589155][T12210] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2057'. [ 304.682715][ T30] audit: type=1326 audit(1753693328.994:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.0.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 304.805469][ T30] audit: type=1326 audit(1753693328.994:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.0.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 304.909672][ T30] audit: type=1326 audit(1753693329.004:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.0.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d78e9a9 code=0x7ffc0000 [ 304.932075][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.340928][T12237] loop5: detected capacity change from 0 to 1024 [ 305.458033][T12237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.480412][T12247] overlayfs: failed to resolve './file0': -2 [ 305.883392][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.272780][T12279] erspan2: entered promiscuous mode [ 306.278055][T12279] erspan2: entered allmulticast mode [ 306.455626][T12281] loop4: detected capacity change from 0 to 4096 [ 306.651943][T12306] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.137586][T12328] loop1: detected capacity change from 0 to 1024 [ 307.150924][ T55] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 307.216988][T12329] netlink: 'syz.6.2083': attribute type 8 has an invalid length. [ 307.257156][T12328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.332080][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 307.351103][ T55] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 307.367848][ T55] usb 3-1: config 162 has no interface number 0 [ 307.382743][ T55] usb 3-1: config 162 interface 97 has no altsetting 0 [ 307.451159][ T55] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 307.470504][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.516604][ T55] usb 3-1: Product: syz [ 307.580904][ T55] usb 3-1: Manufacturer: syz [ 307.585549][ T55] usb 3-1: SerialNumber: syz [ 307.843206][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.918822][ T55] metro_usb 3-1:162.97: Metrologic USB to Serial converter detected [ 307.964371][ T55] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 308.054076][T12350] loop6: detected capacity change from 0 to 4096 [ 308.104064][ T55] usb 3-1: USB disconnect, device number 9 [ 308.114578][T12350] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 308.142077][ T55] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 308.163858][T12376] autofs4:pid:12376:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 308.196578][ T55] metro_usb 3-1:162.97: device disconnected [ 308.322376][T12350] ntfs3(loop6): ino=19, mi_enum_attr [ 308.406081][T12400] netlink: 'syz.5.2096': attribute type 1 has an invalid length. [ 308.486816][T12350] ntfs3(loop6): failed to convert "c46c" to cp874 [ 308.512507][T12350] ntfs3(loop6): ino=20, mi_enum_attr [ 309.422389][T12441] xt_TCPMSS: Only works on TCP SYN packets [ 310.258970][T12483] loop2: detected capacity change from 0 to 512 [ 310.302133][T12483] EXT4-fs: Ignoring removed bh option [ 310.350560][T12483] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 310.413281][T12483] EXT4-fs (loop2): invalid journal inode [ 310.451968][T12483] EXT4-fs (loop2): can't get journal size [ 310.552279][T12483] EXT4-fs (loop2): 1 truncate cleaned up [ 310.560136][T12483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.762367][T12483] Device name not specified. [ 310.762367][T12483] [ 310.997893][ T30] audit: type=1326 audit(1753693335.504:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 311.079552][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.140877][ T30] audit: type=1326 audit(1753693335.504:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 311.230928][ T30] audit: type=1326 audit(1753693335.554:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 311.381405][ T30] audit: type=1326 audit(1753693335.554:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 311.523033][ T30] audit: type=1326 audit(1753693335.554:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 311.863876][T12550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2137'. [ 312.001157][T12559] vivid-000: ================= START STATUS ================= [ 312.042626][T12559] vivid-000: Generate PTS: true [ 312.047849][T12559] vivid-000: Generate SCR: true [ 312.150882][T12559] tpg source WxH: 320x180 (R'G'B) [ 312.171043][T12559] tpg field: 1 [ 312.186447][T12559] tpg crop: (0,0)/320x180 [ 312.203166][T12559] tpg compose: (0,0)/320x180 [ 312.228653][T12559] tpg colorspace: 8 [ 312.240987][T12559] tpg transfer function: 2/0 [ 312.261488][T12559] tpg quantization: 0/0 [ 312.277957][T12559] tpg RGB range: 0/2 [ 312.288097][T12559] vivid-000: ================== END STATUS ================== [ 312.324641][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.573385][T12578] loop6: detected capacity change from 0 to 8 [ 312.837422][T12519] loop5: detected capacity change from 0 to 32768 [ 312.906253][T12519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2129 (12519) [ 312.982055][T12519] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.026673][T12519] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 313.070858][T12519] BTRFS info (device loop5): using free-space-tree [ 313.135567][T12606] tmpfs: User quota block hardlimit too large. [ 313.483903][T12571] loop1: detected capacity change from 0 to 32768 [ 313.650888][T12571] [ 313.650888][T12571] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.650888][T12571] [ 313.750986][T12571] ERROR: (device loop1): diWrite: ixpxd invalid [ 313.750986][T12571] [ 313.833809][T12571] ERROR: (device loop1): txAbort: [ 313.833809][T12571] [ 313.961276][ T5845] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.202287][ T5849] [ 314.202287][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.202287][ T5849] [ 314.258143][ T5849] [ 314.258143][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.258143][ T5849] [ 314.318800][T12648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2163'. [ 315.490200][T12684] loop4: detected capacity change from 0 to 2048 [ 315.545318][T12633] loop6: detected capacity change from 0 to 32768 [ 315.627745][T12684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.701139][T12684] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.724245][T12633] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.872214][T12715] syz.0.2178: attempt to access beyond end of device [ 315.872214][T12715] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 315.884982][T12684] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.2171: bg 0: block 345: padding at end of block bitmap is not set [ 315.895230][T12684] EXT4-fs (loop4): Remounting filesystem read-only [ 315.941167][T12633] XFS (loop6): Ending clean mount [ 315.978516][T12633] XFS (loop6): Quotacheck needed: Please wait. [ 315.997408][T12715] FAT-fs (loop1): unable to read boot sector [ 316.002947][T12684] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.4.2171: cleanup dec ref error -117 [ 316.114302][T12633] XFS (loop6): Quotacheck: Done. [ 316.307987][ T7957] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.345749][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.515693][T12727] loop0: detected capacity change from 0 to 4096 [ 316.592552][T12727] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 316.729935][T12727] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 316.800723][T12727] ntfs3(loop0): ino=19, mi_enum_attr [ 316.922353][T12727] ntfs3(loop0): failed to convert "c46c" to cp1251 [ 316.932155][T12747] netlink: 'syz.5.2187': attribute type 32 has an invalid length. [ 316.971090][T12727] ntfs3(loop0): ino=20, mi_enum_attr [ 317.032346][T12753] loop1: detected capacity change from 0 to 16 [ 317.098260][T12753] erofs (device loop1): mounted with root inode @ nid 36. [ 317.189452][T12753] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 318.085266][T12796] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2201'. [ 318.181321][T12796] batadv_slave_1: entered promiscuous mode [ 318.260023][T12808] loop4: detected capacity change from 0 to 1024 [ 318.438595][T12808] hfsplus: xattr search failed [ 318.584661][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 318.596963][T12820] loop6: detected capacity change from 0 to 2048 [ 318.712552][T12820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.134539][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 319.375741][T12863] loop2: detected capacity change from 0 to 256 [ 319.557730][T12863] FAT-fs (loop2): Directory bread(block 64) failed [ 319.601049][T12863] FAT-fs (loop2): Directory bread(block 65) failed [ 319.626433][T12863] FAT-fs (loop2): Directory bread(block 66) failed [ 319.658126][T12863] FAT-fs (loop2): Directory bread(block 67) failed [ 319.707414][T12863] FAT-fs (loop2): Directory bread(block 68) failed [ 319.746692][T12863] FAT-fs (loop2): Directory bread(block 69) failed [ 319.781270][T12863] FAT-fs (loop2): Directory bread(block 70) failed [ 319.817213][T12863] FAT-fs (loop2): Directory bread(block 71) failed [ 319.870446][T12863] FAT-fs (loop2): Directory bread(block 72) failed [ 319.893238][T12863] FAT-fs (loop2): Directory bread(block 73) failed [ 320.233797][T12883] loop5: detected capacity change from 0 to 4096 [ 320.280713][T12883] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 320.483737][T12883] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 320.569761][T12883] ntfs3(loop5): Failed to load $Extend (-22). [ 320.609413][T12883] ntfs3(loop5): Failed to initialize $Extend. [ 321.117912][T12861] loop6: detected capacity change from 0 to 32768 [ 321.597500][T12938] loop1: detected capacity change from 0 to 1764 [ 321.739124][T12949] overlay: ./file0 is not a directory [ 321.747995][ T30] audit: type=1326 audit(1753693346.254:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.4.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 321.770248][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.808489][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 321.880964][ T30] audit: type=1326 audit(1753693346.304:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.4.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 321.903262][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.981007][ T30] audit: type=1326 audit(1753693346.314:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.4.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 322.003330][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.162550][ T30] audit: type=1326 audit(1753693346.314:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.4.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 322.184856][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.201013][T12967] binder: 12964:12967 ioctl c00c6211 0 returned -14 [ 322.289648][ T30] audit: type=1326 audit(1753693346.314:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.4.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43998e9a9 code=0x7ffc0000 [ 323.281066][T13008] loop4: detected capacity change from 0 to 64 [ 323.487939][T13024] loop1: detected capacity change from 0 to 256 [ 323.593280][T13024] FAT-fs (loop1): Directory bread(block 64) failed [ 323.610976][T13024] FAT-fs (loop1): Directory bread(block 65) failed [ 323.671176][T13024] FAT-fs (loop1): Directory bread(block 66) failed [ 323.677765][T13024] FAT-fs (loop1): Directory bread(block 67) failed [ 323.683856][T13034] loop6: detected capacity change from 0 to 64 [ 323.698239][T13035] loop5: detected capacity change from 0 to 512 [ 323.740932][T13024] FAT-fs (loop1): Directory bread(block 68) failed [ 323.747520][T13024] FAT-fs (loop1): Directory bread(block 69) failed [ 323.801885][T13024] FAT-fs (loop1): Directory bread(block 70) failed [ 323.829537][T13035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.853775][T13024] FAT-fs (loop1): Directory bread(block 71) failed [ 323.913631][T13035] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.924466][T13024] FAT-fs (loop1): Directory bread(block 72) failed [ 323.932935][T13024] FAT-fs (loop1): Directory bread(block 73) failed [ 324.023282][T13035] fs-verity (loop5, inode 15): Unrecognized descriptor size: 0 bytes [ 324.306257][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.531046][T13063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2280'. [ 325.579030][T13038] loop4: detected capacity change from 0 to 32768 [ 325.601705][T13038] btrfs: Deprecated parameter 'usebackuproot' [ 325.641739][T13038] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 325.707174][T13038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2274 (13038) [ 325.780579][T13038] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.855514][T13038] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 325.899270][T13038] BTRFS info (device loop4): using free-space-tree [ 325.974755][T13130] loop6: detected capacity change from 0 to 64 [ 326.221216][ T55] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 326.274227][T13038] BTRFS info (device loop4): rebuilding free space tree [ 326.445923][T13165] loop5: detected capacity change from 0 to 256 [ 326.454987][T13038] BTRFS info (device loop4 state M): max_inline set to 4096 [ 326.462470][ T55] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 326.462522][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.482483][ T55] usb 1-1: config 0 descriptor?? [ 326.683569][T13165] FAT-fs (loop5): Directory bread(block 64) failed [ 326.738299][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.747239][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.772184][T13165] FAT-fs (loop5): Directory bread(block 65) failed [ 326.778878][T13165] FAT-fs (loop5): Directory bread(block 66) failed [ 326.847452][T13165] FAT-fs (loop5): Directory bread(block 67) failed [ 326.857394][ T5850] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.861528][T13165] FAT-fs (loop5): Directory bread(block 68) failed [ 326.902638][T13165] FAT-fs (loop5): Directory bread(block 69) failed [ 326.907576][ T55] usb 1-1: Cannot set MAC address [ 326.920451][T13165] FAT-fs (loop5): Directory bread(block 70) failed [ 326.939190][T13165] FAT-fs (loop5): Directory bread(block 71) failed [ 326.949844][T13165] FAT-fs (loop5): Directory bread(block 72) failed [ 326.951119][ T55] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 326.957272][T13165] FAT-fs (loop5): Directory bread(block 73) failed [ 327.001296][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 327.022916][ T55] usb 1-1: USB disconnect, device number 11 [ 327.241098][ T9] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 327.260345][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.299474][ T9] usb 7-1: Product: syz [ 327.312604][ T9] usb 7-1: Manufacturer: syz [ 327.347504][ T9] usb 7-1: SerialNumber: syz [ 327.383948][ T9] usb 7-1: config 0 descriptor?? [ 327.424138][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 327.522762][T13206] netlink: 'syz.1.2306': attribute type 21 has an invalid length. [ 327.551032][T13206] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2306'. [ 327.795210][T13213] loop5: detected capacity change from 0 to 512 [ 327.817570][ T9] gspca_sunplus: reg_r err -71 [ 327.823869][ T9] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 327.884194][T13213] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.894429][ T9] usb 7-1: USB disconnect, device number 5 [ 327.974004][T13213] EXT4-fs (loop5): 1 truncate cleaned up [ 328.009971][T13213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.209795][T13213] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.2307: bg 0: block 256: padding at end of block bitmap is not set [ 328.264816][T13213] EXT4-fs (loop5): Remounting filesystem read-only [ 328.491128][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 328.518722][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.690846][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 328.709091][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.742283][ T9] usb 3-1: config 8 has an invalid interface number: 97 but max is 0 [ 328.785688][ T9] usb 3-1: config 8 has no interface number 0 [ 328.846080][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=dafa, bcdDevice= 1.5c [ 328.860892][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.926416][ T9] usb 3-1: Product: syz [ 328.950970][ T9] usb 3-1: Manufacturer: syz [ 328.957187][ T9] usb 3-1: SerialNumber: syz [ 329.141102][T13282] netlink: 'syz.5.2325': attribute type 10 has an invalid length. [ 329.188481][T13282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2325'. [ 329.227563][ T9] ftdi_sio 3-1:8.97: FTDI USB Serial Device converter detected [ 329.259184][ T9] usb 3-1: Detected SIO [ 329.272495][T13282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 329.323337][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 329.393485][ T9] usb 3-1: USB disconnect, device number 10 [ 329.456173][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 329.519984][ T9] ftdi_sio 3-1:8.97: device disconnected [ 329.815511][T13322] loop0: detected capacity change from 0 to 512 [ 329.867743][T13322] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 329.960958][T13322] EXT4-fs (loop0): 1 truncate cleaned up [ 330.018224][T13322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.060945][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 330.133424][T13322] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.2331: bg 0: block 256: padding at end of block bitmap is not set [ 330.237162][T13322] EXT4-fs (loop0): Remounting filesystem read-only [ 330.292972][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 330.315696][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.333384][ T9] usb 7-1: Product: syz [ 330.371193][ T9] usb 7-1: Manufacturer: syz [ 330.375856][ T9] usb 7-1: SerialNumber: syz [ 330.416532][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.462559][ T972] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.527558][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.836851][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 331.677346][T13391] netlink: 'syz.5.2347': attribute type 23 has an invalid length. [ 332.133532][ T972] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 332.140641][ T972] ath9k_htc: Failed to initialize the device [ 332.720877][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 332.939894][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 333.010248][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 333.101041][ T55] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 333.227902][ T55] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 333.290372][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.375315][ T55] usb 6-1: Product: syz [ 333.379651][ T55] usb 6-1: Manufacturer: syz [ 333.473548][ T55] usb 6-1: SerialNumber: syz [ 333.848193][ T55] usb 6-1: Invalid number of CPorts: 0 [ 333.920675][ T55] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 334.061210][ T55] usb 6-1: USB disconnect, device number 10 [ 334.341099][T13453] 9pnet_fd: Insufficient options for proto=fd [ 334.522717][ T5934] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 334.684280][T13465] openvswitch: netlink: Duplicate or invalid key (type 0). [ 334.754827][ T5934] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.781138][T13465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.822539][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.830666][ T5934] usb 1-1: Product: syz [ 334.956255][ T5934] usb 1-1: Manufacturer: syz [ 334.992985][ T5934] usb 1-1: SerialNumber: syz [ 335.118740][ T5934] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 335.171022][ T5927] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 335.804738][ T9] usb 7-1: USB disconnect, device number 6 [ 335.987612][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 336.044221][ T10] usb 2-1: device not accepting address 16, error -71 [ 336.162370][ T5947] usb 1-1: USB disconnect, device number 12 [ 336.244433][T13497] netlink: 'syz.2.2374': attribute type 10 has an invalid length. [ 336.278187][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2374'. [ 336.341007][ T5927] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 336.356667][T13497] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 336.377610][ T5927] ath9k_htc: Failed to initialize the device [ 336.399554][ T5947] usb 1-1: ath9k_htc: USB layer deinitialized [ 336.756987][T13521] usb usb8: usbfs: process 13521 (syz.1.2382) did not claim interface 0 before use [ 337.259976][T13544] loop1: detected capacity change from 0 to 64 [ 337.445575][T13553] loop6: detected capacity change from 0 to 1024 [ 337.504001][T13553] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 337.561095][T13553] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 337.617807][T13553] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 337.687623][T13553] EXT4-fs (loop6): orphan cleanup on readonly fs [ 337.705696][T13553] EXT4-fs error (device loop6): ext4_read_inode_bitmap:166: comm syz.6.2392: Inode bitmap for bg 0 marked uninitialized [ 337.767794][T13553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.811789][T13568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.948196][T13553] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 338.225917][ T7957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.231083][T13587] loop4: detected capacity change from 0 to 256 [ 338.332671][T13587] exfat: Deprecated parameter 'utf8' [ 338.437202][T13587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 339.142297][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'. [ 339.173333][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'. [ 339.354474][T13639] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2417'. [ 339.354618][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'. [ 339.394767][T13639] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 339.439575][T13639] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 339.661244][T13644] loop6: detected capacity change from 0 to 4096 [ 339.710882][T13644] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 339.889223][T13651] loop4: detected capacity change from 0 to 4096 [ 340.031845][T13666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.553900][T13686] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2432'. [ 340.902332][T13702] netlink: 664 bytes leftover after parsing attributes in process `syz.1.2437'. [ 341.331016][T13724] loop6: detected capacity change from 0 to 16 [ 341.381168][T13724] erofs (device loop6): mounted with root inode @ nid 36. [ 341.457712][T13724] erofs (device loop6): xattr_isize 12 of nid 46 is not supported yet [ 342.244826][T13758] loop2: detected capacity change from 0 to 1764 [ 342.683415][T13778] loop0: detected capacity change from 0 to 64 [ 342.838294][T13715] loop5: detected capacity change from 0 to 32768 [ 342.910646][T13715] [ 342.910646][T13715] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 342.910646][T13715] [ 343.042420][T13715] jfs_rename did not expect dtDelete to return rc = -5 [ 343.049583][T13715] ERROR: (device loop5): txAbort: [ 343.049583][T13715] [ 343.260142][ T30] audit: type=1326 audit(1753693367.754:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34f18e9a9 code=0x7ffc0000 [ 343.384721][ T30] audit: type=1326 audit(1753693367.764:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff34f18e9a9 code=0x7ffc0000 [ 343.407035][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.427762][ T49] [ 343.427762][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 343.427762][ T49] [ 343.476815][ T49] [ 343.476815][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 343.476815][ T49] [ 343.525996][ T5845] [ 343.525996][ T5845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 343.525996][ T5845] [ 343.563766][ T5845] [ 343.563766][ T5845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 343.563766][ T5845] [ 343.603008][ T110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 343.615136][ T110] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 343.623570][ T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 343.633322][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.643399][ T110] RIP: 0010:write_special_inodes+0xa9/0x170 [ 343.649336][ T110] Code: 2e e8 0b 14 40 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 d3 13 40 08 48 8d [ 343.668976][ T110] RSP: 0018:ffffc90002717bd8 EFLAGS: 00010216 [ 343.675062][ T110] RAX: 0000000000000006 RBX: ffff888027de6e00 RCX: ffffffff81f0bd2e [ 343.683044][ T110] RDX: 0000000000000000 RSI: ffffffff81f0bce1 RDI: 0000000000000030 [ 343.691026][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 343.699040][ T110] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81f18450 [ 343.707031][ T110] R13: 0000000000000000 R14: ffff8880253e0800 R15: ffffc90002729112 [ 343.715022][ T110] FS: 0000000000000000(0000) GS:ffff888124727000(0000) knlGS:0000000000000000 [ 343.724085][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.730686][ T110] CR2: 00007f6455412000 CR3: 0000000027f56000 CR4: 0000000000350ef0 [ 343.738677][ T110] Call Trace: [ 343.741965][ T110] [ 343.744941][ T110] lmLogSync+0xd2/0x820 [ 343.749140][ T110] ? __pfx_lmLogSync+0x10/0x10 [ 343.753947][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.759605][ T110] ? find_held_lock+0x2b/0x80 [ 343.764315][ T110] jfs_syncpt+0x89/0xa0 [ 343.768501][ T110] txEnd+0x30a/0x5a0 [ 343.772428][ T110] jfs_lazycommit+0x783/0xb30 [ 343.777142][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 343.782378][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 343.788214][ T110] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.793424][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.799077][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.804735][ T110] ? __kthread_parkme+0x19e/0x250 [ 343.809794][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 343.815034][ T110] kthread+0x3c5/0x780 [ 343.819119][ T110] ? __pfx_kthread+0x10/0x10 [ 343.823723][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.829374][ T110] ? rcu_is_watching+0x12/0xc0 [ 343.834187][ T110] ? __pfx_kthread+0x10/0x10 [ 343.838818][ T110] ret_from_fork+0x5d7/0x6f0 [ 343.843454][ T110] ? __pfx_kthread+0x10/0x10 [ 343.848059][ T110] ret_from_fork_asm+0x1a/0x30 [ 343.852860][ T110] [ 343.855880][ T110] Modules linked in: [ 343.860982][ T110] ---[ end trace 0000000000000000 ]--- [ 343.939642][ T110] RIP: 0010:write_special_inodes+0xa9/0x170 [ 343.954397][ T110] Code: 2e e8 0b 14 40 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 d3 13 40 08 48 8d [ 343.974054][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.980967][ T110] RSP: 0018:ffffc90002717bd8 EFLAGS: 00010216 [ 343.987168][ T110] RAX: 0000000000000006 RBX: ffff888027de6e00 RCX: ffffffff81f0bd2e [ 343.995541][ T110] RDX: 0000000000000000 RSI: ffffffff81f0bce1 RDI: 0000000000000030 [ 344.003945][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 344.014147][ T110] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81f18450 [ 344.022271][ T110] R13: 0000000000000000 R14: ffff8880253e0800 R15: ffffc90002729112 [ 344.030322][ T110] FS: 0000000000000000(0000) GS:ffff888124727000(0000) knlGS:0000000000000000 [ 344.039552][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.046474][ T110] CR2: 000000110c314345 CR3: 000000002b5a3000 CR4: 0000000000350ef0 [ 344.055019][ T110] Kernel panic - not syncing: Fatal exception [ 344.061354][ T110] Kernel Offset: disabled [ 344.065681][ T110] Rebooting in 86400 seconds..