last executing test programs: 3.428334583s ago: executing program 1 (id=19869): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1, 0x0, 0x5245) 3.253333711s ago: executing program 1 (id=19873): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2.339615566s ago: executing program 3 (id=19887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x128, 0x43, 0xa0, 0x1d8, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x108, 0x128, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@rateest={{0x68}, {'macvlan1\x00', 'geneve1\x00', 0x32, 0x3, 0x1, 0x5, 0x4000000, 0x7, {0x3}, {0x1}}}, @common=@addrtype={{0x30}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffffffb}}}}, 0x2d0) 2.126172836s ago: executing program 3 (id=19889): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x0, 0xa, 0x1, 0xffffffff, 0x2, 0xccb, 0x8, 0x7, 0x400, 0x2, 0x8, 0xe, 0x8, 0x7, 0x6, 0xffffffff, 0x4000001, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x1ae, 0xfffffff5]}) 1.956965474s ago: executing program 3 (id=19891): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4c23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0x0, @mcast2, 0x7ff}], 0x2d) 1.750908795s ago: executing program 3 (id=19894): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 1.562332574s ago: executing program 3 (id=19896): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="b88cdf38504d55f97afc3d19e3536fa6cb2d06637006864b0a3160bf5bd017d807343fd80a030000e1d7e4a56a150a3db2e413d7244b3df901239eda1a4e90a2efcead70ccac6b8000000035607013e967642cd1bd135a54543dd2129afc7d5008f8be67407e648c73b703d35efdfedac6b7555758a14e209284e2", 0x7b}, 0x1, 0x0, 0x0, 0x8014}, 0x44090) 1.373802374s ago: executing program 0 (id=19899): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r0, 0x0, 0x7) 1.296831697s ago: executing program 3 (id=19900): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0) 1.210273041s ago: executing program 1 (id=19902): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x1e0, 0x98, 0x0, 0x98, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x68}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0xffffffff, 'ipvlan0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x3, 0x12}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1.148142514s ago: executing program 0 (id=19903): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x149a82, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04e22820"], 0x7) 999.530202ms ago: executing program 2 (id=19905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x3000000, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 891.653887ms ago: executing program 2 (id=19906): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0x7d4, 0x400b, 0x2a17438d, 0x899d, 0x3, 0xfffffffb, 0x47, 0x9, 0xfffffe01, 0x5, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007}) 836.336539ms ago: executing program 0 (id=19907): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001040)) 727.560175ms ago: executing program 2 (id=19908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c00018006000340000100000c00028004e601008800000014000180080001"], 0x88}}, 0x0) 705.286376ms ago: executing program 0 (id=19909): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSBRK(r0, 0x5427) 642.985299ms ago: executing program 1 (id=19910): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1}, 0x14008010) 551.942893ms ago: executing program 2 (id=19911): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r0, 0xffffffffffffffff, 0x0) 461.258528ms ago: executing program 0 (id=19912): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 457.137838ms ago: executing program 1 (id=19913): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x86, &(0x7f0000000480)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 334.162554ms ago: executing program 2 (id=19914): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) 92.322875ms ago: executing program 1 (id=19915): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000753cbc3640000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000d4304040020527d7f848b450dd98729911bb8613199fe00333b7333987d2a3896794e2b8d2ad8795c5f22f17566d0e1f2386760c3a7a37f06726860f195766"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff8d}, 0x25) 79.300556ms ago: executing program 2 (id=19916): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r0, &(0x7f0000000400)=[{{0x0, 0x2710}, 0x17, 0xd, 0xffffffff}], 0x18) 0s ago: executing program 0 (id=19917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x40}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) kernel console output (not intermixed with test programs): index 0 descriptor too short (expected 16456, got 72) [ 1760.461396][ T6631] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1760.490757][ T6631] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1760.508922][ T6631] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1760.545418][ T6631] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1760.563849][ T6631] usb 2-1: config 0 has no interface number 0 [ 1760.580154][ T6631] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1760.598174][T12442] libceph: resolve '400' (ret=-3): failed [ 1760.606010][ T6631] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1760.632986][ T6631] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1760.644012][ T6631] usb 2-1: too many endpoints for config 0 interface 125 altsetting 48: 120, using maximum allowed: 30 [ 1760.666777][ T6631] usb 2-1: config 0 interface 125 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1760.694747][ T6631] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1760.701679][ T6631] usb 2-1: config 0 interface 125 has no altsetting 1 [ 1760.725031][ T6631] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1760.744334][ T6631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.764185][ T6631] usb 2-1: Product: syz [ 1760.774268][ T6631] usb 2-1: Manufacturer: syz [ 1760.784067][ T6631] usb 2-1: SerialNumber: syz [ 1760.797266][ T6631] usb 2-1: config 0 descriptor?? [ 1761.217611][ T6631] usb 2-1: USB disconnect, device number 72 [ 1761.308702][T12462] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1761.326575][T12443] loop0: detected capacity change from 0 to 32768 [ 1761.680131][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1761.680149][ T27] audit: type=1326 audit(1773782867.247:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1761.759538][ T27] audit: type=1326 audit(1773782867.247:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1761.832726][ T27] audit: type=1326 audit(1773782867.279:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1761.915961][ T27] audit: type=1326 audit(1773782867.279:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1761.926893][T12472] netlink: 'syz.3.17829': attribute type 11 has an invalid length. [ 1761.980213][ T27] audit: type=1326 audit(1773782867.279:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12466 comm="syz.2.17828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1762.082666][T12472] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.17829'. [ 1762.116860][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17832'. [ 1762.185686][T12478] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17832'. [ 1762.194887][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17832'. [ 1762.809922][T12501] netlink: 112 bytes leftover after parsing attributes in process `syz.2.17844'. [ 1762.849120][T12501] netlink: 'syz.2.17844': attribute type 1 has an invalid length. [ 1763.027164][T12505] loop1: detected capacity change from 0 to 2048 [ 1763.083661][T12505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1763.304693][T12510] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1763.328720][T12491] loop3: detected capacity change from 0 to 32768 [ 1763.365550][T12491] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1763.527363][T12491] XFS (loop3): Ending clean mount [ 1763.589355][T12491] XFS (loop3): Quotacheck needed: Please wait. [ 1763.721578][T12491] XFS (loop3): Quotacheck: Done. [ 1763.964583][ T6570] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1764.338872][ T6631] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1764.506128][ T6631] usb 1-1: Using ep0 maxpacket: 32 [ 1764.513655][ T6631] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1764.523205][ T6631] usb 1-1: config 0 has no interface number 0 [ 1764.531922][ T6631] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1764.545513][ T6631] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1764.559715][ T6631] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1764.575110][ T6631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.599449][ T6631] usb 1-1: Product: syz [ 1764.603786][ T6631] usb 1-1: Manufacturer: syz [ 1764.632558][ T6631] usb 1-1: SerialNumber: syz [ 1764.664699][ T6631] usb 1-1: config 0 descriptor?? [ 1764.676840][ T6631] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1764.869567][ T6631] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1764.876798][ T6631] quatech2: probe of 1-1:0.51 failed with error -90 [ 1765.045439][T12563] loop1: detected capacity change from 0 to 64 [ 1765.104246][ T2355] usb 1-1: USB disconnect, device number 48 [ 1765.851633][T12597] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17887'. [ 1765.878159][T12597] netlink: 'syz.1.17887': attribute type 1 has an invalid length. [ 1765.893998][T12597] netlink: 'syz.1.17887': attribute type 2 has an invalid length. [ 1765.917133][T12597] netlink: 116 bytes leftover after parsing attributes in process `syz.1.17887'. [ 1766.095170][T12607] netlink: 'syz.0.17891': attribute type 1 has an invalid length. [ 1766.201573][T12611] netlink: 'syz.2.17894': attribute type 39 has an invalid length. [ 1766.231474][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17896'. [ 1766.348638][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17895'. [ 1766.365039][T12615] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17895'. [ 1766.404827][T12619] loop0: detected capacity change from 0 to 64 [ 1767.026737][T12640] __nla_validate_parse: 3 callbacks suppressed [ 1767.026758][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17908'. [ 1767.087550][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17908'. [ 1767.118323][T12647] loop3: detected capacity change from 0 to 256 [ 1767.267936][T12647] FAT-fs (loop3): Directory bread(block 64) failed [ 1767.280442][T12647] FAT-fs (loop3): Directory bread(block 65) failed [ 1767.294045][T12647] FAT-fs (loop3): Directory bread(block 66) failed [ 1767.311595][T12647] FAT-fs (loop3): Directory bread(block 67) failed [ 1767.330549][T12647] FAT-fs (loop3): Directory bread(block 68) failed [ 1767.337406][T12647] FAT-fs (loop3): Directory bread(block 69) failed [ 1767.366453][T12655] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 1767.376841][T12647] FAT-fs (loop3): Directory bread(block 70) failed [ 1767.383435][T12647] FAT-fs (loop3): Directory bread(block 71) failed [ 1767.407404][T12647] FAT-fs (loop3): Directory bread(block 72) failed [ 1767.414015][T12647] FAT-fs (loop3): Directory bread(block 73) failed [ 1767.414694][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17915'. [ 1768.158136][T12685] netlink: 'syz.2.17928': attribute type 1 has an invalid length. [ 1768.201456][T12685] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.17928'. [ 1768.272844][ T27] audit: type=1326 audit(1773782874.317:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.3.17932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x0 [ 1768.533697][ T27] audit: type=1326 audit(1773782874.607:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.1.17936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1768.556185][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.605935][ T27] audit: type=1326 audit(1773782874.607:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.1.17936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1768.628795][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.704495][ T27] audit: type=1326 audit(1773782874.639:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.1.17936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1768.727225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.739350][T12708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1768.778555][ T27] audit: type=1326 audit(1773782874.639:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.1.17936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1768.801197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.849445][ T27] audit: type=1326 audit(1773782874.639:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.1.17936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1769.287842][T12731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17951'. [ 1769.710237][T12744] loop3: detected capacity change from 0 to 2048 [ 1769.761363][T12752] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.17960'. [ 1769.815897][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17962'. [ 1769.827280][T12744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1770.254874][T12771] loop1: detected capacity change from 0 to 512 [ 1770.324991][T12771] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1770.353983][T12771] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1770.412767][T12771] EXT4-fs (loop1): 1 truncate cleaned up [ 1770.454353][T12771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1770.558176][T12771] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1770.602211][T17564] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1770.641389][ T6569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.788874][T17564] usb 4-1: Using ep0 maxpacket: 8 [ 1770.804205][T17564] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1770.812513][T12797] loop0: detected capacity change from 0 to 128 [ 1770.815559][T17564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.835571][T17564] usb 4-1: Product: syz [ 1770.842007][T12797] syz.0.17981: attempt to access beyond end of device [ 1770.842007][T12797] loop0: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 1770.849745][T17564] usb 4-1: Manufacturer: syz [ 1770.860757][T12797] Buffer I/O error on dev loop0, logical block 12837, async page read [ 1770.871033][T12797] Trying to free block not in datazone [ 1770.891153][T17564] usb 4-1: SerialNumber: syz [ 1770.904964][T17564] usb 4-1: config 0 descriptor?? [ 1770.938927][T17564] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1771.030904][ T6405] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1771.216696][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17986'. [ 1771.216964][ T6405] usb 3-1: Using ep0 maxpacket: 16 [ 1771.241320][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17986'. [ 1771.279438][ T6405] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1771.289991][ T6405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.299811][ T6405] usb 3-1: Product: syz [ 1771.309594][ T6405] usb 3-1: Manufacturer: syz [ 1771.327136][ T6405] usb 3-1: SerialNumber: syz [ 1771.327489][T17564] gspca_sonixj: reg_r err -71 [ 1771.337662][T17564] sonixj: probe of 4-1:0.0 failed with error -71 [ 1771.345569][ T6405] usb 3-1: config 0 descriptor?? [ 1771.365577][T17564] usb 4-1: USB disconnect, device number 59 [ 1771.403280][ T6405] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1771.798625][ T6405] gspca_spca508: reg_read err -71 [ 1771.804364][ T6405] gspca_spca508: reg_read err -71 [ 1771.823844][ T6405] gspca_spca508: reg_read err -71 [ 1771.833013][ T6405] gspca_spca508: reg_read err -71 [ 1771.860166][ T6405] gspca_spca508: reg write: error -71 [ 1771.872805][ T6405] spca508: probe of 3-1:0.0 failed with error -71 [ 1771.898545][ T6405] usb 3-1: USB disconnect, device number 74 [ 1772.022127][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17993'. [ 1772.084179][T17564] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1772.228873][T12826] loop3: detected capacity change from 0 to 736 [ 1772.273134][T17564] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1772.298682][T17564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.307672][T17564] usb 2-1: Product: syz [ 1772.312266][T17564] usb 2-1: Manufacturer: syz [ 1772.332379][T17564] usb 2-1: SerialNumber: syz [ 1772.355648][T17564] usb 2-1: config 0 descriptor?? [ 1772.370031][T12826] rock: directory entry would overflow storage [ 1772.388588][T12826] rock: sig=0x3b10, size=4, remaining=3 [ 1772.604780][T17564] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 1772.626891][T17564] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1772.640519][T17564] usb 2-1: USB disconnect, device number 73 [ 1772.832391][T12844] overlayfs: disabling nfs_export due to verity=require [ 1772.851947][T12844] overlayfs: conflicting options: userxattr,verity=require [ 1773.528572][T17564] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1773.699874][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18021'. [ 1773.705783][T17564] usb 2-1: Using ep0 maxpacket: 32 [ 1773.719816][T17564] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1773.735866][T17564] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1773.761189][T17564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1773.780479][T17564] usb 2-1: config 1 has no interface number 0 [ 1773.786659][T17564] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1773.808528][T17564] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1773.832723][T17564] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1773.864372][T17564] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1773.891697][T17564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.912113][T17564] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1774.141692][T17564] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 1774.162581][T17564] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1774.170548][T17564] snd_usb_pod: probe of 2-1:1.1 failed with error -90 [ 1774.365300][ T2355] usb 2-1: USB disconnect, device number 74 [ 1774.543002][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18034'. [ 1774.697311][T12913] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18037'. [ 1774.970020][T12921] loop0: detected capacity change from 0 to 256 [ 1775.062294][T12921] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 1775.742282][T12952] loop0: detected capacity change from 0 to 2048 [ 1775.779570][T12952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1775.879262][T12952] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1776.128375][T12968] netlink: 'syz.2.18065': attribute type 17 has an invalid length. [ 1776.146889][T12968] netlink: 'syz.2.18065': attribute type 16 has an invalid length. [ 1776.166928][T12968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18065'. [ 1776.430236][T12980] xt_recent: hitcount (4194304) is larger than allowed maximum (255) [ 1776.536672][ T27] audit: type=1326 audit(1773782883.169:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.18074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1776.605189][ T27] audit: type=1326 audit(1773782883.169:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.18074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1776.667711][ T27] audit: type=1326 audit(1773782883.254:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.18074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1776.738822][ T27] audit: type=1326 audit(1773782883.265:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.18074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1776.822361][ T27] audit: type=1326 audit(1773782883.265:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.18074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7ffc0000 [ 1776.858536][T12998] netlink: 209860 bytes leftover after parsing attributes in process `syz.0.18080'. [ 1777.061094][T13006] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1777.374708][T13021] loop3: detected capacity change from 0 to 256 [ 1778.025321][T13046] loop1: detected capacity change from 0 to 8 [ 1778.050004][T13046] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1778.067079][ T6419] udevd[6419]: incorrect cramfs checksum on /dev/loop1 [ 1778.155921][ T6419] udevd[6419]: incorrect cramfs checksum on /dev/loop1 [ 1778.721240][T13075] loop1: detected capacity change from 0 to 128 [ 1778.807094][T13075] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1778.850337][T13075] FAT-fs (loop1): Filesystem has been set read-only [ 1778.857491][T13075] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1778.888226][T13075] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1778.952832][T13084] IPv6: NLM_F_CREATE should be specified when creating new route [ 1779.434004][T13102] netlink: 'syz.3.18130': attribute type 2 has an invalid length. [ 1779.642829][T13111] dlm: no locking on control device [ 1780.108067][T13132] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18144'. [ 1780.126084][T13132] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1780.349331][T13144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18151'. [ 1780.605741][T13154] netlink: 'syz.3.18156': attribute type 3 has an invalid length. [ 1780.618714][T13157] loop0: detected capacity change from 0 to 256 [ 1780.627935][T13157] exfat: Deprecated parameter 'namecase' [ 1780.636767][T13157] exfat: Deprecated parameter 'utf8' [ 1780.637228][T13154] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18156'. [ 1780.651344][T13157] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 1780.781495][T13157] fuse: Bad value for 'fd' [ 1780.942377][T13167] IPv6: Can't replace route, no match found [ 1781.006360][ T6405] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1781.211124][ T6405] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1781.226855][ T6405] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1781.245726][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18164'. [ 1781.258398][ T6405] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1781.286650][T13179] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1781.311140][ T6405] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1781.321380][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1781.329596][ T6405] usb 2-1: Product: syz [ 1781.339739][ T6405] usb 2-1: Manufacturer: syz [ 1781.344405][ T6405] usb 2-1: SerialNumber: syz [ 1781.353627][ T6405] usb 2-1: config 0 descriptor?? [ 1781.367480][ T6405] hub 2-1:0.0: bad descriptor, ignoring hub [ 1781.373552][ T6405] hub: probe of 2-1:0.0 failed with error -5 [ 1781.383228][ T6405] usb 2-1: selecting invalid altsetting 0 [ 1781.777104][ T6405] usb 2-1: USB disconnect, device number 75 [ 1782.519638][T13225] openvswitch: netlink: Actions may not be safe on all matching packets [ 1782.588023][T13228] netlink: 'syz.2.18189': attribute type 12 has an invalid length. [ 1782.762210][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18192'. [ 1782.784828][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18192'. [ 1783.133375][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1783.147848][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1783.417902][ T2355] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1783.583552][ T27] audit: type=1326 audit(1773782890.743:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.0.18211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1783.606697][ T2355] usb 4-1: Using ep0 maxpacket: 8 [ 1783.617281][ T27] audit: type=1326 audit(1773782890.743:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.0.18211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1783.641615][ T2355] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1783.649931][ T2355] usb 4-1: config 179 has no interface number 0 [ 1783.679031][ T2355] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1783.690454][ T27] audit: type=1326 audit(1773782890.776:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.0.18211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1783.700033][ T2355] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1783.722287][ T27] audit: type=1326 audit(1773782890.786:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.0.18211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1783.756985][ T27] audit: type=1326 audit(1773782890.786:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13272 comm="syz.0.18211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1783.782057][ T2355] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1783.805209][ T2355] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1783.831596][ T2355] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1783.846789][ T6405] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1783.870514][ T2355] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1783.891468][ T2355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.921828][T13254] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1784.064933][ T6405] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1784.079484][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.103879][ T6405] usb 2-1: Product: syz [ 1784.111484][ T6405] usb 2-1: Manufacturer: syz [ 1784.127889][ T6405] usb 2-1: SerialNumber: syz [ 1784.149142][ T6405] r8152-cfgselector 2-1: config 0 descriptor?? [ 1784.486403][T13295] netlink: 'syz.2.18220': attribute type 17 has an invalid length. [ 1784.495034][T13295] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1784.504534][T13295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1784.571790][ T6405] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1784.604431][ T6405] r8152-cfgselector 2-1: USB disconnect, device number 76 [ 1784.659271][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1784.667663][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1784.676195][ T2355] usb 4-1: USB disconnect, device number 60 [ 1784.875633][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18224'. [ 1784.885754][T13301] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18224'. [ 1784.969379][T13293] loop0: detected capacity change from 0 to 32768 [ 1784.998133][T13293] [ 1784.998133][T13293] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1784.998133][T13293] [ 1785.060640][ T6567] [ 1785.060640][ T6567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1785.060640][ T6567] [ 1785.077608][ T6567] [ 1785.077608][ T6567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1785.077608][ T6567] [ 1785.459687][T13307] loop0: detected capacity change from 0 to 4096 [ 1785.491376][T13307] ntfs: (device loop0): ntfs_read_inode_mount(): First extent of $DATA attribute has non zero lowest_vcn. $MFT is corrupt. You should run chkdsk. [ 1785.500693][T13313] loop1: detected capacity change from 0 to 256 [ 1785.531574][T13307] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 1785.549458][T13307] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 1785.553398][T13313] exfat: Deprecated parameter 'utf8' [ 1785.571880][T13317] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.18231'. [ 1785.591535][T13313] exfat: Deprecated parameter 'namecase' [ 1785.600291][T13313] exfat: Deprecated parameter 'namecase' [ 1785.608830][T13313] exfat: Deprecated parameter 'utf8' [ 1785.644354][T13313] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1786.233327][T13337] SET target dimension over the limit! [ 1786.430129][T13343] netlink: 'syz.3.18245': attribute type 2 has an invalid length. [ 1788.034059][T13399] netlink: 'syz.2.18272': attribute type 1 has an invalid length. [ 1788.063047][T13399] netlink: 'syz.2.18272': attribute type 2 has an invalid length. [ 1788.196331][T13405] xt_connbytes: Forcing CT accounting to be enabled [ 1788.217658][T13405] xt_bpf: check failed: parse error [ 1788.622151][T13424] loop1: detected capacity change from 0 to 1024 [ 1788.776605][T13424] hfsplus: b-tree write err: -5, ino 2 [ 1788.960156][ T48] hfsplus: b-tree write err: -5, ino 25 [ 1788.973138][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1788.978836][ T48] hfsplus: b-tree write err: -5, ino 2 [ 1789.170603][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18296'. [ 1789.206119][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18296'. [ 1789.482109][T13457] loop1: detected capacity change from 0 to 256 [ 1789.512969][T13460] loop3: detected capacity change from 0 to 256 [ 1789.583911][T13460] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1789.625645][T13460] FAT-fs (loop3): Filesystem has been set read-only [ 1789.632803][T13460] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1789.645834][T13460] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1789.657544][T13457] FAT-fs (loop1): Directory bread(block 64) failed [ 1789.665336][T13457] FAT-fs (loop1): Directory bread(block 65) failed [ 1789.691660][T13460] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 1789.709163][ T27] audit: type=1800 audit(1773782897.299:590): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18303" name="file1" dev="loop3" ino=1048754 res=0 errno=0 [ 1789.709504][T13457] FAT-fs (loop1): Directory bread(block 66) failed [ 1789.740588][T13457] FAT-fs (loop1): Directory bread(block 67) failed [ 1789.758314][T13457] FAT-fs (loop1): Directory bread(block 68) failed [ 1789.766545][T13457] FAT-fs (loop1): Directory bread(block 69) failed [ 1789.784233][T13457] FAT-fs (loop1): Directory bread(block 70) failed [ 1789.790881][T13457] FAT-fs (loop1): Directory bread(block 71) failed [ 1789.822500][T13457] FAT-fs (loop1): Directory bread(block 72) failed [ 1789.830881][T13457] FAT-fs (loop1): Directory bread(block 73) failed [ 1790.357653][T13484] loop1: detected capacity change from 0 to 64 [ 1790.437424][T13484] syz.1.18316: attempt to access beyond end of device [ 1790.437424][T13484] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1790.471595][T13484] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 1790.499375][T13484] syz.1.18316: attempt to access beyond end of device [ 1790.499375][T13484] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1790.518786][T13484] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 1790.821776][T13498] overlayfs: conflicting options: metacopy=off,verity=on [ 1790.874944][T13500] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1791.033153][ T27] audit: type=1326 audit(1773782898.726:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.0.18327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1791.115477][ T27] audit: type=1326 audit(1773782898.726:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.0.18327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1791.116491][T13510] loop3: detected capacity change from 0 to 256 [ 1791.186393][T13510] exfat: Deprecated parameter 'utf8' [ 1791.192578][ T27] audit: type=1326 audit(1773782898.822:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.0.18327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1791.227944][T13510] exfat: Deprecated parameter 'utf8' [ 1791.275325][ T27] audit: type=1326 audit(1773782898.822:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.0.18327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1791.322430][T13510] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1791.369233][ T27] audit: type=1326 audit(1773782898.822:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.0.18327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1791.815165][ T2355] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1791.992540][ T2355] usb 1-1: Using ep0 maxpacket: 16 [ 1792.012457][ T2355] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1792.021828][T13541] netlink: 660 bytes leftover after parsing attributes in process `syz.3.18343'. [ 1792.043186][T13542] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18342'. [ 1792.054229][ T2355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.072893][ T2355] usb 1-1: Product: syz [ 1792.083139][ T2355] usb 1-1: Manufacturer: syz [ 1792.096106][ T2355] usb 1-1: SerialNumber: syz [ 1792.132431][ T2355] usb 1-1: config 0 descriptor?? [ 1792.345418][ T2355] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 1792.365122][ T2355] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1792.466447][T13552] loop3: detected capacity change from 0 to 128 [ 1792.517530][T13552] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1792.581052][ T2355] usb 1-1: USB disconnect, device number 49 [ 1792.600520][ T6570] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1793.071876][T13577] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18360'. [ 1793.213380][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18362'. [ 1793.233968][T13581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1794.142645][T13624] loop1: detected capacity change from 0 to 1024 [ 1794.185704][T13626] binder: 13625:13626 ioctl c018620c 200000000380 returned -22 [ 1794.238043][T13624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.382950][ T6569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.606492][T13642] loop1: detected capacity change from 0 to 2048 [ 1794.652159][T13642] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1794.965879][ T6405] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1795.151831][ T6405] usb 2-1: Using ep0 maxpacket: 8 [ 1795.189666][ T6405] usb 2-1: config 7 has an invalid interface number: 143 but max is 1 [ 1795.197920][ T6405] usb 2-1: config 7 has an invalid interface number: 217 but max is 1 [ 1795.221706][ T6405] usb 2-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 1795.239069][ T6405] usb 2-1: config 7 has no interface number 0 [ 1795.245220][ T6405] usb 2-1: config 7 has no interface number 1 [ 1795.255282][ T6405] usb 2-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 1795.292254][ T6405] usb 2-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1795.311680][ T6405] usb 2-1: config 7 interface 143 has no altsetting 0 [ 1795.332282][ T6405] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 1795.351987][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.367731][ T6405] usb 2-1: Product: syz [ 1795.371979][ T6405] usb 2-1: Manufacturer: syz [ 1795.389868][ T6405] usb 2-1: SerialNumber: syz [ 1795.439850][T13652] loop3: detected capacity change from 0 to 32768 [ 1795.600973][ T6405] qmi_wwan: probe of 2-1:7.143 failed with error -22 [ 1795.652894][ T6405] usb 2-1: USB disconnect, device number 77 [ 1795.837537][T13680] ptrace attach of "./syz-executor exec"[6566] was attempted by "./syz-executor exec"[13680] [ 1796.028649][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18413'. [ 1796.445017][T13702] loop1: detected capacity change from 0 to 64 [ 1796.838202][T13690] loop3: detected capacity change from 0 to 32768 [ 1796.918533][T13690] syz.3.18414: attempt to access beyond end of device [ 1796.918533][T13690] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1796.952127][T13690] lbmIODone: I/O error in JFS log [ 1796.959528][T13690] *** Log Format Error ! *** [ 1796.998233][T13690] lmLogInit: exit(-22) [ 1797.007237][T13690] lmLogOpen: exit(-22) [ 1797.411646][T13728] loop3: detected capacity change from 0 to 764 [ 1797.418436][ T2355] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1797.446292][T13728] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1797.495866][T13728] Symlink component flag not implemented [ 1797.521710][T13728] Symlink component flag not implemented (7) [ 1797.604999][ T2355] usb 1-1: Using ep0 maxpacket: 8 [ 1797.612556][ T2355] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1797.620868][ T2355] usb 1-1: config 179 has no interface number 0 [ 1797.639796][ T2355] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1797.664971][ T2355] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1797.711180][ T2355] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1797.747348][ T2355] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1797.778973][T13739] loop1: detected capacity change from 0 to 256 [ 1797.789123][ T2355] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1797.814848][ T2355] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1797.826581][ T2355] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1797.837545][ T2355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.877894][T13739] FAT-fs (loop1): Directory bread(block 64) failed [ 1797.895942][T13739] FAT-fs (loop1): Directory bread(block 65) failed [ 1797.934632][ T2355] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input93 [ 1797.947050][T13739] FAT-fs (loop1): Directory bread(block 66) failed [ 1797.964639][T13739] FAT-fs (loop1): Directory bread(block 67) failed [ 1797.986212][T13739] FAT-fs (loop1): Directory bread(block 68) failed [ 1798.018173][ T5120] input input93: unable to receive magic message: -110 [ 1798.023221][T13739] FAT-fs (loop1): Directory bread(block 69) failed [ 1798.068296][T13739] FAT-fs (loop1): Directory bread(block 70) failed [ 1798.108100][T13739] FAT-fs (loop1): Directory bread(block 71) failed [ 1798.114998][T13739] FAT-fs (loop1): Directory bread(block 72) failed [ 1798.121903][ T5120] input input93: unable to receive magic message: -32 [ 1798.183518][T13739] FAT-fs (loop1): Directory bread(block 73) failed [ 1798.246167][ T5120] input input93: unable to receive magic message: -32 [ 1798.345325][T13744] loop3: detected capacity change from 0 to 4096 [ 1798.349359][ T5120] input input93: unable to receive magic message: -32 [ 1798.386402][T13744] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1798.442081][ T5120] input input93: unable to receive magic message: -32 [ 1798.471752][ T5755] usb 1-1: USB disconnect, device number 50 [ 1798.477828][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1798.523266][T13744] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1798.531994][ T5755] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1798.612179][T13750] netlink: 'syz.2.18444': attribute type 49 has an invalid length. [ 1798.657001][T13750] netlink: 'syz.2.18444': attribute type 49 has an invalid length. [ 1798.786177][T13752] netlink: 'syz.1.18445': attribute type 1 has an invalid length. [ 1798.800747][T13754] loop3: detected capacity change from 0 to 16 [ 1798.806828][T13752] netlink: 'syz.1.18445': attribute type 2 has an invalid length. [ 1798.846784][T13754] erofs: (device loop3): mounted with root inode @ nid 36. [ 1798.884519][T13754] syz.3.18446: attempt to access beyond end of device [ 1798.884519][T13754] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1798.922449][T13754] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -6 in[63, 4033] out[4096] [ 1798.938329][ T27] audit: type=1800 audit(1773782907.223:596): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18446" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1799.397433][T13773] xt_bpf: check failed: parse error [ 1799.616200][T13779] batadv0: entered promiscuous mode [ 1800.304526][T13809] loop3: detected capacity change from 0 to 512 [ 1800.386650][T13809] EXT4-fs (loop3): mounted filesystem 00000088-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1800.452846][T13809] ext4 filesystem being mounted at /4520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1800.533198][T13820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18475'. [ 1800.588147][T13809] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.18472: directory missing '..' [ 1800.663148][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18479'. [ 1800.746293][ T6570] EXT4-fs (loop3): unmounting filesystem 00000088-0000-0000-0000-000000000000. [ 1800.804973][ C1] vkms_vblank_simulate: vblank timer overrun [ 1801.320484][T13855] loop1: detected capacity change from 0 to 512 [ 1801.426537][T13855] EXT4-fs (loop1): mounted filesystem 00000088-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1801.439355][T13855] ext4 filesystem being mounted at /4322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1801.486651][T13855] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.18492: directory missing '..' [ 1801.564374][ T5755] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1801.585297][ T6569] EXT4-fs (loop1): unmounting filesystem 00000088-0000-0000-0000-000000000000. [ 1801.763772][ T5755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.784265][ T5755] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1801.808679][ T5755] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1801.828399][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1801.838580][ T5755] usb 3-1: SerialNumber: syz [ 1802.051954][ T5755] usb 3-1: 0:2 : does not exist [ 1802.099829][ T5755] usb 3-1: USB disconnect, device number 75 [ 1802.175878][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1802.256985][T17564] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1802.432443][T17564] usb 2-1: Using ep0 maxpacket: 16 [ 1802.445875][T17564] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 1802.454236][T17564] usb 2-1: config 0 has no interface number 0 [ 1802.466471][T17564] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1802.481068][T17564] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1802.504642][T17564] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1802.522272][T17564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.531438][T17564] usb 2-1: Product: syz [ 1802.541192][T17564] usb 2-1: Manufacturer: syz [ 1802.546680][T17564] usb 2-1: SerialNumber: syz [ 1802.549791][T13895] netlink: 'syz.0.18511': attribute type 30 has an invalid length. [ 1802.563370][T17564] usb 2-1: config 0 descriptor?? [ 1802.569390][T13877] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1802.576925][T13895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18511'. [ 1802.591388][T13895] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1802.602394][T13895] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1802.812527][T17564] usb 2-1: USB disconnect, device number 78 [ 1803.406127][T13921] loop0: detected capacity change from 0 to 4096 [ 1803.549792][T13931] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1803.647186][T13921] syz.0.18524: attempt to access beyond end of device [ 1803.647186][T13921] loop0: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1803.684275][T13921] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 1803.697284][T13936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18531'. [ 1803.725608][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18531'. [ 1803.872282][T13942] loop1: detected capacity change from 0 to 128 [ 1803.901088][T13942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1803.941165][T13942] ext4 filesystem being mounted at /4327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1804.117199][ T6569] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1804.335170][T13960] loop0: detected capacity change from 0 to 164 [ 1804.454226][T13960] Unsupported NM flag settings (240) [ 1804.693379][T13972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1805.224755][T13994] x_tables: duplicate underflow at hook 4 [ 1805.328391][T14000] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1805.759402][ T6631] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1805.933419][T14027] netlink: 'syz.1.18575': attribute type 11 has an invalid length. [ 1805.941844][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18575'. [ 1805.964056][ T6631] usb 4-1: Using ep0 maxpacket: 8 [ 1805.971818][ T6631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1806.001089][ T6631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1806.032138][ T6631] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1806.053017][ T6631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1806.079769][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18577'. [ 1806.092020][T14033] netlink: 'syz.2.18578': attribute type 1 has an invalid length. [ 1806.100696][T14033] netlink: 80 bytes leftover after parsing attributes in process `syz.2.18578'. [ 1806.102818][ T6631] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1806.123316][ T6631] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1806.135132][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18577'. [ 1806.146727][ T6631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.161142][ T6631] usb 4-1: config 0 descriptor?? [ 1806.167361][T14008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1806.732181][ T6631] usb 4-1: USB disconnect, device number 61 [ 1806.738560][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1807.085084][T14065] bond4: entered allmulticast mode [ 1807.492953][T14079] loop1: detected capacity change from 0 to 128 [ 1807.531908][T14079] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1807.594156][T14079] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1807.659501][T14079] ext4 filesystem being mounted at /4345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1807.701359][T14090] loop0: detected capacity change from 0 to 2048 [ 1807.773334][T14092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1807.810358][T14079] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1807.843223][T14095] xfrm1: entered allmulticast mode [ 1807.863963][T14090] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1807.933100][T14090] Remounting filesystem read-only [ 1807.938676][T14090] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1808.006377][ T6569] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1808.206499][T14103] netlink: 'syz.3.18610': attribute type 10 has an invalid length. [ 1808.242057][T14103] netlink: 156 bytes leftover after parsing attributes in process `syz.3.18610'. [ 1808.885971][T14136] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18625'. [ 1809.410008][T14157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18634'. [ 1809.440748][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18634'. [ 1809.892432][T14178] openvswitch: netlink: Actions may not be safe on all matching packets [ 1810.242352][ T6631] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1810.442771][ T6631] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1810.462042][ T6631] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1810.476928][ T6631] usb 4-1: Product: syz [ 1810.481160][ T6631] usb 4-1: SerialNumber: syz [ 1810.508863][ T6631] usb 4-1: config 0 descriptor?? [ 1810.750714][ T6631] hso 4-1:0.0: Failed to find BULK IN ep [ 1810.837287][T14214] loop0: detected capacity change from 0 to 736 [ 1810.976963][T17564] usb 4-1: USB disconnect, device number 62 [ 1811.345676][T14234] loop1: detected capacity change from 0 to 128 [ 1811.361213][T14234] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1811.396349][T14234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1812.017500][T14258] dlm: no locking on control device [ 1812.129847][T14264] openvswitch: netlink: Message has 4 unknown bytes. [ 1812.391555][T14272] loop3: detected capacity change from 0 to 1764 [ 1812.750025][T14285] netlink: 'syz.2.18699': attribute type 4 has an invalid length. [ 1812.774056][T14285] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18699'. [ 1812.818966][T14285] wlan1: mtu less than device minimum [ 1813.145695][ T27] audit: type=1326 audit(1773782922.458:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.3.18706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1813.162515][T14303] netlink: 'syz.2.18708': attribute type 2 has an invalid length. [ 1813.200873][ T27] audit: type=1326 audit(1773782922.490:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.3.18706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1813.297029][T14306] loop0: detected capacity change from 0 to 1024 [ 1813.302528][ T27] audit: type=1326 audit(1773782922.490:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.3.18706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1813.378900][T14306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1813.390937][ T27] audit: type=1326 audit(1773782922.490:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.3.18706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1813.487463][ T27] audit: type=1326 audit(1773782922.490:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14298 comm="syz.3.18706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1813.568575][T14306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1813.716871][ T27] audit: type=1800 audit(1773782923.070:602): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18709" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1813.719534][T14306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.18709: missing EA_INODE flag [ 1813.802431][T14322] loop1: detected capacity change from 0 to 4096 [ 1813.865713][T14306] EXT4-fs (loop0): Remounting filesystem read-only [ 1813.879602][T14322] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1813.900246][T14306] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1813.999955][T14322] ntfs3: loop1: Failed to load $Extend (-22). [ 1814.026636][T14322] ntfs3: loop1: Failed to initialize $Extend. [ 1814.068552][ T6567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1814.413809][T14338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18723'. [ 1814.750144][T14352] ieee802154 phy0 wpan0: encryption failed: -22 [ 1814.945206][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18735'. [ 1815.207192][T14370] loop1: detected capacity change from 0 to 128 [ 1815.397029][T17564] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1815.422272][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18741'. [ 1815.432009][T14376] netlink: 'syz.1.18741': attribute type 8 has an invalid length. [ 1815.522782][T14378] netlink: 'syz.2.18742': attribute type 1 has an invalid length. [ 1815.582732][T17564] usb 4-1: Using ep0 maxpacket: 8 [ 1815.593558][T17564] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1815.614426][T17564] usb 4-1: config 179 has no interface number 0 [ 1815.623262][T17564] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1815.647132][T17564] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1815.678444][T17564] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1815.704396][T17564] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1815.732017][T17564] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1815.769234][T17564] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1815.776283][T17564] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1815.809396][T17564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.891980][T17564] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input94 [ 1816.207316][T17564] usb 4-1: USB disconnect, device number 63 [ 1816.219093][T17564] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1816.384605][T14402] veth1_virt_wifi: entered promiscuous mode [ 1816.543375][T14406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18756'. [ 1817.542340][T14446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18776'. [ 1817.902800][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18782'. [ 1818.034497][T14428] loop0: detected capacity change from 0 to 32768 [ 1818.066971][T14428] JBD2: Ignoring recovery information on journal [ 1818.141189][T14463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1818.160602][T14428] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1818.248900][T14466] bridge6: entered promiscuous mode [ 1818.360463][T14428] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1818.416542][T14428] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1818.449529][T14428] OCFS2: File system is now read-only. [ 1818.464960][T14428] (syz.0.18767,14428,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1818.493431][T14428] (syz.0.18767,14428,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1818.516192][T14428] (syz.0.18767,14428,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1818.527519][T14428] (syz.0.18767,14428,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1818.541592][T14428] (syz.0.18767,14428,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1818.551456][T14428] (syz.0.18767,14428,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1818.564735][T14428] (syz.0.18767,14428,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1818.598232][T14428] (syz.0.18767,14428,0):ocfs2_mknod:385 ERROR: status = -30 [ 1818.618392][T14428] (syz.0.18767,14428,0):ocfs2_mknod:502 ERROR: status = -30 [ 1818.635323][T14428] (syz.0.18767,14428,1):ocfs2_mkdir:659 ERROR: status = -30 [ 1818.799922][ T6567] ocfs2: Unmounting device (7,0) on (node local) [ 1819.703227][T14509] netlink: 'syz.3.18806': attribute type 3 has an invalid length. [ 1820.121909][T17564] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1820.146770][T14531] ip6t_srh: unknown srh match flags 4000 [ 1820.186351][T14533] loop3: detected capacity change from 0 to 1024 [ 1820.299284][T17564] usb 2-1: Using ep0 maxpacket: 8 [ 1820.317747][T17564] usb 2-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1820.351719][T17564] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1820.363210][T17564] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1820.383143][T17564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.391231][T17564] usb 2-1: Product: syz [ 1820.401965][T17564] usb 2-1: Manufacturer: syz [ 1820.406731][T17564] usb 2-1: SerialNumber: syz [ 1820.637107][T17564] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input95 [ 1820.701619][T17564] usb 2-1: USB disconnect, device number 79 [ 1820.737255][T17564] appletouch 2-1:1.0: input: appletouch disconnected [ 1820.759580][T14541] netlink: 115 bytes leftover after parsing attributes in process `syz.2.18822'. [ 1820.811579][T10850] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1820.866845][T14535] loop0: detected capacity change from 0 to 32768 [ 1820.907923][T14535] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1820.950483][T14535] XFS (loop0): Ending clean mount [ 1820.959067][T14535] XFS (loop0): Quotacheck needed: Please wait. [ 1820.998467][T10850] usb 4-1: Using ep0 maxpacket: 16 [ 1821.033944][T10850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1821.092136][T10850] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1821.120468][T14535] XFS (loop0): Quotacheck: Done. [ 1821.130650][T10850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.139001][T10850] usb 4-1: Product: syz [ 1821.143307][T10850] usb 4-1: Manufacturer: syz [ 1821.150672][T10850] usb 4-1: SerialNumber: syz [ 1821.167179][T10850] usb 4-1: config 0 descriptor?? [ 1821.201541][T10850] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1821.309276][ T6567] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1821.529665][ T787] usb 4-1: USB disconnect, device number 64 [ 1821.541567][T23773] usb 4-1: Failed to submit usb control message: -71 [ 1821.571459][T23773] usb 4-1: unable to send the bmi data to the device: -71 [ 1821.603048][T23773] usb 4-1: unable to get target info from device [ 1821.615279][T23773] usb 4-1: could not get target info (-71) [ 1821.630675][T23773] usb 4-1: could not probe fw (-71) [ 1822.319187][T14588] delete_channel: no stack [ 1822.394314][T14593] vti2: entered promiscuous mode [ 1822.746052][T14609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1822.860427][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18851'. [ 1823.380863][T14634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18861'. [ 1823.403841][T14636] tmpfs: Bad value for 'mpol' [ 1823.610507][T14646] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18867'. [ 1823.647696][T14646] openvswitch: netlink: Key type 29 is not supported [ 1823.718931][ T27] audit: type=1326 audit(1773782933.799:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.0.18870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1823.813114][ T27] audit: type=1326 audit(1773782933.831:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.0.18870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1823.880792][ T27] audit: type=1326 audit(1773782933.842:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.0.18870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1823.957083][ T27] audit: type=1326 audit(1773782933.842:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.0.18870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1824.007328][ T27] audit: type=1326 audit(1773782933.842:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.0.18870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1824.098805][T14665] loop1: detected capacity change from 0 to 512 [ 1824.192710][T14665] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1824.246638][T14665] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.18876: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1824.269115][T14665] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.18876: ea_inode dec ref err=-117 [ 1824.284622][T14665] EXT4-fs (loop1): 1 orphan inode deleted [ 1824.292582][T14665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1824.371325][ T6569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.391078][T14675] netlink: 800 bytes leftover after parsing attributes in process `syz.0.18881'. [ 1824.423722][T14675] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.18881'. [ 1825.256723][T14711] netlink: 'syz.0.18899': attribute type 21 has an invalid length. [ 1825.276170][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18899'. [ 1825.295573][ T787] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1825.483451][ T787] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 1825.520026][ T787] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1825.541087][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.567575][ T787] usb 2-1: Product: syz [ 1825.574452][ T787] usb 2-1: Manufacturer: syz [ 1825.579190][ T787] usb 2-1: SerialNumber: syz [ 1825.827223][ T787] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1825.836497][ T787] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1825.887628][ T787] usb 2-1: USB disconnect, device number 80 [ 1825.961385][ T7284] udevd[7284]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1826.764812][T14759] tmpfs: User quota block hardlimit too large. [ 1826.854901][T14761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.18924'. [ 1826.866548][ T6631] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1826.871079][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18925'. [ 1826.883632][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18925'. [ 1826.899858][T14763] ip6gretap2: entered allmulticast mode [ 1827.069007][ T6631] usb 2-1: config 11 has an invalid interface number: 93 but max is 0 [ 1827.082349][ T6631] usb 2-1: config 11 has no interface number 0 [ 1827.092502][ T6631] usb 2-1: config 11 interface 93 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1827.113338][ T6631] usb 2-1: config 11 interface 93 has no altsetting 0 [ 1827.125311][ T6631] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice= 3.e1 [ 1827.138072][ T6631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.151961][T14773] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1827.158449][ T6631] usb 2-1: Product: syz [ 1827.178566][ T6631] usb 2-1: Manufacturer: syz [ 1827.183228][ T6631] usb 2-1: SerialNumber: syz [ 1827.212339][T14753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1827.447068][ T6631] usb 2-1: no audio or video endpoints found [ 1827.474693][ T6631] usb 2-1: USB disconnect, device number 81 [ 1827.597559][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18938'. [ 1827.616473][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18938'. [ 1827.743365][T14796] loop0: detected capacity change from 0 to 764 [ 1828.175633][T14804] loop1: detected capacity change from 0 to 764 [ 1828.283738][T14804] Symlink component flag not implemented [ 1828.337272][T14810] ieee802154 phy0 wpan0: encryption failed: -22 [ 1828.342789][T14804] Symlink component flag not implemented [ 1828.349570][T14804] Symlink component flag not implemented (128) [ 1828.360980][T14804] Symlink component flag not implemented (122) [ 1828.563904][T14818] loop1: detected capacity change from 0 to 16 [ 1828.585502][T14818] erofs: (device loop1): mounted with root inode @ nid 36. [ 1828.616132][T14818] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 1828.637660][T14818] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 1828.679569][T14818] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1828.730871][T14823] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18954'. [ 1829.269317][T14843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1829.729747][T14859] SET target dimension over the limit! [ 1830.594892][T14898] loop3: detected capacity change from 0 to 256 [ 1830.624869][T14900] netlink: 256 bytes leftover after parsing attributes in process `syz.1.18992'. [ 1831.063890][ T787] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1831.253456][ T787] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 1831.270040][ T787] usb 1-1: config 0 has no interface number 0 [ 1831.286977][ T787] usb 1-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1831.306999][ T787] usb 1-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1831.329438][ T787] usb 1-1: config 0 interface 216 has no altsetting 0 [ 1831.362901][ T787] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1831.381922][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.402961][ T787] usb 1-1: config 0 descriptor?? [ 1831.408961][T14902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1831.418356][ T787] usb 1-1: NFC: intf ffff8880697ae000 id ffffffff8da44880 [ 1831.726680][ T787] usb 1-1: USB disconnect, device number 51 [ 1831.789164][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19006'. [ 1831.819562][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19006'. [ 1831.943938][T14937] netlink: 830 bytes leftover after parsing attributes in process `syz.1.19011'. [ 1832.345965][T14950] netlink: 'syz.1.19017': attribute type 2 has an invalid length. [ 1832.369362][T14950] netlink: 'syz.1.19017': attribute type 1 has an invalid length. [ 1832.549298][T14961] binder: 14959:14961 ioctl c00c620f 0 returned -14 [ 1832.857215][T14974] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.19028'. [ 1832.887537][T14974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1833.602374][T15007] netlink: 'syz.1.19045': attribute type 2 has an invalid length. [ 1833.611014][T15007] netlink: 'syz.1.19045': attribute type 8 has an invalid length. [ 1833.619522][T15007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19045'. [ 1833.830708][T15013] xt_hashlimit: overflow, try lower: 3/0 [ 1834.012314][ T27] audit: type=1326 audit(1773782944.839:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.093541][ T27] audit: type=1326 audit(1773782944.850:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.174730][ T27] audit: type=1326 audit(1773782944.850:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.202172][T15028] loop3: detected capacity change from 0 to 64 [ 1834.232864][ T27] audit: type=1326 audit(1773782944.850:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.279657][ T27] audit: type=1326 audit(1773782944.850:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.334755][ T27] audit: type=1326 audit(1773782944.850:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.416000][ T27] audit: type=1326 audit(1773782944.850:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.466402][ T6405] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1834.503500][ T27] audit: type=1326 audit(1773782944.850:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.566179][ T27] audit: type=1326 audit(1773782944.850:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15021 comm="syz.3.19053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1834.680214][ T6405] usb 2-1: Using ep0 maxpacket: 32 [ 1834.687730][ T6405] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1834.697590][ T6405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.727332][ T6405] usb 2-1: config 0 has no interface number 0 [ 1834.738751][ T6405] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 1834.764468][ T6405] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1834.822697][ T6405] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1834.832055][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.850452][ T6405] usb 2-1: Product: syz [ 1834.854697][ T6405] usb 2-1: Manufacturer: syz [ 1834.869502][ T6405] usb 2-1: SerialNumber: syz [ 1834.875063][T15050] loop0: detected capacity change from 0 to 4096 [ 1834.883900][ T6405] usb 2-1: config 0 descriptor?? [ 1834.899237][T15050] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1834.908875][T15030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1834.924227][T15054] netlink: 'syz.2.19068': attribute type 1 has an invalid length. [ 1834.945222][ T6405] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1834.977015][T15050] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1834.994940][T15050] ntfs3: loop0: Failed to load $Extend (-22). [ 1835.014287][T15050] ntfs3: loop0: Failed to initialize $Extend. [ 1835.251291][ T6631] usb 2-1: USB disconnect, device number 82 [ 1835.398465][ T787] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1835.475266][T15064] netlink: 'syz.3.19073': attribute type 1 has an invalid length. [ 1835.486298][T15064] netlink: 248 bytes leftover after parsing attributes in process `syz.3.19073'. [ 1835.596370][ T787] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1835.608493][ T787] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.631929][ T787] usb 3-1: config 220 has no interface number 2 [ 1835.638317][ T787] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1835.663630][ T787] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1835.677106][ T787] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1835.684597][ T787] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1835.704512][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1835.718056][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.732485][T15072] netlink: 'syz.3.19077': attribute type 3 has an invalid length. [ 1835.743950][ T787] usb 3-1: Product: syz [ 1835.748167][ T787] usb 3-1: Manufacturer: syz [ 1835.753021][ T787] usb 3-1: SerialNumber: syz [ 1835.759153][T15072] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.19077'. [ 1835.970166][T15079] ieee802154 phy0 wpan0: encryption failed: -22 [ 1835.986493][ T787] usb 3-1: selecting invalid altsetting 0 [ 1836.013294][ T787] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1836.060375][ T787] usb 3-1: No valid video chain found. [ 1836.099846][ T787] usb 3-1: selecting invalid altsetting 0 [ 1836.126771][ T787] usbtest: probe of 3-1:220.1 failed with error -22 [ 1836.153681][ T787] usb 3-1: USB disconnect, device number 76 [ 1836.491033][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1836.516968][T15099] netlink: 'syz.3.19091': attribute type 3 has an invalid length. [ 1836.540075][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1836.581328][T15099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19091'. [ 1836.644280][T15097] loop1: detected capacity change from 0 to 4096 [ 1836.699714][T15097] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1836.735991][T15097] ntfs3: loop1: Failed to load $Extend (-22). [ 1836.748186][T15097] ntfs3: loop1: Failed to initialize $Extend. [ 1836.915413][T15111] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1837.169465][ T787] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1837.364866][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 1837.373447][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1837.400788][ T787] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1837.426694][ T787] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1837.439944][ T787] usb 1-1: Product: syz [ 1837.444170][ T787] usb 1-1: Manufacturer: syz [ 1837.449080][ T787] usb 1-1: SerialNumber: syz [ 1837.671595][T15141] Cannot find set identified by id 0 to match [ 1837.691296][ T787] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1837.699680][ T787] usb 1-1: Handspring Visor / Palm OS: port 106, is for unknown use [ 1837.723132][ T787] usb 1-1: Handspring Visor / Palm OS: port 214, is for Remote File System use [ 1837.746791][ T787] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1837.896032][ T787] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1837.911948][ T787] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1837.923634][ T787] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1837.938607][ T787] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1837.980728][ T787] usb 1-1: USB disconnect, device number 52 [ 1837.986977][T15127] loop3: detected capacity change from 0 to 32768 [ 1837.997563][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1838.029324][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1838.033580][T15127] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.19104 (15127) [ 1838.079470][T15127] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1838.093027][T17564] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1838.105426][ T787] visor 1-1:1.0: device disconnected [ 1838.132625][T15127] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1838.142910][T15127] BTRFS info (device loop3): force zlib compression, level 3 [ 1838.151634][T15127] BTRFS info (device loop3): turning on flush-on-commit [ 1838.164348][T15127] BTRFS info (device loop3): max_inline at 4096 [ 1838.196863][T15127] BTRFS info (device loop3): using free space tree [ 1838.278895][T17564] usb 2-1: Using ep0 maxpacket: 8 [ 1838.297097][T17564] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1838.306206][T17564] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1838.343746][T17564] usb 2-1: Product: syz [ 1838.347997][T17564] usb 2-1: Manufacturer: syz [ 1838.352632][T17564] usb 2-1: SerialNumber: syz [ 1838.360747][T15127] BTRFS info (device loop3): enabling ssd optimizations [ 1838.382277][T15127] BTRFS info (device loop3): auto enabling async discard [ 1838.402719][T17564] usb 2-1: config 0 descriptor?? [ 1838.420758][T17564] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1838.585034][ T6570] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1838.837430][T17564] gspca_zc3xx: reg_r err -71 [ 1838.842186][T17564] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1838.891238][T17564] usb 2-1: USB disconnect, device number 83 [ 1839.605946][T15204] netlink: 'syz.1.19133': attribute type 2 has an invalid length. [ 1839.625979][T15204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19133'. [ 1839.888474][T15219] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1839.933597][T15218] loop0: detected capacity change from 0 to 512 [ 1840.012882][T15218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.021666][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19145'. [ 1840.124711][T15218] ext4 filesystem being mounted at /4577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1840.264577][T15218] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.19141: corrupted xattr block 33: invalid checksum [ 1840.398869][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1840.405600][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1840.461239][ T6567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.666709][T15247] xt_ipcomp: unknown flags 12 [ 1840.750237][T15249] netlink: 'syz.0.19155': attribute type 21 has an invalid length. [ 1840.784798][T15249] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19155'. [ 1840.804442][T15249] netlink: 'syz.0.19155': attribute type 5 has an invalid length. [ 1840.817404][ T6405] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1840.817996][T15249] netlink: 'syz.0.19155': attribute type 6 has an invalid length. [ 1840.841022][T15249] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19155'. [ 1841.002032][ T6405] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 1841.020939][ T6405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.059468][ T6405] usb 2-1: config 0 has no interface number 0 [ 1841.066114][ T6405] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1841.093305][ T6405] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1841.121035][ T6405] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.161757][ T6405] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1841.186513][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 1841.194680][ T6405] usb 2-1: SerialNumber: syz [ 1841.217388][ T6405] usb 2-1: config 0 descriptor?? [ 1841.235899][ T6405] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1841.461408][ T6405] spca561: probe of 2-1:0.156 failed with error -22 [ 1841.485912][ T6405] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1841.493064][ T6405] usb 2-1: MIDIStreaming interface descriptor not found [ 1841.573415][ T6405] usb 2-1: USB disconnect, device number 84 [ 1841.660914][ T6907] udevd[6907]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.964850][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19171'. [ 1841.982663][T15283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19172'. [ 1842.021967][T15283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19172'. [ 1842.059763][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19172'. [ 1842.397223][T15296] loop3: detected capacity change from 0 to 1024 [ 1842.478130][T15296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1842.491537][T15296] ext4 filesystem being mounted at /4698/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.520487][T15307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1842.557747][T15296] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.19178: directory missing '..' [ 1842.756397][ T6570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1843.628688][ T787] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1843.830407][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 1843.839681][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1843.870843][ T787] usb 2-1: config 1 has an invalid interface number: 6 but max is 2 [ 1843.879121][ T787] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1843.906150][ T787] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1843.925747][ T787] usb 2-1: config 1 has no interface number 3 [ 1843.942899][ T787] usb 2-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 1843.973387][ T787] usb 2-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 1844.002723][ T787] usb 2-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 1844.038060][ T787] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 1844.051355][ T787] usb 2-1: config 1 interface 6 has no altsetting 0 [ 1844.060504][ T787] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1844.075980][ T787] usb 2-1: string descriptor 0 read error: -22 [ 1844.083942][ T787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1844.096837][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.138790][ T787] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1844.177950][ T787] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1844.206534][ T787] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1844.343256][T15377] xfrm0 speed is unknown, defaulting to 1000 [ 1844.676295][T15392] program syz.0.19223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1844.697456][ T6405] usb 2-1: USB disconnect, device number 85 [ 1844.886376][T15394] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967295 out of range (51000000..2150000000) [ 1845.401738][T15407] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1845.487650][T15411] loop3: detected capacity change from 0 to 128 [ 1845.548560][T15411] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1846.410291][T15447] netlink: 'syz.0.19249': attribute type 13 has an invalid length. [ 1846.430518][T15447] gretap0: refused to change device tx_queue_len [ 1846.437975][T15447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1846.455052][T15449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19250'. [ 1847.394922][T15489] loop1: detected capacity change from 0 to 512 [ 1847.488221][T15489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1847.593175][T15489] ext4 filesystem being mounted at /4495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1847.756957][ T6569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.845228][T15508] usb usb8: check_ctrlrecip: process 15508 (syz.2.19278) requesting ep 01 but needs 81 [ 1847.871960][T15508] usb usb8: usbfs: process 15508 (syz.2.19278) did not claim interface 0 before use [ 1848.133791][T15522] SET target dimension over the limit! [ 1848.431920][T15536] usb usb8: check_ctrlrecip: process 15536 (syz.0.19292) requesting ep 01 but needs 81 [ 1848.470447][T15536] usb usb8: usbfs: process 15536 (syz.0.19292) did not claim interface 0 before use [ 1848.514978][T15538] overlayfs: missing 'workdir' [ 1848.725142][T15549] loop1: detected capacity change from 0 to 512 [ 1848.824096][T15549] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.19299: bad orphan inode 11862016 [ 1848.899595][T15549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1848.964352][T15549] ext4 filesystem being mounted at /4500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1849.203106][ T6569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1849.220048][T15544] loop0: detected capacity change from 0 to 32768 [ 1849.316528][T15544] [ 1849.316528][T15544] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1849.316528][T15544] [ 1849.385948][T15564] delete_channel: no stack [ 1849.435084][T15544] ERROR: (device loop0): diWrite: ixpxd invalid [ 1849.435084][T15544] [ 1849.475774][T15544] ERROR: (device loop0): txCommit: [ 1849.475774][T15544] [ 1849.631968][ T6567] [ 1849.631968][ T6567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1849.631968][ T6567] [ 1849.659228][ T6567] [ 1849.659228][ T6567] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1849.659228][ T6567] [ 1850.021225][T15588] loop0: detected capacity change from 0 to 16 [ 1850.030825][T15588] erofs: (device loop0): mounted with root inode @ nid 36. [ 1850.365766][T15600] loop3: detected capacity change from 0 to 256 [ 1850.672493][T15610] loop0: detected capacity change from 0 to 1764 [ 1850.750334][T15610] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1851.084733][ T6631] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1851.281177][ T6631] usb 2-1: Using ep0 maxpacket: 16 [ 1851.299952][ T6631] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1851.330216][ T6631] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1851.352213][T15628] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 1851.355138][ T6631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.360238][T15628] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1851.378475][T15628] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1851.392415][ T6631] usb 2-1: Product: syz [ 1851.398169][ T6631] usb 2-1: Manufacturer: syz [ 1851.420721][ T6631] usb 2-1: SerialNumber: syz [ 1851.430877][ T6631] r8152-cfgselector 2-1: config 0 descriptor?? [ 1851.685200][ T6631] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1851.792257][T15618] loop3: detected capacity change from 0 to 32768 [ 1851.853700][T15618] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1851.862960][T15641] netlink: 'syz.2.19341': attribute type 1 has an invalid length. [ 1851.950439][ T6631] usb 2-1: USB disconnect, device number 86 [ 1852.095806][T15618] XFS (loop3): Ending clean mount [ 1852.245610][ T6570] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1852.436459][T15658] libceph: resolve '0' (ret=-3): failed [ 1853.275263][T15688] cgroup: name respecified [ 1853.574431][T15702] xt_TCPMSS: Only works on TCP SYN packets [ 1853.793936][T15710] loop3: detected capacity change from 0 to 1024 [ 1854.050215][T15719] loop0: detected capacity change from 0 to 512 [ 1854.115616][T15719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1854.156919][T15726] netlink: 'syz.2.19382': attribute type 22 has an invalid length. [ 1854.181670][T15719] ext4 filesystem being mounted at /4650/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.252526][T15719] EXT4-fs error (device loop0): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.0.19379: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1854.280235][T15719] EXT4-fs error (device loop0): ext4_get_first_dir_block:3595: inode #12: comm syz.0.19379: directory missing '.' [ 1854.416737][ T6567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.028214][ T2355] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1855.246813][ T2355] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1855.281337][ T2355] usb 4-1: config 1 has no interface number 0 [ 1855.303518][ T2355] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1855.344256][ T2355] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1855.366371][T15770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1855.371567][ T2355] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1855.404175][ T2355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.413275][ T2355] usb 4-1: Product: syz [ 1855.418047][ T2355] usb 4-1: Manufacturer: syz [ 1855.429589][ T2355] usb 4-1: SerialNumber: syz [ 1855.483950][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19405'. [ 1855.681865][ T2355] aqc111: probe of 4-1:1.105 failed with error -22 [ 1855.712212][ T27] audit: type=1326 audit(1773782968.121:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1855.777917][ T27] audit: type=1326 audit(1773782968.121:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1855.815963][ T27] audit: type=1326 audit(1773782968.121:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1855.838425][ C0] vkms_vblank_simulate: vblank timer overrun [ 1855.846891][ T27] audit: type=1326 audit(1773782968.121:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1855.869566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1855.907102][T15784] x_tables: unsorted entry at hook 3 [ 1855.918668][T17564] usb 4-1: USB disconnect, device number 65 [ 1855.940174][ T27] audit: type=1326 audit(1773782968.121:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1855.962690][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.025083][ T27] audit: type=1326 audit(1773782968.121:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1856.060077][ T27] audit: type=1326 audit(1773782968.121:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1856.083047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.091343][ T27] audit: type=1326 audit(1773782968.121:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1856.113884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.144791][ T27] audit: type=1326 audit(1773782968.121:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1856.167257][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.171862][T15790] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19413'. [ 1856.201952][ T27] audit: type=1326 audit(1773782968.121:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15779 comm="syz.1.19408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c39c799 code=0x7fc00000 [ 1856.224429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.635271][T15804] loop0: detected capacity change from 0 to 16 [ 1856.642512][T15802] ieee802154 phy0 wpan0: encryption failed: -90 [ 1856.677730][T15804] erofs: (device loop0): mounted with root inode @ nid 36. [ 1856.754567][T15804] syz.0.19419: attempt to access beyond end of device [ 1856.754567][T15804] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1856.807309][T15804] syz.0.19419: attempt to access beyond end of device [ 1856.807309][T15804] loop0: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 1857.273303][T17564] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1857.391038][T15822] loop0: detected capacity change from 0 to 512 [ 1857.418809][T15822] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.19429: inode has both inline data and extents flags [ 1857.452692][T17564] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1857.463143][T15822] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.19429: couldn't read orphan inode 15 (err -117) [ 1857.464106][T17564] usb 3-1: config 179 has no interface number 0 [ 1857.484629][T17564] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1857.497520][T17564] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 1857.508879][T17564] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1857.520389][T17564] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 1857.521058][T15822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1857.531939][T17564] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1857.557659][T17564] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1857.591561][T17564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.624067][T15810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1857.642650][T15810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1857.772421][ T6567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.938340][ T6405] usb 3-1: USB disconnect, device number 77 [ 1857.938391][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1857.953086][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1858.132664][T15818] loop3: detected capacity change from 0 to 32768 [ 1858.184155][T15827] netlink: 'syz.0.19431': attribute type 21 has an invalid length. [ 1858.202468][T15827] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19431'. [ 1858.216341][T15827] netlink: 'syz.0.19431': attribute type 5 has an invalid length. [ 1858.233671][T15827] netlink: 'syz.0.19431': attribute type 6 has an invalid length. [ 1858.244974][T15827] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19431'. [ 1858.609335][T15835] netlink: 'syz.0.19436': attribute type 2 has an invalid length. [ 1858.629812][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19436'. [ 1859.065159][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19443'. [ 1859.346845][T15866] ip6tnl4: entered allmulticast mode [ 1859.403317][T15870] bridge_slave_1: left allmulticast mode [ 1859.421461][T15870] bridge_slave_1: left promiscuous mode [ 1859.430137][T15870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.486231][T15870] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1860.115398][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19467'. [ 1860.123047][T15892] loop1: detected capacity change from 0 to 4096 [ 1860.611100][T15917] IPVS: set_ctl: invalid protocol: 233 172.30.1.1:20001 [ 1860.974068][ T2355] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1861.162611][ T2355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1861.197847][ T2355] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1861.219402][ T2355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1861.237643][ T2355] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1861.252845][ T2355] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1861.265640][ T2355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.286189][ T2355] usb 2-1: config 0 descriptor?? [ 1861.492118][ T2355] hdpvr 2-1:0.0: firmware version 0x7e dated M8 9 >S|hnBk矉?qC$F [ 1861.518547][ T2355] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1861.674094][T15937] loop0: detected capacity change from 0 to 32768 [ 1861.691824][ T2355] hdpvr 2-1:0.0: device init failed [ 1861.697154][ T2355] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1861.756771][T15937] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1861.761335][ T2355] usb 2-1: USB disconnect, device number 87 [ 1861.928307][T15937] XFS (loop0): Ending clean mount [ 1862.127829][ T6567] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1862.377809][T15977] netlink: 'syz.2.19501': attribute type 1 has an invalid length. [ 1862.437377][T15977] netlink: 'syz.2.19501': attribute type 2 has an invalid length. [ 1862.445273][T15977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19501'. [ 1862.700100][T15988] netlink: 'syz.3.19504': attribute type 10 has an invalid length. [ 1862.711791][T15985] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1862.758072][T15990] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19506'. [ 1863.126060][T15979] loop1: detected capacity change from 0 to 32768 [ 1863.164291][T15979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.19502 (15979) [ 1863.207153][T15979] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1863.225486][T15979] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1863.257069][T15979] BTRFS info (device loop1): using free space tree [ 1863.382696][T16015] netlink: 80 bytes leftover after parsing attributes in process `syz.3.19513'. [ 1863.444742][T15979] BTRFS info (device loop1): enabling ssd optimizations [ 1863.451790][T15979] BTRFS info (device loop1): auto enabling async discard [ 1863.524005][ T27] kauditd_printk_skb: 3003 callbacks suppressed [ 1863.524022][ T27] audit: type=1400 audit(1773782976.511:3630): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16022 comm="syz.0.19515" [ 1863.718591][ T6569] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1863.962676][T16038] loop0: detected capacity change from 0 to 128 [ 1864.291823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1865.168193][ T2355] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1865.195913][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19542'. [ 1865.266742][T16087] sctp: [Deprecated]: syz.0.19545 (pid 16087) Use of int in max_burst socket option deprecated. [ 1865.266742][T16087] Use struct sctp_assoc_value instead [ 1865.279239][T16089] loop3: detected capacity change from 0 to 128 [ 1865.313187][T16089] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 1865.334078][T16089] FAT-fs (loop3): Filesystem has been set read-only [ 1865.358652][ T2355] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 1865.382410][ T2355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.416714][ T2355] usb 2-1: Product: syz [ 1865.437334][ T2355] usb 2-1: Manufacturer: syz [ 1865.447237][ T2355] usb 2-1: SerialNumber: syz [ 1865.462042][ T6570] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 1865.479916][ T2355] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1865.621244][T16099] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1865.835918][T16104] loop3: detected capacity change from 0 to 4096 [ 1865.868337][T16104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1865.882459][ T2355] gspca_spca501: reg write: error -71 [ 1865.888038][ T2355] spca501 2-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 1865.895642][ T2355] spca501: probe of 2-1:68.0 failed with error -22 [ 1865.911131][ T2355] usb 2-1: USB disconnect, device number 88 [ 1865.928637][T16111] (null): rxe_set_mtu: Set mtu to 4096 [ 1865.936308][T16111] lo speed is unknown, defaulting to 1000 [ 1865.952019][T16111] lo speed is unknown, defaulting to 1000 [ 1865.958973][T16111] lo speed is unknown, defaulting to 1000 [ 1866.069569][ T6570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1866.080152][T16113] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1866.275821][ T6631] lo speed is unknown, defaulting to 1000 [ 1866.295664][T16111] infiniband syz0: set active [ 1866.315912][T16111] infiniband syz0: added lo [ 1866.440225][T16111] RDS/IB: syz0: added [ 1866.487887][T16111] smc: adding ib device syz0 with port count 1 [ 1866.518095][T16111] smc: ib device syz0 port 1 has pnetid [ 1866.554318][ T2355] lo speed is unknown, defaulting to 1000 [ 1866.589562][T16111] lo speed is unknown, defaulting to 1000 [ 1866.815926][T16131] loop1: detected capacity change from 0 to 512 [ 1866.913401][ T6419] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1867.166752][T16111] lo speed is unknown, defaulting to 1000 [ 1867.603079][T16111] lo speed is unknown, defaulting to 1000 [ 1867.933182][T16111] lo speed is unknown, defaulting to 1000 [ 1868.194713][T16141] loop1: detected capacity change from 0 to 32768 [ 1868.246705][T16156] Non-string source [ 1868.265113][T16141] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1868.451057][T16141] XFS (loop1): Ending clean mount [ 1868.490554][T16141] XFS (loop1): Quotacheck needed: Please wait. [ 1868.543796][T16166] loop3: detected capacity change from 0 to 256 [ 1868.598738][T16166] exfat: Deprecated parameter 'namecase' [ 1868.621309][T16141] XFS (loop1): Quotacheck: Done. [ 1868.661318][T16166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1868.890764][ T6569] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1868.920182][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19582'. [ 1869.169617][T16178] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1869.504204][ T27] audit: type=1326 audit(1773782982.921:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.563555][ T27] audit: type=1326 audit(1773782982.921:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.617281][ T27] audit: type=1326 audit(1773782982.921:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.698151][ T27] audit: type=1326 audit(1773782982.921:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.740850][ T27] audit: type=1326 audit(1773782982.921:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.784233][ T27] audit: type=1326 audit(1773782982.921:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.863399][ T27] audit: type=1326 audit(1773782982.921:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.915244][T16204] netlink: 'syz.3.19597': attribute type 5 has an invalid length. [ 1869.925326][ T27] audit: type=1326 audit(1773782982.921:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.958325][ T27] audit: type=1326 audit(1773782982.921:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.2.19588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8ed159c799 code=0x7ffc0000 [ 1869.958939][T16204] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.19597'. [ 1869.983876][ T27] audit: type=1400 audit(1773782982.996:3640): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=16187 comm="syz.3.19589" [ 1870.382069][T16218] loop3: detected capacity change from 0 to 512 [ 1870.479993][T16218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1870.555235][T16218] ext4 filesystem being mounted at /4807/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1870.735034][T16235] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1870.845510][ T6570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1870.863706][T17564] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1871.051671][T17564] usb 1-1: Using ep0 maxpacket: 8 [ 1871.077115][T17564] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 1871.097967][T17564] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.135967][T17564] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1871.189368][T17564] usb 1-1: config 1 has no interface number 0 [ 1871.195561][T17564] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1871.239783][T17564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1871.263553][T17564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.287118][T17564] usb 1-1: Product: syz [ 1871.296763][T17564] usb 1-1: Manufacturer: syz [ 1871.302554][T17564] usb 1-1: SerialNumber: syz [ 1871.321271][T17564] cdc_wdm 1-1:1.128: skipping garbage [ 1871.329564][T17564] cdc_wdm 1-1:1.128: invalid descriptor buffer length [ 1871.336437][T17564] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 1871.422678][ T2130] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1871.477868][ T787] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1871.514822][T17564] usb 1-1: USB disconnect, device number 53 [ 1871.617827][ T2130] usb 2-1: Using ep0 maxpacket: 32 [ 1871.627770][ T2130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.643491][ T2130] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1871.656868][ T2130] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1871.666498][ T787] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.666546][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.685597][ T2130] usb 2-1: Product: syz [ 1871.689843][ T2130] usb 2-1: Manufacturer: syz [ 1871.690004][ T787] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1871.697420][ T2130] usb 2-1: SerialNumber: syz [ 1871.712205][ T2130] usb 2-1: config 0 descriptor?? [ 1871.717606][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.758606][ T787] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1871.958577][ T2130] usb 2-1: USB disconnect, device number 89 [ 1872.687417][T16303] Process accounting resumed [ 1872.756134][ T787] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1872.789845][T16309] binder: Bad value for 'stats' [ 1872.970504][ T787] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1872.982084][ T787] stv0680 4-1:4.0: last error: 179, command = 0x17 [ 1872.997891][ T2355] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1873.018415][ T787] usb 4-1: USB disconnect, device number 66 [ 1873.128248][T16319] loop1: detected capacity change from 0 to 128 [ 1873.176983][ T2355] usb 3-1: Using ep0 maxpacket: 32 [ 1873.194231][ T2355] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1873.217730][ T2355] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1873.259242][ T2355] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1873.283488][ T2355] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1873.323402][ T2355] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1873.351831][ T2355] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1873.370196][ T2355] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1873.392744][ T2355] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1873.400428][T16327] netlink: 'syz.0.19655': attribute type 2 has an invalid length. [ 1873.407364][ T2355] usb 3-1: Product: syz [ 1873.413452][ T2355] usb 3-1: Manufacturer: syz [ 1873.429159][ T2355] usb 3-1: SerialNumber: syz [ 1873.445992][ T2355] usb 3-1: config 0 descriptor?? [ 1873.455792][ T2355] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1873.489908][ T2355] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1873.683428][T16307] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1873.707098][ T2130] usb 3-1: USB disconnect, device number 78 [ 1873.720667][ T2130] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1873.896443][T16342] loop3: detected capacity change from 0 to 2048 [ 1873.917783][T16342] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1873.954325][T16342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1874.097606][ T6405] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1874.284978][T16355] QAT: Device 3 not found [ 1874.305815][ T6405] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.336264][ T6405] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1874.363264][ T6405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.372574][T16357] xt_l2tp: unknown flags: 10 [ 1874.414087][ T6405] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1874.627412][T16367] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1874.743081][T16373] netlink: 'syz.1.19678': attribute type 10 has an invalid length. [ 1874.809881][T16373] team0: Device veth1_macvtap failed to register rx_handler [ 1875.632396][ T6405] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1875.647416][ T6405] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1875.663277][ T6405] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 1875.693557][ T6405] usb 1-1: USB disconnect, device number 54 [ 1876.074973][T16413] loop3: detected capacity change from 0 to 1024 [ 1876.141965][T16413] syz.3.19699: attempt to access beyond end of device [ 1876.141965][T16413] loop3: rw=0, sector=393226, nr_sectors = 2 limit=1024 [ 1876.306367][ T2130] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1876.553316][ T2130] usb 2-1: Using ep0 maxpacket: 16 [ 1876.579540][ T2130] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1876.594650][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.618033][ T2130] usb 2-1: Product: syz [ 1876.622270][ T2130] usb 2-1: Manufacturer: syz [ 1876.639827][ T2130] usb 2-1: SerialNumber: syz [ 1876.660540][ T2130] r8152-cfgselector 2-1: config 0 descriptor?? [ 1877.091065][ T2130] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1877.113345][ T2130] r8152-cfgselector 2-1: USB disconnect, device number 90 [ 1878.506852][T16484] loop1: detected capacity change from 0 to 4096 [ 1878.576737][T16470] loop3: detected capacity change from 0 to 32768 [ 1878.608377][T16470] JBD2: Ignoring recovery information on journal [ 1878.688075][T16470] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1878.828974][T16470] (syz.3.19727,16470,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=0, inode=65, rec_len=16, name_len=1 [ 1878.884848][T16470] (syz.3.19727,16470,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1878.925207][T16470] (syz.3.19727,16470,1):ocfs2_mknod:298 ERROR: status = -2 [ 1878.955324][T16470] (syz.3.19727,16470,1):ocfs2_mknod:502 ERROR: status = -2 [ 1878.975083][T16470] (syz.3.19727,16470,1):ocfs2_create:676 ERROR: status = -2 [ 1879.196972][ T6570] ocfs2: Unmounting device (7,3) on (node local) [ 1879.368153][T16510] netlink: 'syz.2.19747': attribute type 10 has an invalid length. [ 1879.402274][T16510] macvlan0: entered allmulticast mode [ 1879.408564][T16510] veth1_vlan: entered promiscuous mode [ 1879.441248][T16510] veth1_vlan: entered allmulticast mode [ 1879.461044][T16510] team0: Port device macvlan0 added [ 1879.914979][T16531] ip6gre4: entered promiscuous mode [ 1879.920296][T16531] ip6gre4: entered allmulticast mode [ 1880.287284][T16547] kAFS: unable to lookup cell '' [ 1880.384968][T16552] netlink: 'syz.2.19765': attribute type 1 has an invalid length. [ 1880.392954][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19765'. [ 1880.479602][T16554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1880.682192][T16564] loop3: detected capacity change from 0 to 8 [ 1880.701390][T16564] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1880.722342][T12753] udevd[12753]: incorrect cramfs checksum on /dev/loop3 [ 1880.787199][T16564] cramfs: Error -3 while decompressing! [ 1880.817766][T16564] cramfs: ffffffff973fa368(26)->ffff888066b46000(4096) [ 1880.819270][ T7284] udevd[7284]: incorrect cramfs checksum on /dev/loop3 [ 1880.824701][T16564] cramfs: Error -3 while decompressing! [ 1880.846273][T16564] cramfs: ffffffff973fa382(26)->ffff88806a653000(4096) [ 1880.858007][T16564] cramfs: Error -3 while decompressing! [ 1880.863622][T16564] cramfs: ffffffff973fa39c(16)->ffff88806612d000(4096) [ 1880.871583][T16564] cramfs: Error -3 while decompressing! [ 1880.908423][T16564] cramfs: ffffffff973fa368(26)->ffff888066b46000(4096) [ 1881.208842][ T6405] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1881.340246][ T5755] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1881.386609][T16578] No such timeout policy "syz0" [ 1881.409554][ T6405] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.422788][ T6405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.430893][ T6405] usb 2-1: Product: syz [ 1881.439534][ T6405] usb 2-1: Manufacturer: syz [ 1881.460346][ T6405] usb 2-1: SerialNumber: syz [ 1881.480430][ T6405] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1881.507750][T10850] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1881.528914][ T5755] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1881.561318][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.604021][ T5755] usb 4-1: config 0 descriptor?? [ 1881.914219][ T2355] usb 2-1: USB disconnect, device number 91 [ 1882.041787][ T5755] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 1882.054696][ T5755] hackrf 4-1:0.0: Could not detect board [ 1882.061313][ T5755] hackrf: probe of 4-1:0.0 failed with error -71 [ 1882.076811][ T5755] usb 4-1: USB disconnect, device number 67 [ 1882.523006][T10850] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1882.530045][T10850] ath9k_htc: Failed to initialize the device [ 1882.589651][ T2355] usb 2-1: ath9k_htc: USB layer deinitialized [ 1883.211444][T16637] loop1: detected capacity change from 0 to 64 [ 1883.634149][T16618] loop3: detected capacity change from 0 to 32768 [ 1883.685987][T16618] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1883.923374][T16668] loop0: detected capacity change from 0 to 256 [ 1883.951794][T16618] XFS (loop3): Ending clean mount [ 1884.002224][T16618] XFS (loop3): Quotacheck needed: Please wait. [ 1884.123454][T16618] XFS (loop3): Quotacheck: Done. [ 1884.442479][ T6570] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1884.807807][T16688] netlink: 830 bytes leftover after parsing attributes in process `syz.2.19831'. [ 1885.482544][T16714] loop3: detected capacity change from 0 to 2048 [ 1885.542667][T16714] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 1885.581560][T16714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1886.173365][T16740] IPv6: Can't replace route, no match found [ 1886.634276][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1886.634293][ T27] audit: type=1326 audit(1773783001.310:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1886.705167][ T27] audit: type=1326 audit(1773783001.342:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1886.785668][ T27] audit: type=1326 audit(1773783001.342:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1886.823703][ T27] audit: type=1326 audit(1773783001.342:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.19866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9581b9c799 code=0x7ffc0000 [ 1886.908108][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19872'. [ 1887.098419][T16780] netlink: 'syz.2.19876': attribute type 7 has an invalid length. [ 1887.125070][T16780] netlink: 140 bytes leftover after parsing attributes in process `syz.2.19876'. [ 1887.346235][ T27] audit: type=1326 audit(1773783002.061:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16786 comm="syz.0.19880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1887.406548][ T27] audit: type=1326 audit(1773783002.061:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16786 comm="syz.0.19880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1887.437138][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19881'. [ 1887.472163][ T27] audit: type=1326 audit(1773783002.115:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16786 comm="syz.0.19880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1887.518994][ T27] audit: type=1326 audit(1773783002.115:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16786 comm="syz.0.19880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1af9c799 code=0x7ffc0000 [ 1887.569236][T16793] loop0: detected capacity change from 0 to 164 [ 1887.647000][T16796] bridge7: entered promiscuous mode [ 1887.665309][T16796] bridge7: entered allmulticast mode [ 1887.837902][T16799] loop0: detected capacity change from 0 to 16 [ 1887.866324][T16799] erofs: (device loop0): mounted with root inode @ nid 36. [ 1887.876755][T16774] loop1: detected capacity change from 0 to 32768 [ 1887.909462][T16774] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.19873 (16774) [ 1887.923688][T16799] syz.0.19885: attempt to access beyond end of device [ 1887.923688][T16799] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1887.975205][T16799] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -32 in[46, 4050] out[4096] [ 1887.988007][T16774] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1888.040919][ T27] audit: type=1800 audit(1773783002.823:3660): pid=16799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19885" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1888.055312][T16774] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1888.096468][T16774] BTRFS info (device loop1): setting nodatasum [ 1888.106059][T16774] BTRFS info (device loop1): force zlib compression, level 3 [ 1888.125334][T16774] BTRFS info (device loop1): metadata ratio 1 [ 1888.143497][T16774] BTRFS info (device loop1): enabling ssd optimizations [ 1888.150518][T16774] BTRFS info (device loop1): allowing degraded mounts [ 1888.180696][T16774] BTRFS info (device loop1): using free space tree [ 1888.300324][T16820] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1888.695226][T16838] ieee802154 phy0 wpan0: encryption failed: -90 [ 1888.911083][T16846] loop3: detected capacity change from 0 to 512 [ 1888.946040][T16846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1888.963281][T16846] EXT4-fs: Ignoring removed i_version option [ 1888.995566][ T6569] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1889.068022][T16846] EXT4-fs (loop3): 1 orphan inode deleted [ 1889.116575][T16846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1889.391707][T16860] ipt_ECN: cannot use operation on non-tcp rule [ 1889.468278][ T787] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1889.500868][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19908'. [ 1889.611358][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19910'. [ 1889.698191][ T787] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1889.711365][ T787] usb 4-1: config 0 has no interface number 0 [ 1889.717643][ T787] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 1889.722790][T16872] loop0: detected capacity change from 0 to 64 [ 1889.734356][ T787] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1889.745286][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.822378][T16872] hfs: unable to locate alternate MDB [ 1889.830504][ T787] usb 4-1: config 0 descriptor?? [ 1889.837155][T16846] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1889.845331][T16874] loop1: detected capacity change from 0 to 65 [ 1889.870046][T16872] hfs: continuing without an alternate MDB [ 1889.877219][ T787] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input98 [ 1889.906568][T16874] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1889.980544][ T27] audit: type=1800 audit(1773783004.904:3661): pid=16872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19912" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 1890.026885][ C1] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1890.104122][ T787] usb 4-1: USB disconnect, device number 68 [ 1890.104235][ C1] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1890.162598][ T4231] hfs: new node 0 already hashed? [ 1890.181754][ T4231] ------------[ cut here ]------------ [ 1890.187900][ T4231] WARNING: CPU: 0 PID: 4231 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440 [ 1890.197399][ T4231] Modules linked in: [ 1890.201438][ T4231] CPU: 0 PID: 4231 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1890.209385][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1890.220127][ T4231] Workqueue: writeback wb_workfn (flush-7:0) [ 1890.226427][ T4231] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 1890.232229][ T4231] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 1890.252369][ T4231] RSP: 0018:ffffc9001a5a6e18 EFLAGS: 00010246 [ 1890.258493][ T4231] RAX: 000000000000001f RBX: ffff88823bd02000 RCX: 9255041d72559000 [ 1890.266719][ T4231] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1890.275078][ T4231] RBP: 0000000000000000 R08: ffffc9001a5a6b27 R09: 1ffff920034b4d64 [ 1890.283201][ T4231] R10: dffffc0000000000 R11: fffff520034b4d65 R12: 0000000000000000 [ 1890.291338][ T4231] R13: ffff88823bd020e0 R14: ffff8880569d3900 R15: dffffc0000000000 [ 1890.299577][ T4231] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1890.308805][ T4231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1890.315560][ T4231] CR2: 000055558fdbca28 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 1890.323581][ T4231] Call Trace: [ 1890.327051][ T4231] [ 1890.330040][ T4231] hfs_bmap_alloc+0x541/0x5d0 [ 1890.334841][ T4231] ? hfs_bmap_reserve+0x430/0x430 [ 1890.339903][ T4231] hfs_btree_inc_height+0x101/0xac0 [ 1890.345216][ T4231] ? hfs_brec_insert+0x6fa/0xbd0 [ 1890.350181][ T4231] ? hfs_brec_insert+0xbd0/0xbd0 [ 1890.355240][ T4231] ? do_raw_spin_unlock+0x121/0x230 [ 1890.360492][ T4231] hfs_brec_insert+0x748/0xbd0 [ 1890.365408][ T4231] ? hfs_brec_keylen+0x360/0x360 [ 1890.370418][ T4231] __hfs_ext_write_extent+0x2a1/0x470 [ 1890.375928][ T4231] hfs_ext_write_extent+0x17f/0x210 [ 1890.381231][ T4231] ? verify_lock_unused+0x140/0x140 [ 1890.386469][ T4231] ? hfs_ext_find_block+0x190/0x190 [ 1890.392017][ T4231] ? blk_start_plug+0x51/0x1a0 [ 1890.396815][ T4231] hfs_write_inode+0xdc/0x880 [ 1890.401601][ T4231] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1890.407018][ T4231] ? __writeback_single_inode+0x48d/0xec0 [ 1890.412842][ T4231] ? __lock_acquire+0x7d40/0x7d40 [ 1890.418033][ T4231] ? do_raw_spin_lock+0x11f/0x2c0 [ 1890.423184][ T4231] ? __rwlock_init+0x150/0x150 [ 1890.428215][ T4231] __writeback_single_inode+0x705/0xec0 [ 1890.433821][ T4231] writeback_sb_inodes+0x7cd/0xf50 [ 1890.439128][ T4231] ? queue_io+0x550/0x550 [ 1890.443506][ T4231] ? rcu_is_watching+0x15/0xb0 [ 1890.448455][ T4231] wb_writeback+0x46a/0xbf0 [ 1890.452994][ T4231] ? queue_io+0x3b1/0x550 [ 1890.457419][ T4231] ? percpu_ref_tryget+0x250/0x250 [ 1890.462653][ T4231] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1890.468748][ T4231] ? _raw_spin_unlock_irq+0x23/0x50 [ 1890.474057][ T4231] wb_workfn+0x400/0xe60 [ 1890.478343][ T4231] ? inode_wait_for_writeback+0x230/0x230 [ 1890.484217][ T4231] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1890.490226][ T4231] ? read_lock_is_recursive+0x20/0x20 [ 1890.495738][ T4231] ? _raw_spin_unlock_irq+0x23/0x50 [ 1890.500975][ T4231] ? process_scheduled_works+0x96f/0x15d0 [ 1890.506963][ T4231] ? process_scheduled_works+0x96f/0x15d0 [ 1890.512754][ T4231] process_scheduled_works+0xa5d/0x15d0 [ 1890.518348][ T4231] ? worker_attach_to_pool+0x380/0x380 [ 1890.523939][ T4231] ? assign_work+0x3d2/0x5d0 [ 1890.528561][ T4231] worker_thread+0xa55/0xfc0 [ 1890.533254][ T4231] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1890.539246][ T4231] ? _raw_spin_unlock+0x40/0x40 [ 1890.544187][ T4231] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1890.550441][ T4231] kthread+0x2fa/0x390 [ 1890.554555][ T4231] ? pr_cont_work+0x560/0x560 [ 1890.559432][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 1890.564075][ T4231] ret_from_fork+0x48/0x80 [ 1890.568861][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 1890.573521][ T4231] ret_from_fork_asm+0x11/0x20 [ 1890.578599][ T4231] [ 1890.581674][ T4231] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1890.589133][ T4231] CPU: 0 PID: 4231 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1890.596703][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1890.606769][ T4231] Workqueue: writeback wb_workfn (flush-7:0) [ 1890.612881][ T4231] Call Trace: [ 1890.616251][ T4231] [ 1890.619196][ T4231] dump_stack_lvl+0x18c/0x250 [ 1890.623894][ T4231] ? show_regs_print_info+0x20/0x20 [ 1890.629116][ T4231] ? load_image+0x400/0x400 [ 1890.633680][ T4231] panic+0x2dc/0x730 [ 1890.637619][ T4231] ? bpf_jit_dump+0xd0/0xd0 [ 1890.642169][ T4231] ? ret_from_fork_asm+0x11/0x20 [ 1890.647153][ T4231] __warn+0x2e0/0x470 [ 1890.651167][ T4231] ? hfs_bnode_create+0x3b9/0x440 [ 1890.656215][ T4231] ? hfs_bnode_create+0x3b9/0x440 [ 1890.661238][ T4231] report_bug+0x2be/0x4f0 [ 1890.665576][ T4231] ? hfs_bnode_create+0x3b9/0x440 [ 1890.670606][ T4231] ? hfs_bnode_create+0x3b9/0x440 [ 1890.675627][ T4231] ? hfs_bnode_create+0x3bb/0x440 [ 1890.680673][ T4231] handle_bug+0xcf/0x120 [ 1890.685033][ T4231] exc_invalid_op+0x1a/0x50 [ 1890.689725][ T4231] asm_exc_invalid_op+0x1a/0x20 [ 1890.694581][ T4231] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 1890.700222][ T4231] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 1890.719924][ T4231] RSP: 0018:ffffc9001a5a6e18 EFLAGS: 00010246 [ 1890.726026][ T4231] RAX: 000000000000001f RBX: ffff88823bd02000 RCX: 9255041d72559000 [ 1890.734450][ T4231] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1890.742428][ T4231] RBP: 0000000000000000 R08: ffffc9001a5a6b27 R09: 1ffff920034b4d64 [ 1890.750409][ T4231] R10: dffffc0000000000 R11: fffff520034b4d65 R12: 0000000000000000 [ 1890.758576][ T4231] R13: ffff88823bd020e0 R14: ffff8880569d3900 R15: dffffc0000000000 [ 1890.766570][ T4231] ? hfs_bnode_create+0x3b9/0x440 [ 1890.771612][ T4231] hfs_bmap_alloc+0x541/0x5d0 [ 1890.776446][ T4231] ? hfs_bmap_reserve+0x430/0x430 [ 1890.781491][ T4231] hfs_btree_inc_height+0x101/0xac0 [ 1890.786697][ T4231] ? hfs_brec_insert+0x6fa/0xbd0 [ 1890.791754][ T4231] ? hfs_brec_insert+0xbd0/0xbd0 [ 1890.796700][ T4231] ? do_raw_spin_unlock+0x121/0x230 [ 1890.801937][ T4231] hfs_brec_insert+0x748/0xbd0 [ 1890.806757][ T4231] ? hfs_brec_keylen+0x360/0x360 [ 1890.811745][ T4231] __hfs_ext_write_extent+0x2a1/0x470 [ 1890.817158][ T4231] hfs_ext_write_extent+0x17f/0x210 [ 1890.822395][ T4231] ? verify_lock_unused+0x140/0x140 [ 1890.827725][ T4231] ? hfs_ext_find_block+0x190/0x190 [ 1890.832947][ T4231] ? blk_start_plug+0x51/0x1a0 [ 1890.837726][ T4231] hfs_write_inode+0xdc/0x880 [ 1890.842510][ T4231] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1890.847897][ T4231] ? __writeback_single_inode+0x48d/0xec0 [ 1890.853781][ T4231] ? __lock_acquire+0x7d40/0x7d40 [ 1890.858819][ T4231] ? do_raw_spin_lock+0x11f/0x2c0 [ 1890.863884][ T4231] ? __rwlock_init+0x150/0x150 [ 1890.868703][ T4231] __writeback_single_inode+0x705/0xec0 [ 1890.874341][ T4231] writeback_sb_inodes+0x7cd/0xf50 [ 1890.879516][ T4231] ? queue_io+0x550/0x550 [ 1890.883898][ T4231] ? rcu_is_watching+0x15/0xb0 [ 1890.888708][ T4231] wb_writeback+0x46a/0xbf0 [ 1890.893328][ T4231] ? queue_io+0x3b1/0x550 [ 1890.897773][ T4231] ? percpu_ref_tryget+0x250/0x250 [ 1890.902911][ T4231] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1890.908908][ T4231] ? _raw_spin_unlock_irq+0x23/0x50 [ 1890.914166][ T4231] wb_workfn+0x400/0xe60 [ 1890.918505][ T4231] ? inode_wait_for_writeback+0x230/0x230 [ 1890.924248][ T4231] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1890.930327][ T4231] ? read_lock_is_recursive+0x20/0x20 [ 1890.935718][ T4231] ? _raw_spin_unlock_irq+0x23/0x50 [ 1890.940925][ T4231] ? process_scheduled_works+0x96f/0x15d0 [ 1890.946671][ T4231] ? process_scheduled_works+0x96f/0x15d0 [ 1890.952400][ T4231] process_scheduled_works+0xa5d/0x15d0 [ 1890.958077][ T4231] ? worker_attach_to_pool+0x380/0x380 [ 1890.963559][ T4231] ? assign_work+0x3d2/0x5d0 [ 1890.968168][ T4231] worker_thread+0xa55/0xfc0 [ 1890.972778][ T4231] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1890.978687][ T4231] ? _raw_spin_unlock+0x40/0x40 [ 1890.983541][ T4231] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1890.989547][ T4231] kthread+0x2fa/0x390 [ 1890.993620][ T4231] ? pr_cont_work+0x560/0x560 [ 1890.998398][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 1891.002994][ T4231] ret_from_fork+0x48/0x80 [ 1891.007506][ T4231] ? kthread_blkcg+0xd0/0xd0 [ 1891.012111][ T4231] ret_from_fork_asm+0x11/0x20 [ 1891.017069][ T4231] [ 1891.020773][ T4231] Kernel Offset: disabled [ 1891.025241][ T4231] Rebooting in 86400 seconds..