last executing test programs: 10m8.158367834s ago: executing program 4 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x4004) 10m7.422117467s ago: executing program 4 (id=319): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b\xba\xdf//\xdc/\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3eb, r0, 0x0, 0x0, 0x9, 0x0, 0x2}]) 5.393426916s ago: executing program 1 (id=3465): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETAW(r0, 0x80047437, 0x0) 5.041787191s ago: executing program 0 (id=3466): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f00000020c0)=ANY=[@ANYBLOB='nocompress,session=0x0000000000000013,nocompress,showassoc,check=strict,iocharset=cp437,cruft,unhide,norock,sbsector=0x00\x00\x00\x00\x00\n\x00\x00\x00000001,map=off,mode=0x0000000000000006,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x3, 0x9bf, &(0x7f0000001640)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 5.023717343s ago: executing program 3 (id=3467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) 4.874882324s ago: executing program 6 (id=3468): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x97) 4.747192009s ago: executing program 2 (id=3469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="a18b5ecac78f3a", 0x7}], 0x1}, 0x8008) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.66554211s ago: executing program 1 (id=3470): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x9, 0x10, 0x0, 0x0}], 0x1}) 4.283805831s ago: executing program 3 (id=3471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 4.034845194s ago: executing program 0 (id=3472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x5) 4.001732653s ago: executing program 2 (id=3473): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x808) 3.714300392s ago: executing program 6 (id=3474): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x34c0e0, &(0x7f0000000240)=ANY=[@ANYBLOB='nr_inodes=g,size=2']) 2.742809286s ago: executing program 0 (id=3475): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 2.621105198s ago: executing program 6 (id=3476): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r1, r0}}, 0x18) 2.378606196s ago: executing program 1 (id=3477): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$eJzs3U1rE0Ecx/HfbJIm2lK3DyKIp2rBk/ThIl4KknfgxZOoTYRiqKAV1FP1LL4A730LvgCPnsSz4K0nX0BukZmdmE2ym01Dt5uk3w8kbLrzn53Jznbmv6WsAFxaD+t/TnZP7ctIJZUkPZACSTWpLOm6btTeHh4dHLWajVEVlVyEfRlFkWaozP5hMynUxrkIL7SfylqK/wz5qP3WcdFtQPHc1Z8gkKr+6nT7axfesnxc9kFv2mrrnZaLbgcAoFh+/g/8PL/k1+9BIG36ab9//p/xCbRddANy9j1jf2z+d1lWx9jze83t6uV7LoUrq+KDTnZPJ2nLgqKR1bfANFlZpWtLcOXFQat5b/9VqxHok/a8Sq/YuntvREO3q5vT2u2Pw1Vv+Nx0zPwyXtvZLLo+VGwfduLtjxVZO98jZjM/zE/zxIT6qsb/9V+5Y+xpcmcqHDhTUfu30mt0vVyQK5XSyxV3kJv+CN7IXpaUkpGoO6JWBk5gmNVOF7U6EBX1bjsjai0xaicjan0wqjea0yPzZr6Yx2ZDf/VN9dj6P7Df9qbGuTJtGVfSj4yR/Sm7kqGbT/wdoeNbiSWDSXuECXzWc93X8pv3H14+a7War+d2w16JU9CMqdroDoJpac/cbtgvuZCjd+edyetJ/9XBbfn50TvpZwxkEMwLu+4yUf4Xy1e23GLNvoX96/RqPLaTVXmsxu2U3GDVvV9Nz+D6GHfrYTHhr4vDRxyZc92+K90Z54iR0Ldz+uxNEmTq+qWn3P8HAAAAAAAAAAAAAAAAAACYNef3Lwc1pe0quo8AAAAAAAAAAAAAAAAAAAAAAMy6hOf/Vgt9/u8jRZ94/i+Qu38BAAD//0lmcxY=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0x0) 2.174092053s ago: executing program 2 (id=3478): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.979622095s ago: executing program 0 (id=3479): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="3cad4e31074d", 0x0, 0x8, 0x20, 0x2, 0x0}) 1.772497049s ago: executing program 6 (id=3480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x400c4) 1.464622916s ago: executing program 3 (id=3481): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x43, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x40, 0x7fff, 0x0) 1.381118387s ago: executing program 2 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000e7ff0d0900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 1.205650931s ago: executing program 1 (id=3483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1.145297384s ago: executing program 0 (id=3484): r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockname$packet(r0, 0x0, &(0x7f0000000180)) 953.605226ms ago: executing program 6 (id=3485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c000480050003000100000005000300000000000500030000000000050003000500000005000300800000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 705.336526ms ago: executing program 3 (id=3486): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xc2, 0x1000, 0x1, 0x8, 0x8}, 0x2, 0x1, 0x10000, 0x4, 0x10001, 0x15, 0x1b, 0x1e, 0x2, 0x7, {0x9, 0x0, 0xfffffffe, 0xffffff7c, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 469.197918ms ago: executing program 2 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x869}], 0x5, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 432.885701ms ago: executing program 6 (id=3488): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000480)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 272.526889ms ago: executing program 0 (id=3489): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 0s ago: executing program 3 (id=3490): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000003c0)={0xfd, 0x2}) kernel console output (not intermixed with test programs): 93.349692][ T9989] netlink: 'syz.5.1825': attribute type 16 has an invalid length. [ 593.357741][ T9989] netlink: 'syz.5.1825': attribute type 17 has an invalid length. [ 594.920029][T10009] loop3: detected capacity change from 0 to 256 [ 595.326230][T10002] loop2: detected capacity change from 0 to 4096 [ 595.345920][T10009] FAT-fs (loop3): Directory bread(block 64) failed [ 595.400490][T10009] FAT-fs (loop3): Directory bread(block 65) failed [ 595.407501][T10009] FAT-fs (loop3): Directory bread(block 66) failed [ 595.433240][T10002] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 595.454629][T10009] FAT-fs (loop3): Directory bread(block 67) failed [ 595.494596][T10009] FAT-fs (loop3): Directory bread(block 68) failed [ 595.523232][T10009] FAT-fs (loop3): Directory bread(block 69) failed [ 595.585597][T10009] FAT-fs (loop3): Directory bread(block 70) failed [ 595.622169][T10009] FAT-fs (loop3): Directory bread(block 71) failed [ 595.652318][T10009] FAT-fs (loop3): Directory bread(block 72) failed [ 595.683843][T10009] FAT-fs (loop3): Directory bread(block 73) failed [ 595.924349][T10002] ntfs3(loop2): ino=19, mi_enum_attr [ 597.531709][T10025] loop1: detected capacity change from 0 to 4096 [ 597.609879][T10025] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 598.887520][T10052] loop3: detected capacity change from 0 to 256 [ 599.243354][T10052] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 599.369583][T10057] IPv6: Can't replace route, no match found [ 599.500076][T10052] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 600.256389][T10058] loop0: detected capacity change from 0 to 4096 [ 600.751651][T10058] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 602.606407][T10088] loop2: detected capacity change from 0 to 64 [ 602.978055][T10090] loop0: detected capacity change from 0 to 1764 [ 603.142835][T10095] loop1: detected capacity change from 0 to 256 [ 603.304615][T10091] loop3: detected capacity change from 0 to 4096 [ 603.389144][T10095] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 603.594722][T10091] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 603.657606][T10099] geneve4: entered promiscuous mode [ 603.782983][ T34] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 603.863527][ T57] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 603.918255][ T57] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 603.948518][T10091] ntfs3(loop3): ino=1a, mi_enum_attr [ 603.955072][T10091] ntfs3(loop3): ino=1a, mi_enum_attr [ 603.984772][ T57] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.013010][T10091] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 604.858495][T10109] netlink: 'syz.0.1885': attribute type 8 has an invalid length. [ 606.131529][T10128] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 606.183869][ T40] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 606.378393][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 606.461066][T10134] netlink: 572 bytes leftover after parsing attributes in process `syz.3.1895'. [ 606.475413][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 606.506473][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 606.544013][ T40] usb 1-1: config 255 has an invalid interface number: 81 but max is 0 [ 606.579264][ T40] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 606.619397][ T40] usb 1-1: config 255 has no interface number 0 [ 606.625967][ T40] usb 1-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 606.694418][ T40] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 606.754298][ T40] usb 1-1: config 255 interface 81 has no altsetting 0 [ 606.815641][ T40] usb 1-1: string descriptor 0 read error: -22 [ 606.829403][ T40] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 606.873094][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.013052][ T40] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.81/input/input14 [ 607.314853][ T40] usb 1-1: USB disconnect, device number 9 [ 607.363526][T10143] loop2: detected capacity change from 0 to 764 [ 607.389599][ T29] audit: type=1326 audit(1772365673.583:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 607.558332][ T29] audit: type=1326 audit(1772365673.593:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 607.743652][ T29] audit: type=1326 audit(1772365673.593:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 610.500078][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 610.882130][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 611.079100][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 611.137088][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 611.175440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.239358][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.269624][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 611.328197][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 611.359160][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 611.395959][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.454049][ T10] usb 4-1: config 0 descriptor?? [ 611.490635][T10187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.055435][ T40] usb 4-1: USB disconnect, device number 10 [ 612.067715][T10203] loop0: detected capacity change from 0 to 64 [ 612.075277][ T5784] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 612.432534][T10203] hfs: unable to load iocharset "mœ{…gúL×ic" [ 612.521311][T10210] netlink: 'syz.5.1929': attribute type 39 has an invalid length. [ 612.768962][ T40] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 613.026362][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 613.137740][ T40] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 613.199857][ T40] usb 1-1: config 0 has no interface number 0 [ 613.274455][ T40] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 613.353077][ T40] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24941, setting to 1024 [ 613.412225][ T40] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 613.459282][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.496702][ T40] usb 1-1: Product: syz [ 613.521140][ T40] usb 1-1: Manufacturer: syz [ 613.575269][ T40] usb 1-1: SerialNumber: syz [ 613.631714][ T40] usb 1-1: config 0 descriptor?? [ 613.697935][ T40] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 613.769196][ T40] em28xx 1-1:0.132: Video interface 132 found: isoc [ 613.979412][ T40] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 614.130130][ T40] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 614.154107][ T40] em28xx 1-1:0.132: board has no eeprom [ 614.232565][ T40] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 614.256655][ T40] em28xx 1-1:0.132: analog set to isoc mode. [ 614.267211][ T5843] em28xx 1-1:0.132: Registering V4L2 extension [ 614.369202][ T40] usb 1-1: USB disconnect, device number 10 [ 614.426391][ T40] em28xx 1-1:0.132: Disconnecting em28xx [ 615.859213][ T5843] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 615.866543][ T5843] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 615.933187][ T5843] em28xx 1-1:0.132: No AC97 audio processor [ 616.000403][ T5843] usb 1-1: Decoder not found [ 616.005255][ T5843] em28xx 1-1:0.132: failed to create media graph [ 616.053676][ T5843] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 616.129696][ T5843] em28xx 1-1:0.132: Remote control support is not available for this card. [ 616.158090][ T40] em28xx 1-1:0.132: Closing input extension [ 616.246110][ T40] em28xx 1-1:0.132: Freeing device [ 616.745449][T10258] loop0: detected capacity change from 0 to 16 [ 616.819867][T10258] erofs (device loop0): mounted with root inode @ nid 36. [ 616.899972][T10258] syz.0.1951: attempt to access beyond end of device [ 616.899972][T10258] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 617.015307][T10258] syz.0.1951: attempt to access beyond end of device [ 617.015307][T10258] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 617.103594][T10258] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 617.169024][T10258] erofs (device loop0): read error -117 @ 1 of nid 89 [ 617.210256][ T29] audit: type=1800 audit(1772365683.413:70): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1951" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 617.474856][T10268] netlink: 'syz.3.1956': attribute type 4 has an invalid length. [ 618.027084][T10275] loop1: detected capacity change from 0 to 256 [ 618.198087][T10275] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 618.360933][T10275] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 618.564661][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 618.724807][T10285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 618.732772][T10285] IPv6: NLM_F_CREATE should be set when creating new route [ 618.740519][T10285] IPv6: NLM_F_CREATE should be set when creating new route [ 618.836709][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 618.881053][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.891802][ T10] usb 4-1: config 0 has no interfaces? [ 618.909175][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 618.918519][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 618.927225][ T10] usb 4-1: Product: syz [ 618.949099][ T10] usb 4-1: Manufacturer: syz [ 618.970799][ T10] usb 4-1: SerialNumber: syz [ 619.063288][ T10] usb 4-1: config 0 descriptor?? [ 619.538897][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 619.548388][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 619.849378][ T10] usb 4-1: USB disconnect, device number 11 [ 620.290499][T10299] netlink: 820 bytes leftover after parsing attributes in process `syz.1.1971'. [ 620.325503][T10299] netlink: 820 bytes leftover after parsing attributes in process `syz.1.1971'. [ 621.513544][T10316] loop3: detected capacity change from 0 to 136 [ 621.550592][T10316] Attempt to read inode for relocated directory [ 621.691255][T10320] loop1: detected capacity change from 0 to 8 [ 622.321485][T10328] fuse: Invalid rootmode [ 625.033325][T10379] loop0: detected capacity change from 0 to 64 [ 625.960898][T10399] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 626.207770][T10405] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 628.268549][T10426] loop5: detected capacity change from 0 to 4096 [ 628.344932][T10426] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 628.385411][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'. [ 628.615059][T10426] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 628.678222][T10426] ntfs3(loop5): ino=19, mi_enum_attr [ 628.745786][T10426] ntfs3(loop5): failed to convert "c46c" to koi8-r [ 628.792768][T10426] ntfs3(loop5): ino=20, mi_enum_attr [ 629.570654][T10459] netlink: 'syz.5.2032': attribute type 10 has an invalid length. [ 629.609432][T10459] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2032'. [ 629.609722][T10443] loop3: detected capacity change from 0 to 8192 [ 630.564478][T10479] netlink: 'syz.1.2039': attribute type 5 has an invalid length. [ 631.312992][T10494] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 632.823570][T10521] loop0: detected capacity change from 0 to 1024 [ 633.523902][T10537] loop1: detected capacity change from 0 to 512 [ 633.630160][T10537] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2056: bad orphan inode 13 [ 633.641562][T10537] loop1: lost filesystem error report for type 5 error -117 [ 633.642934][T10537] ext4_test_bit(bit=12, block=4) = 1 [ 633.651009][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 633.651120][ C0] EXT4-fs (loop1): initial error at time 1772365699: ext4_orphan_get:1417 [ 633.651262][ C0] EXT4-fs (loop1): last error at time 1772365699: ext4_orphan_get:1417 [ 633.699113][T10537] is_bad_inode(inode)=0 [ 633.703469][T10537] NEXT_ORPHAN(inode)=0 [ 633.707862][T10537] max_ino=32 [ 633.789173][T10537] i_nlink=1 [ 633.794971][T10537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.949730][T10537] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.2056: Unrecognised inode hash code 20 [ 634.069159][T10551] 9p: Unknown access argument 18446744073709551615: -34 [ 634.085959][T10537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2056: Corrupt directory, running e2fsck is recommended [ 634.175460][T10537] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.2056: Unrecognised inode hash code 20 [ 634.240346][T10537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2056: Corrupt directory, running e2fsck is recommended [ 634.286045][T10537] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.2056: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 634.863401][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.939040][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 635.150347][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 635.180645][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 635.223222][ T10] usb 6-1: config 179 has no interface number 0 [ 635.240989][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 635.280923][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 635.331101][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 635.399011][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 635.449607][ T10] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 635.505847][ T10] usb 6-1: config 179 interface 65 has no altsetting 0 [ 635.517572][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 635.560349][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.560923][ T40] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 635.721137][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input15 [ 635.796992][ T40] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 635.878650][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 635.925372][ T40] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 635.959181][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.976604][ T10] usb 6-1: USB disconnect, device number 7 [ 636.056221][ T40] usb 2-1: config 0 descriptor?? [ 636.104846][T10576] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 636.193454][ T40] hub 2-1:0.0: USB hub found [ 636.269224][T10229] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 636.391775][ T40] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 636.499939][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2072'. [ 636.549798][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2072'. [ 636.603031][T10229] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 636.648246][T10229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.662707][ T40] usbhid 2-1:0.0: can't add hid device: -71 [ 636.702814][ T40] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 636.711741][T10229] usb 1-1: Product: syz [ 636.716137][T10229] usb 1-1: Manufacturer: syz [ 636.759192][T10229] usb 1-1: SerialNumber: syz [ 636.829808][ T40] usb 2-1: USB disconnect, device number 11 [ 636.852235][T10229] usb 1-1: config 0 descriptor?? [ 636.934446][T10229] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 637.375481][T10229] usb 1-1: USB disconnect, device number 11 [ 638.869022][T10229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 639.096738][T10229] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 639.128237][T10229] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 639.189523][T10229] usb 1-1: config 220 has no interface number 2 [ 639.196371][T10229] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 639.300734][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.307790][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.328955][T10229] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 639.391004][T10229] usb 1-1: config 220 interface 0 has no altsetting 0 [ 639.398267][T10229] usb 1-1: config 220 interface 76 has no altsetting 0 [ 639.438962][T10229] usb 1-1: config 220 interface 1 has no altsetting 0 [ 639.491242][T10229] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 639.520382][T10229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.549448][T10229] usb 1-1: Product: syz [ 639.554015][T10229] usb 1-1: Manufacturer: syz [ 639.590824][T10229] usb 1-1: SerialNumber: syz [ 639.983681][T10229] usb 1-1: selecting invalid altsetting 0 [ 640.016607][T10229] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 640.078301][T10229] uvcvideo 1-1:220.0: No valid video chain found. [ 640.212558][T10229] usb 1-1: selecting invalid altsetting 0 [ 640.219504][T10229] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 640.242771][T10229] usb 1-1: USB disconnect, device number 12 [ 642.523053][T10757] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2107'. [ 643.695866][T10784] loop3: detected capacity change from 0 to 256 [ 643.966212][T10784] FAT-fs (loop3): Directory bread(block 64) failed [ 644.019095][T10784] FAT-fs (loop3): Directory bread(block 65) failed [ 644.026103][T10784] FAT-fs (loop3): Directory bread(block 66) failed [ 644.038174][T10788] loop0: detected capacity change from 0 to 1024 [ 644.069652][T10784] FAT-fs (loop3): Directory bread(block 67) failed [ 644.099509][T10784] FAT-fs (loop3): Directory bread(block 68) failed [ 644.106561][T10784] FAT-fs (loop3): Directory bread(block 69) failed [ 644.165067][T10784] FAT-fs (loop3): Directory bread(block 70) failed [ 644.165221][T10784] FAT-fs (loop3): Directory bread(block 71) failed [ 644.165532][T10784] FAT-fs (loop3): Directory bread(block 72) failed [ 644.165657][T10784] FAT-fs (loop3): Directory bread(block 73) failed [ 644.179474][T10796] sctp: [Deprecated]: syz.1.2119 (pid 10796) Use of int in maxseg socket option. [ 644.179474][T10796] Use struct sctp_assoc_value instead [ 645.829588][T10807] loop1: detected capacity change from 0 to 4096 [ 645.889240][T10807] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 646.290451][T10807] ntfs3(loop1): ino=19, mi_enum_attr [ 646.399765][T10807] ntfs3(loop1): failed to convert "c46c" to iso8859-9 [ 646.444475][T10807] ntfs3(loop1): ino=20, mi_enum_attr [ 646.555929][T10842] netlink: 'syz.5.2134': attribute type 2 has an invalid length. [ 647.633931][T10855] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2137'. [ 647.723226][T10849] bond2: entered allmulticast mode [ 647.802216][T10849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 649.888303][T10929] netlink: 'syz.2.2153': attribute type 3 has an invalid length. [ 650.604068][T10941] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 650.775304][T10947] loop0: detected capacity change from 0 to 512 [ 650.813521][T10947] EXT4-fs: Ignoring removed bh option [ 650.902186][T10947] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 651.073274][T10944] loop2: detected capacity change from 0 to 2048 [ 651.089533][T10947] EXT4-fs (loop0): 1 truncate cleaned up [ 651.133036][T10947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.298343][T10944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.371046][T10959] loop5: detected capacity change from 0 to 512 [ 651.649293][T10959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 651.676404][T10959] ext4 filesystem being mounted at /377/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.764607][T10959] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 651.842724][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.904683][T10959] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 651.960025][T10959] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2160: Failed to acquire dquot type 0 [ 652.372843][ T6704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 653.094361][T10974] loop1: detected capacity change from 0 to 4096 [ 653.355023][T10990] veth2: entered allmulticast mode [ 654.370231][T11015] netlink: 'syz.3.2175': attribute type 3 has an invalid length. [ 654.571233][T11018] overlayfs: unescaped trailing colons in lowerdir mount option. [ 656.534184][T11056] binder: 11055:11056 ioctl c0046209 0 returned -22 [ 657.766601][T11081] loop3: detected capacity change from 0 to 64 [ 659.807974][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2212'. [ 659.859862][ T5831] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 660.088207][ T5831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 660.119295][ T5831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 660.190040][ T5831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 660.262201][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 660.279198][ T5831] usb 1-1: SerialNumber: syz [ 660.378395][ T5831] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 660.483744][ T5831] usb-storage 1-1:1.0: USB Mass Storage device detected [ 660.533282][ T5831] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 660.669732][ T5831] scsi host1: usb-storage 1-1:1.0 [ 661.978645][T10229] usb 1-1: USB disconnect, device number 13 [ 663.670048][T10229] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 663.894848][T10229] usb 2-1: Using ep0 maxpacket: 16 [ 663.940051][T10229] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 663.969158][T10229] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.007206][T10229] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.044384][T10229] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 664.102242][T10229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 664.170743][T10229] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 664.210236][T10229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.253284][T10229] usb 2-1: Product: syz [ 664.299311][T10229] usb 2-1: Manufacturer: syz [ 664.327664][T10229] usb 2-1: SerialNumber: syz [ 664.443055][T10229] usb 2-1: config 0 descriptor?? [ 664.503074][T11200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.814749][T11228] loop5: detected capacity change from 0 to 1024 [ 664.824874][T11200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.913076][T10229] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 665.043633][T11228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.139451][ T10] usb 2-1: USB disconnect, device number 12 [ 665.139701][ C1] synaptics_usb 2-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 665.220556][T11228] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.2239: Attempting to read directory block (623) that is past i_size (638464) [ 665.251476][T11228] EXT4-fs (loop5): Remounting filesystem read-only [ 665.832178][ T6704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.590202][T11277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2248'. [ 669.403876][T11331] netlink: 'syz.5.2267': attribute type 1 has an invalid length. [ 670.106338][T11344] loop5: detected capacity change from 0 to 64 [ 670.636174][T11356] loop2: detected capacity change from 0 to 24 [ 670.812492][T11356] romfs: read error for inode 0x8000 [ 671.442178][T11367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.490715][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 674.736668][T11442] loop1: detected capacity change from 0 to 2048 [ 674.842105][T11442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.843034][T11447] loop0: detected capacity change from 0 to 256 [ 674.948570][T11447] exfat: Deprecated parameter 'utf8' [ 675.065638][T11447] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 675.200642][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2305'. [ 675.666054][T11465] loop2: detected capacity change from 0 to 128 [ 675.718060][T11466] loop5: detected capacity change from 0 to 128 [ 675.743142][T11465] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 675.900088][T11465] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.964979][T11466] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.019044][T11475] ip6gretap4: entered allmulticast mode [ 676.038580][T11465] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 676.100701][T11466] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 676.109544][T11465] FAT-fs (loop2): Filesystem has been set read-only [ 676.225114][T11466] EXT4-fs warning (device loop5): __ext4_ioctl:1558: Setting inode version is not supported with metadata_csum enabled. [ 676.869769][ T6704] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 677.077533][T11490] loop2: detected capacity change from 0 to 64 [ 677.184246][ T5784] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 677.197917][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 677.198100][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.198273][ T5784] Workqueue: hci3 hci_rx_work [ 677.198459][ T5784] Call Trace: [ 677.198518][ T5784] [ 677.198585][ T5784] __dump_stack+0x26/0x30 [ 677.198792][ T5784] dump_stack_lvl+0x14c/0x1c0 [ 677.198998][ T5784] dump_stack+0x1e/0x25 [ 677.199172][ T5784] sysfs_create_dir_ns+0x46c/0x540 [ 677.199436][ T5784] kobject_add_internal+0x1084/0x19b0 [ 677.199697][ T5784] kobject_add+0x2c1/0x410 [ 677.199923][ T5784] ? kmsan_get_metadata+0xf1/0x160 [ 677.200153][ T5784] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.200412][ T5784] device_add+0xa70/0x1c00 [ 677.200620][ T5784] hci_conn_add_sysfs+0x159/0x2e0 [ 677.200869][ T5784] le_conn_complete_evt+0x1d0a/0x2250 [ 677.201120][ T5784] hci_le_enh_conn_complete_evt+0x158/0x260 [ 677.201362][ T5784] hci_le_meta_evt+0x6eb/0x960 [ 677.201547][ T5784] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 677.201781][ T5784] hci_event_packet+0xce2/0x1e40 [ 677.201938][ T5784] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 677.202173][ T5784] hci_rx_work+0x8c3/0xfc0 [ 677.202359][ T5784] ? kmsan_get_metadata+0xf1/0x160 [ 677.202593][ T5784] ? __pfx_hci_rx_work+0x10/0x10 [ 677.202759][ T5784] process_scheduled_works+0xb21/0x1e30 [ 677.203030][ T5784] worker_thread+0xede/0x1580 [ 677.203256][ T5784] kthread+0x53f/0x600 [ 677.203466][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 677.203664][ T5784] ? __pfx_kthread+0x10/0x10 [ 677.203866][ T5784] ret_from_fork+0x20f/0x910 [ 677.204041][ T5784] ? __switch_to+0x51c/0x750 [ 677.204259][ T5784] ? __pfx_kthread+0x10/0x10 [ 677.204468][ T5784] ret_from_fork_asm+0x1a/0x30 [ 677.204724][ T5784] [ 677.386153][ T5784] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 677.401190][ T5784] Bluetooth: hci3: failed to register connection device [ 678.472567][T11508] x_tables: ip_tables: ah match: only valid for protocol 51 [ 679.358372][T11525] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2323'. [ 681.076206][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2335'. [ 682.740843][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 683.960397][T11617] random: crng reseeded on system resumption [ 684.286441][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 684.430447][T11629] loop5: detected capacity change from 0 to 512 [ 684.492700][T11629] EXT4-fs: Ignoring removed nobh option [ 684.522533][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 684.568403][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 684.592167][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 684.640191][ T10] usb 1-1: config 1 has no interface number 0 [ 684.651442][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 684.674818][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 684.689860][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 684.699608][T11629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.700107][T11629] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.715448][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.774731][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 685.003101][ T10] snd_usb_pod 1-1:1.1: invalid control EP [ 685.041897][ T10] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 685.066008][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 685.106182][ T10] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 685.272258][ T10] usb 1-1: USB disconnect, device number 14 [ 685.347076][ T7065] udevd[7065]: setting owner of /dev/bus/usb/001/014 to uid=0, gid=0 failed: No such file or directory [ 685.463794][ T6704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.659976][T11655] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 685.700099][T11655] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2363'. [ 686.593988][T11675] netlink: 'syz.0.2368': attribute type 1 has an invalid length. [ 686.746639][T11678] netlink: 'syz.2.2371': attribute type 2 has an invalid length. [ 686.760263][T11678] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2371'. [ 688.225263][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 688.823679][T11711] QAT: failed to copy from user cfg_data. [ 689.013190][T11718] netlink: 'syz.3.2385': attribute type 15 has an invalid length. [ 690.140969][T11737] openvswitch: netlink: Actions may not be safe on all matching packets [ 690.423598][T10229] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 690.625321][T10229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.668932][T10229] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.719769][T10229] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 690.758424][T10229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.775193][T10229] usb 2-1: Product: syz [ 690.789096][T10229] usb 2-1: Manufacturer: syz [ 690.799823][T10229] usb 2-1: SerialNumber: syz [ 690.860786][T10229] usb 2-1: config 0 descriptor?? [ 691.175388][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.231198][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.321221][ T40] usb 2-1: USB disconnect, device number 13 [ 691.939947][T11783] loop3: detected capacity change from 0 to 256 [ 692.157639][T11788] loop0: detected capacity change from 0 to 128 [ 692.233357][T11790] program syz.2.2405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.966259][T11800] netlink: 'syz.3.2407': attribute type 5 has an invalid length. [ 693.083583][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2409'. [ 693.221891][T11809] loop0: detected capacity change from 0 to 128 [ 693.401666][T11809] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 693.559354][T11809] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 694.133549][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 694.571571][T11821] loop5: detected capacity change from 0 to 4096 [ 694.583140][T11832] loop3: detected capacity change from 0 to 736 [ 695.172038][T11832] rock: directory entry would overflow storage [ 695.178509][T11832] rock: sig=0x3b10, size=4, remaining=3 [ 695.209963][T11848] netlink: 'syz.0.2420': attribute type 4 has an invalid length. [ 696.134510][T11859] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 698.085563][T11890] loop0: detected capacity change from 0 to 2048 [ 698.209628][T11890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.416319][ T40] IPVS: starting estimator thread 0... [ 699.529131][T11927] IPVS: using max 192 ests per chain, 9600 per kthread [ 699.625456][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2445'. [ 700.245222][ T40] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 700.439799][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 700.472168][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.526017][ T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.598912][ T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 700.654977][T11953] loop5: detected capacity change from 0 to 256 [ 700.683592][ T40] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 700.743172][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.750688][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.773490][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.783873][ T40] usb 1-1: Product: syz [ 700.788494][ T40] usb 1-1: Manufacturer: syz [ 700.796070][ T40] usb 1-1: SerialNumber: syz [ 700.896488][T11953] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fa, utbl_chksum : 0xe619d30d) [ 701.112677][ T40] usb 1-1: cannot find UAC_HEADER [ 701.791589][ T40] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 701.885115][ T40] usb 1-1: USB disconnect, device number 15 [ 701.959645][T11986] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 702.932706][ T6879] udevd[6879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.085886][T12032] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2473'. [ 704.118196][T12032] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2473'. [ 704.275542][T12040] overlayfs: conflicting options: nfs_export=on,index=off [ 704.408283][T12036] loop2: detected capacity change from 0 to 2048 [ 704.586128][T12046] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 704.684314][T12036] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 704.728328][T12050] openvswitch: netlink: IP tunnel attribute has 1620 unknown bytes. [ 704.729058][T12036] Remounting filesystem read-only [ 706.569521][ T29] audit: type=1400 audit(1772365772.763:71): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=12091 comm="syz.1.2492" [ 707.031144][T12100] loop2: detected capacity change from 0 to 256 [ 707.064231][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2495'. [ 708.769341][ T40] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 709.128195][ T40] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 709.218923][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.227218][ T40] usb 3-1: Product: syz [ 709.279008][ T40] usb 3-1: Manufacturer: syz [ 709.298984][ T40] usb 3-1: SerialNumber: syz [ 709.380680][ T40] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 709.483742][T10229] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 710.024882][ T10] usb 3-1: USB disconnect, device number 12 [ 710.246929][T12154] loop0: detected capacity change from 0 to 256 [ 710.734829][T12164] loop5: detected capacity change from 0 to 256 [ 710.874123][T10229] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 710.940030][T10229] ath9k_htc: Failed to initialize the device [ 710.992916][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 711.554316][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 711.590148][T12184] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2517'. [ 712.390113][T12195] netlink: 'syz.1.2521': attribute type 2 has an invalid length. [ 712.838463][T12203] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.199778][T12197] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 714.481353][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 714.517172][T12233] loop2: detected capacity change from 0 to 16 [ 714.652641][T12233] erofs (device loop2): mounted with root inode @ nid 36. [ 716.715328][T12281] loop3: detected capacity change from 0 to 64 [ 717.932452][T12303] loop1: detected capacity change from 0 to 736 [ 719.004523][T12332] loop2: detected capacity change from 0 to 16 [ 719.023401][T12330] loop3: detected capacity change from 0 to 256 [ 719.170280][T12332] erofs (device loop2): mounted with root inode @ nid 36. [ 719.712258][T12346] loop1: detected capacity change from 0 to 256 [ 719.939833][T12359] trusted_key: encrypted_key: insufficient parameters specified [ 721.379092][T10229] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 721.625850][T10229] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 721.659093][T10229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.729837][T10229] usb 1-1: config 0 descriptor?? [ 721.813274][T10229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 722.125955][T12409] loop2: detected capacity change from 0 to 64 [ 722.279013][T10229] gspca_cpia1: usb_control_msg 03, error -71 [ 722.301721][T10229] gspca_cpia1: usb_control_msg 01, error -71 [ 722.342847][T10229] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 722.350338][T12409] syz.2.2585: attempt to access beyond end of device [ 722.350338][T12409] loop2: rw=8388608, sector=16777216, nr_sectors = 2 limit=64 [ 722.396421][T10229] usb 1-1: USB disconnect, device number 16 [ 722.449087][T12409] Buffer I/O error on dev loop2, logical block 8388608, async page read [ 722.519800][T12409] syz.2.2585: attempt to access beyond end of device [ 722.519800][T12409] loop2: rw=8388608, sector=16777216, nr_sectors = 2 limit=64 [ 722.589503][T12409] Buffer I/O error on dev loop2, logical block 8388608, async page read [ 723.470930][T12439] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 723.871504][T10229] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 724.171891][T10229] usb 1-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 724.212885][T10229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.241249][T10229] usb 1-1: Product: syz [ 724.253925][T10229] usb 1-1: Manufacturer: syz [ 724.282866][T10229] usb 1-1: SerialNumber: syz [ 724.291397][T12454] loop1: detected capacity change from 0 to 2048 [ 724.379585][T12454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.705495][T10229] pwc: Visionite VCS-UC300 USB webcam detected. [ 724.816860][T10229] pwc: Failed to set LED on/off time (-71) [ 724.863544][T10229] pwc: send_video_command error -71 [ 724.939959][T10229] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 724.974775][T10229] Philips webcam 1-1:5.0: probe with driver Philips webcam failed with error -71 [ 725.078014][T10229] usb 1-1: USB disconnect, device number 17 [ 725.354678][T12478] loop5: detected capacity change from 0 to 512 [ 725.499326][T12478] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 725.778606][T12487] loop1: detected capacity change from 0 to 256 [ 725.806345][T12478] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2601: Invalid block bitmap block 0 in block_group 0 [ 725.834054][T12478] loop5: lost filesystem error report for type 5 error -117 [ 725.835652][T12478] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 725.843474][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 725.843580][ C1] EXT4-fs (loop5): initial error at time 1772365792: ext4_read_block_bitmap_nowait:483 [ 725.843728][ C1] EXT4-fs (loop5): last error at time 1772365792: ext4_read_block_bitmap_nowait:483 [ 725.974190][T12478] loop5: lost filesystem error report for type 5 error -117 [ 725.982412][T12478] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2601: attempt to clear invalid blocks 983261 len 1 [ 726.058352][T12478] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 726.089156][T12478] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.2601: Invalid inode table block 0 in block_group 0 [ 726.208408][T12478] loop5: lost filesystem error report for type 5 error -117 [ 726.248899][T12478] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 726.368960][T12478] loop5: lost filesystem error report for type 5 error -117 [ 726.370456][T12478] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 726.471975][T12478] loop5: lost filesystem error report for type 5 error -117 [ 726.489255][T12478] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.2601: Invalid inode table block 0 in block_group 0 [ 726.631698][T12478] loop5: lost filesystem error report for type 5 error -117 [ 726.634569][T12478] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 726.749552][T12478] loop5: lost filesystem error report for type 5 error -117 [ 726.797810][T12478] EXT4-fs error (device loop5): ext4_truncate:4587: inode #11: comm syz.5.2601: mark_inode_dirty error [ 726.885539][T12478] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 726.909299][T12478] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 726.968976][T12478] loop5: lost filesystem error report for type 5 error -117 [ 726.996550][T12478] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.2601: Invalid inode table block 0 in block_group 0 [ 727.025588][T12478] loop5: lost filesystem error report for type 5 error -117 [ 727.027048][T12478] EXT4-fs (loop5): 1 truncate cleaned up [ 727.063823][T12478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.251801][T12478] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.2601: Invalid inode table block 0 in block_group 0 [ 727.837102][ T6704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.169103][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 728.425667][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 728.452853][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.489133][ T10] usb 2-1: Product: syz [ 728.493572][ T10] usb 2-1: Manufacturer: syz [ 728.529157][ T10] usb 2-1: SerialNumber: syz [ 728.647513][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 728.831740][ T5831] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 729.227819][T12539] loop0: detected capacity change from 0 to 1764 [ 729.266985][T12528] loop5: detected capacity change from 0 to 4096 [ 729.396610][T10229] usb 2-1: USB disconnect, device number 14 [ 729.612301][T12528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.243046][ T6704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.259020][ T5831] usb 2-1: Service connection timeout for: 256 [ 730.294085][ T5831] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 730.376838][ T5831] ath9k_htc: Failed to initialize the device [ 730.459232][T10229] usb 2-1: ath9k_htc: USB layer deinitialized [ 732.570528][T12618] loop2: detected capacity change from 0 to 256 [ 732.615748][T12618] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 732.670820][T12621] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2636'. [ 732.790337][T12618] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 733.766686][T12642] loop1: detected capacity change from 0 to 512 [ 736.101676][T12689] xt_hashlimit: invalid interval [ 736.906184][T12708] ceph: No source [ 737.450422][T12717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2665'. [ 737.636534][T12719] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 739.776090][T12764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2682'. [ 740.594615][T12780] IPv6: NLM_F_CREATE should be specified when creating new route [ 740.976313][T12788] loop3: detected capacity change from 0 to 256 [ 741.232925][T12788] FAT-fs (loop3): Directory bread(block 64) failed [ 741.259085][T12788] FAT-fs (loop3): Directory bread(block 65) failed [ 741.309046][T12788] FAT-fs (loop3): Directory bread(block 66) failed [ 741.356659][T12788] FAT-fs (loop3): Directory bread(block 67) failed [ 741.379299][T12788] FAT-fs (loop3): Directory bread(block 68) failed [ 741.448978][T12788] FAT-fs (loop3): Directory bread(block 69) failed [ 741.456130][T12788] FAT-fs (loop3): Directory bread(block 70) failed [ 741.494800][T12788] FAT-fs (loop3): Directory bread(block 71) failed [ 741.535601][T12788] FAT-fs (loop3): Directory bread(block 72) failed [ 741.562583][T12788] FAT-fs (loop3): Directory bread(block 73) failed [ 741.878224][ T29] audit: type=1326 audit(1772365808.063:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12804 comm="syz.0.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 742.030297][ T29] audit: type=1326 audit(1772365808.113:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12804 comm="syz.0.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 742.136453][ T29] audit: type=1326 audit(1772365808.213:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.2695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x0 [ 744.891816][T12852] bond1: entered promiscuous mode [ 745.951460][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2720'. [ 745.952062][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2720'. [ 746.626799][T12922] loop2: detected capacity change from 0 to 2048 [ 746.631546][T12922] EXT4-fs: Ignoring removed mblk_io_submit option [ 746.768403][T12922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.015599][T12936] loop3: detected capacity change from 0 to 64 [ 747.375344][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.889800][T12948] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2729'. [ 748.202281][T12956] loop1: detected capacity change from 0 to 512 [ 748.411654][T12957] loop0: detected capacity change from 0 to 2048 [ 748.454998][T12957] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 748.607875][T12957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.291755][T12996] loop0: detected capacity change from 0 to 128 [ 750.432193][T12996] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 750.579767][T12996] ext4 filesystem being mounted at /531/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 750.667787][T13007] fuse: blksize only supported for fuseblk [ 750.931096][T13012] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 751.104799][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 751.138980][ T5831] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 751.352674][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 751.369459][T13022] xt_TCPMSS: Only works on TCP SYN packets [ 751.399216][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 751.433508][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 751.485756][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 751.527816][ T5831] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 751.569067][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.643561][ T5831] usb 3-1: config 0 descriptor?? [ 751.960847][ T5831] hdpvr 3-1:0.0: firmware version 0x8 dated [ 752.214436][ T5831] hdpvr 3-1:0.0: device init failed [ 752.246768][ T5831] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 752.340097][ T5831] usb 3-1: USB disconnect, device number 13 [ 753.248965][ T40] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 753.495680][ T40] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.540418][ T40] usb 2-1: config 1 has an invalid interface number: 43 but max is 1 [ 753.578891][ T40] usb 2-1: config 1 has no interface number 1 [ 753.585533][ T40] usb 2-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 753.647212][ T40] usb 2-1: config 1 interface 0 has no altsetting 0 [ 753.699602][ T40] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 753.723539][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.797672][ T40] usb 2-1: Product: syz [ 753.818412][ T40] usb 2-1: Manufacturer: syz [ 753.847279][ T40] usb 2-1: SerialNumber: syz [ 754.220244][ T40] gspca_main: spca501-2.14.0 probing 0000:0000 [ 754.228099][ T40] gspca_spca501: reg write: error -71 [ 754.248837][ T40] spca501 2-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 754.279194][ T40] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 754.392837][ T40] usb 2-1: USB disconnect, device number 15 [ 754.629116][T10229] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 754.831064][T10229] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 754.913038][T10229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.986746][T10229] usb 3-1: config 0 descriptor?? [ 755.272327][T10229] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 755.478461][T10229] [drm:udl_init] *ERROR* Selecting channel failed [ 755.482613][T13110] loop1: detected capacity change from 0 to 256 [ 755.593563][T13117] netlink: 'syz.0.2770': attribute type 3 has an invalid length. [ 755.634995][T13117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2770'. [ 755.646452][T10229] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 755.688207][T10229] [drm] Initialized udl on minor 2 [ 755.730312][T10229] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.760921][T10229] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 755.770856][ T40] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.804144][ T40] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 755.837141][T10229] usb 3-1: USB disconnect, device number 14 [ 755.856015][ T40] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 755.964676][T13110] FAT-fs (loop1): Directory bread(block 64) failed [ 755.999008][T13110] FAT-fs (loop1): Directory bread(block 65) failed [ 756.044856][T13110] FAT-fs (loop1): Directory bread(block 66) failed [ 756.081753][T13110] FAT-fs (loop1): Directory bread(block 67) failed [ 756.119260][T13110] FAT-fs (loop1): Directory bread(block 68) failed [ 756.126167][T13110] FAT-fs (loop1): Directory bread(block 69) failed [ 756.199293][T13110] FAT-fs (loop1): Directory bread(block 70) failed [ 756.206274][T13110] FAT-fs (loop1): Directory bread(block 71) failed [ 756.258193][T13110] FAT-fs (loop1): Directory bread(block 72) failed [ 756.338978][T13110] FAT-fs (loop1): Directory bread(block 73) failed [ 756.712318][T13110] syz.1.2769: attempt to access beyond end of device [ 756.712318][T13110] loop1: rw=8390659, sector=1224, nr_sectors = 32 limit=256 [ 756.814848][T13147] loop2: detected capacity change from 0 to 1024 [ 756.897441][T13147] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 756.934617][T13147] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 756.978110][T13147] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.2775: iget: special inode unallocated [ 757.044928][T13147] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 757.048878][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 757.065417][ C0] EXT4-fs (loop2): initial error at time 1772365823: ext4_get_journal_inode:5863: inode 32 [ 757.076182][ C0] EXT4-fs (loop2): last error at time 1772365823: ext4_get_journal_inode:5863: inode 32 [ 757.103635][T13147] EXT4-fs (loop2): Remounting filesystem read-only [ 757.119082][T13147] EXT4-fs (loop2): no journal found [ 757.124629][T13147] EXT4-fs (loop2): can't get journal size [ 757.171965][T13147] EXT4-fs (loop2): filesystem is read-only [ 757.192594][T13147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 757.917395][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.839974][T13185] xt_cgroup: invalid path, errno=-2 [ 759.617788][T13196] loop1: detected capacity change from 0 to 1024 [ 759.807147][T13196] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 759.849394][T13196] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 759.869090][ T5831] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 760.080105][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 760.113753][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 760.180135][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 760.221620][ T5831] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 760.237757][ T57] hfsplus: b-tree write err: -5, ino 25 [ 760.267264][ T57] hfsplus: b-tree write err: -5, ino 4 [ 760.295396][ T5831] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 760.301914][ T57] hfsplus: b-tree write err: -5, ino 2 [ 760.338392][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 760.367042][ T5831] usb 4-1: Product: syz [ 760.399014][ T5831] usb 4-1: Manufacturer: syz [ 760.403888][ T5831] usb 4-1: SerialNumber: syz [ 760.507782][ T5831] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 760.786020][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 760.796839][T10229] usb 4-1: USB disconnect, device number 12 [ 760.874691][ T29] audit: type=1326 audit(1772365827.073:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13235 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 760.932200][T10229] appletouch 4-1:1.0: input: appletouch disconnected [ 760.990505][ T29] audit: type=1326 audit(1772365827.113:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13235 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 761.094091][ T29] audit: type=1326 audit(1772365827.113:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13235 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 761.186364][ T29] audit: type=1326 audit(1772365827.113:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13235 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 761.960793][T13263] loop2: detected capacity change from 0 to 128 [ 761.996668][T13263] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 762.194288][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.201893][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.265636][T13263] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 762.300423][T13267] netlink: 'syz.3.2806': attribute type 5 has an invalid length. [ 762.855022][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 763.366287][T13292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2811'. [ 763.388940][T10229] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 763.630263][T10229] usb 4-1: Using ep0 maxpacket: 8 [ 763.662815][T10229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 763.718917][T10229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25448, setting to 1024 [ 763.790216][T10229] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 763.843566][T10229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.911809][T10229] usb 4-1: config 0 descriptor?? [ 764.257691][T10229] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 764.369321][T10229] usb 4-1: USB disconnect, device number 13 [ 765.239931][T13334] loop2: detected capacity change from 0 to 256 [ 765.981484][T13352] loop1: detected capacity change from 0 to 512 [ 766.056297][T13352] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 766.090651][T13352] EXT4-fs (loop1): failed to open journal device unknown-block(128,0) -6 [ 766.125240][T13360] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2831'. [ 766.128343][ T29] audit: type=1326 audit(1772365832.323:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.280467][ T29] audit: type=1326 audit(1772365832.363:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.372374][ T29] audit: type=1326 audit(1772365832.373:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.456932][ T29] audit: type=1326 audit(1772365832.373:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.601143][ T29] audit: type=1326 audit(1772365832.403:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.714910][ T29] audit: type=1326 audit(1772365832.413:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.829565][ T29] audit: type=1326 audit(1772365832.413:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.870393][T13375] C: renamed from lo [ 766.909642][ T29] audit: type=1326 audit(1772365832.413:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 766.956028][T13375] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 767.007506][ T29] audit: type=1326 audit(1772365832.413:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 767.739842][ T5831] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 767.938912][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 767.989800][ T5831] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 768.029064][ T5831] usb 4-1: config 254 has no interface number 0 [ 768.040509][ T5831] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 768.044221][T13404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.070975][ T5831] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 768.092827][ T5831] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 768.129029][ T5831] usb 4-1: config 254 interface 235 has no altsetting 0 [ 768.179374][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 768.204000][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 768.220897][ T5831] usb 4-1: Product: syz [ 768.225296][ T5831] usb 4-1: Manufacturer: syz [ 768.280018][ T5831] usb 4-1: SerialNumber: syz [ 768.392409][T13389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 768.769475][T13389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 768.791575][ T5831] usbtest 4-1:254.235: Linux gadget zero [ 768.797794][ T5831] usbtest 4-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 769.066092][ T5831] usb 4-1: USB disconnect, device number 14 [ 770.149285][T10229] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 770.394148][T10229] usb 1-1: Using ep0 maxpacket: 8 [ 770.431234][T10229] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 770.498821][T10229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.567472][T10229] usb 1-1: config 0 has no interface number 0 [ 770.600222][T10229] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 770.673551][T10229] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 770.750421][T10229] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 770.819611][T10229] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.896892][T10229] usb 1-1: config 0 interface 52 has no altsetting 0 [ 770.958966][T10229] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 770.968311][T10229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.057337][T10229] usb 1-1: config 0 descriptor?? [ 771.246429][T13463] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 771.409717][T10229] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input20 [ 771.590965][T10229] usb 1-1: USB disconnect, device number 18 [ 771.591218][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 771.996127][T13488] loop1: detected capacity change from 0 to 256 [ 772.070502][T13490] loop5: detected capacity change from 0 to 256 [ 772.111057][T13490] exfat: Deprecated parameter 'utf8' [ 772.280507][T13490] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 774.366404][T13536] loop2: detected capacity change from 0 to 64 [ 775.184920][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 778.040382][T13615] netlink: 'syz.2.2904': attribute type 7 has an invalid length. [ 779.924241][T13654] loop0: detected capacity change from 0 to 1024 [ 780.093587][T13654] hfsplus: can't free extent: start 2889, count 1 [ 780.889418][T13682] kAFS: unable to lookup cell '' [ 781.685102][T13691] loop2: detected capacity change from 0 to 64 [ 782.949136][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 783.212137][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.254873][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.309180][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 783.369239][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 783.418889][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.512625][ T10] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 783.569459][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.624400][ T10] usb 6-1: Product: syz [ 783.648883][ T10] usb 6-1: Manufacturer: syz [ 783.675120][ T10] usb 6-1: SerialNumber: syz [ 783.734562][ T10] usb 6-1: config 0 descriptor?? [ 783.792448][T13706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 783.902881][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 784.105642][ C0] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 784.610321][ T5831] usb 6-1: USB disconnect, device number 8 [ 786.681277][T10229] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 786.698019][T13785] loop5: detected capacity change from 0 to 4096 [ 786.757497][T13785] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 786.892451][T10229] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 786.929094][T10229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.973272][T10229] usb 3-1: Product: syz [ 786.977705][T10229] usb 3-1: Manufacturer: syz [ 786.979445][T13785] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 787.014188][T13785] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 787.014556][T10229] usb 3-1: SerialNumber: syz [ 787.040544][T13808] loop1: detected capacity change from 0 to 1024 [ 787.093585][T13785] ntfs3(loop5): ino=1b, mi_enum_attr [ 787.127780][T13808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 787.135587][T10229] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 787.176704][T13808] System zones: 0-1, 3-8 [ 787.180404][ T40] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 787.286896][T13808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 787.358388][T13808] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.639102][ T5831] usb 3-1: USB disconnect, device number 15 [ 787.932784][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 788.329227][ T40] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 788.337330][ T40] ath9k_htc: Failed to initialize the device [ 788.409597][ T5831] usb 3-1: ath9k_htc: USB layer deinitialized [ 788.945042][T13849] kAFS: unable to lookup cell '\/' [ 789.043628][T13855] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2971'. [ 791.483830][T13890] comedi comedi3: board detection failed [ 793.286183][ T40] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 793.515817][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 793.580022][ T40] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 793.615063][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.659487][ T40] usb 1-1: Product: syz [ 793.663917][ T40] usb 1-1: Manufacturer: syz [ 793.698917][ T40] usb 1-1: SerialNumber: syz [ 794.020649][ T40] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 794.091229][ T40] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 794.168995][T10229] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 794.211181][ T40] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 794.317262][ T40] usb 1-1: USB disconnect, device number 19 [ 794.335677][ T40] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 794.360592][T10229] usb 3-1: Using ep0 maxpacket: 16 [ 794.388206][T10229] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 794.424344][T10229] usb 3-1: config 0 has no interface number 0 [ 794.466867][ T40] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 794.489981][T10229] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 794.510505][T10229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.522356][ T40] visor 1-1:1.0: device disconnected [ 794.540565][T10229] usb 3-1: Product: syz [ 794.544984][T10229] usb 3-1: Manufacturer: syz [ 794.579572][T10229] usb 3-1: SerialNumber: syz [ 794.625162][T10229] usb 3-1: config 0 descriptor?? [ 794.719906][T10229] usb 3-1: bad CDC descriptors [ 794.906778][ T5831] usb 3-1: USB disconnect, device number 16 [ 795.294234][T13968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2998'. [ 795.626623][T13974] Zero length message leads to an empty skb [ 796.853725][ T29] audit: type=1326 audit(1772365863.053:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 796.929107][ T29] audit: type=1326 audit(1772365863.083:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.047490][ T29] audit: type=1326 audit(1772365863.083:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.149197][ T29] audit: type=1326 audit(1772365863.093:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.286821][ T29] audit: type=1326 audit(1772365863.093:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.400463][ T29] audit: type=1326 audit(1772365863.113:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.511510][ T29] audit: type=1326 audit(1772365863.123:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.629624][ T29] audit: type=1326 audit(1772365863.123:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.659017][ T5831] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 797.726910][ T29] audit: type=1326 audit(1772365863.133:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 797.894360][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 797.936323][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 798.000903][ T5831] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 798.081540][ T5831] usb 4-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 798.119115][ T5831] usb 4-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 798.157540][ T5831] usb 4-1: config 1 interface 0 has no altsetting 0 [ 798.199279][ T5831] usb 4-1: config 1 interface 0 has no altsetting 1 [ 798.247021][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 798.269042][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.324131][ T5831] usb 4-1: Product: syz [ 798.338387][ T5831] usb 4-1: Manufacturer: syz [ 798.356513][ T5831] usb 4-1: SerialNumber: syz [ 798.767803][ T5831] smsusb:smsusb_probe: board id=8, interface number 0 [ 798.809574][ T5831] usb 4-1: selecting invalid altsetting 0 [ 798.835930][ T5831] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 798.887609][ T5831] smsusb 4-1:1.0: probe with driver smsusb failed with error -22 [ 798.955653][ T5831] usb 4-1: USB disconnect, device number 15 [ 800.492129][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 800.755557][ T29] audit: type=1326 audit(1772365866.953:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14066 comm="syz.0.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 801.344359][T14079] binfmt_misc: register: failed to install interpreter file ./file1 [ 802.060335][T14088] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3031'. [ 802.120900][T14088] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3031'. [ 802.943062][T14100] loop0: detected capacity change from 0 to 1024 [ 803.100212][T14100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.139086][ T5831] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 803.302281][T14100] EXT4-fs error (device loop0): ext4_get_first_dir_block:3550: inode #11: comm syz.0.3035: directory missing '..' [ 803.319090][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 803.373807][ T5831] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 803.398191][T14100] EXT4-fs (loop0): Remounting filesystem read-only [ 803.406528][T14117] netlink: 'syz.2.3039': attribute type 3 has an invalid length. [ 803.418890][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.427643][ T5831] usb 2-1: Product: syz [ 803.444287][ T5831] usb 2-1: Manufacturer: syz [ 803.479173][ T5831] usb 2-1: SerialNumber: syz [ 803.754748][ T5831] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 803.792647][ T5831] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 803.846950][ T5831] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 803.872549][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.946407][ T5831] usb 2-1: USB disconnect, device number 16 [ 804.699697][T14141] xt_TCPMSS: Only works on TCP SYN packets [ 804.764490][T14143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 804.786143][T14143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 804.801538][T14143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 804.830838][T14143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 804.847015][T14143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 806.559456][ T5831] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 806.772163][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 806.882759][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.938960][ T5831] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 806.950436][T14143] Bluetooth: hci5: command tx timeout [ 807.029301][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.060130][T14233] cgroup: Unknown subsys name 'cpuset' [ 807.071204][ T5831] usb 4-1: config 0 descriptor?? [ 807.128428][ T5831] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 807.150475][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 807.363851][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 807.393324][T14140] chnl_net:caif_netlink_parms(): no params data found [ 807.455454][ T10] usb 2-1: config 253 has an invalid interface number: 234 but max is 0 [ 807.519941][ T10] usb 2-1: config 253 has no interface number 0 [ 807.526754][ T10] usb 2-1: config 253 interface 234 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 807.592517][ T10] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=d4.61 [ 807.603890][ T5831] gspca_vc032x: reg_w err -71 [ 807.626078][ T5831] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 807.647341][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.664697][ T10] usb 2-1: Product: syz [ 807.669896][ T5831] usb 4-1: USB disconnect, device number 16 [ 807.676639][ T10] usb 2-1: Manufacturer: syz [ 807.688463][ T10] usb 2-1: SerialNumber: syz [ 807.772582][ T10] bfusb 2-1:253.234: probe with driver bfusb failed with error -5 [ 808.033299][ T5831] usb 2-1: USB disconnect, device number 17 [ 808.284735][ T72] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.338918][ T72] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 808.788558][ T72] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.859113][ T72] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 809.030001][T14143] Bluetooth: hci5: command tx timeout [ 809.337542][ T72] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.419007][ T72] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 809.696181][ T72] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.743949][ T72] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 810.431678][T14339] netlink: 'syz.1.3067': attribute type 4 has an invalid length. [ 810.566711][T14140] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.589606][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.597604][T14140] bridge_slave_0: entered allmulticast mode [ 810.685201][T14140] bridge_slave_0: entered promiscuous mode [ 810.727514][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 810.727604][ T29] audit: type=1326 audit(1772365876.923:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 810.756633][T14140] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.832165][T14140] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.860177][T14140] bridge_slave_1: entered allmulticast mode [ 810.901922][ T29] audit: type=1326 audit(1772365876.923:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 810.953057][T14140] bridge_slave_1: entered promiscuous mode [ 810.989153][ T29] audit: type=1326 audit(1772365876.993:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 811.113818][T14143] Bluetooth: hci5: command tx timeout [ 811.118895][ T29] audit: type=1326 audit(1772365876.993:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 811.209740][T14360] loop1: detected capacity change from 0 to 256 [ 811.245081][ T29] audit: type=1326 audit(1772365876.993:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.0.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 811.246938][T14360] exfat: Deprecated parameter 'utf8' [ 811.448472][T14360] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 811.852563][T14140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.957209][T14140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.161122][ T72] bridge_slave_1: left allmulticast mode [ 812.167203][ T72] bridge_slave_1: left promiscuous mode [ 812.198750][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.303538][ T72] bridge_slave_0: left allmulticast mode [ 812.324460][ T72] bridge_slave_0: left promiscuous mode [ 812.365349][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.829058][ T5831] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 813.009084][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 813.105012][ T5831] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 813.159087][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.167495][ T5831] usb 3-1: Product: syz [ 813.189655][T14143] Bluetooth: hci5: command tx timeout [ 813.229046][ T5831] usb 3-1: Manufacturer: syz [ 813.233997][ T5831] usb 3-1: SerialNumber: syz [ 813.291152][ T5831] usb 3-1: config 0 descriptor?? [ 813.320158][ T5831] usb-storage 3-1:0.0: USB Mass Storage device detected [ 813.369946][ T5831] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 813.627039][ T5831] usb 3-1: USB disconnect, device number 17 [ 814.050268][T14450] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 814.066451][T14450] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 814.076912][T14450] overlayfs: missing 'lowerdir' [ 814.360820][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.419323][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.466349][ T72] bond0 (unregistering): Released all slaves [ 814.778405][T14140] team0: Port device team_slave_0 added [ 814.860813][T14140] team0: Port device team_slave_1 added [ 815.418896][ T29] audit: type=1326 audit(1772365881.563:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 815.529369][ T29] audit: type=1326 audit(1772365881.613:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14482 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399c799 code=0x7ffc0000 [ 815.799339][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 815.814395][T14140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.855021][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.889570][T14140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.031138][T14140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.038332][T14140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.159215][T14140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.429094][ T72] hsr_slave_0: left promiscuous mode [ 816.469460][ T72] hsr_slave_1: left promiscuous mode [ 816.478429][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.505819][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.522329][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.542315][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.706383][T14512] loop1: detected capacity change from 0 to 4096 [ 816.715470][ T72] veth1_macvtap: left promiscuous mode [ 816.729812][ T72] veth0_macvtap: left promiscuous mode [ 816.745247][ T72] veth1_vlan: left promiscuous mode [ 816.775982][ T72] veth0_vlan: left promiscuous mode [ 816.897370][T14512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.235660][T14528] xt_bpf: check failed: parse error [ 817.306855][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.714865][T14551] netlink: 'syz.3.3107': attribute type 2 has an invalid length. [ 819.442379][ T72] team0 (unregistering): Port device team_slave_1 removed [ 819.501633][ T72] team0 (unregistering): Port device team_slave_0 removed [ 819.605578][T14563] netlink: 'syz.3.3111': attribute type 10 has an invalid length. [ 819.884120][T14554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 819.892477][T14554] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 819.938548][T14554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 819.946736][T14554] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 819.993931][T14554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 820.002762][T14554] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 820.031556][T14554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 820.043481][T14554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 820.149951][T14554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 820.204268][T14554] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 820.229899][T14554] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 820.314432][T14554] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 820.323644][T14563] team0 (unregistering): Port device team_slave_0 removed [ 820.534464][T14563] team0 (unregistering): Port device team_slave_1 removed [ 821.113945][T14143] Bluetooth: hci0: command 0x0406 tx timeout [ 821.272615][ T40] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 821.290657][T14140] hsr_slave_0: entered promiscuous mode [ 821.354183][T14140] hsr_slave_1: entered promiscuous mode [ 821.425170][T14140] debugfs: 'hsr0' already exists in 'hsr' [ 821.445079][T14140] Cannot create hsr debugfs directory [ 821.484943][ T40] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 821.536803][ T40] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 821.599090][ T40] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 821.729683][ T40] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 821.802431][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.830461][ T40] usb 3-1: Product: syz [ 821.834989][ T40] usb 3-1: Manufacturer: syz [ 821.859157][ T40] usb 3-1: SerialNumber: syz [ 821.892264][ T40] usb 3-1: config 0 descriptor?? [ 821.953242][T14595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 821.999942][T14143] Bluetooth: hci1: command 0x0406 tx timeout [ 822.008009][T14595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 822.063573][ T40] usb 3-1: ucan: probing device on interface #0 [ 822.074735][T14143] Bluetooth: hci3: command 0x0406 tx timeout [ 822.074822][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 822.229235][T14143] Bluetooth: hci5: command 0x0c1a tx timeout [ 822.586930][ T40] usb 3-1: ucan: failed to retrieve device info [ 822.617608][ T40] usb 3-1: ucan: probe failed; try to update the device firmware [ 822.750286][ T40] usb 3-1: USB disconnect, device number 18 [ 823.035777][T14626] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.044670][T14626] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.198821][T14143] Bluetooth: hci0: command 0x0406 tx timeout [ 823.625851][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.639594][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.069480][T14143] Bluetooth: hci1: command 0x0406 tx timeout [ 824.151894][T14143] Bluetooth: hci3: command 0x0406 tx timeout [ 824.151980][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 824.309134][T14143] Bluetooth: hci5: command 0x0c1a tx timeout [ 824.681807][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.835364][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.229550][T14143] Bluetooth: hci3: command 0x0406 tx timeout [ 826.390003][T14143] Bluetooth: hci5: command 0x0c1a tx timeout [ 826.945935][T14660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 827.025185][ T1127] netdevsim netdevsim1 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.025560][ T1127] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.025802][ T1127] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.026041][ T1127] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.049850][T14807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 829.549654][T14140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 829.720008][T14140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 829.895557][T14140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 830.072350][T14140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 830.546817][T14839] netlink: 'syz.2.3147': attribute type 2 has an invalid length. [ 832.032882][T14140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.339000][T14140] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.514877][T12550] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.523023][T12550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.823534][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.831421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.961335][T14891] loop3: detected capacity change from 0 to 1024 [ 834.701971][T14899] loop1: detected capacity change from 0 to 2048 [ 834.719988][ T72] hfsplus: b-tree write err: -5, ino 25 [ 834.726250][ T72] hfsplus: b-tree write err: -5, ino 4 [ 834.775394][ T72] hfsplus: b-tree write err: -5, ino 2 [ 834.890378][T14899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.624610][T14140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.249813][T14989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 840.083356][T14140] veth0_vlan: entered promiscuous mode [ 840.271578][T14140] veth1_vlan: entered promiscuous mode [ 840.392951][T15010] loop1: detected capacity change from 0 to 16 [ 840.469859][T15010] erofs (device loop1): mounted with root inode @ nid 36. [ 840.813985][T14140] veth0_macvtap: entered promiscuous mode [ 840.908484][T14140] veth1_macvtap: entered promiscuous mode [ 841.205152][T14140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.459403][T14140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.671171][T14461] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.704816][T14461] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.735427][T14461] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.785670][T14461] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.269208][T14643] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 843.513977][T14643] usb 1-1: Using ep0 maxpacket: 32 [ 843.539689][T14643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 843.589646][T14643] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 843.598276][T14643] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 843.670277][T14643] usb 1-1: config 7 has no interface number 0 [ 843.677011][T14643] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 843.754643][T14643] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.831953][T14643] usb 1-1: config 7 interface 187 has no altsetting 0 [ 843.878287][T14643] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 843.927885][T14643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.975601][T14643] usb 1-1: Product: syz [ 844.000184][T14643] usb 1-1: Manufacturer: syz [ 844.005077][T14643] usb 1-1: SerialNumber: syz [ 844.440944][T14643] usb 1-1: Cannot retrieve CPort count: -71 [ 844.473960][T14643] usb 1-1: Cannot retrieve CPort count: -71 [ 844.519531][T14643] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 844.606564][T14643] usb 1-1: USB disconnect, device number 20 [ 844.875124][T15093] vivid-002: disconnect [ 844.883956][T15091] vivid-002: reconnect [ 846.793296][T15129] loop0: detected capacity change from 0 to 256 [ 847.104220][ T29] audit: type=1326 audit(1772365913.303:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 847.288021][ T29] audit: type=1326 audit(1772365913.363:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 847.416580][ T29] audit: type=1326 audit(1772365913.403:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 847.532480][T15129] FAT-fs (loop0): Directory bread(block 64) failed [ 847.540523][T15129] FAT-fs (loop0): Directory bread(block 65) failed [ 847.558521][ T29] audit: type=1326 audit(1772365913.403:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15134 comm="syz.3.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 847.599458][T15129] FAT-fs (loop0): Directory bread(block 66) failed [ 847.647118][T15129] FAT-fs (loop0): Directory bread(block 67) failed [ 847.687250][T15144] netlink: 'syz.2.3223': attribute type 3 has an invalid length. [ 847.699266][T15129] FAT-fs (loop0): Directory bread(block 68) failed [ 847.706053][T15129] FAT-fs (loop0): Directory bread(block 69) failed [ 847.785261][T15144] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 847.786752][T15129] FAT-fs (loop0): Directory bread(block 70) failed [ 847.838937][T15144] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3223'. [ 847.876006][T15129] FAT-fs (loop0): Directory bread(block 71) failed [ 847.944755][T15129] FAT-fs (loop0): Directory bread(block 72) failed [ 847.998947][T15129] FAT-fs (loop0): Directory bread(block 73) failed [ 848.155614][T15151] netlink: 'syz.1.3225': attribute type 3 has an invalid length. [ 848.896257][T15160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.821118][T15180] Invalid ELF header magic: != ELF [ 851.050450][T15200] IPv6: NLM_F_CREATE should be specified when creating new route [ 851.082805][T15201] loop1: detected capacity change from 0 to 64 [ 851.083289][T15200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 851.097080][T15200] IPv6: NLM_F_CREATE should be set when creating new route [ 851.104888][T15200] IPv6: NLM_F_CREATE should be set when creating new route [ 851.236093][T15201] Bad inode number on dev loop1: 393221 is out of range [ 851.895441][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.952320][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.097280][ T29] audit: type=1326 audit(1772365918.293:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.188954][ T29] audit: type=1326 audit(1772365918.333:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.310187][ T29] audit: type=1326 audit(1772365918.333:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.417272][ T29] audit: type=1326 audit(1772365918.383:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.453404][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.497369][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.544132][ T29] audit: type=1326 audit(1772365918.383:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.647657][ T29] audit: type=1326 audit(1772365918.383:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.768100][ T29] audit: type=1326 audit(1772365918.383:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.874493][ T29] audit: type=1326 audit(1772365918.383:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 852.990297][T15238] netlink: 'syz.2.3245': attribute type 21 has an invalid length. [ 852.999092][ T29] audit: type=1326 audit(1772365918.383:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd709d9c799 code=0x7ffc0000 [ 853.690090][T15247] loop6: detected capacity change from 0 to 512 [ 853.728299][T15247] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 853.969774][ T29] audit: type=1800 audit(1772365920.163:121): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3038" name="file1" dev="loop6" ino=1048657 res=0 errno=0 [ 853.970437][T15247] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 856.209623][T15301] netlink: 'syz.1.3262': attribute type 2 has an invalid length. [ 856.217760][T15301] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3262'. [ 856.317864][ T29] audit: type=1326 audit(1772365922.513:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.3.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 856.912607][T15311] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 856.988872][T15311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3266'. [ 857.303490][T15327] loop6: detected capacity change from 0 to 8 [ 861.938505][T15430] Cannot find del_set index 0 as target [ 863.753771][T15457] ALSA: mixer_oss: invalid OSS volume '' [ 864.133847][T15463] loop1: detected capacity change from 0 to 1024 [ 864.800335][T15475] veth5: entered promiscuous mode [ 865.613908][ T5836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 865.831849][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 865.895048][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.919023][ T5843] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 865.959369][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 865.999052][ T5836] usb 3-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac [ 866.029604][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.087483][ T5836] usb 3-1: config 0 descriptor?? [ 866.145240][ T5843] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 866.198781][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.201197][ T5836] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 866.333571][ T5843] usb 4-1: config 0 descriptor?? [ 866.640680][T14678] usb 3-1: USB disconnect, device number 19 [ 866.939681][ T5843] ath6kl: Failed to submit usb control message: -71 [ 866.950027][ T5843] ath6kl: unable to send the bmi data to the device: -71 [ 866.958254][ T5843] ath6kl: Unable to send get target info: -71 [ 867.007034][ T5843] ath6kl: Failed to init ath6kl core: -71 [ 867.079234][ T5843] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 867.185865][ T5843] usb 4-1: USB disconnect, device number 17 [ 868.041473][T15562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3327'. [ 870.983683][T15615] loop3: detected capacity change from 0 to 1024 [ 872.429771][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 872.429876][ T29] audit: type=1326 audit(1772365938.613:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.3.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 872.564287][T15646] loop0: detected capacity change from 0 to 512 [ 872.628999][ T29] audit: type=1326 audit(1772365938.663:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.3.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 872.689045][T15646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 872.770812][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3352'. [ 872.783292][ T29] audit: type=1326 audit(1772365938.683:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.3.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 872.946323][T15646] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3351: bad orphan inode 131083 [ 872.978903][ T29] audit: type=1326 audit(1772365938.693:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.3.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 873.046831][T15646] loop0: lost filesystem error report for type 5 error -117 [ 873.048753][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 873.063057][ C1] EXT4-fs (loop0): initial error at time 1772365939: ext4_orphan_get:1417 [ 873.071956][ C1] EXT4-fs (loop0): last error at time 1772365939: ext4_orphan_get:1417 [ 873.119851][ T29] audit: type=1326 audit(1772365938.693:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.3.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f786d19c799 code=0x7ffc0000 [ 873.156267][T15646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.338282][T15646] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.3351: path /667/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 873.965095][T15672] loop1: detected capacity change from 0 to 128 [ 873.975819][T15670] loop6: detected capacity change from 0 to 1024 [ 874.094078][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.225855][T15672] syz.1.3357: attempt to access beyond end of device [ 874.225855][T15672] loop1: rw=8390659, sector=104, nr_sectors = 25 limit=128 [ 874.279580][T15670] hfsplus: bad catalog entry type [ 874.357709][T15665] loop3: detected capacity change from 0 to 4096 [ 874.442382][T15665] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 874.738473][ T56] hfsplus: b-tree write err: -5, ino 25 [ 874.765789][ T56] hfsplus: b-tree write err: -5, ino 4 [ 874.804227][ T56] hfsplus: b-tree write err: -5, ino 2 [ 874.847940][T15665] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 874.926834][T15665] ntfs3(loop3): mft corrupted [ 874.965985][T15665] ntfs3(loop3): Failed to load $Extend (-22). [ 874.999023][ T5836] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 875.008373][T15665] ntfs3(loop3): Failed to initialize $Extend. [ 875.156593][T15665] ntfs3(loop3): ino=1e, mi_enum_attr [ 875.198386][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.203830][T15665] ntfs3(loop3): ino=1e, mi_enum_attr [ 875.249295][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.300290][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 875.349851][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.442003][ T5836] usb 1-1: config 0 descriptor?? [ 875.627165][T15708] GUP no longer grows the stack in syz.6.3361 (15708): 200000006000-200000008000 (200000004000) [ 875.799406][T15708] CPU: 1 UID: 0 PID: 15708 Comm: syz.6.3361 Not tainted syzkaller #0 PREEMPT(full) [ 875.799577][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.799675][T15708] Call Trace: [ 875.799731][T15708] [ 875.799786][T15708] __dump_stack+0x26/0x30 [ 875.799977][T15708] dump_stack_lvl+0x14c/0x1c0 [ 875.800179][T15708] dump_stack+0x1e/0x25 [ 875.800349][T15708] fixup_user_fault+0xcc0/0xde0 [ 875.800572][T15708] fault_in_user_writeable+0x99/0x1a0 [ 875.800769][T15708] futex_lock_pi+0x5a8/0x1530 [ 875.800984][T15708] ? futex_unqueue+0x22d/0x2c0 [ 875.801182][T15708] ? kmsan_get_metadata+0xf1/0x160 [ 875.801599][T15708] ? __se_sys_futex+0x5b8/0x740 [ 875.801822][T15708] ? __msan_warning+0x1b/0x30 [ 875.802048][T15708] ? __pfx_futex_wake_mark+0x10/0x10 [ 875.802357][T15708] do_futex+0x2e1/0x480 [ 875.802567][T15708] __se_sys_futex+0x5b8/0x740 [ 875.802768][T15708] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 875.803000][T15708] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 875.803358][T15708] __x64_sys_futex+0x114/0x1a0 [ 875.803593][T15708] x64_sys_call+0x2c48/0x3ea0 [ 875.803799][T15708] do_syscall_64+0x134/0xf80 [ 875.803961][T15708] ? clear_bhb_loop+0x50/0xa0 [ 875.804147][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.804327][T15708] RIP: 0033:0x7fdd6519c799 [ 875.804462][T15708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.804622][T15708] RSP: 002b:00007fdd65ffd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 875.804779][T15708] RAX: ffffffffffffffda RBX: 00007fdd65415fa0 RCX: 00007fdd6519c799 [ 875.804911][T15708] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 875.805017][T15708] RBP: 00007fdd65232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 875.805133][T15708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.805233][T15708] R13: 00007fdd65416038 R14: 00007fdd65415fa0 R15: 00007ffcc54ca518 [ 875.805395][T15708] [ 876.315162][ T5836] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 876.528986][ T5836] usb 1-1: USB disconnect, device number 21 [ 877.501467][T15743] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3367'. [ 877.569055][T15743] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3367'. [ 877.659998][T15743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3367'. [ 877.929142][T15750] loop3: detected capacity change from 0 to 8 [ 878.035087][T15733] fido_id[15733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 878.789844][T15766] loop1: detected capacity change from 0 to 256 [ 878.840769][T15766] exfat: Deprecated parameter 'utf8' [ 879.017568][T15766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 880.963271][T15818] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3384'. [ 881.181928][T15808] loop0: detected capacity change from 0 to 4096 [ 881.675585][T15831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3388'. [ 882.032933][T15822] loop3: detected capacity change from 0 to 4096 [ 882.171165][T15822] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 882.798939][T15822] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 884.482179][T15874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 885.062220][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.093991][T15881] loop3: detected capacity change from 0 to 2048 [ 885.373912][T15881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.391971][T15881] ext4 filesystem being mounted at /688/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.445391][T15896] usb usb8: usbfs: process 15896 (syz.0.3405) did not claim interface 0 before use [ 885.749018][T10229] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 885.772998][T15904] loop6: detected capacity change from 0 to 512 [ 885.851670][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.911277][T15904] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 885.943742][T15904] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3406: invalid indirect mapped block 2683928664 (level 1) [ 885.959566][T10229] usb 2-1: Using ep0 maxpacket: 16 [ 885.966174][T10229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.989353][T10229] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 886.075663][T10229] usb 2-1: New USB device found, idVendor=0489, idProduct=e003, bcdDevice=dd.d1 [ 886.085861][T10229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.103516][T15904] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 886.105243][T15904] EXT4-fs (loop6): Remounting filesystem read-only [ 886.115243][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 886.115355][ C1] EXT4-fs (loop6): initial error at time 1772365952: ext4_free_branches:1023: inode 13 [ 886.115547][ C1] EXT4-fs (loop6): last error at time 1772365952: ext4_free_branches:1023: inode 13 [ 886.152229][T10229] usb 2-1: Product: syz [ 886.168007][T10229] usb 2-1: Manufacturer: syz [ 886.178772][T10229] usb 2-1: SerialNumber: syz [ 886.303363][T15904] EXT4-fs (loop6): 1 truncate cleaned up [ 886.360612][T15904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.616764][T10229] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 886.617385][ T5836] usb 2-1: USB disconnect, device number 18 [ 886.882093][T15904] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 886.916877][T10229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 886.945815][T10229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.042499][T10229] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 887.110601][T10229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.172630][T10229] usb 1-1: config 0 descriptor?? [ 887.516195][T14140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.711673][T15941] loop2: detected capacity change from 0 to 256 [ 887.740882][T15936] pim6reg: entered allmulticast mode [ 887.825612][T10229] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 887.890820][T10229] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 887.915004][T10229] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 887.945853][T10229] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 887.979200][T10229] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 888.052385][T10229] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 888.060318][T15941] FAT-fs (loop2): Directory bread(block 64) failed [ 888.067098][T15941] FAT-fs (loop2): Directory bread(block 65) failed [ 888.106272][T10229] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 888.120559][T15941] FAT-fs (loop2): Directory bread(block 66) failed [ 888.127403][T15941] FAT-fs (loop2): Directory bread(block 67) failed [ 888.194492][T15941] FAT-fs (loop2): Directory bread(block 68) failed [ 888.251618][T15941] FAT-fs (loop2): Directory bread(block 69) failed [ 888.281477][T10229] usb 1-1: USB disconnect, device number 22 [ 888.331044][T15941] FAT-fs (loop2): Directory bread(block 70) failed [ 888.337944][T15941] FAT-fs (loop2): Directory bread(block 71) failed [ 888.420010][T15941] FAT-fs (loop2): Directory bread(block 72) failed [ 888.437702][T15941] FAT-fs (loop2): Directory bread(block 73) failed [ 889.165558][T15955] loop6: detected capacity change from 0 to 4096 [ 889.184738][T15969] fido_id[15969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 889.689843][T15955] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 889.760998][T15983] sp0: Synchronizing with TNC [ 889.854925][T15981] [U] è [ 890.509895][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 890.899746][T16005] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3423'. [ 891.138172][T16010] [U] ^C [ 892.666794][T16038] loop0: detected capacity change from 0 to 256 [ 892.937548][T16041] loop6: detected capacity change from 0 to 1024 [ 893.030885][T16041] hfsplus: bad catalog entry type [ 893.114389][T16038] FAT-fs (loop0): Directory bread(block 64) failed [ 893.154510][T16038] FAT-fs (loop0): Directory bread(block 65) failed [ 893.189946][T16038] FAT-fs (loop0): Directory bread(block 66) failed [ 893.229176][T16038] FAT-fs (loop0): Directory bread(block 67) failed [ 893.236491][T16038] FAT-fs (loop0): Directory bread(block 68) failed [ 893.283210][T16038] FAT-fs (loop0): Directory bread(block 69) failed [ 893.319903][T16038] FAT-fs (loop0): Directory bread(block 70) failed [ 893.358471][T16038] FAT-fs (loop0): Directory bread(block 71) failed [ 893.391741][ T13] hfsplus: b-tree write err: -5, ino 25 [ 893.398226][ T13] hfsplus: b-tree write err: -5, ino 4 [ 893.410071][T16038] FAT-fs (loop0): Directory bread(block 72) failed [ 893.416868][T16038] FAT-fs (loop0): Directory bread(block 73) failed [ 893.479292][ T13] hfsplus: b-tree write err: -5, ino 2 [ 893.789017][T16056] loop3: detected capacity change from 0 to 1024 [ 893.834186][T16056] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.932710][T16066] loop6: detected capacity change from 0 to 64 [ 894.001809][T16056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.184776][T16056] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 894.766712][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.143774][T16104] loop3: detected capacity change from 0 to 8 [ 896.282802][T16105] loop6: detected capacity change from 0 to 128 [ 896.358912][T16104] SQUASHFS error: lzo decompression failed, data probably corrupt [ 896.381767][T16104] SQUASHFS error: Failed to read block 0x0: -5 [ 896.424990][T16104] SQUASHFS error: lzo decompression failed, data probably corrupt [ 896.475629][T16104] SQUASHFS error: Failed to read block 0x0: -5 [ 896.502203][T16113] tipc: Started in network mode [ 896.507972][T16113] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 896.518990][ T29] audit: type=1800 audit(1772365962.703:136): pid=16104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3451" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 896.550336][T16113] tipc: Enabled bearer , priority 0 [ 896.632198][T16116] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3454'. [ 897.669562][ T5836] tipc: Node number set to 11578026 [ 898.225681][T16143] loop6: detected capacity change from 0 to 128 [ 898.272564][T16146] loop3: detected capacity change from 0 to 256 [ 898.407712][T16143] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 898.500494][T16143] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 898.720190][T16143] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 899.446885][T16164] loop0: detected capacity change from 0 to 1764 [ 899.874906][ T5836] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 900.079047][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 900.099220][ T5836] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.107668][ T5836] usb 2-1: config 0 has no interface number 0 [ 900.183417][ T5836] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 900.209492][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.226527][ T5836] usb 2-1: Product: syz [ 900.242600][ T5836] usb 2-1: Manufacturer: syz [ 900.247644][ T5836] usb 2-1: SerialNumber: syz [ 900.316865][ T5836] usb 2-1: config 0 descriptor?? [ 900.368996][T14678] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 900.401415][ T5836] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 900.449219][ T5836] usb 2-1: selecting invalid altsetting 1 [ 900.478494][ T5836] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 900.580853][T14678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.612027][ T5836] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 900.639692][T14678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.703892][ T5836] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 900.719159][T14678] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 900.728524][T14678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.775464][ T5836] usb 2-1: media controller created [ 900.812487][T14678] usb 4-1: config 0 descriptor?? [ 901.298403][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.324557][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.383267][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.419801][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.427238][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.499680][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.506920][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.550925][T14678] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 901.650848][T14678] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 901.682584][ T5836] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 901.734563][ T5836] zl10353_read_register: readreg error (reg=127, ret==-71) [ 901.774654][ T5836] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 901.800766][T14678] usb 4-1: USB disconnect, device number 18 [ 902.009528][T16231] loop1: detected capacity change from 0 to 64 [ 902.170018][T16242] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 902.579949][ T5836] usb 2-1: USB disconnect, device number 19 [ 903.226492][T16268] loop1: detected capacity change from 0 to 512 [ 903.280986][T16268] EXT4-fs: Ignoring removed oldalloc option [ 903.330533][T16268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 903.429152][T16268] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #11: comm syz.1.3483: corrupted in-inode xattr: invalid ea_ino [ 903.471348][T16255] fido_id[16255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 903.535487][T16268] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 903.539190][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 903.555870][ C0] EXT4-fs (loop1): initial error at time 1772365969: ext4_iget_extra_inode:5025: inode 11 [ 903.566297][ C0] EXT4-fs (loop1): last error at time 1772365969: ext4_iget_extra_inode:5025: inode 11 [ 903.580465][T16268] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3483: couldn't read orphan inode 11 (err -117) [ 903.624742][T16268] loop1: lost filesystem error report for type 5 error -117 [ 903.633395][T16268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.967302][T16281] ===================================================== [ 903.975028][T16281] BUG: KMSAN: uninit-value in nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 903.983467][T16281] nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 903.989696][T16281] nl80211_send_wiphy+0x1464/0x96d0 [ 903.995197][T16281] nl80211_dump_wiphy+0x5b6/0xc80 [ 904.000714][T16281] genl_dumpit+0x14e/0x2a0 [ 904.005510][T16281] netlink_dump+0xbaa/0x1800 [ 904.010632][T16281] netlink_recvmsg+0xc8a/0xfe0 [ 904.015677][T16281] sock_recvmsg_nosec+0x23e/0x2e0 [ 904.021528][T16281] ____sys_recvmsg+0x4e5/0x620 [ 904.026485][T16281] ___sys_recvmsg+0x20b/0x850 [ 904.031630][T16281] do_recvmmsg+0x40e/0xdf0 [ 904.036257][T16281] __x64_sys_recvmmsg+0x383/0x500 [ 904.041668][T16281] x64_sys_call+0x96d/0x3ea0 [ 904.046593][T16281] do_syscall_64+0x134/0xf80 [ 904.054145][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.060431][T16281] [ 904.063118][T16281] Uninit was stored to memory at: [ 904.068909][T16281] mac80211_hwsim_new_radio+0x60b8/0x7e20 [ 904.075020][T16281] hwsim_new_radio_nl+0x1839/0x3160 [ 904.080846][T16281] genl_family_rcv_msg_doit+0x338/0x3f0 [ 904.086679][T16281] genl_rcv_msg+0xac5/0xc00 [ 904.091808][T16281] netlink_rcv_skb+0x54d/0x680 [ 904.096934][T16281] genl_rcv+0x41/0x60 [ 904.101423][T16281] netlink_unicast+0xf04/0x12b0 [ 904.106562][T16281] netlink_sendmsg+0x10b2/0x1250 [ 904.112116][T16281] ____sys_sendmsg+0xfe7/0x1080 [ 904.117358][T16281] ___sys_sendmsg+0x271/0x3b0 [ 904.122522][T16281] __x64_sys_sendmsg+0x211/0x3e0 [ 904.128008][T16281] x64_sys_call+0x1e20/0x3ea0 [ 904.133262][T16281] do_syscall_64+0x134/0xf80 [ 904.138256][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.145030][T16281] [ 904.147207][T16287] loop6: detected capacity change from 0 to 512 [ 904.147596][T16281] Uninit was created at: [ 904.147802][T16281] __kmalloc_cache_noprof+0x35e/0x1260 [ 904.166453][T16281] hwsim_new_radio_nl+0x1705/0x3160 [ 904.172327][T16281] genl_family_rcv_msg_doit+0x338/0x3f0 [ 904.178119][T16281] genl_rcv_msg+0xac5/0xc00 [ 904.190115][T16281] netlink_rcv_skb+0x54d/0x680 [ 904.195186][T16281] genl_rcv+0x41/0x60 [ 904.199634][T16281] netlink_unicast+0xf04/0x12b0 [ 904.204865][T16281] netlink_sendmsg+0x10b2/0x1250 [ 904.210306][T16281] ____sys_sendmsg+0xfe7/0x1080 [ 904.215524][T16281] ___sys_sendmsg+0x271/0x3b0 [ 904.220693][T16281] __x64_sys_sendmsg+0x211/0x3e0 [ 904.225992][T16281] x64_sys_call+0x1e20/0x3ea0 [ 904.234113][T16281] do_syscall_64+0x134/0xf80 [ 904.239566][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.245854][T16281] [ 904.248308][T16281] CPU: 0 UID: 0 PID: 16281 Comm: syz.2.3487 Not tainted syzkaller #0 PREEMPT(full) [ 904.260097][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.270820][T16281] ===================================================== [ 904.278003][T16281] Disabling lock debugging due to kernel taint [ 904.302603][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.343333][T16281] Kernel panic - not syncing: kmsan.panic set ... [ 904.350160][T16281] CPU: 1 UID: 0 PID: 16281 Comm: syz.2.3487 Tainted: G B syzkaller #0 PREEMPT(full) [ 904.361719][T16281] Tainted: [B]=BAD_PAGE [ 904.366175][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.376664][T16281] Call Trace: [ 904.380075][T16281] [ 904.383468][T16281] __dump_stack+0x26/0x30 [ 904.388135][T16281] dump_stack_lvl+0x50/0x1c0 [ 904.393046][T16281] ? dump_stack+0x12/0x25 [ 904.397703][T16281] dump_stack+0x1e/0x25 [ 904.402106][T16281] vpanic+0x7b4/0x1430 [ 904.406433][T16281] panic+0x15d/0x160 [ 904.410600][T16281] kmsan_report+0x31a/0x320 [ 904.415519][T16281] ? __msan_warning+0x1b/0x30 [ 904.420429][T16281] ? nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 904.426321][T16281] ? nl80211_send_wiphy+0x1464/0x96d0 [ 904.431899][T16281] ? nl80211_dump_wiphy+0x5b6/0xc80 [ 904.437353][T16281] ? genl_dumpit+0x14e/0x2a0 [ 904.442327][T16281] ? netlink_dump+0xbaa/0x1800 [ 904.447515][T16281] ? netlink_recvmsg+0xc8a/0xfe0 [ 904.452630][T16281] ? sock_recvmsg_nosec+0x23e/0x2e0 [ 904.458129][T16281] ? ____sys_recvmsg+0x4e5/0x620 [ 904.463505][T16281] ? ___sys_recvmsg+0x20b/0x850 [ 904.468796][T16281] ? do_recvmmsg+0x40e/0xdf0 [ 904.473652][T16281] ? __x64_sys_recvmmsg+0x383/0x500 [ 904.479116][T16281] ? x64_sys_call+0x96d/0x3ea0 [ 904.484314][T16281] ? do_syscall_64+0x134/0xf80 [ 904.489339][T16281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.495794][T16281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.502243][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.507598][T16281] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 904.514263][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.519616][T16281] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 904.525768][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.531391][T16281] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 904.538206][T16281] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 904.544639][T16281] ? __msan_memcpy+0x61/0x1c0 [ 904.549563][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.555295][T16281] __msan_warning+0x1b/0x30 [ 904.560054][T16281] nl80211_send_pmsr_capa+0x6fe/0x1b50 [ 904.565861][T16281] ? __msan_memcpy+0x105/0x1c0 [ 904.571047][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.576433][T16281] nl80211_send_wiphy+0x1464/0x96d0 [ 904.581921][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.587304][T16281] nl80211_dump_wiphy+0x5b6/0xc80 [ 904.592693][T16281] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 904.598562][T16281] genl_dumpit+0x14e/0x2a0 [ 904.603261][T16281] ? __pfx_genl_dumpit+0x10/0x10 [ 904.608530][T16281] netlink_dump+0xbaa/0x1800 [ 904.613549][T16281] netlink_recvmsg+0xc8a/0xfe0 [ 904.618646][T16281] sock_recvmsg_nosec+0x23e/0x2e0 [ 904.623965][T16281] ? __pfx_netlink_recvmsg+0x10/0x10 [ 904.629533][T16281] ____sys_recvmsg+0x4e5/0x620 [ 904.634540][T16281] ___sys_recvmsg+0x20b/0x850 [ 904.639623][T16281] ? kmsan_internal_check_memory+0x9f/0x240 [ 904.645930][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.651453][T16281] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 904.657610][T16281] do_recvmmsg+0x40e/0xdf0 [ 904.662318][T16281] ? stack_depot_save_flags+0x35/0x790 [ 904.668010][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.673417][T16281] __x64_sys_recvmmsg+0x383/0x500 [ 904.678624][T16281] ? kmsan_get_metadata+0xf1/0x160 [ 904.684003][T16281] x64_sys_call+0x96d/0x3ea0 [ 904.689021][T16281] do_syscall_64+0x134/0xf80 [ 904.694221][T16281] ? clear_bhb_loop+0x50/0xa0 [ 904.699127][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.705266][T16281] RIP: 0033:0x7fd00f19c799 [ 904.710038][T16281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.730482][T16281] RSP: 002b:00007fd0100e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 904.739257][T16281] RAX: ffffffffffffffda RBX: 00007fd00f415fa0 RCX: 00007fd00f19c799 [ 904.747473][T16281] RDX: 0000000000000005 RSI: 0000200000005c40 RDI: 0000000000000003 [ 904.755585][T16281] RBP: 00007fd00f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 904.763828][T16281] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000000 [ 904.773094][T16281] R13: 00007fd00f416038 R14: 00007fd00f415fa0 R15: 00007ffdfa220518 [ 904.781475][T16281] [ 904.785093][T16281] Kernel Offset: disabled [ 904.789667][T16281] Rebooting in 86400 seconds..