last executing test programs: 1.965043347s ago: executing program 0 (id=7731): r0 = syz_io_uring_setup(0x301f, &(0x7f0000000080)={0x0, 0x40c8, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000040)=[0x306, 0xfffff000], 0x2) 1.669448116s ago: executing program 0 (id=7736): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001f40)=0xffffffff, 0x3) 1.399536915s ago: executing program 3 (id=7741): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000007980)={0x14, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.356170056s ago: executing program 0 (id=7742): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffc) 1.334528517s ago: executing program 2 (id=7743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) 1.135210334s ago: executing program 0 (id=7745): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x14, 0x0, 0x0}) 1.135003663s ago: executing program 3 (id=7746): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000740)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x40000) 1.134923663s ago: executing program 4 (id=7747): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x4, 0x42474752, 0xefd, 0x3, 0x2, @discrete={0x1, 0x8}}) 1.098624894s ago: executing program 2 (id=7748): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 1.005458437s ago: executing program 1 (id=7749): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "7559dc226573b59d7d8be098e840ca36520cf881ddefc61713ac8cf4ade94776", "494f4821c41e9d44e696ae6a5bf324895aecdba100", "a5ade5a86c1a95854c41e9a6b930b328bfb7f06831aeb6c98799a4e41ba11031", "942fab0d0c6c88f93ddce63b9fa533b76206010000006761f9efa28da247f351", "e9d2cd08001781000000b9398971000000800100", "31b996883fe7a5c1bf7071f7", 0x5, 0x1, 0x200009, 0x1, 0x3}}) 946.677849ms ago: executing program 3 (id=7750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x20, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x48}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}}, 0x4000) 946.008329ms ago: executing program 4 (id=7751): setreuid(0x0, 0xee00) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) 899.275321ms ago: executing program 2 (id=7752): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) 827.105243ms ago: executing program 0 (id=7753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x3}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 775.105485ms ago: executing program 1 (id=7754): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "ff00000000000000050040000000000700ef3809000000000000000000000004", 0x494e4f4b}) 752.678356ms ago: executing program 3 (id=7755): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 752.315556ms ago: executing program 4 (id=7756): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, [], [], [], [0x0, 0x7, 0x0, 0x3]}) 667.162269ms ago: executing program 2 (id=7757): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000580)={[{@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {}, {@utf8}, {@fat=@uid}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_lower}, {@utf8no}, {@numtail}, {@rodir}, {@shortname_lower}]}, 0x81, 0x2a7, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 554.315402ms ago: executing program 0 (id=7758): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000327000000270375826d4055816505e8df3d9ce9b608518d98320000286dcb14db5ad3798555a7f2970807"], 0x0, 0x0, 0x0}, 0x0) 544.673492ms ago: executing program 4 (id=7759): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0x7, 0x2}) 529.500533ms ago: executing program 1 (id=7760): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/5, 0x211000, 0x1000}, 0x20) 457.350075ms ago: executing program 3 (id=7761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4044804) 319.23993ms ago: executing program 2 (id=7762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 306.03098ms ago: executing program 4 (id=7763): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) 256.603642ms ago: executing program 1 (id=7764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) 256.224012ms ago: executing program 3 (id=7765): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$eJzs3c1vHGcdB/DvrNeOHaTUfUlaUCWsRioIi8QvcsFcGjggHypUhUOFxMVKnMbKxq1sF7kVAvN+5dA/oBx8QOICEvdIReKAgFvFzeKAKiFx6cm3oJmdtdfxS9Ybv8Tw+Viz+8w8r/PbmWd3dmVNgP9bc+NpPkiRufE31sr1zY3p1ubG9IU6u5WkTDeSZvspxVJSfJzcSHvJ58uNdfnioH4+XJy9+clnm5+215r1UpVvHFavN+v1krEkA/XzXoN9tXfrwPYON7+dKrb3sAzY1U7g4Kw93GP9KNWf8LwFngZF+31zj9HkYpLh+nNA6tmhcbqjO35HmuUAAADgnHpmK1tZy6WzHgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJ/X9/4t6aXTSYyk69/8fqrelTt9snPGYn8SDsx4AAAAAAAAAAByDL25lK2u5lPrH/YftX/ZfqR5fqB4/l/eykoUs51rWMp/VrGY5k0lGuxoaWptfXV2e7KHm1L41p/ob/+/7qwYAAAAAAAAA/2t+mrn27/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC0KJKB9lO1vNBJj6bRTDKcZKgst578vZM+J4r9Nj44/XEAAADAExnuo84zW9nKWi511h8W1TX/lep6eTjvZSmrWcxqWlnI7foaurzqb2xuTLc2N6bvb25MVx1//2Fbu51v/udIw6haTPu7h/17fqkqMZI7Way2XMutajC306hqll6qx7O97O7kJ+WYRl6v9Tiy2/Vz2dmvD/oW4Tg0jlphtKo0uB2RiXpsZUPPHh6Jx746zUN7mkxj+5ufFw7pqbNLxRFjfrFTL8kvH4n56//67fd6bOYEbEeikSoSU11H35XDY5586Y+/e+tua+ne3Tsr4yd2GJ2WR4+J6a5IvHiuI9E8YvmJKhKXt9fn8u18N+MZy5tZzmJ+kPmsZiH1zJj5+nguH0e7opTsidSNXWtvPm4kQ/Xr0p5FexnTWC5Uqfm8UtW9lMUUeSe3s5DXqr+pTOZrmclMZrte4csHvsLVvlUzbeNoZ/3VL2fnVP9VOVP3Vi/5c68Fj679llrG9dmuuHbPuaNVXveWnSg918P70RHnxuYX6kTZx8/6eds4MY9GYrIrEs8fHonfVOfGSmvp3vLd+XcPaH/9kfVXB3fSv+jrnfmkpp7yeHkuw/VMsvvoKPOe355ldsdrqP7FpZ3X2JN3ucoris6Z+p19ztQy4rNV6Sv7tjRV5b24N2+gHvk//tmVt+vzVt756wkFDIDjdfErF4dG/j3yt5GPRn4+cnfkjeFvXfj6hZeHMvinwW80JwZebbxc/CEf5Uc71/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/Vt7/4N58q7WwvH+icXDW8SaK+rY8B5VpZiSnMIzTTBTJ+rG3nLPfrx4SnZsIPmk7b914KnbnXCcGktRbfpzsHD/1S9TPzUWBc+H66v13r6+8/8FXF+/Pv73w9sLS4MzM7MTszGvT1+8sthYm2o9nPUrgJOx8HuixwuAJDwgAAAAAAAAAAAB4rP3+MeAvx/yfBl3djZ3hrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1Nx4moMpMjlxbaJc39yYbpVLJ71Tspmk0UiKHybFx8mNtJeMdjVXHNTPh4uzNz/5bPPTnbaanfKNw+r1Zr1eMpZkoH7eY6i/9m4d1F7Piu09LAN2tRM4OGv/DQAA//+iHAcm") lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 152.154325ms ago: executing program 2 (id=7766): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x4008661e, &(0x7f0000000040)) 128.154316ms ago: executing program 1 (id=7767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 45.649639ms ago: executing program 1 (id=7768): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) 0s ago: executing program 4 (id=7769): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x220, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) kernel console output (not intermixed with test programs): etected capacity change from 0 to 256 [ 601.711162][T16687] FAT-fs (loop4): Directory bread(block 64) failed [ 601.727842][T16687] FAT-fs (loop4): Directory bread(block 65) failed [ 601.736458][T16687] FAT-fs (loop4): Directory bread(block 66) failed [ 601.753774][ T8495] usb 2-1: Using ep0 maxpacket: 8 [ 601.764761][T16687] FAT-fs (loop4): Directory bread(block 67) failed [ 601.772450][ T8495] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 601.793612][ T8495] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.805225][T16687] FAT-fs (loop4): Directory bread(block 68) failed [ 601.819207][T16687] FAT-fs (loop4): Directory bread(block 69) failed [ 601.825914][T16687] FAT-fs (loop4): Directory bread(block 70) failed [ 601.840743][ T8495] usb 2-1: config 0 has no interface number 0 [ 601.855774][ T8495] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.887905][T16687] FAT-fs (loop4): Directory bread(block 71) failed [ 601.906387][ T8495] usb 2-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 601.926170][T16687] FAT-fs (loop4): Directory bread(block 72) failed [ 601.943847][T16687] FAT-fs (loop4): Directory bread(block 73) failed [ 601.963666][ T8495] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 601.996115][ T8495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.050827][ T8495] usb 2-1: Product: syz [ 602.055085][ T8495] usb 2-1: Manufacturer: syz [ 602.082768][ T8495] usb 2-1: SerialNumber: syz [ 602.111420][ T8495] usb 2-1: config 0 descriptor?? [ 602.155293][ T8495] ttusb_dec_send_command: command bulk message failed: error -8 [ 602.186499][ T8495] ttusb-dec: probe of 2-1:0.113 failed with error -8 [ 602.208717][ T8495] usbhid 2-1:0.113: couldn't find an input interrupt endpoint [ 602.395953][ T8495] usb 2-1: USB disconnect, device number 58 [ 602.690358][T16720] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 602.731320][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 602.784745][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 602.814727][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 602.830992][T16719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.957611][T16722] loop0: detected capacity change from 0 to 4096 [ 602.987121][T16722] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 603.124784][T16722] ntfs3: loop0: failed to convert "c46c" to cp861 [ 603.464500][ T8302] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 603.565369][T16745] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 603.670390][ T8302] usb 2-1: Using ep0 maxpacket: 16 [ 603.677788][ T8302] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 603.685692][T16724] loop3: detected capacity change from 0 to 32768 [ 603.710559][ T8302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.740980][ T8302] usb 2-1: config 0 descriptor?? [ 603.802400][ T8302] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 603.821338][T16724] JBD2: Ignoring recovery information on journal [ 603.981661][T16724] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 604.030789][ T8302] usb 2-1: Detected FT232B [ 604.254312][ T8302] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 604.270332][ T8302] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 604.301038][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 604.308383][ T8302] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 604.370901][ T8302] usb 2-1: USB disconnect, device number 59 [ 604.398554][ T8302] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 604.424280][ T8302] ftdi_sio 2-1:0.0: device disconnected [ 604.970950][T16783] misc userio: Invalid payload size [ 605.483911][T16806] loop0: detected capacity change from 0 to 512 [ 605.521099][T16806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 605.640992][T16806] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 605.685292][T16806] ext4 filesystem being mounted at /1060/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.766982][T16806] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.5415: Abort forced by user [ 605.833075][T16806] EXT4-fs (loop0): Remounting filesystem read-only [ 605.887172][T16806] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 605.938969][T16787] loop4: detected capacity change from 0 to 32768 [ 605.994510][T16787] (syz.4.5405,16787,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 606.030773][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 606.032545][T16787] (syz.4.5405,16787,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 606.106548][T16787] JBD2: Ignoring recovery information on journal [ 606.240772][T16787] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 606.272204][ T8302] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 606.374726][T16787] (syz.4.5405,16787,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC. [ 606.400900][T16787] (syz.4.5405,16787,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9 [ 606.427874][T16787] (syz.4.5405,16787,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 606.471163][T16787] (syz.4.5405,16787,1):ocfs2_quota_read:201 ERROR: status = -5 [ 606.479709][T16787] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 2 [ 606.500660][ T8302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 606.501167][T16787] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 60929 [ 606.519742][ T8302] usb 3-1: not running at top speed; connect to a high speed hub [ 606.543251][ T8302] usb 3-1: config 4 has an invalid interface number: 32 but max is 0 [ 606.563117][ T8302] usb 3-1: config 4 has no interface number 0 [ 606.573280][T16787] (syz.4.5405,16787,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 606.597064][ T8302] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 606.629546][ T8302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.637617][ T8302] usb 3-1: Product: syz [ 606.671565][ T8302] usb 3-1: Manufacturer: syz [ 606.687270][ T8302] usb 3-1: SerialNumber: syz [ 606.746556][T16833] loop1: detected capacity change from 0 to 512 [ 606.905614][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 607.011067][ T8302] usb 3-1: Found UVC 0.02 device syz (17dc:0202) [ 607.017668][ T8302] usb 3-1: No valid video chain found. [ 607.069075][ T8302] usb 3-1: USB disconnect, device number 57 [ 607.439645][T16847] tmpfs: Bad value for 'mpol' [ 607.664517][T16853] loop4: detected capacity change from 0 to 64 [ 607.754251][T16855] loop2: detected capacity change from 0 to 256 [ 607.853455][T16855] FAT-fs (loop2): Directory bread(block 64) failed [ 607.860075][T16855] FAT-fs (loop2): Directory bread(block 65) failed [ 607.907187][T16855] FAT-fs (loop2): Directory bread(block 66) failed [ 607.913809][T16855] FAT-fs (loop2): Directory bread(block 67) failed [ 607.931621][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5439'. [ 607.954190][T16855] FAT-fs (loop2): Directory bread(block 68) failed [ 608.034083][T16855] FAT-fs (loop2): Directory bread(block 69) failed [ 608.062009][T16855] FAT-fs (loop2): Directory bread(block 70) failed [ 608.068634][T16855] FAT-fs (loop2): Directory bread(block 71) failed [ 608.133643][T16855] FAT-fs (loop2): Directory bread(block 72) failed [ 608.169359][T16855] FAT-fs (loop2): Directory bread(block 73) failed [ 608.672781][T16881] printk: syz.3.5447 (16881): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 608.971998][T16890] netlink: 'syz.4.5452': attribute type 21 has an invalid length. [ 609.381780][T16907] loop0: detected capacity change from 0 to 256 [ 609.466466][T16907] FAT-fs (loop0): Directory bread(block 64) failed [ 609.485269][T16907] FAT-fs (loop0): Directory bread(block 65) failed [ 609.506408][T16907] FAT-fs (loop0): Directory bread(block 66) failed [ 609.528779][T16907] FAT-fs (loop0): Directory bread(block 67) failed [ 609.556746][T16907] FAT-fs (loop0): Directory bread(block 68) failed [ 609.584265][T16907] FAT-fs (loop0): Directory bread(block 69) failed [ 609.619880][T16907] FAT-fs (loop0): Directory bread(block 70) failed [ 609.648087][T16907] FAT-fs (loop0): Directory bread(block 71) failed [ 609.678711][T16907] FAT-fs (loop0): Directory bread(block 72) failed [ 609.702383][T16907] FAT-fs (loop0): Directory bread(block 73) failed [ 610.495947][ T8626] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 610.571453][T16946] xt_bpf: check failed: parse error [ 610.704356][ T8626] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.725937][ T8626] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.761251][ T8626] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.795082][ T8626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.829004][ T8626] usb 3-1: Product: syz [ 610.844953][ T8626] usb 3-1: Manufacturer: syz [ 610.849707][ T8626] usb 3-1: SerialNumber: syz [ 611.035717][T16966] loop4: detected capacity change from 0 to 256 [ 611.323954][ T8626] usb 3-1: 0:2 : does not exist [ 611.342244][ T27] audit: type=1326 audit(1779923861.608:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439f39ce59 code=0x7ffc0000 [ 611.404467][ T27] audit: type=1326 audit(1779923861.664:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439f39ce59 code=0x7ffc0000 [ 611.428579][ T8626] usb 3-1: USB disconnect, device number 58 [ 611.450008][ T27] audit: type=1326 audit(1779923861.710:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f439f39e6c7 code=0x7ffc0000 [ 611.475781][ T27] audit: type=1326 audit(1779923861.710:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f439f35d68e code=0x7ffc0000 [ 611.514329][ T27] audit: type=1326 audit(1779923861.710:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f439f35d68e code=0x7ffc0000 [ 611.628913][ T27] audit: type=1326 audit(1779923861.710:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f439f35d68e code=0x7ffc0000 [ 611.742539][ T27] audit: type=1326 audit(1779923861.710:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f439f35d68e code=0x7ffc0000 [ 611.831735][ T27] audit: type=1326 audit(1779923861.710:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.0.5494" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439f39ce59 code=0x7ffc0000 [ 612.682045][T16987] loop1: detected capacity change from 0 to 32768 [ 612.779997][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 612.779997][T16987] [ 612.848966][ T27] audit: type=1326 audit(1779923863.002:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.4.5518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51019ce59 code=0x7ffc0000 [ 612.912962][T16987] xtLookup: xtSearch returned -5 [ 612.918001][T16987] free_index: error reading directory table [ 612.942871][ T27] audit: type=1326 audit(1779923863.030:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.4.5518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51019ce59 code=0x7ffc0000 [ 612.944676][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 612.944676][T16987] [ 613.090836][ T27] audit: type=1326 audit(1779923863.030:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.4.5518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe51019ce59 code=0x7ffc0000 [ 613.107200][T16987] xtLookup: xtSearch returned -5 [ 613.150437][T16987] free_index: error reading directory table [ 613.156426][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.156426][T16987] [ 613.239962][ T27] audit: type=1326 audit(1779923863.030:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.4.5518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51019ce59 code=0x7ffc0000 [ 613.264123][T16987] xtLookup: xtSearch returned -5 [ 613.264142][T16987] free_index: error reading directory table [ 613.264155][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264155][T16987] [ 613.264193][T16987] xtLookup: xtSearch returned -5 [ 613.264203][T16987] free_index: error reading directory table [ 613.264213][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264213][T16987] [ 613.264245][T16987] xtLookup: xtSearch returned -5 [ 613.264254][T16987] free_index: error reading directory table [ 613.264264][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264264][T16987] [ 613.264292][T16987] xtLookup: xtSearch returned -5 [ 613.264301][T16987] add_index: get/read_metapage failed! [ 613.264314][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264314][T16987] [ 613.264341][T16987] xtLookup: xtSearch returned -5 [ 613.264352][T16987] free_index: error reading directory table [ 613.264361][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264361][T16987] [ 613.264389][T16987] xtLookup: xtSearch returned -5 [ 613.264399][T16987] free_index: error reading directory table [ 613.264408][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264408][T16987] [ 613.264435][T16987] xtLookup: xtSearch returned -5 [ 613.264445][T16987] free_index: error reading directory table [ 613.264454][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264454][T16987] [ 613.264481][T16987] xtLookup: xtSearch returned -5 [ 613.264491][T16987] free_index: error reading directory table [ 613.264500][T16987] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.264500][T16987] [ 613.264529][T16987] xtLookup: xtSearch returned -5 [ 613.264539][T16987] free_index: error reading directory table [ 613.608843][T17036] netlink: del zone limit has 8 unknown bytes [ 614.027936][ T27] audit: type=1326 audit(1779923863.030:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.4.5518" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51019ce59 code=0x7ffc0000 [ 614.371007][T17066] overlayfs: missing 'lowerdir' [ 615.160466][T17097] netlink: 'syz.0.5555': attribute type 1 has an invalid length. [ 616.192210][T17141] xt_bpf: check failed: parse error [ 616.360392][T17145] xt_NFQUEUE: number of total queues is 0 [ 616.449091][T17149] netlink: 'syz.4.5581': attribute type 6 has an invalid length. [ 616.686365][T17158] loop4: detected capacity change from 0 to 256 [ 616.837126][T17155] loop3: detected capacity change from 0 to 8192 [ 616.874327][T17155] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 616.888236][T17155] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 616.897502][T17155] REISERFS (device loop3): using ordered data mode [ 616.956538][T17155] reiserfs: using flush barriers [ 616.963641][T17155] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 616.981329][T17155] REISERFS (device loop3): checking transaction log (loop3) [ 617.007516][T17155] REISERFS (device loop3): Using r5 hash to sort names [ 617.019941][T17155] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 617.072192][T17136] loop2: detected capacity change from 0 to 40427 [ 617.120128][T17136] F2FS-fs (loop2): invalid crc value [ 617.150924][T17136] F2FS-fs (loop2): Found nat_bits in checkpoint [ 617.334923][T17136] F2FS-fs (loop2): Start checkpoint disabled! [ 617.413835][T17136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 617.445716][T17136] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 617.922240][T17187] loop4: detected capacity change from 0 to 16 [ 617.975173][T17187] erofs: (device loop4): mounted with root inode @ nid 36. [ 618.050910][T17187] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD2 format 3 for nid 83, please upgrade kernel [ 618.093248][T17187] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-95] [ 619.012195][T17217] netlink: 'syz.0.5612': attribute type 28 has an invalid length. [ 619.035891][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5612'. [ 619.108458][T17185] loop2: detected capacity change from 0 to 40427 [ 619.138893][T17185] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 619.166445][T17185] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 619.218808][T17185] F2FS-fs (loop2): invalid crc value [ 619.299726][T17185] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 619.465157][T17199] loop4: detected capacity change from 0 to 32768 [ 619.576586][T17199] ialloc: diAlloc returned -5! [ 619.583663][T17185] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 619.602056][T17185] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 620.596650][ T8304] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 620.819389][ T8304] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 620.844704][ T8304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.869668][ T8304] usb 2-1: Product: syz [ 620.873959][ T8304] usb 2-1: Manufacturer: syz [ 620.891008][ T8304] usb 2-1: SerialNumber: syz [ 620.904670][ T8304] usb 2-1: config 0 descriptor?? [ 620.932639][ T8304] hub 2-1:0.0: bad descriptor, ignoring hub [ 620.943516][ T8304] hub: probe of 2-1:0.0 failed with error -5 [ 620.965329][ T8304] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 621.048988][T17265] xt_CONNSECMARK: invalid mode: 0 [ 621.302525][ T8304] usb 2-1: USB disconnect, device number 60 [ 621.320193][ T8304] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 621.562209][T17280] loop0: detected capacity change from 0 to 4096 [ 621.578739][T17280] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 621.648322][T17280] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 621.796131][ T1079] block nbd3: Attempted send on invalid socket [ 621.802385][ T1079] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.823578][T17285] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 622.630026][T17314] loop1: detected capacity change from 0 to 1024 [ 622.777568][T17314] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 622.803699][T17314] hfsplus: xattr search failed [ 622.829398][T17320] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5663'. [ 623.220129][T17300] loop0: detected capacity change from 0 to 32768 [ 623.264190][T17300] jfs_strtoUCS: char2uni returned -22. [ 623.285004][T17300] charset = cp949, char = 0xd4 [ 623.590474][T17339] loop3: detected capacity change from 0 to 2048 [ 623.648461][T17339] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 623.725278][T17348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 624.135084][T17366] loop4: detected capacity change from 0 to 64 [ 624.251451][T17359] loop2: detected capacity change from 0 to 4096 [ 624.319752][T17359] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 624.378792][T17369] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.5687'. [ 624.420597][T17359] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 625.031637][T17388] x_tables: unsorted underflow at hook 1 [ 625.096180][T17390] loop1: detected capacity change from 0 to 256 [ 625.497690][T17400] netlink: 6716 bytes leftover after parsing attributes in process `syz.1.5702'. [ 625.549757][T17362] loop0: detected capacity change from 0 to 40427 [ 625.589653][T17362] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 625.607431][T17362] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 625.641808][T17362] F2FS-fs (loop0): invalid crc value [ 625.676516][T17362] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 625.936579][T17362] F2FS-fs (loop0): recover fsync data on readonly fs [ 625.973151][T17362] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 625.996275][T17362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 626.181390][T17362] F2FS-fs (loop0): Corrupted max_depth of 3: 49665 [ 626.212231][T17423] IPv6: sit1: Disabled Multicast RS [ 627.034318][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5717'. [ 627.300169][ T4468] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 627.524884][ T4468] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 627.563076][ T4468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.595033][ T4468] usb 4-1: config 0 descriptor?? [ 627.622023][ T4468] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 627.655468][T17477] binder: 17473:17477 ioctl c0046209 9999999999999999 returned -22 [ 627.674493][T17476] loop1: detected capacity change from 0 to 2048 [ 627.797328][T17476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 627.981204][T17488] loop2: detected capacity change from 0 to 4096 [ 628.002535][T17488] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 628.011772][T17488] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 628.036925][T17488] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 628.054749][ T4468] gspca_sunplus: reg_w_riv err -71 [ 628.061721][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 628.067736][ T4468] sunplus: probe of 4-1:0.0 failed with error -71 [ 628.085651][T17488] ntfs: volume version 3.1. [ 628.090545][ T4468] usb 4-1: USB disconnect, device number 64 [ 628.377593][ T4283] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 628.745247][T17507] loop4: detected capacity change from 0 to 1024 [ 629.448428][T17523] loop2: detected capacity change from 0 to 4096 [ 629.466111][T17523] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 630.025048][T17541] loop4: detected capacity change from 0 to 136 [ 630.074270][T17541] Attempt to read inode for relocated directory [ 630.120725][T17541] syz.4.5770: attempt to access beyond end of device [ 630.120725][T17541] loop4: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 630.214871][T17541] syz.4.5770: attempt to access beyond end of device [ 630.214871][T17541] loop4: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 630.272358][ T27] audit: type=1800 audit(1779923879.081:186): pid=17541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5770" name="file1" dev="loop4" ino=1487 res=0 errno=0 [ 630.559673][T17555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.617818][T17556] loop2: detected capacity change from 0 to 512 [ 630.659612][T17556] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.5776: iget: bad i_size value: 38620345925642 [ 630.708256][T17556] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5776: couldn't read orphan inode 15 (err -117) [ 630.731162][T17563] loop3: detected capacity change from 0 to 64 [ 630.739755][T17556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 630.928714][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 631.226128][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'. [ 631.443311][T17590] trusted_key: encrypted_key: keylen parameter is missing [ 631.938986][T17609] netlink: 572 bytes leftover after parsing attributes in process `syz.2.5804'. [ 631.965169][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5804'. [ 632.127315][T17615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5806'. [ 632.168389][T17615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5806'. [ 632.411259][T17627] netlink: 'syz.2.5812': attribute type 10 has an invalid length. [ 632.429332][T17627] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 632.737737][T17639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5819'. [ 633.590354][T17668] ieee802154 phy0 wpan0: encryption failed: -90 [ 633.644615][T17670] loop2: detected capacity change from 0 to 2048 [ 633.687155][T17670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 634.228998][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5843'. [ 635.416834][T17732] loop2: detected capacity change from 0 to 512 [ 635.435080][T17732] EXT4-fs: Ignoring removed orlov option [ 635.500119][T17732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 635.554775][T17732] ext4 filesystem being mounted at /1192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.719921][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 636.647525][T17780] loop3: detected capacity change from 0 to 8 [ 636.672898][T17780] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 636.817636][T17784] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5887'. [ 637.092203][T17788] loop2: detected capacity change from 0 to 8192 [ 637.122929][T17788] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 637.161932][T17788] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 637.171718][T17788] REISERFS (device loop2): using ordered data mode [ 637.178394][T17788] reiserfs: using flush barriers [ 637.185775][T17788] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 637.203060][T17788] REISERFS (device loop2): checking transaction log (loop2) [ 637.348610][T17788] REISERFS (device loop2): Using tea hash to sort names [ 637.365134][T17788] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 637.768209][T17810] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 638.267086][T17830] loop2: detected capacity change from 0 to 256 [ 638.323308][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5910'. [ 638.380158][T17830] FAT-fs (loop2): Directory bread(block 64) failed [ 638.405294][T17830] FAT-fs (loop2): Directory bread(block 65) failed [ 638.411997][T17830] FAT-fs (loop2): Directory bread(block 66) failed [ 638.459140][T17830] FAT-fs (loop2): Directory bread(block 67) failed [ 638.465861][T17830] FAT-fs (loop2): Directory bread(block 68) failed [ 638.499224][T17830] FAT-fs (loop2): Directory bread(block 69) failed [ 638.546315][T17830] FAT-fs (loop2): Directory bread(block 70) failed [ 638.553018][T17830] FAT-fs (loop2): Directory bread(block 71) failed [ 638.587236][T17830] FAT-fs (loop2): Directory bread(block 72) failed [ 638.610945][T17830] FAT-fs (loop2): Directory bread(block 73) failed [ 639.048236][T17853] loop2: detected capacity change from 0 to 64 [ 639.349810][T17857] loop3: detected capacity change from 0 to 4096 [ 639.601287][T17857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 639.667951][T17873] xt_socket: unknown flags 0x50 [ 639.817353][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 639.858048][T17877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5931'. [ 640.258104][ T4275] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 640.409394][ T8304] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 640.615109][ T8304] usb 2-1: Using ep0 maxpacket: 32 [ 640.622217][ T8304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.672059][ T8304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.691100][ T8304] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.717676][ T8304] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 640.745198][ T8304] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 640.753728][ T8304] usb 2-1: Product: syz [ 640.787432][ T8304] usb 2-1: Manufacturer: syz [ 640.832456][ T8304] usb 2-1: SerialNumber: syz [ 640.857744][ T8304] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input31 [ 641.023663][T17923] loop4: detected capacity change from 0 to 256 [ 641.143842][ T8495] usb 2-1: USB disconnect, device number 61 [ 641.172807][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5956'. [ 641.184929][ T8495] appletouch 2-1:1.0: input: appletouch disconnected [ 641.635957][T17942] loop3: detected capacity change from 0 to 4096 [ 641.649966][T17942] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 641.661353][T17942] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 641.670736][T17942] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 641.695418][T17942] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 641.759996][T17942] ntfs: volume version 3.1. [ 641.846928][T17942] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 641.861434][T17942] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 642.402888][ T8626] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 642.611828][ T8626] usb 3-1: unable to get BOS descriptor or descriptor too short [ 642.632024][ T8626] usb 3-1: not running at top speed; connect to a high speed hub [ 642.663939][ T8626] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.703151][ T8626] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.745131][ T8626] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.762416][ T8626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.779386][ T8626] usb 3-1: Product: syz [ 642.787690][T17981] netlink: 'syz.1.5983': attribute type 24 has an invalid length. [ 642.795859][ T8626] usb 3-1: Manufacturer: syz [ 642.800534][ T8626] usb 3-1: SerialNumber: syz [ 643.095824][ T8626] usb 3-1: 0:1 : does not exist [ 643.106337][ T8626] usb 3-1: 0:2 : does not exist [ 643.151378][ T8626] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 643.179118][T17993] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 643.205133][ T8626] usb 3-1: USB disconnect, device number 59 [ 643.478410][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.524895][ T27] audit: type=1326 audit(1779923891.311:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 643.550053][ T27] audit: type=1326 audit(1779923891.311:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 643.664326][ T27] audit: type=1326 audit(1779923891.366:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 643.720035][ T27] audit: type=1326 audit(1779923891.366:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 643.735687][T18009] netlink: 'syz.4.5997': attribute type 21 has an invalid length. [ 643.847748][T18013] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5999'. [ 644.290728][T18025] loop4: detected capacity change from 0 to 4096 [ 644.385539][T18025] ntfs: volume version 3.1. [ 644.871403][T18019] loop1: detected capacity change from 0 to 32768 [ 644.880197][ T8304] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 644.922823][T18019] (syz.1.6002,18019,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 644.969981][T18019] (syz.1.6002,18019,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 645.021490][T18019] JBD2: Ignoring recovery information on journal [ 645.100469][ T8304] usb 3-1: Using ep0 maxpacket: 32 [ 645.109891][ T8304] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 645.119959][ T8304] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 645.130926][ T8304] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 645.144264][ T8304] usb 3-1: config 0 interface 0 has no altsetting 1 [ 645.156704][ T8304] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 645.166692][ T8304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.174997][ T8304] usb 3-1: SerialNumber: syz [ 645.181635][ T8304] usb 3-1: config 0 descriptor?? [ 645.202320][ T8304] usb-storage 3-1:0.0: USB Mass Storage device detected [ 645.209986][T18019] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 645.221757][ T8304] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 645.259085][T18047] loop4: detected capacity change from 0 to 2048 [ 645.301007][T18047] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 645.343333][T18047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.393137][ T4468] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 645.436760][ T8626] usb 3-1: USB disconnect, device number 60 [ 645.486723][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 645.596206][ T4468] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 645.623860][ T4468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.623949][T18061] usb usb8: usbfs: process 18061 (syz.4.6021) did not claim interface 0 before use [ 645.655122][ T4468] usb 4-1: config 0 descriptor?? [ 646.103415][ T4468] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 646.121021][ T4468] hackrf 4-1:0.0: Could not detect board [ 646.128971][ T4468] hackrf: probe of 4-1:0.0 failed with error -71 [ 646.145334][ T4468] usb 4-1: USB disconnect, device number 65 [ 646.318666][T18081] tmpfs: Bad value for 'mpol' [ 646.689588][T18099] loop4: detected capacity change from 0 to 1024 [ 646.788780][T18099] hfsplus: xattr search failed [ 646.924893][T18103] loop2: detected capacity change from 0 to 4096 [ 646.987954][T18106] usb usb9: usbfs: process 18106 (syz.3.6040) did not claim interface 7 before use [ 647.003267][T18103] ntfs: volume version 3.1. [ 647.269062][T18113] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 647.554963][T18126] loop4: detected capacity change from 0 to 512 [ 647.612899][T18126] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 647.662441][T18126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 647.687486][T18126] EXT4-fs (loop4): orphan cleanup on readonly fs [ 647.697552][T18126] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.6049: bad orphan inode 267 [ 647.714849][T18126] EXT4-fs (loop4): Remounting filesystem read-only [ 647.721566][T18126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 647.772295][T18126] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.6049: dx entry: limit 0 != root limit 125 [ 647.852508][T18126] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.6049: Corrupt directory, running e2fsck is recommended [ 648.022483][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 648.349968][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6061'. [ 648.362209][T18152] loop3: detected capacity change from 0 to 512 [ 648.441271][T18152] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 648.496666][T18160] loop4: detected capacity change from 0 to 64 [ 648.504987][T18152] ext4 filesystem being mounted at /1206/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.614054][T18152] __quota_error: 13 callbacks suppressed [ 648.614073][T18152] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 648.641535][T18164] loop1: detected capacity change from 0 to 64 [ 648.701919][T18152] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 648.741000][T18152] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.6059: Failed to acquire dquot type 0 [ 649.039288][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 649.227132][T18177] loop0: detected capacity change from 0 to 4096 [ 649.298784][T18182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 649.352529][T18177] syz.0.6071: attempt to access beyond end of device [ 649.352529][T18177] loop0: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 649.430555][T18177] syz.0.6071: attempt to access beyond end of device [ 649.430555][T18177] loop0: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 649.457968][T18188] Illegal XDP return value 2347212844 on prog (id 258) dev N/A, expect packet loss! [ 649.474704][ T27] audit: type=1800 audit(1779923896.802:192): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6071" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 649.740475][T18195] comedi comedi4: bad chanlist[0]=0x04000009 chan=9 range length=2 [ 650.074306][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.288723][T18215] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 650.312024][T18215] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 650.581051][T18229] loop0: detected capacity change from 0 to 4096 [ 650.592554][T18229] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 650.676025][T18229] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 650.734554][T18229] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 650.754150][T18229] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 650.787562][T18229] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 650.838350][T18229] ntfs: volume version 3.1. [ 650.862532][T18229] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 650.903891][T18229] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 651.007916][T18238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6098'. [ 651.511766][T18251] netlink: 'syz.0.6104': attribute type 1 has an invalid length. [ 651.520553][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6104'. [ 651.758201][T18257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6109'. [ 651.901818][T18262] loop1: detected capacity change from 0 to 736 [ 652.128168][T18269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.257829][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6116'. [ 652.582083][T18292] loop2: detected capacity change from 0 to 512 [ 652.620394][T18284] loop1: detected capacity change from 0 to 4096 [ 652.668897][T18284] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 652.710025][T18292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 652.740416][T18292] ext4 filesystem being mounted at /1250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.939795][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 653.473750][T18314] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6132'. [ 654.088554][T18306] loop1: detected capacity change from 0 to 32768 [ 654.129012][T18306] [ 654.129012][T18306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.129012][T18306] [ 654.209897][T18306] [ 654.209897][T18306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.209897][T18306] [ 654.258974][T18306] [ 654.258974][T18306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.258974][T18306] [ 654.288529][T18306] [ 654.288529][T18306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.288529][T18306] [ 654.323492][T18306] [ 654.323492][T18306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.323492][T18306] [ 654.409158][T18306] [ 654.409158][T18306] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.409158][T18306] [ 654.470957][ T107] [ 654.470957][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.470957][ T107] [ 654.557587][ T4273] [ 654.557587][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.557587][ T4273] [ 654.603369][ T4273] [ 654.603369][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.603369][ T4273] [ 655.414644][ T4468] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 655.574662][T18386] sock: sock_timestamping_bind_phc: sock not bind to device [ 655.625913][ T8495] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 655.654454][ T4468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.675135][ T4468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 655.684107][ T4468] usb 5-1: config 1 has no interface number 0 [ 655.712354][ T4468] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.743441][ T4468] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.753248][ T4468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.762145][ T4468] usb 5-1: Product: syz [ 655.766485][ T4468] usb 5-1: Manufacturer: syz [ 655.771147][ T4468] usb 5-1: SerialNumber: syz [ 655.796088][ T4468] usb 5-1: selecting invalid altsetting 1 [ 655.853760][ T8495] usb 4-1: Using ep0 maxpacket: 16 [ 655.864219][ T8495] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 655.887989][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.913094][ T8495] usb 4-1: Product: syz [ 655.917338][ T8495] usb 4-1: Manufacturer: syz [ 655.937735][ T8495] usb 4-1: SerialNumber: syz [ 655.979295][ T8495] usb 4-1: config 0 descriptor?? [ 655.996772][ T8495] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 656.235637][ T4468] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 656.252732][ T4468] cdc_ncm 5-1:1.1: bind() failure [ 656.297496][ T4468] usb 5-1: USB disconnect, device number 58 [ 656.448739][ T8495] ssu100: probe of 4-1:0.0 failed with error -71 [ 656.476594][ T8495] usb 4-1: USB disconnect, device number 66 [ 656.608757][T18402] loop2: detected capacity change from 0 to 32768 [ 656.636582][T18408] loop1: detected capacity change from 0 to 4096 [ 656.649123][T18402] (syz.2.6175,18402,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.669868][T18402] (syz.2.6175,18402,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.686294][T18408] __ntfs_error: 18 callbacks suppressed [ 656.686312][T18408] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 656.707481][T18408] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 656.725172][T18402] JBD2: Ignoring recovery information on journal [ 656.731925][T18408] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 656.743453][T18408] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 656.756998][T18408] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 656.770584][T18408] ntfs: volume version 3.1. [ 656.784017][T18408] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 656.815062][T18408] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 656.831978][T18408] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 656.845064][T18402] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 656.874710][T18408] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 656.941551][T18408] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 657.022998][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 657.465656][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.472065][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.741817][T18435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 657.787436][T18436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6191'. [ 657.830819][T18436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6191'. [ 657.923319][T18439] SET target dimension over the limit! [ 658.221144][T18445] loop4: detected capacity change from 0 to 764 [ 658.278887][T18445] rock: directory entry would overflow storage [ 658.285133][T18445] rock: sig=0x4654, size=5, remaining=4 [ 658.372000][T18451] netlink: 'syz.3.6198': attribute type 12 has an invalid length. [ 658.391196][T18451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6198'. [ 658.512836][T18453] loop1: detected capacity change from 0 to 1024 [ 658.530755][T18430] loop2: detected capacity change from 0 to 40427 [ 658.576078][T18430] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 658.632559][T18430] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 658.641932][T18430] F2FS-fs (loop2): invalid crc value [ 658.659295][T18430] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 658.860196][T18430] F2FS-fs (loop2): Start checkpoint disabled! [ 658.888843][T18430] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 658.901185][T18430] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 660.021058][T18502] netlink: 'syz.0.6220': attribute type 1 has an invalid length. [ 660.028861][T18502] netlink: 'syz.0.6220': attribute type 2 has an invalid length. [ 660.061941][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'. [ 660.636933][T18523] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 660.645270][T18523] overlayfs: missing 'lowerdir' [ 660.748935][T18531] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 660.756966][T18531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6235'. [ 661.426234][T18559] netlink: 'syz.0.6246': attribute type 7 has an invalid length. [ 661.459863][T18559] netlink: 'syz.0.6246': attribute type 8 has an invalid length. [ 661.603557][T18558] loop2: detected capacity change from 0 to 4096 [ 662.167612][T18582] loop3: detected capacity change from 0 to 8 [ 662.251657][T18582] SQUASHFS error: Failed to read block 0x6fc: -5 [ 662.279117][T18582] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 662.863497][T18608] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 662.947947][T18612] loop1: detected capacity change from 0 to 164 [ 663.046387][T18614] loop2: detected capacity change from 0 to 512 [ 663.103128][T18616] loop3: detected capacity change from 0 to 256 [ 663.118221][ T3600] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 663.150152][T18616] exfat: Deprecated parameter 'utf8' [ 663.163103][T18616] exfat: Deprecated parameter 'namecase' [ 663.176899][T18616] exfat: Deprecated parameter 'namecase' [ 663.183906][T18614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 663.209657][T18618] loop0: detected capacity change from 0 to 512 [ 663.215045][T18616] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 663.267430][T18614] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 663.274596][T18614] ext4 filesystem being remounted at /1280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.320142][T18618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 663.356226][ T3600] usb 5-1: Using ep0 maxpacket: 32 [ 663.365486][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 663.373753][ T3600] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 663.387239][T18618] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 663.404977][ T3600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.424382][ T3600] usb 5-1: Product: syz [ 663.430232][ T3600] usb 5-1: Manufacturer: syz [ 663.448259][T18618] EXT4-fs (loop0): 1 truncate cleaned up [ 663.468113][ T3600] usb 5-1: SerialNumber: syz [ 663.478283][T18618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 663.716116][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 663.749736][ T3600] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 663.762969][ T3600] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 663.796860][ T3600] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 663.977732][ T4468] usb 5-1: USB disconnect, device number 59 [ 663.992938][ T4468] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 664.025874][ T4468] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 664.086768][ T4468] visor 5-1:1.0: device disconnected [ 664.175352][T18638] loop3: detected capacity change from 0 to 2048 [ 664.215635][T18642] device batadv0 entered promiscuous mode [ 664.242865][T18642] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 664.332943][T18644] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6288'. [ 664.854176][T18665] loop2: detected capacity change from 0 to 64 [ 665.805394][T18699] sd 0:0:1:0: device reset [ 666.371362][T18685] loop4: detected capacity change from 0 to 32768 [ 666.438779][T18685] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 666.548367][T18727] loop2: detected capacity change from 0 to 512 [ 666.615689][T18727] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 666.626794][T18727] EXT4-fs (loop2): orphan cleanup on readonly fs [ 666.645387][T18727] __quota_error: 6 callbacks suppressed [ 666.645405][T18727] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 666.660527][T18727] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 666.670927][T18727] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.6329: Failed to acquire dquot type 1 [ 666.706347][T18727] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6329: bg 0: block 40: padding at end of block bitmap is not set [ 666.721271][T18727] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 666.730884][T18727] EXT4-fs (loop2): 1 truncate cleaned up [ 666.737133][T18727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 666.764764][T18727] EXT4-fs error (device loop2): ext4_get_link:104: inode #16: comm syz.2.6329: bad symlink. [ 666.895625][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 667.044743][ T4452] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 667.103357][T18742] loop2: detected capacity change from 0 to 256 [ 667.373400][T18748] loop0: detected capacity change from 0 to 512 [ 667.478415][T18748] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 667.533252][T18752] loop3: detected capacity change from 0 to 512 [ 667.617487][T18748] EXT4-fs (loop0): 1 truncate cleaned up [ 667.623236][T18748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 667.725654][T18752] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.3.6340: corrupted xattr block 95 [ 667.806194][T18760] loop1: detected capacity change from 0 to 4096 [ 667.824539][T18760] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 667.884903][T18752] EXT4-fs (loop3): Remounting filesystem read-only [ 667.893426][T18752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6340: bg 0: block 7: invalid block bitmap [ 667.910109][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 667.960927][T18752] EXT4-fs (loop3): Remounting filesystem read-only [ 667.988505][T18752] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 668.045730][T18752] EXT4-fs (loop3): Remounting filesystem read-only [ 668.056292][T18752] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2916: inode #11: comm syz.3.6340: corrupted xattr block 95 [ 668.102129][T18752] EXT4-fs (loop3): Remounting filesystem read-only [ 668.108730][T18752] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 668.144355][T18752] EXT4-fs (loop3): 1 orphan inode deleted [ 668.163987][T18752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 668.219678][T18736] loop4: detected capacity change from 0 to 32768 [ 668.348228][T18736] [ 668.348228][T18736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.348228][T18736] [ 668.411873][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 668.419995][T18736] [ 668.419995][T18736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.419995][T18736] [ 668.458343][T18736] [ 668.458343][T18736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.458343][T18736] [ 668.524117][T18736] [ 668.524117][T18736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.524117][T18736] [ 668.554802][T18736] [ 668.554802][T18736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.554802][T18736] [ 668.605487][T18736] [ 668.605487][T18736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.605487][T18736] [ 668.716087][ T107] [ 668.716087][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.716087][ T107] [ 668.815594][ T4274] [ 668.815594][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.815594][ T4274] [ 668.914648][ T4274] [ 668.914648][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 668.914648][ T4274] [ 669.152525][ T8304] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 669.284214][T18796] netlink: 'syz.1.6361': attribute type 11 has an invalid length. [ 669.358335][ T8304] usb 4-1: Using ep0 maxpacket: 16 [ 669.371320][ T8304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.409113][ T8304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 669.441430][ T8304] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 669.492490][ T8304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.527958][ T8304] usb 4-1: Product: syz [ 669.549426][ T8304] usb 4-1: Manufacturer: syz [ 669.563915][ T8304] usb 4-1: SerialNumber: syz [ 669.839412][ T8304] usb 4-1: 0:2 : does not exist [ 669.844540][ T8304] usb 4-1: unit 9 not found! [ 669.874778][ T8304] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 669.899195][ T8304] usb 4-1: 4:0: cannot get min/max values for control 9 (id 4) [ 669.935172][ T8304] usb 4-1: USB disconnect, device number 67 [ 669.967307][T18811] usb usb7: usbfs: process 18811 (syz.1.6367) did not claim interface 0 before use [ 669.989037][T18813] kAFS: unable to lookup cell '/,' [ 670.221102][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.632012][T18838] netlink: 'syz.3.6381': attribute type 16 has an invalid length. [ 670.655380][T18838] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6381'. [ 670.829740][T18843] loop2: detected capacity change from 0 to 256 [ 670.895538][ T27] audit: type=1326 audit(1779923916.573:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 670.903950][T18843] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 670.985049][ T27] audit: type=1326 audit(1779923916.610:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.117916][ T27] audit: type=1326 audit(1779923916.610:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.211231][ T27] audit: type=1326 audit(1779923916.610:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.317385][ T27] audit: type=1326 audit(1779923916.619:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.425736][ T27] audit: type=1326 audit(1779923916.619:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.489475][T18861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6392'. [ 671.502191][T18864] loop2: detected capacity change from 0 to 256 [ 671.514095][ T27] audit: type=1326 audit(1779923916.619:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.514586][ T4468] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 671.551187][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6392'. [ 671.563760][ T27] audit: type=1326 audit(1779923916.619:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.1.6386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 671.671629][T18864] FAT-fs (loop2): Directory bread(block 64) failed [ 671.704771][T18864] FAT-fs (loop2): Directory bread(block 65) failed [ 671.741113][T18864] FAT-fs (loop2): Directory bread(block 66) failed [ 671.786863][T18864] FAT-fs (loop2): Directory bread(block 67) failed [ 671.806998][ T4468] usb 4-1: Using ep0 maxpacket: 16 [ 671.814519][ T4468] usb 4-1: config 0 has no interfaces? [ 671.815716][T18864] FAT-fs (loop2): Directory bread(block 68) failed [ 671.838550][T18864] FAT-fs (loop2): Directory bread(block 69) failed [ 671.846094][ T4468] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 671.871994][T18864] FAT-fs (loop2): Directory bread(block 70) failed [ 671.888801][ T4468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.897963][T18864] FAT-fs (loop2): Directory bread(block 71) failed [ 671.905075][ T4468] usb 4-1: Product: syz [ 671.915361][ T4468] usb 4-1: Manufacturer: syz [ 671.920047][ T4468] usb 4-1: SerialNumber: syz [ 671.960367][T18864] FAT-fs (loop2): Directory bread(block 72) failed [ 671.966987][T18864] FAT-fs (loop2): Directory bread(block 73) failed [ 671.971601][ T4468] r8152-cfgselector 4-1: config 0 descriptor?? [ 672.216214][ T4468] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 672.390664][T18887] netlink: 'syz.2.6403': attribute type 1 has an invalid length. [ 672.410698][T18887] netlink: 'syz.2.6403': attribute type 2 has an invalid length. [ 672.462688][ T4468] usb 4-1: USB disconnect, device number 68 [ 672.640761][T18895] netlink: 'syz.2.6409': attribute type 1 has an invalid length. [ 672.833351][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6413'. [ 673.156169][T18915] xt_TCPMSS: Only works on TCP SYN packets [ 673.185549][T18918] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6419'. [ 673.722506][T18934] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6428'. [ 673.980669][T18944] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 675.627427][T18996] loop2: detected capacity change from 0 to 2048 [ 675.672002][T18996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 675.961564][T19007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6466'. [ 675.989013][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6466'. [ 676.491181][T19026] loop3: detected capacity change from 0 to 2048 [ 676.540659][T19026] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 676.571321][T19026] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 676.605746][T19026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.677691][T19026] UDF-fs: unknown compression code (0) [ 676.801963][T19035] loop2: detected capacity change from 0 to 256 [ 677.284749][T19054] loop3: detected capacity change from 0 to 1024 [ 677.312278][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6488'. [ 677.331189][T19054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 677.344664][T19054] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 677.362644][T19058] device bridge3 entered promiscuous mode [ 677.387537][T19054] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 677.395101][T19054] EXT4-fs (loop3): 1 truncate cleaned up [ 677.401535][T19054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 677.410571][ T8304] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 677.485236][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 677.624856][ T8304] usb 2-1: Using ep0 maxpacket: 32 [ 677.632685][ T8304] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 677.661961][ T8304] usb 2-1: config 0 has no interface number 0 [ 677.685361][ T8304] usb 2-1: config 0 interface 196 has no altsetting 0 [ 677.706034][ T8304] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 677.756800][ T8304] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 677.776504][ T8304] usb 2-1: Product: syz [ 677.787562][ T8304] usb 2-1: Manufacturer: syz [ 677.792948][ T8304] usb 2-1: SerialNumber: syz [ 677.815128][ T8304] usb 2-1: config 0 descriptor?? [ 678.048607][ T8304] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 678.056291][ T8304] ipheth: probe of 2-1:0.196 failed with error -71 [ 678.109909][ T8304] usb 2-1: USB disconnect, device number 62 [ 678.312588][T19086] netlink: 'syz.3.6502': attribute type 1 has an invalid length. [ 678.324616][T19086] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6502'. [ 678.380074][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6504'. [ 678.426674][T19088] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6504'. [ 678.457795][T19088] netlink: 'syz.4.6504': attribute type 3 has an invalid length. [ 678.482879][T19088] netlink: 'syz.4.6504': attribute type 2 has an invalid length. [ 678.490777][T19088] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6504'. [ 678.842237][T19106] netlink: 'syz.3.6513': attribute type 13 has an invalid length. [ 679.513196][T19131] sock: sock_timestamping_bind_phc: sock not bind to device [ 679.564222][ T8495] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 679.792959][ T8495] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 679.829684][ T8495] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 679.855530][ T8495] usb 3-1: Product: syz [ 679.864467][ T8495] usb 3-1: Manufacturer: syz [ 679.875397][ T8495] usb 3-1: SerialNumber: syz [ 679.888795][ T8495] usb 3-1: config 0 descriptor?? [ 680.137282][ T8495] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v29 fw v73.0.0 (1 channels) [ 680.375666][ T8495] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 680.390635][ T8495] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 680.522945][ T8495] peak_usb: probe of 3-1:0.0 failed with error -71 [ 680.542715][ T8495] usb 3-1: USB disconnect, device number 61 [ 681.368860][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6560'. [ 681.409108][T19203] device netdevsim0 entered promiscuous mode [ 681.614536][T19214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6565'. [ 681.882960][ T4468] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 681.926206][T19226] sctp: [Deprecated]: syz.4.6571 (pid 19226) Use of int in max_burst socket option deprecated. [ 681.926206][T19226] Use struct sctp_assoc_value instead [ 682.088524][ T4468] usb 2-1: Using ep0 maxpacket: 32 [ 682.098255][ T4468] usb 2-1: unable to get BOS descriptor or descriptor too short [ 682.144462][ T4468] usb 2-1: string descriptor 0 read error: -22 [ 682.161980][ T4468] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 682.183495][ T4468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.428091][ T4468] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 682.508323][T19217] loop2: detected capacity change from 0 to 40427 [ 682.562488][T19217] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 682.584751][T19217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 682.614708][T19217] F2FS-fs (loop2): invalid crc value [ 682.645898][T19217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 682.658550][ T8495] usb 2-1: USB disconnect, device number 63 [ 682.783397][T19246] device syz_tun entered promiscuous mode [ 682.811584][T19246] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 682.829721][T19217] F2FS-fs (loop2): Start checkpoint disabled! [ 682.858590][T19217] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 682.874919][T19217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 682.943341][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 682.943359][ T27] audit: type=1800 audit(1779923927.695:214): pid=19217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6567" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 683.140395][T12344] kworker/u4:17: attempt to access beyond end of device [ 683.140395][T12344] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 683.334019][T19255] loop4: detected capacity change from 0 to 2048 [ 683.378979][T19255] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 683.437676][T19261] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 683.682599][ T27] audit: type=1326 audit(1779923928.378:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.1.6589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 683.742906][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6590'. [ 683.782914][ T27] audit: type=1326 audit(1779923928.406:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.1.6589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 683.891964][ T27] audit: type=1326 audit(1779923928.415:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.1.6589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 683.971988][ T27] audit: type=1326 audit(1779923928.415:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.1.6589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 684.031890][ T27] audit: type=1326 audit(1779923928.415:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.1.6589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 684.427704][T19292] overlayfs: workdir and upperdir must be separate subtrees [ 684.526897][T19296] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 684.555409][T19296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.195169][T19318] loop2: detected capacity change from 0 to 64 [ 685.281874][ T27] audit: type=1800 audit(1779923929.855:220): pid=19318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6615" name="bus" dev="loop2" ino=21 res=0 errno=0 [ 686.092344][T19346] netlink: 'syz.2.6629': attribute type 39 has an invalid length. [ 686.496271][T19331] loop1: detected capacity change from 0 to 32768 [ 686.542668][T19331] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6622 (19331) [ 686.594750][T19331] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 686.641207][T19331] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 686.683330][T19331] BTRFS info (device loop1): using free space tree [ 687.013458][T19331] BTRFS info (device loop1): enabling ssd optimizations [ 687.161877][ T4273] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 687.381835][ T8626] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 687.621527][ T8626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.667349][ T8626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.691960][ T8626] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 687.709662][ T8626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.749635][ T8626] usb 5-1: Product: syz [ 687.753937][ T8626] usb 5-1: Manufacturer: syz [ 687.765827][ T8626] usb 5-1: SerialNumber: syz [ 687.788600][ T8626] usb 5-1: config 0 descriptor?? [ 687.818597][ T8626] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 687.836956][ T8626] usb 5-1: No valid video chain found. [ 688.051736][ T8626] usb 5-1: USB disconnect, device number 60 [ 688.527997][T19410] loop1: detected capacity change from 0 to 32768 [ 688.572562][T19410] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 688.910383][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 689.188832][ T8495] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 689.314475][T19453] netlink: 'syz.0.6671': attribute type 4 has an invalid length. [ 689.344463][T19453] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.6671'. [ 689.414376][ T8495] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.437114][ T8495] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.482156][ T8495] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 689.513424][ T8495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.551979][ T8495] usb 5-1: Product: syz [ 689.560552][ T8495] usb 5-1: Manufacturer: syz [ 689.576962][ T8495] usb 5-1: SerialNumber: syz [ 689.801369][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6677'. [ 689.834393][ T8495] usb 5-1: unit 4 not found! [ 689.873076][ T8495] usb 5-1: USB disconnect, device number 61 [ 689.952796][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.015679][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6681'. [ 690.083034][T19476] netlink: 'syz.1.6683': attribute type 5 has an invalid length. [ 690.091066][T19476] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6683'. [ 690.464237][T19484] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 690.652928][T19489] loop3: detected capacity change from 0 to 256 [ 690.674866][T19492] loop1: detected capacity change from 0 to 8 [ 690.680532][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6689'. [ 690.730739][T19492] SQUASHFS error: Unable to read inode 0xa7 [ 690.783895][T19489] FAT-fs (loop3): Directory bread(block 64) failed [ 690.810777][T19489] FAT-fs (loop3): Directory bread(block 65) failed [ 690.841923][T19489] FAT-fs (loop3): Directory bread(block 66) failed [ 690.881654][T19489] FAT-fs (loop3): Directory bread(block 67) failed [ 690.909030][T19489] FAT-fs (loop3): Directory bread(block 68) failed [ 690.954830][T19489] FAT-fs (loop3): Directory bread(block 69) failed [ 690.973687][T19489] FAT-fs (loop3): Directory bread(block 70) failed [ 690.980310][T19489] FAT-fs (loop3): Directory bread(block 71) failed [ 691.016097][T19489] FAT-fs (loop3): Directory bread(block 72) failed [ 691.091916][T19489] FAT-fs (loop3): Directory bread(block 73) failed [ 692.027835][T19532] loop4: detected capacity change from 0 to 8 [ 692.126621][T19532] SQUASHFS error: Failed to read block 0x6e6: -5 [ 692.144244][T19532] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 692.184551][T19532] SQUASHFS error: Unable to read directory block [631:26] [ 692.380812][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6717'. [ 692.565457][ T8634] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 692.647804][T19554] xt_l2tp: missing protocol rule (udp|l2tpip) [ 692.661749][T19557] loop1: detected capacity change from 0 to 64 [ 692.714959][T19560] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6724'. [ 692.783825][ T8634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 692.804844][ T8634] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 692.847384][ T8634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 692.868299][ T8634] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 692.887602][ T8634] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 692.897485][ T8634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.945738][ T8634] usb 4-1: config 0 descriptor?? [ 693.071878][T19567] netlink: 'syz.0.6729': attribute type 21 has an invalid length. [ 693.184077][ T8634] hdpvr 4-1:0.0: firmware version 0x8 dated [ 693.235293][T19572] usb usb1: usbfs: process 19572 (syz.2.6731) did not claim interface 0 before use [ 693.377814][ T8346] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 693.402008][ T8634] hdpvr 4-1:0.0: device init failed [ 693.407352][ T8634] hdpvr: probe of 4-1:0.0 failed with error -12 [ 693.445979][ T8634] usb 4-1: USB disconnect, device number 69 [ 693.547256][T19578] loop0: detected capacity change from 0 to 4096 [ 693.605553][ T8346] usb 2-1: Using ep0 maxpacket: 16 [ 693.613566][ T8346] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 693.653844][ T8346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.675179][ T8346] usb 2-1: config 0 has no interface number 0 [ 693.688598][ T8346] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 693.723816][ T8346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.756267][ T8346] usb 2-1: Product: syz [ 693.765089][ T8346] usb 2-1: Manufacturer: syz [ 693.779166][ T8346] usb 2-1: SerialNumber: syz [ 693.800162][ T8346] usb 2-1: config 0 descriptor?? [ 693.824273][ T8346] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 693.862021][ T8346] usb 2-1: No valid video chain found. [ 694.069655][ T8634] usb 2-1: USB disconnect, device number 64 [ 694.199439][T19596] loop4: detected capacity change from 0 to 4096 [ 694.294910][T19596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 694.413416][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 694.667170][ T8495] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 694.914039][ T8495] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 694.957708][ T8495] usb 3-1: config 2 interface 0 has no altsetting 0 [ 694.974110][ T8495] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 694.992241][ T8495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.022826][ T8495] usb 3-1: Product: syz [ 695.051512][ T8495] usb 3-1: Manufacturer: syz [ 695.078255][ T8495] usb 3-1: SerialNumber: syz [ 695.114426][ T8495] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 695.130812][ T8495] usb 3-1: selecting invalid altsetting 0 [ 695.163910][ T8495] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 695.176145][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6760'. [ 695.198297][T19633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.373604][ T4468] usb 3-1: USB disconnect, device number 62 [ 695.416079][T19638] cgroup: none used incorrectly [ 695.613688][T19644] loop0: detected capacity change from 0 to 8 [ 695.710194][T19644] SQUASHFS error: zlib decompression failed, data probably corrupt [ 695.732061][T19644] SQUASHFS error: Failed to read block 0x13e: -5 [ 695.753741][T19644] SQUASHFS error: Unable to read metadata cache entry [13c] [ 695.778967][T19644] SQUASHFS error: Unable to read directory block [13c:26] [ 696.624389][T19679] loop4: detected capacity change from 0 to 256 [ 696.727502][T19679] FAT-fs (loop4): Directory bread(block 64) failed [ 696.734299][T19679] FAT-fs (loop4): Directory bread(block 65) failed [ 696.772514][T19679] FAT-fs (loop4): Directory bread(block 66) failed [ 696.779162][T19679] FAT-fs (loop4): Directory bread(block 67) failed [ 696.798681][T19681] loop2: detected capacity change from 0 to 64 [ 696.834110][T19679] FAT-fs (loop4): Directory bread(block 68) failed [ 696.887346][T19679] FAT-fs (loop4): Directory bread(block 69) failed [ 696.942484][T19679] FAT-fs (loop4): Directory bread(block 70) failed [ 696.981188][T19679] FAT-fs (loop4): Directory bread(block 71) failed [ 697.021296][T19679] FAT-fs (loop4): Directory bread(block 72) failed [ 697.027907][T19679] FAT-fs (loop4): Directory bread(block 73) failed [ 697.436053][T19660] loop3: detected capacity change from 0 to 40427 [ 697.516336][T19660] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 697.546214][T19660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 697.580958][T19660] F2FS-fs (loop3): invalid crc value [ 697.642741][T19660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 697.714063][T19703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6794'. [ 697.804103][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 697.852691][T19660] F2FS-fs (loop3): Start checkpoint disabled! [ 697.873983][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 697.878274][T19709] netlink: 'syz.0.6797': attribute type 10 has an invalid length. [ 697.895555][T19660] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 697.903005][T19660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 698.055869][T19709] device veth1_macvtap left promiscuous mode [ 698.066661][ T27] audit: type=1800 audit(1779923941.651:221): pid=19660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6774" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 698.167365][T19713] loop2: detected capacity change from 0 to 1024 [ 698.418693][ T4300] kworker/u4:5: attempt to access beyond end of device [ 698.418693][ T4300] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 698.434600][T19720] loop0: detected capacity change from 0 to 256 [ 698.448339][T12347] hfsplus: b-tree write err: -5, ino 25 [ 698.481562][T12347] hfsplus: b-tree write err: -5, ino 4 [ 698.500270][T12347] hfsplus: b-tree write err: -5, ino 2 [ 698.603653][T19720] FAT-fs (loop0): Directory bread(block 64) failed [ 698.610285][T19720] FAT-fs (loop0): Directory bread(block 65) failed [ 698.652127][T19720] FAT-fs (loop0): Directory bread(block 66) failed [ 698.676292][T19720] FAT-fs (loop0): Directory bread(block 67) failed [ 698.682989][T19720] FAT-fs (loop0): Directory bread(block 68) failed [ 698.745759][T19720] FAT-fs (loop0): Directory bread(block 69) failed [ 698.768898][T19720] FAT-fs (loop0): Directory bread(block 70) failed [ 698.798625][T19720] FAT-fs (loop0): Directory bread(block 71) failed [ 698.805370][T19720] FAT-fs (loop0): Directory bread(block 72) failed [ 698.855859][T19720] FAT-fs (loop0): Directory bread(block 73) failed [ 699.351454][T19736] loop2: detected capacity change from 0 to 4096 [ 699.385304][T19736] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 699.444386][T19742] loop1: detected capacity change from 0 to 2048 [ 699.531773][T19747] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.124403][T19763] loop1: detected capacity change from 0 to 4096 [ 700.199234][T19767] loop0: detected capacity change from 0 to 8 [ 700.248712][T19768] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.302895][T19767] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 700.773138][T19779] loop3: detected capacity change from 0 to 4096 [ 700.824719][T19779] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 701.123150][T19759] loop4: detected capacity change from 0 to 32768 [ 701.349862][T19759] XFS (loop4): Mounting V5 Filesystem [ 701.539897][T19759] XFS (loop4): Ending clean mount [ 701.659538][ T8495] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 701.780450][ T4274] XFS (loop4): Unmounting Filesystem [ 701.852028][T19821] netlink: 'syz.0.6845': attribute type 4 has an invalid length. [ 702.644532][T19845] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6857'. [ 702.998653][ T8495] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 703.165601][T19864] loop1: detected capacity change from 0 to 4096 [ 703.177134][T19864] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 703.204662][ T8495] usb 4-1: Using ep0 maxpacket: 32 [ 703.212563][ T8495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.244957][ T8495] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 703.267113][ T8495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.285368][T19868] xt_TCPMSS: Only works on TCP SYN packets [ 703.304234][ T8495] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 703.340873][ T8495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.358972][T19864] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 703.382866][ T8495] usb 4-1: Product: syz [ 703.407800][ T8495] usb 4-1: Manufacturer: syz [ 703.431927][ T8495] usb 4-1: SerialNumber: syz [ 703.450840][ T8495] usb 4-1: config 0 descriptor?? [ 703.727613][ T8495] usb 4-1: USB disconnect, device number 70 [ 703.865455][ T4468] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 704.064117][T19890] loop2: detected capacity change from 0 to 2048 [ 704.085499][ T4468] usb 5-1: Using ep0 maxpacket: 32 [ 704.104193][ T4468] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 704.132291][T19890] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 704.147246][ T4468] usb 5-1: config 0 has no interface number 0 [ 704.158484][ T4468] usb 5-1: config 0 interface 132 has no altsetting 0 [ 704.178933][ T4468] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 704.191280][T19890] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.233158][ T4468] usb 5-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 704.253957][ T4468] usb 5-1: Product: syz [ 704.269347][ T4468] usb 5-1: Manufacturer: syz [ 704.274022][ T4468] usb 5-1: SerialNumber: syz [ 704.311471][ T4468] usb 5-1: config 0 descriptor?? [ 704.333744][ T4468] ftdi_sio 5-1:0.132: FTDI USB Serial Device converter detected [ 704.354799][ T4468] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 704.547459][ T4468] usb 5-1: USB disconnect, device number 62 [ 704.570862][ T4468] ftdi_sio 5-1:0.132: device disconnected [ 704.641223][T19888] loop0: detected capacity change from 0 to 32768 [ 704.704946][T19888] (syz.0.6880,19888,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 704.733788][T19888] (syz.0.6880,19888,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 704.832323][T19888] JBD2: Ignoring recovery information on journal [ 704.887702][T19908] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 704.911947][T19888] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 705.102034][T19917] netlink: 'syz.1.6893': attribute type 24 has an invalid length. [ 705.193898][T19919] loop2: detected capacity change from 0 to 512 [ 705.305670][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 705.315026][T19919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 705.373274][T19919] ext4 filesystem being mounted at /1416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.490100][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 705.557362][T19930] loop4: detected capacity change from 0 to 64 [ 705.616207][T19930] syz.4.6900: attempt to access beyond end of device [ 705.616207][T19930] loop4: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 705.675985][T19930] Buffer I/O error on dev loop4, logical block 1295, async page read [ 705.733328][T19930] syz.4.6900: attempt to access beyond end of device [ 705.733328][T19930] loop4: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 705.812925][T19930] Buffer I/O error on dev loop4, logical block 1295, async page read [ 705.891312][ T27] audit: type=1800 audit(1779923948.860:222): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6900" name="file3" dev="loop4" ino=6 res=0 errno=0 [ 706.831799][T19939] loop2: detected capacity change from 0 to 32768 [ 706.914457][T19939] XFS (loop2): Mounting V5 Filesystem [ 706.973753][T19943] loop3: detected capacity change from 0 to 32768 [ 707.044149][T19939] XFS (loop2): Ending clean mount [ 707.114127][T19977] tmpfs: Bad value for 'mpol' [ 707.130068][T19943] XFS (loop3): Mounting V5 Filesystem [ 707.239684][T19982] loop4: detected capacity change from 0 to 2048 [ 707.247342][ T4283] XFS (loop2): Unmounting Filesystem [ 707.367413][T19982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.417168][T19956] loop1: detected capacity change from 0 to 32768 [ 707.428197][T19943] XFS (loop3): Ending clean mount [ 707.652196][ T4272] XFS (loop3): Unmounting Filesystem [ 707.663665][T19956] XFS (loop1): Mounting V5 Filesystem [ 707.759643][T19956] XFS (loop1): Ending clean mount [ 707.791936][T19956] XFS (loop1): Quotacheck needed: Please wait. [ 707.899108][T19956] XFS (loop1): Quotacheck: Done. [ 708.136122][ T4273] XFS (loop1): Unmounting Filesystem [ 709.114443][T19984] loop0: detected capacity change from 0 to 40427 [ 709.174373][T19984] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 709.215050][T19984] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 709.248139][T19984] F2FS-fs (loop0): invalid crc value [ 709.295469][T19984] F2FS-fs (loop0): Found nat_bits in checkpoint [ 709.411817][T19984] F2FS-fs (loop0): Start checkpoint disabled! [ 709.470093][T19984] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 709.477232][T19984] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 709.501031][T20028] loop2: detected capacity change from 0 to 4096 [ 709.562275][T20028] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 709.663217][ T27] audit: type=1800 audit(1779923952.358:223): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6917" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 709.753962][ T27] audit: type=1800 audit(1779923952.441:224): pid=20028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6933" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 709.969379][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6940'. [ 710.013664][ T4300] kworker/u4:5: attempt to access beyond end of device [ 710.013664][ T4300] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 711.072529][T20078] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6957'. [ 711.339946][T20088] loop1: detected capacity change from 0 to 128 [ 711.359088][T20088] FAT-fs (loop1): Directory bread(block 414) failed [ 711.374815][T20088] FAT-fs (loop1): Directory bread(block 415) failed [ 711.402860][T20088] FAT-fs (loop1): Directory bread(block 416) failed [ 711.410900][T20088] FAT-fs (loop1): Directory bread(block 417) failed [ 711.425239][T20088] FAT-fs (loop1): Directory bread(block 418) failed [ 711.451326][T20088] FAT-fs (loop1): Directory bread(block 419) failed [ 711.458042][T20088] FAT-fs (loop1): Directory bread(block 420) failed [ 711.467814][T20088] FAT-fs (loop1): Directory bread(block 421) failed [ 711.508944][T20055] loop3: detected capacity change from 0 to 32768 [ 711.611523][T20055] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 711.633285][T20055] XFS (loop3): Mounting V5 Filesystem [ 711.768666][T20055] XFS (loop3): Ending clean mount [ 711.827013][T20055] XFS (loop3): Quotacheck needed: Please wait. [ 711.935488][T20055] XFS (loop3): Quotacheck: Done. [ 712.102276][ T4272] XFS (loop3): Unmounting Filesystem [ 712.774431][T20138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6983'. [ 713.013772][T20142] loop3: detected capacity change from 0 to 2048 [ 713.120099][T20142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.106887][T20176] loop2: detected capacity change from 0 to 1764 [ 714.174769][T20176] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 714.955806][T20202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7015'. [ 714.988071][T20202] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7015'. [ 715.047984][T20206] x_tables: unsorted entry at hook 1 [ 715.296570][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7020'. [ 715.305709][T20213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.562301][T20219] loop3: detected capacity change from 0 to 32768 [ 716.610630][T20219] (syz.3.7023,20219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 716.665610][T20219] (syz.3.7023,20219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 716.763740][T20219] JBD2: Ignoring recovery information on journal [ 716.873688][T20219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 717.510943][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 718.017789][T20289] netlink: 'syz.3.7044': attribute type 3 has an invalid length. [ 718.050332][T20290] netlink: 'syz.4.7058': attribute type 1 has an invalid length. [ 718.076744][T20289] netlink: 46 bytes leftover after parsing attributes in process `syz.3.7044'. [ 718.130975][T20293] loop1: detected capacity change from 0 to 512 [ 718.258075][T20293] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.7059: ea_inode with extended attributes [ 718.351382][T20293] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7059: error while reading EA inode 11 err=-117 [ 718.386535][T20293] EXT4-fs (loop1): 1 orphan inode deleted [ 718.392380][T20293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 718.536264][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 718.693972][T20311] loop3: detected capacity change from 0 to 256 [ 718.749216][T20306] loop4: detected capacity change from 0 to 4096 [ 718.765172][T20306] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 718.867217][T20306] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 719.084234][T20320] loop1: detected capacity change from 0 to 256 [ 719.168940][T20320] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 719.254490][T20320] FAT-fs (loop1): Filesystem has been set read-only [ 719.280619][T20320] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 719.521415][T20334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7078'. [ 719.530403][T20334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7078'. [ 719.607920][T20334] netlink: 'syz.2.7078': attribute type 1 has an invalid length. [ 719.801049][T20344] overlayfs: missing 'lowerdir' [ 720.165067][T20360] cgroup: Name too long [ 720.841436][T20379] Cannot find del_set index 1 as target [ 720.903660][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7101'. [ 720.952583][T20381] netlink: 'syz.4.7101': attribute type 1 has an invalid length. [ 721.108239][T20357] loop3: detected capacity change from 0 to 32768 [ 721.182588][T20357] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 721.216775][T20357] (syz.3.7088,20357,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 721.240023][T20357] (syz.3.7088,20357,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 721.258611][T20357] (syz.3.7088,20357,0):ocfs2_symlink:2065 ERROR: status = -117 [ 721.367038][T20396] loop0: detected capacity change from 0 to 1024 [ 721.482891][T20396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 721.494680][ T4272] (syz-executor,4272,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 721.630950][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 721.698898][T20403] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7111'. [ 721.760723][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 721.968750][T20410] loop4: detected capacity change from 0 to 128 [ 721.977805][T20411] netlink: get zone limit has 4 unknown bytes [ 722.345549][T20421] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 722.425226][T20421] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 722.507101][T20421] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 722.547088][T20421] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 722.572041][T20421] device geneve3 entered promiscuous mode [ 722.603498][T20421] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 722.635440][T20421] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 722.723479][T20421] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 722.770344][T20421] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 723.004014][T20438] loop2: detected capacity change from 0 to 1764 [ 723.067780][T20440] tmpfs: Bad value for 'mpol' [ 723.100087][T20438] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 724.072224][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.078607][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.172152][T20467] Option ' ' to dns_resolver key: bad/missing value [ 724.372008][T20475] loop0: detected capacity change from 0 to 764 [ 724.402364][T20446] loop1: detected capacity change from 0 to 32768 [ 724.424766][T20475] Symlink component flag not implemented [ 724.459212][T20475] Symlink component flag not implemented (15) [ 724.526214][ T4468] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 724.548019][T20446] XFS (loop1): Mounting V5 Filesystem [ 724.712583][T20491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7147'. [ 724.732291][ T4468] usb 4-1: Using ep0 maxpacket: 16 [ 724.745501][ T4468] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 724.817107][ T4468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.846042][ T4468] usb 4-1: Product: syz [ 724.856959][ T4468] usb 4-1: Manufacturer: syz [ 724.869758][ T4468] usb 4-1: SerialNumber: syz [ 724.894062][T20446] XFS (loop1): Ending clean mount [ 724.904975][ T4468] usb 4-1: config 0 descriptor?? [ 724.912681][T20497] netlink: 'syz.2.7151': attribute type 3 has an invalid length. [ 724.971039][T20497] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7151'. [ 725.121415][ T4273] XFS (loop1): Unmounting Filesystem [ 725.880543][ T8300] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 726.086384][ T8300] usb 3-1: Using ep0 maxpacket: 16 [ 726.098315][ T8300] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 726.121138][ T8300] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 726.138536][ T8300] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 726.157940][ T8300] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 726.179733][ T8300] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 726.206619][ T8300] usb 3-1: config 0 has no interface number 0 [ 726.221787][ T8300] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 726.251474][ T8300] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 726.278609][ T8300] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 726.312787][ T8300] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.331018][T20539] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 726.358170][ T8300] usb 3-1: config 0 interface 125 has no altsetting 0 [ 726.376267][T20539] overlayfs: missing 'lowerdir' [ 726.379600][ T8300] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 726.411591][ T8300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.430632][ T8300] usb 3-1: Product: syz [ 726.438818][ T8300] usb 3-1: Manufacturer: syz [ 726.443591][ T8300] usb 3-1: SerialNumber: syz [ 726.467437][ T8300] usb 3-1: config 0 descriptor?? [ 726.703876][ C0] usb 3-1: async_complete: urb error -71 [ 726.710024][ C0] usb 3-1: async_complete: urb error -71 [ 726.751199][ C0] usb 3-1: async_complete: urb error -71 [ 726.757049][ C0] usb 3-1: async_complete: urb error -71 [ 726.766977][ T8300] get_1284_register: usb error -71 [ 726.789496][ T8300] usb 3-1: USB disconnect, device number 63 [ 727.106272][ T27] audit: type=1107 audit(1779923968.455:225): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 727.403542][T20574] device veth0_macvtap left promiscuous mode [ 727.569722][ T8626] usb 4-1: USB disconnect, device number 71 [ 727.750431][T20584] futex_wake_op: syz.3.7194 tries to shift op by -1; fix this program [ 728.605765][ T27] audit: type=1326 audit(1779923969.839:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20613 comm="syz.1.7208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 728.711589][ T27] audit: type=1326 audit(1779923969.886:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20613 comm="syz.1.7208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 728.805291][ T27] audit: type=1326 audit(1779923969.886:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20613 comm="syz.1.7208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 728.853457][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7211'. [ 728.890280][T20621] netlink: 'syz.4.7211': attribute type 2 has an invalid length. [ 728.912534][ T27] audit: type=1326 audit(1779923969.886:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20613 comm="syz.1.7208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a52f9ce59 code=0x7ffc0000 [ 729.278607][ T8634] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 729.510036][ T8634] usb 2-1: Using ep0 maxpacket: 8 [ 729.520277][ T8634] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 729.542742][ T8634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.550921][ T8634] usb 2-1: Product: syz [ 729.600396][ T8634] usb 2-1: Manufacturer: syz [ 729.605088][ T8634] usb 2-1: SerialNumber: syz [ 729.644662][ T8634] usb 2-1: config 0 descriptor?? [ 729.685476][ T8634] gspca_main: se401-2.14.0 probing 047d:5003 [ 729.724982][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7221'. [ 730.100042][ T8634] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 730.120161][ T8634] se401: probe of 2-1:0.0 failed with error -71 [ 730.173358][ T8634] usb 2-1: USB disconnect, device number 65 [ 730.293688][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 730.344560][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 730.376759][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 730.402899][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 730.502298][T20663] device bridge2 left promiscuous mode [ 730.518651][T20663] device bridge3 left promiscuous mode [ 730.564457][ T3935] device veth0_macvtap entered promiscuous mode [ 731.161911][T20686] vivid-004: disconnect [ 731.186542][T20685] vivid-004: reconnect [ 731.421593][T20665] loop0: detected capacity change from 0 to 32768 [ 731.476306][T20699] netlink: 'syz.2.7240': attribute type 27 has an invalid length. [ 731.484514][T20665] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.7227 (20665) [ 731.531276][T20699] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 731.569485][T20665] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 731.607708][T20665] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 731.655770][T20665] BTRFS info (device loop0): using free space tree [ 731.801050][T20713] loop1: detected capacity change from 0 to 256 [ 732.023678][T20665] BTRFS info (device loop0): enabling ssd optimizations [ 732.238390][ T4277] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 732.892596][T20757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7259'. [ 733.840690][T20744] loop2: detected capacity change from 0 to 32768 [ 734.010807][T20744] XFS (loop2): Mounting V5 Filesystem [ 734.164479][T20744] XFS (loop2): Ending clean mount [ 734.186137][T20744] XFS (loop2): Quotacheck needed: Please wait. [ 734.314395][T20744] XFS (loop2): Quotacheck: Done. [ 734.481007][ T4283] XFS (loop2): Unmounting Filesystem [ 735.450964][T20843] loop1: detected capacity change from 0 to 736 [ 735.573754][T20843] tmpfs: Unknown parameter '$TaFmI(9טz6m+N`1x*40 ?W ̄ ' [ 736.093884][T20862] netlink: 'syz.4.7299': attribute type 21 has an invalid length. [ 736.674903][T20858] loop2: detected capacity change from 0 to 32768 [ 736.792738][T20858] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 736.866853][T20858] XFS (loop2): Mounting V5 Filesystem [ 736.993282][T20896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 737.000948][T20896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 737.012064][T20896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 737.021807][T20896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 737.041518][T20858] XFS (loop2): Ending clean mount [ 737.051524][T20896] device veth3 left promiscuous mode [ 737.112745][T20858] XFS (loop2): Quotacheck needed: Please wait. [ 737.211203][ T4319] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x10 [ 737.252636][ T4319] XFS (loop2): Unmount and run xfs_repair [ 737.278117][ T4319] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 737.285578][ T4319] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 737.338659][ T4319] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 737.408217][ T4319] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 737.424528][ T4319] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 737.462368][ T4319] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 737.471413][ T4319] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 737.482596][ T4319] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 737.516450][ T4319] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 737.525511][T12344] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 8 error 74 [ 737.571103][T20858] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 737.624489][T20876] loop4: detected capacity change from 0 to 40427 [ 737.630355][T20907] loop0: detected capacity change from 0 to 16 [ 737.644121][T20876] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 737.654787][T20907] erofs: (device loop0): mounted with root inode @ nid 36. [ 737.670887][T20876] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 737.696638][T20907] syz.0.7318: attempt to access beyond end of device [ 737.696638][T20907] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 737.723878][T20876] F2FS-fs (loop4): invalid crc value [ 737.750181][T20907] syz.0.7318: attempt to access beyond end of device [ 737.750181][T20907] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 737.780033][T20876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 737.825070][ T27] audit: type=1800 audit(1779923978.349:230): pid=20907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7318" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 737.895082][ T4283] XFS (loop2): Unmounting Filesystem [ 737.909036][T20876] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 738.069466][T20876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 738.178109][T20919] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 738.227516][T20876] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10 [ 738.379834][T20921] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 738.513377][T20928] device bridge0 entered promiscuous mode [ 739.592494][T20965] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6) [ 739.771481][T20974] loop1: detected capacity change from 0 to 1764 [ 740.380893][T20997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 740.433427][T20997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 740.442193][T20997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 740.702804][T21011] loop4: detected capacity change from 0 to 16 [ 740.761623][T21011] erofs: Unknown parameter '5ser_xattr' [ 740.829856][T21011] cifs: Unknown parameter '5ser_xattr' [ 741.694151][T21007] loop2: detected capacity change from 0 to 32768 [ 741.749131][T21007] ialloc: diAlloc returned -5! [ 741.894960][T21043] xt_socket: unknown flags 0x4c [ 742.088153][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7386'. [ 742.305844][ T8495] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 742.554560][ T8495] usb 2-1: Using ep0 maxpacket: 16 [ 742.563888][ T8495] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 742.597749][ T8495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.605826][ T8495] usb 2-1: Product: syz [ 742.635256][ T8495] usb 2-1: Manufacturer: syz [ 742.639974][ T8495] usb 2-1: SerialNumber: syz [ 742.683020][ T8495] usb 2-1: config 0 descriptor?? [ 742.915700][ T8495] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 742.935019][ T8495] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 743.140263][ T8495] usb 2-1: USB disconnect, device number 66 [ 743.287518][T21090] xt_bpf: check failed: parse error [ 743.380505][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7407'. [ 743.654718][T21101] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7411'. [ 743.811613][T21085] loop3: detected capacity change from 0 to 32768 [ 744.032540][T21085] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 744.168368][T21085] XFS (loop3): Unmounting Filesystem [ 744.205726][T21126] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7420'. [ 744.480702][T21134] xt_l2tp: wrong L2TP version: 0 [ 745.163158][T21146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7429'. [ 746.267060][T21189] loop1: detected capacity change from 0 to 8 [ 746.879939][T21212] xt_hashlimit: overflow, try lower: 5/0 [ 747.689069][T21206] loop3: detected capacity change from 0 to 32768 [ 747.771241][T21206] XFS (loop3): Mounting V5 Filesystem [ 747.886092][T21206] XFS (loop3): Ending clean mount [ 747.917000][T21253] netlink: 'syz.1.7465': attribute type 10 has an invalid length. [ 748.597805][T21266] loop4: detected capacity change from 0 to 1024 [ 748.630844][ T4272] XFS (loop3): Unmounting Filesystem [ 748.721738][T21266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 748.738640][T21266] System zones: 0-1, 3-12 [ 748.772818][T21266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 748.895204][T21253] team0: Port device dummy0 added [ 748.934025][T21266] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.7471: Attempting to read directory block (623) that is past i_size (638464) [ 749.209985][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 749.486204][T21280] loop0: detected capacity change from 0 to 4096 [ 749.600671][T21280] ntfs: volume version 3.1. [ 749.665854][T21294] loop2: detected capacity change from 0 to 2048 [ 749.743292][T21294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.086606][T21304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7486'. [ 750.590653][T21326] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 750.878080][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7502'. [ 751.381923][T21358] ipt_CLUSTERIP: Please specify an interface name [ 751.428435][ T23] block nbd1: Attempted send on invalid socket [ 751.434679][ T23] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.474406][T21360] vxfs: unable to read disk superblock at 1 [ 751.481416][ T1079] block nbd1: Attempted send on invalid socket [ 751.487739][ T1079] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.516875][T21360] vxfs: unable to read disk superblock at 8 [ 751.557941][T21360] vxfs: can't find superblock. [ 751.757946][T21371] xt_TCPMSS: Only works on TCP SYN packets [ 752.048296][T21381] device ip6gretap2 entered promiscuous mode [ 753.405246][T21436] netlink: 'syz.4.7548': attribute type 19 has an invalid length. [ 753.531803][T21438] loop0: detected capacity change from 0 to 2048 [ 753.621656][T21438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 754.145516][T21424] comedi comedi0: reset error (fatal) [ 754.174635][T21458] loop4: detected capacity change from 0 to 1024 [ 754.279593][T21462] [U] .h0FwZ,iqgҏV2sO [ 754.285691][T21462] [U] ` w*BBOLhU [ 754.290235][T21462] [U] w$n|#%o.z\̧mРw [ 754.306993][T21458] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.7559: Invalid block bitmap block 0 in block_group 0 [ 754.366834][T21462] [U] R{ꫢ S [ 754.396475][T21458] Quota error (device loop4): write_blk: dquota write failed [ 754.404741][T21458] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 754.451007][T21458] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.7559: Failed to acquire dquot type 0 [ 754.490879][T21458] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.7559: Freeing blocks not in datazone - block = 0, count = 4096 [ 754.528402][T21458] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.7559: Invalid inode bitmap blk 0 in block_group 0 [ 754.570750][ T4300] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 754.579857][ T4300] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 754.593657][T21458] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 754.635021][T21458] EXT4-fs (loop4): 1 orphan inode deleted [ 754.651895][T21458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 754.734478][T21458] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 754.874418][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 755.044207][T21484] sctp: [Deprecated]: syz.4.7572 (pid 21484) Use of int in max_burst socket option deprecated. [ 755.044207][T21484] Use struct sctp_assoc_value instead [ 755.173050][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7574'. [ 755.212382][T21488] netlink: 'syz.3.7574': attribute type 3 has an invalid length. [ 755.219054][T21490] comedi comedi4: bad chanlist[0]=0x00080007 chan=7 range length=2 [ 755.298891][T21494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7577'. [ 755.420178][T21496] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 755.467142][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7580'. [ 755.507557][T21502] loop3: detected capacity change from 0 to 256 [ 756.248966][T21527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7593'. [ 756.620816][T21541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7600'. [ 756.836109][ T8634] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 756.844032][T21549] x_tables: duplicate entry at hook 3 [ 757.014411][T21555] ERROR: device name not specified. [ 757.071671][ T8634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.096104][ T8634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 757.121160][ T8634] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 757.145396][ T8634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 757.174336][ T8634] usb 2-1: SerialNumber: syz [ 757.203190][ T8634] usb 2-1: 0:2 : does not exist [ 757.219540][ T8634] usb 2-1: unit 64 not found! [ 757.357926][T21564] loop4: detected capacity change from 0 to 128 [ 757.427817][ T8495] usb 2-1: USB disconnect, device number 67 [ 757.444073][T21564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 757.486544][T21564] ext4 filesystem being mounted at /1570/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 757.588592][T21564] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted [ 757.628892][T21571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7614'. [ 757.710161][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 757.856380][T21580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7616'. [ 758.424852][T21598] netlink: 'syz.3.7627': attribute type 30 has an invalid length. [ 758.534344][T21603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7630'. [ 758.565304][T21603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7630'. [ 758.685455][T21576] loop2: detected capacity change from 0 to 32768 [ 758.745698][T21576] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 758.745698][T21576] [ 758.780386][T21576] ERROR: (device loop2): remounting filesystem as read-only [ 758.839319][T21609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7633'. [ 758.872612][T21609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7633'. [ 758.923383][T21609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7633'. [ 758.955772][T21609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7633'. [ 759.701123][T21636] cgroup: Invalid name [ 759.974380][T21648] xt_nat: multiple ranges no longer supported [ 760.034245][T20761] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 760.193899][T21659] device vlan0 entered promiscuous mode [ 760.253786][T20761] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 760.269608][T20761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.300887][T20761] usb 4-1: Product: syz [ 760.305159][T20761] usb 4-1: Manufacturer: syz [ 760.309812][T20761] usb 4-1: SerialNumber: syz [ 760.346673][T20761] usb 4-1: config 0 descriptor?? [ 760.373459][T20761] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 760.419196][T21665] program syz.2.7661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.835580][ T4319] usb 4-1: USB disconnect, device number 72 [ 760.882127][T21679] loop4: detected capacity change from 0 to 2048 [ 760.940927][T21679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 761.160654][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 761.260473][T21694] loop2: detected capacity change from 0 to 64 [ 761.791352][ T27] audit: type=1400 audit(1779924000.474:231): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=21707 comm="syz.1.7681" [ 762.003307][T21713] loop0: detected capacity change from 0 to 4096 [ 762.132783][T21713] ntfs3: Cannot use different iocharset when remounting! [ 762.357440][T21725] loop1: detected capacity change from 0 to 1024 [ 762.695442][ T4319] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 762.836535][T21743] unsupported nla_type 34 [ 762.906996][ T4319] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 762.924869][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 106, changing to 7 [ 762.945238][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16591, setting to 1024 [ 762.984600][ T4319] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 763.005419][ T4319] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 763.014373][ T4319] usb 5-1: Manufacturer: syz [ 763.027469][ T4319] usb 5-1: config 0 descriptor?? [ 763.039355][ T4319] igorplugusb 5-1:0.0: endpoint incorrect [ 763.271887][ T4317] usb 5-1: USB disconnect, device number 63 [ 763.307675][T21757] loop1: detected capacity change from 0 to 1024 [ 763.721320][T21769] loop0: detected capacity change from 0 to 2048 [ 763.756827][T21769] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 763.871873][ T4452] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 763.903791][T21769] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.952187][T21769] FAT-fs (loop0): unable to read boot sector [ 764.116801][T21785] loop2: detected capacity change from 0 to 1024 [ 764.384772][T21793] loop1: detected capacity change from 0 to 1024 [ 764.418134][ T4300] hfsplus: b-tree write err: -5, ino 25 [ 764.423985][ T4300] hfsplus: b-tree write err: -5, ino 4 [ 764.461368][ T4300] hfsplus: b-tree write err: -5, ino 2 [ 764.467145][ T4300] hfsplus: b-tree write err: -5, ino 20 [ 764.482360][T21790] loop0: detected capacity change from 0 to 4096 [ 764.503192][T21793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 764.644817][T21790] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 764.809195][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 764.995729][T21806] netlink: 'syz.2.7729': attribute type 32 has an invalid length. [ 765.012404][T21807] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 766.343264][T21864] loop2: detected capacity change from 0 to 256 [ 766.753613][ T4275] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 766.755391][T21878] loop3: detected capacity change from 0 to 1024 [ 766.924905][T21878] ------------[ cut here ]------------ [ 766.930444][T21878] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 766.935002][T21878] WARNING: CPU: 0 PID: 21878 at kernel/locking/mutex.c:582 __mutex_lock+0xa32/0xaf0 [ 766.950418][T21878] Modules linked in: [ 766.954473][T21878] CPU: 0 PID: 21878 Comm: syz.3.7765 Not tainted syzkaller #0 [ 766.962045][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.972252][T21878] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 766.977816][T21878] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d ef a7 e8 03 00 0f 85 df f6 ff ff 48 c7 c7 20 04 8c 8a 48 c7 c6 c0 04 8c 8a e8 1e 5c 16 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 41 c0 96 80 [ 766.997696][T21878] RSP: 0018:ffffc90003f17640 EFLAGS: 00010246 [ 767.003889][T21878] RAX: 3a4a0b58e576ca00 RBX: ffff888056151028 RCX: 0000000000080000 [ 767.011947][T21878] RDX: ffffc9000ebc1000 RSI: 0000000000003c8b RDI: 0000000000003c8c [ 767.020067][T21878] RBP: ffffc90003f177a0 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 767.028086][T21878] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 0000000000000000 [ 767.036199][T21878] R13: dffffc0000000000 R14: ffff8880561510b8 R15: 0000000000000000 [ 767.044255][T21878] FS: 00007f55fc5e76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 767.053278][T21878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.059906][T21878] CR2: 0000200000000040 CR3: 0000000079f9a000 CR4: 00000000003506f0 [ 767.067964][T21878] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.076019][T21878] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 767.084076][T21878] Call Trace: [ 767.087472][T21878] [ 767.090508][T21878] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 767.096716][T21878] ? reiserfs_write_lock+0x75/0xd0 [ 767.101899][T21878] ? mutex_lock_nested+0x10/0x10 [ 767.106990][T21878] ? d_alloc_parallel+0x33a/0x1530 [ 767.112155][T21878] ? __lock_acquire+0x7d10/0x7d10 [ 767.117273][T21878] reiserfs_write_lock+0x75/0xd0 [ 767.122321][T21878] reiserfs_lookup+0x18a/0x480 [ 767.127215][T21878] ? reiserfs_find_entry+0x18e0/0x18e0 [ 767.132751][T21878] ? __init_waitqueue_head+0xa5/0x150 [ 767.138317][T21878] __lookup_slow+0x29d/0x3f0 [ 767.142958][T21878] ? lookup_one_len+0x2d0/0x2d0 [ 767.147876][T21878] ? try_to_unlazy+0x34c/0x5a0 [ 767.152759][T21878] ? down_read+0x1a8/0x2d0 [ 767.157226][T21878] lookup_slow+0x53/0x70 [ 767.161560][T21878] walk_component+0x2be/0x3f0 [ 767.166286][T21878] ? path_lookupat+0x15c/0x440 [ 767.171152][T21878] path_lookupat+0x169/0x440 [ 767.175796][T21878] filename_lookup+0x224/0x560 [ 767.180675][T21878] ? hashlen_string+0x110/0x110 [ 767.185588][T21878] ? strncpy_from_user+0x1e3/0x350 [ 767.190783][T21878] ? getname_flags+0x206/0x500 [ 767.195649][T21878] user_path_at_empty+0x3e/0x60 [ 767.200551][T21878] path_setxattr+0xb3/0x290 [ 767.205161][T21878] ? simple_xattr_list_add+0xf0/0xf0 [ 767.210506][T21878] ? lock_chain_count+0x20/0x20 [ 767.215477][T21878] __x64_sys_lsetxattr+0xb4/0xd0 [ 767.220485][T21878] do_syscall_64+0x4c/0xa0 [ 767.225045][T21878] ? clear_bhb_loop+0x60/0xb0 [ 767.229774][T21878] ? clear_bhb_loop+0x60/0xb0 [ 767.234524][T21878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.240540][T21878] RIP: 0033:0x7f55fb79ce59 [ 767.244999][T21878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.264775][T21878] RSP: 002b:00007f55fc5e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 767.273312][T21878] RAX: ffffffffffffffda RBX: 00007f55fba15fa0 RCX: 00007f55fb79ce59 [ 767.281385][T21878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 767.289468][T21878] RBP: 00007f55fb832d6f R08: 0000000000000003 R09: 0000000000000000 [ 767.297491][T21878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.305550][T21878] R13: 00007f55fba16038 R14: 00007f55fba15fa0 R15: 00007ffd67f8f598 [ 767.313611][T21878] [ 767.316671][T21878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 767.323986][T21878] CPU: 0 PID: 21878 Comm: syz.3.7765 Not tainted syzkaller #0 [ 767.331487][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.341585][T21878] Call Trace: [ 767.344903][T21878] [ 767.347877][T21878] dump_stack_lvl+0x188/0x24e [ 767.352611][T21878] ? memcpy+0x3c/0x60 [ 767.356641][T21878] ? show_regs_print_info+0x12/0x12 [ 767.361890][T21878] ? load_image+0x400/0x400 [ 767.366486][T21878] panic+0x2e5/0x730 [ 767.370464][T21878] ? bpf_jit_dump+0xd0/0xd0 [ 767.375028][T21878] __warn+0x2f8/0x4f0 [ 767.379055][T21878] ? __mutex_lock+0xa32/0xaf0 [ 767.383777][T21878] ? __mutex_lock+0xa32/0xaf0 [ 767.388501][T21878] report_bug+0x2ba/0x4f0 [ 767.392906][T21878] ? __mutex_lock+0xa32/0xaf0 [ 767.397627][T21878] handle_bug+0x3a/0x70 [ 767.401882][T21878] exc_invalid_op+0x16/0x40 [ 767.406428][T21878] asm_exc_invalid_op+0x16/0x20 [ 767.411328][T21878] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 767.416658][T21878] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d ef a7 e8 03 00 0f 85 df f6 ff ff 48 c7 c7 20 04 8c 8a 48 c7 c6 c0 04 8c 8a e8 1e 5c 16 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 41 c0 96 80 [ 767.436326][T21878] RSP: 0018:ffffc90003f17640 EFLAGS: 00010246 [ 767.442419][T21878] RAX: 3a4a0b58e576ca00 RBX: ffff888056151028 RCX: 0000000000080000 [ 767.450425][T21878] RDX: ffffc9000ebc1000 RSI: 0000000000003c8b RDI: 0000000000003c8c [ 767.458428][T21878] RBP: ffffc90003f177a0 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 767.466421][T21878] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 0000000000000000 [ 767.474414][T21878] R13: dffffc0000000000 R14: ffff8880561510b8 R15: 0000000000000000 [ 767.482418][T21878] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 767.488436][T21878] ? reiserfs_write_lock+0x75/0xd0 [ 767.493575][T21878] ? mutex_lock_nested+0x10/0x10 [ 767.498543][T21878] ? d_alloc_parallel+0x33a/0x1530 [ 767.503678][T21878] ? __lock_acquire+0x7d10/0x7d10 [ 767.508728][T21878] reiserfs_write_lock+0x75/0xd0 [ 767.513707][T21878] reiserfs_lookup+0x18a/0x480 [ 767.518498][T21878] ? reiserfs_find_entry+0x18e0/0x18e0 [ 767.524000][T21878] ? __init_waitqueue_head+0xa5/0x150 [ 767.529401][T21878] __lookup_slow+0x29d/0x3f0 [ 767.534016][T21878] ? lookup_one_len+0x2d0/0x2d0 [ 767.538975][T21878] ? try_to_unlazy+0x34c/0x5a0 [ 767.543767][T21878] ? down_read+0x1a8/0x2d0 [ 767.548204][T21878] lookup_slow+0x53/0x70 [ 767.552470][T21878] walk_component+0x2be/0x3f0 [ 767.557169][T21878] ? path_lookupat+0x15c/0x440 [ 767.561951][T21878] path_lookupat+0x169/0x440 [ 767.566565][T21878] filename_lookup+0x224/0x560 [ 767.571351][T21878] ? hashlen_string+0x110/0x110 [ 767.576230][T21878] ? strncpy_from_user+0x1e3/0x350 [ 767.581377][T21878] ? getname_flags+0x206/0x500 [ 767.586166][T21878] user_path_at_empty+0x3e/0x60 [ 767.591037][T21878] path_setxattr+0xb3/0x290 [ 767.595567][T21878] ? simple_xattr_list_add+0xf0/0xf0 [ 767.600892][T21878] ? lock_chain_count+0x20/0x20 [ 767.605770][T21878] __x64_sys_lsetxattr+0xb4/0xd0 [ 767.610737][T21878] do_syscall_64+0x4c/0xa0 [ 767.615176][T21878] ? clear_bhb_loop+0x60/0xb0 [ 767.619884][T21878] ? clear_bhb_loop+0x60/0xb0 [ 767.624595][T21878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.630513][T21878] RIP: 0033:0x7f55fb79ce59 [ 767.634952][T21878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.654593][T21878] RSP: 002b:00007f55fc5e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 767.663030][T21878] RAX: ffffffffffffffda RBX: 00007f55fba15fa0 RCX: 00007f55fb79ce59 [ 767.671021][T21878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 767.679018][T21878] RBP: 00007f55fb832d6f R08: 0000000000000003 R09: 0000000000000000 [ 767.687008][T21878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.695000][T21878] R13: 00007f55fba16038 R14: 00007f55fba15fa0 R15: 00007ffd67f8f598 [ 767.702994][T21878] [ 767.706611][T21878] Kernel Offset: disabled [ 767.710945][T21878] Rebooting in 86400 seconds..