last executing test programs: 3m18.589983688s ago: executing program 3 (id=5479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 3m18.363172265s ago: executing program 3 (id=5482): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x80}}, 0x4, 0x7}, &(0x7f00000000c0)=0x90) 3m18.119997668s ago: executing program 3 (id=5485): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0bdf9b693700000056140602000000000c000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3m17.784949455s ago: executing program 3 (id=5490): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 3m16.680777385s ago: executing program 3 (id=5501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 3m14.351940741s ago: executing program 3 (id=5522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}}, 0x0) 3m13.770507241s ago: executing program 32 (id=5522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}}, 0x0) 2.971426796s ago: executing program 5 (id=8440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 2.877911308s ago: executing program 5 (id=8443): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f0000000780)="a112fde440109737", 0x8}], 0x2}, 0x400c010) 2.662706507s ago: executing program 2 (id=8448): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x1, 0x181042) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 2.635659422s ago: executing program 5 (id=8449): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'bond_slave_1\x00'}) 2.414618939s ago: executing program 2 (id=8452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x1, 0x70bd24, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x6}, {0x24}, {0x4, 0xa, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) 2.3635192s ago: executing program 5 (id=8453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.273129543s ago: executing program 0 (id=8455): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="001803"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.064601853s ago: executing program 5 (id=8458): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) 1.973889375s ago: executing program 2 (id=8461): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000740)) 1.858185344s ago: executing program 2 (id=8463): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x35cb, 0xa, 0x14, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x400]}) 1.754382574s ago: executing program 2 (id=8464): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a0012000a002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.565126298s ago: executing program 2 (id=8467): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa38009050402100000fa000905820240"], 0x0) 882.013098ms ago: executing program 1 (id=8476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 873.274366ms ago: executing program 4 (id=8477): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@empty, @rand_addr=0x64010100, 0xa, 0x1f}}) 763.983235ms ago: executing program 1 (id=8478): mkdir(&(0x7f0000000080)='./file0\x00', 0x135) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@none}]}) 751.162713ms ago: executing program 4 (id=8479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0xb3f19c44429efdb1, 0x0, 0x0, {0x0, 0x0, 0xfffb}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) 679.219ms ago: executing program 1 (id=8480): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x8, 0xfd, 0x0, @generic=0x2}) 617.196707ms ago: executing program 4 (id=8481): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d215c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 577.56098ms ago: executing program 1 (id=8482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000240)) 492.069893ms ago: executing program 0 (id=8483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180200006602000000000000070000008500000097000000850000007d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 424.318491ms ago: executing program 5 (id=8484): syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 394.209125ms ago: executing program 4 (id=8485): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x3000000) 393.678804ms ago: executing program 1 (id=8486): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 283.896944ms ago: executing program 0 (id=8487): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_lifetime={0x4, 0x4, 0x200, 0x8000, 0xc05, 0x81}]}, 0x78}, 0x1, 0x7}, 0x0) 243.435046ms ago: executing program 4 (id=8488): r0 = socket(0x1, 0x5, 0x0) write$nbd(r0, 0x0, 0x0) 222.882982ms ago: executing program 0 (id=8489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffc, 0x9, 0xffffffffffffffff, 0x48be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x5, 0xfbffffff, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4091}, 0x2400c808) 191.065866ms ago: executing program 1 (id=8490): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 137.229176ms ago: executing program 0 (id=8491): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001980)={0x2020}, 0x2020) 106.32221ms ago: executing program 4 (id=8492): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001380)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT], 0x1, 0x1256, &(0x7f0000002400)="$eJzs3E9rXFUYB+B3plNnOjV/1FptF3rQjauhycKVIEFSkAwotRFaQZiSiQ65zoTMGBgRY1duXfoZxKU7RfwC2boX3GUjrrIQrzh3apJ2qk0jmVKfZ3Nf7rm/e84hl8Ad7jl7r3350cZ6v7HeGkS5VIryZkTaT5GiHHe8sFIcb9xcWWo2l6+ldHXp+sKrKaXZF39479NvXvpxcP7db2e/q8bu/Pt7vy7+sntx99LeH9c/7PRTp5+6vUFqpVu93qB1K2untU5/o5HS21m71W+nTrff3jrSvp71NjeHqdVdm6lvbrX7/dTqDtNGe5gGvTTYGqbWB61ONzUajTRTD+7r7L9fsvr1fp5/H5HnZ+OJyPM8L0U9SvFkzMRsfB4RT8XT8UxciGfjYjwXz8el0VWnMXwAAAAAAAAAAAAAAAAAAAD4/9gfreY/WP9/Lupxfrz+fy7mJ67/PzPtQQMAAAAAAAAAAAAAAAAAAMBj5p0bN1eWms3laynVIrIvtle3V4tj0b60Hp3Ioh1XYi5+j9EeAYWivvpmc/lKGjkTETvj/M726pmI6riTv/ILo+0ExvnK6PSd/EKRT3E7O5SvRr3ovxYR7ViMubhwqP/aQX5xYr4Wr7x8aPyNmMt3InqRxdqo74P8ZwspvfFW86785dF1AAAA8DhopL/NH33/LXb5azTu117kj/H7wF3v15W4XJnu3InoDz/ZaGVZe+toUbvnzNSK6qMxjOMU5ZPEqzGp6eeIyMpHmr76KeK/GHOp9BD3+bj0j8/P6RSloqiNn+WT3DCimFDpUXh+jl3cPtHcJxfT+5/E6Tn4o9/TVDk3lREBAAAAAAAAAADwIB7ke8Df4qG/IqzEhC/LXp/OVAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgWAAAAABAmL91Gh0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFQAAAD//3MPuIc=") utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 0s ago: executing program 0 (id=8493): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 40] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 717.223834][T19440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 717.254526][T19481] loop5: detected capacity change from 0 to 4096 [ 717.317807][T19481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 717.409933][T19481] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 717.436497][T19486] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6481'. [ 717.509975][T19469] loop0: detected capacity change from 0 to 32768 [ 717.586274][T19469] ERROR: (device loop0): dtSearch: stack overrun! [ 717.586274][T19469] [ 717.646877][T19469] ERROR: (device loop0): remounting filesystem as read-only [ 717.686770][T19469] btstack dump: [ 717.695332][T19469] bn = 0, index = 4 [ 717.719616][T17063] EXT4-fs (loop5): unmounting filesystem. [ 717.732148][T19469] bn = 0, index = 4 [ 717.736011][T19469] bn = 0, index = 4 [ 717.782402][T19490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6483'. [ 717.804344][T19490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6483'. [ 717.816933][T19469] bn = 0, index = 4 [ 717.820798][T19469] bn = 0, index = 4 [ 717.824653][T19469] bn = 0, index = 4 [ 717.846376][T19469] bn = 0, index = 4 [ 717.857512][T19469] bn = 0, index = 0 [ 717.878646][T19469] jfs_lookup: dtSearch returned -5 [ 718.094433][T19498] loop5: detected capacity change from 0 to 64 [ 719.167434][T19537] netlink: 'syz.0.6505': attribute type 9 has an invalid length. [ 719.179585][T19539] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 719.583012][T19556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6516'. [ 719.635473][T19556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6516'. [ 719.671822][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6518'. [ 719.988967][T19574] netlink: 'syz.2.6525': attribute type 7 has an invalid length. [ 720.025316][T19574] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6525'. [ 720.142222][T19581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6528'. [ 720.465496][ T7219] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 720.690316][ T7219] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 720.699414][ T7219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.732400][T19594] loop0: detected capacity change from 0 to 4096 [ 720.753073][ T7219] usb 2-1: Product: syz [ 720.761437][ T7219] usb 2-1: Manufacturer: syz [ 720.780671][T19594] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 720.808444][ T7219] usb 2-1: SerialNumber: syz [ 720.857046][ T7219] usb 2-1: config 0 descriptor?? [ 720.889021][ T7219] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 720.898414][T19607] loop5: detected capacity change from 0 to 256 [ 720.916133][ T7219] usb 2-1: Detected FT232HP [ 721.026605][T19594] ntfs3: loop0: failed to convert "c46c" to iso8859-9 [ 721.051056][T19607] FAT-fs (loop5): Directory bread(block 64) failed [ 721.065722][T19607] FAT-fs (loop5): Directory bread(block 65) failed [ 721.092267][T19607] FAT-fs (loop5): Directory bread(block 66) failed [ 721.129615][T19607] FAT-fs (loop5): Directory bread(block 67) failed [ 721.195232][T19607] FAT-fs (loop5): Directory bread(block 68) failed [ 721.201828][T19607] FAT-fs (loop5): Directory bread(block 69) failed [ 721.246383][T19607] FAT-fs (loop5): Directory bread(block 70) failed [ 721.278001][T19607] FAT-fs (loop5): Directory bread(block 71) failed [ 721.284672][T19607] FAT-fs (loop5): Directory bread(block 72) failed [ 721.311356][T19607] FAT-fs (loop5): Directory bread(block 73) failed [ 721.326933][ T7219] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 721.345161][ T7219] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 721.349529][T19607] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 721.401764][ T7219] usb 2-1: USB disconnect, device number 16 [ 721.449180][ T7219] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 721.476568][ T7219] ftdi_sio 2-1:0.0: device disconnected [ 721.648146][T19619] kernel profiling enabled (shift: 7) [ 721.715374][T19621] netlink: 25 bytes leftover after parsing attributes in process `syz.5.6548'. [ 722.075455][T19634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6553'. [ 722.442274][T19645] netlink: 'syz.1.6559': attribute type 1 has an invalid length. [ 723.341665][T19690] __nla_validate_parse: 2 callbacks suppressed [ 723.341683][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6581'. [ 723.473644][T19694] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6584'. [ 723.479929][T19696] netlink: 1392 bytes leftover after parsing attributes in process `syz.5.6583'. [ 723.566796][T19692] loop2: detected capacity change from 0 to 4096 [ 723.620277][T19692] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 724.096624][T19718] loop4: detected capacity change from 0 to 1024 [ 724.126495][T19720] loop2: detected capacity change from 0 to 1024 [ 724.169043][T19720] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 724.251840][T19718] hfsplus: b-tree write err: -5, ino 2 [ 724.417249][T19727] loop5: detected capacity change from 0 to 512 [ 724.456503][ T46] hfsplus: b-tree write err: -5, ino 25 [ 724.462316][ T46] hfsplus: b-tree write err: -5, ino 4 [ 724.481177][T19727] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 724.505532][ T46] hfsplus: b-tree write err: -5, ino 2 [ 724.554678][T19727] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 724.593589][T19727] EXT4-fs (loop5): orphan cleanup on readonly fs [ 724.635674][T19727] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.6599: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 724.720788][T19727] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6599: couldn't read orphan inode 13 (err -117) [ 724.764323][T19727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 724.835977][T19727] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (24564!=0) [ 724.916754][T19711] loop0: detected capacity change from 0 to 32768 [ 725.034458][T19711] XFS (loop0): Mounting V5 Filesystem [ 725.122649][T17063] EXT4-fs (loop5): unmounting filesystem. [ 725.258661][T19711] XFS (loop0): Ending clean mount [ 725.293574][T19711] XFS (loop0): Quotacheck needed: Please wait. [ 725.397443][T19711] XFS (loop0): Quotacheck: Done. [ 725.741076][ T4266] XFS (loop0): Unmounting Filesystem [ 726.290849][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6627'. [ 726.636674][T19804] loop4: detected capacity change from 0 to 2048 [ 726.683190][T19804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.775697][T19812] loop5: detected capacity change from 0 to 256 [ 727.477250][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6645'. [ 727.504714][T19807] loop0: detected capacity change from 0 to 32768 [ 727.723088][T19834] loop4: detected capacity change from 0 to 64 [ 727.779726][T19834] hfs: unable to locate alternate MDB [ 727.785245][T19834] hfs: continuing without an alternate MDB [ 728.097457][T19850] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.6654'. [ 728.133795][T19850] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 728.443510][T19864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6662'. [ 728.663011][T19874] netlink: 'syz.0.6667': attribute type 3 has an invalid length. [ 728.722138][T19874] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6667'. [ 729.020609][T19890] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6) [ 729.436745][T19907] loop5: detected capacity change from 0 to 64 [ 729.508825][T15492] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 729.586713][T19913] loop1: detected capacity change from 0 to 512 [ 729.615869][T19913] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 729.735994][T15492] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.761473][T19913] syz.1.6686: attempt to access beyond end of device [ 729.761473][T19913] loop1: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 729.769075][T15492] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 729.816046][T15492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.879649][T15492] usb 3-1: Product: syz [ 729.884705][T19913] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 729.905386][T15492] usb 3-1: Manufacturer: syz [ 729.905726][T19913] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 729.910039][T15492] usb 3-1: SerialNumber: syz [ 729.923624][T15492] usb 3-1: config 0 descriptor?? [ 729.945061][T15492] asix: probe of 3-1:0.0 failed with error -22 [ 730.103929][T19929] loop0: detected capacity change from 0 to 64 [ 730.180755][T10232] usb 3-1: USB disconnect, device number 19 [ 730.401927][T19935] loop1: detected capacity change from 0 to 1024 [ 730.453811][T19938] netlink: 216 bytes leftover after parsing attributes in process `syz.5.6698'. [ 730.493407][T19938] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6698'. [ 730.867864][ T11] hfsplus: b-tree write err: -5, ino 25 [ 730.873660][ T11] hfsplus: b-tree write err: -5, ino 4 [ 730.910934][ T11] hfsplus: b-tree write err: -5, ino 2 [ 730.916527][ T11] hfsplus: b-tree write err: -5, ino 26 [ 730.967394][T19930] loop4: detected capacity change from 0 to 32768 [ 731.023729][T19930] jfs_strtoUCS: char2uni returned -22. [ 731.073020][T19930] charset = cp950, char = 0xd4 [ 731.079862][T19952] PKCS8: Unsupported PKCS#8 version [ 731.585774][T19973] libceph: resolve '00' (ret=-3): failed [ 731.603998][ T26] audit: type=1326 audit(1773340568.748:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 731.706926][ T26] audit: type=1326 audit(1773340568.767:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 731.741271][T19977] loop2: detected capacity change from 0 to 2048 [ 731.747580][T19970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6715'. [ 731.797702][ T26] audit: type=1326 audit(1773340568.767:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 731.839496][T19977] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 731.925859][T19983] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.937965][ T26] audit: type=1326 audit(1773340568.767:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19974 comm="syz.1.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 732.056717][T19988] binder: 19985:19988 ioctl 400c620e 0 returned -14 [ 732.428956][T20000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6729'. [ 732.886518][T20023] loop5: detected capacity change from 0 to 128 [ 732.961522][T20026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6741'. [ 733.048551][ T951] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 733.139029][T20032] tipc: Can't bind to reserved service type 2 [ 733.191035][T20034] loop4: detected capacity change from 0 to 1024 [ 733.244953][ T951] usb 1-1: unable to get BOS descriptor or descriptor too short [ 733.273949][ T951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 51, changing to 7 [ 733.316290][ T951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 733.361214][ T951] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 733.375590][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.385885][ T951] usb 1-1: Product: syz [ 733.391340][ T951] usb 1-1: Manufacturer: syz [ 733.411199][ T951] usb 1-1: SerialNumber: syz [ 733.448076][ T5513] hfsplus: b-tree write err: -5, ino 25 [ 733.454935][ T5513] hfsplus: b-tree write err: -5, ino 4 [ 733.460507][ T5513] hfsplus: b-tree write err: -5, ino 2 [ 733.476494][ T5513] hfsplus: b-tree write err: -5, ino 26 [ 733.684012][ T951] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 733.730572][ T951] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 733.795537][ T951] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 733.833918][T20030] loop1: detected capacity change from 0 to 32768 [ 733.849849][ T7974] udevd[7974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.876670][ T951] usb 1-1: USB disconnect, device number 27 [ 733.944932][T20030] JBD2: Ignoring recovery information on journal [ 734.035424][T20030] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 734.237471][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 734.250417][T20066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6760'. [ 734.422027][T20069] xt_hashlimit: size too large, truncated to 1048576 [ 734.467575][T20069] xt_hashlimit: invalid interval [ 734.489969][T20065] loop4: detected capacity change from 0 to 4096 [ 734.534121][T20065] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 734.749529][T20065] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 735.865994][T20124] binder: BC_ACQUIRE_RESULT not supported [ 735.904003][T20124] binder: 20119:20124 ioctl c0306201 200000000500 returned -22 [ 736.402242][T20146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 736.756494][T20162] loop1: detected capacity change from 0 to 2048 [ 736.794025][T20162] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 736.854210][T20169] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 737.545131][T20197] loop0: detected capacity change from 0 to 2048 [ 737.586624][T20197] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 737.651228][T20203] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 737.940581][T20218] netlink: 'syz.1.6834': attribute type 26 has an invalid length. [ 738.178121][T20228] netlink: 'syz.1.6839': attribute type 17 has an invalid length. [ 738.231546][T20228] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6839'. [ 738.633699][T20251] loop1: detected capacity change from 0 to 256 [ 738.712480][T20251] FAT-fs (loop1): Directory bread(block 64) failed [ 738.768293][T20251] FAT-fs (loop1): Directory bread(block 65) failed [ 738.775043][T20251] FAT-fs (loop1): Directory bread(block 66) failed [ 738.827621][T20251] FAT-fs (loop1): Directory bread(block 67) failed [ 738.874892][T20251] FAT-fs (loop1): Directory bread(block 68) failed [ 738.912556][T20251] FAT-fs (loop1): Directory bread(block 69) failed [ 738.934370][T20251] FAT-fs (loop1): Directory bread(block 70) failed [ 738.947156][T20251] FAT-fs (loop1): Directory bread(block 71) failed [ 738.996590][T20251] FAT-fs (loop1): Directory bread(block 72) failed [ 739.030897][T20251] FAT-fs (loop1): Directory bread(block 73) failed [ 739.788915][T20298] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6871'. [ 739.813824][T20300] netlink: 'syz.1.6872': attribute type 10 has an invalid length. [ 739.818888][T20292] loop2: detected capacity change from 0 to 4096 [ 739.822217][T20300] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6872'. [ 739.896054][T20292] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 740.061443][ T951] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 740.076463][ T4277] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 740.275375][ T951] usb 1-1: Using ep0 maxpacket: 8 [ 740.283472][ T951] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 740.301672][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.349444][ T951] usb 1-1: config 0 has no interface number 0 [ 740.367447][ T951] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 740.422125][ T951] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 740.446287][ T951] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.489046][ T951] usb 1-1: config 0 interface 52 has no altsetting 0 [ 740.512859][ T951] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 740.541551][ T951] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 740.575112][ T951] usb 1-1: Product: syz [ 740.595962][ T951] usb 1-1: Manufacturer: syz [ 740.600665][ T951] usb 1-1: SerialNumber: syz [ 740.618260][ T951] usb 1-1: config 0 descriptor?? [ 740.862860][T20333] usb usb5: usbfs: process 20333 (syz.2.6892) did not claim interface 0 before use [ 741.059464][ T26] audit: type=1326 audit(1773340577.597:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 741.081923][ T951] usb 1-1: USB disconnect, device number 28 [ 741.143907][ T26] audit: type=1326 audit(1773340577.597:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 741.214882][ T26] audit: type=1326 audit(1773340577.597:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 741.253373][ T26] audit: type=1326 audit(1773340577.597:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a7d9c799 code=0x7ffc0000 [ 741.264600][T20346] loop5: detected capacity change from 0 to 4096 [ 741.284973][T20346] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 741.311076][T20346] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 741.376510][ T7218] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 741.579579][ T7218] usb 3-1: Using ep0 maxpacket: 8 [ 741.587293][ T7218] usb 3-1: unable to get BOS descriptor or descriptor too short [ 741.637121][ T7218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 741.670244][ T7218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 741.695321][ T7218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 741.749960][ T7218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 741.782266][ T7218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 741.793058][ T7218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 741.807137][ T7218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 741.833517][ T7218] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 741.845451][ T7218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.865662][ T7218] usb 3-1: Product: syz [ 741.870240][ T7218] usb 3-1: Manufacturer: syz [ 741.874854][ T7218] usb 3-1: SerialNumber: syz [ 741.898115][ T7218] usb 3-1: config 0 descriptor?? [ 741.904075][T20343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.005250][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.162796][ T951] usb 3-1: USB disconnect, device number 20 [ 742.555403][T20365] loop1: detected capacity change from 0 to 32768 [ 742.615921][T20365] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 742.615921][T20365] [ 742.643251][T20365] ERROR: (device loop1): remounting filesystem as read-only [ 743.386239][T20389] loop4: detected capacity change from 0 to 32768 [ 743.393532][T20389] XFS: attr2 mount option is deprecated. [ 743.513348][T20395] loop5: detected capacity change from 0 to 32768 [ 743.566522][T20389] XFS (loop4): Mounting V5 Filesystem [ 743.626640][T20395] XFS (loop5): Mounting V5 Filesystem [ 743.698603][T20389] XFS (loop4): Ending clean mount [ 743.730838][T20431] loop0: detected capacity change from 0 to 1024 [ 743.744587][T20434] netlink: 'syz.1.6933': attribute type 32 has an invalid length. [ 743.755555][T20395] XFS (loop5): Ending clean mount [ 743.764403][T20431] EXT4-fs: Ignoring removed i_version option [ 743.822931][T20431] EXT4-fs (loop0): Test dummy encryption mode enabled [ 743.851679][T20389] XFS (loop4): Quotacheck needed: Please wait. [ 743.932398][T17063] XFS (loop5): Unmounting Filesystem [ 743.967920][T20389] XFS (loop4): Quotacheck: Done. [ 743.972050][T20431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 744.026789][ T4273] XFS (loop4): Unmounting Filesystem [ 744.125771][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 744.293138][T20415] loop2: detected capacity change from 0 to 32768 [ 744.428438][T20415] XFS (loop2): Mounting V5 Filesystem [ 744.568360][T20415] XFS (loop2): Ending clean mount [ 744.637529][T20415] XFS (loop2): Quotacheck needed: Please wait. [ 744.790208][T20415] XFS (loop2): Quotacheck: Done. [ 744.798907][T20455] netlink: 'syz.1.6939': attribute type 10 has an invalid length. [ 744.867755][T20455] device veth1_macvtap left promiscuous mode [ 744.977110][ T4277] XFS (loop2): Unmounting Filesystem [ 745.052333][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6934'. [ 745.093451][T20459] device geneve2 entered promiscuous mode [ 745.102244][T20443] loop0: detected capacity change from 0 to 32768 [ 745.169579][T20443] (syz.0.6937,20443,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 745.234552][T20443] (syz.0.6937,20443,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 745.336207][T20443] JBD2: Ignoring recovery information on journal [ 745.366391][ T26] audit: type=1326 audit(1773340581.619:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20468 comm="syz.4.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 745.456089][T20443] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 745.572161][ T26] audit: type=1326 audit(1773340581.619:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20468 comm="syz.4.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 745.664888][ T26] audit: type=1326 audit(1773340581.656:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20468 comm="syz.4.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 745.779687][ T26] audit: type=1326 audit(1773340581.656:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20468 comm="syz.4.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 745.845290][ T26] audit: type=1326 audit(1773340581.656:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20468 comm="syz.4.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 745.867824][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 746.938600][T20525] xt_limit: Overflow, try lower: 1207959552/384 [ 746.955153][T20488] loop2: detected capacity change from 0 to 40427 [ 746.983672][T20488] F2FS-fs (loop2): invalid crc value [ 747.045533][T20488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 747.198016][T20488] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 747.254711][T20532] loop4: detected capacity change from 0 to 4096 [ 747.264130][T20488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 747.319807][T20532] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 747.371362][T20532] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 747.448366][T20541] Process accounting paused [ 747.745211][T20551] loop4: detected capacity change from 0 to 1024 [ 747.764999][T20551] EXT4-fs: Ignoring removed mblk_io_submit option [ 747.812129][T20551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 747.843720][T20555] loop0: detected capacity change from 0 to 64 [ 747.878599][T20551] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.6983: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 748.057856][T20551] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6983: couldn't read orphan inode 11 (err -117) [ 748.133055][T20551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 748.204510][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6990'. [ 748.258101][T20569] device geneve3 entered promiscuous mode [ 748.287025][T20551] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.6983: Invalid block bitmap block 0 in block_group 0 [ 748.290167][T20571] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 748.371770][T20551] Quota error (device loop4): write_blk: dquota write failed [ 748.442256][T20551] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 748.499367][T20551] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.6983: Failed to acquire dquot type 0 [ 748.693253][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 748.817643][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7001'. [ 748.989651][T20598] loop2: detected capacity change from 0 to 256 [ 749.055779][T20601] loop4: detected capacity change from 0 to 8 [ 749.067094][T20598] FAT-fs (loop2): Directory bread(block 64) failed [ 749.087572][T20598] FAT-fs (loop2): Directory bread(block 65) failed [ 749.094232][T20598] FAT-fs (loop2): Directory bread(block 66) failed [ 749.144812][T20598] FAT-fs (loop2): Directory bread(block 67) failed [ 749.173303][T20598] FAT-fs (loop2): Directory bread(block 68) failed [ 749.199869][T20601] SQUASHFS error: Unable to read directory block [629:26] [ 749.201739][T20598] FAT-fs (loop2): Directory bread(block 69) failed [ 749.244722][T20598] FAT-fs (loop2): Directory bread(block 70) failed [ 749.283528][T20598] FAT-fs (loop2): Directory bread(block 71) failed [ 749.319799][T20598] FAT-fs (loop2): Directory bread(block 72) failed [ 749.339345][T20598] FAT-fs (loop2): Directory bread(block 73) failed [ 749.606637][T20613] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 749.817961][T20622] device bond0 entered promiscuous mode [ 749.858208][T20622] device bond_slave_0 entered promiscuous mode [ 749.886337][T20622] device bond_slave_1 entered promiscuous mode [ 750.453688][T20651] ip6t_srh: unknown srh match flags 5294 [ 750.844864][T20674] netlink: 'syz.5.7041': attribute type 1 has an invalid length. [ 751.051897][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7044'. [ 751.083486][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7044'. [ 751.092430][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7044'. [ 751.574494][T20670] loop4: detected capacity change from 0 to 32768 [ 751.624713][T20670] (syz.4.7039,20670,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 751.665073][T20670] (syz.4.7039,20670,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 751.689519][T20670] JBD2: Ignoring recovery information on journal [ 751.759916][T20670] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 752.009046][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 752.041206][T15487] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 752.055597][T20717] loop0: detected capacity change from 0 to 1764 [ 752.199596][T20717] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 752.266358][T15487] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 752.290438][T15487] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 752.314194][T15487] usb 3-1: Product: syz [ 752.318429][T15487] usb 3-1: Manufacturer: syz [ 752.343456][T15487] usb 3-1: SerialNumber: syz [ 752.361920][T15487] usb 3-1: config 0 descriptor?? [ 752.381222][T15487] ch341 3-1:0.0: ch341-uart converter detected [ 752.809695][T15487] usb 3-1: failed to send control message: -71 [ 752.827121][T15487] ch341-uart: probe of ttyUSB0 failed with error -71 [ 752.866942][T15487] usb 3-1: USB disconnect, device number 21 [ 752.884980][T15487] ch341 3-1:0.0: device disconnected [ 752.972113][T20735] netlink: set zone limit has 4 unknown bytes [ 753.046845][T20721] loop5: detected capacity change from 0 to 40427 [ 753.073120][T20721] F2FS-fs (loop5): invalid crc value [ 753.094247][T20737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7069'. [ 753.106087][T20721] F2FS-fs (loop5): Found nat_bits in checkpoint [ 753.227942][T20721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 754.055459][T15487] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 754.092289][ T26] audit: type=1107 audit(1773340589.785:109): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 754.269614][T15487] usb 5-1: Using ep0 maxpacket: 32 [ 754.415251][T15487] usb 5-1: config 2 has an invalid interface number: 157 but max is 0 [ 754.430269][T15487] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 754.449457][T15487] usb 5-1: config 2 has no interface number 0 [ 754.459699][T15487] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 754.486184][T15487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.507478][T15487] usb 5-1: Product: syz [ 754.512201][T15487] usb 5-1: Manufacturer: syz [ 754.517317][T15487] usb 5-1: SerialNumber: syz [ 754.542306][T15487] imon 5-1:2.157: unable to register, err -19 [ 754.777851][T15487] usb 5-1: USB disconnect, device number 11 [ 754.831993][ T26] audit: type=1326 audit(1773340590.477:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20807 comm="syz.2.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d139c799 code=0x7ffc0000 [ 754.932467][ T26] audit: type=1326 audit(1773340590.477:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20807 comm="syz.2.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f25d139c799 code=0x7ffc0000 [ 755.009449][ T26] audit: type=1326 audit(1773340590.477:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20807 comm="syz.2.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d139c799 code=0x7ffc0000 [ 755.318790][T20826] Cannot find del_set index 4 as target [ 755.472098][T20832] netlink: 'syz.4.7115': attribute type 10 has an invalid length. [ 755.501615][T20832] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7115'. [ 755.861791][T20840] netlink: 'syz.5.7119': attribute type 10 has an invalid length. [ 757.049737][T20907] loop1: detected capacity change from 0 to 256 [ 757.141326][T20907] FAT-fs (loop1): Directory bread(block 64) failed [ 757.175654][T20907] FAT-fs (loop1): Directory bread(block 65) failed [ 757.198186][T20907] FAT-fs (loop1): Directory bread(block 66) failed [ 757.237913][T20907] FAT-fs (loop1): Directory bread(block 67) failed [ 757.272655][T20907] FAT-fs (loop1): Directory bread(block 68) failed [ 757.294190][T20907] FAT-fs (loop1): Directory bread(block 69) failed [ 757.294825][T20913] netlink: 'syz.4.7155': attribute type 9 has an invalid length. [ 757.312137][T20907] FAT-fs (loop1): Directory bread(block 70) failed [ 757.329929][T20907] FAT-fs (loop1): Directory bread(block 71) failed [ 757.335631][T20913] netlink: 'syz.4.7155': attribute type 7 has an invalid length. [ 757.344478][T20907] FAT-fs (loop1): Directory bread(block 72) failed [ 757.355376][T20913] netlink: 'syz.4.7155': attribute type 8 has an invalid length. [ 757.361564][T20907] FAT-fs (loop1): Directory bread(block 73) failed [ 757.530070][ T951] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 757.560830][T20919] loop4: detected capacity change from 0 to 256 [ 757.603466][T20919] exfat: Deprecated parameter 'namecase' [ 757.666715][T20919] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 757.738518][ T951] usb 6-1: Using ep0 maxpacket: 16 [ 757.755771][ T951] usb 6-1: config 0 has no interfaces? [ 757.762206][T20902] loop0: detected capacity change from 0 to 32768 [ 757.784150][ T951] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 757.816060][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.837330][ T951] usb 6-1: Product: syz [ 757.873196][ T951] usb 6-1: Manufacturer: syz [ 757.881406][T20902] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 757.881406][T20902] [ 757.906820][ T951] usb 6-1: SerialNumber: syz [ 757.925747][ T951] r8152-cfgselector 6-1: config 0 descriptor?? [ 757.939820][T20902] jfs_create: dtInsert returned -EIO [ 757.970080][T20902] ERROR: (device loop0): jfs_create: [ 757.970080][T20902] [ 758.173384][ T951] r8152-cfgselector 6-1: Unknown version 0x0000 [ 758.396679][ T951] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 758.410087][T20943] xt_bpf: check failed: parse error [ 758.659999][T20955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7175'. [ 758.776261][T20961] loop1: detected capacity change from 0 to 16 [ 758.800952][T20961] erofs: (device loop1): mounted with root inode @ nid 36. [ 758.864319][T20961] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 758.917515][T20961] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 758.943369][T20961] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 758.991946][T20969] ieee802154 phy0 wpan0: encryption failed: -22 [ 759.229660][T15487] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 759.432849][T15493] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 759.453455][T15487] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 759.486318][T15487] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 759.494543][T15487] usb 1-1: Product: syz [ 759.525047][T15487] usb 1-1: Manufacturer: syz [ 759.530295][T15487] usb 1-1: SerialNumber: syz [ 759.537056][T15487] usb 1-1: config 0 descriptor?? [ 759.552658][T15487] ch341 1-1:0.0: ch341-uart converter detected [ 759.639013][T20989] loop2: detected capacity change from 0 to 4096 [ 759.654678][T20995] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7195'. [ 759.657229][T15493] usb 6-1: config 1 has an invalid interface number: 188 but max is 0 [ 759.687022][T15493] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.697879][T15493] usb 6-1: config 1 has no interface number 0 [ 759.705952][T20989] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 759.713383][T15493] usb 6-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.728338][T15493] usb 6-1: config 1 interface 188 has no altsetting 0 [ 759.745864][T20989] ntfs3: loop2: Failed to load $MFT. [ 759.760387][T15493] usb 6-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 759.798156][T15493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.806263][T15493] usb 6-1: Product: syz [ 759.819802][T15493] usb 6-1: Manufacturer: syz [ 759.844031][T15493] usb 6-1: SerialNumber: syz [ 759.912578][T15493] usb 6-1: cannot find UAC_HEADER [ 759.991146][T15487] usb 1-1: failed to send control message: -71 [ 759.998127][T15493] snd-usb-audio: probe of 6-1:1.188 failed with error -22 [ 760.009024][T15487] ch341-uart: probe of ttyUSB0 failed with error -71 [ 760.042423][T15487] usb 1-1: USB disconnect, device number 29 [ 760.097330][T15487] ch341 1-1:0.0: device disconnected [ 760.126984][ T4446] udevd[4446]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.163443][ T951] usb 6-1: USB disconnect, device number 6 [ 760.429057][T21018] loop4: detected capacity change from 0 to 256 [ 760.467581][T21018] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 760.571697][T21018] exFAT-fs (loop4): invalid start cluster (14232327) [ 761.173250][T21046] netlink: 'syz.2.7218': attribute type 10 has an invalid length. [ 761.188798][ T26] audit: type=1326 audit(1773340596.426:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.4.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 761.203162][T21046] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7218'. [ 761.260489][ T26] audit: type=1326 audit(1773340596.454:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.4.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 761.319661][ T26] audit: type=1326 audit(1773340596.454:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21049 comm="syz.4.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 761.845574][T21074] tmpfs: Bad value for 'mpol' [ 762.445283][T21096] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 762.566835][T21100] netlink: 'syz.5.7244': attribute type 10 has an invalid length. [ 762.574754][T21100] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7244'. [ 762.768825][T21081] loop0: detected capacity change from 0 to 40427 [ 762.787314][T21081] F2FS-fs (loop0): invalid crc value [ 762.830535][T21081] F2FS-fs (loop0): Found nat_bits in checkpoint [ 762.985522][T21108] loop2: detected capacity change from 0 to 256 [ 762.990001][T21081] F2FS-fs (loop0): Start checkpoint disabled! [ 763.011768][T21081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 763.215386][T21115] loop4: detected capacity change from 0 to 256 [ 763.371550][T21115] FAT-fs (loop4): Directory bread(block 64) failed [ 763.415296][T21115] FAT-fs (loop4): Directory bread(block 65) failed [ 763.437776][T21115] FAT-fs (loop4): Directory bread(block 66) failed [ 763.478150][T21115] FAT-fs (loop4): Directory bread(block 67) failed [ 763.528966][T21115] FAT-fs (loop4): Directory bread(block 68) failed [ 763.535556][T21115] FAT-fs (loop4): Directory bread(block 69) failed [ 763.580377][T21115] FAT-fs (loop4): Directory bread(block 70) failed [ 763.628441][T21115] FAT-fs (loop4): Directory bread(block 71) failed [ 763.653695][T21115] FAT-fs (loop4): Directory bread(block 72) failed [ 763.680435][T21115] FAT-fs (loop4): Directory bread(block 73) failed [ 763.735300][T21131] loop5: detected capacity change from 0 to 512 [ 763.863383][T21131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 763.880236][T21131] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.019286][T21131] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.7259: corrupted xattr block 32 [ 764.199996][T17063] EXT4-fs (loop5): unmounting filesystem. [ 764.501351][T21140] loop2: detected capacity change from 0 to 40427 [ 764.557220][T21140] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 764.576293][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7268'. [ 764.586123][T21140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 764.648929][T21140] F2FS-fs (loop2): invalid crc value [ 764.680368][T21140] F2FS-fs (loop2): Found nat_bits in checkpoint [ 764.922085][T21140] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 764.962073][T21140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 765.137158][T21146] loop1: detected capacity change from 0 to 32768 [ 765.249341][T21146] blkno = 8ed2c, nblocks = 1 [ 765.286924][T21146] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 765.286924][T21146] [ 765.387548][T21146] ERROR: (device loop1): remounting filesystem as read-only [ 765.409116][T21146] ialloc: diAlloc returned -17! [ 765.786669][T21196] loop1: detected capacity change from 0 to 1024 [ 765.880065][T21196] EXT4-fs: Ignoring removed orlov option [ 765.885763][T21196] EXT4-fs: inline encryption not supported [ 765.933361][T21196] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 765.984678][T21196] EXT4-fs (loop1): invalid journal inode [ 765.996852][T21196] EXT4-fs (loop1): can't get journal size [ 766.028174][T21196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 766.172886][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 766.340070][T21219] netlink: 'syz.0.7295': attribute type 49 has an invalid length. [ 766.349803][T21216] loop5: detected capacity change from 0 to 2048 [ 766.452062][T21224] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 766.477100][T21226] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 766.539234][T21226] Error parsing options; rc = [-22] [ 766.584931][T21216] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 766.633727][T21216] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 766.710592][T21216] Remounting filesystem read-only [ 766.737247][T21232] netlink: 'syz.4.7301': attribute type 7 has an invalid length. [ 766.745042][T21232] netlink: 'syz.4.7301': attribute type 8 has an invalid length. [ 766.759813][T21216] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 766.841390][T21216] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 766.862830][T21216] NILFS (loop5): error -5 truncating bmap (ino=16) [ 767.029509][T17063] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 767.247609][ T951] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 767.274650][T21252] loop5: detected capacity change from 0 to 256 [ 767.319631][T21252] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 767.377540][T21252] exFAT-fs (loop5): invalid start cluster (14232327) [ 767.461449][ T951] usb 1-1: Using ep0 maxpacket: 8 [ 767.470482][ T951] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 767.502406][ T951] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 767.524022][ T951] usb 1-1: Product: syz [ 767.536278][ T951] usb 1-1: Manufacturer: syz [ 767.540962][ T951] usb 1-1: SerialNumber: syz [ 767.569206][ T951] usb 1-1: config 0 descriptor?? [ 767.581616][ T951] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 767.611759][T21238] loop2: detected capacity change from 0 to 40427 [ 767.662141][T21238] F2FS-fs (loop2): invalid crc value [ 767.684570][T21238] F2FS-fs (loop2): Found nat_bits in checkpoint [ 767.825543][T21238] F2FS-fs (loop2): Start checkpoint disabled! [ 767.857151][T21238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 767.996152][T21250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7310 (21250) [ 768.016971][ T951] gspca_zc3xx: reg_r err -71 [ 768.022189][ T951] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 768.045488][ T951] usb 1-1: USB disconnect, device number 30 [ 768.075122][T21250] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 768.132804][T21250] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 768.163853][T21250] BTRFS info (device loop4): using free space tree [ 768.578515][T21250] BTRFS info (device loop4): enabling ssd optimizations [ 768.624642][T21296] set_capacity_and_notify: 1 callbacks suppressed [ 768.624659][T21296] loop2: detected capacity change from 0 to 64 [ 768.693018][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 768.699365][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.712285][T21296] MINIX-fs: bad superblock [ 768.819315][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 768.879852][T21266] loop1: detected capacity change from 0 to 32768 [ 768.943530][T21266] (syz.1.7317,21266,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 769.032315][T21266] (syz.1.7317,21266,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 769.128978][T21266] JBD2: Ignoring recovery information on journal [ 769.214189][T21310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 769.271941][ T26] audit: type=1326 audit(1773340603.984:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21311 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d19c799 code=0x7ffc0000 [ 769.294318][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.313298][T21310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 769.336164][T21266] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 769.356773][T21310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 769.362139][ T26] audit: type=1326 audit(1773340603.984:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21311 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d19c799 code=0x7ffc0000 [ 769.386494][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.529298][ T26] audit: type=1326 audit(1773340604.013:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21311 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0f8d19c799 code=0x7ffc0000 [ 769.653269][ T26] audit: type=1326 audit(1773340604.013:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21311 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d19c799 code=0x7ffc0000 [ 769.745786][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 769.771218][ T26] audit: type=1326 audit(1773340604.013:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21311 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d19c799 code=0x7ffc0000 [ 769.793576][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.824425][T21323] netlink: 'syz.5.7335': attribute type 49 has an invalid length. [ 769.845534][T21323] netlink: 'syz.5.7335': attribute type 49 has an invalid length. [ 770.196167][T21339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7342'. [ 770.726657][T21360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7353'. [ 770.780917][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7353'. [ 770.940399][T21371] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551612) [ 771.095190][T21375] loop2: detected capacity change from 0 to 1024 [ 771.168059][ T9] hfsplus: b-tree write err: -5, ino 25 [ 771.208970][ T9] hfsplus: b-tree write err: -5, ino 4 [ 771.237534][ T9] hfsplus: b-tree write err: -5, ino 2 [ 771.902018][T21411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7379'. [ 771.996028][T21415] netlink: 'syz.0.7381': attribute type 5 has an invalid length. [ 772.165485][ T7218] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 772.380959][ T7218] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 772.400616][ T7218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.427242][ T7218] usb 3-1: config 0 descriptor?? [ 772.666460][ T7218] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 772.675422][T21444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7395'. [ 772.689491][ T7218] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 772.711367][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7395'. [ 772.895891][T21455] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 772.899466][ T7218] [drm:udl_init] *ERROR* Selecting channel failed [ 772.914589][T21455] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 772.923537][T21455] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 772.938068][T21455] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 772.956826][ T7218] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 772.964588][ T7218] [drm] Initialized udl on minor 2 [ 772.976331][ T7218] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 772.988290][ T7218] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 773.045254][ T7218] usb 3-1: USB disconnect, device number 22 [ 773.070141][T10232] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 773.088816][T10232] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 773.128123][T10232] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 773.159999][T15491] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 773.375668][T15491] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 773.392759][T15491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.423331][T15491] usb 2-1: config 0 descriptor?? [ 773.440972][T15491] cp210x 2-1:0.0: cp210x converter detected [ 773.659959][T15491] usb 2-1: cp210x converter now attached to ttyUSB0 [ 773.667493][T15232] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 773.730224][T21483] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 773.756281][T21483] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 773.770010][T21483] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 773.792224][T21483] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 773.874456][T21487] loop2: detected capacity change from 0 to 2048 [ 773.886491][T15232] usb 5-1: Using ep0 maxpacket: 8 [ 773.893380][T15232] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 773.904681][T10232] usb 2-1: USB disconnect, device number 17 [ 773.923739][T21487] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 773.933471][T15232] usb 5-1: config 127 has no interface number 1 [ 773.933534][T15232] usb 5-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.933559][T15232] usb 5-1: config 127 interface 171 has no altsetting 0 [ 773.933578][T15232] usb 5-1: config 127 interface 0 has no altsetting 0 [ 773.944202][T15232] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 773.956424][T10232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 773.985873][T15232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.029864][T15232] usb 5-1: Product: syz [ 774.031623][T10232] cp210x 2-1:0.0: device disconnected [ 774.034063][T15232] usb 5-1: Manufacturer: syz [ 774.064352][T21492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 774.075365][T21487] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 774.079342][ T4675] udevd[4675]: incorrect nilfs2 checksum on /dev/loop2 [ 774.100441][T15232] usb 5-1: SerialNumber: syz [ 774.124922][T21487] Remounting filesystem read-only [ 774.227975][T21496] loop5: detected capacity change from 0 to 256 [ 774.333182][T15232] xr_serial 5-1:127.171: xr_serial converter detected [ 774.367858][T15232] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 774.374374][T15232] xr_serial: probe of ttyUSB0 failed with error -71 [ 774.389769][T21496] FAT-fs (loop5): Directory bread(block 64) failed [ 774.424721][T15232] usb 5-1: USB disconnect, device number 12 [ 774.446596][T21496] FAT-fs (loop5): Directory bread(block 65) failed [ 774.467196][T15232] xr_serial 5-1:127.171: device disconnected [ 774.475164][T21496] FAT-fs (loop5): Directory bread(block 66) failed [ 774.510223][T21496] FAT-fs (loop5): Directory bread(block 67) failed [ 774.538780][T21496] FAT-fs (loop5): Directory bread(block 68) failed [ 774.549337][T21496] FAT-fs (loop5): Directory bread(block 69) failed [ 774.556008][T21496] FAT-fs (loop5): Directory bread(block 70) failed [ 774.628390][T21496] FAT-fs (loop5): Directory bread(block 71) failed [ 774.657664][T21496] FAT-fs (loop5): Directory bread(block 72) failed [ 774.674077][T21505] netlink: 'syz.1.7426': attribute type 6 has an invalid length. [ 774.685108][T21496] FAT-fs (loop5): Directory bread(block 73) failed [ 775.570920][T10232] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 775.771888][T10232] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 775.800135][T10232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.832213][T10232] usb 6-1: Product: syz [ 775.836429][T10232] usb 6-1: Manufacturer: syz [ 775.882454][T10232] usb 6-1: SerialNumber: syz [ 775.890025][T10232] usb 6-1: config 0 descriptor?? [ 775.911950][T10232] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 776.369322][T10232] usb 6-1: USB disconnect, device number 7 [ 776.729381][T21554] loop4: detected capacity change from 0 to 32768 [ 776.770529][T21554] [ 776.770529][T21554] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 776.770529][T21554] [ 776.836641][T21554] jfs_rename: dtInsert returned -EIO [ 776.899439][T21580] loop1: detected capacity change from 0 to 1024 [ 776.955222][T21580] hfsplus: Filesystem is marked locked, mounting read-only. [ 777.032629][ T4273] [ 777.032629][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 777.032629][ T4273] [ 777.055135][ T4273] [ 777.055135][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 777.055135][ T4273] [ 777.167299][T21570] loop2: detected capacity change from 0 to 32768 [ 777.618939][T21590] loop2: detected capacity change from 0 to 4096 [ 777.663208][T21590] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 777.794390][T21590] ntfs3: loop2: failed to convert "076c" to cp949 [ 777.968704][T21601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7471'. [ 778.007068][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7471'. [ 778.157595][T21586] loop1: detected capacity change from 0 to 32768 [ 778.210807][T21607] loop0: detected capacity change from 0 to 2048 [ 778.300183][T21607] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 778.333299][T21607] UDF-fs: Scanning with blocksize 512 failed [ 778.418602][T21607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.562178][T21615] loop1: detected capacity change from 0 to 164 [ 778.606811][T21617] binder: BC_ATTEMPT_ACQUIRE not supported [ 778.615730][T21615] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 778.630052][T21617] binder: 21616:21617 ioctl c0306201 2000000001c0 returned -22 [ 778.639974][T21615] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 778.682230][T21615] Symlink component flag not implemented [ 778.712134][T21615] Symlink component flag not implemented [ 778.718483][T21615] Symlink component flag not implemented (7) [ 778.726210][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7480'. [ 778.765131][T21619] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 778.778318][T21615] Symlink component flag not implemented (116) [ 778.827632][T21619] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 779.558459][T21648] loop2: detected capacity change from 0 to 1764 [ 779.663578][T21652] Process accounting resumed [ 779.729354][T21648] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 780.081785][T21670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 780.099046][T21670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 780.138520][T21670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.158542][T10232] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 780.249343][T21680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7510'. [ 780.269398][T21680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7510'. [ 780.365229][T10232] usb 6-1: Using ep0 maxpacket: 32 [ 780.372495][T10232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.431445][T10232] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 780.447695][T10232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.481152][T10232] usb 6-1: Product: syz [ 780.487878][T10232] usb 6-1: Manufacturer: syz [ 780.493081][T10232] usb 6-1: SerialNumber: syz [ 780.533932][T10232] usb 6-1: config 0 descriptor?? [ 780.551486][T10232] usb 6-1: bad CDC descriptors [ 780.556751][T10232] usb 6-1: unsupported MDLM descriptors [ 780.766996][T15491] usb 6-1: USB disconnect, device number 8 [ 780.852099][T21702] loop2: detected capacity change from 0 to 256 [ 780.920266][T21704] nftables ruleset with unbound chain [ 780.937185][T21702] FAT-fs (loop2): Directory bread(block 64) failed [ 780.960602][T21702] FAT-fs (loop2): Directory bread(block 65) failed [ 780.975376][T21702] FAT-fs (loop2): Directory bread(block 66) failed [ 780.988978][T21702] FAT-fs (loop2): Directory bread(block 67) failed [ 780.997595][T21702] FAT-fs (loop2): Directory bread(block 68) failed [ 781.004241][T21702] FAT-fs (loop2): Directory bread(block 69) failed [ 781.035867][T21702] FAT-fs (loop2): Directory bread(block 70) failed [ 781.048428][T21702] FAT-fs (loop2): Directory bread(block 71) failed [ 781.056441][T21702] FAT-fs (loop2): Directory bread(block 72) failed [ 781.087755][T21702] FAT-fs (loop2): Directory bread(block 73) failed [ 781.153826][T21710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 781.170013][T21710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.216129][T21710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.398023][T21691] loop1: detected capacity change from 0 to 40427 [ 781.441648][T21691] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 781.471093][T21691] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 781.495940][T21691] F2FS-fs (loop1): invalid crc value [ 781.522712][T21691] F2FS-fs (loop1): Found nat_bits in checkpoint [ 781.527105][T21722] loop5: detected capacity change from 0 to 512 [ 781.659122][T21691] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 781.661210][T21722] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 781.677119][T21691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 781.733885][T21722] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.809736][T21722] EXT4-fs error (device loop5): ext4_xattr_block_find:1826: inode #12: comm syz.5.7530: corrupted xattr block 6 [ 781.941467][T21735] loop4: detected capacity change from 0 to 128 [ 782.022935][T21735] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 782.066043][T17063] EXT4-fs (loop5): unmounting filesystem. [ 782.076797][T21735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 782.308444][T21747] mmap: syz.2.7540 (21747): VmData 54235136 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 782.576571][T21749] loop1: detected capacity change from 0 to 4096 [ 782.589597][T21749] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 782.744105][T21749] ntfs3: loop1: failed to convert "076c" to cp949 [ 782.761992][T21761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.035428][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7550'. [ 783.428642][T21790] loop1: detected capacity change from 0 to 64 [ 783.443934][ T951] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 783.509272][T21790] syz.1.7561: attempt to access beyond end of device [ 783.509272][T21790] loop1: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 783.552574][T21790] Buffer I/O error on dev loop1, logical block 117440531, async page read [ 783.573585][T21790] syz.1.7561: attempt to access beyond end of device [ 783.573585][T21790] loop1: rw=0, sector=8548515840, nr_sectors = 2 limit=64 [ 783.587101][T21787] loop5: detected capacity change from 0 to 4096 [ 783.620442][T21790] Buffer I/O error on dev loop1, logical block 4274257920, async page read [ 783.634615][T21787] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 783.649972][ T951] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 783.674932][T21790] syz.1.7561: attempt to access beyond end of device [ 783.674932][T21790] loop1: rw=0, sector=301989888, nr_sectors = 2 limit=64 [ 783.689048][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.712382][ T951] usb 1-1: config 0 has no interface number 0 [ 783.725853][T21790] Buffer I/O error on dev loop1, logical block 150994944, async page read [ 783.736767][ T951] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 783.755045][T21790] syz.1.7561: attempt to access beyond end of device [ 783.755045][T21790] loop1: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 783.772318][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.791673][ T951] usb 1-1: Product: syz [ 783.795935][ T951] usb 1-1: Manufacturer: syz [ 783.801097][T21790] Buffer I/O error on dev loop1, logical block 117440531, async page read [ 783.818078][ T951] usb 1-1: SerialNumber: syz [ 783.824525][ T951] usb 1-1: config 0 descriptor?? [ 783.829672][T21787] ntfs3: loop5: failed to convert "076c" to cp949 [ 783.830204][ T26] audit: type=1800 audit(1773340617.604:121): pid=21790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7561" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 783.870502][ T951] hub 1-1:0.31: bad descriptor, ignoring hub [ 783.896394][ T951] hub: probe of 1-1:0.31 failed with error -5 [ 783.931106][ T951] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 783.956725][ T951] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 783.976774][ T951] usb 1-1: Failed to create links for entity 6 [ 783.989785][ T951] usb 1-1: Failed to register entities (-22). [ 784.169224][T21782] loop4: detected capacity change from 0 to 32768 [ 784.209305][T21782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7558 (21782) [ 784.265546][ T951] usb 1-1: USB disconnect, device number 31 [ 784.273131][T21782] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.347147][T21782] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 784.379068][T21782] BTRFS info (device loop4): using free space tree [ 784.551013][T21782] BTRFS info (device loop4): enabling ssd optimizations [ 784.598165][T21832] loop5: detected capacity change from 0 to 512 [ 784.727214][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.756923][T21832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 784.818011][T21832] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.7574: iget: checksum invalid [ 785.065695][T21848] netlink: 'syz.0.7582': attribute type 10 has an invalid length. [ 785.187444][T17063] EXT4-fs (loop5): unmounting filesystem. [ 785.195239][T21848] team0: Cannot enslave team device to itself [ 785.351479][T15232] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 785.573341][T15232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 785.599518][T15232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 785.652993][T15232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.685069][T15232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.696257][T21868] device wlan0 entered promiscuous mode [ 785.733312][T21844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 785.787738][T21872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7592'. [ 785.817374][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7592'. [ 786.024602][T21880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7595'. [ 786.053920][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7595'. [ 786.062968][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7595'. [ 786.085094][T15232] usb 3-1: USB disconnect, device number 23 [ 786.314340][T21889] program syz.1.7600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 786.375547][T21889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 786.765940][T21907] loop0: detected capacity change from 0 to 2048 [ 786.801738][T21907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.843499][ T7212] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 787.078708][ T7212] usb 6-1: Using ep0 maxpacket: 32 [ 787.087090][ T7212] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.145052][ T7212] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.180514][ T7212] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 787.201544][ T7212] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 787.218734][ T7212] usb 6-1: Product: syz [ 787.223055][ T7212] usb 6-1: Manufacturer: syz [ 787.249994][ T7212] hub 6-1:4.0: USB hub found [ 787.466041][ T7212] hub 6-1:4.0: 5 ports detected [ 787.474468][ T7212] hub 6-1:4.0: insufficient power available to use all downstream ports [ 787.687678][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7628'. [ 787.697916][ T7212] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 787.720196][ T7212] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 787.773686][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7628'. [ 787.795808][ T7212] usb 6-1: USB disconnect, device number 9 [ 788.041984][T21961] loop0: detected capacity change from 0 to 2048 [ 788.090929][T21961] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 788.153198][T21961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.168218][T21967] comedi comedi2: comedi_parport: I/O port conflict (0xafff,3) [ 788.415752][T21975] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7643'. [ 788.420042][T15232] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 788.547471][T21977] loop4: detected capacity change from 0 to 1024 [ 788.575604][T21982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7644'. [ 788.584618][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7644'. [ 788.610991][T21977] hfsplus: extend alloc file! (16384,256,150995124) [ 788.647928][T21985] bad cache= option: nonw [ 788.647928][T21985] [ 788.665635][T21985] CIFS: VFS: bad cache= option: nonw [ 788.673809][T15232] usb 3-1: Using ep0 maxpacket: 16 [ 788.683764][T15232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.704921][T15232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.750474][T15232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.787099][T15232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.817219][T15232] usb 3-1: Product: syz [ 788.833520][T15232] usb 3-1: Manufacturer: syz [ 788.838202][T15232] usb 3-1: SerialNumber: syz [ 789.097664][T15232] usb 3-1: 0:2 : does not exist [ 789.128296][T15232] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 789.201427][T15232] usb 3-1: USB disconnect, device number 24 [ 789.474562][ T4675] udevd[4675]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.686395][T21999] loop1: detected capacity change from 0 to 32768 [ 789.698040][ T7212] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 789.703342][T21999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7655 (21999) [ 789.763344][T21999] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 789.787466][T21999] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 789.807639][T21999] BTRFS info (device loop1): force clearing of disk cache [ 789.821213][T21999] BTRFS info (device loop1): metadata ratio 0 [ 789.836971][T21999] BTRFS info (device loop1): enabling ssd optimizations [ 789.847903][T21999] BTRFS info (device loop1): using spread ssd allocation scheme [ 789.864112][T21999] BTRFS info (device loop1): using free space tree [ 789.910997][ T7212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 789.922189][ T951] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 789.946097][ T7212] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 789.975887][ T7212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.013319][ T7212] usb 1-1: Product: syz [ 790.020536][ T7212] usb 1-1: Manufacturer: syz [ 790.027942][ T7212] usb 1-1: SerialNumber: syz [ 790.040433][ T7212] usb 1-1: config 0 descriptor?? [ 790.051200][T22007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 790.065229][T22007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 790.082521][ T7212] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 790.145240][ T951] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 790.164681][ T951] usb 5-1: config 0 has no interface number 0 [ 790.174800][T22017] loop5: detected capacity change from 0 to 32768 [ 790.198909][T21999] BTRFS info (device loop1): rebuilding free space tree [ 790.220046][ T951] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 790.254949][ T951] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 790.335506][ T951] usb 5-1: config 0 interface 96 has no altsetting 0 [ 790.354972][T15232] usb 1-1: USB disconnect, device number 32 [ 790.380818][T22017] XFS (loop5): Mounting V5 Filesystem [ 790.396209][ T951] usb 5-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 790.465786][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.520351][T22017] XFS (loop5): Ending clean mount [ 790.537069][ T951] usb 5-1: Product: syz [ 790.542111][ T951] usb 5-1: Manufacturer: syz [ 790.546867][ T951] usb 5-1: SerialNumber: syz [ 790.564197][ T951] usb 5-1: config 0 descriptor?? [ 790.610109][ T4276] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 790.643648][T17063] XFS (loop5): Unmounting Filesystem [ 791.049443][ T951] usb 5-1: USB disconnect, device number 13 [ 791.300179][T22071] __nla_validate_parse: 1 callbacks suppressed [ 791.300197][T22071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7679'. [ 791.321828][T22071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7679'. [ 791.475714][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7672'. [ 791.505326][T22077] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51006 out of range (51000000..2150000000) [ 791.571329][T22082] loop1: detected capacity change from 0 to 256 [ 791.609949][T22082] FAT-fs (loop1): Directory bread(block 64) failed [ 791.638158][T22082] FAT-fs (loop1): Directory bread(block 65) failed [ 791.660325][T22082] FAT-fs (loop1): Directory bread(block 66) failed [ 791.678991][T22082] FAT-fs (loop1): Directory bread(block 67) failed [ 791.715269][T22082] FAT-fs (loop1): Directory bread(block 68) failed [ 791.736504][T22082] FAT-fs (loop1): Directory bread(block 69) failed [ 791.754621][T22082] FAT-fs (loop1): Directory bread(block 70) failed [ 791.777120][T22082] FAT-fs (loop1): Directory bread(block 71) failed [ 791.803189][T22082] FAT-fs (loop1): Directory bread(block 72) failed [ 791.821021][T22082] FAT-fs (loop1): Directory bread(block 73) failed [ 791.843723][T22090] loop0: detected capacity change from 0 to 2048 [ 791.931912][T22090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 792.044329][T22090] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 188 not allocated in directory (ino 1376) [ 792.112099][T22090] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 188 with unaligned lenght of impUse field [ 792.264654][T22104] loop4: detected capacity change from 0 to 128 [ 792.449310][T22104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 792.499185][T22104] ext4 filesystem being mounted at /1526/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 792.747420][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 792.929342][T22134] loop5: detected capacity change from 0 to 164 [ 792.986495][T22134] rock: directory entry would overflow storage [ 793.012030][T22134] rock: sig=0x66, size=4, remaining=3 [ 793.045940][T22134] rock: directory entry would overflow storage [ 793.052158][T22134] rock: sig=0x66, size=4, remaining=3 [ 793.582490][T22157] loop4: detected capacity change from 0 to 2048 [ 793.618511][T22161] loop5: detected capacity change from 0 to 256 [ 793.724609][T22161] FAT-fs (loop5): Directory bread(block 64) failed [ 793.755192][T22161] FAT-fs (loop5): Directory bread(block 65) failed [ 793.781829][T22161] FAT-fs (loop5): Directory bread(block 66) failed [ 793.788427][T22161] FAT-fs (loop5): Directory bread(block 67) failed [ 793.846166][T22161] FAT-fs (loop5): Directory bread(block 68) failed [ 793.856594][T22161] FAT-fs (loop5): Directory bread(block 69) failed [ 793.876486][T22161] FAT-fs (loop5): Directory bread(block 70) failed [ 793.918708][T22161] FAT-fs (loop5): Directory bread(block 71) failed [ 793.959072][T22161] FAT-fs (loop5): Directory bread(block 72) failed [ 793.974435][T22161] FAT-fs (loop5): Directory bread(block 73) failed [ 793.987836][T22171] netlink: 'syz.2.7725': attribute type 21 has an invalid length. [ 794.144337][T22177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7728'. [ 794.293518][ T26] audit: type=1400 audit(1773340627.388:122): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=22180 comm="syz.4.7730" [ 794.540991][ T7208] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 794.677572][T22199] loop2: detected capacity change from 0 to 256 [ 794.733444][ T951] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 794.749571][ T7208] usb 1-1: Using ep0 maxpacket: 32 [ 794.756816][ T7208] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 794.806937][ T7208] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 794.837496][ T7208] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.868554][ T7208] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 794.890605][ T7208] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 794.907054][ T7208] usb 1-1: Product: syz [ 794.914036][ T7208] usb 1-1: Manufacturer: syz [ 794.927959][ T7208] usb 1-1: SerialNumber: syz [ 794.947255][ T951] usb 5-1: Using ep0 maxpacket: 8 [ 794.954857][ T951] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 794.962556][ T7208] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input45 [ 794.986397][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.047946][ T951] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 795.088922][ T951] usb 5-1: config 0 has no interface number 0 [ 795.104669][ T951] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 795.135838][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.174413][ T951] usb 5-1: config 0 descriptor?? [ 795.238664][ T7208] usb 1-1: USB disconnect, device number 33 [ 795.264989][ T7208] appletouch 1-1:1.0: input: appletouch disconnected [ 795.284436][T22218] overlayfs: failed to resolve './file0': -2 [ 795.311469][T22221] netlink: 'syz.1.7749': attribute type 2 has an invalid length. [ 795.320458][T22221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7749'. [ 795.620937][ T951] usb 5-1: USB disconnect, device number 14 [ 795.876518][T22241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 796.099734][T22253] loop0: detected capacity change from 0 to 1024 [ 796.219891][T22257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7767'. [ 796.347859][T22262] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7771'. [ 796.988921][ T7212] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 797.203442][ T7212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.227416][ T7212] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 797.258401][ T7212] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 797.298180][ T7212] usb 2-1: config 1 interface 0 has no altsetting 0 [ 797.312250][ T7212] usb 2-1: string descriptor 0 read error: -22 [ 797.329448][ T7212] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 797.361802][ T7212] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 797.386360][ T7212] usb 2-1: 0:2 : does not exist [ 797.412386][ T7212] usb-storage 2-1:1.1: USB Mass Storage device detected [ 797.799888][T22299] loop5: detected capacity change from 0 to 40427 [ 797.820201][ T7212] us122l: couldn't allocate write buffer [ 797.826489][ T7212] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 797.837956][T22299] F2FS-fs (loop5): invalid crc value [ 797.876741][ T7212] usb 2-1: USB disconnect, device number 18 [ 797.886350][T22299] F2FS-fs (loop5): Found nat_bits in checkpoint [ 798.042417][T22299] F2FS-fs (loop5): Start checkpoint disabled! [ 798.061980][T22299] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 798.155971][T22299] F2FS-fs (loop5): disabling checkpoint not compatible with read-only [ 798.517810][ T7212] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 798.730389][T22344] loop1: detected capacity change from 0 to 8 [ 798.742294][ T7212] usb 1-1: Using ep0 maxpacket: 32 [ 798.749482][ T7212] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 798.780617][T22344] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 798.800139][ T7212] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 798.810340][ T4675] udevd[4675]: incorrect cramfs checksum on /dev/loop1 [ 798.828587][ T7212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.862992][ T7212] usb 1-1: Product: syz [ 798.876975][ T7212] usb 1-1: Manufacturer: syz [ 798.889980][ T7212] usb 1-1: SerialNumber: syz [ 798.927023][ T7212] usb 1-1: config 0 descriptor?? [ 798.938808][T22330] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 799.222168][ T7212] usb 1-1: USB disconnect, device number 34 [ 799.307013][T22366] ipt_CLUSTERIP: Please specify destination IP [ 799.478687][T22374] overlayfs: failed to resolve './file0': -2 [ 800.073357][T22400] loop1: detected capacity change from 0 to 16 [ 800.113454][T22400] erofs: (device loop1): mounted with root inode @ nid 36. [ 800.295331][T22408] IPv6: Can't replace route, no match found [ 800.327422][T22410] loop1: detected capacity change from 0 to 256 [ 800.460419][T22410] FAT-fs (loop1): Directory bread(block 64) failed [ 800.486096][T22414] loop4: detected capacity change from 0 to 128 [ 800.497846][T22410] FAT-fs (loop1): Directory bread(block 65) failed [ 800.504501][T22410] FAT-fs (loop1): Directory bread(block 66) failed [ 800.514991][T22414] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 800.550021][T22410] FAT-fs (loop1): Directory bread(block 67) failed [ 800.578378][T22410] FAT-fs (loop1): Directory bread(block 68) failed [ 800.610892][T22410] FAT-fs (loop1): Directory bread(block 69) failed [ 800.645242][T22410] FAT-fs (loop1): Directory bread(block 70) failed [ 800.682380][T22410] FAT-fs (loop1): Directory bread(block 71) failed [ 800.728842][T22410] FAT-fs (loop1): Directory bread(block 72) failed [ 800.741378][T22410] FAT-fs (loop1): Directory bread(block 73) failed [ 800.818218][T22410] syz.1.7842: attempt to access beyond end of device [ 800.818218][T22410] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 801.056891][T22435] loop2: detected capacity change from 0 to 2048 [ 801.085249][T22435] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 801.131758][T22433] loop4: detected capacity change from 0 to 2048 [ 801.141674][T22435] syz.2.7854: attempt to access beyond end of device [ 801.141674][T22435] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 801.163424][T22439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 801.218369][T22435] syz.2.7854: attempt to access beyond end of device [ 801.218369][T22435] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 801.261426][T22435] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 801.479021][ T7212] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 801.682320][ T7212] usb 5-1: Using ep0 maxpacket: 16 [ 801.699535][ T7212] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 801.741143][ T7212] usb 5-1: config 0 has no interface number 0 [ 801.754329][ T7212] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xC has invalid maxpacket 37835, setting to 1024 [ 801.789809][ T7212] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 801.813024][ T7212] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 801.856649][ T7212] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 801.886082][ T7212] usb 5-1: Product: syz [ 801.896361][ T7212] usb 5-1: SerialNumber: syz [ 801.912646][ T7212] usb 5-1: config 0 descriptor?? [ 801.929791][T22433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.066541][T22473] loop0: detected capacity change from 0 to 256 [ 802.171452][ T7212] usb 5-1: invalid MIDI in EP 0 [ 802.223009][T22478] netlink: 760 bytes leftover after parsing attributes in process `syz.1.7874'. [ 802.224397][ T7212] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 802.290936][ T7974] udevd[7974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.311721][ T7212] usb 5-1: USB disconnect, device number 15 [ 802.364023][T22476] xt_connbytes: Forcing CT accounting to be enabled [ 802.371359][T22476] xt_NFQUEUE: number of total queues is 0 [ 802.556743][T22484] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 802.665616][ T951] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 802.869747][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 802.876889][ T951] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 802.900306][ T951] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 802.911288][ T7218] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 802.922359][ T951] usb 1-1: config 1 has no interface number 1 [ 802.928542][ T951] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 802.939159][ T951] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.953291][ T951] usb 1-1: config 1 interface 105 has no altsetting 0 [ 802.977094][ T951] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 802.992780][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.007748][ T951] usb 1-1: Product: syz [ 803.014306][ T951] usb 1-1: Manufacturer: syz [ 803.022867][ T951] usb 1-1: SerialNumber: syz [ 803.035675][T22480] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 803.104550][ T7218] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 803.122377][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.166931][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.207555][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.238996][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.250795][T22508] xt_TCPMSS: Only works on TCP SYN packets [ 803.266246][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.282136][ T951] aqc111: probe of 1-1:1.105 failed with error -22 [ 803.321428][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.339247][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.366438][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.390113][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.412243][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.440128][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.477412][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.530018][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.548078][ T951] usb 1-1: USB disconnect, device number 35 [ 803.571577][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.602990][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.626595][ T7218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 803.633035][T22524] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 803.645398][ T7218] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 803.667841][ T7218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 803.676739][ T7218] usb 2-1: Product: syz [ 803.681008][ T7218] usb 2-1: Manufacturer: syz [ 803.693395][ T7218] usb 2-1: SerialNumber: syz [ 803.700269][ T7218] usb 2-1: config 0 descriptor?? [ 803.728798][ T7218] hub 2-1:0.0: Invalid hub with more than one config or interface [ 803.756649][ T7218] hub: probe of 2-1:0.0 failed with error -22 [ 803.765967][ T7218] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 804.006690][T15490] usb 2-1: USB disconnect, device number 19 [ 804.011535][T22534] tmpfs: Bad value for 'mpol' [ 804.151320][T22538] loop5: detected capacity change from 0 to 8 [ 804.260787][T22544] loop4: detected capacity change from 0 to 16 [ 804.334653][T22544] erofs: (device loop4): mounted with root inode @ nid 36. [ 804.377042][T22546] loop0: detected capacity change from 0 to 256 [ 804.437533][T22550] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 804.469213][T22546] FAT-fs (loop0): Directory bread(block 64) failed [ 804.504926][T22546] FAT-fs (loop0): Directory bread(block 65) failed [ 804.538825][T22546] FAT-fs (loop0): Directory bread(block 66) failed [ 804.602986][T22546] FAT-fs (loop0): Directory bread(block 67) failed [ 804.609656][T22546] FAT-fs (loop0): Directory bread(block 68) failed [ 804.652869][T22546] FAT-fs (loop0): Directory bread(block 69) failed [ 804.658143][T22554] xt_cgroup: path and classid specified [ 804.669897][T22546] FAT-fs (loop0): Directory bread(block 70) failed [ 804.703059][T22546] FAT-fs (loop0): Directory bread(block 71) failed [ 804.723409][T22546] FAT-fs (loop0): Directory bread(block 72) failed [ 804.745268][T22546] FAT-fs (loop0): Directory bread(block 73) failed [ 804.841488][ T26] audit: type=1326 audit(1773340637.257:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 804.900088][T15490] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 804.958501][ T26] audit: type=1326 audit(1773340637.285:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 804.992971][T22564] loop1: detected capacity change from 0 to 128 [ 805.002515][ T26] audit: type=1326 audit(1773340637.285:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.071740][ T26] audit: type=1326 audit(1773340637.285:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.099827][T22564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 805.141699][T22564] ext4 filesystem being mounted at /1646/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 805.158185][T15490] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 805.165651][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 805.175993][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 805.186256][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 805.198382][ T26] audit: type=1326 audit(1773340637.285:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.198418][ T26] audit: type=1326 audit(1773340637.285:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.243310][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.264148][T15490] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 805.279357][T22564] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 805.290916][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 805.327597][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 805.337658][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 805.356531][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.390771][ T26] audit: type=1326 audit(1773340637.285:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.425090][T15490] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 805.428633][ T26] audit: type=1326 audit(1773340637.294:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.473220][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 805.498262][ T26] audit: type=1326 audit(1773340637.294:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 805.505653][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 805.616892][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 805.650948][T15490] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 805.675311][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 805.711101][T15490] usb 6-1: string descriptor 0 read error: -22 [ 805.740283][T15490] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.789349][T15490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.850540][T15490] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 805.947308][T22598] loop4: detected capacity change from 0 to 16 [ 805.973080][T22598] erofs: (device loop4): mounted with root inode @ nid 36. [ 805.998799][T22598] syz.4.7933: attempt to access beyond end of device [ 805.998799][T22598] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 806.124755][T15490] usb 6-1: USB disconnect, device number 10 [ 806.226219][T22607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7937'. [ 806.373625][T22612] loop1: detected capacity change from 0 to 256 [ 806.525283][T22612] syz.1.7939: attempt to access beyond end of device [ 806.525283][T22612] loop1: rw=0, sector=272, nr_sectors = 4 limit=256 [ 806.572450][T22612] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 806.586882][T22612] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 806.964374][T22638] netlink: 'syz.0.7952': attribute type 21 has an invalid length. [ 807.192841][T22646] loop0: detected capacity change from 0 to 736 [ 807.268796][T22648] loop4: detected capacity change from 0 to 4096 [ 807.326767][T22646] rock: directory entry would overflow storage [ 807.333233][T22646] rock: sig=0x3b10, size=4, remaining=3 [ 807.347821][T22653] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 807.501138][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7960'. [ 807.844412][T22634] loop5: detected capacity change from 0 to 32768 [ 807.931713][T22634] XFS (loop5): Mounting V5 Filesystem [ 807.971364][T22650] loop2: detected capacity change from 0 to 32768 [ 808.004079][T22650] read_mapping_page failed! [ 808.009205][T22650] ERROR: (device loop2): txCommit: [ 808.009205][T22650] [ 808.081344][T22634] XFS (loop5): Ending clean mount [ 808.086749][ T75] read_mapping_page failed! [ 808.091268][ T75] ERROR: (device loop2): txCommit: [ 808.091268][ T75] [ 808.162068][ T75] jfs_write_inode: jfs_commit_inode failed! [ 808.223326][T22634] XFS (loop5): Quotacheck needed: Please wait. [ 808.376975][T22634] XFS (loop5): Quotacheck: Done. [ 808.539685][T17063] XFS (loop5): Unmounting Filesystem [ 808.588386][ T7218] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 808.807969][ T7218] usb 3-1: Using ep0 maxpacket: 32 [ 808.814934][ T7218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.834172][ T7218] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 808.872805][ T7218] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 808.898938][ T7218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.920273][ T7218] usb 3-1: Product: syz [ 808.934837][ T7218] usb 3-1: Manufacturer: syz [ 808.939537][ T7218] usb 3-1: SerialNumber: syz [ 808.964134][ T7218] usb 3-1: config 0 descriptor?? [ 809.195594][ T7218] usb 3-1: USB disconnect, device number 25 [ 809.346820][ T26] audit: type=1326 audit(1773340641.466:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22706 comm="syz.0.7982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d19c799 code=0x7ffc0000 [ 809.389539][T22711] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7973'. [ 809.947889][T22735] set_capacity_and_notify: 2 callbacks suppressed [ 809.947924][T22735] loop5: detected capacity change from 0 to 1024 [ 809.996997][T22735] hfsplus: bad catalog folder entry [ 810.092717][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 810.126416][T22735] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 810.149063][T22735] (syz.5.7995,22735,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 810.156771][T22735] (syz.5.7995,22735,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 810.202688][T22735] (syz.5.7995,22735,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 810.251132][T22735] (syz.5.7995,22735,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 810.825870][T22766] loop2: detected capacity change from 0 to 4096 [ 810.881231][T22766] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 810.917857][T22775] kcapi: manufacturer command 1 unknown. [ 811.148152][T22782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8018'. [ 811.170910][ T4277] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 811.193003][ T4277] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 811.233844][ T4277] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 811.621769][T22801] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 811.746312][T22801] Process accounting paused [ 811.840608][T22810] loop5: detected capacity change from 0 to 4096 [ 811.903513][T22813] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 811.993868][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 811.993882][ T26] audit: type=1326 audit(1773340643.945:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22816 comm="syz.4.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 812.085746][ T26] audit: type=1326 audit(1773340643.945:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22816 comm="syz.4.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 812.178673][ T26] audit: type=1326 audit(1773340643.945:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22816 comm="syz.4.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 812.308685][ T26] audit: type=1326 audit(1773340643.945:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22816 comm="syz.4.8033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7d59c799 code=0x7ffc0000 [ 812.678396][T22841] loop1: detected capacity change from 0 to 64 [ 813.143644][T22862] xt_TCPMSS: Only works on TCP SYN packets [ 813.326637][T22872] netlink: 'syz.2.8060': attribute type 3 has an invalid length. [ 813.340658][T22871] loop5: detected capacity change from 0 to 256 [ 813.405938][T22871] FAT-fs (loop5): Directory bread(block 64) failed [ 813.437783][T22871] FAT-fs (loop5): Directory bread(block 65) failed [ 813.460069][T22871] FAT-fs (loop5): Directory bread(block 66) failed [ 813.507522][T22871] FAT-fs (loop5): Directory bread(block 67) failed [ 813.532198][T22871] FAT-fs (loop5): Directory bread(block 68) failed [ 813.570077][T22871] FAT-fs (loop5): Directory bread(block 69) failed [ 813.591545][T22871] FAT-fs (loop5): Directory bread(block 70) failed [ 813.598194][T22871] FAT-fs (loop5): Directory bread(block 71) failed [ 813.613219][T22884] netlink: 'syz.2.8064': attribute type 2 has an invalid length. [ 813.636810][T22871] FAT-fs (loop5): Directory bread(block 72) failed [ 813.643418][T22871] FAT-fs (loop5): Directory bread(block 73) failed [ 813.656524][T22884] netlink: 'syz.2.8064': attribute type 2 has an invalid length. [ 813.680897][T22884] netlink: 'syz.2.8064': attribute type 1 has an invalid length. [ 813.707191][T22884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8064'. [ 813.819952][T22888] autofs4:pid:22888:autofs_fill_super: called with bogus options [ 813.901537][ T7218] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 814.120354][ T7218] usb 2-1: Using ep0 maxpacket: 32 [ 814.127685][ T7218] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 814.163379][ T7218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.183707][ T7218] usb 2-1: config 0 descriptor?? [ 814.207050][ T7218] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 814.593137][T22892] loop4: detected capacity change from 0 to 32768 [ 814.612874][T22892] (syz.4.8070,22892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 814.638444][ T7218] gspca_vc032x: reg_w err -71 [ 814.643368][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.657255][T22892] (syz.4.8070,22892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 814.659899][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.724640][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.744213][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.772903][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.793078][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.795563][T22892] JBD2: Ignoring recovery information on journal [ 814.798407][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.810460][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.815767][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.821338][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.826658][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.832305][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.837622][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.843183][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.848495][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.854049][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.859437][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.865052][ T7218] gspca_vc032x: I2c Bus Busy Wait 00 [ 814.870359][ T7218] gspca_vc032x: Unknown sensor... [ 814.875907][ T7218] vc032x: probe of 2-1:0.0 failed with error -22 [ 814.905153][ T7218] usb 2-1: USB disconnect, device number 20 [ 814.972270][T22925] loop0: detected capacity change from 0 to 16 [ 814.977180][T22892] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 815.022202][T22925] erofs: (device loop0): mounted with root inode @ nid 36. [ 815.075386][T22925] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 815.112641][T22925] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 815.171267][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 815.269158][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8089'. [ 815.419801][T10232] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 815.622753][T10232] usb 6-1: Using ep0 maxpacket: 8 [ 815.636376][T10232] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 815.639600][T22946] loop1: detected capacity change from 0 to 256 [ 815.665433][T10232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.688574][T10232] usb 6-1: Product: syz [ 815.697263][T10232] usb 6-1: Manufacturer: syz [ 815.713761][T10232] usb 6-1: SerialNumber: syz [ 815.732844][T10232] usb 6-1: config 0 descriptor?? [ 815.764859][T10232] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 815.903344][T22954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8101'. [ 815.953568][T22958] loop4: detected capacity change from 0 to 1024 [ 815.965069][T22954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8101'. [ 816.023428][T22960] CIFS mount error: No usable UNC path provided in device string! [ 816.023428][T22960] [ 816.098653][T22960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 816.108400][T22962] netlink: 'syz.1.8104': attribute type 2 has an invalid length. [ 816.198759][T10232] gspca_m5602: Failed to find a sensor [ 816.204829][T10232] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 816.256338][T10232] usb 6-1: USB disconnect, device number 11 [ 816.505665][T22977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8111'. [ 816.589414][T22979] loop2: detected capacity change from 0 to 1024 [ 816.646174][T22979] EXT4-fs: Ignoring removed orlov option [ 816.688851][T22979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 816.794556][T22979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 816.823137][T22992] loop0: detected capacity change from 0 to 128 [ 816.852855][T22992] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 816.881257][T22992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.950768][T22997] netlink: 'syz.4.8120': attribute type 13 has an invalid length. [ 817.088869][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 817.262397][T23004] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8124'. [ 817.299246][T23004] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8124'. [ 817.502882][T23010] loop5: detected capacity change from 0 to 4096 [ 817.655137][T23010] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 817.703149][T23010] ntfs3: loop5: Failed to load $Extend. [ 817.934771][T23033] x_tables: duplicate underflow at hook 1 [ 818.567174][T23063] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 818.910685][T23083] loop4: detected capacity change from 0 to 1024 [ 819.709512][T23111] syz.1.8175 (23111): /proc/23110/oom_adj is deprecated, please use /proc/23110/oom_score_adj instead. [ 819.799871][T23115] loop4: detected capacity change from 0 to 256 [ 820.119880][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8182'. [ 820.542856][T23148] netlink: 'syz.4.8193': attribute type 10 has an invalid length. [ 820.735017][T23156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8197'. [ 820.735152][T23155] tmpfs: Bad value for 'mpol' [ 820.836392][T23160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8199'. [ 820.988522][T23166] loop0: detected capacity change from 0 to 736 [ 821.873682][T23206] program syz.1.8220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.930278][ T7208] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 822.134855][ T7208] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 822.154308][ T7208] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 822.184221][ T7208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.193210][ T7208] usb 6-1: Product: syz [ 822.197707][ T7208] usb 6-1: Manufacturer: syz [ 822.202324][ T7208] usb 6-1: SerialNumber: syz [ 822.232992][ T7208] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 822.274744][ T7208] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 822.514317][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.572005][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.631668][T15490] usb 6-1: USB disconnect, device number 12 [ 822.804061][T23214] loop1: detected capacity change from 0 to 32768 [ 822.833930][T23234] SET target dimension over the limit! [ 822.871613][T23214] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 822.916949][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8236'. [ 822.926144][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8236'. [ 822.935875][T23238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8236'. [ 822.945357][T23214] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 822.972735][T23214] (syz.1.8224,23214,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 823.016301][T23222] loop4: detected capacity change from 0 to 32768 [ 823.085578][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 823.127810][T23222] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 823.140883][T23242] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 823.376669][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 823.437746][ T7208] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 823.444769][ T7208] ath9k_htc: Failed to initialize the device [ 823.482712][T15490] usb 6-1: ath9k_htc: USB layer deinitialized [ 823.493060][T15232] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 823.707107][T15232] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 823.726433][T15232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.757795][T15232] usb 2-1: config 0 descriptor?? [ 823.775974][T15232] cp210x 2-1:0.0: cp210x converter detected [ 824.218542][T15232] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 824.237277][T15232] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 824.269297][T15232] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 824.304361][T15232] usb 2-1: cp210x converter now attached to ttyUSB0 [ 824.320769][T15232] usb 2-1: USB disconnect, device number 21 [ 824.383868][ T4675] udevd[4675]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 824.395657][T15232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 824.444019][T15232] cp210x 2-1:0.0: device disconnected [ 824.877595][T23308] device bridge_slave_1 left promiscuous mode [ 824.910211][T23308] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.957590][T23308] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 825.091565][ T26] audit: type=1326 audit(1773340656.189:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cab9c799 code=0x7ffc0000 [ 825.188856][T23319] loop5: detected capacity change from 0 to 2048 [ 825.206416][T23321] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 825.219516][ T26] audit: type=1326 audit(1773340656.245:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f47cab9c799 code=0x7ffc0000 [ 825.276673][ T26] audit: type=1326 audit(1773340656.245:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47cab9c502 code=0x7ffc0000 [ 825.334053][T23319] loop5: p4 < > [ 825.393842][ T26] audit: type=1326 audit(1773340656.245:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f47cab5cfce code=0x7ffc0000 [ 825.448366][T17063] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 825.458910][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 825.468558][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 825.498292][ T26] audit: type=1326 audit(1773340656.283:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f47cab9c5c7 code=0x7ffc0000 [ 825.559721][ T4675] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 825.573099][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 825.605477][ T4675] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 825.607729][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8283'. [ 825.634007][ T26] audit: type=1326 audit(1773340656.283:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47cab5cfce code=0x7ffc0000 [ 825.674853][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 825.723291][ T4675] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 825.735230][ T26] audit: type=1326 audit(1773340656.283:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47cab9c42b code=0x7ffc0000 [ 825.765350][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 825.805208][ T4675] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 825.821762][ T26] audit: type=1326 audit(1773340656.358:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47cab5cfce code=0x7ffc0000 [ 825.880524][T23344] netlink: 1096 bytes leftover after parsing attributes in process `syz.2.8286'. [ 825.901269][ T4675] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 825.944569][ T4675] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 825.952878][ T26] audit: type=1326 audit(1773340656.358:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47cab9c42b code=0x7ffc0000 [ 826.017428][ T26] audit: type=1326 audit(1773340656.358:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.5.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47cab9c42b code=0x7ffc0000 [ 826.099460][T23352] program syz.5.8292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.206440][ T4675] udevd[4675]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 826.281460][ T4675] udevd[4675]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 826.370102][ T4675] udevd[4675]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 826.633793][T23370] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8300'. [ 826.679360][T23371] loop2: detected capacity change from 0 to 1024 [ 826.710800][T23371] EXT4-fs: Ignoring removed bh option [ 826.860841][T23350] loop1: detected capacity change from 0 to 32768 [ 826.896978][T23371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 826.928293][T23382] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 826.996640][T23384] IPv6: sit1: Disabled Multicast RS [ 827.076266][T23350] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 827.076266][T23350] [ 827.089254][T23371] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.8299: reserved inode found cleared - inode=18 [ 827.130839][T23350] ERROR: (device loop1): remounting filesystem as read-only [ 827.170257][T23350] jfs_mkdir: dtInsert returned -EIO [ 827.183599][T23350] ERROR: (device loop1): jfs_mkdir: [ 827.183599][T23350] [ 827.198227][T23371] EXT4-fs (loop2): Remounting filesystem read-only [ 827.454526][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 828.534434][T23434] loop5: detected capacity change from 0 to 2048 [ 828.603375][T23434] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 828.658303][T23403] loop1: detected capacity change from 0 to 32768 [ 828.673276][T23434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 828.786410][T23403] XFS (loop1): Mounting V5 Filesystem [ 828.893619][T23451] loop4: detected capacity change from 0 to 2048 [ 828.904080][T23451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.050866][T23403] XFS (loop1): Ending clean mount [ 829.224281][ T4276] XFS (loop1): Unmounting Filesystem [ 829.865947][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8348'. [ 830.885711][T23522] --map-set only usable from mangle table [ 831.050110][T23527] loop4: detected capacity change from 0 to 764 [ 831.079687][T23527] rock: directory entry would overflow storage [ 831.092497][T23527] rock: sig=0x4654, size=5, remaining=4 [ 831.271618][T23536] overlayfs: './file0' not a directory [ 831.388127][T23540] SET target dimension over the limit! [ 831.532842][T23512] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 831.672397][T23550] IPv6: sit1: Disabled Multicast RS [ 831.737178][T23553] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8381'. [ 832.203807][T10232] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 832.406955][T10232] usb 6-1: Using ep0 maxpacket: 16 [ 832.421664][T10232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.466627][T10232] usb 6-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 832.501873][T10232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.534060][T10232] usb 6-1: Product: syz [ 832.552785][T10232] usb 6-1: Manufacturer: syz [ 832.557900][T10232] usb 6-1: SerialNumber: syz [ 832.579685][T10232] usb 6-1: config 0 descriptor?? [ 832.812701][T10232] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 832.939642][T23606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8406'. [ 833.029577][ T7208] usb 6-1: USB disconnect, device number 13 [ 833.035811][T23609] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8407'. [ 833.539693][T23632] loop4: detected capacity change from 0 to 256 [ 833.823831][T23640] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8420'. [ 833.876674][T23640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8420'. [ 834.376168][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.382564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.393167][T23666] netlink: 'syz.2.8430': attribute type 2 has an invalid length. [ 834.651354][T23674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8436'. [ 835.170382][T23700] loop4: detected capacity change from 0 to 736 [ 835.173360][T23697] loop1: detected capacity change from 0 to 64 [ 835.439955][T23705] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8452'. [ 835.828464][T15232] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 835.880377][T23725] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8462'. [ 835.883555][T23722] loop1: detected capacity change from 0 to 4096 [ 835.910565][T23722] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 835.977723][ T7208] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 835.992450][T23722] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 836.010007][T23722] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 836.026517][T23722] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 836.043277][T15232] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 836.065285][T15232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.099434][T15232] usb 1-1: config 0 descriptor?? [ 836.118784][T15232] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 836.198898][ T7208] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 836.219578][ T7208] usb 6-1: config 0 has no interface number 0 [ 836.237086][ T7208] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 836.260828][ T7208] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 836.290022][ T7208] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 836.313670][ T7208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.344353][ T7208] usb 6-1: config 0 descriptor?? [ 836.369832][ T7208] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input48 [ 836.541917][T15232] gp8psk: usb in 137 operation failed. [ 836.544372][ T7218] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 836.548614][T15232] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 836.587969][T23745] UBIFS error (pid: 23745): cannot open "(null)", error -22 [ 836.594671][T15232] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 836.639693][T15232] usb 1-1: USB disconnect, device number 36 [ 836.673075][T15490] usb 6-1: USB disconnect, device number 14 [ 836.759542][T23749] i2c i2c-0: Invalid block write size 252 [ 836.779471][ T7218] usb 3-1: Using ep0 maxpacket: 16 [ 836.786465][ T7218] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 836.809310][ T7218] usb 3-1: config 1 has no interface number 0 [ 836.831562][ T7218] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 836.863199][ T7218] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 836.879883][ T7218] usb 3-1: config 1 interface 105 has no altsetting 0 [ 836.902314][ T7218] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 836.922487][ T7218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.933373][ T7218] usb 3-1: Product: syz [ 836.938029][ T7218] usb 3-1: Manufacturer: syz [ 836.943387][ T7218] usb 3-1: SerialNumber: syz [ 836.952003][T23757] cgroup: Need name or subsystem set [ 836.957751][T23737] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 836.968463][T23737] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 837.153221][T23763] netlink: 'syz.4.8481': attribute type 21 has an invalid length. [ 837.178684][T23763] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8481'. [ 837.214152][ T7218] aqc111: probe of 3-1:1.105 failed with error -71 [ 837.233900][ T7218] usb 3-1: USB disconnect, device number 26 [ 837.556896][T23781] loop1: detected capacity change from 0 to 64 [ 837.601232][T23781] hfs: unable to locate alternate MDB [ 837.622666][T23781] hfs: continuing without an alternate MDB [ 837.665499][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 837.665514][ T26] audit: type=1800 audit(1773340667.956:166): pid=23781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8490" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 837.770146][T23787] loop0: detected capacity change from 0 to 1024 [ 837.776691][T23785] loop4: detected capacity change from 0 to 8192 [ 837.797244][ T75] hfs: new node 0 already hashed? [ 837.802884][ T75] ------------[ cut here ]------------ [ 837.808569][ T75] WARNING: CPU: 0 PID: 75 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 837.817867][ T75] Modules linked in: [ 837.821783][ T75] CPU: 0 PID: 75 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 837.829534][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.839651][ T75] Workqueue: writeback wb_workfn (flush-7:1) [ 837.845655][ T75] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 837.851336][ T75] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 837.870973][ T75] RSP: 0018:ffffc90001576e80 EFLAGS: 00010246 [ 837.877036][ T75] RAX: 000000000000001f RBX: ffff8880259da0e0 RCX: d52af3e687c6ba00 [ 837.885045][ T75] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 837.893049][ T75] RBP: 0000000000000000 R08: ffffc90001576b87 R09: 1ffff920002aed70 [ 837.901009][ T75] R10: dffffc0000000000 R11: fffff520002aed71 R12: 0000000000000000 [ 837.909016][ T75] R13: ffff8880259da000 R14: ffff888018aaed00 R15: dffffc0000000000 [ 837.917019][ T75] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 837.926015][ T75] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.932611][ T75] CR2: 00007ffe38a47ff8 CR3: 000000005c08f000 CR4: 00000000003506f0 [ 837.940638][ T75] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 837.948649][ T75] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 837.956663][ T75] Call Trace: [ 837.959944][ T75] [ 837.962879][ T75] hfs_bmap_alloc+0x53d/0x5d0 [ 837.967624][ T75] ? hfs_bmap_reserve+0x420/0x420 [ 837.972660][ T75] hfs_btree_inc_height+0xfd/0xac0 [ 837.977819][ T75] ? hfs_brec_insert+0x6f6/0xbd0 [ 837.982773][ T75] ? hfs_brec_insert+0xbd0/0xbd0 [ 837.987759][ T75] ? do_raw_spin_unlock+0x11d/0x230 [ 837.992970][ T75] hfs_brec_insert+0x744/0xbd0 [ 837.997744][ T75] ? hfs_brec_keylen+0x350/0x350 [ 838.002736][ T75] __hfs_ext_write_extent+0x2a1/0x470 [ 838.008122][ T75] hfs_ext_write_extent+0x17b/0x200 [ 838.013364][ T75] ? verify_lock_unused+0x140/0x140 [ 838.018571][ T75] ? hfs_ext_keycmp+0x310/0x310 [ 838.023469][ T75] ? writeback_sb_inodes+0x46b/0x1850 [ 838.028930][ T75] hfs_write_inode+0xd8/0xa20 [ 838.033650][ T75] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 838.039019][ T75] ? __writeback_single_inode+0x4ae/0x1160 [ 838.044852][ T75] ? __lock_acquire+0x7d10/0x7d10 [ 838.049876][ T75] ? do_raw_spin_lock+0x128/0x2f0 [ 838.054913][ T75] ? __rwlock_init+0x140/0x140 [ 838.059666][ T75] __writeback_single_inode+0x75b/0x1160 [ 838.065323][ T75] writeback_sb_inodes+0xb30/0x1850 [ 838.070537][ T75] ? queue_io+0x5a0/0x5a0 [ 838.074907][ T75] ? rcu_is_watching+0x11/0xa0 [ 838.079663][ T75] wb_writeback+0x482/0xd50 [ 838.084215][ T75] ? percpu_ref_tryget+0x250/0x250 [ 838.089351][ T75] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 838.095404][ T75] ? _raw_spin_unlock_irq+0x1f/0x40 [ 838.100625][ T75] wb_workfn+0x423/0xee0 [ 838.104958][ T75] ? inode_wait_for_writeback+0x220/0x220 [ 838.110701][ T75] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 838.116709][ T75] ? read_lock_is_recursive+0x10/0x10 [ 838.122073][ T75] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 838.127983][ T75] ? _raw_spin_unlock+0x40/0x40 [ 838.132849][ T75] ? _raw_spin_unlock_irq+0x1f/0x40 [ 838.138102][ T75] ? process_one_work+0x7b0/0x1160 [ 838.143222][ T75] process_one_work+0x8a2/0x1160 [ 838.148233][ T75] ? worker_detach_from_pool+0x240/0x240 [ 838.153894][ T75] ? _raw_spin_lock_irq+0xb7/0xf0 [ 838.158957][ T75] ? _raw_spin_lock_irqsave+0x100/0x100 [ 838.164507][ T75] ? kthread_data+0x4b/0xc0 [ 838.169099][ T75] worker_thread+0xaa2/0x1270 [ 838.173874][ T75] ? __kthread_parkme+0x162/0x1c0 [ 838.178899][ T75] kthread+0x29d/0x330 [ 838.182988][ T75] ? worker_clr_flags+0x1a0/0x1a0 [ 838.188000][ T75] ? kthread_blkcg+0xd0/0xd0 [ 838.192604][ T75] ret_from_fork+0x1f/0x30 [ 838.197019][ T75] [ 838.200024][ T75] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 838.207287][ T75] CPU: 0 PID: 75 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 838.214644][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.224685][ T75] Workqueue: writeback wb_workfn (flush-7:1) [ 838.230699][ T75] Call Trace: [ 838.233975][ T75] [ 838.236895][ T75] dump_stack_lvl+0x188/0x24e [ 838.241562][ T75] ? memcpy+0x3c/0x60 [ 838.245528][ T75] ? show_regs_print_info+0x12/0x12 [ 838.250716][ T75] ? load_image+0x400/0x400 [ 838.255212][ T75] panic+0x2e5/0x730 [ 838.259097][ T75] ? bpf_jit_dump+0xd0/0xd0 [ 838.263586][ T75] ? ret_from_fork+0x1f/0x30 [ 838.268169][ T75] __warn+0x2f8/0x4f0 [ 838.272131][ T75] ? hfs_bnode_create+0x37a/0x400 [ 838.277142][ T75] ? hfs_bnode_create+0x37a/0x400 [ 838.282156][ T75] report_bug+0x2ba/0x4f0 [ 838.286475][ T75] ? hfs_bnode_create+0x37a/0x400 [ 838.291498][ T75] handle_bug+0x3a/0x70 [ 838.295644][ T75] exc_invalid_op+0x16/0x40 [ 838.300138][ T75] asm_exc_invalid_op+0x16/0x20 [ 838.304976][ T75] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 838.310597][ T75] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 838.330200][ T75] RSP: 0018:ffffc90001576e80 EFLAGS: 00010246 [ 838.336248][ T75] RAX: 000000000000001f RBX: ffff8880259da0e0 RCX: d52af3e687c6ba00 [ 838.344209][ T75] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 838.352164][ T75] RBP: 0000000000000000 R08: ffffc90001576b87 R09: 1ffff920002aed70 [ 838.360117][ T75] R10: dffffc0000000000 R11: fffff520002aed71 R12: 0000000000000000 [ 838.368074][ T75] R13: ffff8880259da000 R14: ffff888018aaed00 R15: dffffc0000000000 [ 838.376051][ T75] hfs_bmap_alloc+0x53d/0x5d0 [ 838.380719][ T75] ? hfs_bmap_reserve+0x420/0x420 [ 838.385752][ T75] hfs_btree_inc_height+0xfd/0xac0 [ 838.390855][ T75] ? hfs_brec_insert+0x6f6/0xbd0 [ 838.395781][ T75] ? hfs_brec_insert+0xbd0/0xbd0 [ 838.400708][ T75] ? do_raw_spin_unlock+0x11d/0x230 [ 838.405893][ T75] hfs_brec_insert+0x744/0xbd0 [ 838.410652][ T75] ? hfs_brec_keylen+0x350/0x350 [ 838.415580][ T75] __hfs_ext_write_extent+0x2a1/0x470 [ 838.420943][ T75] hfs_ext_write_extent+0x17b/0x200 [ 838.426128][ T75] ? verify_lock_unused+0x140/0x140 [ 838.431312][ T75] ? hfs_ext_keycmp+0x310/0x310 [ 838.436152][ T75] ? writeback_sb_inodes+0x46b/0x1850 [ 838.441516][ T75] hfs_write_inode+0xd8/0xa20 [ 838.446188][ T75] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 838.451567][ T75] ? __writeback_single_inode+0x4ae/0x1160 [ 838.457361][ T75] ? __lock_acquire+0x7d10/0x7d10 [ 838.462369][ T75] ? do_raw_spin_lock+0x128/0x2f0 [ 838.467381][ T75] ? __rwlock_init+0x140/0x140 [ 838.472132][ T75] __writeback_single_inode+0x75b/0x1160 [ 838.477757][ T75] writeback_sb_inodes+0xb30/0x1850 [ 838.482953][ T75] ? queue_io+0x5a0/0x5a0 [ 838.487274][ T75] ? rcu_is_watching+0x11/0xa0 [ 838.492048][ T75] wb_writeback+0x482/0xd50 [ 838.496584][ T75] ? percpu_ref_tryget+0x250/0x250 [ 838.501702][ T75] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 838.507676][ T75] ? _raw_spin_unlock_irq+0x1f/0x40 [ 838.512868][ T75] wb_workfn+0x423/0xee0 [ 838.517106][ T75] ? inode_wait_for_writeback+0x220/0x220 [ 838.522853][ T75] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 838.528827][ T75] ? read_lock_is_recursive+0x10/0x10 [ 838.534182][ T75] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 838.540059][ T75] ? _raw_spin_unlock+0x40/0x40 [ 838.544897][ T75] ? _raw_spin_unlock_irq+0x1f/0x40 [ 838.550083][ T75] ? process_one_work+0x7b0/0x1160 [ 838.555176][ T75] process_one_work+0x8a2/0x1160 [ 838.560106][ T75] ? worker_detach_from_pool+0x240/0x240 [ 838.565738][ T75] ? _raw_spin_lock_irq+0xb7/0xf0 [ 838.570746][ T75] ? _raw_spin_lock_irqsave+0x100/0x100 [ 838.576272][ T75] ? kthread_data+0x4b/0xc0 [ 838.580767][ T75] worker_thread+0xaa2/0x1270 [ 838.585435][ T75] ? __kthread_parkme+0x162/0x1c0 [ 838.590449][ T75] kthread+0x29d/0x330 [ 838.594498][ T75] ? worker_clr_flags+0x1a0/0x1a0 [ 838.599507][ T75] ? kthread_blkcg+0xd0/0xd0 [ 838.604075][ T75] ret_from_fork+0x1f/0x30 [ 838.608482][ T75] [ 838.611623][ T75] Kernel Offset: disabled [ 838.616028][ T75] Rebooting in 86400 seconds..