last executing test programs: 8m13.287726545s ago: executing program 3 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x3}}, 0x18}}, 0x0) 8m12.883379601s ago: executing program 3 (id=3018): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000b00)) 8m12.690056724s ago: executing program 3 (id=3021): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 8m12.489335067s ago: executing program 3 (id=3024): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6a4, &(0x7f0000001380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 8m12.191208962s ago: executing program 3 (id=3027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0000ffffffffa000acdae88890c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m11.742171928s ago: executing program 3 (id=3032): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x8, 0x7, 0x48000, 0x42303159, [0x3ff, 0x2], [0x5, 0xb4], 0x108}}) 8m11.161813037s ago: executing program 32 (id=3032): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x8, 0x7, 0x48000, 0x42303159, [0x3ff, 0x2], [0x5, 0xb4], 0x108}}) 4m44.628586239s ago: executing program 2 (id=5333): r0 = gettid() syz_pidfd_open(r0, 0x0) 4m44.156012546s ago: executing program 2 (id=5338): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 4m43.829771901s ago: executing program 2 (id=5344): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x0, 0xc8, 0x8, 0x1d8, 0x5803, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x2, 0x8463, 'snmp_trap\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 4m43.665267504s ago: executing program 2 (id=5347): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 4m43.202215041s ago: executing program 2 (id=5350): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m42.736026298s ago: executing program 2 (id=5355): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000002780)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 4m42.364880823s ago: executing program 33 (id=5355): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000002780)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 7.83588749s ago: executing program 4 (id=8556): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$yama_ptrace_scope(r0, 0x0, 0x0) 7.754077521s ago: executing program 4 (id=8557): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 7.453224646s ago: executing program 4 (id=8561): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, 0x0, 0x0) 7.17344713s ago: executing program 4 (id=8566): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000100)='./file1\x00', 0x800800, &(0x7f0000000040)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@umask={'umask', 0x3d, 0x8}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 6.701144067s ago: executing program 4 (id=8573): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000e00)=0x50, 0x4) 6.295306153s ago: executing program 4 (id=8577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getrlimit(0x1, &(0x7f0000000000)) 5.926060639s ago: executing program 34 (id=8577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getrlimit(0x1, &(0x7f0000000000)) 4.423398132s ago: executing program 1 (id=8595): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.547415481s ago: executing program 1 (id=8610): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) 1.870938881s ago: executing program 5 (id=8614): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.771018623s ago: executing program 1 (id=8615): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sync() 1.494129067s ago: executing program 5 (id=8617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000500)=[{0x6, 0xfd, 0x0, 0x7ffffeb9}]}) nanosleep(&(0x7f00000002c0)={0x0, 0x989680}, 0x0) 1.357140079s ago: executing program 1 (id=8619): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000000)='pvfs2\x00', 0x480, 0x0) 1.242501631s ago: executing program 5 (id=8620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) 1.055876144s ago: executing program 5 (id=8622): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) 931.724586ms ago: executing program 0 (id=8623): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000080}, 0x4008840) 849.999467ms ago: executing program 5 (id=8624): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000340)=0x6, 0x4) 750.173568ms ago: executing program 0 (id=8625): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f03e, 0x4}) 617.47841ms ago: executing program 5 (id=8626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6b26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xcf1, 0x7, 0x88a8}}, {0x14, 0x1, {0x800, 0xc69, 0x23b, 0x8100}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) 545.409522ms ago: executing program 0 (id=8627): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) 335.563505ms ago: executing program 0 (id=8628): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd7d, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa0100ff}}}, @ip_tos_int={{0x10, 0x110, 0xd}}], 0x28, 0x4c00}, 0x10) 284.121706ms ago: executing program 1 (id=8629): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000700)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 177.910907ms ago: executing program 1 (id=8630): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd27, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x844}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 139.660428ms ago: executing program 0 (id=8631): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000700)="eaff") 0s ago: executing program 0 (id=8632): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) kernel console output (not intermixed with test programs): config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 828.114080][T22565] loop1: detected capacity change from 0 to 1024 [ 828.141945][ T55] usb 5-1: config 254 interface 235 has no altsetting 0 [ 828.177830][ T55] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 828.235906][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.262162][ T55] usb 5-1: Product: syz [ 828.266414][ T55] usb 5-1: Manufacturer: syz [ 828.289724][ T55] usb 5-1: SerialNumber: syz [ 828.318394][T22549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 828.340540][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 828.572833][T22549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 828.616901][ T55] usbtest 5-1:254.235: Linux gadget zero [ 828.633077][ T55] usbtest 5-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 828.758860][T22575] xt_CT: No such helper "pptp" [ 828.828896][ T27] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 828.889218][ T55] usb 5-1: USB disconnect, device number 13 [ 829.073727][ T27] usb 6-1: config 0 has an invalid interface number: 90 but max is 0 [ 829.093409][ T27] usb 6-1: config 0 has no interface number 0 [ 829.099649][ T27] usb 6-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 829.158867][ T27] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 829.170602][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.187148][ T27] usb 6-1: Product: syz [ 829.195353][ T27] usb 6-1: Manufacturer: syz [ 829.206470][ T27] usb 6-1: SerialNumber: syz [ 829.219840][ T27] usb 6-1: config 0 descriptor?? [ 829.253598][T22573] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 829.519796][T22573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.558589][T22573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.590621][ T27] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 829.621390][ T27] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.90/input/input28 [ 829.697593][ C1] powermate: config urb returned -71 [ 829.703623][ C1] powermate: config urb returned -71 [ 829.709475][ C1] powermate: config urb returned -71 [ 829.715211][ C1] powermate: config urb returned -71 [ 829.770659][ T27] usb 6-1: USB disconnect, device number 6 [ 829.770746][ C1] powermate 6-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 830.048786][T22604] loop0: detected capacity change from 0 to 256 [ 830.078218][T22604] exfat: Deprecated parameter 'utf8' [ 830.083644][T22604] exfat: Deprecated parameter 'namecase' [ 830.119576][T22604] exfat: Deprecated parameter 'namecase' [ 830.125318][T22604] exfat: Deprecated parameter 'utf8' [ 830.128424][T22606] loop4: detected capacity change from 0 to 8 [ 830.168645][T22604] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 830.689520][T22614] loop0: detected capacity change from 0 to 2048 [ 830.749443][T22614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 831.692681][T22639] loop0: detected capacity change from 0 to 64 [ 832.304614][T22651] loop0: detected capacity change from 0 to 4096 [ 833.109620][T22663] loop0: detected capacity change from 0 to 16 [ 833.157041][T22663] erofs: (device loop0): mounted with root inode @ nid 36. [ 833.231575][T22663] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 833.244776][T22653] loop5: detected capacity change from 0 to 32768 [ 833.570324][T22657] loop4: detected capacity change from 0 to 32768 [ 833.660611][T22657] [ 833.660611][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 833.660611][T22657] [ 833.802355][T12888] [ 833.802355][T12888] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 833.802355][T12888] [ 833.841665][T12888] [ 833.841665][T12888] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 833.841665][T12888] [ 834.626199][T22681] loop0: detected capacity change from 0 to 2048 [ 834.673488][T22681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 834.816302][T22685] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7160'. [ 834.920869][T22687] netlink: 'syz.5.7161': attribute type 2 has an invalid length. [ 834.955171][T22687] netlink: 'syz.5.7161': attribute type 1 has an invalid length. [ 835.091875][ T28] audit: type=1400 audit(2000002784.301:177): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=22690 comm="syz.4.7163" [ 836.056689][T22693] loop5: detected capacity change from 0 to 32768 [ 836.173727][T22693] [ 836.173727][T22693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.173727][T22693] [ 836.356940][T18415] [ 836.356940][T18415] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.356940][T18415] [ 836.407284][T18415] [ 836.407284][T18415] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.407284][T18415] [ 836.915660][T22731] loop5: detected capacity change from 0 to 256 [ 837.140442][T22736] loop0: detected capacity change from 0 to 512 [ 837.185510][T22736] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 837.215877][T22736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0042] [ 837.231147][T22736] EXT4-fs (loop0): orphan cleanup on readonly fs [ 837.241762][T22736] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7184: bad orphan inode 267 [ 837.275369][T22741] netlink: 'syz.5.7185': attribute type 1 has an invalid length. [ 837.283200][T22741] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.7185'. [ 837.312752][T22736] EXT4-fs (loop0): Remounting filesystem read-only [ 837.377997][T22736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 837.485888][T22747] set match dimension is over the limit! [ 837.487365][T22736] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.7184: dx entry: limit 0 != root limit 125 [ 837.551287][T22736] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.7184: Corrupt directory, running e2fsck is recommended [ 837.652141][T22751] netlink: 'syz.5.7190': attribute type 5 has an invalid length. [ 837.656312][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 837.772300][T22751] : entered promiscuous mode [ 837.837302][ T28] audit: type=1326 audit(2000002786.872:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22756 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 837.936303][ T28] audit: type=1326 audit(2000002786.872:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22756 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 838.010988][ T28] audit: type=1326 audit(2000002786.872:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22756 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 838.035464][ T28] audit: type=1326 audit(2000002786.872:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22756 comm="syz.0.7193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 838.166429][T22763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7198'. [ 838.582812][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7206'. [ 838.888292][T12893] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 838.993049][T22796] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 839.013118][T22796] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 839.166329][T12893] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 839.180472][T12893] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 839.193117][T12893] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 839.214820][T12893] usb 6-1: config 220 has no interface number 2 [ 839.222253][T12893] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 839.235904][T12893] usb 6-1: config 220 interface 0 has no altsetting 0 [ 839.243226][T12893] usb 6-1: config 220 interface 76 has no altsetting 0 [ 839.262546][T12893] usb 6-1: config 220 interface 1 has no altsetting 0 [ 839.307944][T12893] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 839.348184][T12893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.356360][T12893] usb 6-1: Product: syz [ 839.369275][T12893] usb 6-1: Manufacturer: syz [ 839.370722][T22811] loop1: detected capacity change from 0 to 64 [ 839.373928][T12893] usb 6-1: SerialNumber: syz [ 839.414528][T22811] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 839.454402][T22813] loop0: detected capacity change from 0 to 1024 [ 839.651087][T12893] usb 6-1: selecting invalid altsetting 0 [ 839.657568][T12893] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 839.679970][T12893] usb 6-1: No valid video chain found. [ 839.744892][T12893] usb 6-1: selecting invalid altsetting 0 [ 839.797381][T12893] usbtest: probe of 6-1:220.1 failed with error -22 [ 839.819161][T12893] usb 6-1: USB disconnect, device number 7 [ 839.884952][ T28] audit: type=1326 audit(2000002788.789:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22819 comm="syz.1.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 839.929358][T22821] loop0: detected capacity change from 0 to 256 [ 839.970511][ T28] audit: type=1326 audit(2000002788.789:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22819 comm="syz.1.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 840.044290][ T28] audit: type=1326 audit(2000002788.808:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22819 comm="syz.1.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 840.150292][ T28] audit: type=1326 audit(2000002788.808:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22819 comm="syz.1.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 840.247492][ T28] audit: type=1326 audit(2000002788.808:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22819 comm="syz.1.7225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 840.373989][T22829] loop0: detected capacity change from 0 to 2048 [ 840.415423][T22829] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 840.441125][T22836] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.452329][T22829] syz.0.7229: attempt to access beyond end of device [ 840.452329][T22829] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 840.605343][T22829] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 840.628299][T22829] Remounting filesystem read-only [ 840.641852][ T5833] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 840.647986][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7234'. [ 840.661381][T22829] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 840.679545][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7234'. [ 840.694706][T22829] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 840.724336][ T28] audit: type=1800 audit(2000002789.565:187): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7229" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 840.747163][T22842] program syz.5.7235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 840.870578][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 840.884018][ T5833] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 840.909311][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.921116][ T5833] usb 2-1: Product: syz [ 840.925354][ T5833] usb 2-1: Manufacturer: syz [ 840.930012][ T5833] usb 2-1: SerialNumber: syz [ 841.005609][ T5833] usb 2-1: config 0 descriptor?? [ 841.048736][ T5833] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 841.142518][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7240'. [ 841.427636][T22866] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4097, id = 0 [ 841.501517][ T5833] gspca_sn9c20x: Write register 1001 failed -71 [ 841.521506][ T5833] gspca_sn9c20x: Device initialization failed [ 841.527747][ T5833] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71 [ 841.557164][ T5833] usb 2-1: USB disconnect, device number 79 [ 841.609687][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 842.192023][ T28] audit: type=1326 audit(2000002790.940:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22890 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 842.257563][T22895] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 842.267853][ T28] audit: type=1326 audit(2000002790.978:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22890 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 842.359261][ T28] audit: type=1326 audit(2000002790.978:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22890 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 842.444906][T22901] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7261'. [ 842.459814][ T28] audit: type=1326 audit(2000002790.978:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22890 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 842.780616][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7267'. [ 842.839322][T22907] loop4: detected capacity change from 0 to 8192 [ 842.860291][T22907] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 842.973587][T22907] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 842.996525][T22907] FAT-fs (loop4): Filesystem has been set read-only [ 843.124251][T12888] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 843.685939][T22942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7282'. [ 843.725787][T22942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7282'. [ 843.758722][T22942] vlan0: entered promiscuous mode [ 844.309674][T15175] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 844.523502][T15175] usb 6-1: Using ep0 maxpacket: 32 [ 844.536544][T15175] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 844.561417][T15175] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 844.584206][T15175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.620207][T15175] usb 6-1: Product: syz [ 844.624609][T15175] usb 6-1: Manufacturer: syz [ 844.629287][T15175] usb 6-1: SerialNumber: syz [ 844.671743][T15175] kobil_sct 6-1:2.0: required endpoints missing [ 844.912308][T22986] loop4: detected capacity change from 0 to 16 [ 844.926107][T15175] usb 6-1: USB disconnect, device number 8 [ 844.948259][T22986] erofs: (device loop4): mounted with root inode @ nid 36. [ 845.515859][T22982] loop0: detected capacity change from 0 to 32768 [ 845.587434][T22982] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 845.690727][T22982] XFS (loop0): Ending clean mount [ 845.725202][T22982] XFS (loop0): Quotacheck needed: Please wait. [ 845.895792][T22982] XFS (loop0): Quotacheck: Done. [ 845.976334][T22988] loop1: detected capacity change from 0 to 32768 [ 846.116357][T22988] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 846.118110][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 846.144618][T22988] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 846.383456][T22988] XFS (loop1): Ending clean mount [ 846.420293][T23018] loop5: detected capacity change from 0 to 512 [ 846.429669][T22988] XFS (loop1): Quotacheck needed: Please wait. [ 846.488132][T23018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 846.565257][T23018] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 846.583358][T22988] XFS (loop1): Quotacheck: Done. [ 846.618928][T23018] EXT4-fs (loop5): 1 truncate cleaned up [ 846.640354][T23018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.790675][T18415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.860631][ T5796] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 847.133486][T23026] loop0: detected capacity change from 0 to 4096 [ 847.152027][T23026] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 847.188848][T22994] loop4: detected capacity change from 0 to 65536 [ 847.228922][T22994] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 847.342199][T22994] XFS (loop4): Ending clean mount [ 847.378972][T23026] ntfs3: loop0: failed to convert "c46c" to cp437 [ 847.672266][T12888] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 847.971987][T23048] loop5: detected capacity change from 0 to 256 [ 848.000122][T23048] exfat: Deprecated parameter 'namecase' [ 848.077506][T23048] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 848.360256][T23050] loop4: detected capacity change from 0 to 256 [ 848.485900][T23044] loop0: detected capacity change from 0 to 32768 [ 848.545883][T23050] FAT-fs (loop4): Directory bread(block 64) failed [ 848.552539][T23050] FAT-fs (loop4): Directory bread(block 65) failed [ 848.566065][T23050] FAT-fs (loop4): Directory bread(block 66) failed [ 848.583190][T23053] loop5: detected capacity change from 0 to 256 [ 848.592905][T23050] FAT-fs (loop4): Directory bread(block 67) failed [ 848.600991][T23050] FAT-fs (loop4): Directory bread(block 68) failed [ 848.607848][T23050] FAT-fs (loop4): Directory bread(block 69) failed [ 848.624914][T23044] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 848.633083][T23050] FAT-fs (loop4): Directory bread(block 70) failed [ 848.640856][T23050] FAT-fs (loop4): Directory bread(block 71) failed [ 848.647863][T23050] FAT-fs (loop4): Directory bread(block 72) failed [ 848.657994][T23050] FAT-fs (loop4): Directory bread(block 73) failed [ 848.711589][T23044] (syz.0.7320,23044,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 848.756856][T23053] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 848.769602][T23044] (syz.0.7320,23044,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 848.811603][T23044] (syz.0.7320,23044,0):ocfs2_symlink:2068 ERROR: status = -117 [ 848.909854][ T5784] (syz-executor,5784,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 848.982987][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 849.884884][ T28] audit: type=1326 audit(2000002798.141:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 849.918900][ T28] audit: type=1326 audit(2000002798.141:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 849.948047][ T28] audit: type=1326 audit(2000002798.141:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 850.012103][ T28] audit: type=1326 audit(2000002798.141:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 850.058889][ T28] audit: type=1326 audit(2000002798.141:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23087 comm="syz.1.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 850.309806][T23098] loop1: detected capacity change from 0 to 164 [ 850.595943][T23086] loop4: detected capacity change from 0 to 40427 [ 850.608221][T23086] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 850.616005][T23086] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 850.629553][T12893] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 850.644837][T23086] F2FS-fs (loop4): invalid crc value [ 850.672241][ T55] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 850.761880][T23086] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 850.770409][T23086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 850.786941][T23086] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 850.843497][T12893] usb 2-1: Using ep0 maxpacket: 8 [ 850.854146][T12893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 850.873463][T12893] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 850.884550][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 850.897209][T12893] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 850.918331][T12893] usb 2-1: config 17 has no interface number 0 [ 850.930946][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.950495][T12893] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 12592, setting to 64 [ 850.963189][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 34, changing to 9 [ 850.983389][T12893] usb 2-1: config 17 interface 8 has no altsetting 0 [ 850.990316][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.009322][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.019585][ T55] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.036134][ T55] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 851.045279][ T55] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 851.054598][ T55] usb 1-1: Manufacturer: syz [ 851.054886][T12893] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 851.070847][T12893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.080612][ T55] usb 1-1: config 0 descriptor?? [ 851.104159][T12893] usb 2-1: Product: syz [ 851.111826][T12893] usb 2-1: Manufacturer: syz [ 851.121679][T12893] usb 2-1: SerialNumber: syz [ 851.406842][ T55] usb 1-1: USB disconnect, device number 82 [ 851.418583][T12893] usb 2-1: selecting invalid altsetting 0 [ 851.487398][T12893] usb 2-1: USB disconnect, device number 80 [ 851.494858][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7349'. [ 851.591433][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.262975][T23126] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.298719][T23114] loop4: detected capacity change from 0 to 32768 [ 852.819041][T23122] loop5: detected capacity change from 0 to 32768 [ 852.892102][T23122] JBD2: Ignoring recovery information on journal [ 853.049329][T23122] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 853.114247][T23150] bond3: entered promiscuous mode [ 853.119625][T23150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 853.413427][T23122] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 853.414452][T23157] loop1: detected capacity change from 0 to 2048 [ 853.492280][T23122] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 853.553877][T23122] OCFS2: File system is now read-only. [ 853.576443][T23122] (syz.5.7354,23122,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 853.585228][T23163] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 853.639764][T23122] (syz.5.7354,23122,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 853.672867][T23122] (syz.5.7354,23122,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 853.686672][T23122] (syz.5.7354,23122,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 853.713160][T23122] (syz.5.7354,23122,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 853.762043][T23122] (syz.5.7354,23122,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 853.787460][T23122] (syz.5.7354,23122,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 853.800478][T23122] (syz.5.7354,23122,0):ocfs2_symlink:1944 ERROR: status = -30 [ 853.828374][T23122] (syz.5.7354,23122,0):ocfs2_symlink:2068 ERROR: status = -30 [ 853.897922][T23163] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 853.911958][T23163] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 853.937075][T18415] ocfs2: Unmounting device (7,5) on (node local) [ 854.028433][T23163] Remounting filesystem read-only [ 854.052701][ T1314] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 854.059480][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.116006][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.124958][ T1314] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 854.171233][ T1314] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 854.178620][ T1314] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 854.186214][ T1314] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 854.203340][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.224655][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237583][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237721][ T1314] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 854.237740][ T1314] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 854.237759][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237778][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237796][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237841][ T1314] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 854.237859][ T1314] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 854.237877][ T1314] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 854.237894][ T1314] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 854.237911][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237935][ T1314] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 854.237952][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237971][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.237989][ T1314] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 854.238006][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.238043][ T1314] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 854.238061][ T1314] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 854.238078][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.238096][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.238115][ T1314] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.238661][ T5796] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 854.238689][ T5796] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 854.238708][ T5796] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 854.238726][ T5796] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.238744][ T5796] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.238762][ T5796] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 854.399661][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 854.399801][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 855.037776][T23198] syz.1.7388 (23198): drop_caches: 0 [ 855.496449][T23213] loop4: detected capacity change from 0 to 2048 [ 855.586577][T23213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.816963][T12888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.154364][T23227] netlink: 'syz.4.7402': attribute type 6 has an invalid length. [ 856.164697][T23209] loop5: detected capacity change from 0 to 32768 [ 856.200927][T23209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.7395 (23209) [ 856.292430][T23209] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 856.328076][T23209] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 856.370915][T23209] BTRFS info (device loop5): using free space tree [ 856.583204][T23209] BTRFS info (device loop5): enabling ssd optimizations [ 856.598455][T23209] BTRFS info (device loop5): auto enabling async discard [ 856.777129][T23256] loop1: detected capacity change from 0 to 4096 [ 856.837630][T23256] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 856.863922][T18415] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 857.026582][T23266] netlink: 22 bytes leftover after parsing attributes in process `syz.4.7414'. [ 857.255262][ T28] audit: type=1326 audit(2000002805.033:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23268 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 857.379589][ T28] audit: type=1326 audit(2000002805.052:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23268 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 857.500106][ T28] audit: type=1326 audit(2000002805.108:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23268 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 857.628538][ T28] audit: type=1326 audit(2000002805.108:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23268 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 857.756797][ T28] audit: type=1326 audit(2000002805.108:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23268 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 858.150101][T23293] loop5: detected capacity change from 0 to 64 [ 858.240317][T23295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 858.296755][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7428'. [ 858.924797][T23291] loop0: detected capacity change from 0 to 32768 [ 858.978079][T23291] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 859.066871][T23291] (syz.0.7425,23291,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 859.089043][T23291] (syz.0.7425,23291,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 859.097918][T23291] (syz.0.7425,23291,0):ocfs2_mknod:298 ERROR: status = -2 [ 859.106943][T23291] (syz.0.7425,23291,0):ocfs2_mknod:502 ERROR: status = -2 [ 859.115820][T23291] (syz.0.7425,23291,0):ocfs2_create:676 ERROR: status = -2 [ 859.127877][T23319] xt_cgroup: path and classid specified [ 859.314576][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 860.244683][T23352] loop0: detected capacity change from 0 to 256 [ 860.252216][T23352] exfat: Deprecated parameter 'namecase' [ 860.290141][T23352] exfat: Deprecated parameter 'namecase' [ 860.336325][T23352] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 860.961745][T23380] netlink: 'syz.1.7466': attribute type 25 has an invalid length. [ 861.213410][T23388] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 23388 comm: syz.5.7471) [ 861.275407][ T28] audit: type=1800 audit(2000002808.792:202): pid=23388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7471" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=58788 res=0 errno=0 [ 861.599292][T23401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7479'. [ 861.635541][T23402] loop0: detected capacity change from 0 to 1024 [ 861.645161][T23405] QAT: failed to copy from user cfg_data. [ 861.662263][T23406] dlm: no locking on control device [ 861.668037][T23402] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 861.737338][T23402] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.7478: Invalid block bitmap block 0 in block_group 0 [ 861.796591][T23402] Quota error (device loop0): write_blk: dquota write failed [ 861.804689][T23402] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 861.815936][T23402] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.7478: Failed to acquire dquot type 0 [ 861.850785][T23402] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.7478: Freeing blocks not in datazone - block = 0, count = 4096 [ 861.866744][T23402] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7478: Invalid inode bitmap blk 0 in block_group 0 [ 861.883582][ T11] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 861.895523][T23402] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 861.925114][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 0 [ 861.947779][T23402] EXT4-fs (loop0): 1 orphan inode deleted [ 861.965829][T23413] loop5: detected capacity change from 0 to 1764 [ 861.973677][T23402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.206850][ T28] audit: type=1326 audit(2000002809.662:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23421 comm="syz.5.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 862.317806][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.583220][T23430] netlink: 'syz.0.7489': attribute type 10 has an invalid length. [ 862.603046][T23430] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7489'. [ 862.685765][T23434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7495'. [ 862.695483][T23434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7495'. [ 863.352098][T23462] netlink: 'syz.0.7509': attribute type 10 has an invalid length. [ 863.369468][T23462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7509'. [ 863.385687][T23462] batman_adv: batadv0: Adding interface: vlan1 [ 863.402851][T23462] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.429100][ C1] vkms_vblank_simulate: vblank timer overrun [ 863.492657][T23462] batman_adv: batadv0: Interface activated: vlan1 [ 863.696185][T23466] loop1: detected capacity change from 0 to 4096 [ 863.729197][T23466] ntfs3: loop1: ino=3, Correct links count -> 2. [ 863.811491][T23476] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7515'. [ 864.213392][T23488] netlink: 'syz.1.7521': attribute type 10 has an invalid length. [ 864.231062][T23488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7521'. [ 864.263056][T23488] batman_adv: batadv0: Adding interface: virt_wifi0 [ 864.288233][T23488] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.350699][T23488] batman_adv: batadv0: Interface activated: virt_wifi0 [ 864.566631][T23496] loop4: detected capacity change from 0 to 256 [ 864.644923][T23496] FAT-fs (loop4): Directory bread(block 64) failed [ 864.655402][T23496] FAT-fs (loop4): Directory bread(block 65) failed [ 864.682931][T23496] FAT-fs (loop4): Directory bread(block 66) failed [ 864.700652][T23496] FAT-fs (loop4): Directory bread(block 67) failed [ 864.730754][T23496] FAT-fs (loop4): Directory bread(block 68) failed [ 864.761838][T23496] FAT-fs (loop4): Directory bread(block 69) failed [ 864.784988][T23496] FAT-fs (loop4): Directory bread(block 70) failed [ 864.809193][T23496] FAT-fs (loop4): Directory bread(block 71) failed [ 864.830740][T23496] FAT-fs (loop4): Directory bread(block 72) failed [ 864.837374][T23496] FAT-fs (loop4): Directory bread(block 73) failed [ 865.418417][ T27] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 865.477201][T23494] loop0: detected capacity change from 0 to 40427 [ 865.516640][T23494] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 865.545584][T23494] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 865.570787][T23494] F2FS-fs (loop0): invalid crc value [ 865.681489][ T27] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 865.696947][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.727021][ T27] usb 2-1: Product: syz [ 865.731537][ T27] usb 2-1: Manufacturer: syz [ 865.742243][ T27] usb 2-1: SerialNumber: syz [ 865.780840][ T27] usb 2-1: config 0 descriptor?? [ 865.884024][T23494] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 865.891935][T23494] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 865.952933][T23494] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 866.073141][ T27] hso 2-1:0.0: Failed to find BULK IN ep [ 866.096667][ T27] usb-storage 2-1:0.0: USB Mass Storage device detected [ 866.173556][T23531] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7539'. [ 866.188081][T23531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7539'. [ 866.198111][T23531] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7539'. [ 866.209788][T23531] netlink: 'syz.5.7539': attribute type 3 has an invalid length. [ 866.217678][T23531] netlink: 'syz.5.7539': attribute type 2 has an invalid length. [ 866.226262][T23531] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7539'. [ 866.353832][ T55] usb 2-1: USB disconnect, device number 81 [ 866.866203][T23549] libceph: resolve '400' (ret=-3): failed [ 867.004968][T23554] loop5: detected capacity change from 0 to 2048 [ 867.048578][T23559] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.179168][T23554] NILFS (loop5): error -2 truncating bmap (ino=16) [ 867.321128][T23559] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 867.354015][T23559] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 867.393810][T23559] Remounting filesystem read-only [ 867.414011][T16382] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 867.430233][T16382] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 867.451331][T16382] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 867.472813][T16382] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 867.491895][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.510799][T16382] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 867.526869][T16382] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 867.541354][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.562755][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.586648][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.610654][T16382] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 867.631716][T16382] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 867.646501][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.666656][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.685456][T16382] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.721821][T18415] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 867.746641][T18415] NILFS (loop5): discard dirty page: offset=0, ino=16 [ 867.762631][T18415] NILFS (loop5): discard dirty block: blocknr=23, size=1024 [ 867.783062][T18415] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.805435][T18415] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 867.829543][T18415] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 868.030736][T23565] loop4: detected capacity change from 0 to 32768 [ 868.057077][T23565] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7555 (23565) [ 868.096695][T23565] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 868.124003][T23565] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 868.133991][T23565] BTRFS info (device loop4): using free space tree [ 868.305686][T23565] BTRFS info (device loop4): enabling ssd optimizations [ 868.314229][T23565] BTRFS info (device loop4): auto enabling async discard [ 868.637509][T12888] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 870.020144][T23646] loop1: detected capacity change from 0 to 16 [ 870.036671][T23646] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 870.197193][T23622] loop5: detected capacity change from 0 to 32768 [ 870.317991][T23652] loop4: detected capacity change from 0 to 256 [ 870.497217][T23652] FAT-fs (loop4): Directory bread(block 64) failed [ 870.515327][T23652] FAT-fs (loop4): Directory bread(block 65) failed [ 870.532573][T23652] FAT-fs (loop4): Directory bread(block 66) failed [ 870.552939][T23652] FAT-fs (loop4): Directory bread(block 67) failed [ 870.577820][T23652] FAT-fs (loop4): Directory bread(block 68) failed [ 870.605125][T23652] FAT-fs (loop4): Directory bread(block 69) failed [ 870.637012][T23652] FAT-fs (loop4): Directory bread(block 70) failed [ 870.643805][T23652] FAT-fs (loop4): Directory bread(block 71) failed [ 870.690511][T23652] FAT-fs (loop4): Directory bread(block 72) failed [ 870.697136][T23652] FAT-fs (loop4): Directory bread(block 73) failed [ 871.216621][T23675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7600'. [ 871.443535][T23682] loop5: detected capacity change from 0 to 64 [ 871.868471][T23696] loop4: detected capacity change from 0 to 16 [ 871.908326][T23696] erofs: (device loop4): mounted with root inode @ nid 36. [ 871.916351][T23697] loop0: detected capacity change from 0 to 256 [ 871.963980][T23697] exfat: Deprecated parameter 'namecase' [ 871.969792][T23697] exfat: Deprecated parameter 'utf8' [ 871.995047][T23696] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 872.044732][T23701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.166206][T23697] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 872.257949][T23697] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 872.433585][T23708] loop5: detected capacity change from 0 to 256 [ 872.730330][T23719] loop1: detected capacity change from 0 to 64 [ 872.971219][ T55] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 873.071120][T23727] loop4: detected capacity change from 0 to 256 [ 873.203390][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 873.223514][ T55] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 873.256810][ T55] usb 6-1: config 0 has no interface number 0 [ 873.263007][ T55] usb 6-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 873.295690][ T55] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 873.320865][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.349760][ T55] usb 6-1: Product: syz [ 873.361720][ T55] usb 6-1: Manufacturer: syz [ 873.374066][ T55] usb 6-1: SerialNumber: syz [ 873.404902][ T55] usb 6-1: config 0 descriptor?? [ 873.428810][T23717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 873.685531][T23717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 873.741661][ T55] net1080 6-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, 4e:25:25:1c:15:82 [ 874.013901][ T55] usb 6-1: USB disconnect, device number 9 [ 874.021603][ T55] net1080 6-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 874.038989][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 874.039007][ T28] audit: type=1326 audit(2000002820.725:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23755 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 874.110784][ T28] audit: type=1326 audit(2000002820.725:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23755 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 874.184874][ T28] audit: type=1326 audit(2000002820.725:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23755 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 874.274801][ T28] audit: type=1326 audit(2000002820.725:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23755 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 874.326235][ T28] audit: type=1326 audit(2000002820.725:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23755 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 874.465056][ T27] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 874.679647][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 874.690599][ T27] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 874.706786][T23749] loop1: detected capacity change from 0 to 32768 [ 874.759253][ T27] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 874.787950][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 874.832456][ T27] usb 5-1: config 1 has no interface number 0 [ 874.849872][ T27] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 874.903490][ T27] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 874.946389][ T27] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 874.980053][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.066276][ T27] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 875.265584][ T27] snd_usb_pod 5-1:1.1: invalid control EP [ 875.305875][ T27] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 875.330584][ T27] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 875.359005][ T27] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 875.484452][ T27] usb 5-1: USB disconnect, device number 14 [ 877.049457][T23847] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.140444][T23847] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.170758][T23847] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.184141][T23847] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.198591][T23847] geneve3: entered promiscuous mode [ 877.204495][T23847] geneve3: entered allmulticast mode [ 877.280646][T23847] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 877.296100][T23847] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 877.309592][T23847] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 877.332675][T23847] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 878.299539][T23861] loop4: detected capacity change from 0 to 32768 [ 878.366706][T23861] (syz.4.7675,23861,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 878.384095][T23861] (syz.4.7675,23861,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 878.434010][T23861] JBD2: Ignoring recovery information on journal [ 878.498892][T23884] loop5: detected capacity change from 0 to 4096 [ 878.511447][T23884] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 878.579396][T23861] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 878.768414][T23884] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 878.977983][T12888] ocfs2: Unmounting device (7,4) on (node local) [ 879.421185][T23908] loop5: detected capacity change from 0 to 256 [ 879.463056][ T55] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 879.511939][T23908] FAT-fs (loop5): Directory bread(block 64) failed [ 879.529637][T23908] FAT-fs (loop5): Directory bread(block 65) failed [ 879.540270][T23908] FAT-fs (loop5): Directory bread(block 66) failed [ 879.552068][T23908] FAT-fs (loop5): Directory bread(block 67) failed [ 879.562375][T23908] FAT-fs (loop5): Directory bread(block 68) failed [ 879.572207][T23908] FAT-fs (loop5): Directory bread(block 69) failed [ 879.593387][T23908] FAT-fs (loop5): Directory bread(block 70) failed [ 879.610873][T23908] FAT-fs (loop5): Directory bread(block 71) failed [ 879.620443][T23908] FAT-fs (loop5): Directory bread(block 72) failed [ 879.628440][T23908] FAT-fs (loop5): Directory bread(block 73) failed [ 879.684259][ T55] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 879.696430][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.721544][ T55] usb 1-1: Product: syz [ 879.725887][ T55] usb 1-1: Manufacturer: syz [ 879.743189][ T55] usb 1-1: SerialNumber: syz [ 879.755216][ T55] usb 1-1: config 0 descriptor?? [ 879.787318][ T55] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 880.211445][ T5842] usb 1-1: USB disconnect, device number 83 [ 880.354767][ T27] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 880.584307][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 880.595539][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.606286][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 880.615423][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.625812][ T27] usb 5-1: config 0 descriptor?? [ 880.639396][ T27] hub 5-1:0.0: USB hub found [ 880.689041][ T5833] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 880.851873][ T27] hub 5-1:0.0: 1 port detected [ 880.881489][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 880.895175][ T5833] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 880.904549][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 880.912807][ T5833] usb 6-1: Product: syz [ 880.919484][ T5833] usb 6-1: Manufacturer: syz [ 880.924376][ T5833] usb 6-1: SerialNumber: syz [ 880.932034][ T5833] usb 6-1: config 0 descriptor?? [ 881.069566][ T27] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 881.081637][ T27] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 881.093764][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 881.100332][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 881.154634][ T27] usb 5-1: USB disconnect, device number 15 [ 881.469973][ T5833] usb 6-1: USB disconnect, device number 10 [ 881.584747][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.632302][T23941] loop0: detected capacity change from 0 to 256 [ 881.826091][ T28] audit: type=1326 audit(2000002828.010:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23944 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 881.904221][ T28] audit: type=1326 audit(2000002828.010:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23944 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 881.970139][ T28] audit: type=1326 audit(2000002828.028:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23944 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 881.994412][ T28] audit: type=1326 audit(2000002828.028:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23944 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 882.017890][ T28] audit: type=1326 audit(2000002828.028:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23944 comm="syz.4.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 882.357947][T23961] ./file0: Can't lookup blockdev [ 883.135646][T23989] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7737'. [ 883.408552][T23998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7741'. [ 883.432374][T23998] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7741'. [ 883.575964][ T55] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 883.643654][T24007] binder: 24006:24007 ioctl c018620b 0 returned -14 [ 883.797186][ T55] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 883.832541][ T55] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 883.840770][ T55] usb 5-1: Product: syz [ 883.855175][ T55] usb 5-1: SerialNumber: syz [ 883.876810][ T55] usb 5-1: config 0 descriptor?? [ 884.116070][ T55] hso 5-1:0.0: Failed to find BULK IN ep [ 884.263705][T24018] loop0: detected capacity change from 0 to 8192 [ 884.282026][T24018] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "" [ 884.321943][ T5833] usb 5-1: USB disconnect, device number 16 [ 884.370812][T24004] loop5: detected capacity change from 0 to 32768 [ 884.455716][T24004] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 884.624057][T24034] tipc: Can't bind to reserved service type 0 [ 884.640667][T24004] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 884.746075][T24004] XFS (loop5): Starting recovery (logdev: internal) [ 884.865833][T24004] XFS (loop5): Ending recovery (logdev: internal) [ 885.098788][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 885.118604][T24046] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7761'. [ 885.134901][T24004] XFS (nullb0): Invalid superblock magic number [ 885.381885][T18415] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 885.951682][T24044] loop0: detected capacity change from 0 to 32768 [ 885.997651][T24044] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 886.048490][T24044] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 886.064446][T24073] loop5: detected capacity change from 0 to 8 [ 886.126957][T24073] SQUASHFS error: Failed to read block 0x6e6: -5 [ 886.134184][T24073] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 886.141789][T24073] SQUASHFS error: Unable to read directory block [631:26] [ 886.241121][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 886.419187][T24080] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 887.274950][T24075] loop1: detected capacity change from 0 to 32768 [ 887.298373][T24075] XFS: noikeep mount option is deprecated. [ 887.372116][T24075] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 887.598168][T24075] XFS (loop1): Ending clean mount [ 887.634180][T24075] XFS (loop1): Quotacheck needed: Please wait. [ 887.765421][T24075] XFS (loop1): Quotacheck: Done. [ 887.903212][ T5796] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 888.027158][T24101] loop5: detected capacity change from 0 to 32768 [ 888.168849][T24101] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 888.292215][T24101] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 888.596940][T18415] ocfs2: Unmounting device (7,5) on (node local) [ 888.611612][T24105] loop4: detected capacity change from 0 to 40427 [ 888.665072][T24105] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 888.691624][T24105] F2FS-fs (loop4): Image doesn't support compression [ 888.713247][T24105] F2FS-fs (loop4): heap/no_heap options were deprecated [ 888.734882][T24105] F2FS-fs (loop4): Image doesn't support compression [ 888.795548][T24105] F2FS-fs (loop4): invalid crc value [ 888.822804][T24105] F2FS-fs (loop4): Found nat_bits in checkpoint [ 888.847926][ T27] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 888.998461][T24105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 889.052467][T24105] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 889.084313][T24105] F2FS-fs (loop4): Image doesn't support compression [ 889.091545][T24105] F2FS-fs (loop4): heap/no_heap options were deprecated [ 889.108477][ T27] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 889.127699][ T27] usb 2-1: config 0 has no interface number 0 [ 889.133918][ T27] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 889.145470][T24105] F2FS-fs (loop4): Image doesn't support compression [ 889.170441][ T27] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 889.182028][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.200802][ T27] usb 2-1: Product: syz [ 889.211779][ T27] usb 2-1: Manufacturer: syz [ 889.216601][ T27] usb 2-1: SerialNumber: syz [ 889.235412][ T27] usb 2-1: config 0 descriptor?? [ 889.252448][T24131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 889.287377][ T27] usb-storage 2-1:0.20: USB Mass Storage device detected [ 889.317938][ T27] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 889.347841][T24146] loop5: detected capacity change from 0 to 512 [ 889.381614][T24146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 889.541729][ T27] scsi host1: usb-storage 2-1:0.20 [ 889.554205][T24133] loop0: detected capacity change from 0 to 32768 [ 889.571465][T24133] XFS (loop0): Invalid device [./bus], error=-15 [ 889.591559][T18415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.636383][ T5801] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 889.817522][ T5842] usb 2-1: USB disconnect, device number 82 [ 890.493332][T24152] loop4: detected capacity change from 0 to 32768 [ 890.546537][T24166] netlink: zone id is out of range [ 890.628888][T24166] netlink: get zone limit has 8 unknown bytes [ 890.850747][T24174] loop1: detected capacity change from 0 to 512 [ 890.864811][T24173] loop4: detected capacity change from 0 to 1024 [ 890.880702][T24174] EXT4-fs: Ignoring removed bh option [ 890.928011][T24174] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 890.948196][T24174] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 890.997373][T24174] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 891.094758][T24174] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 891.140201][T24174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.174769][T19154] hfsplus: b-tree write err: -5, ino 4 [ 891.217297][T24174] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #12: block 32: comm syz.1.7813: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 891.337454][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7817'. [ 891.465455][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.594305][T24190] loop4: detected capacity change from 0 to 512 [ 891.631116][T24190] ext4: Unknown parameter '.' [ 891.818083][T24200] loop5: detected capacity change from 0 to 128 [ 892.406474][T24219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7834'. [ 892.645627][T24228] loop5: detected capacity change from 0 to 1024 [ 892.663005][ T28] audit: type=1326 audit(2000002838.137:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 892.705683][T24229] loop1: detected capacity change from 0 to 1024 [ 892.736888][ T28] audit: type=1326 audit(2000002838.156:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 892.783569][T24228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.788367][ T28] audit: type=1326 audit(2000002838.175:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 892.818885][ T28] audit: type=1326 audit(2000002838.240:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 892.842890][ T28] audit: type=1326 audit(2000002838.240:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.4.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 893.046813][T18415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.284791][T24246] Cannot find del_set index 4 as target [ 893.542629][T24258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7851'. [ 893.762775][T24266] binder: 24265:24266 ioctl c00c620f 0 returned -14 [ 893.888830][T24268] loop1: detected capacity change from 0 to 1024 [ 894.414441][T24288] netlink: 'syz.1.7867': attribute type 1 has an invalid length. [ 894.897087][T24305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7875'. [ 895.150071][T24316] loop0: detected capacity change from 0 to 256 [ 895.275844][T24316] FAT-fs (loop0): Directory bread(block 64) failed [ 895.306972][T24316] FAT-fs (loop0): Directory bread(block 65) failed [ 895.313697][T24316] FAT-fs (loop0): Directory bread(block 66) failed [ 895.370157][T24316] FAT-fs (loop0): Directory bread(block 67) failed [ 895.402880][T24316] FAT-fs (loop0): Directory bread(block 68) failed [ 895.409499][T24316] FAT-fs (loop0): Directory bread(block 69) failed [ 895.458270][T24316] FAT-fs (loop0): Directory bread(block 70) failed [ 895.464884][T24316] FAT-fs (loop0): Directory bread(block 71) failed [ 895.488576][T24327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7887'. [ 895.508365][T24316] FAT-fs (loop0): Directory bread(block 72) failed [ 895.527228][T24316] FAT-fs (loop0): Directory bread(block 73) failed [ 895.961317][T24342] xt_TCPMSS: Only works on TCP SYN packets [ 896.129683][T24347] loop5: detected capacity change from 0 to 64 [ 896.181649][T24347] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop5 [ 896.207387][T24351] syz.1.7897: attempt to access beyond end of device [ 896.207387][T24351] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 896.258431][T24351] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 896.676046][T15175] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 896.908879][T15175] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.930131][T15175] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 896.943145][T15175] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 896.952716][T15175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.982488][T15175] usb 1-1: config 0 descriptor?? [ 897.147339][T24382] loop1: detected capacity change from 0 to 1024 [ 897.249743][T24382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.275409][T24388] loop5: detected capacity change from 0 to 128 [ 897.334298][T24388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 897.356457][T24388] ext4 filesystem being mounted at /591/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 897.384294][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.405398][T24388] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 897.459409][T18415] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 897.479418][T15175] Bluetooth: Can't get state to change to load configuration err [ 897.524516][T15175] Bluetooth: Loading sysconfig file failed [ 897.530454][T15175] ath3k: probe of 1-1:0.0 failed with error -16 [ 897.580555][T15175] usb 1-1: USB disconnect, device number 84 [ 898.177182][T24413] loop4: detected capacity change from 0 to 256 [ 898.250978][T24415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7925'. [ 898.268896][T24415] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7925'. [ 898.576544][T24425] loop5: detected capacity change from 0 to 1024 [ 898.586792][T24427] loop1: detected capacity change from 0 to 256 [ 898.703571][ T11] hfsplus: b-tree write err: -5, ino 4 [ 898.709799][T24427] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 899.090962][T24443] ip6t_srh: unknown srh match flags 4001 [ 899.217335][T24447] loop4: detected capacity change from 0 to 256 [ 899.423945][T24453] netlink: 'syz.5.7944': attribute type 16 has an invalid length. [ 899.466539][T24453] netlink: 'syz.5.7944': attribute type 17 has an invalid length. [ 899.634462][T24457] netlink: 'syz.0.7946': attribute type 2 has an invalid length. [ 899.649261][T24457] netlink: 'syz.0.7946': attribute type 8 has an invalid length. [ 899.682757][T24457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7946'. [ 899.790989][T24461] loop5: detected capacity change from 0 to 4096 [ 899.830278][T24461] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 899.915104][T24469] overlayfs: missing 'lowerdir' [ 899.982239][T24461] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 900.023856][T24461] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 900.258883][T19154] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 900.266150][T18415] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 900.296910][T18415] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 900.316058][T18415] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 900.358473][T19154] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 900.544496][T24486] tmpfs: Bad value for 'mpol' [ 900.906038][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7968'. [ 900.924147][T24497] loop1: detected capacity change from 0 to 2048 [ 900.950301][T24497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.853504][T24532] loop5: detected capacity change from 0 to 2048 [ 901.901261][T24532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.317377][T24548] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 902.513969][T15175] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 902.617612][T24558] loop0: detected capacity change from 0 to 1024 [ 902.646206][T24560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7997'. [ 902.674440][T24558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 902.744144][T24558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.759582][T15175] usb 5-1: Using ep0 maxpacket: 16 [ 902.772932][T15175] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 902.781099][T15175] usb 5-1: config 0 has no interface number 0 [ 902.798725][T15175] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 902.800938][T24558] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.7996: bad entry in directory: inode out of bounds - offset=44, inode=196620, rec_len=16, size=1024 fake=0 [ 902.823891][T15175] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 902.861532][T24558] EXT4-fs (loop0): Remounting filesystem read-only [ 902.877802][T15175] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 902.887515][T15175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.950678][T15175] usb 5-1: Product: syz [ 902.957359][T15175] usb 5-1: Manufacturer: syz [ 902.962029][T15175] usb 5-1: SerialNumber: syz [ 902.995799][T15175] usb 5-1: config 0 descriptor?? [ 903.021674][T15175] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 903.040047][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.241067][T15175] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 903.428854][T24584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8007'. [ 903.450559][T12893] usb 5-1: USB disconnect, device number 17 [ 903.487871][T12893] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 903.516129][T12893] cypress_m8 5-1:0.35: device disconnected [ 903.710226][T24589] loop5: detected capacity change from 0 to 2048 [ 903.757570][T24589] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 903.784889][T24589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.206645][T24581] loop1: detected capacity change from 0 to 32768 [ 904.435662][T24604] loop0: detected capacity change from 0 to 2048 [ 904.497363][T24604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.743782][T24614] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8022'. [ 905.016405][T12893] IPVS: starting estimator thread 0... [ 905.149995][T24623] IPVS: using max 17 ests per chain, 40800 per kthread [ 905.538320][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8034'. [ 905.572465][T12893] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 905.643085][T24643] loop5: detected capacity change from 0 to 256 [ 905.704209][T24643] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 905.706103][T24645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8037'. [ 905.791782][T12893] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 905.828961][T12893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.851906][T12893] usb 2-1: config 0 descriptor?? [ 905.888987][T12893] usb 2-1: selecting invalid altsetting 3 [ 905.896227][T12893] comedi comedi5: could not set alternate setting 3 in high speed [ 905.914554][T12893] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 905.955619][T12893] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 905.967667][T24633] loop0: detected capacity change from 0 to 32768 [ 906.018418][T24633] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.8031 (24633) [ 906.052794][T24649] netlink: 'syz.5.8039': attribute type 1 has an invalid length. [ 906.077305][T24633] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 906.088812][T24633] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 906.099888][T24633] BTRFS info (device loop0): setting nodatacow, compression disabled [ 906.108430][T24633] BTRFS info (device loop0): enabling ssd optimizations [ 906.115685][T24633] BTRFS info (device loop0): setting datacow [ 906.122425][T24633] BTRFS info (device loop0): doing ref verification [ 906.151836][ T27] usb 2-1: USB disconnect, device number 83 [ 906.177701][T24633] BTRFS info (device loop0): force clearing of disk cache [ 906.204655][T24633] BTRFS info (device loop0): turning off barriers [ 906.217825][T24633] BTRFS info (device loop0): using spread ssd allocation scheme [ 906.236484][T24651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8040'. [ 906.266890][T24633] BTRFS info (device loop0): using free space tree [ 906.418616][T24633] BTRFS info (device loop0): auto enabling async discard [ 906.429203][T24670] !: renamed from dummy0 (while UP) [ 906.494034][T24633] BTRFS info (device loop0): rebuilding free space tree [ 906.844329][ T5784] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 907.854697][T24713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8061'. [ 908.275482][ T28] audit: type=1400 audit(2000002852.726:223): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=24722 comm="syz.4.8067" [ 908.580895][T24738] veth0_macvtap: entered promiscuous mode [ 909.846669][ T28] audit: type=1326 audit(2000002854.213:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24776 comm="syz.1.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 909.924469][ T28] audit: type=1326 audit(2000002854.231:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24776 comm="syz.1.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 909.978035][ T28] audit: type=1326 audit(2000002854.250:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24776 comm="syz.1.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 910.063626][ T28] audit: type=1326 audit(2000002854.250:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24776 comm="syz.1.8093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 910.235490][T24765] loop4: detected capacity change from 0 to 32768 [ 910.325957][T24763] loop0: detected capacity change from 0 to 32768 [ 910.334206][T24763] XFS: noikeep mount option is deprecated. [ 910.355657][T24765] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 910.388474][T24763] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 910.565653][T24763] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 910.656399][T12888] ocfs2: Unmounting device (7,4) on (node local) [ 910.684773][T24763] XFS (loop0): Starting recovery (logdev: internal) [ 910.802547][T24763] XFS (loop0): Ending recovery (logdev: internal) [ 910.840573][T24763] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 910.888361][T24763] XFS (loop0): Failed to initialize disk quotas. [ 910.963318][T24763] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 911.069113][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 911.486589][T24819] xt_bpf: check failed: parse error [ 911.570134][T24821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.404271][T24825] loop1: detected capacity change from 0 to 32768 [ 912.475342][T24852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.489115][T24845] loop5: detected capacity change from 0 to 4096 [ 912.501718][T24845] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 912.544020][T24825] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 912.659083][T24845] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 912.798560][T24845] ntfs3: loop5: failed to convert "c46c" to iso8859-7 [ 912.827505][ T5796] ocfs2: Unmounting device (7,1) on (node local) [ 912.879608][T24862] sp0: Synchronizing with TNC [ 913.241478][T24870] loop5: detected capacity change from 0 to 256 [ 913.284333][T24876] loop1: detected capacity change from 0 to 128 [ 913.369594][T24876] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 913.403241][T24870] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 913.431080][T24876] ext4 filesystem being mounted at /2032/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 913.534355][T24882] loop0: detected capacity change from 0 to 64 [ 913.652588][T24882] Trying to free block not in datazone [ 913.723528][ T5796] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 914.801285][T24926] netlink: 'syz.4.8152': attribute type 3 has an invalid length. [ 914.809362][T24926] netlink: 'syz.4.8152': attribute type 3 has an invalid length. [ 914.843621][T24926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8152'. [ 915.059584][T24936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.079238][T24937] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 915.322530][T24943] loop4: detected capacity change from 0 to 1024 [ 915.419510][T24943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 915.427464][T24945] bond1: entered promiscuous mode [ 915.437434][T24945] bond1: entered allmulticast mode [ 915.444538][T24945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.485736][T24943] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 915.557620][T24943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.637079][T24943] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.8160: missing EA_INODE flag [ 915.667025][T24943] EXT4-fs (loop4): Remounting filesystem read-only [ 915.786663][T12888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.015643][T24961] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 916.041341][T24961] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 916.171875][T24948] loop1: detected capacity change from 0 to 32768 [ 916.231632][T24948] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 916.231632][T24948] [ 916.243129][T24948] ialloc: diAlloc returned -5! [ 916.268682][T24967] loop5: detected capacity change from 0 to 64 [ 917.557292][T25006] loop4: detected capacity change from 0 to 164 [ 918.103008][T25018] loop4: detected capacity change from 0 to 4096 [ 918.165707][T24997] loop1: detected capacity change from 0 to 32768 [ 918.228769][T25024] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.259769][T24997] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 918.259769][T24997] [ 918.297128][T24997] ERROR: (device loop1): remounting filesystem as read-only [ 918.310124][T24997] xtLookup: xtSearch returned -5 [ 918.569468][T25030] loop5: detected capacity change from 0 to 256 [ 918.645271][T25030] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 919.046386][T25044] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8208'. [ 919.348849][T25050] loop5: detected capacity change from 0 to 1024 [ 919.443576][T25050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.701356][T18415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.099403][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 920.108555][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 920.531443][T25076] syz.1.8221: attempt to access beyond end of device [ 920.531443][T25076] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 921.465078][T25084] loop1: detected capacity change from 0 to 32768 [ 921.628083][T25110] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 921.679404][T25115] loop5: detected capacity change from 0 to 764 [ 921.681577][T25110] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 921.702509][T25115] rock: directory entry would overflow storage [ 921.719756][T25115] rock: sig=0x4654, size=5, remaining=4 [ 921.776092][T25115] isofs: Unable to find the ".." directory for NFS. [ 922.192768][T25125] usb usb1: usbfs: process 25125 (syz.1.8246) did not claim interface 0 before use [ 922.239157][T25127] binder: BC_ATTEMPT_ACQUIRE not supported [ 922.248410][T25127] binder: 25126:25127 ioctl c0306201 200000000280 returned -22 [ 922.720323][T25143] ufs: You didn't specify the type of your ufs filesystem [ 922.720323][T25143] [ 922.720323][T25143] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 922.720323][T25143] [ 922.720323][T25143] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 922.752566][T25143] ufs: ufstype=old is supported read-only [ 922.761940][T25143] syz.4.8255: attempt to access beyond end of device [ 922.761940][T25143] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 922.921397][T25148] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 922.949945][ T5842] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 922.961038][T25148] CIFS mount error: No usable UNC path provided in device string! [ 922.961038][T25148] [ 922.966867][T25149] loop4: detected capacity change from 0 to 2048 [ 922.983460][T25149] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 922.986884][T25148] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 923.018038][T25151] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 923.023243][T25152] loop1: detected capacity change from 0 to 64 [ 923.173759][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 923.189533][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.233180][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.265083][ T5842] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 923.300579][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.354334][ T5842] usb 1-1: config 0 descriptor?? [ 923.359561][T25157] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 923.362841][ T5842] hub 1-1:0.0: USB hub found [ 923.409419][T25157] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 923.579819][T25162] loop4: detected capacity change from 0 to 512 [ 923.597765][ T5842] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 923.626736][T25162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 923.671592][T25162] EXT4-fs (loop4): 1 truncate cleaned up [ 923.706714][T25162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.824604][T12888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.830485][ T5842] usbhid 1-1:0.0: can't add hid device: -71 [ 923.839922][ T5842] usbhid: probe of 1-1:0.0 failed with error -71 [ 923.902083][ T5842] usb 1-1: USB disconnect, device number 85 [ 924.128606][T25177] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8270'. [ 924.138415][T25177] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 924.424146][T25185] loop1: detected capacity change from 0 to 256 [ 924.436108][T25185] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 924.469669][T25185] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 924.525121][T25185] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 925.014297][ T28] audit: type=1326 audit(2000002868.389:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.0.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 925.066448][ T28] audit: type=1326 audit(2000002868.389:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.0.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 925.153110][ T28] audit: type=1326 audit(2000002868.408:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.0.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 925.210603][T25183] loop4: detected capacity change from 0 to 32768 [ 925.217688][ T28] audit: type=1326 audit(2000002868.408:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.0.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 925.270727][ T28] audit: type=1326 audit(2000002868.408:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25199 comm="syz.0.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 925.298216][T25183] (syz.4.8273,25183,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 925.306074][T25205] loop0: detected capacity change from 0 to 512 [ 925.334618][T25183] (syz.4.8273,25183,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 925.348906][T25207] loop1: detected capacity change from 0 to 16 [ 925.375880][T25205] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 925.387855][T25207] erofs: (device loop1): mounted with root inode @ nid 36. [ 925.418507][T25207] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 925.460048][T25207] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 925.471530][T25205] EXT4-fs (loop0): 1 truncate cleaned up [ 925.518315][T25205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.532399][T25183] JBD2: Ignoring recovery information on journal [ 925.618625][T25183] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 925.784484][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.004156][T12888] ocfs2: Unmounting device (7,4) on (node local) [ 926.086598][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8293'. [ 926.437634][T25235] loop0: detected capacity change from 0 to 256 [ 926.515046][T25235] FAT-fs (loop0): Directory bread(block 64) failed [ 926.537858][T25235] FAT-fs (loop0): Directory bread(block 65) failed [ 926.558681][T25235] FAT-fs (loop0): Directory bread(block 66) failed [ 926.582170][T25235] FAT-fs (loop0): Directory bread(block 67) failed [ 926.606645][T25235] FAT-fs (loop0): Directory bread(block 68) failed [ 926.613261][T25235] FAT-fs (loop0): Directory bread(block 69) failed [ 926.643607][T25235] FAT-fs (loop0): Directory bread(block 70) failed [ 926.664072][ T5842] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 926.673176][T25241] tmpfs: Bad value for 'mpol' [ 926.680981][T25235] FAT-fs (loop0): Directory bread(block 71) failed [ 926.705151][T25235] FAT-fs (loop0): Directory bread(block 72) failed [ 926.711890][T25235] FAT-fs (loop0): Directory bread(block 73) failed [ 926.845066][T25247] loop4: detected capacity change from 0 to 512 [ 926.884746][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 926.892525][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.914701][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.932846][ T5842] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 926.982662][T25247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.006321][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.066222][T25247] ext4 filesystem being mounted at /1319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.082268][ T5842] usb 2-1: config 0 descriptor?? [ 927.132602][ T5842] hub 2-1:0.0: USB hub found [ 927.196923][T25258] __vm_enough_memory: pid: 25258, comm: syz.5.8308, not enough memory for the allocation [ 927.382802][ T5842] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 927.415500][T12888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.587517][T25268] loop0: detected capacity change from 0 to 8 [ 927.620174][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 927.655260][ T5842] usbhid: probe of 2-1:0.0 failed with error -71 [ 927.721595][ T5842] usb 2-1: USB disconnect, device number 84 [ 927.797358][ T28] audit: type=1800 audit(2000002870.999:233): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8313" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 927.924538][T25276] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 928.038360][ T28] audit: type=1326 audit(2000002871.223:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25278 comm="syz.0.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 928.078166][ T28] audit: type=1326 audit(2000002871.223:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25278 comm="syz.0.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 928.155317][ T28] audit: type=1326 audit(2000002871.270:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25278 comm="syz.0.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 928.248440][ T28] audit: type=1326 audit(2000002871.270:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25278 comm="syz.0.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 928.271109][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.067606][T25314] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 929.159701][T25316] program syz.1.8336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.291015][T25320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8338'. [ 929.467189][T25326] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8341'. [ 930.421810][T25362] loop1: detected capacity change from 0 to 1024 [ 930.450969][T25362] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 930.477826][T25362] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 930.487681][T25362] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 930.536481][T25362] EXT4-fs error (device loop1): ext4_get_journal_inode:5805: inode #5: comm syz.1.8358: unexpected bad inode w/o EXT4_IGET_BAD [ 930.581465][T25362] EXT4-fs (loop1): no journal found [ 930.605964][T25362] EXT4-fs (loop1): can't get journal size [ 930.681176][T25362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 930.898042][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.394385][T25363] loop5: detected capacity change from 0 to 40427 [ 931.410301][T25363] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 931.419441][T25363] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 931.472068][T25363] F2FS-fs (loop5): invalid crc value [ 931.546395][T25363] F2FS-fs (loop5): Found nat_bits in checkpoint [ 931.729540][T25363] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 931.736772][T25363] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 932.111926][T25381] loop4: detected capacity change from 0 to 32768 [ 932.184444][T25381] (syz.4.8368,25381,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 932.213501][T25381] (syz.4.8368,25381,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 932.257523][T25381] JBD2: Ignoring recovery information on journal [ 932.380731][T25381] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 932.671947][T12888] ocfs2: Unmounting device (7,4) on (node local) [ 933.393552][T25436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.426316][T25436] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 933.440818][T25436] bond0: (slave gre0): Error -95 calling set_mac_address [ 933.450278][T25439] loop4: detected capacity change from 0 to 1024 [ 933.457838][T25439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 933.472399][T25439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 933.561193][T25439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.712021][T25439] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.4.8393: corrupted in-inode xattr: bad e_name length [ 933.766611][T25439] EXT4-fs (loop4): Remounting filesystem read-only [ 933.990820][T12888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.519790][T25476] netlink: zone id is out of range [ 934.525153][T25476] netlink: zone id is out of range [ 934.561272][T25476] netlink: zone id is out of range [ 934.591683][T25476] netlink: zone id is out of range [ 934.608427][T25476] netlink: zone id is out of range [ 934.626606][T25476] netlink: zone id is out of range [ 934.643043][T25476] netlink: zone id is out of range [ 934.658589][T25476] netlink: zone id is out of range [ 934.701273][T25476] netlink: zone id is out of range [ 934.733311][T25476] netlink: zone id is out of range [ 934.828068][T25486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8410'. [ 934.976319][T25489] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8411'. [ 935.183740][T25460] loop1: detected capacity change from 0 to 32768 [ 935.212274][T25460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8400 (25460) [ 935.275530][T25460] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 935.308080][T25460] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 935.335611][T25460] BTRFS info (device loop1): force clearing of disk cache [ 935.360353][T25460] BTRFS info (device loop1): turning on sync discard [ 935.396553][T25460] BTRFS info (device loop1): force zlib compression, level 3 [ 935.404026][T25460] BTRFS info (device loop1): turning off discard [ 935.438026][T25460] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 935.457990][T25460] BTRFS info (device loop1): use zstd compression, level 3 [ 935.466654][T25460] BTRFS info (device loop1): turning on async discard [ 935.478574][T25460] BTRFS info (device loop1): using free space tree [ 935.501943][ T5787] Bluetooth: hci2: unexpected event 0x08 length: 17 > 4 [ 935.792179][T25460] BTRFS info (device loop1): enabling ssd optimizations [ 935.916098][T25529] netlink: 'syz.4.8418': attribute type 63 has an invalid length. [ 935.927376][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 935.927394][ T28] audit: type=1326 audit(2000002878.601:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.5.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 936.032307][ T28] audit: type=1326 audit(2000002878.601:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.5.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 936.111784][ T28] audit: type=1326 audit(2000002878.639:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.5.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 936.208470][ T28] audit: type=1326 audit(2000002878.639:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.5.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 936.232126][ T5796] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 936.299113][ T28] audit: type=1326 audit(2000002878.639:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.5.8419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e218e929 code=0x7ffc0000 [ 937.484818][T25570] loop4: detected capacity change from 0 to 64 [ 938.066587][T25587] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 938.102491][T25587] bond0: (slave gre0): Error -95 calling set_mac_address [ 938.359567][T25591] loop4: detected capacity change from 0 to 2048 [ 938.446464][T25591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 938.446721][T25559] loop0: detected capacity change from 0 to 32768 [ 938.702279][T25559] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 938.973382][T25608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8447'. [ 939.122799][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 939.533133][T25623] loop0: detected capacity change from 0 to 128 [ 939.596548][T25623] FAT-fs (loop0): error, invalid access to FAT (entry 0x0005ffff) [ 939.641695][T25623] FAT-fs (loop0): Filesystem has been set read-only [ 939.715198][T25626] loop5: detected capacity change from 0 to 512 [ 939.823634][T25626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 939.831789][T25626] System zones: 1-12 [ 939.897669][T25626] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.8456: Directory hole found for htree index block 0 [ 939.961098][T25626] EXT4-fs (loop5): Remounting filesystem read-only [ 939.978867][T25626] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 940.006049][T25626] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 940.017107][T25626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.230816][T18415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.248238][T25638] loop4: detected capacity change from 0 to 4096 [ 940.488866][T25651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8466'. [ 940.632910][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8469'. [ 941.265441][T25680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8479'. [ 941.320900][ T55] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 941.526566][ T55] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 941.562220][ T55] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 941.598476][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.606628][T25690] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 941.637139][T25691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8485'. [ 941.644244][ T55] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 941.825395][T25698] netlink: 'syz.0.8489': attribute type 1 has an invalid length. [ 941.964123][T25703] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 942.537288][T25719] loop0: detected capacity change from 0 to 4096 [ 942.579527][T25719] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 942.693069][T25719] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 942.710898][T25719] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 942.769554][ T55] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 942.966175][T25732] loop0: detected capacity change from 0 to 64 [ 943.008978][ T55] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 943.041276][ T55] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 943.073801][ T55] usb 6-1: USB disconnect, device number 11 [ 943.194244][T25733] loop4: detected capacity change from 0 to 4096 [ 943.284063][T25733] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 944.124271][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8523'. [ 944.180327][T25766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8523'. [ 944.229134][T25766] netlink: 'syz.4.8523': attribute type 1 has an invalid length. [ 944.256163][ T28] audit: type=1326 audit(2000002886.391:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25769 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 944.305337][ T28] audit: type=1326 audit(2000002886.391:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25769 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 944.327716][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.386414][ T28] audit: type=1326 audit(2000002886.391:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25769 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 944.465180][ T28] audit: type=1326 audit(2000002886.391:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25769 comm="syz.0.8532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55998e929 code=0x7ffc0000 [ 944.487639][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.547284][T25777] loop4: detected capacity change from 0 to 256 [ 944.604743][T25777] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 944.646778][T25777] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 945.110482][ T28] audit: type=1326 audit(2000002887.186:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.1.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 945.187350][ T28] audit: type=1326 audit(2000002887.186:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.1.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 945.210148][T25770] loop5: detected capacity change from 0 to 32768 [ 945.222752][T25793] loop4: detected capacity change from 0 to 256 [ 945.292329][T25793] exfat: Deprecated parameter 'namecase' [ 945.340450][T25770] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 945.354464][ T28] audit: type=1326 audit(2000002887.214:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.1.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 945.376758][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.460998][T25793] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 945.483523][ T28] audit: type=1326 audit(2000002887.214:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.1.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 945.582179][ T28] audit: type=1326 audit(2000002887.214:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25790 comm="syz.1.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd680f8e929 code=0x7ffc0000 [ 945.824928][T18415] ocfs2: Unmounting device (7,5) on (node local) [ 945.866634][T25810] loop1: detected capacity change from 0 to 512 [ 945.886867][T25810] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 945.910191][T25812] loop4: detected capacity change from 0 to 8 [ 945.928292][T25810] EXT4-fs (loop1): invalid journal inode [ 945.962138][T25810] EXT4-fs (loop1): can't get journal size [ 945.995858][T25810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 946.015676][T25810] System zones: 1-12, 13-13 [ 946.031166][T25812] SQUASHFS error: lzo decompression failed, data probably corrupt [ 946.044290][T25810] EXT4-fs (loop1): 1 truncate cleaned up [ 946.050310][T25812] SQUASHFS error: Failed to read block 0x1c0: -5 [ 946.051880][T25810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.056679][T25812] SQUASHFS error: Unable to read metadata cache entry [1be] [ 946.392710][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.428478][T25822] tc_dump_action: action bad kind [ 946.932714][T25844] loop4: detected capacity change from 0 to 512 [ 946.947980][T25844] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 946.977672][T25844] EXT4-fs (loop4): invalid journal inode [ 946.990502][T25844] EXT4-fs (loop4): can't get journal size [ 947.004860][T25844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 947.013447][T25844] System zones: 1-12, 13-13 [ 947.029112][T25844] EXT4-fs (loop4): 1 truncate cleaned up [ 947.075433][T25844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.213826][T12888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.353530][ T28] audit: type=1326 audit(2000002889.290:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25857 comm="syz.4.8561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb231f8e929 code=0x7ffc0000 [ 947.462200][T25862] binder: 25861:25862 ioctl c018620c 200000000100 returned -22 [ 947.567099][T25864] loop4: detected capacity change from 0 to 256 [ 947.574703][T25864] exfat: Deprecated parameter 'utf8' [ 947.722236][T25864] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 947.895811][T25875] loop5: detected capacity change from 0 to 128 [ 947.931259][T25875] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 948.089077][ T1248] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 948.175575][T25880] loop0: detected capacity change from 0 to 256 [ 948.191755][T25880] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 948.203060][T25880] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 948.213632][T25882] loop5: detected capacity change from 0 to 1024 [ 948.224795][T25880] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa4cc65da, utbl_chksum : 0xe619d30d) [ 948.226143][T25882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 948.299515][T25882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.325231][T25880] overlay: Unknown parameter '\' [ 948.581680][ T1248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.633219][T18415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.782063][ T1248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.948568][ T1248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.161213][ T1248] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 949.197633][ T1248] bridge0: port 4(netdevsim0) entered disabled state [ 949.247043][ T1248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.512899][T21889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 949.526142][T21889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 949.544769][T21889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 949.574009][T21889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 949.588974][T21889] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 949.601478][T21889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 951.187650][T25905] chnl_net:caif_netlink_parms(): no params data found [ 951.359671][T25930] loop1: detected capacity change from 0 to 32768 [ 951.401309][T25930] (syz.1.8595,25930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 951.445673][T25930] (syz.1.8595,25930,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 951.580619][T25930] JBD2: Ignoring recovery information on journal [ 951.647617][T25969] loop5: detected capacity change from 0 to 256 [ 951.737888][T25930] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 951.825172][T25969] FAT-fs (loop5): Directory bread(block 64) failed [ 951.831876][T25969] FAT-fs (loop5): Directory bread(block 65) failed [ 951.838646][T21889] Bluetooth: hci2: command tx timeout [ 951.847858][T25969] FAT-fs (loop5): Directory bread(block 66) failed [ 951.871810][T25969] FAT-fs (loop5): Directory bread(block 67) failed [ 951.909227][T25969] FAT-fs (loop5): Directory bread(block 68) failed [ 951.915849][T25969] FAT-fs (loop5): Directory bread(block 69) failed [ 951.933817][T25969] FAT-fs (loop5): Directory bread(block 70) failed [ 951.955400][T25969] FAT-fs (loop5): Directory bread(block 71) failed [ 951.962214][T25969] FAT-fs (loop5): Directory bread(block 72) failed [ 951.979819][T25969] FAT-fs (loop5): Directory bread(block 73) failed [ 952.128246][ T5796] ocfs2: Unmounting device (7,1) on (node local) [ 952.159065][T25966] loop0: detected capacity change from 0 to 32768 [ 952.272211][T25966] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 952.390811][T25905] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.434817][T25905] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.454725][T25905] bridge_slave_0: entered allmulticast mode [ 952.470508][T25905] bridge_slave_0: entered promiscuous mode [ 952.493515][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 952.741498][T25905] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.773522][T25905] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.780868][T25905] bridge_slave_1: entered allmulticast mode [ 952.821494][T25905] bridge_slave_1: entered promiscuous mode [ 952.858441][T25982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8612'. [ 952.867824][T25982] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8612'. [ 953.019033][T25986] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8614'. [ 953.182529][T25905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.356142][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.405203][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.423464][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.445210][ T1248] team0: left allmulticast mode [ 953.470769][ T1248] team_slave_0: left allmulticast mode [ 953.499296][ T1248] team_slave_1: left allmulticast mode [ 953.512290][ T1248] geneve1: left allmulticast mode [ 953.528364][ T1248] team0: left promiscuous mode [ 953.539207][ T1248] team_slave_0: left promiscuous mode [ 953.546387][ T1248] team_slave_1: left promiscuous mode [ 953.552661][ T1248] geneve1: left promiscuous mode [ 953.558731][ T1248] bridge0: port 3(team0) entered disabled state [ 953.585417][ T1248] bridge_slave_1: left allmulticast mode [ 953.591368][ T1248] bridge_slave_1: left promiscuous mode [ 953.599765][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.666791][ T1248] bridge_slave_0: left allmulticast mode [ 953.692281][ T1248] bridge_slave_0: left promiscuous mode [ 953.706652][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.841010][ T1248] veth1_macvtap: left promiscuous mode [ 953.847077][ T1248] veth0_vlan: left promiscuous mode [ 954.056718][T21889] Bluetooth: hci2: command tx timeout [ 954.216762][T25999] orangefs_mount: mount request failed with -4 [ 954.634080][T26036] loop0: detected capacity change from 0 to 8 [ 954.664686][T26036] SQUASHFS error: xz decompression failed, data probably corrupt [ 954.679443][T26036] SQUASHFS error: Failed to read block 0x108: -5 [ 954.686103][T26036] SQUASHFS error: Unable to read metadata cache entry [106] [ 954.702162][T26036] SQUASHFS error: Unable to read inode 0x11f [ 954.759647][ T1248] bond3 (unregistering): Released all slaves [ 954.928760][ T1248] bond2 (unregistering): Released all slaves [ 954.963009][ T1248] bond1 (unregistering): Released all slaves [ 955.019263][ T1248] team0 (unregistering): Port device geneve1 removed [ 955.091255][ T5833] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 955.330685][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 955.345708][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 955.377431][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 955.388758][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 955.402295][ T5833] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 955.411536][ T5833] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 955.419873][ T5833] usb 1-1: Manufacturer: syz [ 955.437308][ T5833] usb 1-1: config 0 descriptor?? [ 955.456463][T26036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 955.467329][ T5833] smsusb:smsusb_probe: board id=9, interface number 0 [ 955.492473][ T5833] smsusb:siano_media_device_register: media controller created [ 955.530826][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.538519][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.545925][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.553396][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.560797][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.570820][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.578179][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.585458][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.592739][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.600022][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.623198][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.630979][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.638316][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.645689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.652976][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.664377][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.671743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.679075][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.686409][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.693847][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.701873][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.709198][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.716476][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.723743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.731004][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.738767][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.746086][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.753386][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.760689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.767981][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.779202][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.786763][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.794088][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.801407][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.808719][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.816333][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.823705][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.831073][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.838413][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.845740][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.853782][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.861123][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.868440][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.875762][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.883093][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.891268][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.898754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.906103][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.913466][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.920838][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.928313][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.936224][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.943625][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.950969][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.958274][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.965606][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.972941][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.980886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.988223][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 955.995553][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.002925][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.010260][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.017586][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.025315][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.032644][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.039970][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.047293][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.054690][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.061966][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.070518][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.077924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.085284][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.092620][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.100508][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.107845][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.115884][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.123246][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.130591][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.138209][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.145550][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.152896][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.160817][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.168201][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.175541][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.182971][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.190309][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.197632][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.204937][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.213041][ T5833] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 956.221872][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.221991][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.222087][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.244451][ T5833] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 956.251997][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.259365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.266718][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.274031][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.281190][T21889] Bluetooth: hci2: command tx timeout [ 956.286734][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.294038][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.301495][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.309629][ T5833] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 956.318138][ T5833] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 956.335682][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.343043][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.350338][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 956.360797][ T5833] ------------[ cut here ]------------ [ 956.367029][ T5833] ODEBUG: free active (active state 0) object: ffff88802f9b28c8 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 956.379730][T15175] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 956.391500][T15175] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 956.399969][T15175] CPU: 1 PID: 15175 Comm: kworker/1:0 Not tainted 6.6.96-syzkaller #0 [ 956.408165][T15175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.418269][T15175] Workqueue: do_submit_urb (events) [ 956.423607][T15175] RIP: 0010:process_scheduled_works+0x5aa/0x15b0 [ 956.429979][T15175] Code: 89 ac 24 10 01 00 00 44 89 e8 c1 e8 05 83 e0 0f 89 03 48 8b 44 24 38 48 8d 58 08 48 89 d8 48 c1 e8 03 48 89 84 24 80 00 00 00 <42> 80 3c 20 00 74 08 48 89 df e8 27 95 86 00 48 89 5c 24 48 4c 8b [ 956.449782][T15175] RSP: 0018:ffffc90004d8fbc0 EFLAGS: 00010002 [ 956.455872][T15175] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000001fffffffc0 [ 956.463941][T15175] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 956.471920][T15175] RBP: ffffc90004d8fda8 R08: ffffffff97132a3b R09: 1ffffffff2e26547 [ 956.480007][T15175] R10: dffffc0000000000 R11: fffffbfff2e26548 R12: dffffc0000000000 [ 956.488008][T15175] R13: 0000001fffffffc0 R14: ffff88802f9b28d0 R15: ffff888024a99618 [ 956.495993][T15175] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 956.504953][T15175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.511661][T15175] CR2: 00007ffcf3f8dfa0 CR3: 000000005f6a8000 CR4: 00000000003506e0 [ 956.519653][T15175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 956.527635][T15175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 956.535641][T15175] Call Trace: [ 956.538929][T15175] [ 956.541889][T15175] ? assign_work+0x400/0x400 [ 956.546504][T15175] ? assign_work+0x39e/0x400 [ 956.551108][T15175] worker_thread+0xa55/0xfc0 [ 956.555976][T15175] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 956.561888][T15175] ? _raw_spin_unlock+0x40/0x40 [ 956.566753][T15175] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 956.572758][T15175] kthread+0x2fa/0x390 [ 956.576841][T15175] ? pr_cont_work+0x560/0x560 [ 956.581539][T15175] ? kthread_blkcg+0xd0/0xd0 [ 956.586139][T15175] ret_from_fork+0x48/0x80 [ 956.590664][T15175] ? kthread_blkcg+0xd0/0xd0 [ 956.595264][T15175] ret_from_fork_asm+0x11/0x20 [ 956.600058][T15175] [ 956.603092][T15175] Modules linked in: [ 956.607000][T15175] ---[ end trace 0000000000000000 ]--- [ 956.612564][T15175] RIP: 0010:process_scheduled_works+0x5aa/0x15b0 [ 956.618925][T15175] Code: 89 ac 24 10 01 00 00 44 89 e8 c1 e8 05 83 e0 0f 89 03 48 8b 44 24 38 48 8d 58 08 48 89 d8 48 c1 e8 03 48 89 84 24 80 00 00 00 <42> 80 3c 20 00 74 08 48 89 df e8 27 95 86 00 48 89 5c 24 48 4c 8b [ 956.638671][T15175] RSP: 0018:ffffc90004d8fbc0 EFLAGS: 00010002 [ 956.644754][T15175] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000001fffffffc0 [ 956.652734][T15175] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 956.660801][T15175] RBP: ffffc90004d8fda8 R08: ffffffff97132a3b R09: 1ffffffff2e26547 [ 956.668782][T15175] R10: dffffc0000000000 R11: fffffbfff2e26548 R12: dffffc0000000000 [ 956.676762][T15175] R13: 0000001fffffffc0 R14: ffff88802f9b28d0 R15: ffff888024a99618 [ 956.684743][T15175] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 956.693707][T15175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.700301][T15175] CR2: 00007ffcf3f8dfa0 CR3: 000000005f6a8000 CR4: 00000000003506e0 [ 956.708284][T15175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 956.716266][T15175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 956.724249][T15175] Kernel panic - not syncing: Fatal exception [ 956.730792][T15175] Kernel Offset: disabled [ 956.735138][T15175] Rebooting in 86400 seconds..