last executing test programs: 1.907890682s ago: executing program 3 (id=12003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="240000001d00070f000000000000000007", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.709105971s ago: executing program 3 (id=12007): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000a60000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.614198591s ago: executing program 1 (id=12008): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x5c4, &(0x7f0000000b40)="$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") readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) 1.369996735s ago: executing program 1 (id=12012): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0xd}) 1.367451485s ago: executing program 2 (id=12013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) 1.198431302s ago: executing program 1 (id=12014): timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_settime(r0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000400)) 1.091274382s ago: executing program 0 (id=12015): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 1.036307558s ago: executing program 2 (id=12016): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0xfffffffffffffffe) 967.173035ms ago: executing program 1 (id=12017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x8000) 887.218503ms ago: executing program 0 (id=12018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 847.997577ms ago: executing program 2 (id=12019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 776.230113ms ago: executing program 1 (id=12020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x1, 0x1ffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x0, 0x6, 0x0, 0x18a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 679.666013ms ago: executing program 0 (id=12021): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) 601.254311ms ago: executing program 2 (id=12022): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) ppoll(&(0x7f00000001c0), 0x1f, &(0x7f0000000000)={0x0, 0x3938700}, 0x0, 0x0) 548.360946ms ago: executing program 1 (id=12023): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 480.372723ms ago: executing program 3 (id=12024): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3b8, 0x0, 0x0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 469.929654ms ago: executing program 0 (id=12025): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x40, 0x4855}, 0x24000052) 392.313322ms ago: executing program 2 (id=12026): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000006600)={@multicast1, @empty}, 0x8) 330.596168ms ago: executing program 3 (id=12027): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d0400"}) 276.920033ms ago: executing program 0 (id=12028): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'gretap0\x00', @ifru_hwaddr=@link_local}) 176.217563ms ago: executing program 2 (id=12029): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 176.112223ms ago: executing program 3 (id=12030): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000100)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'cp863'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b3}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@file_umask={'file_umask', 0x3d, 0x2}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 106.51059ms ago: executing program 0 (id=12031): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r0, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) 0s ago: executing program 3 (id=12032): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x68}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): yz.2.9912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1218.862188][T28325] netlink: 'syz.2.9914': attribute type 2 has an invalid length. [ 1219.275832][T28333] loop1: detected capacity change from 0 to 64 [ 1219.471907][T28339] loop3: detected capacity change from 0 to 64 [ 1219.684200][T28347] tmpfs: Bad value for 'mpol' [ 1220.235764][T28365] MTD: Couldn't look up '/dev/sg0': -15 [ 1220.301087][T28369] netlink: 'syz.0.9935': attribute type 2 has an invalid length. [ 1220.449228][ T6516] Bluetooth: hci3: command 0x0c1a tx timeout [ 1220.587297][T28375] netlink: 'syz.3.9937': attribute type 10 has an invalid length. [ 1220.627499][T28375] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1220.901411][T28361] loop2: detected capacity change from 0 to 32768 [ 1220.932408][T28361] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1220.943108][T28361] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1220.967556][T28385] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 1221.040935][T28361] XFS (loop2): Ending clean mount [ 1221.051540][T28361] XFS (loop2): Quotacheck needed: Please wait. [ 1221.207867][T28361] XFS (loop2): Quotacheck: Done. [ 1221.357463][ T6517] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1221.392743][ T6638] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1221.519336][T28407] netlink: 'syz.0.9951': attribute type 32 has an invalid length. [ 1221.609608][ T6638] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1221.627967][ T6638] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1221.636661][ T6638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.670747][ T6638] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1221.679766][ T6638] usb 2-1: config 1 has no interface number 0 [ 1221.695838][ T6638] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1221.705017][ T6638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.731206][ T6638] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1221.774294][T28415] overlay: Bad value for 'verity' [ 1221.957889][ T6638] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1221.970930][ T6638] snd_usb_pod 2-1:1.1: invalid control EP [ 1221.980964][ T6638] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1221.987752][ T6638] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1222.005700][ T6638] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 1222.188808][ T6638] usb 2-1: USB disconnect, device number 42 [ 1222.456012][T28419] loop3: detected capacity change from 0 to 40427 [ 1222.515864][T28419] F2FS-fs (loop3): invalid crc value [ 1222.542890][T28419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1222.724005][T28419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1223.138771][T28445] delete_channel: no stack [ 1223.412477][T28454] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1223.672269][T28461] netlink: 'syz.1.9975': attribute type 16 has an invalid length. [ 1223.674302][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1223.680118][T28461] netlink: 'syz.1.9975': attribute type 17 has an invalid length. [ 1224.012791][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1224.243010][ T8] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1224.259104][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.283190][ T8] usb 4-1: config 0 descriptor?? [ 1224.538234][ T8] snd-usb-hiface: probe of 4-1:0.0 failed with error -22 [ 1224.692351][T28487] netlink: 'syz.2.9988': attribute type 3 has an invalid length. [ 1224.740242][T28487] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9988'. [ 1224.761669][ T6560] usb 4-1: USB disconnect, device number 48 [ 1225.010208][T28496] tmpfs: Bad value for 'mpol' [ 1225.398392][T28509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1225.686383][T28518] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1225.726146][T28518] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1225.808561][T28521] loop3: detected capacity change from 0 to 256 [ 1225.854874][T28521] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 1225.923292][ T28] audit: type=1800 audit(2000001847.490:108): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10005" name="file1" dev="loop3" ino=1048683 res=0 errno=0 [ 1226.385491][T28536] netlink: 'syz.2.10013': attribute type 27 has an invalid length. [ 1226.704676][T28523] loop1: detected capacity change from 0 to 32768 [ 1226.796450][T28523] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 1226.796450][T28523] [ 1226.835240][T28545] Process accounting resumed [ 1226.844811][T28523] jfs_create: dtInsert returned -EIO [ 1226.880946][T28523] ERROR: (device loop1): jfs_create: [ 1226.880946][T28523] [ 1227.659818][T28570] netlink: 'syz.2.10028': attribute type 25 has an invalid length. [ 1228.989018][T28590] loop2: detected capacity change from 0 to 32768 [ 1229.066739][T28590] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.161237][T28590] XFS (loop2): Ending clean mount [ 1229.182987][T28590] XFS (loop2): Quotacheck needed: Please wait. [ 1229.335702][T28590] XFS (loop2): Quotacheck: Done. [ 1229.537085][ T6517] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.788031][T28634] netlink: 'syz.0.10058': attribute type 16 has an invalid length. [ 1229.796128][T28634] netlink: 'syz.0.10058': attribute type 17 has an invalid length. [ 1229.856219][ T3443] hfsplus: b-tree write err: -5, ino 4 [ 1229.917214][T28632] loop3: detected capacity change from 0 to 32768 [ 1229.964946][T28632] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1230.178253][ T6515] (syz-executor,6515,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 1230.270905][ T6515] ocfs2: Unmounting device (7,3) on (node local) [ 1230.352455][T28648] program syz.3.10062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.641011][T28656] veth0: entered allmulticast mode [ 1231.437370][T28681] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1231.692926][T28690] xt_TCPMSS: Only works on TCP SYN packets [ 1231.785026][T28693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10084'. [ 1231.844824][T28693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10084'. [ 1231.888677][T28693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10084'. [ 1232.239103][T28713] netlink: 'syz.2.10094': attribute type 16 has an invalid length. [ 1232.279395][T28713] netlink: 'syz.2.10094': attribute type 17 has an invalid length. [ 1232.418523][ T5118] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1232.621458][ T5118] usb 4-1: Using ep0 maxpacket: 8 [ 1232.635235][ T5118] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1232.660443][ T5118] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1232.682845][ T5118] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.698750][ T5118] usb 4-1: config 4 has no interface number 0 [ 1232.716230][ T5118] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1232.749877][ T5118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.758244][ T5118] usb 4-1: Product: syz [ 1232.793518][ T5118] usb 4-1: Manufacturer: syz [ 1232.816055][ T5118] usb 4-1: SerialNumber: syz [ 1233.071307][ T6638] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1233.088132][ T5118] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 1233.098880][ T5118] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 1233.106189][ T5118] usb 4-1: No valid video chain found. [ 1233.118041][ T5118] usb 4-1: USB disconnect, device number 49 [ 1233.297247][ T6638] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1233.306638][ T6638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.316946][ T6638] usb 3-1: config 0 descriptor?? [ 1233.727368][T28740] netlink: 'syz.3.10108': attribute type 16 has an invalid length. [ 1233.738306][T28740] netlink: 'syz.3.10108': attribute type 17 has an invalid length. [ 1233.763326][ T6638] ath6kl: Failed to submit usb control message: -71 [ 1233.783680][ T6638] ath6kl: unable to send the bmi data to the device: -71 [ 1233.802808][ T6638] ath6kl: Unable to send get target info: -71 [ 1233.834713][ T6638] ath6kl: Failed to init ath6kl core: -71 [ 1233.865576][ T6638] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1233.888886][ T6638] usb 3-1: USB disconnect, device number 60 [ 1234.077624][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10111'. [ 1234.373697][T28742] loop1: detected capacity change from 0 to 32768 [ 1234.418404][T28742] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.10116 (28742) [ 1234.454910][T28742] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1234.488378][T28742] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1234.535981][T28742] BTRFS info (device loop1): force zlib compression, level 3 [ 1234.554347][T28742] BTRFS info (device loop1): force clearing of disk cache [ 1234.569523][T28742] BTRFS info (device loop1): setting nodatasum [ 1234.575795][T28742] BTRFS info (device loop1): use zlib compression, level 3 [ 1234.602067][T28742] BTRFS info (device loop1): allowing degraded mounts [ 1234.608976][T28742] BTRFS info (device loop1): enabling disk space caching [ 1234.617772][T28755] loop3: detected capacity change from 0 to 4096 [ 1234.638902][T28742] BTRFS info (device loop1): disk space caching is enabled [ 1234.786471][T28771] netlink: 'syz.2.10120': attribute type 16 has an invalid length. [ 1234.828960][T28771] netlink: 'syz.2.10120': attribute type 17 has an invalid length. [ 1234.876793][T28742] BTRFS info (device loop1): enabling ssd optimizations [ 1234.884861][T28742] BTRFS info (device loop1): auto enabling async discard [ 1234.893261][T28742] BTRFS info (device loop1): rebuilding free space tree [ 1234.909607][T28742] BTRFS info (device loop1): disabling free space tree [ 1234.917013][T28742] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1234.950493][T28742] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1235.207542][T28742] BTRFS info (device loop1): balance: start -f -susage=49..0,drange=9..0,limit=8,stripes=0..253 [ 1235.263584][T28742] BTRFS info (device loop1): balance: ended with status: 0 [ 1235.495886][ T6510] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1236.066084][T28811] loop3: detected capacity change from 0 to 16 [ 1236.119909][T28811] erofs: (device loop3): mounted with root inode @ nid 36. [ 1236.295811][T28812] loop1: detected capacity change from 0 to 4096 [ 1237.157608][T28818] loop3: detected capacity change from 0 to 32768 [ 1237.197203][T28818] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.10137 (28818) [ 1237.259100][T28818] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1237.280249][T28818] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1237.307164][T28818] BTRFS info (device loop3): force zlib compression, level 3 [ 1237.342415][T28818] BTRFS info (device loop3): force clearing of disk cache [ 1237.372174][T28818] BTRFS info (device loop3): setting nodatasum [ 1237.378396][T28818] BTRFS info (device loop3): use zlib compression, level 3 [ 1237.433378][T28818] BTRFS info (device loop3): allowing degraded mounts [ 1237.460385][T28818] BTRFS info (device loop3): enabling disk space caching [ 1237.488738][T28818] BTRFS info (device loop3): disk space caching is enabled [ 1237.697710][T28860] loop2: detected capacity change from 0 to 1024 [ 1237.744163][T28818] BTRFS info (device loop3): enabling ssd optimizations [ 1237.751187][T28818] BTRFS info (device loop3): auto enabling async discard [ 1237.814059][T28818] BTRFS info (device loop3): rebuilding free space tree [ 1237.821961][T26073] hfsplus: b-tree write err: -5, ino 4 [ 1237.857400][T28818] BTRFS info (device loop3): disabling free space tree [ 1237.872515][T28818] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1237.895388][T28818] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1237.991375][T28866] loop2: detected capacity change from 0 to 764 [ 1238.032154][T28868] binder: 28867:28868 ioctl c00c6211 ffffffffffffffff returned -14 [ 1238.047333][T28866] Symlink component flag not implemented [ 1238.066783][T28866] Symlink component flag not implemented (101) [ 1238.143124][T28818] BTRFS info (device loop3): balance: start -f -susage=49..0,drange=9..0,limit=8,stripes=0..253 [ 1238.193512][T28818] BTRFS info (device loop3): balance: ended with status: 0 [ 1238.343260][T28872] xt_TCPMSS: Only works on TCP SYN packets [ 1238.423483][ T6515] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1239.003531][T28882] ip6tnl2: entered allmulticast mode [ 1239.310334][T28895] binder: 28894:28895 ioctl c018620c 200000000380 returned -22 [ 1239.989435][T28893] loop1: detected capacity change from 0 to 32768 [ 1240.018953][T28897] loop2: detected capacity change from 0 to 32768 [ 1240.039466][T28897] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.10167 (28897) [ 1240.066696][T28897] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1240.099199][T28897] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1240.108927][T28897] BTRFS info (device loop2): force zlib compression, level 3 [ 1240.116499][T28897] BTRFS info (device loop2): force clearing of disk cache [ 1240.124434][T28897] BTRFS info (device loop2): setting nodatasum [ 1240.131213][T28897] BTRFS info (device loop2): use zlib compression, level 3 [ 1240.138465][T28897] BTRFS info (device loop2): allowing degraded mounts [ 1240.145523][T28897] BTRFS info (device loop2): enabling disk space caching [ 1240.146553][T28893] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1240.152689][T28897] BTRFS info (device loop2): disk space caching is enabled [ 1240.406515][T28897] BTRFS info (device loop2): enabling ssd optimizations [ 1240.432383][T28897] BTRFS info (device loop2): auto enabling async discard [ 1240.442227][T28897] BTRFS info (device loop2): rebuilding free space tree [ 1240.489548][T28897] BTRFS info (device loop2): disabling free space tree [ 1240.489721][ T6510] ocfs2: Unmounting device (7,1) on (node local) [ 1240.502989][T28897] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1240.503019][T28897] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1240.591253][T28930] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1240.773697][T28897] BTRFS info (device loop2): balance: start -f -susage=49..0,drange=9..0,limit=8,stripes=0..253 [ 1240.828369][T28897] BTRFS info (device loop2): balance: ended with status: 0 [ 1240.892069][T28937] geneve2: entered promiscuous mode [ 1240.945462][ T6517] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1241.381493][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10183'. [ 1241.607765][T28954] netlink: 208 bytes leftover after parsing attributes in process `syz.1.10187'. [ 1242.298449][T28979] loop2: detected capacity change from 0 to 1024 [ 1242.445206][T28979] syz.2.10196: attempt to access beyond end of device [ 1242.445206][T28979] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1242.492937][T28979] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 1242.501771][T28979] syz.2.10196: attempt to access beyond end of device [ 1242.501771][T28979] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1242.532523][T28979] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 1242.975986][T28996] loop1: detected capacity change from 0 to 1024 [ 1243.143971][T28974] loop3: detected capacity change from 0 to 32768 [ 1243.223986][T28974] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1243.384436][T28974] XFS (loop3): Ending clean mount [ 1243.425836][T28974] XFS (loop3): Quotacheck needed: Please wait. [ 1243.565854][T28974] XFS (loop3): Quotacheck: Done. [ 1243.812512][ T6515] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1244.684455][T20620] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1244.788926][T29058] loop3: detected capacity change from 0 to 1024 [ 1244.898217][T20620] usb 1-1: Using ep0 maxpacket: 32 [ 1244.908048][T20620] usb 1-1: config 0 has an invalid interface number: 66 but max is 1 [ 1244.913492][T26073] hfsplus: b-tree write err: -5, ino 4 [ 1244.940720][T20620] usb 1-1: config 0 has no interface number 1 [ 1244.961615][T20620] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1245.000266][T20620] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1245.029719][T20620] usb 1-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 1245.066193][T20620] usb 1-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 1245.095306][T20620] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1245.109756][T20620] usb 1-1: config 0 interface 66 has no altsetting 0 [ 1245.121554][T20620] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1245.164856][T20620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1245.181665][T20620] usb 1-1: SerialNumber: syz [ 1245.194689][T20620] usb 1-1: config 0 descriptor?? [ 1245.207660][T20620] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1245.228209][T20620] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1245.433625][T20620] usb-storage 1-1:0.66: USB Mass Storage device detected [ 1245.455733][T20620] usb-storage 1-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 1245.530028][T20620] usb 1-1: USB disconnect, device number 62 [ 1245.669690][T29088] loop2: detected capacity change from 0 to 1024 [ 1245.794622][ T3443] hfsplus: b-tree write err: -5, ino 4 [ 1245.807000][T29093] loop1: detected capacity change from 0 to 512 [ 1245.831155][T29093] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1245.869819][T29093] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1245.931984][T29093] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1245.935907][T29094] loop3: detected capacity change from 0 to 8192 [ 1245.981356][T29094] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1246.006228][T29093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.073873][T29094] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1246.115651][T29094] FAT-fs (loop3): Filesystem has been set read-only [ 1246.152749][T29093] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1246.306124][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.480484][T29107] cgroup: name respecified [ 1246.876289][T29120] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1248.239144][T29166] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1248.789404][T29187] netlink: 'syz.1.10290': attribute type 10 has an invalid length. [ 1248.821203][T29187] bridge0: port 3(team0) entered blocking state [ 1248.841071][T29187] bridge0: port 3(team0) entered disabled state [ 1248.854551][T29187] team0: entered allmulticast mode [ 1248.879577][T29187] team_slave_0: entered allmulticast mode [ 1248.895695][T29187] team_slave_1: entered allmulticast mode [ 1248.909686][T29187] team0: entered promiscuous mode [ 1248.914865][T29187] team_slave_0: entered promiscuous mode [ 1248.921542][T29187] team_slave_1: entered promiscuous mode [ 1248.931422][T29187] bridge0: port 3(team0) entered blocking state [ 1248.937882][T29187] bridge0: port 3(team0) entered forwarding state [ 1249.129481][T29176] loop2: detected capacity change from 0 to 32768 [ 1249.151869][T29176] (syz.2.10284,29176,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1249.186953][T29176] (syz.2.10284,29176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1249.283147][T29176] JBD2: Ignoring recovery information on journal [ 1249.435977][T29176] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1249.482503][ T1135] ocfs2: Finishing quota recovery on device (7,2) for slot 0 [ 1249.590358][ T6517] ocfs2: Unmounting device (7,2) on (node local) [ 1249.595050][T29210] netlink: 'syz.3.10301': attribute type 2 has an invalid length. [ 1249.915643][T29220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1249.935626][T29220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1249.944749][T29220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1250.000089][T29220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1250.129853][T29224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.266154][T29228] loop2: detected capacity change from 0 to 2048 [ 1250.309499][T29228] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1250.354766][ T6731] udevd[6731]: incorrect nilfs2 checksum on /dev/loop2 [ 1250.367259][T29234] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1250.400782][T29235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1250.423191][T29235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1250.456322][T29235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1250.497289][T29228] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1250.587772][T29228] Remounting filesystem read-only [ 1250.860880][T29247] netlink: 'syz.2.10319': attribute type 1 has an invalid length. [ 1250.880522][T29247] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10319'. [ 1250.906264][T29251] program syz.3.10321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1251.285069][T29267] mmap: syz.2.10328 (29267): VmData 49221632 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 1251.376870][T29271] netlink: 'syz.1.10332': attribute type 2 has an invalid length. [ 1251.539031][T29279] netlink: 'syz.2.10335': attribute type 1 has an invalid length. [ 1252.043737][ T6562] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1252.245001][ T6562] usb 1-1: Using ep0 maxpacket: 16 [ 1252.262934][ T6562] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1252.275789][ T6562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.293661][ T6562] usb 1-1: Product: syz [ 1252.297949][ T6562] usb 1-1: Manufacturer: syz [ 1252.303283][ T6562] usb 1-1: SerialNumber: syz [ 1252.336115][T29311] netlink: 'syz.3.10352': attribute type 30 has an invalid length. [ 1252.338025][ T6562] usb 1-1: config 0 descriptor?? [ 1252.362513][ T6562] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1252.393433][ T6562] usb 1-1: Detected FT232H [ 1252.602988][ T6562] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1252.630163][ T6562] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1252.650416][ T6562] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1252.666002][ T6638] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1252.682379][ T6562] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1252.710061][ T6562] usb 1-1: USB disconnect, device number 63 [ 1252.737831][ T6562] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1252.756719][ T6562] ftdi_sio 1-1:0.0: device disconnected [ 1252.788426][T29316] loop1: detected capacity change from 0 to 32768 [ 1252.808054][T29316] JBD2: Ignoring recovery information on journal [ 1252.847894][T29316] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1252.895238][ T6638] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1252.907045][ T6638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.915284][ T6638] usb 3-1: Product: syz [ 1252.919746][ T6638] usb 3-1: Manufacturer: syz [ 1252.924369][ T6638] usb 3-1: SerialNumber: syz [ 1252.932038][ T6638] usb 3-1: config 0 descriptor?? [ 1252.940618][ T6638] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1252.993783][T20620] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1253.018047][ T6510] ocfs2: Unmounting device (7,1) on (node local) [ 1253.196834][T20620] usb 4-1: Using ep0 maxpacket: 32 [ 1253.229040][T20620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1253.242230][ T28] audit: type=1326 audit(2000001873.047:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107718efc9 code=0x7ffc0000 [ 1253.264975][T20620] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1253.276121][T20620] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.286960][T20620] usb 4-1: config 7 has no interface number 0 [ 1253.293509][ T28] audit: type=1326 audit(2000001873.047:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107718efc9 code=0x7ffc0000 [ 1253.326128][T20620] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1253.346599][T20620] usb 4-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.373343][ T28] audit: type=1326 audit(2000001873.093:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f107718efc9 code=0x7ffc0000 [ 1253.390009][ T6638] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1253.422220][T20620] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1253.424621][ T6638] sq905c 3-1:0.0: Reading version command failed [ 1253.437766][ T6638] sq905c: probe of 3-1:0.0 failed with error -71 [ 1253.447195][ T6638] usb 3-1: USB disconnect, device number 61 [ 1253.477395][T20620] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1253.486792][ T28] audit: type=1326 audit(2000001873.093:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107718efc9 code=0x7ffc0000 [ 1253.510183][T20620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.524611][T20620] usb 4-1: Product: syz [ 1253.529368][T20620] usb 4-1: Manufacturer: syz [ 1253.534662][T20620] usb 4-1: SerialNumber: syz [ 1253.539818][ T28] audit: type=1326 audit(2000001873.093:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.1.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107718efc9 code=0x7ffc0000 [ 1253.566361][T29328] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1253.581280][T29328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1253.839486][T20620] usb 4-1: Limiting number of CPorts to U8_MAX [ 1253.845018][T29335] xt_NFQUEUE: number of total queues is 0 [ 1253.884209][T20620] usb 4-1: Unknown endpoint type found, address 0x07 [ 1253.891416][T20620] usb 4-1: Not enough endpoints found in device, aborting! [ 1254.146696][ T6638] usb 4-1: USB disconnect, device number 50 [ 1254.537411][T29359] loop1: detected capacity change from 0 to 64 [ 1254.817359][T29369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10377'. [ 1254.827667][T29369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1254.834952][T29369] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.842330][T29369] IPv6: NLM_F_CREATE should be set when creating new route [ 1255.143543][T29381] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1255.584626][T29398] loop1: detected capacity change from 0 to 256 [ 1255.646170][T29398] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 1256.028086][T29415] loop2: detected capacity change from 0 to 22 [ 1256.040080][T29415] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1256.059200][T29415] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1256.586626][T29434] overlayfs: overlapping lowerdir path [ 1256.768647][T20620] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1256.979455][T20620] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1256.990156][T20620] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1257.017184][T20620] usb 2-1: config 0 has no interface number 0 [ 1257.039643][T20620] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1257.068663][T20620] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1257.082789][T29450] netlink: 'syz.2.10418': attribute type 6 has an invalid length. [ 1257.091206][T20620] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1257.110888][T20620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.133582][T20620] usb 2-1: config 0 descriptor?? [ 1257.239340][ T6560] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1257.442444][ T6560] usb 4-1: Using ep0 maxpacket: 16 [ 1257.452497][ T6560] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1257.471009][ T6560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.480569][ T6560] usb 4-1: Product: syz [ 1257.486637][ T6560] usb 4-1: Manufacturer: syz [ 1257.493115][ T6560] usb 4-1: SerialNumber: syz [ 1257.514528][ T6560] r8152-cfgselector 4-1: config 0 descriptor?? [ 1257.614695][T20620] usb 2-1: USB disconnect, device number 43 [ 1257.745136][ T6560] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1257.765319][ T3473] usb 4-1: config 0 descriptor?? [ 1257.976454][ T6560] usb 4-1: USB disconnect, device number 51 [ 1257.979409][ T3473] usb 4-1: can't set config #0, error -71 [ 1258.141257][T29469] loop2: detected capacity change from 0 to 4096 [ 1258.153411][T29469] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1258.277111][T29469] ntfs3: loop2: Failed to load $Extend (-22). [ 1258.283852][T29469] ntfs3: loop2: Failed to initialize $Extend. [ 1259.094048][T29499] netlink: 'syz.0.10441': attribute type 13 has an invalid length. [ 1259.628064][T29520] netlink: 'syz.3.10451': attribute type 4 has an invalid length. [ 1259.647635][T29520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10451'. [ 1259.671582][T29520] wlan1: mtu less than device minimum [ 1259.941885][T29525] loop3: detected capacity change from 0 to 4096 [ 1260.093133][T29525] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1260.916339][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10469'. [ 1261.068653][T29533] loop1: detected capacity change from 0 to 32768 [ 1261.073570][T29559] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1261.149563][T29533] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1261.276717][T29573] 9pnet: Found fid 0 not clunked [ 1261.388472][T29533] XFS (loop1): Ending clean mount [ 1261.476501][T29579] loop3: detected capacity change from 0 to 256 [ 1261.542592][T29533] XFS: no-recovery mounts must be read-only. [ 1261.580478][T29579] FAT-fs (loop3): Directory bread(block 64) failed [ 1261.615985][T29579] FAT-fs (loop3): Directory bread(block 65) failed [ 1261.622656][T29579] FAT-fs (loop3): Directory bread(block 66) failed [ 1261.661559][ T6510] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1261.680181][T29579] FAT-fs (loop3): Directory bread(block 67) failed [ 1261.705784][T29579] FAT-fs (loop3): Directory bread(block 68) failed [ 1261.763051][T29579] FAT-fs (loop3): Directory bread(block 69) failed [ 1261.769757][T29579] FAT-fs (loop3): Directory bread(block 70) failed [ 1261.795134][T29579] FAT-fs (loop3): Directory bread(block 71) failed [ 1261.801939][T29579] FAT-fs (loop3): Directory bread(block 72) failed [ 1261.814932][T29579] FAT-fs (loop3): Directory bread(block 73) failed [ 1262.903318][T29587] loop2: detected capacity change from 0 to 32768 [ 1263.895612][T29624] loop1: detected capacity change from 0 to 32768 [ 1263.954137][T29641] trusted_key: encrypted_key: insufficient parameters specified [ 1263.961613][T29624] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1264.212754][T29624] XFS (loop1): Ending clean mount [ 1264.270431][T29624] XFS (loop1): Quotacheck needed: Please wait. [ 1264.412175][T29624] XFS (loop1): Quotacheck: Done. [ 1264.602610][ T6510] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1264.764823][T29673] xt_bpf: check failed: parse error [ 1265.064486][T29678] netlink: 'syz.2.10520': attribute type 5 has an invalid length. [ 1265.108547][T29678] ip6erspan0: entered promiscuous mode [ 1265.708371][T29702] No such timeout policy "syz0" [ 1265.960408][T29714] netlink: 'syz.1.10535': attribute type 4 has an invalid length. [ 1265.996485][T29714] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10535'. [ 1266.082421][T29714] .`: renamed from bond0 (while UP) [ 1266.123861][T29718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10538'. [ 1266.361432][T29723] veth3: entered promiscuous mode [ 1266.366534][T29723] veth3: entered allmulticast mode [ 1266.615250][T29704] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1266.672132][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10547'. [ 1266.735132][T29736] loop3: detected capacity change from 0 to 256 [ 1266.881608][T29742] netlink: 'syz.0.10551': attribute type 2 has an invalid length. [ 1267.495557][T29765] netlink: 'syz.1.10561': attribute type 27 has an invalid length. [ 1267.527615][T29759] loop2: detected capacity change from 0 to 4096 [ 1267.666143][ T6562] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1267.704194][T29759] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1267.725674][T29769] netlink: 'syz.0.10562': attribute type 4 has an invalid length. [ 1267.762128][T29769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10562'. [ 1267.812266][T29769] .`: renamed from bond0 (while UP) [ 1267.879818][ T6562] usb 4-1: Using ep0 maxpacket: 8 [ 1267.890918][ T6562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1267.913960][ T6562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1267.934891][ T6562] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1267.956500][ T6562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1268.007513][ T6562] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1268.040287][ T6562] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1268.056210][ T6562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.085544][ T6562] usb 4-1: config 0 descriptor?? [ 1268.091732][T29761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1268.206599][T29775] loop2: detected capacity change from 0 to 4096 [ 1268.381297][T29784] netlink: 'syz.0.10577': attribute type 1 has an invalid length. [ 1268.405767][T29784] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.10577'. [ 1268.632054][ T6638] usb 4-1: USB disconnect, device number 52 [ 1268.641574][ T6516] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1268.975116][T29792] loop1: detected capacity change from 0 to 4096 [ 1269.127396][T29792] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1269.759757][T29822] netlink: 766 bytes leftover after parsing attributes in process `syz.0.10588'. [ 1269.865367][T29825] loop2: detected capacity change from 0 to 1764 [ 1270.002046][T29829] IPv6: Can't replace route, no match found [ 1270.766072][T29853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10604'. [ 1270.810019][T29853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10604'. [ 1270.874305][T29857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10605'. [ 1270.895857][T29856] loop3: detected capacity change from 0 to 1024 [ 1270.910213][T29823] loop1: detected capacity change from 0 to 40427 [ 1270.946773][T29823] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1271.016031][T29823] F2FS-fs (loop1): invalid crc value [ 1271.033068][ T3473] hfsplus: b-tree write err: -5, ino 4 [ 1271.043874][T29823] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1271.201287][T29823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1271.334220][T29823] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 1271.972640][T29866] loop3: detected capacity change from 0 to 32768 [ 1272.088043][T29887] netlink: 'syz.2.10619': attribute type 10 has an invalid length. [ 1272.103298][T29866] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1272.157628][T29887] veth1_vlan: entered allmulticast mode [ 1272.169191][T29866] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 1272.210838][T29866] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1272.219757][T29887] team0: Device veth1_vlan failed to register rx_handler [ 1272.234614][T29866] OCFS2: Returning error to the calling process. [ 1272.251931][T29866] (syz.3.10610,29866,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1272.270515][T29866] (syz.3.10610,29866,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1272.290513][T29866] (syz.3.10610,29866,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 1272.307143][T29866] (syz.3.10610,29866,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1272.380444][T29866] (syz.3.10610,29866,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 1272.425877][T29866] (syz.3.10610,29866,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1272.434021][T29866] (syz.3.10610,29866,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1272.478139][T29866] (syz.3.10610,29866,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1272.549752][T29866] (syz.3.10610,29866,0):ocfs2_mknod:298 ERROR: status = -5 [ 1272.599382][T29866] (syz.3.10610,29866,0):ocfs2_mknod:502 ERROR: status = -5 [ 1272.622231][T29866] (syz.3.10610,29866,0):ocfs2_mkdir:659 ERROR: status = -5 [ 1272.707294][ T6515] ocfs2: Unmounting device (7,3) on (node local) [ 1272.789409][T29904] loop1: detected capacity change from 0 to 4096 [ 1272.829238][T29904] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1272.884025][T29904] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1272.935093][T29904] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1272.991613][T29904] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1273.043842][T29904] ntfs: volume version 3.1. [ 1273.064435][T29904] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 1273.093169][T29904] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1273.410716][ T6638] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1273.612458][ T6638] usb 4-1: Using ep0 maxpacket: 32 [ 1273.623542][ T6638] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1273.642812][ T6638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.661945][ T6638] usb 4-1: Product: syz [ 1273.675806][ T6638] usb 4-1: Manufacturer: syz [ 1273.680491][ T6638] usb 4-1: SerialNumber: syz [ 1273.698547][ T6638] usb 4-1: config 0 descriptor?? [ 1273.841796][T29933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10641'. [ 1273.975448][ T6638] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 1273.993579][ T6638] airspy 4-1:0.0: Could not detect board [ 1274.004658][ T6638] airspy: probe of 4-1:0.0 failed with error -71 [ 1274.020589][ T6638] usb 4-1: USB disconnect, device number 53 [ 1274.874558][T29969] netlink: 'syz.1.10658': attribute type 32 has an invalid length. [ 1275.058075][T29976] loop3: detected capacity change from 0 to 256 [ 1275.133224][T29976] FAT-fs (loop3): Directory bread(block 64) failed [ 1275.139859][T29976] FAT-fs (loop3): Directory bread(block 65) failed [ 1275.174033][T29976] FAT-fs (loop3): Directory bread(block 66) failed [ 1275.180622][T29976] FAT-fs (loop3): Directory bread(block 67) failed [ 1275.195559][T29976] FAT-fs (loop3): Directory bread(block 68) failed [ 1275.202137][T29976] FAT-fs (loop3): Directory bread(block 69) failed [ 1275.209829][T29976] FAT-fs (loop3): Directory bread(block 70) failed [ 1275.219585][T20620] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1275.247961][T29976] FAT-fs (loop3): Directory bread(block 71) failed [ 1275.254651][T29976] FAT-fs (loop3): Directory bread(block 72) failed [ 1275.269355][T29976] FAT-fs (loop3): Directory bread(block 73) failed [ 1275.432186][T20620] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1275.451070][T20620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.491175][T20620] usb 3-1: config 0 descriptor?? [ 1275.510164][T20620] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1275.961115][T20620] gp8psk: usb in 128 operation failed. [ 1275.986138][T20620] gp8psk: usb in 137 operation failed. [ 1275.991664][T20620] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1276.027519][T20620] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1276.056897][T20620] usb 3-1: USB disconnect, device number 62 [ 1276.612652][ T6516] Bluetooth: hci2: unexpected event 0x3e length: 760 > 260 [ 1276.612685][ T6516] Bluetooth: hci2: unexpected subevent 0x0d length: 759 > 260 [ 1277.374982][T30057] loop2: detected capacity change from 0 to 256 [ 1277.510677][T30057] FAT-fs (loop2): Directory bread(block 64) failed [ 1277.520151][T30057] FAT-fs (loop2): Directory bread(block 65) failed [ 1277.534738][T30057] FAT-fs (loop2): Directory bread(block 66) failed [ 1277.564774][T30057] FAT-fs (loop2): Directory bread(block 67) failed [ 1277.579740][T30057] FAT-fs (loop2): Directory bread(block 68) failed [ 1277.611254][T30057] FAT-fs (loop2): Directory bread(block 69) failed [ 1277.617931][T30057] FAT-fs (loop2): Directory bread(block 70) failed [ 1277.654232][T30057] FAT-fs (loop2): Directory bread(block 71) failed [ 1277.675915][T30057] FAT-fs (loop2): Directory bread(block 72) failed [ 1277.682497][T30057] FAT-fs (loop2): Directory bread(block 73) failed [ 1277.828346][T30070] loop1: detected capacity change from 0 to 256 [ 1277.903941][T30070] FAT-fs (loop1): Directory bread(block 64) failed [ 1277.910555][T30070] FAT-fs (loop1): Directory bread(block 65) failed [ 1277.953703][T30070] FAT-fs (loop1): Directory bread(block 66) failed [ 1277.960309][T30070] FAT-fs (loop1): Directory bread(block 67) failed [ 1277.985744][T30070] FAT-fs (loop1): Directory bread(block 68) failed [ 1277.992333][T30070] FAT-fs (loop1): Directory bread(block 69) failed [ 1278.025519][T30070] FAT-fs (loop1): Directory bread(block 70) failed [ 1278.043111][T30070] FAT-fs (loop1): Directory bread(block 71) failed [ 1278.065190][T30070] FAT-fs (loop1): Directory bread(block 72) failed [ 1278.102017][T30070] FAT-fs (loop1): Directory bread(block 73) failed [ 1278.758959][T30099] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10723'. [ 1278.964015][T30107] netlink: 'syz.1.10726': attribute type 3 has an invalid length. [ 1278.994544][T30107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10726'. [ 1279.477674][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.485025][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1279.807176][T30141] loop2: detected capacity change from 0 to 256 [ 1279.864183][T30141] FAT-fs (loop2): Directory bread(block 64) failed [ 1279.900695][T30141] FAT-fs (loop2): Directory bread(block 65) failed [ 1279.907433][T30141] FAT-fs (loop2): Directory bread(block 66) failed [ 1279.951325][T30136] loop3: detected capacity change from 0 to 4096 [ 1279.958307][T30141] FAT-fs (loop2): Directory bread(block 67) failed [ 1279.978203][T30141] FAT-fs (loop2): Directory bread(block 68) failed [ 1279.999595][T30141] FAT-fs (loop2): Directory bread(block 69) failed [ 1280.006309][T30141] FAT-fs (loop2): Directory bread(block 70) failed [ 1280.013381][T30141] FAT-fs (loop2): Directory bread(block 71) failed [ 1280.021205][T30141] FAT-fs (loop2): Directory bread(block 72) failed [ 1280.032836][T30141] FAT-fs (loop2): Directory bread(block 73) failed [ 1280.841675][ T6560] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1280.862742][ T5118] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1280.997502][T30172] loop3: detected capacity change from 0 to 256 [ 1281.067128][ T6560] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 1281.075287][ T6560] usb 2-1: config 0 has no interface number 0 [ 1281.087100][ T5118] usb 3-1: Using ep0 maxpacket: 32 [ 1281.097210][ T5118] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1281.107781][ T6560] usb 2-1: New USB device found, idVendor=0403, idProduct=a951, bcdDevice=c0.f8 [ 1281.123872][ T6560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.125528][ T5118] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 1281.149741][ T6560] usb 2-1: config 0 descriptor?? [ 1281.173120][ T5118] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1281.178675][ T6560] hub 2-1:0.40: bad descriptor, ignoring hub [ 1281.181834][ T5118] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.204115][ T6560] hub: probe of 2-1:0.40 failed with error -5 [ 1281.217479][ T6560] ftdi_sio 2-1:0.40: FTDI USB Serial Device converter detected [ 1281.227500][T30172] FAT-fs (loop3): Directory bread(block 64) failed [ 1281.228961][ T6560] ftdi_sio ttyUSB0: unknown device type: 0xc0f8 [ 1281.234636][T30172] FAT-fs (loop3): Directory bread(block 65) failed [ 1281.257046][ T5118] usb 3-1: config 7 has no interface number 0 [ 1281.264728][T30172] FAT-fs (loop3): Directory bread(block 66) failed [ 1281.272506][ T5118] usb 3-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1281.284079][T30172] FAT-fs (loop3): Directory bread(block 67) failed [ 1281.291164][T30172] FAT-fs (loop3): Directory bread(block 68) failed [ 1281.298161][ T5118] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1281.310707][T30172] FAT-fs (loop3): Directory bread(block 69) failed [ 1281.317619][ T5118] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1281.331456][T30172] FAT-fs (loop3): Directory bread(block 70) failed [ 1281.343458][T30172] FAT-fs (loop3): Directory bread(block 71) failed [ 1281.350108][T30172] FAT-fs (loop3): Directory bread(block 72) failed [ 1281.362894][ T5118] usb 3-1: config 7 interface 128 has no altsetting 0 [ 1281.370192][T30172] FAT-fs (loop3): Directory bread(block 73) failed [ 1281.380600][ T5118] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1281.389962][ T5118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.422460][ T5118] usb 3-1: Product: syz [ 1281.426779][ T5118] usb 3-1: Manufacturer: syz [ 1281.452669][ T5118] usb 3-1: SerialNumber: syz [ 1281.469942][T30158] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1281.579247][ T8] usb 2-1: USB disconnect, device number 44 [ 1281.590541][ T8] ftdi_sio 2-1:0.40: device disconnected [ 1281.725291][ T5118] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1281.738948][ T5118] usb 3-1: MIDIStreaming interface descriptor not found [ 1281.765689][T30184] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10764'. [ 1281.798906][T30184] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10764'. [ 1281.820050][ T5118] usb 3-1: USB disconnect, device number 63 [ 1281.904506][T12766] udevd[12766]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.766430][ T6516] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1283.035631][T30227] loop1: detected capacity change from 0 to 2048 [ 1283.060412][T30227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1283.403276][T30237] loop3: detected capacity change from 0 to 4096 [ 1283.450519][T30237] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1283.502015][T30237] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1283.529588][T30237] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1283.547213][T30237] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1283.690749][T30237] ntfs: volume version 3.1. [ 1283.843030][T30237] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1283.878106][T30237] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1284.578738][T30282] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10812'. [ 1284.652230][T30285] loop1: detected capacity change from 0 to 164 [ 1284.673690][T30285] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1284.747716][T30285] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1284.792974][T30285] Symlink component flag not implemented [ 1284.808105][T30291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10816'. [ 1284.818259][T30285] Symlink component flag not implemented [ 1284.980078][ T28] audit: type=1326 audit(2000001902.727:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30294 comm="syz.0.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1285.056507][T30299] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1285.065817][ T28] audit: type=1326 audit(2000001902.745:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30294 comm="syz.0.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1285.157695][ T28] audit: type=1326 audit(2000001902.755:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30294 comm="syz.0.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1285.233144][ T28] audit: type=1326 audit(2000001902.755:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30294 comm="syz.0.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1285.365954][T30309] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1286.149940][T30306] loop1: detected capacity change from 0 to 32768 [ 1286.346816][T30306] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1286.399805][T30306] (syz.1.10825,30306,0):ocfs2_symlink:2068 ERROR: status = -2 [ 1286.526107][ T6510] (syz-executor,6510,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 1286.551940][ T6406] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1286.564372][ T6510] ocfs2: Unmounting device (7,1) on (node local) [ 1286.817118][ T6406] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 1286.840330][ T6406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.850472][ T6406] usb 4-1: config 0 has no interface number 0 [ 1286.894068][ T6406] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1286.923236][ T6406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.944889][ T6406] usb 4-1: config 0 descriptor?? [ 1286.960611][ T6406] ttusbir 4-1:0.83: cannot find expected altsetting [ 1286.974894][T30357] autofs4:pid:30357:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1287.007892][T30357] autofs4:pid:30357:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1287.193424][ T6406] usb 4-1: USB disconnect, device number 54 [ 1287.389784][T30372] loop1: detected capacity change from 0 to 64 [ 1287.891016][T30384] netlink: 'syz.1.10861': attribute type 1 has an invalid length. [ 1287.958780][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10862'. [ 1288.736245][T30412] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1288.800001][T30416] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10876'. [ 1288.838560][T30416] 0·: renamed from hsr0 (while UP) [ 1288.902708][T30416] 0·: entered allmulticast mode [ 1288.931353][T30416] hsr_slave_0: entered allmulticast mode [ 1288.947338][T30416] hsr_slave_1: entered allmulticast mode [ 1288.954900][T30416] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1289.406608][T30437] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10888'. [ 1290.013748][T30456] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1290.464034][T30467] loop2: detected capacity change from 0 to 128 [ 1290.502960][T30467] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 1290.721434][T30471] loop1: detected capacity change from 0 to 4096 [ 1290.988682][ T6517] sysv_free_block: flc_count > flc_size [ 1291.022415][ T6517] sysv_free_block: flc_count > flc_size [ 1291.032278][ T6517] sysv_free_block: flc_count > flc_size [ 1291.037867][ T6517] sysv_free_block: flc_count > flc_size [ 1291.067546][ T6517] sysv_free_block: flc_count > flc_size [ 1291.073149][ T6517] sysv_free_block: flc_count > flc_size [ 1291.089928][ T6517] sysv_free_block: flc_count > flc_size [ 1291.095523][ T6517] sysv_free_block: flc_count > flc_size [ 1291.104021][ T6517] sysv_free_block: flc_count > flc_size [ 1291.110032][ T6517] sysv_free_block: flc_count > flc_size [ 1291.116486][ T6517] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1291.746587][T30500] netlink: 288 bytes leftover after parsing attributes in process `syz.3.10918'. [ 1292.080410][ T6562] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1292.162118][T30517] netlink: 'syz.1.10927': attribute type 1 has an invalid length. [ 1292.187015][T30517] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.10927'. [ 1292.328140][ T6562] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 1292.337164][ T6562] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1292.358707][ T6562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.381857][ T6562] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1292.391231][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10930'. [ 1292.408908][ T6562] usb 1-1: config 0 has no interface number 0 [ 1292.422885][ T6562] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1292.448323][ T6562] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1292.486711][ T6562] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1292.486887][T30528] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1292.496557][ T6562] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.496643][ T6562] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1292.547960][ T6562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.598386][ T6562] usb 1-1: config 0 descriptor?? [ 1292.624668][ T6562] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1292.815602][T30538] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1292.839768][ T6562] spca561: probe of 1-1:0.156 failed with error -22 [ 1292.869061][ T6562] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1292.905639][ T6562] usb 1-1: MIDIStreaming interface descriptor not found [ 1293.045682][ T6562] usb 1-1: USB disconnect, device number 64 [ 1293.069148][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1293.095077][T30546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1293.422388][T30559] loop2: detected capacity change from 0 to 512 [ 1293.430430][T30561] loop1: detected capacity change from 0 to 8 [ 1293.444423][T30559] EXT4-fs: Ignoring removed i_version option [ 1293.450942][T30559] EXT4-fs: Ignoring removed mblk_io_submit option [ 1293.483308][T30561] SQUASHFS error: Unable to read inode 0xe3 [ 1293.489307][T30559] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.10947: inode #13: comm syz.2.10947: iget: illegal inode # [ 1293.520090][T30559] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.10947: couldn't read orphan inode 13 (err -117) [ 1293.563282][T30559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1293.703088][ T6517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.788980][T30565] loop1: detected capacity change from 0 to 4096 [ 1293.906528][T30569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10952'. [ 1294.141277][T30565] ntfs3: loop1: ino=9, attr_set_size [ 1294.419787][T30579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10956'. [ 1294.557922][T30557] loop3: detected capacity change from 0 to 32768 [ 1294.611950][T30557] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1294.822634][T30557] XFS (loop3): Ending clean mount [ 1294.877671][T30557] XFS (loop3): Quotacheck needed: Please wait. [ 1294.965502][T30557] XFS (loop3): Quotacheck: Done. [ 1295.169338][ T6515] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1295.256988][T30613] loop1: detected capacity change from 0 to 128 [ 1295.276195][T30613] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 1295.544434][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1295.544449][ T28] audit: type=1326 audit(2000001912.592:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30618 comm="syz.2.10973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1295.643978][ T28] audit: type=1326 audit(2000001912.592:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30618 comm="syz.2.10973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1295.701481][ T28] audit: type=1326 audit(2000001912.592:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30618 comm="syz.2.10973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1295.777530][ T6510] sysv_free_block: flc_count > flc_size [ 1295.813588][ T6510] sysv_free_block: flc_count > flc_size [ 1295.819178][ T6510] sysv_free_block: flc_count > flc_size [ 1295.834957][ T28] audit: type=1326 audit(2000001912.592:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30618 comm="syz.2.10973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1295.883135][ T6510] sysv_free_block: flc_count > flc_size [ 1295.911101][ T6510] sysv_free_block: flc_count > flc_size [ 1295.928211][ T6510] sysv_free_block: flc_count > flc_size [ 1295.945229][ T6510] sysv_free_block: flc_count > flc_size [ 1295.983982][ T6510] sysv_free_block: flc_count > flc_size [ 1295.998489][ T6510] sysv_free_block: flc_count > flc_size [ 1296.004124][ T6510] sysv_free_block: flc_count > flc_size [ 1296.027363][ T6510] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1296.229853][T30641] netlink: 'syz.0.10982': attribute type 1 has an invalid length. [ 1296.450289][T30650] loop3: detected capacity change from 0 to 128 [ 1296.484006][T30650] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 1296.721930][ T6515] sysv_free_block: flc_count > flc_size [ 1296.747733][ T6515] sysv_free_block: flc_count > flc_size [ 1296.775865][ T6515] sysv_free_block: flc_count > flc_size [ 1296.781557][ T6515] sysv_free_block: flc_count > flc_size [ 1296.794424][ T6515] sysv_free_block: flc_count > flc_size [ 1296.818041][ T6515] sysv_free_block: flc_count > flc_size [ 1296.823669][ T6515] sysv_free_block: flc_count > flc_size [ 1296.840826][ T6515] sysv_free_block: flc_count > flc_size [ 1296.846426][ T6515] sysv_free_block: flc_count > flc_size [ 1296.871246][ T6515] sysv_free_block: flc_count > flc_size [ 1296.877571][ T6515] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1298.174179][T30711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11017'. [ 1298.205055][T30711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11017'. [ 1298.268059][ T6562] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1298.499549][ T6562] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.528818][ T6562] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1298.545965][ T6562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.566835][ T6562] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1299.107425][T30724] loop1: detected capacity change from 0 to 32768 [ 1299.116684][T30724] (syz.1.11023,30724,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1299.136588][T30724] (syz.1.11023,30724,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1299.194473][T30724] JBD2: Ignoring recovery information on journal [ 1299.257807][T30744] netlink: 596 bytes leftover after parsing attributes in process `syz.3.11033'. [ 1299.284735][T30724] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1299.338764][T30747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1299.678779][ T6510] ocfs2: Unmounting device (7,1) on (node local) [ 1299.759030][ T6562] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1299.977533][ T6562] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1299.998729][ T6562] stv0680 3-1:4.0: last error: 18, command = 0xd0 [ 1300.033219][ T6562] usb 3-1: USB disconnect, device number 64 [ 1300.331653][T30751] loop3: detected capacity change from 0 to 40427 [ 1300.352955][T30751] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1300.382919][T30751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1300.436020][T30751] F2FS-fs (loop3): invalid crc value [ 1300.446289][T30767] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11044'. [ 1300.484573][T30751] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1300.687051][T30751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1300.719881][T30751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1300.995891][T30787] loop1: detected capacity change from 0 to 4096 [ 1301.063019][T30787] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1301.254848][T30792] cgroup: noprefix used incorrectly [ 1301.834565][T30806] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.098226][ T6406] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1302.262216][T30816] netlink: 'syz.0.11064': attribute type 29 has an invalid length. [ 1302.270185][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11064'. [ 1302.300448][T30816] netlink: 'syz.0.11064': attribute type 29 has an invalid length. [ 1302.313319][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11064'. [ 1302.368209][ T6406] usb 3-1: Using ep0 maxpacket: 32 [ 1302.427569][ T6406] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1302.455240][ T6406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.507644][ T6406] usb 3-1: config 0 descriptor?? [ 1302.549109][ T6406] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1302.834631][T30833] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11070'. [ 1302.867267][T30833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11070'. [ 1302.892460][T30833] vlan0: entered promiscuous mode [ 1302.992119][ T6406] gspca_nw80x: reg_r err -71 [ 1302.996924][ T6406] nw80x: probe of 3-1:0.0 failed with error -71 [ 1303.014921][ T6406] usb 3-1: USB disconnect, device number 65 [ 1303.119917][T30843] netlink: 'syz.0.11073': attribute type 3 has an invalid length. [ 1303.132277][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11074'. [ 1303.168415][T30845] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11074'. [ 1303.394987][ T28] audit: type=1326 audit(2000001919.923:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30849 comm="syz.3.11078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe95e18efc9 code=0x0 [ 1303.535838][T30854] loop1: detected capacity change from 0 to 4096 [ 1303.604357][T30854] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1303.653850][T30854] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1303.672859][T30854] System zones: 0-5 [ 1303.702529][T30854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.996444][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.537462][T30889] loop2: detected capacity change from 0 to 1024 [ 1304.691619][T30897] binder: 30896:30897 ioctl 40046205 0 returned -22 [ 1304.938498][T30904] loop1: detected capacity change from 0 to 256 [ 1305.334145][T30915] netlink: 'syz.1.11100': attribute type 29 has an invalid length. [ 1305.587152][ T6406] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1305.943239][ T6406] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1305.968500][ T6406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.992921][ T6406] usb 3-1: Product: syz [ 1306.011206][ T6406] usb 3-1: Manufacturer: syz [ 1306.033764][ T6406] usb 3-1: SerialNumber: syz [ 1306.081325][ T6406] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1306.171169][ T5118] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1306.227768][T30946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11111'. [ 1306.699140][ T6562] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1306.713572][ T6560] usb 3-1: USB disconnect, device number 66 [ 1306.784744][ T6638] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1306.895680][ T6562] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1306.915893][ T6562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.936421][ T6562] usb 4-1: Product: syz [ 1306.945333][ T6562] usb 4-1: Manufacturer: syz [ 1306.960904][ T6562] usb 4-1: SerialNumber: syz [ 1306.981994][ T6562] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1307.003661][ T6638] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1307.014056][T15424] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.023264][ T6638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.031652][T30941] loop1: detected capacity change from 0 to 40427 [ 1307.046656][ T6638] usb 1-1: Product: syz [ 1307.050926][ T6638] usb 1-1: Manufacturer: syz [ 1307.058140][T30941] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1307.062854][ T6638] usb 1-1: SerialNumber: syz [ 1307.077773][T30941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1307.100613][ T6638] usb 1-1: config 0 descriptor?? [ 1307.137122][ T6638] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1307.152197][T30941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1307.278537][T30949] random: crng reseeded on system resumption [ 1307.291741][ T5118] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1307.301392][T30941] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1307.308491][T30941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1307.328500][ T5118] ath9k_htc: Failed to initialize the device [ 1307.353993][ T6560] usb 3-1: ath9k_htc: USB layer deinitialized [ 1307.494385][T30941] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1307.609391][ T6638] sonixb 1-1:0.0: Error writing register 01: -71 [ 1307.615958][ T6638] sonixb: probe of 1-1:0.0 failed with error -71 [ 1307.651333][ T6638] usb 1-1: USB disconnect, device number 65 [ 1307.973877][ T5118] usb 4-1: USB disconnect, device number 55 [ 1308.132149][T15424] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1308.160026][T15424] ath9k_htc: Failed to initialize the device [ 1308.184319][ T5118] usb 4-1: ath9k_htc: USB layer deinitialized [ 1308.324778][T30972] netlink: 'syz.0.11122': attribute type 2 has an invalid length. [ 1308.493625][T30981] netlink: 'syz.1.11125': attribute type 10 has an invalid length. [ 1308.527739][T30981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11125'. [ 1308.536884][T30981] netlink: 'syz.1.11125': attribute type 10 has an invalid length. [ 1308.560142][T30981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11125'. [ 1308.693244][ T28] audit: type=1326 audit(2000001924.898:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30986 comm="syz.3.11128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e18efc9 code=0x7ffc0000 [ 1308.763693][ T28] audit: type=1326 audit(2000001924.898:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30986 comm="syz.3.11128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e18efc9 code=0x7ffc0000 [ 1308.869984][ T28] audit: type=1326 audit(2000001924.926:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30986 comm="syz.3.11128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe95e18efc9 code=0x7ffc0000 [ 1308.955624][ T28] audit: type=1326 audit(2000001924.926:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30986 comm="syz.3.11128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e18efc9 code=0x7ffc0000 [ 1308.955674][ T28] audit: type=1326 audit(2000001924.926:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30986 comm="syz.3.11128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e18efc9 code=0x7ffc0000 [ 1309.042206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.062989][T31000] capability: warning: `syz.1.11134' uses 32-bit capabilities (legacy support in use) [ 1310.288103][T31024] loop3: detected capacity change from 0 to 32768 [ 1310.330611][T31024] (syz.3.11146,31024,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1310.383696][T31024] (syz.3.11146,31024,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1310.481606][T31024] JBD2: Ignoring recovery information on journal [ 1310.632638][T31024] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1310.923813][ T6515] ocfs2: Unmounting device (7,3) on (node local) [ 1311.219920][T31075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11169'. [ 1311.247601][T31077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1311.397056][T31079] loop3: detected capacity change from 0 to 164 [ 1311.415325][T31082] netlink: 'syz.1.11171': attribute type 1 has an invalid length. [ 1311.458885][T31082] netlink: 'syz.1.11171': attribute type 2 has an invalid length. [ 1311.833207][T31097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11179'. [ 1312.897140][T31108] loop3: detected capacity change from 0 to 32768 [ 1312.965240][T31108] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1313.165057][T31141] team0: entered promiscuous mode [ 1313.170624][T31141] team_slave_0: entered promiscuous mode [ 1313.183062][T31141] team_slave_1: entered promiscuous mode [ 1313.210261][T31108] XFS (loop3): Ending clean mount [ 1313.241595][T31108] XFS (loop3): Quotacheck needed: Please wait. [ 1313.381467][T31108] XFS (loop3): Quotacheck: Done. [ 1313.637386][ T6515] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1313.942786][T31163] loop1: detected capacity change from 0 to 64 [ 1314.005202][T31163] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1314.035133][T31163] hfs: filesystem is marked locked, mounting read-only. [ 1314.110058][ T6731] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1314.268622][T31173] netlink: 'syz.3.11205': attribute type 30 has an invalid length. [ 1314.415958][T31175] loop1: detected capacity change from 0 to 4096 [ 1314.542446][T31175] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1314.571863][T31175] ntfs3: loop1: Failed to load $Extend (-22). [ 1314.578007][T31175] ntfs3: loop1: Failed to initialize $Extend. [ 1314.678095][ T28] audit: type=1800 audit(2000001930.480:129): pid=31175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11213" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1314.679926][T31175] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 1315.130526][ T28] audit: type=1326 audit(2000001930.910:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31197 comm="syz.2.11224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1315.214050][ T28] audit: type=1326 audit(2000001930.910:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31197 comm="syz.2.11224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1315.286870][ T28] audit: type=1326 audit(2000001930.957:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31197 comm="syz.2.11224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1315.362493][T31206] loop2: detected capacity change from 0 to 256 [ 1315.386360][ T28] audit: type=1326 audit(2000001930.957:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31197 comm="syz.2.11224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1315.602594][T31218] No such timeout policy "syz1" [ 1315.663732][T31220] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11233'. [ 1315.946525][T31228] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11238'. [ 1316.041491][T31232] comedi comedi0: pcl730: I/O port conflict (0x10000200,4) [ 1316.654827][T31225] loop2: detected capacity change from 0 to 40427 [ 1316.706755][T31225] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1316.743641][T31225] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1316.798010][T31225] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1316.948319][T31225] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1316.965801][T31225] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1317.018852][ T8] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1317.069908][T31225] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 1317.222624][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1317.241794][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1317.252395][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.266754][ T8] usb 1-1: Product: syz [ 1317.270954][ T8] usb 1-1: Manufacturer: syz [ 1317.278853][ T8] usb 1-1: SerialNumber: syz [ 1317.297745][ T8] usb 1-1: config 0 descriptor?? [ 1317.303836][T31272] loop1: detected capacity change from 0 to 2048 [ 1317.334229][T31272] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1317.398823][T15814] udevd[15814]: incorrect nilfs2 checksum on /dev/loop1 [ 1317.416097][T31273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1317.491156][T31272] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 1317.511076][T31272] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1317.533068][ T8] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 1317.561747][T31272] Remounting filesystem read-only [ 1317.563600][ T8] 5e [ 1317.575180][T31272] NILFS (loop1): error -5 truncating bmap (ino=15) [ 1317.579356][ T8] 57 f9 3a eb 9a 47 80 [ 1317.597896][ T8] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 1317.682825][ T6510] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1317.689821][ T6510] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1317.708155][ T6510] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 1317.725131][ T6510] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1317.743373][ T6510] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1317.756392][ T8] usb 1-1: USB disconnect, device number 66 [ 1317.824617][ T6510] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1317.836905][ T6510] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1317.846609][ T6510] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1317.859064][ T6510] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1317.867679][ T6510] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1317.881442][ T6510] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1317.888941][ T6510] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1317.898298][ T6510] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1317.905560][T31270] loop3: detected capacity change from 0 to 32768 [ 1317.907760][ T6510] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1317.924998][ T6510] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1317.945505][T31270] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1318.131939][T31270] syz.3.11257 (31270) used greatest stack depth: 18888 bytes left [ 1318.169034][ T6515] ocfs2: Unmounting device (7,3) on (node local) [ 1319.321443][T31327] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1319.777109][T31339] loop1: detected capacity change from 0 to 4096 [ 1319.791351][T31339] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1319.967900][T31339] ntfs3: loop1: failed to convert "c46c" to cp857 [ 1320.144173][T31354] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611) [ 1320.179984][T31354] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1320.690866][T31375] loop3: detected capacity change from 0 to 16 [ 1320.700631][T31375] erofs: (device loop3): mounted with root inode @ nid 36. [ 1320.708677][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11307'. [ 1320.728748][T31375] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1320.733216][T31376] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1320.999968][T31382] comedi comedi4: comedi_config --init_data is deprecated [ 1321.547802][T31404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11322'. [ 1322.224645][T31399] loop2: detected capacity change from 0 to 32768 [ 1322.252371][T31399] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1322.252371][T31399] [ 1322.272129][T31399] ERROR: (device loop2): remounting filesystem as read-only [ 1322.279652][T31399] ERROR: (device loop2): jfs_unlink: [ 1322.279652][T31399] [ 1322.327992][ T6517] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1322.327992][ T6517] [ 1322.361295][T31423] loop3: detected capacity change from 0 to 256 [ 1322.457623][T31423] FAT-fs (loop3): Directory bread(block 64) failed [ 1322.464920][ T6562] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1322.486026][T31423] FAT-fs (loop3): Directory bread(block 65) failed [ 1322.492791][T31423] FAT-fs (loop3): Directory bread(block 66) failed [ 1322.499724][T31423] FAT-fs (loop3): Directory bread(block 67) failed [ 1322.507604][T31423] FAT-fs (loop3): Directory bread(block 68) failed [ 1322.514280][T31423] FAT-fs (loop3): Directory bread(block 69) failed [ 1322.533859][T31423] FAT-fs (loop3): Directory bread(block 70) failed [ 1322.540821][T31423] FAT-fs (loop3): Directory bread(block 71) failed [ 1322.547791][T31423] FAT-fs (loop3): Directory bread(block 72) failed [ 1322.554532][T31423] FAT-fs (loop3): Directory bread(block 73) failed [ 1322.676119][ T6562] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1322.685227][ T6562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.698239][ T6562] usb 1-1: Product: syz [ 1322.702671][ T6562] usb 1-1: Manufacturer: syz [ 1322.707491][ T6562] usb 1-1: SerialNumber: syz [ 1322.738672][ T6562] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1322.783713][T15424] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1322.804324][ T6638] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1322.828328][T31427] loop3: detected capacity change from 0 to 4096 [ 1322.846783][T31427] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1322.916607][T31427] ntfs3: loop3: failed to convert "c46c" to maccroatian [ 1323.021551][ T6638] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1323.057663][ T6638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.074924][ T6638] usb 3-1: Product: syz [ 1323.083915][ T6638] usb 3-1: Manufacturer: syz [ 1323.088614][ T6638] usb 3-1: SerialNumber: syz [ 1323.137040][ T6638] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1323.174041][ T6562] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1323.299278][T31433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11336'. [ 1323.309045][T31433] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11336'. [ 1323.318937][T31433] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11336'. [ 1323.331495][T31433] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1323.363769][ T6638] usb 1-1: USB disconnect, device number 67 [ 1323.454401][T31425] random: crng reseeded on system resumption [ 1323.681688][T20620] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1323.875927][ T6560] usb 3-1: USB disconnect, device number 67 [ 1323.932135][T20620] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1323.959278][T15424] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1323.959731][T20620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.977096][T15424] ath9k_htc: Failed to initialize the device [ 1323.987424][T20620] usb 2-1: Product: syz [ 1323.999521][ T6638] usb 1-1: ath9k_htc: USB layer deinitialized [ 1324.003908][T20620] usb 2-1: Manufacturer: syz [ 1324.006029][T31446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11342'. [ 1324.024532][T20620] usb 2-1: SerialNumber: syz [ 1324.058829][T20620] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.085292][ T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1324.267586][T31452] netlink: 'syz.0.11345': attribute type 10 has an invalid length. [ 1324.283178][T31452] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1324.310563][ T6562] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1324.326904][ C0] usb 2-1: ath9k_htc: invalid pkt_len (fd7e) [ 1324.354318][ T6562] ath9k_htc: Failed to initialize the device [ 1324.362738][ T6560] usb 3-1: ath9k_htc: USB layer deinitialized [ 1324.590915][T20620] usb 2-1: USB disconnect, device number 45 [ 1324.810270][T31464] loop3: detected capacity change from 0 to 2048 [ 1324.831168][T31464] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1324.841460][T31466] netlink: 196 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1324.869732][T31466] netlink: 196 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1324.889714][T31466] netlink: 19 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1324.912626][ T6731] udevd[6731]: incorrect nilfs2 checksum on /dev/loop3 [ 1324.920496][T31467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1325.009791][T31464] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 1325.019560][T31464] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1325.031192][T31464] Remounting filesystem read-only [ 1325.044737][T31464] NILFS (loop3): error -5 truncating bmap (ino=15) [ 1325.159081][ T6515] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1325.165835][ T6515] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1325.184196][ T6515] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 1325.194991][ T6515] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1325.205492][ T6515] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1325.254626][ T8] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1325.261746][ T8] ath9k_htc: Failed to initialize the device [ 1325.268396][ T6515] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1325.283266][ T6515] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1325.311652][ T6515] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1325.336321][T20620] usb 2-1: ath9k_htc: USB layer deinitialized [ 1325.354701][ T6515] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1325.389850][ T6515] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1325.434998][ T6515] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1325.469368][ T6515] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1325.487008][ T6515] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1325.510006][ T6515] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1325.517396][ T6515] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1325.663371][T31485] sp0: Synchronizing with TNC [ 1325.866628][T31495] binfmt_misc: register: failed to install interpreter file ./bus [ 1326.102082][T31501] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.11368'. [ 1326.756353][T31529] loop1: detected capacity change from 0 to 256 [ 1326.783451][T31529] exfat: Deprecated parameter 'namecase' [ 1326.789200][T31529] exfat: Deprecated parameter 'utf8' [ 1326.819150][T31529] exfat: Deprecated parameter 'namecase' [ 1326.824889][T31529] exfat: Deprecated parameter 'utf8' [ 1326.903952][T31529] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1326.932805][ T5118] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1326.957416][T31533] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1326.982729][T31533] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1327.140900][ T5118] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1327.161180][ T5118] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1327.225096][ T5118] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 1327.244070][ T5118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.252220][ T5118] usb 4-1: Product: syz [ 1327.257116][ T5118] usb 4-1: Manufacturer: syz [ 1327.261767][ T5118] usb 4-1: SerialNumber: syz [ 1327.278733][ T5118] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1327.532759][T31546] syz.1.11391: attempt to access beyond end of device [ 1327.532759][T31546] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1327.535635][ T5118] usb 4-1: USB disconnect, device number 56 [ 1327.590694][T31546] syz.1.11391: attempt to access beyond end of device [ 1327.590694][T31546] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1327.626762][T31546] syz.1.11391: attempt to access beyond end of device [ 1327.626762][T31546] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1327.666677][T31546] syz.1.11391: attempt to access beyond end of device [ 1327.666677][T31546] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1327.692843][T31546] syz.1.11391: attempt to access beyond end of device [ 1327.692843][T31546] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 1327.706379][ T28] audit: type=1326 audit(2000001942.674:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31549 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1327.721403][T31546] syz.1.11391: attempt to access beyond end of device [ 1327.721403][T31546] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 1327.761383][ T28] audit: type=1326 audit(2000001942.702:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31549 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1327.764247][T31546] VFS: unable to find oldfs superblock on device nbd1 [ 1327.792449][ T28] audit: type=1326 audit(2000001942.702:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31549 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1327.837004][ T28] audit: type=1326 audit(2000001942.702:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31549 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1327.872212][ T28] audit: type=1326 audit(2000001942.702:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31549 comm="syz.2.11393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd361f8efc9 code=0x7ffc0000 [ 1328.064354][T31555] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1328.792982][ T6562] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1328.905880][T31585] loop2: detected capacity change from 0 to 512 [ 1328.920608][T31585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1328.989838][T31585] EXT4-fs (loop2): 1 truncate cleaned up [ 1328.998772][T31585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.058638][ T6517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.092941][ T6562] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1329.102045][ T6562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.147031][ T6562] usb 1-1: Product: syz [ 1329.151267][ T6562] usb 1-1: Manufacturer: syz [ 1329.155918][ T6562] usb 1-1: SerialNumber: syz [ 1329.256413][ T6562] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1329.280100][ T6560] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1329.361644][T31569] loop1: detected capacity change from 0 to 32768 [ 1329.422024][T31569] [ 1329.422024][T31569] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1329.422024][T31569] [ 1329.441609][T31597] netlink: 'syz.3.11416': attribute type 27 has an invalid length. [ 1329.451168][T31597] netlink: 'syz.3.11416': attribute type 3 has an invalid length. [ 1329.480209][T31569] ERROR: (device loop1): dtSearch: stack overrun! [ 1329.480209][T31569] [ 1329.520155][T31597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11416'. [ 1329.542364][T31569] btstack dump: [ 1329.546143][T31569] bn = 0, index = 0 [ 1329.550135][T31569] bn = 0, index = 0 [ 1329.593945][T31569] bn = 0, index = 0 [ 1329.606037][T31569] bn = 0, index = 0 [ 1329.616622][T31573] random: crng reseeded on system resumption [ 1329.628709][T31569] bn = 0, index = 0 [ 1329.637481][T31569] bn = 0, index = 0 [ 1329.666748][T31569] bn = 0, index = 0 [ 1329.685517][T31569] bn = 0, index = 0 [ 1329.689409][T31569] jfs_lookup: dtSearch returned -5 [ 1329.805376][ T6510] [ 1329.805376][ T6510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1329.805376][ T6510] [ 1329.823353][ T6510] [ 1329.823353][ T6510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1329.823353][ T6510] [ 1330.397519][T15424] usb 1-1: USB disconnect, device number 68 [ 1330.468451][ T6560] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1330.493721][ T6560] ath9k_htc: Failed to initialize the device [ 1330.515290][T15424] usb 1-1: ath9k_htc: USB layer deinitialized [ 1330.814745][T31621] SET target dimension over the limit! [ 1330.943850][T31625] loop3: detected capacity change from 0 to 128 [ 1330.974173][T31625] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1331.044892][T31625] ext4 filesystem being mounted at /2687/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.233643][ T6515] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1331.545785][T31603] loop2: detected capacity change from 0 to 65536 [ 1331.587424][T31603] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1331.705826][T31603] XFS (loop2): Ending clean mount [ 1331.744748][T31603] XFS (loop2): Quotacheck needed: Please wait. [ 1331.878288][T31659] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1331.908696][T31603] XFS (loop2): Quotacheck: Done. [ 1332.106521][ T6517] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1332.342677][T31666] bond0: entered allmulticast mode [ 1332.550219][T31638] loop3: detected capacity change from 0 to 32768 [ 1332.669009][T31638] ERROR: (device loop3): diAllocBit: iag inconsistent [ 1332.669009][T31638] [ 1332.690071][T31638] ERROR: (device loop3): remounting filesystem as read-only [ 1332.725802][T31638] ialloc: diAlloc returned -5! [ 1333.489263][ T5118] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1333.705912][ T5118] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1333.728737][ T5118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.755949][ T5118] usb 2-1: Product: syz [ 1333.770256][ T5118] usb 2-1: Manufacturer: syz [ 1333.792783][ T5118] usb 2-1: SerialNumber: syz [ 1333.846227][ T5118] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1333.870651][T20620] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1334.051713][T31717] loop3: detected capacity change from 0 to 1764 [ 1334.127658][T31717] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1334.403900][ T5118] usb 2-1: USB disconnect, device number 46 [ 1334.599330][T31735] loop2: detected capacity change from 0 to 16 [ 1334.641618][T31735] erofs: (device loop2): mounted with root inode @ nid 36. [ 1334.981586][T31746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11484'. [ 1335.153020][T31751] loop3: detected capacity change from 0 to 2048 [ 1335.165812][T31751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1335.183183][T31753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11488'. [ 1335.263060][T20620] usb 2-1: Service connection timeout for: 256 [ 1335.269287][T20620] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1335.319602][T20620] ath9k_htc: Failed to initialize the device [ 1335.338774][ T5118] usb 2-1: ath9k_htc: USB layer deinitialized [ 1335.371641][T31753] veth3: entered allmulticast mode [ 1335.653541][T31769] loop1: detected capacity change from 0 to 8 [ 1335.692714][T31769] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1335.722351][ T6408] udevd[6408]: incorrect cramfs checksum on /dev/loop1 [ 1335.777256][T31769] cramfs: Error -3 while decompressing! [ 1335.783442][T31769] cramfs: ffffffff96fdc348(26)->ffff888049bde000(4096) [ 1335.818256][T31769] cramfs: Error -3 while decompressing! [ 1335.827902][T31769] cramfs: ffffffff96fdc362(26)->ffff8880548bb000(4096) [ 1335.847054][T31769] cramfs: Error -3 while decompressing! [ 1335.858065][T31769] cramfs: ffffffff96fdc37c(16)->ffff88806ac03000(4096) [ 1335.872538][T31769] cramfs: Error -3 while decompressing! [ 1335.889028][T31769] cramfs: ffffffff96fdc348(26)->ffff888049bde000(4096) [ 1335.911633][ T28] audit: type=1800 audit(2000001950.333:139): pid=31769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11495" name="file3" dev="loop1" ino=348 res=0 errno=0 [ 1336.977245][T31812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11516'. [ 1337.145119][ T5118] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1337.371329][ T5118] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.382628][ T5118] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1337.423735][ T5118] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1337.433280][ T5118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1337.441502][ T5118] usb 2-1: SerialNumber: syz [ 1337.551486][T26338] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1337.681543][T31837] loop2: detected capacity change from 0 to 4096 [ 1337.694581][ T5118] usb 2-1: 0:2 : does not exist [ 1337.711946][ T5118] usb 2-1: unit 5: unexpected type 0x03 [ 1337.747978][ T5118] usb 2-1: USB disconnect, device number 47 [ 1337.776005][T26338] usb 4-1: Using ep0 maxpacket: 16 [ 1337.795472][T26338] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1337.823004][ T6731] udevd[6731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.843286][T26338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.876771][T26338] usb 4-1: Product: syz [ 1337.880986][T26338] usb 4-1: Manufacturer: syz [ 1337.905167][T26338] usb 4-1: SerialNumber: syz [ 1337.928028][T26338] usb 4-1: config 0 descriptor?? [ 1337.960399][T26338] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1338.189085][T31849] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1338.406197][T31856] loop2: detected capacity change from 0 to 128 [ 1338.415219][T26338] ssu100: probe of 4-1:0.0 failed with error -71 [ 1338.432450][T26338] usb 4-1: USB disconnect, device number 57 [ 1338.501629][T31856] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1338.552388][T31856] ext4 filesystem being mounted at /2623/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1338.567616][T31856] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 1338.638984][ T6517] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1338.987135][T31875] SET target dimension over the limit! [ 1339.026448][T31879] loop2: detected capacity change from 0 to 64 [ 1339.623863][T31900] netlink: 5064 bytes leftover after parsing attributes in process `syz.0.11559'. [ 1339.972626][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11565'. [ 1340.006259][T31911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11565'. [ 1340.041164][T31915] loop1: detected capacity change from 0 to 256 [ 1340.102232][T31915] FAT-fs (loop1): Directory bread(block 64) failed [ 1340.113807][T31915] FAT-fs (loop1): Directory bread(block 65) failed [ 1340.134048][T31915] FAT-fs (loop1): Directory bread(block 66) failed [ 1340.171576][T31915] FAT-fs (loop1): Directory bread(block 67) failed [ 1340.178254][T31915] FAT-fs (loop1): Directory bread(block 68) failed [ 1340.208904][T31915] FAT-fs (loop1): Directory bread(block 69) failed [ 1340.215070][T31917] syz.0.11567: attempt to access beyond end of device [ 1340.215070][T31917] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1340.247147][T31915] FAT-fs (loop1): Directory bread(block 70) failed [ 1340.277549][T31915] FAT-fs (loop1): Directory bread(block 71) failed [ 1340.299306][T31915] FAT-fs (loop1): Directory bread(block 72) failed [ 1340.321129][T31915] FAT-fs (loop1): Directory bread(block 73) failed [ 1340.396562][T31889] loop2: detected capacity change from 0 to 40427 [ 1340.450744][T31889] F2FS-fs (loop2): invalid crc value [ 1340.495366][T31889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1340.615856][T31921] xt_CT: No such helper "pptp" [ 1340.626817][T31889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1341.033544][T31937] netlink: 'syz.3.11577': attribute type 3 has an invalid length. [ 1341.055429][T31937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11577'. [ 1341.397248][T31947] loop1: detected capacity change from 0 to 512 [ 1341.458896][T31947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1341.490911][T31947] ext4 filesystem being mounted at /2844/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.525666][T31947] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1341.537143][T31947] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1341.548343][T31947] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.11581: Failed to acquire dquot type 0 [ 1341.767918][ T6510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1341.947209][T31970] netlink: 'syz.3.11591': attribute type 3 has an invalid length. [ 1342.969455][T32010] loop2: detected capacity change from 0 to 1024 [ 1343.198580][T26073] hfsplus: b-tree write err: -5, ino 4 [ 1343.339670][T32025] loop1: detected capacity change from 0 to 128 [ 1343.399275][T32025] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.452535][T32025] ext4 filesystem being mounted at /2852/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.505917][T32025] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 1343.609288][ T6510] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1343.799845][T32044] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.11625'. [ 1344.306045][T32060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1344.357307][T32063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11635'. [ 1344.855596][T32075] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11640'. [ 1345.159226][T32091] loop3: detected capacity change from 0 to 128 [ 1345.181895][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1345.188478][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1345.212439][T32091] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1345.247295][T32091] FAT-fs (loop3): Filesystem has been set read-only [ 1345.662669][T32100] loop3: detected capacity change from 0 to 8192 [ 1345.688665][T32100] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1345.723564][T32100] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1345.742364][T32102] loop1: detected capacity change from 0 to 8192 [ 1345.782372][T32100] REISERFS (device loop3): using ordered data mode [ 1345.828607][T32100] reiserfs: using flush barriers [ 1345.886625][T32100] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1345.941769][T32100] REISERFS (device loop3): checking transaction log (loop3) [ 1346.251180][T32124] overlay: ./file0 is not a directory [ 1346.376542][T32100] REISERFS (device loop3): Using tea hash to sort names [ 1346.383953][T32100] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1346.412816][T32128] loop2: detected capacity change from 0 to 8 [ 1346.496838][T32128] SQUASHFS error: Unable to read directory block [1d0:0] [ 1347.076188][T32152] kernel read not supported for file /  (pid: 32152 comm: syz.2.11673) [ 1347.116422][ T28] audit: type=1800 audit(2000001960.824:140): pid=32152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11673" name=200120 dev="mqueue" ino=81151 res=0 errno=0 [ 1347.347632][ T6406] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1347.576270][ T6406] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1347.593411][ T6406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.611313][T32172] trusted_key: encrypted_key: keyword 'ne' not recognized [ 1347.619216][ T6406] usb 2-1: Product: syz [ 1347.640233][ T6406] usb 2-1: Manufacturer: syz [ 1347.661705][ T6406] usb 2-1: SerialNumber: syz [ 1347.690495][ T6406] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1347.774496][ T6406] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1347.983441][T32183] virtiofs: Unknown parameter 'always' [ 1348.245813][ T5118] usb 2-1: USB disconnect, device number 48 [ 1348.352712][T32198] netlink: 'syz.0.11689': attribute type 11 has an invalid length. [ 1348.954242][ T6406] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1348.986522][ T6406] ath9k_htc: Failed to initialize the device [ 1349.036055][ T5118] usb 2-1: ath9k_htc: USB layer deinitialized [ 1349.193898][T32224] netlink: 'syz.0.11700': attribute type 8 has an invalid length. [ 1349.340306][T32201] loop3: detected capacity change from 0 to 32768 [ 1349.368502][T32201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.11692 (32201) [ 1349.439203][T32201] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1349.472863][T32201] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1349.500674][T32201] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1349.518727][T32201] BTRFS info (device loop3): enabling disk space caching [ 1349.525896][T32201] BTRFS info (device loop3): turning off barriers [ 1349.569086][T32201] BTRFS info (device loop3): turning on flush-on-commit [ 1349.612504][T32201] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1349.656395][T32235] IPv6: Can't replace route, no match found [ 1349.668547][T32201] BTRFS info (device loop3): force lzo compression, level 0 [ 1349.675939][T32201] BTRFS info (device loop3): max_inline at 0 [ 1349.709239][T32239] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1349.710567][T32201] BTRFS info (device loop3): force clearing of disk cache [ 1349.764092][T32201] BTRFS info (device loop3): using default commit interval 30s [ 1349.814629][T32201] BTRFS info (device loop3): enabling ssd optimizations [ 1349.838623][T32201] BTRFS info (device loop3): max_inline at 868 [ 1349.865642][T32201] BTRFS info (device loop3): disk space caching is enabled [ 1349.958179][T32256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11711'. [ 1350.027772][T32252] loop1: detected capacity change from 0 to 4096 [ 1350.030472][T32201] BTRFS info (device loop3): auto enabling async discard [ 1350.074337][T32252] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1350.086829][T32201] BTRFS info (device loop3): rebuilding free space tree [ 1350.129941][T32201] BTRFS info (device loop3): disabling free space tree [ 1350.136906][T32201] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1350.202799][T32201] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1350.278658][T32266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1350.470836][ T6515] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1351.063755][T32287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11724'. [ 1351.102709][T32287] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11724'. [ 1351.892410][T32318] SET target dimension over the limit! [ 1352.101069][T32329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11742'. [ 1352.121793][T32329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11742'. [ 1352.132346][T32329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11742'. [ 1352.478269][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11750'. [ 1352.512455][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11750'. [ 1352.538824][T32345] netlink: set zone limit has 8 unknown bytes [ 1352.675644][T32351] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11754'. [ 1353.856487][T32401] netlink: 'syz.2.11779': attribute type 3 has an invalid length. [ 1353.899529][ T28] audit: type=1400 audit(2000001967.155:141): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=32405 comm="syz.3.11781" [ 1354.266661][T32418] netlink: 'syz.2.11787': attribute type 32 has an invalid length. [ 1355.483725][T32465] syz.3.11810: attempt to access beyond end of device [ 1355.483725][T32465] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1355.513468][T32465] syz.3.11810: attempt to access beyond end of device [ 1355.513468][T32465] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1355.549436][T32465] Mount JFS Failure: -5 [ 1355.553919][T32465] jfs_mount failed w/return code = -5 [ 1355.606572][T32463] loop2: detected capacity change from 0 to 4096 [ 1355.619868][T32469] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11812'. [ 1355.645680][T32463] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1355.883639][T32463] ntfs3: loop2: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 1355.924714][T32463] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1356.057459][ T48] ntfs3: loop2: ino=1e, ntfs3_write_inode failed, -22. [ 1356.205880][T32480] netlink: 'syz.1.11819': attribute type 21 has an invalid length. [ 1356.229094][T32481] loop3: detected capacity change from 0 to 64 [ 1356.282129][T32481] hfs: unable to locate alternate MDB [ 1356.304561][T32481] hfs: continuing without an alternate MDB [ 1356.396441][T32485] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11820'. [ 1356.659144][T32490] libceph: resolve '400' (ret=-3): failed [ 1357.261394][T32512] 9pnet_fd: p9_fd_create_unix (32512): problem connecting socket: ./file0: -111 [ 1357.870329][T32528] (unnamed net_device) (uninitialized): option ad_select: invalid value (4) [ 1357.916994][T32502] loop1: detected capacity change from 0 to 32768 [ 1357.967067][T32502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.11827 (32502) [ 1358.033046][T32502] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1358.090103][T32502] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1358.103049][T32538] tmpfs: Bad value for 'mpol' [ 1358.133313][T32502] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1358.142922][T32502] BTRFS info (device loop1): enabling disk space caching [ 1358.180005][T32502] BTRFS info (device loop1): turning off barriers [ 1358.186742][T32502] BTRFS info (device loop1): turning on flush-on-commit [ 1358.232404][T32502] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1358.269667][T32502] BTRFS info (device loop1): force lzo compression, level 0 [ 1358.283843][T32502] BTRFS info (device loop1): max_inline at 0 [ 1358.308676][T32502] BTRFS info (device loop1): force clearing of disk cache [ 1358.315858][T32502] BTRFS info (device loop1): using default commit interval 30s [ 1358.340614][T32502] BTRFS info (device loop1): enabling ssd optimizations [ 1358.347708][T32502] BTRFS info (device loop1): max_inline at 868 [ 1358.361034][T32502] BTRFS info (device loop1): disk space caching is enabled [ 1358.608214][T32502] BTRFS info (device loop1): auto enabling async discard [ 1358.651274][T32502] BTRFS info (device loop1): rebuilding free space tree [ 1358.742351][T32502] BTRFS info (device loop1): disabling free space tree [ 1358.756328][T32502] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1358.775032][T32502] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1359.082716][ T6510] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1359.330314][T32587] vlan1: entered allmulticast mode [ 1359.344959][T32587] veth0_vlan: entered allmulticast mode [ 1359.588745][T32593] netlink: 'syz.2.11864': attribute type 21 has an invalid length. [ 1359.599306][T32593] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1359.612730][T32593] netlink: 'syz.2.11864': attribute type 5 has an invalid length. [ 1359.669151][T32593] netlink: 'syz.2.11864': attribute type 6 has an invalid length. [ 1359.693748][T32593] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11864'. [ 1359.966831][T32607] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 1360.024763][T32607] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms [ 1360.273166][T32616] netlink: 'syz.3.11875': attribute type 13 has an invalid length. [ 1360.295653][T32616] gretap0: refused to change device tx_queue_len [ 1360.302654][T32616] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1360.853074][T32636] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 1360.869486][T32636] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms [ 1360.905810][ T28] audit: type=1326 audit(2000001973.710:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32637 comm="syz.0.11886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1360.942577][ T28] audit: type=1326 audit(2000001973.710:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32637 comm="syz.0.11886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1360.950104][T32641] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.089452][ T28] audit: type=1326 audit(2000001973.747:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32637 comm="syz.0.11886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1361.159329][ T28] audit: type=1326 audit(2000001973.747:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32637 comm="syz.0.11886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1361.182701][T32647] netlink: 'syz.0.11889': attribute type 21 has an invalid length. [ 1361.196261][T32647] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11889'. [ 1361.255717][ T28] audit: type=1326 audit(2000001973.747:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32637 comm="syz.0.11886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7558efc9 code=0x7ffc0000 [ 1361.278165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.599681][T32699] wg1: entered promiscuous mode [ 1362.604613][T32699] wg1: entered allmulticast mode [ 1362.680882][T32677] loop2: detected capacity change from 0 to 32768 [ 1362.704136][T32677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.11904 (32677) [ 1362.759068][T32677] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1362.789173][T32677] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1362.804559][T32677] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1362.814877][T32677] BTRFS info (device loop2): enabling disk space caching [ 1362.821529][ T6406] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1362.822635][T32677] BTRFS info (device loop2): turning off barriers [ 1362.864170][T32677] BTRFS info (device loop2): turning on flush-on-commit [ 1362.885706][T32677] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1362.933305][T32677] BTRFS info (device loop2): force lzo compression, level 0 [ 1362.954949][T32677] BTRFS info (device loop2): max_inline at 0 [ 1362.966613][T32677] BTRFS info (device loop2): force clearing of disk cache [ 1362.982223][T32677] BTRFS info (device loop2): using default commit interval 30s [ 1362.990062][T32677] BTRFS info (device loop2): enabling ssd optimizations [ 1363.023217][T32677] BTRFS info (device loop2): max_inline at 868 [ 1363.052853][ T6406] usb 2-1: Using ep0 maxpacket: 8 [ 1363.071067][T32677] BTRFS info (device loop2): disk space caching is enabled [ 1363.093749][ T6406] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1363.115025][ T6406] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 1363.136480][ T6406] usb 2-1: config 8 interface 0 has no altsetting 0 [ 1363.151497][ T6406] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1363.174344][ T6406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.182411][ T6406] usb 2-1: Product: syz [ 1363.188310][ T6406] usb 2-1: Manufacturer: syz [ 1363.192945][ T6406] usb 2-1: SerialNumber: syz [ 1363.209232][T32697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1363.317175][T32677] BTRFS info (device loop2): auto enabling async discard [ 1363.386982][T32677] BTRFS info (device loop2): rebuilding free space tree [ 1363.439101][T32677] BTRFS info (device loop2): disabling free space tree [ 1363.469907][ T6406] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1363.483263][T32677] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1363.502520][ T6406] usb 2-1: selecting invalid altsetting 0 [ 1363.503309][T32677] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1363.545339][T32733] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1363.592984][T32733] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1363.617953][ T6406] usb 2-1: USB disconnect, device number 49 [ 1363.765695][ T6517] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1363.980444][T32737] loop3: detected capacity change from 0 to 4096 [ 1363.990511][T32737] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1364.039267][T32737] ntfs3: loop3: failed to convert "c46c" to cp852 [ 1364.221029][T32741] SET target dimension over the limit! [ 1364.254873][ T6560] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1364.464049][ T6560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1364.478959][ T6560] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1364.488665][T32747] loop3: detected capacity change from 0 to 1024 [ 1364.499611][ T6560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1364.519271][T32750] loop1: detected capacity change from 0 to 64 [ 1364.540567][ T6560] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1364.571025][T32747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.578109][ T6560] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1364.592768][ T6560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.601341][ T6560] usb 1-1: Product: syz [ 1364.605623][ T6560] usb 1-1: Manufacturer: syz [ 1364.610840][ T6560] usb 1-1: SerialNumber: syz [ 1364.618543][ T6560] usb 1-1: config 0 descriptor?? [ 1364.623967][T32747] ext4 filesystem being mounted at /2816/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.642307][ T6560] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1364.925097][ T6560] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 1364.976886][T32764] loop2: detected capacity change from 0 to 256 [ 1364.985342][T32764] exfat: Deprecated parameter 'namecase' [ 1364.991196][T32764] exfat: Deprecated parameter 'utf8' [ 1365.023892][T32764] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1365.045958][ T6406] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1365.087170][ T6560] usb 1-1: USB disconnect, device number 69 [ 1365.112979][ T300] netlink: 136 bytes leftover after parsing attributes in process `syz.1.11939'. [ 1365.281236][ T6406] usb 4-1: Using ep0 maxpacket: 8 [ 1365.293935][ T6406] usb 4-1: config 4 has an invalid interface number: 244 but max is 0 [ 1365.321692][ T6406] usb 4-1: config 4 has no interface number 0 [ 1365.338801][ T6406] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 1365.362340][ T6406] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 65267, setting to 1024 [ 1365.374780][ T6406] usb 4-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1365.405976][ T6406] usb 4-1: config 4 interface 244 has no altsetting 0 [ 1365.422890][ T6406] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 1365.441867][ T6406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.449923][ T6406] usb 4-1: Product: syz [ 1365.457949][ T6406] usb 4-1: Manufacturer: syz [ 1365.473538][ T6406] usb 4-1: SerialNumber: syz [ 1365.492909][T32747] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1365.561236][ T312] netlink: 'syz.2.11946': attribute type 1 has an invalid length. [ 1365.765859][ T318] netlink: 'syz.2.11948': attribute type 21 has an invalid length. [ 1365.775064][ T318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11948'. [ 1365.777226][ T6406] ipheth 4-1:4.244: Unable to find endpoints [ 1365.837696][ T6406] usb 4-1: USB disconnect, device number 58 [ 1366.487877][ T6515] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.319049][ T378] loop1: detected capacity change from 0 to 64 [ 1367.772218][ T392] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1367.798350][ T394] netlink: 'syz.1.11986': attribute type 1 has an invalid length. [ 1367.807172][ T394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11986'. [ 1368.085623][ T404] cgroup: Invalid name [ 1368.115332][ T406] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11992'. [ 1368.522666][ T422] vlan0: entered promiscuous mode [ 1368.598683][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12003'. [ 1368.893160][ T438] loop1: detected capacity change from 0 to 164 [ 1369.181267][ T446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12013'. [ 1369.684170][ T460] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1370.283113][ T481] loop3: detected capacity change from 0 to 64 [ 1370.293108][ T482] loop2: detected capacity change from 0 to 512 [ 1370.358005][ T482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.382315][ T482] ext4 filesystem being mounted at /2744/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.463363][ T482] [ 1370.465746][ T482] ====================================================== [ 1370.472787][ T482] WARNING: possible circular locking dependency detected [ 1370.479832][ T482] syzkaller #0 Not tainted [ 1370.484261][ T482] ------------------------------------------------------ [ 1370.491294][ T482] syz.2.12029/482 is trying to acquire lock: [ 1370.497288][ T482] ffff888073b92ce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 1370.505694][ T482] [ 1370.505694][ T482] but task is already holding lock: [ 1370.513076][ T482] ffff88804e0ed0c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1370.522055][ T482] [ 1370.522055][ T482] which lock already depends on the new lock. [ 1370.522055][ T482] [ 1370.532461][ T482] [ 1370.532461][ T482] the existing dependency chain (in reverse order) is: [ 1370.541475][ T482] [ 1370.541475][ T482] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 1370.549040][ T482] down_read+0x46/0x2e0 [ 1370.553748][ T482] ext4_setattr+0x86b/0x1c90 [ 1370.558875][ T482] notify_change+0xb0d/0xe10 [ 1370.563995][ T482] chown_common+0x3f9/0x5a0 [ 1370.569019][ T482] do_fchownat+0x168/0x270 [ 1370.573959][ T482] __x64_sys_chown+0x82/0x90 [ 1370.579076][ T482] do_syscall_64+0x55/0xb0 [ 1370.584020][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.590445][ T482] [ 1370.590445][ T482] -> #4 (jbd2_handle){++++}-{0:0}: [ 1370.597770][ T482] start_this_handle+0x1e9d/0x20c0 [ 1370.603407][ T482] jbd2__journal_start+0x2bb/0x5b0 [ 1370.609042][ T482] jbd2_journal_start+0x2a/0x40 [ 1370.614423][ T482] ocfs2_start_trans+0x376/0x6c0 [ 1370.619888][ T482] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1370.626142][ T482] ocfs2_dismount_volume+0x1e2/0x890 [ 1370.631959][ T482] generic_shutdown_super+0x134/0x2b0 [ 1370.637884][ T482] kill_block_super+0x44/0x90 [ 1370.643117][ T482] deactivate_locked_super+0x97/0x100 [ 1370.649033][ T482] cleanup_mnt+0x429/0x4c0 [ 1370.653968][ T482] task_work_run+0x1ce/0x250 [ 1370.659095][ T482] exit_to_user_mode_loop+0xe6/0x110 [ 1370.664919][ T482] exit_to_user_mode_prepare+0xf6/0x180 [ 1370.670999][ T482] syscall_exit_to_user_mode+0x1a/0x50 [ 1370.676990][ T482] do_syscall_64+0x61/0xb0 [ 1370.681941][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.688375][ T482] [ 1370.688375][ T482] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1370.696989][ T482] down_read+0x46/0x2e0 [ 1370.701678][ T482] ocfs2_start_trans+0x36a/0x6c0 [ 1370.707152][ T482] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1370.713403][ T482] ocfs2_dismount_volume+0x1e2/0x890 [ 1370.719221][ T482] generic_shutdown_super+0x134/0x2b0 [ 1370.725141][ T482] kill_block_super+0x44/0x90 [ 1370.730342][ T482] deactivate_locked_super+0x97/0x100 [ 1370.736257][ T482] cleanup_mnt+0x429/0x4c0 [ 1370.741203][ T482] task_work_run+0x1ce/0x250 [ 1370.746327][ T482] exit_to_user_mode_loop+0xe6/0x110 [ 1370.752171][ T482] exit_to_user_mode_prepare+0xf6/0x180 [ 1370.758269][ T482] syscall_exit_to_user_mode+0x1a/0x50 [ 1370.764253][ T482] do_syscall_64+0x61/0xb0 [ 1370.769192][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.775702][ T482] [ 1370.775702][ T482] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 1370.783199][ T482] ocfs2_start_trans+0x26b/0x6c0 [ 1370.788673][ T482] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1370.794309][ T482] dqget+0x77c/0xeb0 [ 1370.798728][ T482] dquot_set_dqblk+0x2b/0xf90 [ 1370.803930][ T482] quota_setquota+0x4b0/0x530 [ 1370.809163][ T482] __se_sys_quotactl+0x27b/0x950 [ 1370.814665][ T482] do_syscall_64+0x55/0xb0 [ 1370.819620][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.826043][ T482] [ 1370.826043][ T482] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1370.834913][ T482] down_write+0x97/0x1f0 [ 1370.839707][ T482] ocfs2_create_local_dquot+0x1a4/0x1790 [ 1370.845869][ T482] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 1370.851511][ T482] dqget+0x77c/0xeb0 [ 1370.855943][ T482] dquot_set_dqblk+0x2b/0xf90 [ 1370.861156][ T482] quota_setquota+0x4b0/0x530 [ 1370.866382][ T482] __se_sys_quotactl+0x27b/0x950 [ 1370.871863][ T482] do_syscall_64+0x55/0xb0 [ 1370.876819][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.883234][ T482] [ 1370.883234][ T482] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1370.890891][ T482] __lock_acquire+0x2ddb/0x7c80 [ 1370.896274][ T482] lock_acquire+0x197/0x410 [ 1370.901305][ T482] __mutex_lock+0x129/0xcc0 [ 1370.906339][ T482] dqget+0x6fc/0xeb0 [ 1370.910774][ T482] dquot_transfer+0x2f9/0x6d0 [ 1370.916505][ T482] ext4_setattr+0x87d/0x1c90 [ 1370.921628][ T482] notify_change+0xb0d/0xe10 [ 1370.926746][ T482] chown_common+0x3f9/0x5a0 [ 1370.931788][ T482] do_fchownat+0x168/0x270 [ 1370.936729][ T482] __x64_sys_lchown+0x85/0x90 [ 1370.941944][ T482] do_syscall_64+0x55/0xb0 [ 1370.946892][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1370.953323][ T482] [ 1370.953323][ T482] other info that might help us debug this: [ 1370.953323][ T482] [ 1370.963559][ T482] Chain exists of: [ 1370.963559][ T482] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 1370.963559][ T482] [ 1370.976191][ T482] Possible unsafe locking scenario: [ 1370.976191][ T482] [ 1370.983650][ T482] CPU0 CPU1 [ 1370.989024][ T482] ---- ---- [ 1370.994396][ T482] rlock(&ei->xattr_sem); [ 1370.998836][ T482] lock(jbd2_handle); [ 1371.005430][ T482] lock(&ei->xattr_sem); [ 1371.012290][ T482] lock(&dquot->dq_lock); [ 1371.016720][ T482] [ 1371.016720][ T482] *** DEADLOCK *** [ 1371.016720][ T482] [ 1371.024957][ T482] 3 locks held by syz.2.12029/482: [ 1371.030070][ T482] #0: ffff8880554b8418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1371.039239][ T482] #1: ffff88804e0ed410 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 1371.049635][ T482] #2: ffff88804e0ed0c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1371.059049][ T482] [ 1371.059049][ T482] stack backtrace: [ 1371.064947][ T482] CPU: 0 PID: 482 Comm: syz.2.12029 Not tainted syzkaller #0 [ 1371.072315][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1371.082395][ T482] Call Trace: [ 1371.085676][ T482] [ 1371.088615][ T482] dump_stack_lvl+0x16c/0x230 [ 1371.093323][ T482] ? load_image+0x3b0/0x3b0 [ 1371.097837][ T482] ? show_regs_print_info+0x20/0x20 [ 1371.103051][ T482] ? print_circular_bug+0x12b/0x1a0 [ 1371.108261][ T482] check_noncircular+0x2bd/0x3c0 [ 1371.113213][ T482] ? look_up_lock_class+0x75/0x140 [ 1371.118344][ T482] ? print_deadlock_bug+0x5d0/0x5d0 [ 1371.123560][ T482] ? lockdep_lock+0xe0/0x220 [ 1371.128154][ T482] ? _find_first_zero_bit+0xd3/0x100 [ 1371.133796][ T482] __lock_acquire+0x2ddb/0x7c80 [ 1371.138654][ T482] ? mark_lock+0x94/0x320 [ 1371.142985][ T482] ? verify_lock_unused+0x140/0x140 [ 1371.148183][ T482] ? __lock_acquire+0x1334/0x7c80 [ 1371.153223][ T482] lock_acquire+0x197/0x410 [ 1371.157726][ T482] ? dqget+0x6fc/0xeb0 [ 1371.161803][ T482] ? __might_sleep+0xe0/0xe0 [ 1371.166421][ T482] ? read_lock_is_recursive+0x20/0x20 [ 1371.171798][ T482] ? mark_lock+0x94/0x320 [ 1371.176152][ T482] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1371.182138][ T482] __mutex_lock+0x129/0xcc0 [ 1371.186655][ T482] ? dqget+0x6fc/0xeb0 [ 1371.190738][ T482] ? percpu_counter_add_batch+0x1d9/0x280 [ 1371.196494][ T482] ? lockdep_hardirqs_on+0x98/0x150 [ 1371.201731][ T482] ? percpu_counter_add_batch+0x22b/0x280 [ 1371.207468][ T482] ? dqget+0x6fc/0xeb0 [ 1371.211558][ T482] ? mutex_lock_nested+0x20/0x20 [ 1371.216529][ T482] ? percpu_counter_set+0x1a0/0x1a0 [ 1371.221735][ T482] ? make_kuid+0x640/0x640 [ 1371.226161][ T482] ? do_raw_spin_unlock+0x121/0x230 [ 1371.231369][ T482] dqget+0x6fc/0xeb0 [ 1371.235279][ T482] dquot_transfer+0x2f9/0x6d0 [ 1371.239969][ T482] ? __dquot_transfer+0x22f0/0x22f0 [ 1371.245178][ T482] ? down_read+0x1ac/0x2e0 [ 1371.249607][ T482] ext4_setattr+0x87d/0x1c90 [ 1371.254208][ T482] ? evm_inode_setattr+0x94/0x6a0 [ 1371.259248][ T482] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1371.264452][ T482] ? try_break_deleg+0x79/0x120 [ 1371.269315][ T482] ? ext4_write_inode+0x550/0x550 [ 1371.274356][ T482] notify_change+0xb0d/0xe10 [ 1371.278969][ T482] chown_common+0x3f9/0x5a0 [ 1371.283483][ T482] ? __ia32_sys_chmod+0x70/0x70 [ 1371.288346][ T482] ? rcu_read_lock_any_held+0xb4/0x120 [ 1371.293816][ T482] ? __mnt_want_write+0x223/0x2a0 [ 1371.298880][ T482] do_fchownat+0x168/0x270 [ 1371.303388][ T482] ? chown_common+0x5a0/0x5a0 [ 1371.308072][ T482] __x64_sys_lchown+0x85/0x90 [ 1371.312775][ T482] do_syscall_64+0x55/0xb0 [ 1371.317214][ T482] ? clear_bhb_loop+0x40/0x90 [ 1371.321913][ T482] ? clear_bhb_loop+0x40/0x90 [ 1371.326621][ T482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.332517][ T482] RIP: 0033:0x7fd361f8efc9 [ 1371.336938][ T482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.356550][ T482] RSP: 002b:00007fd362e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1371.364985][ T482] RAX: ffffffffffffffda RBX: 00007fd3621e5fa0 RCX: 00007fd361f8efc9 [ 1371.373048][ T482] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000200000000080 [ 1371.381030][ T482] RBP: 00007fd362011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1371.389006][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.396981][ T482] R13: 00007fd3621e6038 R14: 00007fd3621e5fa0 R15: 00007fff6c0d5578 [ 1371.404966][ T482] [ 1371.547176][ T6517] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.125236][T29780] Bluetooth: hci3: command 0x0c1a tx timeout