last executing test programs: 7.143682461s ago: executing program 0 (id=14030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.931178626s ago: executing program 0 (id=14034): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 6.798868123s ago: executing program 0 (id=14037): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0x3) 6.66092995s ago: executing program 0 (id=14041): r0 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a2401002200020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed23074bf2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4bab8aac95498fb6033f760602c1a8b1eac2150072501000000000905000000000000000725010000000007250100000000090400000eb03748000a2401000000020102052405", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x33, @string={0x33, 0x3, "c24c90cd2cc32901eb3b24ddc3bddb3008f597ff9b58fdd406a911822df5395f9e33042581b788247643ec7ac8ba18a9b3"}}}, 0x0) 3.32969517s ago: executing program 0 (id=14088): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0xffffffffffffffff) 3.08691423s ago: executing program 0 (id=14095): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0xf, 0x4, '8|*s'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.358800918s ago: executing program 2 (id=14134): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x9}}, 0x6}, 0x90) 1.24497444s ago: executing program 2 (id=14138): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0xffffffffffffffff}) 1.148136273s ago: executing program 2 (id=14142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x6, &(0x7f0000000200)={0x11, {{0x29, 0x0, 0x3000000, @mcast1}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x4}}}, 0x108) 1.077637941s ago: executing program 1 (id=14144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="17000000680001"], 0xd8}}, 0x0) 1.051033547s ago: executing program 2 (id=14146): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x5, @sliced={0x206, [0x9, 0xd, 0x7, 0x6, 0x7ff, 0x9, 0x5, 0x1, 0x2, 0x800, 0x9, 0x4, 0x3e, 0x4, 0xe, 0x3, 0x4, 0x4, 0x1, 0xfff, 0x8006, 0x6, 0x101, 0x8001, 0xd230, 0x8000, 0xfff, 0x8001, 0x5, 0x3, 0x7f, 0x8, 0x1, 0x120, 0x8, 0x6cd0, 0xfea9, 0x208, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x7, 0x9db7, 0x0, 0x9994]}}) 957.550911ms ago: executing program 2 (id=14148): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) 945.241989ms ago: executing program 1 (id=14150): r0 = socket(0x22, 0x2, 0x4) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 860.734385ms ago: executing program 2 (id=14152): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503", @ANYRESOCT], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 842.187482ms ago: executing program 1 (id=14153): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)="01", 0x1}], 0x2) 722.837762ms ago: executing program 1 (id=14157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000001000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600044000040000060005"], 0x5c}}, 0x0) 669.584803ms ago: executing program 1 (id=14158): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e20, @empty}}]}, 0x110) 529.069629ms ago: executing program 1 (id=14161): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4012, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 528.812559ms ago: executing program 4 (id=14162): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x0, 0xfffffffc}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) 461.616398ms ago: executing program 4 (id=14164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "109a64db5c527e75"}, 0x6}}]}, 0x3c}}, 0x0) 444.433155ms ago: executing program 3 (id=14165): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f61", @ANYRES64=r0], 0x0, 0x52}, 0x28) 357.64154ms ago: executing program 4 (id=14166): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x2, 0x3, 0x3a6}, &(0x7f00000002c0), &(0x7f00000003c0)) io_uring_enter(r0, 0x567, 0xfffffffc, 0xb, 0x0, 0x18) 357.47186ms ago: executing program 3 (id=14167): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0xb, '\x00', @st={0x4, [{0x1}, {0x2, @svalue=0xd2}, {0x1, @svalue=0x158fc00000000}, {0x0, @uvalue=0x80}]}}, {0x20, '\x00', @buffer={"f5afd873c8ed4c8125d3fe7d5d67d76258f40344b0c02d426b799f77205767bd", 0x20}}]}) 329.121276ms ago: executing program 4 (id=14168): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff2080a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 268.701076ms ago: executing program 3 (id=14169): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 230.528699ms ago: executing program 4 (id=14170): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x7, 0x3017}) 137.595633ms ago: executing program 3 (id=14171): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1002, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) 137.457123ms ago: executing program 4 (id=14172): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 112.792759ms ago: executing program 3 (id=14173): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) 0s ago: executing program 3 (id=14174): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x810) kernel console output (not intermixed with test programs): 0.12143'. [ 902.400835][ T4455] usb 5-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 902.460014][ T4455] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 902.523657][ T4455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64 [ 902.567435][ T4455] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.683408][T31300] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 902.748047][ T4455] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 902.770171][ T4455] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.792457][ T4455] usb 5-1: Manufacturer: syz [ 902.793381][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12154'. [ 902.814609][ T4455] usb 5-1: config 0 descriptor?? [ 903.103881][T31323] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12162'. [ 903.133462][T31323] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 903.171720][ T21] usb 5-1: USB disconnect, device number 60 [ 903.407807][T31337] netlink: 'syz.3.12169': attribute type 8 has an invalid length. [ 903.433119][T31335] tc_dump_action: action bad kind [ 903.750426][T31355] loop2: detected capacity change from 0 to 136 [ 903.873932][T31355] rock: directory entry would overflow storage [ 903.897388][T31355] rock: sig=0x4f50, size=4, remaining=3 [ 903.932745][T31355] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 904.403719][T31394] loop4: detected capacity change from 0 to 256 [ 904.509318][T31394] FAT-fs (loop4): Directory bread(block 64) failed [ 904.509360][T31394] FAT-fs (loop4): Directory bread(block 65) failed [ 904.509425][T31394] FAT-fs (loop4): Directory bread(block 66) failed [ 904.509454][T31394] FAT-fs (loop4): Directory bread(block 67) failed [ 904.509557][T31394] FAT-fs (loop4): Directory bread(block 68) failed [ 904.509585][T31394] FAT-fs (loop4): Directory bread(block 69) failed [ 904.509658][T31394] FAT-fs (loop4): Directory bread(block 70) failed [ 904.509689][T31394] FAT-fs (loop4): Directory bread(block 71) failed [ 904.509754][T31394] FAT-fs (loop4): Directory bread(block 72) failed [ 904.509790][T31394] FAT-fs (loop4): Directory bread(block 73) failed [ 904.672415][T31406] loop1: detected capacity change from 0 to 128 [ 905.219850][T31432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12215'. [ 905.251497][T31436] loop4: detected capacity change from 0 to 256 [ 905.446825][T31436] FAT-fs (loop4): Directory bread(block 64) failed [ 905.446869][T31436] FAT-fs (loop4): Directory bread(block 65) failed [ 905.446942][T31436] FAT-fs (loop4): Directory bread(block 66) failed [ 905.446972][T31436] FAT-fs (loop4): Directory bread(block 67) failed [ 905.447038][T31436] FAT-fs (loop4): Directory bread(block 68) failed [ 905.447068][T31436] FAT-fs (loop4): Directory bread(block 69) failed [ 905.447137][T31436] FAT-fs (loop4): Directory bread(block 70) failed [ 905.447165][T31436] FAT-fs (loop4): Directory bread(block 71) failed [ 905.447264][T31436] FAT-fs (loop4): Directory bread(block 72) failed [ 905.447311][T31436] FAT-fs (loop4): Directory bread(block 73) failed [ 905.584183][ T26] audit: type=1800 audit(2000561084.371:64): pid=31436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12216" name="file1" dev="loop4" ino=1048665 res=0 errno=0 [ 906.102082][T31472] xt_CT: No such helper "snmp" [ 906.283350][T31488] netlink: 'syz.1.12239': attribute type 1 has an invalid length. [ 906.386320][T31490] lo speed is unknown, defaulting to 1000 [ 906.491358][T31495] loop4: detected capacity change from 0 to 2048 [ 906.841464][T31516] dlm: no locking on control device [ 906.861782][T31517] loop4: detected capacity change from 0 to 128 [ 907.067542][T31525] loop1: detected capacity change from 0 to 4096 [ 907.163143][T31525] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 907.222179][T31525] ntfs: volume version 3.1. [ 907.350530][ T6477] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 907.610059][ T6477] usb 3-1: Using ep0 maxpacket: 8 [ 907.735538][ T6477] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 907.783721][T31563] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 907.928006][ T6477] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 907.949080][ T6477] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 907.973114][ T6477] usb 3-1: Product: syz [ 907.977318][ T6477] usb 3-1: Manufacturer: syz [ 907.997323][ T6477] usb 3-1: SerialNumber: syz [ 908.280592][ T6477] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 908.288504][ T6477] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 908.344045][ T6477] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 908.353144][T31599] netlink: 'syz.1.12293': attribute type 1 has an invalid length. [ 908.485467][T31605] netlink: 'syz.3.12297': attribute type 3 has an invalid length. [ 908.505166][ T6477] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 908.513503][ T6477] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 908.564230][ T6477] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 908.612109][ T6477] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 908.669308][ T6477] usb 3-1: USB disconnect, device number 54 [ 908.732142][ T6477] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 908.812808][ T6477] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 908.846419][T31628] netlink: 'syz.1.12308': attribute type 3 has an invalid length. [ 908.877322][ T6477] visor 3-1:1.0: device disconnected [ 909.071752][T31636] device gre0 left promiscuous mode [ 909.156794][T31636] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.198970][T31636] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.283954][T31636] device xfrm0 left promiscuous mode [ 909.378631][T31636] device netdevsim0 left promiscuous mode [ 909.450295][T31636] device bridge1 left promiscuous mode [ 910.100070][ T6473] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 910.206810][T31704] tmpfs: Bad value for 'mpol' [ 910.221486][T31707] netlink: 'syz.2.12346': attribute type 21 has an invalid length. [ 910.365153][ T6473] usb 2-1: Using ep0 maxpacket: 32 [ 910.670998][ T6473] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 910.704846][ T6473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.707918][T31732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 910.720353][T31732] IPv6: NLM_F_CREATE should be set when creating new route [ 910.727615][T31732] IPv6: NLM_F_CREATE should be set when creating new route [ 910.743306][T31738] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.12362'. [ 910.750108][ T6473] usb 2-1: Product: syz [ 910.756957][ T6473] usb 2-1: Manufacturer: syz [ 910.776819][ T6473] usb 2-1: SerialNumber: syz [ 910.800200][ T6473] usb 2-1: config 0 descriptor?? [ 910.899633][T31742] xt_ecn: cannot match TCP bits for non-tcp packets [ 911.330127][T31767] nfs4: Bad value for 'source' [ 911.348756][ T6473] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 911.355947][ T6473] airspy 2-1:0.0: Could not detect board [ 911.378182][ T6473] airspy: probe of 2-1:0.0 failed with error -71 [ 911.393422][T31769] loop2: detected capacity change from 0 to 256 [ 911.429508][ T6473] usb 2-1: USB disconnect, device number 58 [ 911.477130][T31771] x_tables: unsorted underflow at hook 1 [ 911.837123][T31785] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12385'. [ 912.255848][T31810] xt_hashlimit: max too large, truncated to 1048576 [ 912.368961][T31805] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 912.498688][T31816] loop2: detected capacity change from 0 to 2048 [ 912.507882][T31821] usb usb7: usbfs: process 31821 (syz.1.12401) did not claim interface 0 before use [ 912.626643][T31825] netlink: 'syz.4.12404': attribute type 5 has an invalid length. [ 912.657606][T31816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.788048][T31825] device ip6erspan1 entered promiscuous mode [ 912.886957][T31787] loop0: detected capacity change from 0 to 32768 [ 912.986917][T31843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 913.065541][T31851] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12415'. [ 913.151532][T31787] XFS (loop0): Mounting V5 Filesystem [ 913.225865][T31863] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 913.287319][T31787] XFS (loop0): Ending clean mount [ 913.356531][ T4202] XFS (loop0): Unmounting Filesystem [ 913.391880][T31869] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 913.477806][T31874] netlink: 'syz.4.12424': attribute type 1 has an invalid length. [ 913.485758][T31874] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.12424'. [ 913.779223][T31893] 9pnet: Insufficient options for proto=fd [ 913.867534][T31898] comedi comedi4: bad chanlist[0]=0x00006c7f chan=27775 range length=2 [ 914.025337][T31908] MTD: Couldn't look up '': -22 [ 914.236711][T31925] netlink: 'syz.3.12446': attribute type 5 has an invalid length. [ 914.282652][T31929] xt_limit: Overflow, try lower: 2147483649/3300 [ 914.292059][T31925] device ip6erspan0 entered promiscuous mode [ 914.305898][T31931] loop4: detected capacity change from 0 to 64 [ 914.320750][T31927] loop1: detected capacity change from 0 to 2048 [ 914.375607][T31927] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 914.449147][T31927] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 914.521433][T31927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.610602][T31927] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 9 [ 914.894526][T31966] CIFS mount error: No usable UNC path provided in device string! [ 914.894526][T31966] [ 915.011728][T31966] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 915.075703][T31977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12469'. [ 915.472304][T32008] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12485'. [ 915.549843][T32015] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12488'. [ 915.598596][T32015] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 915.635713][T32015] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 915.908929][T32044] loop2: detected capacity change from 0 to 64 [ 916.321304][T32060] loop4: detected capacity change from 0 to 512 [ 916.371265][T32060] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 916.429614][T32060] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.12511: bg 0: block 104: invalid block bitmap [ 916.449799][T32060] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 916.459881][T32060] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.12511: invalid indirect mapped block 1 (level 1) [ 916.474057][T32060] EXT4-fs (loop4): 1 truncate cleaned up [ 916.479807][T32060] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 916.576901][T32067] lo speed is unknown, defaulting to 1000 [ 916.648668][T32054] loop1: detected capacity change from 0 to 32768 [ 916.677735][T32054] ERROR: (device loop1): diAllocAG: error reading iag [ 916.677735][T32054] [ 916.700113][T32054] ialloc: diAlloc returned -5! [ 916.975697][T32082] netlink: 'syz.2.12517': attribute type 1 has an invalid length. [ 916.987790][T32084] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 917.007133][T32082] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.12517'. [ 917.029144][T32084] bond0: (slave lo): Error: Device can not be enslaved while up [ 917.046372][T32082] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12517'. [ 917.506471][ T6473] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 917.902390][ T6473] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 917.921451][ T6473] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 917.944841][ T6473] usb 3-1: config 0 interface 0 has no altsetting 0 [ 918.138547][ T6473] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 918.173958][ T6473] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 918.197095][ T6473] usb 3-1: Product: syz [ 918.222489][ T6473] usb 3-1: Manufacturer: syz [ 918.238700][ T6473] usb 3-1: SerialNumber: syz [ 918.286920][ T6473] usb 3-1: config 0 descriptor?? [ 918.332768][ T6473] hub 3-1:0.0: bad descriptor, ignoring hub [ 918.351480][ T6473] hub: probe of 3-1:0.0 failed with error -5 [ 918.358741][T32162] netlink: 'syz.1.12557': attribute type 1 has an invalid length. [ 918.370627][ T6473] usb 3-1: selecting invalid altsetting 0 [ 918.762742][T32171] loop4: detected capacity change from 0 to 4096 [ 918.780052][ T6473] usb 3-1: USB disconnect, device number 55 [ 918.836465][T32171] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 918.881096][T32171] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 918.971135][T32171] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 919.011490][T32187] lo speed is unknown, defaulting to 1000 [ 919.021553][T32171] ntfs: volume version 3.1. [ 919.062517][T32189] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 919.071553][T32171] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 919.095701][T32171] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 919.159952][T32190] loop1: detected capacity change from 0 to 2048 [ 919.267261][ T4193] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 919.440107][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12575'. [ 919.520126][T32204] loop1: detected capacity change from 0 to 512 [ 919.620325][T32204] EXT4-fs (loop1): Ignoring removed oldalloc option [ 919.692934][T32204] EXT4-fs (loop1): 1 truncate cleaned up [ 919.708719][T32204] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,nodelalloc,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 920.286088][ T8827] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 920.538997][T32256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12601'. [ 920.570970][ T8827] usb 4-1: Using ep0 maxpacket: 16 [ 920.599548][T32256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12601'. [ 920.656147][T32218] loop4: detected capacity change from 0 to 32768 [ 920.717562][T32264] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 920.735262][ T8827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.765222][T32218] JBD2: Ignoring recovery information on journal [ 920.816307][ T8827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.903270][ T8827] usb 4-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 920.948870][ T8827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.982125][T32218] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 921.014338][ T8827] usb 4-1: config 0 descriptor?? [ 921.044075][T32278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12611'. [ 921.062861][ T8827] hub 4-1:0.0: USB hub found [ 921.131510][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 921.280490][ T8827] hub 4-1:0.0: 7 ports detected [ 921.301668][ T4455] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 921.323091][ T8827] hub 4-1:0.0: insufficient power available to use all downstream ports [ 921.504031][T32294] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12619'. [ 921.516631][ T8827] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 921.523190][ T8827] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 921.611632][ T4455] usb 3-1: Using ep0 maxpacket: 8 [ 921.630247][ T8827] usb 4-1: USB disconnect, device number 44 [ 921.804312][ T4455] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 921.835075][ T4455] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.836791][T32311] loop1: detected capacity change from 0 to 1024 [ 921.857260][ T4455] usb 3-1: config 0 has no interface number 0 [ 921.909533][T32318] loop0: detected capacity change from 0 to 256 [ 921.920221][T32311] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 921.970855][T32311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 922.057648][T32318] FAT-fs (loop0): Directory bread(block 64) failed [ 922.060830][T32311] System zones: 0-1, 3-36 [ 922.064713][ T4455] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 922.130481][T32311] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 922.155726][T32318] FAT-fs (loop0): Directory bread(block 65) failed [ 922.166167][ T4455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.196873][T32318] FAT-fs (loop0): Directory bread(block 66) failed [ 922.207581][ T4455] usb 3-1: Product: syz [ 922.218368][ T4455] usb 3-1: Manufacturer: syz [ 922.226456][T32318] FAT-fs (loop0): Directory bread(block 67) failed [ 922.257938][ T4455] usb 3-1: SerialNumber: syz [ 922.279628][T32318] FAT-fs (loop0): Directory bread(block 68) failed [ 922.288704][ T4455] usb 3-1: config 0 descriptor?? [ 922.305189][T32318] FAT-fs (loop0): Directory bread(block 69) failed [ 922.335178][T32318] FAT-fs (loop0): Directory bread(block 70) failed [ 922.354978][T32318] FAT-fs (loop0): Directory bread(block 71) failed [ 922.378486][T32318] FAT-fs (loop0): Directory bread(block 72) failed [ 922.400014][T32318] FAT-fs (loop0): Directory bread(block 73) failed [ 922.527661][T32337] netlink: 'syz.4.12637': attribute type 10 has an invalid length. [ 922.553278][T32337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12637'. [ 922.578979][T18456] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 922.595482][ T4455] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 922.610737][ T4455] usb 3-1: No valid video chain found. [ 922.617222][T32337] netlink: 'syz.4.12637': attribute type 10 has an invalid length. [ 922.644330][T32337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12637'. [ 922.841128][T18456] usb 2-1: Using ep0 maxpacket: 32 [ 922.899513][ T6473] usb 3-1: USB disconnect, device number 56 [ 922.970777][T18456] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.992029][T18456] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 923.014626][T18456] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 923.220950][T18456] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.237329][T18456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.256467][T18456] usb 2-1: Product: syz [ 923.265563][T18456] usb 2-1: Manufacturer: syz [ 923.291497][ T4189] kworker/dying (4189) used greatest stack depth: 15480 bytes left [ 923.299646][T18456] usb 2-1: SerialNumber: syz [ 923.355237][T18456] cdc_ncm 2-1:1.0: skipping garbage [ 923.360477][T18456] cdc_ncm 2-1:1.0: skipping garbage [ 923.382401][T18456] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 923.404103][T18456] cdc_ncm 2-1:1.0: bind() failure [ 923.494988][T32373] xt_TCPMSS: Only works on TCP SYN packets [ 923.528557][T32375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12656'. [ 923.600257][T18456] usb 2-1: USB disconnect, device number 59 [ 923.704786][T32380] device bridge2 entered promiscuous mode [ 924.131388][T32395] device netdevsim0 entered promiscuous mode [ 924.729434][T32416] netlink: 'syz.2.12677': attribute type 1 has an invalid length. [ 924.768037][T32416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12677'. [ 925.082759][T32429] xt_CT: No such helper "snmp_trap" [ 925.132205][T32435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12685'. [ 925.194689][T32441] loop1: detected capacity change from 0 to 64 [ 925.202482][T32440] netlink: 'syz.4.12687': attribute type 1 has an invalid length. [ 925.235098][T32443] netlink: 'syz.2.12689': attribute type 3 has an invalid length. [ 925.492084][T32451] netlink: 'syz.3.12694': attribute type 1 has an invalid length. [ 925.521031][T32451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12694'. [ 925.557336][T32451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12694'. [ 925.663370][ T8831] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 925.936168][ T8831] usb 3-1: Using ep0 maxpacket: 32 [ 926.096193][ T8831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 926.273485][T32453] loop1: detected capacity change from 0 to 32768 [ 926.295016][ T8831] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 926.315165][ T8831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.343122][ T8831] usb 3-1: Product: syz [ 926.347928][ T8831] usb 3-1: Manufacturer: syz [ 926.352578][ T8831] usb 3-1: SerialNumber: syz [ 926.372446][ T8831] usb 3-1: config 0 descriptor?? [ 926.380678][T32480] device bond3 entered promiscuous mode [ 926.381183][T32486] loop0: detected capacity change from 0 to 512 [ 926.386734][T32480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 926.402646][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12710'. [ 926.413805][ T8831] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 926.421379][T32488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12710'. [ 926.547871][T32453] XFS (loop1): Mounting V5 Filesystem [ 926.556385][T32486] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 926.593861][T32486] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 926.604019][T32486] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.12709: Failed to acquire dquot type 1 [ 926.629759][ T8831] usb 3-1: USB disconnect, device number 57 [ 926.638699][T32486] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 926.710654][T32453] XFS (loop1): Ending clean mount [ 926.765059][T32486] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 926.804992][T32486] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.12709: Failed to acquire dquot type 1 [ 926.824253][ T4191] XFS (loop1): Unmounting Filesystem [ 926.835981][T32486] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12709: bg 0: block 248: padding at end of block bitmap is not set [ 926.860344][T32486] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 926.881342][T32486] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 926.892161][T32486] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 926.907768][T32486] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.12709: Failed to acquire dquot type 1 [ 926.921495][T32486] EXT4-fs (loop0): 1 orphan inode deleted [ 926.931536][T32486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 926.943766][T32486] ext4 filesystem being mounted at /2407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.009023][T32486] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 927.021480][T32486] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 927.031420][T32486] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.12709: Failed to acquire dquot type 1 [ 927.258351][T32510] lo speed is unknown, defaulting to 1000 [ 927.306843][T32512] loop2: detected capacity change from 0 to 2048 [ 927.382239][T32513] loop0: detected capacity change from 0 to 2048 [ 927.386156][T32512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 927.609277][T32525] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.12722'. [ 927.618543][T32525] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 927.668122][T32528] loop4: detected capacity change from 0 to 1024 [ 927.772343][T32536] x_tables: duplicate entry at hook 2 [ 927.874965][ T4245] hfsplus: b-tree write err: -5, ino 25 [ 927.882335][ T4245] hfsplus: b-tree write err: -5, ino 4 [ 927.950246][ T4245] hfsplus: b-tree write err: -5, ino 2 [ 928.015405][T18456] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 928.142058][T32559] loop0: detected capacity change from 0 to 1024 [ 928.247361][T32559] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: writeback. [ 928.271920][T18456] usb 3-1: Using ep0 maxpacket: 16 [ 928.368807][T32579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12748'. [ 928.403641][T18456] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.428522][T18456] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 928.499828][T32585] sctp: [Deprecated]: syz.4.12754 (pid 32585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 928.499828][T32585] Use struct sctp_sack_info instead [ 928.614343][T18456] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 928.623467][T18456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.680737][T18456] usb 3-1: Product: syz [ 928.685094][T18456] usb 3-1: Manufacturer: syz [ 928.700203][T18456] usb 3-1: SerialNumber: syz [ 928.810504][T32600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12758'. [ 929.269342][T18456] usb 3-1: USB disconnect, device number 58 [ 929.562119][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.782208][T32649] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.12781'. [ 929.954999][T32659] netlink: 'syz.3.12787': attribute type 3 has an invalid length. [ 930.166295][T32673] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 930.367387][ T8821] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 930.417323][T32687] loop4: detected capacity change from 0 to 512 [ 930.506442][T32687] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 930.934966][ T8821] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 930.944270][ T8821] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 931.000526][ T8821] usb 2-1: Product: syz [ 931.004739][ T8821] usb 2-1: SerialNumber: syz [ 931.028942][ T8821] usb 2-1: config 0 descriptor?? [ 931.396859][T32731] loop2: detected capacity change from 0 to 1024 [ 931.422791][T32734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12822'. [ 931.445525][T32735] netlink: 'syz.4.12821': attribute type 1 has an invalid length. [ 931.553595][ T8821] usb 2-1: USB disconnect, device number 60 [ 931.560258][ T4273] hfsplus: b-tree write err: -5, ino 25 [ 931.575709][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 931.588816][ T4273] hfsplus: b-tree write err: -5, ino 2 [ 931.926100][T32754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12831'. [ 932.085907][ T8831] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 932.088469][ T6477] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 932.226163][ T303] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12839'. [ 932.366418][ T6477] usb 5-1: Using ep0 maxpacket: 8 [ 932.372839][ T316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.431779][ T8831] usb 3-1: Using ep0 maxpacket: 8 [ 932.539092][ T324] netlink: 100 bytes leftover after parsing attributes in process `syz.3.12849'. [ 932.548947][ T6477] usb 5-1: unable to get BOS descriptor or descriptor too short [ 932.591181][ T8831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 932.596356][ T324] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 932.623116][ T330] IPVS: length: 117 != 8 [ 932.629186][ T8831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.633881][ T6477] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.654248][ T8831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 932.660145][ T6477] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.687380][ T8831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 932.726779][ T8831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 932.738262][ T326] loop0: detected capacity change from 0 to 8192 [ 932.756004][ T8831] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 932.776408][ T8831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.795749][ T8831] usb 3-1: config 0 descriptor?? [ 932.823359][ T326] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 932.833153][T32748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 932.847114][ T326] REISERFS (device loop0): using ordered data mode [ 932.875167][ T326] reiserfs: using flush barriers [ 932.887991][ T326] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 932.922674][ T6477] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 932.934554][ T326] REISERFS (device loop0): checking transaction log (loop0) [ 932.943356][ T344] loop1: detected capacity change from 0 to 512 [ 932.950157][ T6477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.965701][ T326] REISERFS (device loop0): Using tea hash to sort names [ 932.973078][ T326] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 932.985338][ T6477] usb 5-1: Product: syz [ 932.996188][ T6477] usb 5-1: Manufacturer: syz [ 933.037697][ T6477] usb 5-1: SerialNumber: syz [ 933.132506][ T344] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 933.170255][ T344] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 933.213941][ T344] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.12856: Failed to acquire dquot type 1 [ 933.268968][ T344] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 933.338920][ T344] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 933.358039][ T344] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.12856: Failed to acquire dquot type 1 [ 933.393102][ T344] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12856: bg 0: block 248: padding at end of block bitmap is not set [ 933.410383][ T8831] usb 3-1: USB disconnect, device number 59 [ 933.488311][ T344] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 933.523447][ T344] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 933.561317][ T344] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 933.596105][ T344] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.12856: Failed to acquire dquot type 1 [ 933.623450][ T373] netlink: 'syz.3.12869': attribute type 10 has an invalid length. [ 933.639001][ T6477] usb 5-1: cannot find UAC_HEADER [ 933.639604][ T344] EXT4-fs (loop1): 1 orphan inode deleted [ 933.682592][ T6477] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 933.684033][ T344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 933.704127][ T373] team0: Device ipvlan1 failed to register rx_handler [ 933.720269][ T6477] usb 5-1: USB disconnect, device number 61 [ 933.729548][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.810828][ T344] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 933.852670][ T344] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 933.902416][ T344] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.12856: Failed to acquire dquot type 1 [ 934.041703][ T384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12872'. [ 934.075304][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12876'. [ 934.182142][ T390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12875'. [ 934.434197][ T415] xt_recent: hitcount (4194304) is larger than allowed maximum (255) [ 934.535376][ T421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12893'. [ 934.576531][ T421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12893'. [ 934.880913][ T445] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 935.459167][ T8827] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 935.491325][ T8827] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 935.532490][ T8827] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 935.637365][ T508] loop2: detected capacity change from 0 to 256 [ 936.079027][ T525] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 936.108428][ T8821] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 936.256634][ T533] MTD: Couldn't look up './bus': -15 [ 936.327078][ T540] loop2: detected capacity change from 0 to 256 [ 936.386478][ T8821] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 936.413131][ T548] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12953'. [ 936.447081][ T540] FAT-fs (loop2): Directory bread(block 64) failed [ 936.477520][ T551] netlink: 'syz.1.12954': attribute type 1 has an invalid length. [ 936.487661][ T540] FAT-fs (loop2): Directory bread(block 65) failed [ 936.509276][ T540] FAT-fs (loop2): Directory bread(block 66) failed [ 936.541181][ T540] FAT-fs (loop2): Directory bread(block 67) failed [ 936.584637][ T540] FAT-fs (loop2): Directory bread(block 68) failed [ 936.600911][ T540] FAT-fs (loop2): Directory bread(block 69) failed [ 936.620429][ T540] FAT-fs (loop2): Directory bread(block 70) failed [ 936.638116][ T540] FAT-fs (loop2): Directory bread(block 71) failed [ 936.646432][ T6477] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 936.675951][ T540] FAT-fs (loop2): Directory bread(block 72) failed [ 936.695889][ T540] FAT-fs (loop2): Directory bread(block 73) failed [ 936.920669][ T6477] usb 4-1: Using ep0 maxpacket: 8 [ 937.049245][ T6477] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 937.068286][ T6477] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.115323][ T6477] usb 4-1: config 0 has no interface number 0 [ 937.132465][ T6477] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 937.152778][ T593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12975'. [ 937.172925][ T6477] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 937.199923][ T6477] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.244157][ T6477] usb 4-1: config 0 interface 52 has no altsetting 0 [ 937.391201][ T6477] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 937.410434][ T6477] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 937.423264][ T8821] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 937.445837][ T6477] usb 4-1: Product: syz [ 937.459206][ T6477] usb 4-1: SerialNumber: syz [ 937.485277][ T6477] usb 4-1: config 0 descriptor?? [ 937.692375][ T631] netlink: 1020 bytes leftover after parsing attributes in process `syz.1.12994'. [ 937.701091][ T8821] usb 5-1: Using ep0 maxpacket: 32 [ 937.783521][ T6477] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input72 [ 937.802598][ T3546] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 937.823081][ T3546] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 937.852071][ T8821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.880299][ T8821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.896206][ T3546] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 937.904988][ T643] loop0: detected capacity change from 0 to 16 [ 937.929919][ T3546] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 937.953491][ T643] erofs: (device loop0): mounted with root inode @ nid 36. [ 938.026192][ T4178] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 938.041359][ T21] usb 4-1: USB disconnect, device number 45 [ 938.043150][ T649] netlink: 236 bytes leftover after parsing attributes in process `syz.1.13002'. [ 938.107639][ T8821] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 938.139976][ T8821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.148017][ T8821] usb 5-1: Product: syz [ 938.197160][ T8821] usb 5-1: Manufacturer: syz [ 938.201801][ T8821] usb 5-1: SerialNumber: syz [ 938.238465][ T8821] usb 5-1: config 0 descriptor?? [ 938.269517][ T659] loop0: detected capacity change from 0 to 128 [ 938.290286][ T8821] qmi_wwan 5-1:0.0: bogus CDC Union: master=101, slave=0 [ 938.306530][ T8821] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 938.321352][ T663] netlink: 420 bytes leftover after parsing attributes in process `syz.2.13010'. [ 938.380427][ T659] ufs: Unable to do repair on error, will lock lock instead [ 938.433574][ T659] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 938.535097][ T8821] usb 5-1: USB disconnect, device number 62 [ 939.103615][ T699] loop2: detected capacity change from 0 to 1764 [ 939.189596][ T705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.189827][ T4455] lo speed is unknown, defaulting to 1000 [ 939.268961][ T710] loop0: detected capacity change from 0 to 1024 [ 939.386485][ T720] program syz.4.13037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.433418][ T144] hfsplus: b-tree write err: -5, ino 25 [ 939.449178][ T144] hfsplus: b-tree write err: -5, ino 4 [ 939.476294][ T144] hfsplus: b-tree write err: -5, ino 2 [ 939.528815][ T732] loop2: detected capacity change from 0 to 256 [ 939.598826][ T732] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 939.643608][ T732] FAT-fs (loop2): Filesystem has been set read-only [ 939.674642][ T732] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 939.703383][ T732] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 939.737730][ T26] audit: type=1800 audit(910.951:65): pid=732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13043" name="file1" dev="loop2" ino=1048671 res=0 errno=0 [ 939.764497][ T4455] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 939.773148][ T732] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 940.053024][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 940.074426][ T4455] usb 2-1: Using ep0 maxpacket: 8 [ 940.216651][ T21] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 940.235155][ T4455] usb 2-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 940.254187][ T4455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.294912][ T4455] usb 2-1: config 0 descriptor?? [ 940.370227][ T4455] usb 2-1: Found UVC 0.00 device (2801:0201) [ 940.396551][ T4455] usb 2-1: No valid video chain found. [ 940.491379][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 940.586558][ T782] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13066'. [ 940.592151][ T4455] usb 2-1: USB disconnect, device number 61 [ 940.597207][ T782] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 940.620564][ T21] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 940.630286][ T8821] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 940.646187][ T21] usb 5-1: config 0 has no interface number 0 [ 940.667840][ T21] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 940.691822][ T784] ubi: mtd0 is already attached to ubi31 [ 940.820133][ T21] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 940.839438][ T21] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 940.850544][ T21] usb 5-1: Manufacturer: syz [ 940.871630][ T21] usb 5-1: SerialNumber: syz [ 940.886354][ T21] usb 5-1: config 0 descriptor?? [ 940.913933][ T792] loop2: detected capacity change from 0 to 8192 [ 941.048630][ T792] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 941.067464][ T792] REISERFS (device loop2): using ordered data mode [ 941.076970][ T792] reiserfs: using flush barriers [ 941.083411][ T792] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 941.100867][ T792] REISERFS (device loop2): checking transaction log (loop2) [ 941.109580][ T792] REISERFS (device loop2): Using r5 hash to sort names [ 941.117818][ T792] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 941.250787][ T804] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13077'. [ 941.287993][ T8821] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 941.308143][ T8821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.329677][ T8821] usb 4-1: Product: syz [ 941.357965][ T8821] usb 4-1: Manufacturer: syz [ 941.384313][ T8821] usb 4-1: SerialNumber: syz [ 941.393838][ T8821] r8152-cfgselector 4-1: config 0 descriptor?? [ 941.421636][ T21] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 941.475410][ T21] usb 5-1: USB disconnect, device number 63 [ 941.705247][ T831] loop2: detected capacity change from 0 to 64 [ 941.812849][ T831] Trying to free block not in datazone [ 941.838564][ T831] Trying to free block not in datazone [ 941.855110][ T831] Trying to free block not in datazone [ 941.892163][ T831] Trying to free block not in datazone [ 941.918582][ T831] Trying to free block not in datazone [ 941.924479][ T8821] r8152-cfgselector 4-1: Unknown version 0x0000 [ 941.930906][ T8821] r8152-cfgselector 4-1: bad CDC descriptors [ 941.947067][ T831] Trying to free block not in datazone [ 941.979354][ T831] Trying to free block not in datazone [ 942.009425][ T8821] r8152-cfgselector 4-1: Unknown version 0x0000 [ 942.016897][ T831] Trying to free block not in datazone [ 942.023372][ T8821] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 942.041420][ T831] Trying to free block not in datazone [ 942.063351][ T831] Trying to free block not in datazone [ 942.095187][ T831] Trying to free block not in datazone [ 942.096563][ T839] loop0: detected capacity change from 0 to 8192 [ 942.100765][ T831] Trying to free block not in datazone [ 942.148375][ T831] Trying to free block not in datazone [ 942.153944][ T831] Trying to free block not in datazone [ 942.163318][ T848] loop1: detected capacity change from 0 to 1024 [ 942.171322][ T831] Trying to free block not in datazone [ 942.190570][ T831] Trying to free block not in datazone [ 942.197207][ T839] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 942.206436][ T831] Trying to free block not in datazone [ 942.206450][ T831] Trying to free block not in datazone [ 942.206457][ T831] Trying to free block not in datazone [ 942.206464][ T831] Trying to free block not in datazone [ 942.206472][ T831] Trying to free block not in datazone [ 942.206478][ T831] Trying to free block not in datazone [ 942.206485][ T831] Trying to free block not in datazone [ 942.206493][ T831] Trying to free block not in datazone [ 942.206500][ T831] Trying to free block not in datazone [ 942.206508][ T831] Trying to free block not in datazone [ 942.206515][ T831] Trying to free block not in datazone [ 942.206522][ T831] Trying to free block not in datazone [ 942.206528][ T831] Trying to free block not in datazone [ 942.206535][ T831] Trying to free block not in datazone [ 942.206542][ T831] Trying to free block not in datazone [ 942.206550][ T831] Trying to free block not in datazone [ 942.206557][ T831] Trying to free block not in datazone [ 942.206564][ T831] Trying to free block not in datazone [ 942.206571][ T831] Trying to free block not in datazone [ 942.206578][ T831] Trying to free block not in datazone [ 942.206586][ T831] Trying to free block not in datazone [ 942.206593][ T831] Trying to free block not in datazone [ 942.206600][ T831] Trying to free block not in datazone [ 942.206607][ T831] Trying to free block not in datazone [ 942.206614][ T831] Trying to free block not in datazone [ 942.206621][ T831] Trying to free block not in datazone [ 942.206629][ T831] Trying to free block not in datazone [ 942.206636][ T831] Trying to free block not in datazone [ 942.206643][ T831] Trying to free block not in datazone [ 942.206650][ T831] Trying to free block not in datazone [ 942.206658][ T831] Trying to free block not in datazone [ 942.206664][ T831] Trying to free block not in datazone [ 942.206671][ T831] Trying to free block not in datazone [ 942.345294][ T839] REISERFS (device loop0): using ordered data mode [ 942.404973][ T831] Trying to free block not in datazone [ 942.415690][ T144] hfsplus: b-tree write err: -5, ino 25 [ 942.421435][ T144] hfsplus: b-tree write err: -5, ino 4 [ 942.422059][ T831] Trying to free block not in datazone [ 942.434415][ T144] hfsplus: b-tree write err: -5, ino 2 [ 942.447111][ T839] reiserfs: using flush barriers [ 942.460357][ T839] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 942.485621][ T839] REISERFS (device loop0): checking transaction log (loop0) [ 942.492342][ T831] Trying to free block not in datazone [ 942.553123][ T831] Trying to free block not in datazone [ 942.562634][ T839] REISERFS (device loop0): Using r5 hash to sort names [ 942.574427][ T839] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 942.649335][ T857] loop4: detected capacity change from 0 to 2048 [ 942.658594][ T831] Trying to free block not in datazone [ 942.685366][ T862] netlink: 22 bytes leftover after parsing attributes in process `syz.1.13103'. [ 942.690820][ T831] Trying to free block not in datazone [ 942.707956][ T831] Trying to free block not in datazone [ 942.713439][ T831] Trying to free block not in datazone [ 942.732133][ T831] Trying to free block not in datazone [ 942.757210][ T831] Trying to free block not in datazone [ 942.787115][ T831] Trying to free block not in datazone [ 942.788663][ T866] QAT: Stopping all acceleration devices. [ 942.793222][ T831] Trying to free block not in datazone [ 942.806278][ T857] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485 [ 942.838380][ T831] Trying to free block not in datazone [ 942.851712][ T857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.860798][ T831] Trying to free block not in datazone [ 942.874699][ T831] Trying to free block not in datazone [ 942.939639][ T831] Trying to free block not in datazone [ 942.945494][ T831] Trying to free block not in datazone [ 942.982700][ T831] Trying to free block not in datazone [ 942.988339][ T831] Trying to free block not in datazone [ 943.039786][ T831] Trying to free block not in datazone [ 943.047193][ T831] Trying to free block not in datazone [ 943.069489][ T831] Trying to free block not in datazone [ 943.096683][ T831] Trying to free block not in datazone [ 943.135271][ T831] Trying to free block not in datazone [ 943.185347][ T831] Trying to free block not in datazone [ 943.190970][ T831] Trying to free block not in datazone [ 943.239761][ T831] Trying to free block not in datazone [ 943.245338][ T831] Trying to free block not in datazone [ 943.269244][ T831] Trying to free block not in datazone [ 943.298524][ T831] Trying to free block not in datazone [ 943.313742][ T887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13115'. [ 943.323017][ T831] Trying to free block not in datazone [ 943.333804][ T831] Trying to free block not in datazone [ 943.365298][ T831] Trying to free block not in datazone [ 943.381784][ T831] Trying to free block not in datazone [ 943.387284][ T831] Trying to free block not in datazone [ 943.442817][ T831] Trying to free block not in datazone [ 943.452086][ T831] Trying to free block not in datazone [ 943.475620][ T831] Trying to free block not in datazone [ 943.501184][ T831] Trying to free block not in datazone [ 943.543279][ T831] Trying to free block not in datazone [ 943.570444][ T831] Trying to free block not in datazone [ 943.575937][ T831] Trying to free block not in datazone [ 943.605003][ T909] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 943.611740][ T911] loop1: detected capacity change from 0 to 64 [ 943.635363][ T831] Trying to free block not in datazone [ 943.647083][ T831] Trying to free block not in datazone [ 943.678582][ T831] Trying to free block not in datazone [ 943.684418][ T831] Trying to free block not in datazone [ 943.719767][ T831] Trying to free block not in datazone [ 943.735580][ T831] Trying to free block not in datazone [ 943.758695][ T831] Trying to free block not in datazone [ 943.764502][ T831] Trying to free block not in datazone [ 943.769968][ T831] Trying to free block not in datazone [ 943.816732][ T831] Trying to free block not in datazone [ 943.822228][ T831] Trying to free block not in datazone [ 943.920958][ T831] Trying to free block not in datazone [ 943.947665][ T831] Trying to free block not in datazone [ 943.955545][ T831] Trying to free block not in datazone [ 943.965732][ T831] Trying to free block not in datazone [ 943.971214][ T831] Trying to free block not in datazone [ 943.992255][ T831] Trying to free block not in datazone [ 943.992267][ T831] Trying to free block not in datazone [ 943.992276][ T831] Trying to free block not in datazone [ 943.992283][ T831] Trying to free block not in datazone [ 943.992291][ T831] Trying to free block not in datazone [ 943.992298][ T831] Trying to free block not in datazone [ 943.992305][ T831] Trying to free block not in datazone [ 943.992313][ T831] Trying to free block not in datazone [ 943.992320][ T831] Trying to free block not in datazone [ 943.992327][ T831] Trying to free block not in datazone [ 943.992334][ T831] Trying to free block not in datazone [ 943.992340][ T831] Trying to free block not in datazone [ 943.992348][ T831] Trying to free block not in datazone [ 943.992355][ T831] Trying to free block not in datazone [ 943.992362][ T831] Trying to free block not in datazone [ 943.992369][ T831] Trying to free block not in datazone [ 943.992377][ T831] Trying to free block not in datazone [ 943.992383][ T831] Trying to free block not in datazone [ 943.992391][ T831] Trying to free block not in datazone [ 943.992398][ T831] Trying to free block not in datazone [ 943.992406][ T831] Trying to free block not in datazone [ 943.992413][ T831] Trying to free block not in datazone [ 943.992421][ T831] Trying to free block not in datazone [ 943.992428][ T831] Trying to free block not in datazone [ 943.992435][ T831] Trying to free block not in datazone [ 943.992443][ T831] Trying to free block not in datazone [ 943.992450][ T831] Trying to free block not in datazone [ 943.992458][ T831] Trying to free block not in datazone [ 943.992465][ T831] Trying to free block not in datazone [ 943.992473][ T831] Trying to free block not in datazone [ 943.992480][ T831] Trying to free block not in datazone [ 943.992488][ T831] Trying to free block not in datazone [ 943.992495][ T831] Trying to free block not in datazone [ 943.992503][ T831] Trying to free block not in datazone [ 943.992511][ T831] Trying to free block not in datazone [ 943.992518][ T831] Trying to free block not in datazone [ 943.992525][ T831] Trying to free block not in datazone [ 943.992532][ T831] Trying to free block not in datazone [ 943.992539][ T831] Trying to free block not in datazone [ 943.992546][ T831] Trying to free block not in datazone [ 943.992553][ T831] Trying to free block not in datazone [ 943.992560][ T831] Trying to free block not in datazone [ 943.992567][ T831] Trying to free block not in datazone [ 943.992574][ T831] Trying to free block not in datazone [ 943.992582][ T831] Trying to free block not in datazone [ 943.992589][ T831] Trying to free block not in datazone [ 943.992596][ T831] Trying to free block not in datazone [ 943.992603][ T831] Trying to free block not in datazone [ 943.992610][ T831] Trying to free block not in datazone [ 943.992617][ T831] Trying to free block not in datazone [ 943.992625][ T831] Trying to free block not in datazone [ 943.992632][ T831] Trying to free block not in datazone [ 943.992640][ T831] Trying to free block not in datazone [ 943.992647][ T831] Trying to free block not in datazone [ 943.992655][ T831] Trying to free block not in datazone [ 943.992662][ T831] Trying to free block not in datazone [ 943.992670][ T831] Trying to free block not in datazone [ 943.992677][ T831] Trying to free block not in datazone [ 943.992683][ T831] Trying to free block not in datazone [ 943.992697][ T831] Trying to free block not in datazone [ 943.992704][ T831] Trying to free block not in datazone [ 943.992711][ T831] Trying to free block not in datazone [ 943.992718][ T831] Trying to free block not in datazone [ 943.992725][ T831] Trying to free block not in datazone [ 943.992732][ T831] Trying to free block not in datazone [ 943.992739][ T831] Trying to free block not in datazone [ 943.992746][ T831] Trying to free block not in datazone [ 943.992752][ T831] Trying to free block not in datazone [ 943.992759][ T831] Trying to free block not in datazone [ 943.992766][ T831] Trying to free block not in datazone [ 943.992774][ T831] Trying to free block not in datazone [ 943.992782][ T831] Trying to free block not in datazone [ 943.992789][ T831] Trying to free block not in datazone [ 943.992797][ T831] Trying to free block not in datazone [ 943.992805][ T831] Trying to free block not in datazone [ 943.992812][ T831] Trying to free block not in datazone [ 943.992819][ T831] Trying to free block not in datazone [ 943.992827][ T831] Trying to free block not in datazone [ 943.992834][ T831] Trying to free block not in datazone [ 943.992842][ T831] Trying to free block not in datazone [ 943.992849][ T831] Trying to free block not in datazone [ 943.992856][ T831] Trying to free block not in datazone [ 943.992863][ T831] Trying to free block not in datazone [ 943.992870][ T831] Trying to free block not in datazone [ 943.992878][ T831] Trying to free block not in datazone [ 943.992885][ T831] Trying to free block not in datazone [ 943.992892][ T831] Trying to free block not in datazone [ 943.992900][ T831] Trying to free block not in datazone [ 943.992907][ T831] Trying to free block not in datazone [ 943.992914][ T831] Trying to free block not in datazone [ 943.992921][ T831] Trying to free block not in datazone [ 943.992929][ T831] Trying to free block not in datazone [ 943.992935][ T831] Trying to free block not in datazone [ 943.992942][ T831] Trying to free block not in datazone [ 943.992949][ T831] Trying to free block not in datazone [ 943.992956][ T831] Trying to free block not in datazone [ 943.992963][ T831] Trying to free block not in datazone [ 943.992971][ T831] Trying to free block not in datazone [ 943.992978][ T831] Trying to free block not in datazone [ 943.992985][ T831] Trying to free block not in datazone [ 943.992992][ T831] Trying to free block not in datazone [ 943.992999][ T831] Trying to free block not in datazone [ 943.993006][ T831] Trying to free block not in datazone [ 943.993013][ T831] Trying to free block not in datazone [ 943.993020][ T831] Trying to free block not in datazone [ 943.993028][ T831] Trying to free block not in datazone [ 943.993035][ T831] Trying to free block not in datazone [ 943.993042][ T831] Trying to free block not in datazone [ 943.993049][ T831] Trying to free block not in datazone [ 943.993057][ T831] Trying to free block not in datazone [ 943.993063][ T831] Trying to free block not in datazone [ 943.993071][ T831] Trying to free block not in datazone [ 943.993078][ T831] Trying to free block not in datazone [ 943.993085][ T831] Trying to free block not in datazone [ 943.993093][ T831] Trying to free block not in datazone [ 943.993100][ T831] Trying to free block not in datazone [ 943.993107][ T831] Trying to free block not in datazone [ 943.993113][ T831] Trying to free block not in datazone [ 943.993121][ T831] Trying to free block not in datazone [ 943.993129][ T831] Trying to free block not in datazone [ 943.993137][ T831] Trying to free block not in datazone [ 943.993144][ T831] Trying to free block not in datazone [ 943.993151][ T831] Trying to free block not in datazone [ 943.993157][ T831] Trying to free block not in datazone [ 943.993164][ T831] Trying to free block not in datazone [ 943.993171][ T831] Trying to free block not in datazone [ 943.993177][ T831] Trying to free block not in datazone [ 943.993184][ T831] Trying to free block not in datazone [ 943.993191][ T831] Trying to free block not in datazone [ 943.993197][ T831] Trying to free block not in datazone [ 943.993204][ T831] Trying to free block not in datazone [ 943.993211][ T831] Trying to free block not in datazone [ 943.993217][ T831] Trying to free block not in datazone [ 943.993224][ T831] Trying to free block not in datazone [ 943.993231][ T831] Trying to free block not in datazone [ 943.993239][ T831] Trying to free block not in datazone [ 943.993246][ T831] Trying to free block not in datazone [ 943.993253][ T831] Trying to free block not in datazone [ 943.993261][ T831] Trying to free block not in datazone [ 943.993268][ T831] Trying to free block not in datazone [ 943.993276][ T831] Trying to free block not in datazone [ 943.993283][ T831] Trying to free block not in datazone [ 943.993290][ T831] Trying to free block not in datazone [ 943.993297][ T831] Trying to free block not in datazone [ 943.993304][ T831] Trying to free block not in datazone [ 943.993311][ T831] Trying to free block not in datazone [ 943.993319][ T831] Trying to free block not in datazone [ 943.993326][ T831] Trying to free block not in datazone [ 943.993334][ T831] Trying to free block not in datazone [ 943.996913][ T831] Trying to free block not in datazone [ 944.215510][ T942] netlink: 'syz.1.13141': attribute type 10 has an invalid length. [ 944.215686][ T942] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 944.265684][ T942] batman_adv: batadv0: Removing interface: virt_wifi0 [ 944.283194][ T942] team0: Port device virt_wifi0 added [ 944.588554][ T961] netlink: 'syz.2.13150': attribute type 3 has an invalid length. [ 944.994315][ T982] loop1: detected capacity change from 0 to 2048 [ 945.077695][ T982] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 945.276290][ T993] mmap: syz.3.13165 (993): VmData 37470208 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 945.685301][ T984] loop2: detected capacity change from 0 to 32768 [ 945.812895][ T1017] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 945.823757][ T1018] trusted_key: encrypted_key: master key parameter is missing [ 946.528120][ T1048] device netdevsim0 entered promiscuous mode [ 946.545890][ T1048] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 946.913717][ T1066] loop2: detected capacity change from 0 to 4096 [ 946.948474][ T1081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13198'. [ 946.963044][ T1066] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 947.047089][ T1066] ntfs3: loop2: Failed to load $Bitmap. [ 947.123917][ T1092] loop4: detected capacity change from 0 to 64 [ 947.228042][ T1096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13204'. [ 947.359788][ T1084] loop0: detected capacity change from 0 to 8192 [ 947.798291][ T1116] loop4: detected capacity change from 0 to 4096 [ 947.800643][ T1118] loop2: detected capacity change from 0 to 1024 [ 947.868160][ T1116] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 947.868160][ T1116] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 947.868160][ T1116] [ 947.976270][ T1116] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 947.976270][ T1116] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 947.976270][ T1116] [ 948.126645][ T1116] EXT4-fs (loop4): Ignoring removed oldalloc option [ 948.127215][ T1131] loop1: detected capacity change from 0 to 64 [ 948.184597][ T1116] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,commit=0x0000000000000000,nouser_xattr,noacl,nombcache,nodelalloc,minixdf,oldalloc,,errors=continue. Quota mode: writeback. [ 948.575379][ T1161] netlink: 'syz.0.13233': attribute type 10 has an invalid length. [ 948.858708][ T1185] netlink: 'syz.2.13238': attribute type 4 has an invalid length. [ 948.894124][ T1185] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13238'. [ 948.980477][ T1185] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 949.162813][ T1208] netlink: 'syz.4.13246': attribute type 10 has an invalid length. [ 949.204331][ T6477] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 949.244475][ T1208] team0: Port device virt_wifi0 added [ 949.262774][ T1210] device geneve1 left promiscuous mode [ 949.283247][ T1212] netlink: 3620 bytes leftover after parsing attributes in process `syz.1.13248'. [ 949.300404][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 949.322996][ T1212] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13248'. [ 949.369365][ T1212] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13248'. [ 949.590508][ T6477] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 949.603735][ T6477] usb 4-1: config 0 has no interface number 0 [ 949.604139][ T1232] loop2: detected capacity change from 0 to 256 [ 949.609889][ T6477] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 949.686136][ T6477] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 949.721561][ T6477] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 949.753104][ T6477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.784566][ T1242] netlink: 'syz.0.13263': attribute type 1 has an invalid length. [ 949.800700][ T6477] usb 4-1: config 0 descriptor?? [ 949.824444][ T1242] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.13263'. [ 949.869611][ T6477] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 949.926604][ T1246] loop2: detected capacity change from 0 to 1764 [ 949.970864][ T1252] xt_TCPMSS: Only works on TCP SYN packets [ 950.035381][ T1255] kAFS: unable to lookup cell '(/' [ 950.103249][ T1257] loop0: detected capacity change from 0 to 1764 [ 950.154348][ T1260] No source specified [ 950.253222][ T6477] usb 4-1: USB disconnect, device number 47 [ 950.626214][ T1293] delete_channel: no stack [ 951.304132][ T1351] kAFS: unable to lookup cell '(/' [ 951.352483][ T1353] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.13316'. [ 951.481835][ T1364] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 951.837515][ T1391] loop1: detected capacity change from 0 to 16 [ 951.902908][ T1391] erofs: (device loop1): mounted with root inode @ nid 36. [ 952.240305][ T1420] loop0: detected capacity change from 0 to 8 [ 952.279002][ T1428] loop4: detected capacity change from 0 to 16 [ 952.313024][ T1420] SQUASHFS error: Failed to read block 0x8f: -5 [ 952.329604][ T1420] SQUASHFS error: Unable to read data cache entry [8f] [ 952.347919][ T1434] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13353'. [ 952.357871][ T1420] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 952.365518][ T1428] erofs: (device loop4): mounted with root inode @ nid 36. [ 952.396853][ T1436] loop2: detected capacity change from 0 to 512 [ 952.411844][ T1420] SQUASHFS error: Unable to read data cache entry [8f] [ 952.440601][ T1420] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 952.452279][ T1420] SQUASHFS error: Unable to read data cache entry [8f] [ 952.460960][ T1420] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 952.469709][ T1420] SQUASHFS error: Failed to read block 0x8f: -5 [ 952.489105][ T1420] SQUASHFS error: Failed to read block 0x8f: -5 [ 952.505369][ T1436] EXT4-fs (loop2): Ignoring removed nobh option [ 952.526978][ T1436] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 952.537677][ T26] audit: type=1800 audit(922.924:66): pid=1420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13347" name="file3" dev="loop0" ino=6 res=0 errno=0 [ 952.567961][ T1444] loop1: detected capacity change from 0 to 128 [ 952.640595][ T1436] EXT4-fs (loop2): 1 truncate cleaned up [ 952.661871][ T1436] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 952.717581][ T1444] affs: No valid root block on device loop1 [ 952.868975][ T1461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13372'. [ 952.925386][ T1461] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 952.945222][ T1463] loop4: detected capacity change from 0 to 256 [ 953.065781][ T1463] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 953.127731][ T1463] FAT-fs (loop4): Filesystem has been set read-only [ 953.159951][ T1463] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 953.208142][ T1463] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 953.267079][ T1463] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 953.275193][ T26] audit: type=1800 audit(923.617:67): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13364" name="file1" dev="loop4" ino=1048675 res=0 errno=0 [ 953.509740][ T1496] netlink: 'syz.3.13376': attribute type 5 has an invalid length. [ 953.548438][ T1497] netlink: 'syz.2.13377': attribute type 28 has an invalid length. [ 953.760268][ T1508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13383'. [ 953.869390][ T1508] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 953.979170][ T1519] loop0: detected capacity change from 0 to 256 [ 954.036964][ T1521] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.13390'. [ 954.128025][ T1519] FAT-fs (loop0): Directory bread(block 64) failed [ 954.179698][ T1519] FAT-fs (loop0): Directory bread(block 65) failed [ 954.207588][ T1519] FAT-fs (loop0): Directory bread(block 66) failed [ 954.245879][ T1519] FAT-fs (loop0): Directory bread(block 67) failed [ 954.270899][ T1519] FAT-fs (loop0): Directory bread(block 68) failed [ 954.329065][ T1519] FAT-fs (loop0): Directory bread(block 69) failed [ 954.358681][ T1519] FAT-fs (loop0): Directory bread(block 70) failed [ 954.410448][ T1519] FAT-fs (loop0): Directory bread(block 71) failed [ 954.423729][ T1538] netlink: 'syz.4.13398': attribute type 1 has an invalid length. [ 954.445497][ T1519] FAT-fs (loop0): Directory bread(block 72) failed [ 954.493781][ T1519] FAT-fs (loop0): Directory bread(block 73) failed [ 954.591104][ T1547] usb usb8: usbfs: process 1547 (syz.4.13401) did not claim interface 0 before use [ 954.656458][ T6477] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 954.850466][ T1558] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 954.885277][ T1565] netlink: 'syz.0.13411': attribute type 2 has an invalid length. [ 954.906688][ T1558] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 954.923792][ T6477] usb 2-1: Using ep0 maxpacket: 8 [ 954.947631][ T1565] netlink: 'syz.0.13411': attribute type 5 has an invalid length. [ 954.971958][ T1558] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 955.051951][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 955.081698][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.113587][ T6477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 955.139982][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 955.189393][ T6477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 955.229831][ T6477] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 955.249701][ T6477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.288977][ T6477] usb 2-1: config 0 descriptor?? [ 955.319633][ T1535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 955.551952][ T1598] device geneve4 entered promiscuous mode [ 955.852951][ T8831] usb 2-1: USB disconnect, device number 62 [ 955.997394][ T1630] netlink: 'syz.4.13442': attribute type 4 has an invalid length. [ 956.046512][ T1630] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13442'. [ 956.112005][ T1638] netlink: 'syz.0.13446': attribute type 1 has an invalid length. [ 956.131436][ T1638] netlink: 'syz.0.13446': attribute type 2 has an invalid length. [ 956.154497][ T1630] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 956.447488][ T1658] binder: 1654:1658 ioctl c0046209 e0ffff00000000 returned -22 [ 956.482446][ T1659] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 956.610173][ T1668] netlink: 'syz.4.13460': attribute type 5 has an invalid length. [ 956.721143][ T1677] x_tables: duplicate entry at hook 3 [ 956.743399][ T1681] netlink: 'syz.4.13465': attribute type 44 has an invalid length. [ 956.984537][ T1694] netlink: 'syz.3.13471': attribute type 4 has an invalid length. [ 957.019289][ T1694] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13471'. [ 957.041351][ T1694] .`: renamed from bond0 [ 957.099978][ T1697] sctp: [Deprecated]: syz.1.13473 (pid 1697) Use of int in maxseg socket option. [ 957.099978][ T1697] Use struct sctp_assoc_value instead [ 957.120020][ T1699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13474'. [ 957.148413][ T1699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13474'. [ 957.188194][ T1701] netlink: 'syz.3.13475': attribute type 1 has an invalid length. [ 957.358831][ T1707] tipc: Trying to set illegal importance in message [ 957.372493][ T1709] netlink: 'syz.1.13479': attribute type 2 has an invalid length. [ 957.381138][ T1709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13479'. [ 957.494573][ T1683] set_capacity_and_notify: 1 callbacks suppressed [ 957.494589][ T1683] loop2: detected capacity change from 0 to 32768 [ 957.581804][ T1683] (syz.2.13467,1683,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 957.604918][ T1683] (syz.2.13467,1683,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 957.646839][ T1683] JBD2: Ignoring recovery information on journal [ 957.787245][ T1683] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 957.897305][ T1737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13489'. [ 957.974979][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 958.165977][ T1749] loop4: detected capacity change from 0 to 64 [ 958.226973][ T4455] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 958.284010][ T1749] Trying to free block not in datazone [ 958.291170][ T1749] Trying to free block not in datazone [ 958.307783][ T1749] Trying to free block not in datazone [ 958.317772][ T1749] Trying to free block not in datazone [ 958.329744][ T1749] Trying to free block not in datazone [ 958.341959][ T1749] Trying to free block not in datazone [ 958.366723][ T1749] Trying to free block not in datazone [ 958.384472][ T1749] Trying to free block not in datazone [ 958.396631][ T1749] Trying to free block not in datazone [ 958.424981][ T1749] Trying to free block not in datazone [ 958.440621][ T1749] Trying to free block not in datazone [ 958.454756][ T1749] Trying to free block not in datazone [ 958.462035][ T1749] Trying to free block not in datazone [ 958.484852][ T1749] Trying to free block not in datazone [ 958.513261][ T1766] overlayfs: conflicting options: nfs_export=on,index=off [ 958.515656][ T1749] Trying to free block not in datazone [ 958.532665][ T1749] Trying to free block not in datazone [ 958.547885][ T1749] Trying to free block not in datazone [ 958.553502][ T1749] Trying to free block not in datazone [ 958.570523][ T1749] Trying to free block not in datazone [ 958.587804][ T1749] Trying to free block not in datazone [ 958.599861][ T1749] Trying to free block not in datazone [ 958.615288][ T1749] Trying to free block not in datazone [ 958.620919][ T1749] Trying to free block not in datazone [ 958.633459][ T1749] Trying to free block not in datazone [ 958.639075][ T1749] Trying to free block not in datazone [ 958.649603][ T1749] Trying to free block not in datazone [ 958.656595][ T1749] Trying to free block not in datazone [ 958.662194][ T1749] Trying to free block not in datazone [ 958.672549][ T4455] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 958.682242][ T1749] Trying to free block not in datazone [ 958.697453][ T4455] usb 4-1: config 0 has no interface number 0 [ 958.703622][ T4455] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 958.708844][ T1749] Trying to free block not in datazone [ 958.729622][ T1749] Trying to free block not in datazone [ 958.740432][ T4455] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 958.760361][ T1749] Trying to free block not in datazone [ 958.761511][ T1772] loop2: detected capacity change from 0 to 256 [ 958.778508][ T4455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.779453][ T1749] Trying to free block not in datazone [ 958.788493][ T4455] usb 4-1: config 0 descriptor?? [ 958.814990][ T1749] Trying to free block not in datazone [ 958.820671][ T1749] Trying to free block not in datazone [ 958.842259][ T1749] Trying to free block not in datazone [ 958.863870][ T1749] Trying to free block not in datazone [ 958.872890][ T4455] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input76 [ 958.874673][ T1749] Trying to free block not in datazone [ 958.891100][ T1772] FAT-fs (loop2): Directory bread(block 64) failed [ 958.901270][ T1772] FAT-fs (loop2): Directory bread(block 65) failed [ 958.907922][ T1772] FAT-fs (loop2): Directory bread(block 66) failed [ 958.923142][ T1772] FAT-fs (loop2): Directory bread(block 67) failed [ 958.943753][ T1749] Trying to free block not in datazone [ 958.949381][ T1772] FAT-fs (loop2): Directory bread(block 68) failed [ 958.971496][ T1749] Trying to free block not in datazone [ 958.991233][ T1772] FAT-fs (loop2): Directory bread(block 69) failed [ 959.006885][ T1772] FAT-fs (loop2): Directory bread(block 70) failed [ 959.019445][ T1749] Trying to free block not in datazone [ 959.025096][ T1772] FAT-fs (loop2): Directory bread(block 71) failed [ 959.041518][ T1749] Trying to free block not in datazone [ 959.047013][ T1749] Trying to free block not in datazone [ 959.061472][ T1772] FAT-fs (loop2): Directory bread(block 72) failed [ 959.070069][ T1772] FAT-fs (loop2): Directory bread(block 73) failed [ 959.078052][ T1749] Trying to free block not in datazone [ 959.080064][ T4455] usb 4-1: USB disconnect, device number 48 [ 959.090726][ T1749] Trying to free block not in datazone [ 959.103733][ T1749] Trying to free block not in datazone [ 959.109219][ T1749] Trying to free block not in datazone [ 959.155735][ T1749] Trying to free block not in datazone [ 959.182585][ T1749] Trying to free block not in datazone [ 959.207960][ T1749] Trying to free block not in datazone [ 959.219615][ T1749] Trying to free block not in datazone [ 959.226570][ T1749] Trying to free block not in datazone [ 959.236463][ T1749] Trying to free block not in datazone [ 959.241988][ T1749] Trying to free block not in datazone [ 959.248107][ T1749] Trying to free block not in datazone [ 959.259196][ T1749] Trying to free block not in datazone [ 959.265021][ T1749] Trying to free block not in datazone [ 959.284845][ T1749] Trying to free block not in datazone [ 959.290409][ T1749] Trying to free block not in datazone [ 959.312496][ T1749] Trying to free block not in datazone [ 959.329436][ T1749] Trying to free block not in datazone [ 959.334932][ T1749] Trying to free block not in datazone [ 959.355979][ T1749] Trying to free block not in datazone [ 959.366502][ T1749] Trying to free block not in datazone [ 959.375058][ T1749] Trying to free block not in datazone [ 959.380557][ T1749] Trying to free block not in datazone [ 959.386953][ T1749] Trying to free block not in datazone [ 959.392622][ T1749] Trying to free block not in datazone [ 959.403512][ T1749] Trying to free block not in datazone [ 959.413299][ T1749] Trying to free block not in datazone [ 959.424730][ T1749] Trying to free block not in datazone [ 959.435875][ T1749] Trying to free block not in datazone [ 959.441447][ T1749] Trying to free block not in datazone [ 959.455678][ T1749] Trying to free block not in datazone [ 959.467042][ T1749] Trying to free block not in datazone [ 959.483750][ T1749] Trying to free block not in datazone [ 959.499169][ T1749] Trying to free block not in datazone [ 959.515834][ T1749] Trying to free block not in datazone [ 959.521415][ T1749] Trying to free block not in datazone [ 959.537241][ T1749] Trying to free block not in datazone [ 959.550180][ T1749] Trying to free block not in datazone [ 959.568533][ T1749] Trying to free block not in datazone [ 959.577790][ T1749] Trying to free block not in datazone [ 959.583280][ T1749] Trying to free block not in datazone [ 959.604552][ T1749] Trying to free block not in datazone [ 959.610904][ T1749] Trying to free block not in datazone [ 959.616487][ T1749] Trying to free block not in datazone [ 959.622167][ T1749] Trying to free block not in datazone [ 959.630223][ T1749] Trying to free block not in datazone [ 959.635773][ T1749] Trying to free block not in datazone [ 959.641735][ T1749] Trying to free block not in datazone [ 959.647273][ T1749] Trying to free block not in datazone [ 959.653836][ T1749] Trying to free block not in datazone [ 959.683545][ T1749] Trying to free block not in datazone [ 959.689039][ T1749] Trying to free block not in datazone [ 959.721826][ T1749] Trying to free block not in datazone [ 959.754717][ T1789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.757935][ T1749] Trying to free block not in datazone [ 959.787867][ T1749] Trying to free block not in datazone [ 959.793463][ T1749] Trying to free block not in datazone [ 959.800824][ T1749] Trying to free block not in datazone [ 959.806493][ T1749] Trying to free block not in datazone [ 959.813114][ T1749] Trying to free block not in datazone [ 959.821011][ T1749] Trying to free block not in datazone [ 959.830848][ T1749] Trying to free block not in datazone [ 959.862770][ T1749] Trying to free block not in datazone [ 959.868292][ T1749] Trying to free block not in datazone [ 959.937768][ T1749] Trying to free block not in datazone [ 959.943373][ T1749] Trying to free block not in datazone [ 959.989898][ T1749] Trying to free block not in datazone [ 960.013498][ T1749] Trying to free block not in datazone [ 960.035168][ T1749] Trying to free block not in datazone [ 960.040978][ T1749] Trying to free block not in datazone [ 960.087692][ T1749] Trying to free block not in datazone [ 960.093188][ T1749] Trying to free block not in datazone [ 960.097634][ T1813] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13525'. [ 960.108468][ T1749] Trying to free block not in datazone [ 960.113941][ T1749] Trying to free block not in datazone [ 960.151102][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13527'. [ 960.151710][ T1749] Trying to free block not in datazone [ 960.191620][ T1817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13527'. [ 960.225409][ T1749] Trying to free block not in datazone [ 960.231442][ T1749] Trying to free block not in datazone [ 960.244163][ T1749] Trying to free block not in datazone [ 960.258739][ T1749] Trying to free block not in datazone [ 960.264523][ T1749] Trying to free block not in datazone [ 960.311614][ T1749] Trying to free block not in datazone [ 960.317285][ T1749] Trying to free block not in datazone [ 960.389648][ T1749] Trying to free block not in datazone [ 960.395442][ T1749] Trying to free block not in datazone [ 960.413763][ T1749] Trying to free block not in datazone [ 960.421346][ T1831] device bridge2 entered promiscuous mode [ 960.440165][ T1749] Trying to free block not in datazone [ 960.459789][ T1749] Trying to free block not in datazone [ 960.481453][ T1749] Trying to free block not in datazone [ 960.513355][ T1749] Trying to free block not in datazone [ 960.532017][ T1749] Trying to free block not in datazone [ 960.534300][ T150] block nbd0: Attempted send on invalid socket [ 960.537917][ T1749] Trying to free block not in datazone [ 960.543884][ T150] blk_update_request: I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 960.565801][ T1839] VFS: unable to read V7 FS superblock on device nbd0. [ 960.573308][ T1839] VFS: could not find a valid V7 on nbd0. [ 960.585574][ T1749] Trying to free block not in datazone [ 960.634560][ T1749] Trying to free block not in datazone [ 960.678798][ T1749] Trying to free block not in datazone [ 960.720306][ T1749] Trying to free block not in datazone [ 960.725794][ T1749] Trying to free block not in datazone [ 960.765999][ T1749] Trying to free block not in datazone [ 960.814096][ T1749] Trying to free block not in datazone [ 960.819713][ T1749] Trying to free block not in datazone [ 960.856878][ T1749] Trying to free block not in datazone [ 960.862364][ T1749] Trying to free block not in datazone [ 960.881729][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.889014][ T1749] Trying to free block not in datazone [ 960.897300][ T1749] Trying to free block not in datazone [ 960.906608][ T1749] Trying to free block not in datazone [ 960.915666][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.925771][ T1860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.932118][ T1856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.947100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 960.953846][ T1749] Trying to free block not in datazone [ 960.969323][ T1749] Trying to free block not in datazone [ 960.980120][ T1749] Trying to free block not in datazone [ 960.996056][ T1749] Trying to free block not in datazone [ 961.015699][ T1749] Trying to free block not in datazone [ 961.027524][ T1749] Trying to free block not in datazone [ 961.036129][ T1865] x_tables: ip_tables: osf match: only valid for protocol 6 [ 961.049284][ T1749] Trying to free block not in datazone [ 961.054766][ T1749] Trying to free block not in datazone [ 961.077587][ T1749] Trying to free block not in datazone [ 961.092105][ T1749] Trying to free block not in datazone [ 961.097600][ T1749] Trying to free block not in datazone [ 961.124799][ T1749] Trying to free block not in datazone [ 961.130324][ T1749] Trying to free block not in datazone [ 961.163016][ T1749] Trying to free block not in datazone [ 961.178552][ T1749] Trying to free block not in datazone [ 961.189683][ T1749] Trying to free block not in datazone [ 961.199171][ T1749] Trying to free block not in datazone [ 961.206177][ T1749] Trying to free block not in datazone [ 961.212640][ T1749] Trying to free block not in datazone [ 961.228243][ T1749] Trying to free block not in datazone [ 961.238260][ T1749] Trying to free block not in datazone [ 961.248565][ T1749] Trying to free block not in datazone [ 961.258244][ T1749] Trying to free block not in datazone [ 961.264354][ T1749] Trying to free block not in datazone [ 961.270043][ T1749] Trying to free block not in datazone [ 961.275931][ T1749] Trying to free block not in datazone [ 961.293759][ T1749] Trying to free block not in datazone [ 961.308579][ T1749] Trying to free block not in datazone [ 961.314069][ T1749] Trying to free block not in datazone [ 961.325254][ T1749] Trying to free block not in datazone [ 961.336735][ T1749] Trying to free block not in datazone [ 961.359364][ T1749] Trying to free block not in datazone [ 961.365587][ T1749] Trying to free block not in datazone [ 961.379255][ T1749] Trying to free block not in datazone [ 961.399611][ T1749] Trying to free block not in datazone [ 961.417905][ T1749] Trying to free block not in datazone [ 961.427420][ T1749] Trying to free block not in datazone [ 961.432899][ T1749] Trying to free block not in datazone [ 961.460845][ T1749] Trying to free block not in datazone [ 961.466759][ T1749] Trying to free block not in datazone [ 961.472343][ T1749] Trying to free block not in datazone [ 961.494227][ T1749] Trying to free block not in datazone [ 961.505252][ T1749] Trying to free block not in datazone [ 961.525931][ T1749] Trying to free block not in datazone [ 961.541625][ T1749] Trying to free block not in datazone [ 961.547131][ T1749] Trying to free block not in datazone [ 961.562404][ T1749] Trying to free block not in datazone [ 961.568018][ T1749] Trying to free block not in datazone [ 961.583828][ T1749] Trying to free block not in datazone [ 961.589346][ T1749] Trying to free block not in datazone [ 961.594873][ T1749] Trying to free block not in datazone [ 961.600320][ T1749] Trying to free block not in datazone [ 961.615886][ T1749] Trying to free block not in datazone [ 961.621768][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.628415][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 961.636198][ T1749] Trying to free block not in datazone [ 961.641770][ T1749] Trying to free block not in datazone [ 961.647221][ T1749] Trying to free block not in datazone [ 961.669311][ T1749] Trying to free block not in datazone [ 961.674807][ T1749] Trying to free block not in datazone [ 961.690688][ T1749] Trying to free block not in datazone [ 961.696179][ T1749] Trying to free block not in datazone [ 961.712086][ T1749] Trying to free block not in datazone [ 961.717576][ T1749] Trying to free block not in datazone [ 961.734714][ T1889] netlink: 'syz.2.13561': attribute type 1 has an invalid length. [ 961.742549][ T1889] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.13561'. [ 961.752010][ T1749] Trying to free block not in datazone [ 961.765540][ T1749] Trying to free block not in datazone [ 961.777086][ T1749] Trying to free block not in datazone [ 961.782615][ T1749] Trying to free block not in datazone [ 961.788487][ T1749] Trying to free block not in datazone [ 961.793954][ T1749] Trying to free block not in datazone [ 961.799734][ T1749] Trying to free block not in datazone [ 961.805294][ T1749] Trying to free block not in datazone [ 961.819017][ T1749] Trying to free block not in datazone [ 961.824504][ T1749] Trying to free block not in datazone [ 961.849048][ T1749] Trying to free block not in datazone [ 961.870164][ T1749] Trying to free block not in datazone [ 961.879293][ T1749] Trying to free block not in datazone [ 961.886284][ T1749] Trying to free block not in datazone [ 961.891981][ T1893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13563'. [ 961.902014][ T1749] Trying to free block not in datazone [ 961.907801][ T1893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13563'. [ 961.917430][ T1749] Trying to free block not in datazone [ 961.922923][ T1749] Trying to free block not in datazone [ 961.936881][ T1749] Trying to free block not in datazone [ 961.942361][ T1749] Trying to free block not in datazone [ 961.959115][ T1893] netlink: 7 bytes leftover after parsing attributes in process `syz.2.13563'. [ 961.979559][ T1749] Trying to free block not in datazone [ 961.985134][ T1749] Trying to free block not in datazone [ 961.995934][ T1749] Trying to free block not in datazone [ 962.012195][ T1749] Trying to free block not in datazone [ 962.028470][ T1749] Trying to free block not in datazone [ 962.039155][ T1749] Trying to free block not in datazone [ 962.048114][ T1749] Trying to free block not in datazone [ 962.053613][ T1749] Trying to free block not in datazone [ 962.060082][ T1749] Trying to free block not in datazone [ 962.065841][ T1749] Trying to free block not in datazone [ 962.071399][ T1749] Trying to free block not in datazone [ 962.077372][ T1749] Trying to free block not in datazone [ 962.082928][ T1749] Trying to free block not in datazone [ 962.088910][ T1749] Trying to free block not in datazone [ 962.094465][ T1749] Trying to free block not in datazone [ 962.100329][ T1749] Trying to free block not in datazone [ 962.105883][ T1749] Trying to free block not in datazone [ 962.111805][ T1749] Trying to free block not in datazone [ 962.117365][ T1749] Trying to free block not in datazone [ 962.123278][ T1749] Trying to free block not in datazone [ 962.129769][ T1749] Trying to free block not in datazone [ 962.135312][ T1749] Trying to free block not in datazone [ 962.141183][ T1749] Trying to free block not in datazone [ 962.146855][ T1749] Trying to free block not in datazone [ 962.152749][ T1749] Trying to free block not in datazone [ 962.158290][ T1749] Trying to free block not in datazone [ 962.164132][ T1749] Trying to free block not in datazone [ 962.180603][ T1749] Trying to free block not in datazone [ 962.186445][ T1749] Trying to free block not in datazone [ 962.218957][ T1896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13574'. [ 962.229665][ T1749] Trying to free block not in datazone [ 962.414956][ T1908] x_tables: duplicate underflow at hook 1 [ 962.736419][ T1933] device bridge3 entered promiscuous mode [ 962.977225][ T1952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13591'. [ 963.211850][ T1966] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 963.258800][ T1972] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13601'. [ 963.313193][ T1972] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 963.379253][ T1977] netlink: 244 bytes leftover after parsing attributes in process `syz.4.13604'. [ 963.450156][ T1983] netlink: 'syz.3.13606': attribute type 10 has an invalid length. [ 963.535770][ T1987] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.13607'. [ 963.653056][ T1989] loop2: detected capacity change from 0 to 4096 [ 963.731831][ T1989] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 963.776912][ T1989] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 963.873504][ T1989] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 963.912785][ T1989] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 963.989246][ T1989] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 963.990817][ T1989] ntfs: volume version 3.1. [ 963.992704][ T1989] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 963.993129][ T1989] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 963.993574][ T1989] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 963.993597][ T1989] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 963.993613][ T1989] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 964.249885][ T2025] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.13624'. [ 964.309180][ T2029] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 964.574764][ T2044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13635'. [ 964.666071][ T2052] netlink: 'syz.0.13637': attribute type 1 has an invalid length. [ 964.676942][ T2052] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13637'. [ 965.133409][ T2080] xt_TCPMSS: Only works on TCP SYN packets [ 965.234851][ T2085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13653'. [ 965.401172][ T2088] loop2: detected capacity change from 0 to 4096 [ 965.539518][ T2059] loop4: detected capacity change from 0 to 32768 [ 965.560946][ T2098] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 965.575421][ T2096] loop0: detected capacity change from 0 to 4096 [ 965.623850][ T2100] kAFS: No cell specified [ 965.644461][ T2059] JBD2: Ignoring recovery information on journal [ 965.741993][ T2096] ntfs: volume version 3.1. [ 965.747096][ T2059] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 965.847011][ T2059] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 965.847112][ T2059] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 965.980745][ T2059] OCFS2: File system is now read-only. [ 966.033382][ T2117] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13668'. [ 966.047177][ T2059] (syz.4.13641,2059,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 966.073621][ T2059] (syz.4.13641,2059,0):ocfs2_mknod:334 ERROR: status = -117 [ 966.082061][ T2059] (syz.4.13641,2059,0):ocfs2_mknod:502 ERROR: status = -117 [ 966.150276][ T2059] (syz.4.13641,2059,0):ocfs2_mkdir:659 ERROR: status = -117 [ 966.238818][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 967.171184][ T2129] loop0: detected capacity change from 0 to 32768 [ 967.253601][ T2129] (syz.0.13674,2129,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 967.317540][ T2129] (syz.0.13674,2129,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 967.413710][ T2129] JBD2: Ignoring recovery information on journal [ 967.420057][ T2172] loop4: detected capacity change from 0 to 4096 [ 967.525216][ T2148] loop2: detected capacity change from 0 to 32768 [ 967.535868][ T2181] loop1: detected capacity change from 0 to 2048 [ 967.570936][ T2129] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 967.616901][ T2172] ntfs: volume version 3.1. [ 967.647027][ T2181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.716674][ T2181] Invalid option length (0) for dns_resolver key [ 967.763233][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 967.982587][ T4202] ocfs2: Unmounting device (7,0) on (node local) [ 968.469551][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13713'. [ 968.532763][ T2205] loop0: detected capacity change from 0 to 4096 [ 968.545505][ T2213] netlink: 'syz.4.13714': attribute type 27 has an invalid length. [ 968.597286][ T2213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 968.627710][ T2213] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 968.651079][ T2205] ntfs: volume version 3.1. [ 968.663360][ T2215] netlink: 144 bytes leftover after parsing attributes in process `syz.2.13715'. [ 968.714448][ T2217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13716'. [ 969.026748][ T2233] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 969.419564][ T2254] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 969.669716][ T2272] loop1: detected capacity change from 0 to 256 [ 969.750696][ T2272] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 969.764129][ T2280] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13747'. [ 969.895069][ T2289] device syz_tun left promiscuous mode [ 969.934036][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 969.941673][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 969.987241][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 969.995877][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 970.050096][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 970.099203][ T2289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 970.114958][ T6473] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 970.167616][ T2289] device netdevsim0 left promiscuous mode [ 970.222912][ T2289] device wlan0 left promiscuous mode [ 970.240783][ T2289] device bridge2 left promiscuous mode [ 970.288112][ T2289] device ip6erspan1 left promiscuous mode [ 970.294578][ T2289] device bond3 left promiscuous mode [ 970.328423][ T2301] netlink: 'syz.1.13757': attribute type 1 has an invalid length. [ 970.363121][ T2301] netlink: 'syz.1.13757': attribute type 2 has an invalid length. [ 970.500209][ T6473] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 970.508348][ T6473] usb 3-1: config 0 has no interface number 0 [ 970.524798][ T2306] loop0: detected capacity change from 0 to 4096 [ 970.635583][ T2319] netlink: 'syz.1.13764': attribute type 46 has an invalid length. [ 970.658051][ T2319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13764'. [ 970.692972][ T2306] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 970.713945][ T6473] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 970.723024][ T6473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.767285][ T6473] usb 3-1: Product: syz [ 970.770863][ T2306] ntfs3: loop0: Failed to load $Extend. [ 970.771546][ T6473] usb 3-1: Manufacturer: syz [ 970.831199][ T6473] usb 3-1: SerialNumber: syz [ 970.868322][ T6473] usb 3-1: config 0 descriptor?? [ 971.109226][ T2345] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13778'. [ 971.150774][ T2345] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13778'. [ 971.225641][ T2351] kAFS: unable to lookup cell '.,' [ 971.291303][ T6473] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 971.299783][ T6473] usb 3-1: No valid video chain found. [ 971.337603][ T6473] usb 3-1: USB disconnect, device number 60 [ 971.536257][ T2366] loop1: detected capacity change from 0 to 4096 [ 971.639095][ T2366] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 971.678548][ T2366] ntfs3: loop1: Failed to load $Extend. [ 971.820244][ T2389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13799'. [ 972.639632][ T2457] loop2: detected capacity change from 0 to 256 [ 973.155193][ T2491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13844'. [ 973.220045][ T2485] loop2: detected capacity change from 0 to 4096 [ 973.258087][ T21] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 973.323412][ T2485] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 973.338827][ T2446] loop1: detected capacity change from 0 to 32768 [ 973.373983][ T2485] ntfs3: loop2: Failed to load $Extend. [ 973.430190][ T6473] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 973.525347][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 973.573981][ T2446] XFS (loop1): Mounting V5 Filesystem [ 973.698414][ T6473] usb 4-1: Using ep0 maxpacket: 32 [ 973.739948][ T2446] XFS (loop1): Ending clean mount [ 973.805276][ T4455] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 973.815781][ T2446] XFS (loop1): Quotacheck needed: Please wait. [ 973.830508][ T21] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 973.869031][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.877161][ T21] usb 5-1: Product: syz [ 973.882063][ T6473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 973.905737][ T21] usb 5-1: Manufacturer: syz [ 973.916156][ T21] usb 5-1: SerialNumber: syz [ 973.941193][ T21] usb 5-1: config 0 descriptor?? [ 973.974448][ T6473] usb 4-1: config 1 has an invalid interface number: 255 but max is 2 [ 973.982691][ T6473] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.995248][ T21] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 974.011936][ T6473] usb 4-1: config 1 has no interface number 2 [ 974.024851][ T6473] usb 4-1: config 1 interface 255 has no altsetting 0 [ 974.035212][ T2446] XFS (loop1): Quotacheck: Done. [ 974.099114][ T4191] XFS (loop1): Unmounting Filesystem [ 974.198967][ T6473] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 974.228402][ T6473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.241582][ T4455] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 974.247947][ T6473] usb 4-1: Product: syz [ 974.254012][ T4455] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 974.256349][ T6473] usb 4-1: Manufacturer: syz [ 974.271571][ T4455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.279925][ T6473] usb 4-1: SerialNumber: syz [ 974.301597][ T6477] usb 5-1: USB disconnect, device number 64 [ 974.356413][ T2535] loop0: detected capacity change from 0 to 32768 [ 974.421869][ T2535] (syz.0.13857,2535,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 974.458526][ T2535] (syz.0.13857,2535,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 974.497946][ T2535] JBD2: Ignoring recovery information on journal [ 974.548243][ T2535] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 974.564361][ T4455] usb 3-1: string descriptor 0 read error: -71 [ 974.586037][ T4455] hub 3-1:32.0: bad descriptor, ignoring hub [ 974.595077][ T4455] hub: probe of 3-1:32.0 failed with error -5 [ 974.655821][ T6473] usb 4-1: USB disconnect, device number 49 [ 974.670212][ T4455] usb 3-1: USB disconnect, device number 61 [ 974.777041][ T4202] ocfs2: Unmounting device (7,0) on (node local) [ 974.942378][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 974.966358][ T4209] udevd[4209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.383991][ T2592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13873'. [ 975.585911][ T2607] netlink: 'syz.4.13878': attribute type 24 has an invalid length. [ 975.826347][ T2625] loop2: detected capacity change from 0 to 512 [ 975.912308][ T2625] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 975.948880][ T2625] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 976.036182][ T2625] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 976.089682][ T2625] System zones: 0-2, 18-18, 34-35 [ 976.121010][ T2625] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 976.141003][ T2621] loop1: detected capacity change from 0 to 32768 [ 976.193868][ T2621] (syz.1.13882,2621,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 976.210334][ T2621] (syz.1.13882,2621,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 976.287204][ T2621] JBD2: Ignoring recovery information on journal [ 976.403059][ T2664] loop4: detected capacity change from 0 to 256 [ 976.404989][ T2621] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 976.432517][ T2667] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13901'. [ 976.664526][ T2684] device netdevsim0 left promiscuous mode [ 976.675407][ T2684] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 976.722462][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 976.824841][ T2698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 976.927452][ T2707] netlink: 84 bytes leftover after parsing attributes in process `syz.2.13915'. [ 977.094049][ T2724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13921'. [ 977.154806][ T6477] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 977.444680][ T2761] loop4: detected capacity change from 0 to 128 [ 977.462958][ T2756] IPv6: sit3: Disabled Multicast RS [ 977.566458][ T6477] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 977.574728][ T6477] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 977.635902][ T6477] usb 4-1: config 8 has no interface number 0 [ 977.662563][ T6477] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 977.672445][ T6477] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.753559][ T6477] usb 4-1: config 8 interface 177 has no altsetting 0 [ 977.774930][ T6477] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 977.796013][ T6477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.812385][ T8821] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 977.908171][ T6477] ir_toy 4-1:8.177: required endpoints not found [ 978.003492][ T2785] loop2: detected capacity change from 0 to 8192 [ 978.106256][ T2785] loop2: p1 p3 p4 [ 978.121102][ T6473] usb 4-1: USB disconnect, device number 50 [ 978.151835][ T2785] loop2: partition table partially beyond EOD, truncated [ 978.197386][ T2785] loop2: p1 start 393225 is beyond EOD, truncated [ 978.228118][ T2785] loop2: p3 start 16777216 is beyond EOD, truncated [ 978.250013][ T2803] program syz.4.13954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.279223][ T2785] loop2: p4 start 4294967295 is beyond EOD, truncated [ 978.336371][ T8821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 978.374646][ T2812] kernel profiling enabled (shift: 5) [ 978.389841][ T8821] usb 2-1: not running at top speed; connect to a high speed hub [ 978.496453][ T8821] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 978.514570][ T8821] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 978.557196][ T8821] usb 2-1: config 17 has no interface number 0 [ 978.588448][ T8821] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 978.618195][ T8821] usb 2-1: config 17 interface 8 has no altsetting 0 [ 978.791688][ T2828] binder: 2826:2828 ioctl 40046210 0 returned -14 [ 978.860056][ T8821] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 978.879046][ T8821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.920331][ T8821] usb 2-1: Product: syz [ 978.957734][ T8821] usb 2-1: Manufacturer: syz [ 978.963030][ T8821] usb 2-1: SerialNumber: syz [ 979.254921][ T2854] loop2: detected capacity change from 0 to 64 [ 979.319557][ T6473] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 979.332556][ T8821] usb 2-1: selecting invalid altsetting 0 [ 979.364847][ T2856] loop0: detected capacity change from 0 to 256 [ 979.394869][ T4455] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 979.405610][ T8821] usb 2-1: USB disconnect, device number 63 [ 979.545307][ T2856] FAT-fs (loop0): Directory bread(block 64) failed [ 979.565619][ T2856] FAT-fs (loop0): Directory bread(block 65) failed [ 979.605723][ T2856] FAT-fs (loop0): Directory bread(block 66) failed [ 979.629705][ T2856] FAT-fs (loop0): Directory bread(block 67) failed [ 979.636706][ T2856] FAT-fs (loop0): Directory bread(block 68) failed [ 979.644419][ T2856] FAT-fs (loop0): Directory bread(block 69) failed [ 979.651551][ T2856] FAT-fs (loop0): Directory bread(block 70) failed [ 979.658266][ T2856] FAT-fs (loop0): Directory bread(block 71) failed [ 979.676293][ T4731] udevd[4731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.692574][ T4455] usb 5-1: Using ep0 maxpacket: 32 [ 979.699074][ T2856] FAT-fs (loop0): Directory bread(block 72) failed [ 979.717652][ T2856] FAT-fs (loop0): Directory bread(block 73) failed [ 979.721690][ T6473] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.756088][ T6473] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 979.772459][ T6473] usb 4-1: config 1 has no interface number 0 [ 979.778621][ T6473] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.810834][ T6473] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 979.820591][ T6473] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 979.832836][ T4455] usb 5-1: config 0 has too many interfaces: 195, using maximum allowed: 32 [ 979.864875][ T4455] usb 5-1: config 0 has an invalid interface number: 196 but max is 194 [ 979.873297][ T4455] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 195 [ 979.878570][ T6473] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 979.920558][ T4455] usb 5-1: config 0 has no interface number 0 [ 979.954346][ T4455] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 979.992014][ T4455] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 980.013884][ T4455] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 980.078259][ T4455] usb 5-1: config 0 interface 196 has no altsetting 0 [ 980.100370][ T6473] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.109444][ T6473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.121761][ T2877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13982'. [ 980.139757][ T6473] usb 4-1: Product: syz [ 980.144351][ T6473] usb 4-1: Manufacturer: syz [ 980.148965][ T6473] usb 4-1: SerialNumber: syz [ 980.179128][ T2877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13982'. [ 980.203848][ T2881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13986'. [ 980.259449][ T2884] loop2: detected capacity change from 0 to 1024 [ 980.325279][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 980.325295][ T26] audit: type=1400 audit(948.919:69): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=2887 comm="syz.1.13989" [ 980.356897][ T4455] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 980.375136][ T4455] usb 5-1: New USB device strings: Mfr=72, Product=223, SerialNumber=3 [ 980.411067][ T4455] usb 5-1: Product: syz [ 980.427502][ T4455] usb 5-1: Manufacturer: syz [ 980.438415][ T4455] usb 5-1: SerialNumber: syz [ 980.458800][ T4455] usb 5-1: config 0 descriptor?? [ 980.495904][ T2846] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 980.709557][ T6473] cdc_ncm 4-1:1.1: bind() failure [ 980.720317][ T6473] usb 4-1: USB disconnect, device number 51 [ 980.828049][ T4455] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 980.843995][ T4455] ipheth: probe of 5-1:0.196 failed with error -71 [ 980.892104][ T4455] usb 5-1: USB disconnect, device number 65 [ 980.920441][ T2924] loop0: detected capacity change from 0 to 1024 [ 981.259840][ T2937] loop2: detected capacity change from 0 to 4096 [ 981.386461][ T2937] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 981.431281][ T2937] ntfs3: loop2: Failed to load $Secure. [ 981.660941][ T2952] loop0: detected capacity change from 0 to 8192 [ 981.710442][ T2952] loop0: p1 p3 p4 [ 981.725035][ T2952] loop0: partition table partially beyond EOD, truncated [ 981.764738][ T2952] loop0: p1 start 393225 is beyond EOD, truncated [ 981.807994][ T2952] loop0: p3 start 16777216 is beyond EOD, truncated [ 981.816207][ T2982] netlink: 'syz.1.14023': attribute type 4 has an invalid length. [ 981.829659][ T2983] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 981.858663][ T2952] loop0: p4 start 4294967295 is beyond EOD, truncated [ 981.916129][ T2982] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14023'. [ 981.964162][ T2989] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 982.265225][ T3006] SET target dimension over the limit! [ 982.504916][ T3018] loop1: detected capacity change from 0 to 256 [ 982.630356][ T3018] FAT-fs (loop1): Directory bread(block 64) failed [ 982.659074][ T3018] FAT-fs (loop1): Directory bread(block 65) failed [ 982.690718][ T3018] FAT-fs (loop1): Directory bread(block 66) failed [ 982.708169][ T3018] FAT-fs (loop1): Directory bread(block 67) failed [ 982.744415][ T3018] FAT-fs (loop1): Directory bread(block 68) failed [ 982.751006][ T3018] FAT-fs (loop1): Directory bread(block 69) failed [ 982.787597][ T3018] FAT-fs (loop1): Directory bread(block 70) failed [ 982.809020][ T3018] FAT-fs (loop1): Directory bread(block 71) failed [ 982.840076][ T3018] FAT-fs (loop1): Directory bread(block 72) failed [ 982.852155][ T3018] FAT-fs (loop1): Directory bread(block 73) failed [ 982.910685][ T8821] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 982.978907][ T3033] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 983.093083][ T3041] loop1: detected capacity change from 0 to 256 [ 983.104031][ T3039] xt_NFQUEUE: number of total queues is 0 [ 983.210979][ T8821] usb 3-1: Using ep0 maxpacket: 16 [ 983.338052][ T3054] netlink: 'syz.1.14057': attribute type 10 has an invalid length. [ 983.357233][ T3054] netlink: 'syz.1.14057': attribute type 10 has an invalid length. [ 983.465708][ T3060] netlink: 'syz.1.14059': attribute type 41 has an invalid length. [ 983.531860][ T8821] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 983.551449][ T8821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.563739][ T8821] usb 3-1: Product: syz [ 983.567947][ T8821] usb 3-1: Manufacturer: syz [ 983.590847][ T8821] usb 3-1: SerialNumber: syz [ 983.596161][ T8831] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 983.619265][ T8821] usb 3-1: config 0 descriptor?? [ 983.679588][ T8821] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 983.883173][ T8831] usb 5-1: Using ep0 maxpacket: 16 [ 983.949375][ T6477] usb 3-1: USB disconnect, device number 62 [ 983.993038][ T3094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 984.023593][ T8831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.038800][ T8831] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 984.049123][ T8831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.086660][ T8831] usb 5-1: config 0 descriptor?? [ 984.158342][ T8831] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 984.312135][ T6473] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 984.429768][ T8827] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 984.483247][ T8831] usbhid 5-1:0.0: can't add hid device: -71 [ 984.489272][ T8831] usbhid: probe of 5-1:0.0 failed with error -71 [ 984.498138][ T8831] usb 5-1: USB disconnect, device number 66 [ 984.707766][ T8827] usb 4-1: Using ep0 maxpacket: 16 [ 984.707872][ T6473] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 984.721452][ T6473] usb 2-1: config 8 has no interface number 0 [ 984.727530][ T6473] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 984.738631][ T6473] usb 2-1: config 8 interface 177 has no altsetting 0 [ 984.746010][ T6473] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 984.755161][ T6473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.782836][ T3096] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 984.836049][ T6477] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 985.046629][ T8827] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 985.058528][ T8827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.060577][ T6473] usb 2-1: string descriptor 0 read error: -71 [ 985.072515][ T8827] usb 4-1: Product: syz [ 985.077021][ T8827] usb 4-1: Manufacturer: syz [ 985.089374][ T8827] usb 4-1: SerialNumber: syz [ 985.092499][ T6477] usb 3-1: Using ep0 maxpacket: 16 [ 985.099297][ T8827] usb 4-1: config 0 descriptor?? [ 985.124768][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 985.168034][ T8827] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 985.231709][ T6477] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 985.253249][ T6477] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 985.264644][ T6477] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 985.276074][ T6477] usb 3-1: config 0 interface 0 has no altsetting 0 [ 985.380783][ T8827] usb 4-1: USB disconnect, device number 52 [ 985.392225][ T1220] usb 4-1: Failed to submit usb control message: -71 [ 985.400218][ T1220] usb 4-1: unable to send the bmi data to the device: -71 [ 985.407726][ T1220] usb 4-1: unable to get target info from device [ 985.414221][ T1220] usb 4-1: could not get target info (-71) [ 985.420067][ T1220] usb 4-1: could not probe fw (-71) [ 985.445509][ T6477] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 985.462636][ T6477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.472502][ T6477] usb 3-1: Product: syz [ 985.476699][ T6477] usb 3-1: Manufacturer: syz [ 985.481706][ T6477] usb 3-1: SerialNumber: syz [ 985.494087][ T6477] usb 3-1: config 0 descriptor?? [ 985.648470][ T6473] ir_toy 2-1:8.177: could not write reset command: -110 [ 985.659088][ C1] ir_toy 2-1:8.177: failed to resubmit urb: -1 [ 985.665547][ T6473] ir_toy: probe of 2-1:8.177 failed with error -110 [ 985.678551][ T6473] usb 2-1: USB disconnect, device number 64 [ 985.951267][ T3130] loop1: detected capacity change from 0 to 4096 [ 986.025547][ T8827] usb 3-1: USB disconnect, device number 63 [ 986.063927][ T3130] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 986.145818][ T3130] ntfs3: loop1: Failed to load $Extend. [ 986.472760][ T3151] netlink: 'syz.1.14101': attribute type 9 has an invalid length. [ 986.480770][ T3151] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14101'. [ 986.486984][ T3124] loop4: detected capacity change from 0 to 32768 [ 986.545890][ T3124] (syz.4.14089,3124,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 986.580019][ T3124] (syz.4.14089,3124,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 986.684914][ T3124] JBD2: Ignoring recovery information on journal [ 986.880935][ T3173] netlink: 'syz.2.14111': attribute type 3 has an invalid length. [ 986.895128][ T3173] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14111'. [ 986.906435][ T3124] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 986.953229][ T3177] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 987.097708][ T3188] loop2: detected capacity change from 0 to 256 [ 987.173386][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 987.176772][ T3188] FAT-fs (loop2): Directory bread(block 64) failed [ 987.197326][ T3188] FAT-fs (loop2): Directory bread(block 65) failed [ 987.216077][ T3188] FAT-fs (loop2): Directory bread(block 66) failed [ 987.237580][ T3188] FAT-fs (loop2): Directory bread(block 67) failed [ 987.292611][ T3188] FAT-fs (loop2): Directory bread(block 68) failed [ 987.334455][ T3188] FAT-fs (loop2): Directory bread(block 69) failed [ 987.342744][ T3188] FAT-fs (loop2): Directory bread(block 70) failed [ 987.380354][ T3188] FAT-fs (loop2): Directory bread(block 71) failed [ 987.386999][ T3188] FAT-fs (loop2): Directory bread(block 72) failed [ 987.425698][ T3188] FAT-fs (loop2): Directory bread(block 73) failed [ 988.564723][ T3280] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 988.673999][ T8832] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 988.882505][ T3299] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14168'. [ 989.038625][ T3308] loop4: detected capacity change from 0 to 64 [ 989.135390][ T3308] hfs: unable to locate alternate MDB [ 989.140843][ T3308] hfs: continuing without an alternate MDB [ 989.162871][ T8832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 989.212187][ T26] audit: type=1800 audit(957.235:70): pid=3308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14172" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 989.240735][ T8832] usb 3-1: not running at top speed; connect to a high speed hub [ 989.281253][ T1220] [ 989.283611][ T1220] ====================================================== [ 989.290708][ T1220] WARNING: possible circular locking dependency detected [ 989.297756][ T1220] syzkaller #0 Not tainted [ 989.302151][ T1220] ------------------------------------------------------ [ 989.309149][ T1220] kworker/u4:4/1220 is trying to acquire lock: [ 989.315299][ T1220] ffff8880239b1478 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 989.326114][ T1220] [ 989.326114][ T1220] but task is already holding lock: [ 989.333469][ T1220] ffff88802836e0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 989.342774][ T1220] [ 989.342774][ T1220] which lock already depends on the new lock. [ 989.342774][ T1220] [ 989.353184][ T1220] [ 989.353184][ T1220] the existing dependency chain (in reverse order) is: [ 989.362196][ T1220] [ 989.362196][ T1220] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 989.370115][ T1220] __mutex_lock_common+0x1e3/0x2400 [ 989.375845][ T1220] mutex_lock_nested+0x17/0x20 [ 989.381157][ T1220] hfs_find_init+0x15b/0x1d0 [ 989.386274][ T1220] hfs_get_block+0x553/0xc50 [ 989.391400][ T1220] block_read_full_page+0x306/0xd40 [ 989.397127][ T1220] do_read_cache_page+0x8a1/0x1030 [ 989.402757][ T1220] __hfs_bnode_create+0x4f0/0xbd0 [ 989.408307][ T1220] hfs_bnode_find+0x220/0xd30 [ 989.413535][ T1220] hfs_brec_find+0x178/0x500 [ 989.418650][ T1220] hfs_brec_read+0x20/0x100 [ 989.423686][ T1220] hfs_cat_find_brec+0x174/0x3f0 [ 989.429151][ T1220] hfs_fill_super+0xfda/0x1590 [ 989.434441][ T1220] mount_bdev+0x287/0x3c0 [ 989.439488][ T1220] legacy_get_tree+0xe6/0x180 [ 989.443786][ T8832] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 989.444696][ T1220] vfs_get_tree+0x88/0x270 [ 989.457655][ T1220] do_new_mount+0x24a/0xa40 [ 989.461771][ T8832] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 989.462675][ T1220] __se_sys_mount+0x2e3/0x3d0 [ 989.476774][ T1220] do_syscall_64+0x4c/0xa0 [ 989.481723][ T1220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 989.488129][ T1220] [ 989.488129][ T1220] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 989.497322][ T1220] __lock_acquire+0x2c42/0x7d10 [ 989.502687][ T1220] lock_acquire+0x19e/0x400 [ 989.507695][ T1220] __mutex_lock_common+0x1e3/0x2400 [ 989.513398][ T1220] mutex_lock_nested+0x17/0x20 [ 989.518663][ T1220] hfs_extend_file+0xfb/0x13f0 [ 989.523927][ T1220] hfs_bmap_reserve+0x103/0x420 [ 989.529296][ T1220] __hfs_ext_write_extent+0x1fa/0x470 [ 989.535171][ T1220] hfs_ext_write_extent+0x17b/0x200 [ 989.540879][ T1220] hfs_write_inode+0xd8/0xa20 [ 989.546071][ T1220] __writeback_single_inode+0x6c3/0xda0 [ 989.552124][ T1220] writeback_sb_inodes+0xa4e/0x1680 [ 989.557833][ T1220] wb_writeback+0x45d/0xbe0 [ 989.562841][ T1220] wb_workfn+0x43a/0xf20 [ 989.567591][ T1220] process_one_work+0x85f/0x1010 [ 989.573032][ T1220] worker_thread+0xaa6/0x1290 [ 989.578213][ T1220] kthread+0x436/0x520 [ 989.582787][ T1220] ret_from_fork+0x1f/0x30 [ 989.587706][ T1220] [ 989.587706][ T1220] other info that might help us debug this: [ 989.587706][ T1220] [ 989.597908][ T1220] Possible unsafe locking scenario: [ 989.597908][ T1220] [ 989.605336][ T1220] CPU0 CPU1 [ 989.610767][ T1220] ---- ---- [ 989.616121][ T1220] lock(&tree->tree_lock/1); [ 989.620785][ T1220] lock(&HFS_I(tree->inode)->extents_lock); [ 989.629359][ T1220] lock(&tree->tree_lock/1); [ 989.636539][ T1220] lock(&HFS_I(tree->inode)->extents_lock); [ 989.642500][ T1220] [ 989.642500][ T1220] *** DEADLOCK *** [ 989.642500][ T1220] [ 989.650711][ T1220] 3 locks held by kworker/u4:4/1220: [ 989.655972][ T1220] #0: ffff8880189b8138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 989.666575][ T1220] #1: ffffc90004d07d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 989.678487][ T1220] #2: ffff88802836e0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 989.688235][ T1220] [ 989.688235][ T1220] stack backtrace: [ 989.694123][ T1220] CPU: 1 PID: 1220 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 989.701650][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 989.711693][ T1220] Workqueue: writeback wb_workfn (flush-7:4) [ 989.717681][ T1220] Call Trace: [ 989.720949][ T1220] [ 989.723873][ T1220] dump_stack_lvl+0x188/0x250 [ 989.728545][ T1220] ? load_image+0x400/0x400 [ 989.733044][ T1220] ? show_regs_print_info+0x20/0x20 [ 989.738233][ T1220] ? print_circular_bug+0x12b/0x1a0 [ 989.743417][ T1220] check_noncircular+0x296/0x330 [ 989.748337][ T1220] ? look_up_lock_class+0x71/0x110 [ 989.753441][ T1220] ? add_chain_block+0x940/0x940 [ 989.758362][ T1220] ? lockdep_lock+0xf1/0x1f0 [ 989.762935][ T1220] ? deref_stack_reg+0xd0/0x120 [ 989.767769][ T1220] ? mark_lock+0x94/0x320 [ 989.772079][ T1220] ? _find_first_zero_bit+0xce/0xf0 [ 989.777284][ T1220] __lock_acquire+0x2c42/0x7d10 [ 989.782129][ T1220] ? verify_lock_unused+0x140/0x140 [ 989.787317][ T1220] ? stack_trace_save+0xa6/0xf0 [ 989.792153][ T1220] ? stack_trace_snprint+0xf0/0xf0 [ 989.797251][ T1220] ? check_noncircular+0x189/0x330 [ 989.802363][ T1220] ? add_chain_block+0x940/0x940 [ 989.807304][ T1220] lock_acquire+0x19e/0x400 [ 989.811976][ T1220] ? hfs_extend_file+0xfb/0x13f0 [ 989.816935][ T1220] ? __lock_acquire+0x28ac/0x7d10 [ 989.821950][ T1220] ? __might_sleep+0xf0/0xf0 [ 989.826526][ T1220] ? read_lock_is_recursive+0x10/0x10 [ 989.831885][ T1220] ? hfs_extend_file+0xfb/0x13f0 [ 989.836809][ T1220] __mutex_lock_common+0x1e3/0x2400 [ 989.841994][ T1220] ? hfs_extend_file+0xfb/0x13f0 [ 989.846911][ T1220] ? mark_lock+0x94/0x320 [ 989.851225][ T1220] ? verify_lock_unused+0x140/0x140 [ 989.856441][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 989.862412][ T1220] ? __rwlock_init+0x140/0x140 [ 989.867160][ T1220] ? mutex_lock_io_nested+0x60/0x60 [ 989.872343][ T1220] ? lockdep_hardirqs_on+0x94/0x140 [ 989.877534][ T1220] mutex_lock_nested+0x17/0x20 [ 989.882287][ T1220] hfs_extend_file+0xfb/0x13f0 [ 989.887037][ T1220] ? __mutex_trylock_common+0x155/0x260 [ 989.892568][ T1220] ? hfs_get_block+0xc50/0xc50 [ 989.897314][ T1220] ? writeback_sb_inodes+0xa4e/0x1680 [ 989.902667][ T1220] ? wb_workfn+0x43a/0xf20 [ 989.907068][ T1220] ? hfs_find_init+0x15b/0x1d0 [ 989.911815][ T1220] ? __mutex_lock_common+0x465/0x2400 [ 989.917180][ T1220] ? memset+0x1e/0x40 [ 989.921148][ T1220] ? hfs_brec_find+0x197/0x500 [ 989.925902][ T1220] hfs_bmap_reserve+0x103/0x420 [ 989.930746][ T1220] __hfs_ext_write_extent+0x1fa/0x470 [ 989.936103][ T1220] hfs_ext_write_extent+0x17b/0x200 [ 989.941283][ T1220] ? verify_lock_unused+0x140/0x140 [ 989.946468][ T1220] ? hfs_ext_keycmp+0x310/0x310 [ 989.951300][ T1220] ? writeback_sb_inodes+0x418/0x1680 [ 989.956669][ T1220] hfs_write_inode+0xd8/0xa20 [ 989.961329][ T1220] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 989.966683][ T1220] ? __writeback_single_inode+0x471/0xda0 [ 989.972732][ T1220] ? __lock_acquire+0x7d10/0x7d10 [ 989.977738][ T1220] ? do_raw_spin_lock+0x128/0x2f0 [ 989.982745][ T1220] ? __rwlock_init+0x140/0x140 [ 989.987494][ T1220] __writeback_single_inode+0x6c3/0xda0 [ 989.993072][ T1220] writeback_sb_inodes+0xa4e/0x1680 [ 989.998258][ T1220] ? queue_io+0x550/0x550 [ 990.002574][ T1220] ? rcu_is_watching+0x11/0xa0 [ 990.007323][ T1220] wb_writeback+0x45d/0xbe0 [ 990.011902][ T1220] ? rcu_lock_release+0x20/0x20 [ 990.016732][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 990.022701][ T1220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 990.027885][ T1220] wb_workfn+0x43a/0xf20 [ 990.032121][ T1220] ? inode_wait_for_writeback+0x220/0x220 [ 990.037827][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 990.043791][ T1220] ? read_lock_is_recursive+0x10/0x10 [ 990.049149][ T1220] ? try_to_wake_up+0x6cf/0x1050 [ 990.054072][ T1220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 990.059258][ T1220] process_one_work+0x85f/0x1010 [ 990.064184][ T1220] ? worker_detach_from_pool+0x240/0x240 [ 990.069804][ T1220] ? lockdep_hardirqs_off+0x70/0x100 [ 990.075079][ T1220] ? _raw_spin_lock_irq+0xb7/0xf0 [ 990.080086][ T1220] ? _raw_spin_lock_irqsave+0x100/0x100 [ 990.085618][ T1220] ? wq_worker_running+0x97/0x170 [ 990.090636][ T1220] worker_thread+0xaa6/0x1290 [ 990.095306][ T1220] ? lockdep_hardirqs_on+0x94/0x140 [ 990.100489][ T1220] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 990.106368][ T1220] kthread+0x436/0x520 [ 990.110428][ T1220] ? rcu_lock_release+0x20/0x20 [ 990.115258][ T1220] ? kthread_blkcg+0xd0/0xd0 [ 990.119830][ T1220] ret_from_fork+0x1f/0x30 [ 990.124242][ T1220] [ 990.127294][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.129014][ T8832] usb 3-1: config 17 has no interface number 0 [ 990.141430][ T8832] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 990.152498][ T8832] usb 3-1: config 17 interface 8 has no altsetting 0 [ 990.186077][ T3283] loop1: detected capacity change from 0 to 32768 [ 990.194271][ T1220] hfs: new node 0 already hashed? [ 990.199522][ T1220] ------------[ cut here ]------------ [ 990.205170][ T1220] WARNING: CPU: 1 PID: 1220 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 990.214312][ T1220] Modules linked in: [ 990.218223][ T1220] CPU: 1 PID: 1220 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 990.226893][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 990.237490][ T1220] Workqueue: writeback wb_workfn (flush-7:4) [ 990.243496][ T1220] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 990.249547][ T1220] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 990.269400][ T1220] RSP: 0018:ffffc90004d06e90 EFLAGS: 00010246 [ 990.275527][ T1220] RAX: 000000000000001f RBX: ffff88802836e000 RCX: 396af8ffa8689200 [ 990.283999][ T1220] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 990.292267][ T1220] RBP: 0000000000000000 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 990.300434][ T1220] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 990.308503][ T1220] R13: ffff88802836e0e0 R14: ffff888023ba6600 R15: dffffc0000000000 [ 990.316745][ T1220] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 990.325882][ T1220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 990.336993][ T1220] CR2: 00007fe0a82d3900 CR3: 00000000240fd000 CR4: 00000000003506e0 [ 990.337651][ T3283] XFS (loop1): Mounting V5 Filesystem [ 990.345102][ T1220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 990.345119][ T1220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 990.345131][ T1220] Call Trace: [ 990.345136][ T1220] [ 990.345142][ T1220] ? do_raw_spin_unlock+0x11d/0x230 [ 990.345166][ T1220] hfs_bmap_alloc+0x5b8/0x670 [ 990.345182][ T1220] ? hfs_bmap_reserve+0x420/0x420 [ 990.345198][ T1220] ? rcu_is_watching+0x11/0xa0 [ 990.345216][ T1220] hfs_btree_inc_height+0xfd/0xac0 [ 990.345232][ T1220] ? hfs_brec_insert+0x6f6/0xbd0 [ 990.345249][ T1220] ? hfs_brec_insert+0xbd0/0xbd0 [ 990.345266][ T1220] ? do_raw_spin_unlock+0x11d/0x230 [ 990.345284][ T1220] hfs_brec_insert+0x744/0xbd0 [ 990.345305][ T1220] ? hfs_brec_keylen+0x350/0x350 [ 990.345327][ T1220] __hfs_ext_write_extent+0x2a1/0x470 [ 990.345353][ T1220] hfs_ext_write_extent+0x17b/0x200 [ 990.345369][ T1220] ? verify_lock_unused+0x140/0x140 [ 990.345390][ T1220] ? hfs_ext_keycmp+0x310/0x310 [ 990.345408][ T1220] ? writeback_sb_inodes+0x418/0x1680 [ 990.345427][ T1220] hfs_write_inode+0xd8/0xa20 [ 990.351472][ T8832] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 990.358825][ T1220] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 990.388554][ T8832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.396598][ T1220] ? __writeback_single_inode+0x471/0xda0 [ 990.418712][ T8832] usb 3-1: Product: syz [ 990.448414][ T1220] ? __lock_acquire+0x7d10/0x7d10 [ 990.461132][ T8832] usb 3-1: Manufacturer: syz [ 990.475428][ T1220] ? do_raw_spin_lock+0x128/0x2f0 [ 990.476631][ T8832] usb 3-1: SerialNumber: syz [ 990.491065][ T1220] ? __rwlock_init+0x140/0x140 [ 990.523670][ T3283] XFS (loop1): Ending clean mount [ 990.555456][ T1220] __writeback_single_inode+0x6c3/0xda0 [ 990.561052][ T1220] writeback_sb_inodes+0xa4e/0x1680 [ 990.582710][ T1220] ? queue_io+0x550/0x550 [ 990.587107][ T1220] ? rcu_is_watching+0x11/0xa0 [ 990.594220][ T4191] XFS (loop1): Unmounting Filesystem [ 990.594694][ T1220] wb_writeback+0x45d/0xbe0 [ 990.604500][ T1220] ? rcu_lock_release+0x20/0x20 [ 990.609945][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 990.615964][ T1220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 990.621628][ T1220] wb_workfn+0x43a/0xf20 [ 990.625904][ T1220] ? inode_wait_for_writeback+0x220/0x220 [ 990.631911][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 990.637933][ T1220] ? read_lock_is_recursive+0x10/0x10 [ 990.643698][ T1220] ? try_to_wake_up+0x6cf/0x1050 [ 990.648955][ T1220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 990.654319][ T1220] process_one_work+0x85f/0x1010 [ 990.659279][ T1220] ? worker_detach_from_pool+0x240/0x240 [ 990.664948][ T1220] ? lockdep_hardirqs_off+0x70/0x100 [ 990.670240][ T1220] ? _raw_spin_lock_irq+0xb7/0xf0 [ 990.675313][ T1220] ? _raw_spin_lock_irqsave+0x100/0x100 [ 990.680850][ T1220] ? wq_worker_running+0x97/0x170 [ 990.685902][ T1220] worker_thread+0xaa6/0x1290 [ 990.690583][ T1220] ? lockdep_hardirqs_on+0x94/0x140 [ 990.695804][ T1220] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 990.701775][ T1220] kthread+0x436/0x520 [ 990.705865][ T1220] ? rcu_lock_release+0x20/0x20 [ 990.710733][ T1220] ? kthread_blkcg+0xd0/0xd0 [ 990.715310][ T1220] ret_from_fork+0x1f/0x30 [ 990.719782][ T1220] [ 990.722800][ T1220] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 990.730054][ T1220] CPU: 1 PID: 1220 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 990.737571][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 990.747604][ T1220] Workqueue: writeback wb_workfn (flush-7:4) [ 990.753680][ T1220] Call Trace: [ 990.756948][ T1220] [ 990.759870][ T1220] dump_stack_lvl+0x188/0x250 [ 990.764530][ T1220] ? show_regs_print_info+0x20/0x20 [ 990.769714][ T1220] ? load_image+0x400/0x400 [ 990.774205][ T1220] panic+0x2e5/0x810 [ 990.778090][ T1220] ? bpf_jit_dump+0xd0/0xd0 [ 990.782582][ T1220] ? ret_from_fork+0x1f/0x30 [ 990.787173][ T1220] ? hfs_bnode_create+0x3d1/0x450 [ 990.792189][ T1220] __warn+0x248/0x2b0 [ 990.796154][ T1220] ? hfs_bnode_create+0x3d1/0x450 [ 990.801158][ T1220] report_bug+0x1b7/0x2e0 [ 990.805488][ T1220] handle_bug+0x3a/0x70 [ 990.809634][ T1220] exc_invalid_op+0x16/0x40 [ 990.814116][ T1220] asm_exc_invalid_op+0x16/0x20 [ 990.818945][ T1220] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 990.824562][ T1220] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 990.844157][ T1220] RSP: 0018:ffffc90004d06e90 EFLAGS: 00010246 [ 990.850209][ T1220] RAX: 000000000000001f RBX: ffff88802836e000 RCX: 396af8ffa8689200 [ 990.858161][ T1220] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 990.866111][ T1220] RBP: 0000000000000000 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 990.874061][ T1220] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 990.882013][ T1220] R13: ffff88802836e0e0 R14: ffff888023ba6600 R15: dffffc0000000000 [ 990.889970][ T1220] ? do_raw_spin_unlock+0x11d/0x230 [ 990.895153][ T1220] hfs_bmap_alloc+0x5b8/0x670 [ 990.899811][ T1220] ? hfs_bmap_reserve+0x420/0x420 [ 990.904808][ T1220] ? rcu_is_watching+0x11/0xa0 [ 990.909549][ T1220] hfs_btree_inc_height+0xfd/0xac0 [ 990.914642][ T1220] ? hfs_brec_insert+0x6f6/0xbd0 [ 990.919559][ T1220] ? hfs_brec_insert+0xbd0/0xbd0 [ 990.924473][ T1220] ? do_raw_spin_unlock+0x11d/0x230 [ 990.929649][ T1220] hfs_brec_insert+0x744/0xbd0 [ 990.934394][ T1220] ? hfs_brec_keylen+0x350/0x350 [ 990.939314][ T1220] __hfs_ext_write_extent+0x2a1/0x470 [ 990.944664][ T1220] hfs_ext_write_extent+0x17b/0x200 [ 990.949843][ T1220] ? verify_lock_unused+0x140/0x140 [ 990.955019][ T1220] ? hfs_ext_keycmp+0x310/0x310 [ 990.959850][ T1220] ? writeback_sb_inodes+0x418/0x1680 [ 990.965204][ T1220] hfs_write_inode+0xd8/0xa20 [ 990.969858][ T1220] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 990.975206][ T1220] ? __writeback_single_inode+0x471/0xda0 [ 990.980902][ T1220] ? __lock_acquire+0x7d10/0x7d10 [ 990.985906][ T1220] ? do_raw_spin_lock+0x128/0x2f0 [ 990.990908][ T1220] ? __rwlock_init+0x140/0x140 [ 990.995658][ T1220] __writeback_single_inode+0x6c3/0xda0 [ 991.001201][ T1220] writeback_sb_inodes+0xa4e/0x1680 [ 991.006385][ T1220] ? queue_io+0x550/0x550 [ 991.010692][ T1220] ? rcu_is_watching+0x11/0xa0 [ 991.015437][ T1220] wb_writeback+0x45d/0xbe0 [ 991.019924][ T1220] ? rcu_lock_release+0x20/0x20 [ 991.024753][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 991.030712][ T1220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 991.035884][ T1220] wb_workfn+0x43a/0xf20 [ 991.040109][ T1220] ? inode_wait_for_writeback+0x220/0x220 [ 991.045808][ T1220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 991.051769][ T1220] ? read_lock_is_recursive+0x10/0x10 [ 991.057123][ T1220] ? try_to_wake_up+0x6cf/0x1050 [ 991.062043][ T1220] ? _raw_spin_unlock_irq+0x1f/0x40 [ 991.067218][ T1220] process_one_work+0x85f/0x1010 [ 991.072138][ T1220] ? worker_detach_from_pool+0x240/0x240 [ 991.077747][ T1220] ? lockdep_hardirqs_off+0x70/0x100 [ 991.083010][ T1220] ? _raw_spin_lock_irq+0xb7/0xf0 [ 991.088010][ T1220] ? _raw_spin_lock_irqsave+0x100/0x100 [ 991.093535][ T1220] ? wq_worker_running+0x97/0x170 [ 991.098540][ T1220] worker_thread+0xaa6/0x1290 [ 991.103210][ T1220] ? lockdep_hardirqs_on+0x94/0x140 [ 991.108408][ T1220] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 991.114283][ T1220] kthread+0x436/0x520 [ 991.118331][ T1220] ? rcu_lock_release+0x20/0x20 [ 991.123156][ T1220] ? kthread_blkcg+0xd0/0xd0 [ 991.127724][ T1220] ret_from_fork+0x1f/0x30 [ 991.132125][ T1220] [ 991.135215][ T1220] Kernel Offset: disabled [ 991.139518][ T1220] Rebooting in 86400 seconds..