last executing test programs: 2.681866142s ago: executing program 0 (id=6981): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4}) 2.530976495s ago: executing program 0 (id=6983): r0 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8ffff88805a3d2000(4096) [ 595.260340][T15995] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 595.264334][T15990] cramfs: Error -3 while decompressing! [ 595.288448][T15990] cramfs: ffffffff974c5582(26)->ffff88805547c000(4096) [ 595.313104][T15990] cramfs: Error -3 while decompressing! [ 595.322663][T15995] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5149'. [ 595.338755][T15990] cramfs: ffffffff974c559c(16)->ffff88804c23e000(4096) [ 595.358276][T15990] cramfs: Error -3 while decompressing! [ 595.377866][T15990] cramfs: ffffffff974c5568(26)->ffff88805a3d2000(4096) [ 595.407973][ T26] audit: type=1800 audit(4595312.547:72): pid=15990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5147" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 595.639476][T16009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5154'. [ 595.829981][ T4103] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 596.073826][T16026] netlink: 'syz.4.5160': attribute type 2 has an invalid length. [ 596.081760][ T4103] usb 2-1: Using ep0 maxpacket: 8 [ 596.248462][ T4103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.372525][ T4103] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 596.396477][T15992] loop3: detected capacity change from 0 to 32768 [ 596.403040][ T4103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 596.421490][ T4103] usb 2-1: SerialNumber: syz [ 596.439714][ T4103] usb 2-1: config 0 descriptor?? [ 596.477572][T15992] XFS (loop3): Mounting V5 Filesystem [ 596.488577][ T4103] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 596.499554][ T4103] usb 2-1: No valid video chain found. [ 596.536681][T16047] netlink: 'syz.4.5165': attribute type 1 has an invalid length. [ 596.655929][T15992] XFS (loop3): Ending clean mount [ 596.684750][ T4103] usb 2-1: USB disconnect, device number 37 [ 596.789976][ T3651] XFS (loop3): Unmounting Filesystem [ 596.870793][T16060] netlink: 'syz.0.5169': attribute type 1 has an invalid length. [ 597.230862][T16033] loop2: detected capacity change from 0 to 32768 [ 597.267395][T16033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5161 (16033) [ 597.379370][T16033] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 597.448851][T16033] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 597.514811][T16033] BTRFS info (device loop2): using free space tree [ 597.815439][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.821822][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.907889][T16113] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5183'. [ 597.937101][T16033] BTRFS info (device loop2): enabling ssd optimizations [ 598.055202][T15475] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.433560][T16135] loop1: detected capacity change from 0 to 1024 [ 598.985719][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5197'. [ 599.655420][ T52] block nbd0: Attempted send on invalid socket [ 599.662383][ T52] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.670292][T16173] loop2: detected capacity change from 0 to 4096 [ 599.678922][T16178] hfs: can't find a HFS filesystem on dev nbd0 [ 599.770380][T16173] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 599.835888][T16183] loop1: detected capacity change from 0 to 256 [ 599.864973][T16173] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 599.964522][T16173] ntfs3: loop2: ino=5, "/" The size of extended attributes must not exceed 64KiB [ 600.044347][T16188] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5213'. [ 600.106491][ T3716] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 600.117988][T15475] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 600.400120][T16204] loop2: detected capacity change from 0 to 256 [ 600.406940][T16105] loop4: detected capacity change from 0 to 65536 [ 600.434936][T16205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5221'. [ 600.501779][T16105] XFS (loop4): Mounting V5 Filesystem [ 600.539991][T16105] XFS (loop4): AIL initialisation failed: error -12 [ 600.651510][T16105] XFS (loop4): log mount failed [ 600.846811][T16232] netlink: 'syz.2.5231': attribute type 21 has an invalid length. [ 600.883438][T16232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5231'. [ 600.910064][T16232] netlink: 'syz.2.5231': attribute type 4 has an invalid length. [ 600.921022][T16232] netlink: 'syz.2.5231': attribute type 3 has an invalid length. [ 600.966784][T16232] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5231'. [ 601.162401][T16242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.494665][T16254] loop3: detected capacity change from 0 to 2048 [ 601.542805][T16254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 601.735191][ T4110] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 601.992155][ T4110] usb 3-1: Using ep0 maxpacket: 8 [ 602.001076][T16284] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5256'. [ 602.031734][T16284] tc_dump_action: action bad kind [ 602.096431][T16288] netlink: 'syz.1.5259': attribute type 3 has an invalid length. [ 602.297489][ T4110] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 602.335176][ T4110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.353350][ T4110] usb 3-1: Product: syz [ 602.360184][ T4110] usb 3-1: Manufacturer: syz [ 602.367440][ T4110] usb 3-1: SerialNumber: syz [ 602.395094][ T4110] usb 3-1: config 0 descriptor?? [ 602.430631][ T7079] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 602.454725][ T48] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 602.512137][T16307] netlink: 'syz.1.5268': attribute type 2 has an invalid length. [ 602.532043][T16307] netlink: 'syz.1.5268': attribute type 1 has an invalid length. [ 602.541091][T16307] netlink: 'syz.1.5268': attribute type 1 has an invalid length. [ 602.641600][T16312] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 602.668651][T16312] overlayfs: missing 'lowerdir' [ 602.678263][ T7079] usb 1-1: Using ep0 maxpacket: 8 [ 602.792727][ T7079] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 602.811691][ T7079] usb 1-1: config 135 has an invalid descriptor of length 196, skipping remainder of the config [ 602.836228][ T7079] usb 1-1: config 135 has no interface number 0 [ 602.843367][ T7079] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.935725][T16322] loop3: detected capacity change from 0 to 4096 [ 602.991872][T16322] ntfs: (device loop3): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 603.021331][ T7079] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 603.030400][ T7079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.049264][ T7079] usb 1-1: Product: syz [ 603.073616][T16322] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 603.082331][ T7079] usb 1-1: Manufacturer: syz [ 603.086953][ T7079] usb 1-1: SerialNumber: syz [ 603.107038][T16322] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 603.134418][T16322] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 603.154829][T16322] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 603.172381][ T7080] usb 3-1: USB disconnect, device number 32 [ 603.193574][T16322] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 603.209135][T16322] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 603.250849][T16322] ntfs: volume version 3.1. [ 603.261953][T16322] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 603.272416][T16322] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 603.280691][T16322] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 603.392807][ T7079] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 603.412203][ T7079] usb 1-1: No valid video chain found. [ 603.454812][ T7079] usb 1-1: USB disconnect, device number 27 [ 603.621171][ T7080] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 603.673818][T16354] loop4: detected capacity change from 0 to 512 [ 603.693259][T16356] netlink: 'syz.3.5290': attribute type 21 has an invalid length. [ 603.789108][T16354] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 603.951133][T16354] loop4: detected capacity change from 0 to 4096 [ 603.983546][ T7080] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 604.015574][T16354] NILFS (loop4): unrecognized mount option "bsddf" [ 604.091241][ T7846] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 604.173535][ T7080] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.202228][ T7080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.248036][ T7080] usb 3-1: Product: syz [ 604.274271][ T7080] usb 3-1: Manufacturer: syz [ 604.285204][ T7080] usb 3-1: SerialNumber: syz [ 604.360990][ T7080] usb 3-1: bad CDC descriptors [ 604.471357][T16384] loop3: detected capacity change from 0 to 1024 [ 604.562436][ T7079] usb 3-1: USB disconnect, device number 33 [ 604.687934][T16395] loop1: detected capacity change from 0 to 512 [ 604.789439][T16395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 604.837273][T16395] ext4 filesystem being mounted at /1009/bus supports timestamps until 2038 (0x7fffffff) [ 605.168441][ T3642] EXT4-fs (loop1): unmounting filesystem. [ 605.405928][ T48] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 605.819183][T16410] loop4: detected capacity change from 0 to 32768 [ 605.907928][T16410] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 606.122145][ T3646] ocfs2: Unmounting device (7,4) on (node local) [ 606.279027][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 606.287895][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 606.297149][ T48] Bluetooth: hci2: hardware error 0x00 [ 606.893640][T16460] loop3: detected capacity change from 0 to 4096 [ 606.914139][T16472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5343'. [ 606.946208][T16460] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 607.037026][T16460] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 607.051812][T16442] loop2: detected capacity change from 0 to 32768 [ 607.058288][T16460] ntfs3: loop3: Failed to load $Extend. [ 607.371242][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'. [ 607.412268][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'. [ 608.250947][ T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 608.867450][T16491] loop4: detected capacity change from 0 to 32768 [ 608.872308][ T48] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 608.898721][T16491] XFS: attr2 mount option is deprecated. [ 608.970603][T16556] netlink: 'syz.2.5382': attribute type 10 has an invalid length. [ 608.974566][T16491] XFS: ikeep mount option is deprecated. [ 609.013252][T16491] XFS: noikeep mount option is deprecated. [ 609.055179][T16556] team0: Device hsr_slave_1 failed to register rx_handler [ 609.100153][T16491] XFS (loop4): Mounting V5 Filesystem [ 609.121716][T16559] netlink: 'syz.0.5383': attribute type 10 has an invalid length. [ 609.158586][T16559] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.167495][T16559] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.192415][T16535] loop1: detected capacity change from 0 to 32768 [ 609.233068][T16559] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.240284][T16559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.247780][T16559] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.254949][T16559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.265445][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 609.274360][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 609.283228][T16491] XFS (loop4): Ending clean mount [ 609.284643][ T48] Bluetooth: hci1: hardware error 0x00 [ 609.302677][T16535] add_index: next_index = 0. Resetting! [ 609.328986][T16535] find_entry called with index >= next_index [ 609.329530][T16559] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 609.346221][T16491] XFS (loop4): Quotacheck needed: Please wait. [ 609.351699][T16535] find_entry called with index >= next_index [ 609.354551][T16568] loop2: detected capacity change from 0 to 16 [ 609.438150][T16491] XFS (loop4): Quotacheck: Done. [ 609.464438][T16568] erofs: (device loop2): mounted with root inode @ nid 36. [ 609.581300][ T3646] XFS (loop4): Unmounting Filesystem [ 609.760708][T16576] loop2: detected capacity change from 0 to 1024 [ 609.809472][T16576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 609.959319][T15475] EXT4-fs (loop2): unmounting filesystem. [ 610.467185][T16602] loop1: detected capacity change from 0 to 1024 [ 610.601075][T16607] loop3: detected capacity change from 0 to 1764 [ 610.678192][T16607] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 610.945424][T16622] netlink: 'syz.0.5412': attribute type 10 has an invalid length. [ 610.980803][T16628] loop2: detected capacity change from 0 to 64 [ 611.000780][T16622] team0: Device hsr_slave_1 failed to register rx_handler [ 611.070484][T16632] usb usb9: usbfs: process 16632 (syz.3.5415) did not claim interface 8 before use [ 611.279678][ T7079] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 611.299209][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 611.755393][T16662] loop2: detected capacity change from 0 to 512 [ 611.787721][ T7079] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 611.822495][ T7079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.851043][ T7079] usb 2-1: Product: syz [ 611.855595][T16666] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.5432'. [ 611.864499][ T7079] usb 2-1: Manufacturer: syz [ 611.899315][ T7079] usb 2-1: SerialNumber: syz [ 611.926258][ T7079] usb 2-1: config 0 descriptor?? [ 612.025492][T16662] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 612.203953][ T7079] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 612.285175][T16662] loop2: detected capacity change from 0 to 4096 [ 612.331047][T16662] NILFS (loop2): unrecognized mount option "bsddf" [ 612.432634][ T7079] usb write operation failed. (-71) [ 612.441050][ T7079] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 612.508570][ T7079] usb write operation failed. (-71) [ 612.522032][ T7079] usb 2-1: USB disconnect, device number 38 [ 612.607352][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 612.755987][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 612.766514][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 612.776066][ T27] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 612.784059][ T48] Bluetooth: hci4: hardware error 0x00 [ 612.850272][T16690] loop2: detected capacity change from 0 to 4096 [ 612.857722][T16690] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 612.874677][T16690] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 613.058926][T15475] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 613.112353][T16702] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5448'. [ 613.175540][ T4109] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 613.385176][ T27] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 613.394257][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.446062][ T27] usb 5-1: Product: syz [ 613.450270][ T27] usb 5-1: Manufacturer: syz [ 613.476075][ T27] usb 5-1: SerialNumber: syz [ 613.554342][ T27] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 613.570653][ T4109] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.588388][ T4109] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.613175][ T4109] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.632647][ T4109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.656768][ T4109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.697516][T16728] loop1: detected capacity change from 0 to 2048 [ 613.716411][T16728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.774566][T16732] netlink: 'syz.2.5462': attribute type 1 has an invalid length. [ 613.813411][ T4109] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.860846][ T4109] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.871012][ T4109] usb 4-1: Product: syz [ 613.875320][ T4109] usb 4-1: Manufacturer: syz [ 613.933391][ T4109] cdc_wdm 4-1:1.0: skipping garbage [ 613.946622][ T4109] cdc_wdm 4-1:1.0: skipping garbage [ 613.964744][ T4109] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 613.982733][ T4109] cdc_wdm 4-1:1.0: Unknown control protocol [ 614.130977][T16694] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 614.146618][T16746] ipt_CLUSTERIP: Please specify destination IP [ 614.160515][ T4109] usb 4-1: USB disconnect, device number 33 [ 614.309061][ T27] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 614.487376][T16754] netlink: 'syz.1.5473': attribute type 10 has an invalid length. [ 614.550937][T16754] team0: Port device geneve1 added [ 614.557134][T16758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5475'. [ 614.710206][ T3643] usb 5-1: USB disconnect, device number 25 [ 614.731695][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 614.753319][T16766] loop1: detected capacity change from 0 to 64 [ 615.263117][T16790] netlink: 'syz.1.5491': attribute type 10 has an invalid length. [ 615.347082][ T27] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 615.354137][ T27] ath9k_htc: Failed to initialize the device [ 615.357151][T16790] team0: Device hsr_slave_1 failed to register rx_handler [ 615.370698][ T3643] usb 5-1: ath9k_htc: USB layer deinitialized [ 615.495133][T16800] loop3: detected capacity change from 0 to 512 [ 615.561258][T16800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 615.648599][T16800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 615.667549][T16800] ext4 filesystem being mounted at /1178/file1 supports timestamps until 2038 (0x7fffffff) [ 615.758345][T16812] loop1: detected capacity change from 0 to 64 [ 615.769038][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 615.851816][ T7846] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 616.000362][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'. [ 616.333623][T16841] loop1: detected capacity change from 0 to 2048 [ 616.346383][ T27] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 616.393341][T16841] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 616.410299][T16847] tipc: Can't bind to reserved service type 2 [ 616.425099][T16841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 616.489014][T16849] tmpfs: Bad value for 'mpol' [ 616.662252][ T4110] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 616.776582][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 616.904333][T16868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.952686][T16869] netlink: 'syz.0.5528': attribute type 1 has an invalid length. [ 616.976206][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.999367][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.007905][T16869] netlink: 'syz.0.5528': attribute type 2 has an invalid length. [ 617.018286][ T27] usb 4-1: Product: syz [ 617.022860][ T27] usb 4-1: Manufacturer: syz [ 617.027737][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 617.036947][ T27] usb 4-1: SerialNumber: syz [ 617.053216][ T4110] usb 3-1: config 1 has an invalid interface number: 65 but max is 1 [ 617.063912][ T4110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.074901][ T4110] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 617.100893][ T27] usb 4-1: bad CDC descriptors [ 617.117276][ T4110] usb 3-1: config 1 has no interface number 2 [ 617.133625][ T4110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.157667][ T4110] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 617.173425][ T4110] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 617.186543][ T4110] usb 3-1: config 1 interface 1 has no altsetting 0 [ 617.312567][ T27] usb 4-1: USB disconnect, device number 34 [ 617.360219][ T4110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.375803][ T4110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 617.394105][ T4110] usb 3-1: Product: syz [ 617.404628][ T7079] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 617.404631][ T4110] usb 3-1: Manufacturer: syz [ 617.423546][ T4110] usb 3-1: SerialNumber: syz [ 617.484066][ T4110] cdc_ncm 3-1:1.65: CDC Union missing and no IAD found [ 617.512811][ T4110] cdc_ncm 3-1:1.65: bind() failure [ 617.592103][T16893] loop4: detected capacity change from 0 to 2048 [ 617.611638][T16893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.633441][ T7079] usb 2-1: Using ep0 maxpacket: 16 [ 617.748315][ T7079] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 617.762033][ T7079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.776102][ T7079] usb 2-1: config 0 descriptor?? [ 617.815936][ T7079] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 617.905092][ T7] usb 3-1: USB disconnect, device number 34 [ 618.233246][ T7079] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 618.244876][ T7079] sq905c 2-1:0.0: Reading version command failed [ 618.251523][ T7079] sq905c: probe of 2-1:0.0 failed with error -71 [ 618.293003][ T7079] usb 2-1: USB disconnect, device number 39 [ 618.337093][T16909] loop4: detected capacity change from 0 to 2048 [ 618.386050][T16909] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 618.425752][T16909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.018625][T16935] loop2: detected capacity change from 0 to 256 [ 619.088519][T16935] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 619.125451][T16911] loop3: detected capacity change from 0 to 32768 [ 619.143377][T16911] XFS: attr2 mount option is deprecated. [ 619.184719][T16911] XFS: ikeep mount option is deprecated. [ 619.192514][T16911] XFS: noikeep mount option is deprecated. [ 619.288672][T16911] XFS (loop3): Mounting V5 Filesystem [ 619.352954][T16911] XFS (loop3): Ending clean mount [ 619.364354][T16911] XFS (loop3): Quotacheck needed: Please wait. [ 619.394812][T16947] loop2: detected capacity change from 0 to 2048 [ 619.401421][ T7079] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 619.419606][T16911] XFS (loop3): Quotacheck: Done. [ 619.461909][T16947] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 619.491412][T16947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.520805][ T3651] XFS (loop3): Unmounting Filesystem [ 619.662559][ T7079] usb 1-1: Using ep0 maxpacket: 16 [ 619.944787][ T7079] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 619.974049][ T7079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.993767][ T7079] usb 1-1: Product: syz [ 620.013736][ T7079] usb 1-1: Manufacturer: syz [ 620.030585][ T7079] usb 1-1: SerialNumber: syz [ 620.063409][ T7079] usb 1-1: config 0 descriptor?? [ 620.319416][ T7079] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 620.329028][ T7079] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 620.546214][ T27] usb 1-1: USB disconnect, device number 28 [ 620.976569][T17007] loop2: detected capacity change from 0 to 2048 [ 621.041219][T17009] loop1: detected capacity change from 0 to 128 [ 621.061055][T17007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.338398][T17014] netlink: 'syz.0.5597': attribute type 29 has an invalid length. [ 621.366568][T17014] netlink: 'syz.0.5597': attribute type 29 has an invalid length. [ 621.790584][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5605'. [ 621.985290][T16999] loop4: detected capacity change from 0 to 32768 [ 622.016678][T16999] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 622.046336][T16999] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 622.126870][T16999] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 622.151596][ T7079] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 622.165521][ T7079] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 622.344463][ T7079] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 187ms [ 622.346532][T17049] loop1: detected capacity change from 0 to 2048 [ 622.361491][ T7079] gfs2: fsid=syz:syz.0: jid=0: Done [ 622.366807][T16999] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 622.406197][T17049] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 623.269506][T17085] openvswitch: netlink: Missing key (keys=40, expected=100) [ 623.475430][T17094] netlink: 'syz.1.5636': attribute type 4 has an invalid length. [ 623.750592][T17105] loop4: detected capacity change from 0 to 512 [ 623.846530][T17105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 623.856178][T17105] ext4 filesystem being mounted at /1153/bus supports timestamps until 2038 (0x7fffffff) [ 624.023889][T17123] loop3: detected capacity change from 0 to 128 [ 624.034066][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 624.113982][T17123] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 624.209521][T17130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5653'. [ 624.333947][ T48] Bluetooth: Wrong link type (-57) [ 624.401790][T17137] x_tables: duplicate underflow at hook 4 [ 624.643174][T17151] loop2: detected capacity change from 0 to 512 [ 624.691706][T17151] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 624.729063][T17151] EXT4-fs (loop2): 1 truncate cleaned up [ 624.768765][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5664'. [ 624.792356][T17151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 624.864298][T15475] EXT4-fs (loop2): unmounting filesystem. [ 625.112403][T17176] netlink: 'syz.3.5675': attribute type 30 has an invalid length. [ 625.185088][T17182] loop4: detected capacity change from 0 to 128 [ 625.213697][T17181] loop2: detected capacity change from 0 to 1024 [ 625.247538][T17185] netlink: 'syz.1.5679': attribute type 10 has an invalid length. [ 625.258232][T17182] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 625.301456][T17182] ext4 filesystem being mounted at /1160/file0 supports timestamps until 2038 (0x7fffffff) [ 625.385501][T17182] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.5678: No space for directory leaf checksum. Please run e2fsck -D. [ 625.441838][T17185] batman_adv: batadv0: Adding interface: team0 [ 625.478106][T17185] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.510873][T17182] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.5678: checksumming directory block 0 [ 625.595923][T17185] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 625.710060][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 625.833200][T17206] loop1: detected capacity change from 0 to 8 [ 625.865783][T17206] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 625.917704][T17206] cramfs: Error -3 while decompressing! [ 625.947814][T17206] cramfs: ffffffff974c1568(26)->ffff888044c23000(4096) [ 625.961154][T17206] cramfs: Error -5 while decompressing! [ 625.977149][T17206] cramfs: ffffffff974c1582(26)->ffff888048886000(4096) [ 626.000206][T17206] cramfs: Error -3 while decompressing! [ 626.023350][T17206] cramfs: ffffffff974c159c(16)->ffff88805927d000(4096) [ 626.031976][T17206] cramfs: Error -3 while decompressing! [ 626.038269][T17206] cramfs: ffffffff974c1568(26)->ffff888044c23000(4096) [ 626.054044][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 626.054058][ T26] audit: type=1800 audit(2000000030.717:73): pid=17206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5691" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 626.098175][T17214] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.115167][T17214] vhci_hcd: invalid port number 129 [ 626.124187][T17214] vhci_hcd: invalid port number 129 [ 626.327113][T17224] loop2: detected capacity change from 0 to 256 [ 626.353321][T17227] netlink: 'syz.4.5699': attribute type 1 has an invalid length. [ 626.379237][T17228] xt_l2tp: v2 doesn't support IP mode [ 627.433058][T17232] loop3: detected capacity change from 0 to 32768 [ 627.506477][T17232] JBD2: Ignoring recovery information on journal [ 627.704141][T17232] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 627.740717][T17269] loop2: detected capacity change from 0 to 4096 [ 627.762941][T17269] ntfs3: Bad value for 'gid' [ 627.856115][ T7078] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 628.008072][ T3651] ocfs2: Unmounting device (7,3) on (node local) [ 628.093828][ T7078] usb 2-1: Using ep0 maxpacket: 16 [ 628.119280][T17276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5724'. [ 628.162323][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5724'. [ 628.176686][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 628.194853][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 628.328648][T17282] netlink: 'syz.3.5723': attribute type 21 has an invalid length. [ 628.359554][ T7078] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 628.388049][ T7078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.406170][ T7078] usb 2-1: Product: syz [ 628.425239][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5728'. [ 628.426584][ T7078] usb 2-1: Manufacturer: syz [ 628.458615][ T7078] usb 2-1: SerialNumber: syz [ 628.473854][ T7078] usb 2-1: config 0 descriptor?? [ 628.478545][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5729'. [ 628.548710][T17269] loop2: detected capacity change from 0 to 32768 [ 628.625901][ T7071] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 628.749577][ T7078] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 628.757336][ T7078] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 628.763398][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 628.787639][ T7078] usb 2-1: USB disconnect, device number 40 [ 628.883249][ T7071] usb 5-1: Using ep0 maxpacket: 32 [ 628.997748][ T7071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.016783][ T7071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.036590][ T7071] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.056716][ T7071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.076416][ T7071] usb 5-1: config 0 descriptor?? [ 629.141175][ T7071] hub 5-1:0.0: USB hub found [ 629.359813][ T7071] hub 5-1:0.0: 1 port detected [ 629.414760][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5746'. [ 629.442506][T17322] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5744'. [ 629.474694][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5746'. [ 629.492818][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5746'. [ 629.559560][ T7071] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 629.567607][ T7071] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 629.692815][ T7071] usbhid 5-1:0.0: can't add hid device: -71 [ 629.708948][ T7071] usbhid: probe of 5-1:0.0 failed with error -71 [ 629.775382][ T7071] usb 5-1: USB disconnect, device number 26 [ 630.125744][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5756'. [ 630.230293][T17348] loop4: detected capacity change from 0 to 8 [ 630.282989][T17348] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 630.329005][T17348] cramfs: Error -5 while decompressing! [ 630.370325][T17348] cramfs: ffffffff974c5582(26)->ffff88806affe000(4096) [ 630.404954][T17348] cramfs: Error -3 while decompressing! [ 630.443446][T17348] cramfs: ffffffff974c559c(16)->ffff88806afff000(4096) [ 630.468502][T17348] cramfs: Error -5 while decompressing! [ 630.483523][T17348] cramfs: ffffffff974c5582(26)->ffff88806affe000(4096) [ 630.494578][ T26] audit: type=1800 audit(2000000035.378:74): pid=17348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5758" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 630.755315][T17334] loop3: detected capacity change from 0 to 32768 [ 630.831832][T17334] ERROR: (device loop3): diWrite: ixpxd invalid [ 630.831832][T17334] [ 630.881813][T17334] ERROR: (device loop3): remounting filesystem as read-only [ 630.916047][T17334] ERROR: (device loop3): txCommit: [ 630.916047][T17334] [ 630.950729][T17334] imap: ffff888075808000: 07ffffff 00000000 00000000 00000000 [ 630.999244][T17334] imap: ffff888075808010: 00000004 00000002 00000000 00000000 [ 631.006758][T17334] ERROR: (device loop3): diFree: inum = 7, iagno = 0, nextiag = 0 [ 631.006758][T17334] [ 631.086773][T17383] netlink: 'syz.2.5775': attribute type 13 has an invalid length. [ 631.114282][T17383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5775'. [ 631.136328][T17378] loop1: detected capacity change from 0 to 4096 [ 631.181655][T17378] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 631.320959][T17390] loop2: detected capacity change from 0 to 256 [ 631.724858][T17402] loop1: detected capacity change from 0 to 4096 [ 631.781148][T17402] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 631.905527][T17416] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 631.950698][T17402] ntfs3: loop1: failed to convert "c46c" to macgreek [ 632.293510][ T4110] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 632.441246][T17442] loop2: detected capacity change from 0 to 256 [ 632.464276][T17442] exfat: Deprecated parameter 'utf8' [ 632.470041][T17442] exfat: Bad value for 'allow_utime' [ 632.493214][ T4109] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 632.521856][ T120] block nbd2: Attempted send on invalid socket [ 632.528081][ T120] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.537959][T17442] MINIX-fs: unable to read superblock [ 632.644148][T17452] QAT: failed to copy from user cfg_data. [ 632.702994][ T4110] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.749909][ T4110] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 632.774532][ T4110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.788053][T17448] loop4: detected capacity change from 0 to 4096 [ 632.808533][ T4110] usb 4-1: config 0 descriptor?? [ 632.826961][T17448] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 632.847963][ T4110] go7007: probe of 4-1:0.0 failed with error -12 [ 632.884065][ T4109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.911253][ T4109] usb 1-1: config 1 interface 0 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.925914][ T4109] usb 1-1: config 1 interface 0 has no altsetting 0 [ 632.968703][T17448] ntfs3: loop4: failed to convert "c46c" to macgreek [ 633.065783][ T3643] usb 4-1: USB disconnect, device number 35 [ 633.104824][ T4109] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 633.120550][ T4109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.130519][ T4109] usb 1-1: Product: syz [ 633.142667][ T4109] usb 1-1: Manufacturer: syz [ 633.147281][ T4109] usb 1-1: SerialNumber: syz [ 633.348452][T17474] loop4: detected capacity change from 0 to 128 [ 633.379319][ T4110] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 633.448697][ T4109] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input72 [ 633.474754][ T3078] bcm5974 1-1:1.0: could not read from device [ 633.495101][ T4109] usb 1-1: USB disconnect, device number 29 [ 633.502875][ T3078] bcm5974 1-1:1.0: could not read from device [ 633.522173][ T3078] bcm5974 1-1:1.0: could not read from device [ 633.637301][T17478] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 633.650339][T17464] loop1: detected capacity change from 0 to 32768 [ 633.654922][T17478] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 633.770258][ T4110] usb 3-1: config 0 interface 0 has no altsetting 0 [ 633.787852][ T4110] usb 3-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 633.811079][ T4110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.837232][ T4110] usb 3-1: config 0 descriptor?? [ 633.898980][ T4110] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 found [ 633.991017][T17488] loop3: detected capacity change from 0 to 64 [ 634.067896][T17488] Trying to free block not in datazone [ 634.095082][ T4110] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 634.136049][ T4110] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 now disconnected [ 634.149889][ T4110] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 634.306265][ T4109] usb 3-1: USB disconnect, device number 35 [ 634.775422][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5843'. [ 634.912677][ T7071] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 635.157019][ T7071] usb 5-1: Using ep0 maxpacket: 8 [ 635.198890][ T7079] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 635.268010][T17512] loop1: detected capacity change from 0 to 32768 [ 635.274769][ T7071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.307423][T17512] [ 635.307423][T17512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.307423][T17512] [ 635.355101][T17512] [ 635.355101][T17512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.355101][T17512] [ 635.370086][ T7071] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 635.386023][ T7071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 635.394966][T17512] [ 635.394966][T17512] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.394966][T17512] [ 635.405902][ T7071] usb 5-1: SerialNumber: syz [ 635.424533][ T7071] usb 5-1: config 0 descriptor?? [ 635.439566][ T7079] usb 4-1: Using ep0 maxpacket: 8 [ 635.477226][ T134] [ 635.477226][ T134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.477226][ T134] [ 635.486085][ T7071] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 635.504747][ T7071] usb 5-1: No valid video chain found. [ 635.551014][ T7079] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 635.559036][ T7079] usb 4-1: config 0 has no interface number 0 [ 635.575214][ T3716] [ 635.575214][ T3716] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.575214][ T3716] [ 635.604868][ T3716] [ 635.604868][ T3716] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.604868][ T3716] [ 635.616957][ T3642] [ 635.616957][ T3642] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.616957][ T3642] [ 635.631277][ T134] [ 635.631277][ T134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.631277][ T134] [ 635.649270][ T3642] [ 635.649270][ T3642] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 635.649270][ T3642] [ 635.664407][T17552] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.5859'. [ 635.732553][ T4109] usb 5-1: USB disconnect, device number 27 [ 635.760924][ T7079] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 635.795604][ T7079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.815362][ T7079] usb 4-1: Product: syz [ 635.832961][ T7079] usb 4-1: Manufacturer: syz [ 635.847570][ T7079] usb 4-1: SerialNumber: syz [ 635.875944][ T7079] usb 4-1: config 0 descriptor?? [ 636.038832][ T26] audit: type=1326 audit(2000000041.204:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 636.095753][ T26] audit: type=1326 audit(2000000041.204:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 636.135189][ T7079] usb 4-1: USB disconnect, device number 36 [ 636.143199][ T26] audit: type=1326 audit(2000000041.204:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 636.599230][ T4109] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 636.756864][T17595] loop1: detected capacity change from 0 to 1024 [ 636.798155][T17599] device ip6tnl1 entered promiscuous mode [ 636.865682][ T4109] usb 5-1: Using ep0 maxpacket: 8 [ 637.023028][T17609] netlink: 'syz.0.5886': attribute type 8 has an invalid length. [ 637.171992][ T4109] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 637.199317][ T4109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.237244][ T4109] usb 5-1: Product: syz [ 637.241442][ T4109] usb 5-1: Manufacturer: syz [ 637.246127][ T4109] usb 5-1: SerialNumber: syz [ 637.282149][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'. [ 637.298948][T17617] loop2: detected capacity change from 0 to 2048 [ 637.300013][ T4109] r8152-cfgselector 5-1: config 0 descriptor?? [ 637.335626][T17619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5891'. [ 637.364276][T17617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.799210][ T4109] r8152-cfgselector 5-1: Unknown version 0x0000 [ 637.805716][ T4109] r8152-cfgselector 5-1: bad CDC descriptors [ 637.870773][ T4109] r8152-cfgselector 5-1: Unknown version 0x0000 [ 637.884464][ T4109] r8152-cfgselector 5-1: USB disconnect, device number 28 [ 638.382459][T17661] loop1: detected capacity change from 0 to 1764 [ 638.472480][T17661] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 638.626855][T17667] ip6t_srh: unknown srh match flags FDC7 [ 638.687943][T17643] loop3: detected capacity change from 0 to 32768 [ 638.743502][T17643] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5903 (17643) [ 638.801290][T17643] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.837337][T17643] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 638.855841][T17643] BTRFS info (device loop3): using free space tree [ 639.208901][T17643] BTRFS info (device loop3): enabling ssd optimizations [ 639.361185][ T3651] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 639.603115][T17715] netlink: 'syz.2.5930': attribute type 30 has an invalid length. [ 639.827379][T17723] loop2: detected capacity change from 0 to 64 [ 639.846682][T17719] loop1: detected capacity change from 0 to 4096 [ 639.907364][T17719] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 639.951633][T17719] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 640.009167][T17719] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 640.052968][T17719] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 640.110755][T17719] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 640.157891][T17719] ntfs: volume version 3.1. [ 640.207543][T17719] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 640.255684][T17719] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 640.415342][T17743] AppArmor: change_hat: Invalid input '0' [ 640.582649][T17752] loop1: detected capacity change from 0 to 8 [ 640.657553][T17755] loop3: detected capacity change from 0 to 2048 [ 640.736676][T17760] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.844083][T10511] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 640.950803][T17762] loop4: detected capacity change from 0 to 2048 [ 641.041024][T17762] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.067143][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 641.067156][ T26] audit: type=1800 audit(2000000046.485:79): pid=17762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5951" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 641.262405][T10511] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.288004][T17777] loop4: detected capacity change from 0 to 64 [ 641.295274][T10511] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 641.314491][T10511] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 641.350072][T10511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.389096][T10511] usb 1-1: config 0 descriptor?? [ 641.511743][T17788] loop2: detected capacity change from 0 to 8 [ 641.650757][ T26] audit: type=1800 audit(2000000047.094:80): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5964" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 641.829708][T17796] loop4: detected capacity change from 0 to 128 [ 641.883193][T10511] Bluetooth: Can't get state to change to load configuration err [ 641.902975][T10511] Bluetooth: Loading sysconfig file failed [ 641.913626][T10511] ath3k: probe of 1-1:0.0 failed with error -16 [ 641.949095][T10511] usb 1-1: USB disconnect, device number 30 [ 642.354757][T17815] loop2: detected capacity change from 0 to 256 [ 642.371045][T17816] loop4: detected capacity change from 0 to 256 [ 642.408535][T17818] loop1: detected capacity change from 0 to 256 [ 642.418168][T17815] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 642.442316][T17816] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 642.480657][T17815] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 642.508792][T17818] FAT-fs (loop1): Directory bread(block 64) failed [ 642.523628][T17818] FAT-fs (loop1): Directory bread(block 65) failed [ 642.529518][T17816] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 642.536979][T17815] exFAT-fs (loop2): Filesystem has been set read-only [ 642.571738][T17818] FAT-fs (loop1): Directory bread(block 66) failed [ 642.578284][T17818] FAT-fs (loop1): Directory bread(block 67) failed [ 642.623498][T17818] FAT-fs (loop1): Directory bread(block 68) failed [ 642.672031][T17818] FAT-fs (loop1): Directory bread(block 69) failed [ 642.704878][T17818] FAT-fs (loop1): Directory bread(block 70) failed [ 642.711434][T17818] FAT-fs (loop1): Directory bread(block 71) failed [ 642.737132][T17818] FAT-fs (loop1): Directory bread(block 72) failed [ 642.769069][T17818] FAT-fs (loop1): Directory bread(block 73) failed [ 643.150730][T17840] loop3: detected capacity change from 0 to 2048 [ 643.237661][T17840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 643.300240][T17855] netlink: 34 bytes leftover after parsing attributes in process `syz.1.5996'. [ 643.312849][T17840] cgroup: name respecified [ 643.365525][T17857] loop1: detected capacity change from 0 to 1024 [ 643.386913][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5997'. [ 643.408172][T17857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 643.491613][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 643.501225][T17857] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 643.607590][ T7079] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 643.656671][ T3642] EXT4-fs (loop1): unmounting filesystem. [ 643.929079][T17883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.006661][ T7079] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.017122][ T7079] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.079064][T17888] loop2: detected capacity change from 0 to 2048 [ 644.111138][T17888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.124048][ T7079] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 644.133110][ T7079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 644.191133][ T7079] usb 5-1: SerialNumber: syz [ 644.333857][T17897] loop3: detected capacity change from 0 to 256 [ 644.372305][T17900] affs: No valid root block on device nbd1 [ 644.388356][T17897] FAT-fs (loop3): Directory bread(block 64) failed [ 644.403563][T17897] FAT-fs (loop3): Directory bread(block 65) failed [ 644.414648][T17897] FAT-fs (loop3): Directory bread(block 66) failed [ 644.429507][T17897] FAT-fs (loop3): Directory bread(block 67) failed [ 644.441059][T17897] FAT-fs (loop3): Directory bread(block 68) failed [ 644.452044][T17897] FAT-fs (loop3): Directory bread(block 69) failed [ 644.462713][ T7079] usb 5-1: 0:2 : does not exist [ 644.466462][T17897] FAT-fs (loop3): Directory bread(block 70) failed [ 644.474555][T17897] FAT-fs (loop3): Directory bread(block 71) failed [ 644.486067][ T7079] usb 5-1: unit 5: unexpected type 0x03 [ 644.488889][T17897] FAT-fs (loop3): Directory bread(block 72) failed [ 644.524064][ T7079] usb 5-1: USB disconnect, device number 29 [ 644.543061][T17897] FAT-fs (loop3): Directory bread(block 73) failed [ 644.648946][ T7846] udevd[7846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.866988][ T7071] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 645.141703][T17929] netlink: 'syz.1.6031': attribute type 32 has an invalid length. [ 645.171166][T17931] xt_l2tp: missing protocol rule (udp|l2tpip) [ 645.323528][T17939] loop2: detected capacity change from 0 to 8 [ 645.364366][T17939] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 645.419268][T17939] cramfs: bad data blocksize 4294966936 [ 645.461392][T17939] cramfs: bad data blocksize 524460 [ 645.462689][ T7071] usb 1-1: string descriptor 0 read error: -22 [ 645.466628][T17939] cramfs: bad data blocksize 4294966936 [ 645.480094][ T7071] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 645.507758][ T7071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.538178][ T7071] usb 1-1: config 0 descriptor?? [ 645.571424][ T26] audit: type=1800 audit(2000000051.198:81): pid=17939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6036" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 645.592064][ T7071] usbtest 1-1:0.0: FX2 device [ 645.596771][ T7071] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 645.732421][T17953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6043'. [ 645.870152][ T7071] usb 1-1: USB disconnect, device number 31 [ 646.294072][T17983] loop1: detected capacity change from 0 to 256 [ 646.324181][T17983] FAT-fs (loop1): Directory bread(block 64) failed [ 646.350632][T17983] FAT-fs (loop1): Directory bread(block 65) failed [ 646.362342][T17983] FAT-fs (loop1): Directory bread(block 66) failed [ 646.368888][T17983] FAT-fs (loop1): Directory bread(block 67) failed [ 646.385640][T17983] FAT-fs (loop1): Directory bread(block 68) failed [ 646.395835][T17983] FAT-fs (loop1): Directory bread(block 69) failed [ 646.406530][T17983] FAT-fs (loop1): Directory bread(block 70) failed [ 646.413617][T17983] FAT-fs (loop1): Directory bread(block 71) failed [ 646.426380][T17983] FAT-fs (loop1): Directory bread(block 72) failed [ 646.433338][T17983] FAT-fs (loop1): Directory bread(block 73) failed [ 646.457893][ T3689] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 646.496454][ T3690] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 646.508682][T17987] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 646.800096][T18001] netlink: 'syz.1.6068': attribute type 10 has an invalid length. [ 646.808862][T18001] batman_adv: batadv0: Removing interface: ipvlan1 [ 646.824412][T18001] team0: Device ipvlan1 failed to register rx_handler [ 646.858025][ T3689] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 646.872189][ T3689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.907358][ T3689] usb 4-1: config 0 descriptor?? [ 646.973416][ T3689] cp210x 4-1:0.0: cp210x converter detected [ 647.105953][ T3690] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 647.124704][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.147915][ T3690] usb 5-1: Product: syz [ 647.152132][ T3690] usb 5-1: Manufacturer: syz [ 647.171494][ T3690] usb 5-1: SerialNumber: syz [ 647.178032][ T3689] usb 4-1: cp210x converter now attached to ttyUSB0 [ 647.268838][ T3690] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 647.373751][ T3689] usb 4-1: USB disconnect, device number 37 [ 647.412185][ T3689] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 647.425056][ T3689] cp210x 4-1:0.0: device disconnected [ 647.822205][T18043] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 647.854229][T18043] overlayfs: overlapping lowerdir path [ 647.943922][ T3690] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 648.000456][T18049] loop3: detected capacity change from 0 to 256 [ 648.061827][T18049] FAT-fs (loop3): Directory bread(block 64) failed [ 648.078778][T18049] FAT-fs (loop3): Directory bread(block 65) failed [ 648.085394][T18049] FAT-fs (loop3): Directory bread(block 66) failed [ 648.102135][T18049] FAT-fs (loop3): Directory bread(block 67) failed [ 648.118963][T18049] FAT-fs (loop3): Directory bread(block 68) failed [ 648.125717][T18049] FAT-fs (loop3): Directory bread(block 69) failed [ 648.145504][T18049] FAT-fs (loop3): Directory bread(block 70) failed [ 648.172987][T18049] FAT-fs (loop3): Directory bread(block 71) failed [ 648.183400][T18049] FAT-fs (loop3): Directory bread(block 72) failed [ 648.204758][T18049] FAT-fs (loop3): Directory bread(block 73) failed [ 648.345326][ T7080] usb 5-1: USB disconnect, device number 30 [ 648.391860][T18027] loop1: detected capacity change from 0 to 40427 [ 648.422296][T18027] F2FS-fs (loop1): invalid crc value [ 648.459748][T18027] F2FS-fs (loop1): Found nat_bits in checkpoint [ 648.592645][T18027] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 648.615742][T18027] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 648.944296][ T3690] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 648.954792][T18087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6107'. [ 648.974229][ T3690] ath9k_htc: Failed to initialize the device [ 648.980858][ T7080] usb 5-1: ath9k_htc: USB layer deinitialized [ 649.052248][T18089] loop4: detected capacity change from 0 to 512 [ 649.078901][T18089] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 649.197859][T18089] EXT4-fs (loop4): 1 truncate cleaned up [ 649.203800][T18089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 649.360601][T18103] usb usb1: usbfs: process 18103 (syz.3.6116) did not claim interface 0 before use [ 649.393775][T18105] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6115'. [ 649.462891][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 649.776671][T18126] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 649.812879][T18127] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 649.847668][T18126] overlayfs: overlapping lowerdir path [ 650.110986][T18141] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6132'. [ 650.181009][T18145] loop3: detected capacity change from 0 to 256 [ 650.571132][T18165] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 650.954241][T18181] loop4: detected capacity change from 0 to 1024 [ 650.982829][T18181] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 651.098276][T18181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 651.147419][T18196] delete_channel: no stack [ 651.159268][T18181] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.6153: corrupted in-inode xattr [ 651.282426][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 651.300673][T18204] netlink: 'syz.2.6162': attribute type 21 has an invalid length. [ 651.334854][T18204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6162'. [ 651.602718][T18219] netlink: 399 bytes leftover after parsing attributes in process `syz.4.6170'. [ 651.665247][T18219] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 651.720493][T18219] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 652.281459][T18250] loop2: detected capacity change from 0 to 256 [ 652.455333][T18260] loop4: detected capacity change from 0 to 512 [ 652.621596][T18260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 652.686752][T18260] ext4 filesystem being mounted at /1238/file0 supports timestamps until 2038 (0x7fffffff) [ 652.905591][T18283] netlink: 'syz.3.6201': attribute type 4 has an invalid length. [ 652.941156][T18286] netlink: 'syz.2.6200': attribute type 3 has an invalid length. [ 652.983302][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 653.114421][T18294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6205'. [ 653.318782][T18304] QAT: Invalid ioctl 21531 [ 653.478706][T18312] nfs: Unknown parameter 'no' [ 653.763161][T18326] loop3: detected capacity change from 0 to 2048 [ 653.797307][T18326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.906538][T18332] sock: sock_timestamping_bind_phc: sock not bind to device [ 654.248320][ T26] audit: type=1326 audit(2000000060.311:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.3.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de4f7dff9 code=0x7ffc0000 [ 654.375413][ T26] audit: type=1326 audit(2000000060.353:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.3.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f2de4f7dff9 code=0x7ffc0000 [ 654.456881][ T26] audit: type=1326 audit(2000000060.363:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.3.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de4f7dff9 code=0x7ffc0000 [ 654.533377][T18348] loop1: detected capacity change from 0 to 4096 [ 654.540177][ T26] audit: type=1326 audit(2000000060.363:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18345 comm="syz.3.6232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de4f7dff9 code=0x7ffc0000 [ 654.590708][T18348] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 655.067649][T18315] loop2: detected capacity change from 0 to 40427 [ 655.125105][T18315] F2FS-fs (loop2): invalid crc value [ 655.185394][T18315] F2FS-fs (loop2): Found nat_bits in checkpoint [ 655.278329][T18388] netlink: 'syz.1.6251': attribute type 10 has an invalid length. [ 655.307702][T18388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.353579][T18315] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 655.391971][T18315] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 655.675486][T18411] kAFS: unable to lookup cell '' [ 656.107635][ T3690] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 656.344101][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 656.350551][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 656.354833][ T3690] usb 4-1: Using ep0 maxpacket: 8 [ 656.479363][ T3690] usb 4-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02 [ 656.497894][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.506017][ T7071] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 656.535806][ T3690] usb 4-1: config 0 descriptor?? [ 656.599868][T18441] loop2: detected capacity change from 0 to 64 [ 656.745529][ T7071] usb 1-1: Using ep0 maxpacket: 16 [ 656.801483][ T3690] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 656.817012][T18414] loop4: detected capacity change from 0 to 32768 [ 656.859784][ T7071] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 656.883815][T18449] netlink: 'syz.2.6280': attribute type 7 has an invalid length. [ 656.994498][ T26] audit: type=1326 audit(2000000063.197:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 657.035273][ T3690] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 657.059727][ T3690] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 657.060726][ T7071] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 657.079988][ T26] audit: type=1326 audit(2000000063.229:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 657.116978][ T3690] asix: probe of 4-1:0.0 failed with error -71 [ 657.123242][ T7071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.154017][ T7071] usb 1-1: Product: syz [ 657.156951][ T3690] usb 4-1: USB disconnect, device number 38 [ 657.178849][ T7071] usb 1-1: Manufacturer: syz [ 657.190100][T18455] libceph: resolve 'c' (ret=-3): failed [ 657.190396][ T7071] usb 1-1: SerialNumber: syz [ 657.215900][ T26] audit: type=1326 audit(2000000063.229:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 657.257620][ T7071] usb 1-1: config 0 descriptor?? [ 657.261422][T18457] loop2: detected capacity change from 0 to 2048 [ 657.270191][T18457] UDF-fs: bad mount option "nov" or missing value [ 657.328097][ T26] audit: type=1326 audit(2000000063.229:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf4b7dff9 code=0x7ffc0000 [ 657.362004][ T7071] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 657.374449][ T7846] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.374552][ T7071] usb 1-1: Detected FT232R [ 657.673950][T18465] block device autoloading is deprecated and will be removed. [ 657.736318][ T7071] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 657.774672][ T7071] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 657.792185][ T7071] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 657.826319][ T7071] usb 1-1: USB disconnect, device number 32 [ 657.850451][ T7071] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 657.883313][ T7071] ftdi_sio 1-1:0.0: device disconnected [ 657.912111][T18475] loop1: detected capacity change from 0 to 2048 [ 657.979802][T18478] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 658.005530][T18475] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 658.072267][T18475] Remounting filesystem read-only [ 658.234609][T18486] loop2: detected capacity change from 0 to 512 [ 658.263729][T18486] ext4: Unknown parameter '.' [ 658.358656][ T7846] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.428000][T18491] loop4: detected capacity change from 0 to 512 [ 658.495998][T18491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 658.602302][T18491] EXT4-fs (loop4): 1 truncate cleaned up [ 658.641000][T18491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 658.789627][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 658.809884][T18507] PKCS8: Unsupported PKCS#8 version [ 659.113878][T18521] loop4: detected capacity change from 0 to 256 [ 659.270604][T18527] netlink: 'syz.2.6317': attribute type 5 has an invalid length. [ 659.370702][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'. [ 659.404588][T18533] netlink: 'syz.3.6320': attribute type 2 has an invalid length. [ 659.450439][T18533] netlink: 'syz.3.6320': attribute type 1 has an invalid length. [ 660.001513][T18565] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6335'. [ 660.041595][T18565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6335'. [ 660.079602][T18565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6335'. [ 660.736890][ T3690] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 660.739036][T18602] overlayfs: bad mount option "redirect_dir=off:/" [ 660.984762][ T3690] usb 4-1: Using ep0 maxpacket: 8 [ 661.279505][ T3690] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 661.302763][ T3690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.320959][ T3690] usb 4-1: Product: syz [ 661.325727][ T3690] usb 4-1: Manufacturer: syz [ 661.341105][ T3690] usb 4-1: SerialNumber: syz [ 661.385132][ T3690] usb 4-1: config 0 descriptor?? [ 661.443803][ T3690] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 661.470365][ T3690] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 661.561873][T18625] xt_l2tp: wrong L2TP version: 0 [ 661.650997][ T3690] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 661.851284][ T3690] radio-raremono 4-1:0.0: raremono_cmd_main failed (-71) [ 661.876758][ T3690] radio-raremono 4-1:0.0: V4L2 device registered as radio32 [ 661.914434][ T3690] usb 4-1: USB disconnect, device number 39 [ 661.927694][T18635] SET target dimension over the limit! [ 661.930744][ T3690] radio-raremono 4-1:0.0: Thanko's Raremono disconnected [ 661.952218][T18619] loop1: detected capacity change from 0 to 32768 [ 662.098068][T18619] XFS (loop1): Mounting V5 Filesystem [ 662.147755][T18645] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6373'. [ 662.181331][T18645] netlink: 296 bytes leftover after parsing attributes in process `syz.4.6373'. [ 662.208438][T18619] XFS (loop1): Ending clean mount [ 662.232375][T18619] XFS (loop1): Quotacheck needed: Please wait. [ 662.260848][T18653] loop4: detected capacity change from 0 to 256 [ 662.310230][T18619] XFS (loop1): Quotacheck: Done. [ 662.427191][ T3642] XFS (loop1): Unmounting Filesystem [ 663.480910][T18693] libceph: resolve '0..' (ret=-3): failed [ 663.924706][T18674] loop3: detected capacity change from 0 to 32768 [ 664.043888][T18721] loop4: detected capacity change from 0 to 16 [ 664.091329][T18721] erofs: (device loop4): mounted with root inode @ nid 36. [ 664.101007][T18674] XFS (loop3): Mounting V5 Filesystem [ 664.265970][T18674] XFS (loop3): Ending clean mount [ 664.301206][T18674] XFS (loop3): Quotacheck needed: Please wait. [ 664.406919][T18674] XFS (loop3): Quotacheck: Done. [ 664.418866][T18747] loop4: detected capacity change from 0 to 512 [ 664.492219][T18753] tmpfs: Bad value for 'mpol' [ 664.502240][T18752] loop2: detected capacity change from 0 to 128 [ 664.571793][ T3651] XFS (loop3): Unmounting Filesystem [ 664.669754][T18747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 664.726465][T18747] ext4 filesystem being mounted at /1295/file0 supports timestamps until 2038 (0x7fffffff) [ 664.779737][T18766] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 664.802755][T18766] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 664.913519][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 665.166396][T18780] loop2: detected capacity change from 0 to 1024 [ 665.347895][T15741] hfsplus: b-tree write err: -5, ino 4 [ 665.474232][ T26] audit: type=1326 audit(2000000072.100:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.1.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 665.521872][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6439'. [ 665.582559][ T26] audit: type=1326 audit(2000000072.131:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.1.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 665.730922][ T26] audit: type=1326 audit(2000000072.131:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.1.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 665.844562][ T26] audit: type=1326 audit(2000000072.131:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.1.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 666.088746][T18816] x_tables: unsorted underflow at hook 3 [ 666.278412][T18822] loop3: detected capacity change from 0 to 128 [ 666.366433][T18822] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 666.604048][T18836] loop3: detected capacity change from 0 to 256 [ 666.636059][T18836] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 666.817515][T18846] loop4: detected capacity change from 0 to 128 [ 667.372751][T18873] loop3: detected capacity change from 0 to 164 [ 667.409991][T18873] syz.3.6479: attempt to access beyond end of device [ 667.409991][T18873] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 667.437483][T18873] syz.3.6479: attempt to access beyond end of device [ 667.437483][T18873] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 667.476487][ T26] audit: type=1800 audit(2000000074.199:94): pid=18873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6479" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 667.514908][T18878] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6481'. [ 667.649765][T18884] loop3: detected capacity change from 0 to 1024 [ 667.674644][T10511] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 667.688877][T18884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 667.727014][T18884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 667.753634][T18884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 667.817300][T18884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 667.854127][T18884] System zones: 0-1, 3-36 [ 667.904727][T18884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 667.986332][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 668.066869][T10511] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.090685][T10511] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 668.118928][T10511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.152967][ T26] audit: type=1326 audit(2000000074.913:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18908 comm="syz.1.6496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 668.180907][T10511] usb 3-1: config 0 descriptor?? [ 668.186908][ T26] audit: type=1326 audit(2000000074.945:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18908 comm="syz.1.6496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 668.231526][T18913] netlink: 'syz.3.6498': attribute type 21 has an invalid length. [ 668.252463][T10511] rndis_wlan: probe of 3-1:0.0 failed with error -22 [ 668.260400][T10511] rndis_host: probe of 3-1:0.0 failed with error -22 [ 668.277852][T10511] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 668.286453][T18913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6498'. [ 668.304308][T10511] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 668.328349][T10511] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 668.409613][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6501'. [ 668.463239][ T7071] usb 3-1: USB disconnect, device number 36 [ 668.660086][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6505'. [ 668.828049][T18939] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 668.938110][ T7] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 669.210058][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6518'. [ 669.310855][ T7] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 669.331951][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.338499][T18962] loop2: detected capacity change from 0 to 128 [ 669.367635][ T7] usb 4-1: config 0 descriptor?? [ 669.425794][ T7] cp210x 4-1:0.0: cp210x converter detected [ 669.453250][T18962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 669.521277][T18962] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038 (0x7fffffff) [ 669.590072][T18973] netlink: 'syz.4.6528': attribute type 2 has an invalid length. [ 669.598137][T18973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6528'. [ 669.635385][ T7] usb 4-1: cp210x converter now attached to ttyUSB0 [ 669.703950][T18979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6529'. [ 669.725196][T18979] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6529'. [ 669.808056][T10511] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 669.826995][ T7079] usb 4-1: USB disconnect, device number 40 [ 669.868608][ T7079] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 669.882614][ T3689] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 669.890340][ T7079] cp210x 4-1:0.0: device disconnected [ 670.012280][T18991] loop4: detected capacity change from 0 to 764 [ 670.051168][T18991] Symlink component flag not implemented [ 670.057882][T18991] Symlink component flag not implemented [ 670.065741][T18991] Symlink component flag not implemented (129) [ 670.072123][T18991] Symlink component flag not implemented (6) [ 670.138734][ T3689] usb 2-1: Using ep0 maxpacket: 32 [ 670.157637][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6538'. [ 670.196102][T10511] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 670.211129][T10511] usb 3-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 670.229581][T10511] usb 3-1: config 0 has no interface number 0 [ 670.244933][T10511] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7 [ 670.256562][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 670.287610][T10511] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024 [ 670.310319][T10511] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 670.365703][T10511] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 670.385516][T10511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.418296][T10511] usb 3-1: config 0 descriptor?? [ 670.433774][ T3689] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 670.443160][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.461285][ T3689] usb 2-1: Product: syz [ 670.471185][ T3689] usb 2-1: Manufacturer: syz [ 670.485947][ T3689] usb 2-1: SerialNumber: syz [ 670.526862][ T3689] usb 2-1: config 0 descriptor?? [ 670.540851][T10511] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 670.595959][T18976] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 670.625794][T19018] x_tables: duplicate underflow at hook 2 [ 670.703723][ T3689] usb 3-1: USB disconnect, device number 37 [ 670.709928][ T9] usb 3-1: Failed to submit usb control message: -71 [ 670.717224][ T9] usb 3-1: unable to send the bmi data to the device: -71 [ 670.731269][ T9] usb 3-1: unable to get target info from device [ 670.740835][ T9] usb 3-1: could not get target info (-71) [ 670.747104][ T9] usb 3-1: could not probe fw (-71) [ 670.786263][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.852764][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.891483][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.909737][ T4109] usb 2-1: USB disconnect, device number 41 [ 670.917775][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.931771][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.948707][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.960104][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.972314][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.992993][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.004445][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.191015][T19036] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6555'. [ 671.306189][T15475] EXT4-fs (loop2): unmounting filesystem. [ 671.328269][T19038] loop3: detected capacity change from 0 to 4096 [ 671.975057][T19069] loop4: detected capacity change from 0 to 1764 [ 672.203186][T19083] netlink: 'syz.1.6579': attribute type 10 has an invalid length. [ 672.231164][T19083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6579'. [ 672.270226][T19083] device hsr0 entered promiscuous mode [ 672.286397][T19083] bridge0: port 3(hsr0) entered blocking state [ 672.323868][T19083] bridge0: port 3(hsr0) entered disabled state [ 672.352920][T19083] bridge0: port 3(hsr0) entered blocking state [ 672.359363][T19083] bridge0: port 3(hsr0) entered forwarding state [ 672.554333][T19099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6587'. [ 672.983242][T19120] loop2: detected capacity change from 0 to 64 [ 673.035302][T19122] netlink: 26 bytes leftover after parsing attributes in process `syz.1.6599'. [ 673.300198][T19133] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 673.538361][T19144] loop4: detected capacity change from 0 to 128 [ 673.612833][T19144] hpfs: bad mount options. [ 673.648745][T19147] loop1: detected capacity change from 0 to 65 [ 673.681004][T19147] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 673.717564][ T7846] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 673.794798][T19144] loop4: detected capacity change from 0 to 2048 [ 673.876108][ T7846] udevd[7846]: incorrect nilfs2 checksum on /dev/loop4 [ 673.885807][T19144] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 673.985053][T19158] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 673.989531][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'. [ 674.006840][T19144] NILFS (loop4): error -116 getting root inode [ 674.217749][T19165] loop1: detected capacity change from 0 to 764 [ 674.266742][T19165] Symlink component flag not implemented [ 674.301541][T19165] Symlink component flag not implemented [ 674.307450][T19165] Symlink component flag not implemented (129) [ 674.333775][T19165] Symlink component flag not implemented (6) [ 674.409275][T19173] loop3: detected capacity change from 0 to 1024 [ 674.503861][T19173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 674.570423][T19173] System zones: 0-1, 3-12 [ 674.599747][T19173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 674.618495][T19184] loop1: detected capacity change from 0 to 256 [ 674.678653][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 674.798329][T19192] futex_wake_op: syz.3.6632 tries to shift op by 144; fix this program [ 674.845446][T19196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 674.914920][T19200] loop2: detected capacity change from 0 to 128 [ 675.071433][T19207] tmpfs: Bad value for 'size' [ 675.225742][T19213] loop3: detected capacity change from 0 to 256 [ 675.295091][T19213] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 675.390154][T19213] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 675.435414][T19213] exFAT-fs (loop3): Filesystem has been set read-only [ 675.497772][T19225] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6648'. [ 675.545535][T19225] netlink: 'syz.4.6648': attribute type 5 has an invalid length. [ 675.676491][ T26] audit: type=1326 audit(2000000082.808:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19228 comm="syz.1.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 675.762625][ T26] audit: type=1326 audit(2000000082.808:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19228 comm="syz.1.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 675.837123][T19231] loop3: detected capacity change from 0 to 2048 [ 675.854038][ T26] audit: type=1326 audit(2000000082.808:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19228 comm="syz.1.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 675.927760][T19231] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.6651: bad orphan inode 8192 [ 675.954222][T19243] netlink: 'syz.4.6656': attribute type 24 has an invalid length. [ 675.968702][T19231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 675.993683][ T26] audit: type=1326 audit(2000000082.808:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19228 comm="syz.1.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607d97dff9 code=0x7ffc0000 [ 676.256521][T19253] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 676.573398][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 676.714247][T19267] netlink: 'syz.4.6667': attribute type 2 has an invalid length. [ 676.777681][T19267] netlink: 'syz.4.6667': attribute type 1 has an invalid length. [ 676.820928][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6667'. [ 677.182457][T19291] loop2: detected capacity change from 0 to 256 [ 677.242137][T19291] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 677.289387][T19296] loop1: detected capacity change from 0 to 512 [ 677.317103][T19291] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 677.331875][T19296] EXT4-fs: Ignoring removed i_version option [ 677.378420][T19296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 677.388091][T19291] exFAT-fs (loop2): Filesystem has been set read-only [ 677.435826][T19300] loop4: detected capacity change from 0 to 2048 [ 677.462842][T19296] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 677.484259][T19300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.502962][T19296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e01c, mo2=0002] [ 677.511011][T19296] System zones: 0-1, 15-15, 18-18, 34-34 [ 677.598077][T19296] EXT4-fs (loop1): orphan cleanup on readonly fs [ 677.604540][T19296] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 677.652507][T19296] EXT4-fs warning (device loop1): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 677.720357][T19296] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 677.747002][T19296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6680: bg 0: block 40: padding at end of block bitmap is not set [ 677.827944][T19296] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 677.883224][T19296] EXT4-fs (loop1): 1 truncate cleaned up [ 677.889096][T19296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 677.979241][T19296] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.6680: bad symlink. [ 678.115446][ T3642] EXT4-fs (loop1): unmounting filesystem. [ 678.323227][ T26] audit: type=1400 audit(2000000085.590:101): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=19335 comm="syz.1.6698" [ 679.506973][T19389] loop3: detected capacity change from 0 to 128 [ 679.556363][T19389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 679.569868][ T7079] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 679.581864][T19389] ext4 filesystem being mounted at /1385/mnt supports timestamps until 2038 (0x7fffffff) [ 679.797706][ T7079] usb 5-1: Using ep0 maxpacket: 8 [ 679.892720][ T7] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 679.927524][ T7079] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 679.950888][ T7079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.984599][ T7079] usb 5-1: config 0 descriptor?? [ 680.036807][ T7079] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 680.046192][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 680.066233][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 680.090751][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 680.116171][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 680.134058][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 680.149755][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 680.167676][ T7079] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 680.183397][ T7079] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 680.194004][T19414] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.245085][ T7] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 680.269564][ T3690] usb 5-1: USB disconnect, device number 31 [ 680.272829][ T7] usb 4-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 680.288269][ T3690] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 680.304149][ T7] usb 4-1: config 0 has no interface number 0 [ 680.310404][ T7] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7 [ 680.340811][ T7] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024 [ 680.341280][ T3690] keyspan 5-1:0.0: device disconnected [ 680.367227][ T7] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 680.404037][ T7] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 680.421541][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.431589][ T7] usb 4-1: config 0 descriptor?? [ 680.439155][T19418] device bond1 entered promiscuous mode [ 680.445912][T19418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.528469][ T7] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 680.676421][T19404] loop2: detected capacity change from 0 to 32768 [ 680.691714][ T7080] usb 4-1: USB disconnect, device number 41 [ 680.702533][T15741] usb 4-1: Failed to submit usb control message: -71 [ 680.714872][T15741] usb 4-1: unable to send the bmi data to the device: -71 [ 680.740888][T19404] Dev loop2 Sun disklabel: Csum bad, label corrupted [ 680.747624][T15741] usb 4-1: unable to get target info from device [ 680.757430][T15741] usb 4-1: could not get target info (-71) [ 680.763590][T15741] usb 4-1: could not probe fw (-71) [ 680.773461][ T3093] Dev loop2 Sun disklabel: Csum bad, label corrupted [ 680.858912][T19434] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new' [ 681.051562][T19444] xt_TCPMSS: Only works on TCP SYN packets [ 681.102893][T19392] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 681.237300][T19450] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20001 [ 681.281089][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 681.571072][T19464] loop4: detected capacity change from 0 to 256 [ 681.769167][ T4105] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 681.781497][T19471] loop3: detected capacity change from 0 to 256 [ 681.816013][T19471] exfat: Deprecated parameter 'namecase' [ 681.843524][T19471] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 682.074327][ T4105] usb 2-1: Using ep0 maxpacket: 8 [ 682.137529][T19490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 682.216829][ T4105] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 682.242620][ T4105] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 682.298829][ T4105] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 682.331521][ T4105] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.360635][T19500] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6775'. [ 682.443151][ T4105] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 682.467361][ T4105] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 682.489678][ T4105] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 682.529143][ T4105] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.626964][T19513] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 682.674444][ T4105] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 682.698483][ T4105] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 682.702946][ T3658] Bluetooth: hci5: command 0x0406 tx timeout [ 682.789461][T19520] loop4: detected capacity change from 0 to 2048 [ 682.800498][ T4105] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 682.836162][ T4105] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.860312][T19520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 682.909419][T19520] EXT4-fs (loop4): unmounting filesystem. [ 682.909585][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6789'. [ 683.055241][ T4105] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 683.079068][ T4105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.088797][ T4105] usb 2-1: Product: syz [ 683.093091][T19531] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6791'. [ 683.102875][ T4105] usb 2-1: Manufacturer: syz [ 683.124148][ T4105] usb 2-1: SerialNumber: syz [ 683.167880][T19537] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6794'. [ 683.399066][ T4109] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 683.447230][ T4105] adutux 2-1:168.0: interrupt endpoints not found [ 683.476141][ T4105] usb 2-1: USB disconnect, device number 42 [ 683.558062][ T26] audit: type=1326 audit(2000000091.080:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.4.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03597dff9 code=0x7ffc0000 [ 683.606495][ T26] audit: type=1326 audit(2000000091.112:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.4.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc03597dff9 code=0x7ffc0000 [ 683.659123][ T4109] usb 4-1: Using ep0 maxpacket: 32 [ 683.673251][ T26] audit: type=1326 audit(2000000091.112:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19553 comm="syz.4.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03597dff9 code=0x7ffc0000 [ 683.775715][T19561] loop2: detected capacity change from 0 to 128 [ 683.793633][T19561] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 683.821413][T19561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.902830][T19567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6808'. [ 683.998557][ T4109] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 684.027037][ T4109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.039848][ T4109] usb 4-1: Product: syz [ 684.044036][ T4109] usb 4-1: Manufacturer: syz [ 684.049239][ T4109] usb 4-1: SerialNumber: syz [ 684.063780][ T4109] usb 4-1: config 0 descriptor?? [ 684.522281][ T4109] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 684.565132][ T4109] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 684.606061][T19595] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 684.626962][ T4109] peak_usb: probe of 4-1:0.0 failed with error -71 [ 684.661179][ T4109] usb 4-1: USB disconnect, device number 42 [ 684.820905][T19597] loop1: detected capacity change from 0 to 4096 [ 684.881387][T19597] ntfs: volume version 3.1. [ 685.118365][T19581] loop4: detected capacity change from 0 to 32768 [ 685.166331][T19581] read_mapping_page failed! [ 685.192708][T19581] ialloc: diAlloc returned -5! [ 685.395409][T19619] loop1: detected capacity change from 0 to 24 [ 685.465140][T19621] netlink: 'syz.3.6836': attribute type 10 has an invalid length. [ 685.555303][T19621] team0: Port device netdevsim0 added [ 685.612935][T19625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6838'. [ 686.281803][T19664] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 686.713151][ T4109] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 686.805134][T19683] loop3: detected capacity change from 0 to 4096 [ 686.862956][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6868'. [ 686.892051][T19692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6868'. [ 686.941173][T19692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6868'. [ 686.955353][T19694] loop2: detected capacity change from 0 to 512 [ 686.963275][T19694] EXT4-fs: quotafile must be on filesystem root [ 686.972830][T19683] ntfs3: loop3: mft corrupted [ 686.975142][T19696] netlink: 'syz.0.6870': attribute type 1 has an invalid length. [ 687.122735][ T4109] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 687.152103][ T4109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.192620][ T4109] usb 2-1: config 0 descriptor?? [ 687.421504][T19714] IPv6: sit2: Disabled Multicast RS [ 687.583135][T19719] netlink: 'syz.4.6881': attribute type 8 has an invalid length. [ 687.602737][T19719] netlink: 'syz.4.6881': attribute type 4 has an invalid length. [ 687.636763][T19719] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.6881'. [ 687.658850][ T4109] ath6kl: Failed to submit usb control message: -71 [ 687.668474][ T4109] ath6kl: unable to send the bmi data to the device: -71 [ 687.682419][ T4109] ath6kl: Unable to send get target info: -71 [ 687.699664][ T4109] ath6kl: Failed to init ath6kl core: -71 [ 687.735147][ T48] Bluetooth: hci0: command 0x0401 tx timeout [ 687.797752][ T4109] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 687.824851][ T4109] usb 2-1: USB disconnect, device number 43 [ 688.014085][T19736] misc userio: The device must be registered before sending interrupts [ 688.180172][ T3689] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 688.335137][T19726] loop3: detected capacity change from 0 to 32768 [ 688.437381][ T3689] usb 3-1: Using ep0 maxpacket: 8 [ 688.448156][T19726] XFS (loop3): Mounting V5 Filesystem [ 688.570533][ T3689] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 688.578715][ T3689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.588984][ T3689] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 688.598046][ T3689] usb 3-1: config 0 has no interface number 1 [ 688.604344][ T3689] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 688.613498][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.625831][T19726] XFS (loop3): Ending clean mount [ 688.628705][ T3689] usb 3-1: config 0 descriptor?? [ 688.685932][ T3689] usb 3-1: unknown number of interfaces: 2 [ 688.768518][ T3651] XFS (loop3): Unmounting Filesystem [ 688.929617][ T7071] usb 3-1: USB disconnect, device number 38 [ 688.988309][T19775] netlink: 'syz.0.6906': attribute type 8 has an invalid length. [ 689.006876][T19775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.138337][T19779] loop3: detected capacity change from 0 to 256 [ 689.222048][ T3690] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 689.433467][T19791] loop3: detected capacity change from 0 to 512 [ 689.445045][T19791] EXT4-fs: Ignoring removed bh option [ 689.545617][T19791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 689.568941][T19791] ext4 filesystem being mounted at /1409/bus supports timestamps until 2038 (0x7fffffff) [ 689.609228][ T3690] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 689.619104][ T3690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.639856][ T3690] usb 5-1: config 0 descriptor?? [ 689.672118][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 689.700713][ T3690] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 689.713791][ T48] Bluetooth: hci0: command tx timeout [ 689.817150][T19806] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 689.961354][T19814] netlink: 'syz.0.6923': attribute type 13 has an invalid length. [ 690.007134][T19816] loop3: detected capacity change from 0 to 512 [ 690.013820][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6923'. [ 690.030527][T19816] EXT4-fs: Ignoring removed oldalloc option [ 690.046857][T19814] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 690.104582][ T3690] gspca_stv06xx: I2C: Read error writing address: -71 [ 690.145416][T19816] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 690.181982][ T3690] usb 5-1: USB disconnect, device number 32 [ 690.207051][T19816] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 690.218088][T19816] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.6924: Failed to acquire dquot type 0 [ 690.244611][T19831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6930'. [ 690.246047][T19816] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 690.264714][T19816] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 690.275526][T19816] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.6924: Failed to acquire dquot type 0 [ 690.297529][T19816] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 690.311419][T19816] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 690.321382][T19816] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.6924: Failed to acquire dquot type 0 [ 690.352211][T19816] EXT4-fs (loop3): 1 orphan inode deleted [ 690.358015][T19816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 690.383895][T19816] ext4 filesystem being mounted at /1411/file1 supports timestamps until 2038 (0x7fffffff) [ 690.466269][T19816] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.6924: corrupted xattr block 19 [ 690.893319][ T26] audit: type=1800 audit(2000000098.786:105): pid=19816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6924" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 691.028494][ T3651] EXT4-fs (loop3): unmounting filesystem. [ 691.532945][T19884] loop4: detected capacity change from 0 to 512 [ 691.581204][T19884] EXT4-fs: Ignoring removed oldalloc option [ 691.624181][T19890] SET target dimension over the limit! [ 691.694382][T19884] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 691.713903][ T48] Bluetooth: hci0: command tx timeout [ 691.719588][T19884] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 691.774562][T19884] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.6955: Failed to acquire dquot type 0 [ 691.818005][T19884] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 691.837964][T19884] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.6955: Failed to acquire dquot type 0 [ 691.845937][T19901] xt_bpf: check failed: parse error [ 691.875987][T19884] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.6955: Failed to acquire dquot type 0 [ 691.888620][T19884] EXT4-fs (loop4): 1 orphan inode deleted [ 691.894378][T19884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 691.907385][T19884] ext4 filesystem being mounted at /1423/file1 supports timestamps until 2038 (0x7fffffff) [ 691.947730][ T7080] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 692.012561][T19884] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.6955: corrupted xattr block 19 [ 692.021286][T19907] loop1: detected capacity change from 0 to 512 [ 692.111740][T19907] EXT4-fs (loop1): 1 truncate cleaned up [ 692.166520][T19907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 692.287044][T19907] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.6966: Directory hole found for htree leaf block 0 [ 692.305001][ T7080] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 692.352014][ T7080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.378531][ T7080] usb 4-1: config 0 descriptor?? [ 692.431227][ T7080] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 692.445716][ T3642] EXT4-fs (loop1): unmounting filesystem. [ 692.625439][ T7080] usb 4-1: USB disconnect, device number 43 [ 692.668324][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 692.785299][T19935] netlink: 'syz.2.6979': attribute type 8 has an invalid length. [ 693.068739][T19949] loop2: detected capacity change from 0 to 1024 [ 693.413547][T19967] netlink: 'syz.4.6995': attribute type 1 has an invalid length. [ 693.645637][T19969] loop3: detected capacity change from 0 to 4096 [ 693.731577][T19969] ntfs: volume version 3.1. [ 693.938277][T19991] IPv6: Can't replace route, no match found [ 694.018316][T19995] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 694.057229][ T7080] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 694.341471][T20013] overlayfs: missing 'lowerdir' [ 694.409838][ T7080] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 694.438303][ T7080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.464702][ T7080] usb 1-1: config 0 descriptor?? [ 694.476516][T20019] netlink: 'syz.3.7020': attribute type 1 has an invalid length. [ 694.535364][T20024] loop2: detected capacity change from 0 to 64 [ 694.591641][T20027] loop4: detected capacity change from 0 to 512 [ 694.663114][T20027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 694.691188][T20027] ext4 filesystem being mounted at /1436/file0 supports timestamps until 2038 (0x7fffffff) [ 694.741991][ T3646] EXT4-fs (loop4): unmounting filesystem. [ 694.781694][ T7079] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 694.899825][T20040] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 694.925421][ T7080] ath6kl: Failed to submit usb control message: -71 [ 694.932243][ T7080] ath6kl: unable to send the bmi data to the device: -71 [ 694.956409][ T7080] ath6kl: Unable to send get target info: -71 [ 694.981086][ T7080] ath6kl: Failed to init ath6kl core: -71 [ 694.987025][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7031'. [ 695.021043][ T7079] usb 2-1: Using ep0 maxpacket: 32 [ 695.032553][ T7080] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 695.060837][ T7080] usb 1-1: USB disconnect, device number 33 [ 695.143495][ T7079] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 695.163655][ T7079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.186747][T20049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7035'. [ 695.191085][ T7079] usb 2-1: config 0 descriptor?? [ 695.219701][T20049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7035'. [ 695.337736][T20054] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7037'. [ 695.363396][ T28] INFO: task syz.0.4502:14351 blocked for more than 143 seconds. [ 695.371196][ T28] Not tainted 6.1.112-syzkaller #0 [ 695.398655][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.415347][ T28] task:syz.0.4502 state:D stack:24496 pid:14351 ppid:3649 flags:0x00004004 [ 695.425707][ T28] Call Trace: [ 695.431011][ T28] [ 695.434016][ T28] __schedule+0x143f/0x4570 [ 695.438661][ T28] ? xlog_grant_head_wait+0x1ee/0xa00 [ 695.444198][ T28] ? release_firmware_map_entry+0x186/0x186 [ 695.454642][ T28] ? xlog_space_left+0xa9/0x2b0 [ 695.459813][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 695.476848][ T28] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 695.477007][ T7079] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 695.482739][ T28] schedule+0xbf/0x180 [ 695.501113][ T7079] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 695.507260][ T28] xlog_grant_head_wait+0x3b6/0xa00 [ 695.515772][ T28] xlog_grant_head_check+0x295/0x480 [ 695.521083][ T28] ? xlog_grant_push_ail+0xd0/0xd0 [ 695.524261][ T7079] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 695.526252][ T28] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 695.539198][ T28] xfs_log_reserve+0x3e1/0xc30 [ 695.541089][ T7079] usb 2-1: media controller created [ 695.544003][ T28] ? xlog_grant_head_check+0x480/0x480 [ 695.544035][ T28] ? xfs_mod_freecounter+0x1e2/0x490 [ 695.544065][ T28] xfs_trans_reserve+0x239/0x6a0 [ 695.566069][ T28] xfs_trans_alloc+0x41b/0x870 [ 695.569677][ T7079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.570849][ T28] xfs_trans_alloc_inode+0x129/0x450 [ 695.593528][ T28] ? xfs_trans_dup+0x6a0/0x6a0 [ 695.598402][ T28] ? xfs_da_hashname+0x23f/0x370 [ 695.607144][ T28] ? xfs_attr_leaf_newentsize+0xd5/0x1d0 [ 695.613095][ T28] xfs_attr_set+0xa4e/0x1660 [ 695.617733][ T28] ? xfs_attr_leaf_shrink+0x410/0x410 [ 695.623336][ T28] ? lockdep_unlock+0x165/0x300 [ 695.628247][ T28] xfs_xattr_set+0x227/0x3a0 [ 695.633111][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 695.637890][ T28] ? evm_protect_xattr+0x366/0xb10 [ 695.643217][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 695.648100][ T28] __vfs_setxattr+0x3e7/0x420 [ 695.652793][ T28] __vfs_setxattr_noperm+0x12a/0x5e0 [ 695.659109][ T28] vfs_setxattr+0x21d/0x420 [ 695.663628][ T28] ? xattr_permission+0x4f0/0x4f0 [ 695.669511][ T28] ? _copy_from_user+0xa1/0x170 [ 695.675121][ T28] ? copy_user_enhanced_fast_string+0xa/0x40 [ 695.681337][ T28] ? _copy_from_user+0x109/0x170 [ 695.686537][ T7079] az6027: usb out operation failed. (-71) [ 695.692423][ T28] setxattr+0x250/0x2b0 [ 695.696694][ T28] ? path_setxattr+0x2a0/0x2a0 [ 695.701478][ T28] ? __mnt_want_write+0x222/0x2a0 [ 695.706785][ T7079] az6027: usb out operation failed. (-71) [ 695.712529][ T7079] stb0899_attach: Driver disabled by Kconfig [ 695.718667][ T28] path_setxattr+0x1bc/0x2a0 [ 695.723305][ T28] ? simple_xattr_list_add+0xf0/0xf0 [ 695.728723][ T7079] az6027: no front-end attached [ 695.728723][ T7079] [ 695.733484][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 695.742200][ T28] __x64_sys_setxattr+0xb7/0xd0 [ 695.747563][ T28] do_syscall_64+0x3b/0xb0 [ 695.751997][ T28] ? clear_bhb_loop+0x45/0xa0 [ 695.752650][ T7079] az6027: usb out operation failed. (-71) [ 695.757849][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.769369][ T28] RIP: 0033:0x7f01f8b7dff9 [ 695.770965][ T7079] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 695.773847][ T28] RSP: 002b:00007f01f99b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 695.773873][ T28] RAX: ffffffffffffffda RBX: 00007f01f8d35f80 RCX: 00007f01f8b7dff9 [ 695.773886][ T28] RDX: 0000000020000880 RSI: 0000000020000240 RDI: 0000000020000300 [ 695.773900][ T28] RBP: 00007f01f8bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 695.790532][ T7079] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 695.807438][ T28] R10: 000000000000ff27 R11: 0000000000000246 R12: 0000000000000000 [ 695.823606][ T7079] dvb-usb: schedule remote query interval to 400 msecs. [ 695.844060][ T28] R13: 0000000000000000 R14: 00007f01f8d35f80 R15: 00007fffe1004d28 [ 695.847466][ T7079] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 695.852225][ T28] [ 695.852275][ T28] [ 695.852275][ T28] Showing all locks held in the system: [ 695.872375][ T28] 1 lock held by rcu_tasks_kthre/12: [ 695.877877][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 695.889131][ T28] 1 lock held by rcu_tasks_trace/13: [ 695.902662][ T7079] usb 2-1: USB disconnect, device number 44 [ 695.909546][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 695.921475][ T28] 1 lock held by khungtaskd/28: [ 695.926452][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 695.936545][ T28] 2 locks held by kworker/u4:3/46: [ 695.941673][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 695.953684][ T28] #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a3/0x770 [ 695.965292][ T28] 1 lock held by klogd/3082: [ 695.969997][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 695.980003][ T28] 2 locks held by getty/3395: [ 695.984777][ T28] #0: ffff88802e5e9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 695.994570][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 696.004808][ T28] 1 lock held by syz-executor/3631: [ 696.010059][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 696.020242][ T28] 2 locks held by kworker/0:9/7071: [ 696.025438][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 696.035812][ T28] #1: ffffc900171dfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 696.047448][ T28] 7 locks held by kworker/0:17/7079: [ 696.054171][ T28] #0: ffff88801e6aad38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 696.065738][ T28] #1: ffffc90017d9fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 696.077009][ T28] #2: ffff888145370190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 696.085919][ T28] #3: ffff88801f697190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xfa/0x8c0 [ 696.095136][ T28] #4: ffff888024952118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 696.105747][ T28] #5: ffffffff8dffac28 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x308/0x630 [ 696.116193][ T28] #6: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 696.127238][ T28] 3 locks held by syz.0.4502/14351: [ 696.132430][ T28] #0: ffff88805812a460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 696.141676][ T28] #1: ffff888075dbc8f8 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 696.154160][ T28] #2: ffff88805812a650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 696.165462][ T28] 3 locks held by syz.3.7040/20059: [ 696.170660][ T28] #0: ffff888075f2c410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 696.180886][ T28] #1: ffff888079c38130 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x27/0x300 [ 696.190693][ T28] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 696.201666][ T28] [ 696.203996][ T28] ============================================= [ 696.203996][ T28] [ 696.214714][ T28] NMI backtrace for cpu 1 [ 696.219060][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 696.226957][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 696.237015][ T28] Call Trace: [ 696.240297][ T28] [ 696.243235][ T28] dump_stack_lvl+0x1e3/0x2cb [ 696.247934][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 696.253411][ T28] ? panic+0x764/0x764 [ 696.257493][ T28] ? vprintk_emit+0x622/0x740 [ 696.262181][ T28] ? printk_sprint+0x490/0x490 [ 696.266954][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 696.272060][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 696.276989][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 696.283134][ T28] ? _printk+0xd1/0x111 [ 696.287279][ T28] ? panic+0x764/0x764 [ 696.291336][ T28] ? __wake_up_klogd+0xcc/0x100 [ 696.296174][ T28] ? panic+0x764/0x764 [ 696.300230][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 696.306318][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 696.312380][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 696.318350][ T28] watchdog+0xf88/0xfd0 [ 696.322591][ T28] ? watchdog+0x1f8/0xfd0 [ 696.327005][ T28] kthread+0x28d/0x320 [ 696.331061][ T28] ? hungtask_pm_notify+0x50/0x50 [ 696.336090][ T28] ? kthread_blkcg+0xd0/0xd0 [ 696.340687][ T28] ret_from_fork+0x1f/0x30 [ 696.345372][ T28] [ 696.349247][ T28] Sending NMI from CPU 1 to CPUs 0: [ 696.354644][ C0] NMI backtrace for cpu 0 [ 696.354654][ C0] CPU: 0 PID: 3716 Comm: kworker/u4:6 Not tainted 6.1.112-syzkaller #0 [ 696.354670][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 696.354679][ C0] Workqueue: bat_events batadv_nc_worker [ 696.354703][ C0] RIP: 0010:__rcu_read_unlock+0x26/0x100 [ 696.354722][ C0] Code: 00 0f 1f 00 55 41 57 41 56 41 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 4c 8b 35 84 38 8e 7e 4d 8d ae 3c 04 00 00 4c 89 eb <48> c1 eb 03 42 0f b6 04 23 84 c0 75 61 41 8b 6d 00 ff cd 42 0f b6 [ 696.354736][ C0] RSP: 0018:ffffc90004c37bc0 EFLAGS: 00000293 [ 696.354748][ C0] RAX: ffffffff8a77610c RBX: ffff88802e2aa1fc RCX: ffff88802e2a9dc0 [ 696.354760][ C0] RDX: 0000000000000000 RSI: ffffffff8b5d7160 RDI: ffffffff8b5d7120 [ 696.354771][ C0] RBP: 0000000000000000 R08: ffffffff8a7760fa R09: fffffbfff223ba45 [ 696.354781][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 696.354792][ C0] R13: ffff88802e2aa1fc R14: ffff88802e2a9dc0 R15: dffffc0000000000 [ 696.354803][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 696.354816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.354826][ C0] CR2: 0000001b2f716ff8 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 696.354840][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 696.354849][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 696.354858][ C0] Call Trace: [ 696.354869][ C0] [ 696.354874][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 696.354890][ C0] ? read_lock_is_recursive+0x10/0x10 [ 696.354912][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 696.354927][ C0] ? nmi_handle+0x25/0x440 [ 696.354956][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 696.354977][ C0] ? nmi_handle+0x12e/0x440 [ 696.354998][ C0] ? nmi_handle+0x25/0x440 [ 696.355019][ C0] ? __rcu_read_unlock+0x26/0x100 [ 696.355034][ C0] ? default_do_nmi+0x62/0x150 [ 696.355050][ C0] ? exc_nmi+0xa8/0x100 [ 696.355064][ C0] ? end_repeat_nmi+0x16/0x31 [ 696.355089][ C0] ? batadv_nc_worker+0x1fa/0x610 [ 696.355107][ C0] ? batadv_nc_worker+0x20c/0x610 [ 696.355128][ C0] ? __rcu_read_unlock+0x26/0x100 [ 696.355144][ C0] ? __rcu_read_unlock+0x26/0x100 [ 696.355161][ C0] ? __rcu_read_unlock+0x26/0x100 [ 696.355177][ C0] [ 696.355181][ C0] [ 696.355186][ C0] ? batadv_nc_worker+0xc7/0x610 [ 696.355206][ C0] batadv_nc_worker+0x27d/0x610 [ 696.355226][ C0] ? batadv_nc_worker+0xc7/0x610 [ 696.355247][ C0] ? process_one_work+0x7a9/0x11d0 [ 696.355264][ C0] process_one_work+0x8a9/0x11d0 [ 696.355288][ C0] ? worker_detach_from_pool+0x260/0x260 [ 696.355307][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 696.355324][ C0] ? kthread_data+0x4e/0xc0 [ 696.355347][ C0] ? wq_worker_running+0x97/0x190 [ 696.355361][ C0] worker_thread+0xa47/0x1200 [ 696.355383][ C0] ? _raw_spin_unlock+0x40/0x40 [ 696.355407][ C0] kthread+0x28d/0x320 [ 696.355419][ C0] ? worker_clr_flags+0x190/0x190 [ 696.355434][ C0] ? kthread_blkcg+0xd0/0xd0 [ 696.355448][ C0] ret_from_fork+0x1f/0x30 [ 696.355474][ C0] [ 696.394459][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 696.394474][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 696.394492][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 696.394502][ T28] Call Trace: [ 696.394508][ T28] [ 696.394514][ T28] dump_stack_lvl+0x1e3/0x2cb [ 696.394543][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 696.394566][ T28] ? panic+0x764/0x764 [ 696.394584][ T28] ? llist_add_batch+0x160/0x1d0 [ 696.394608][ T28] ? vscnprintf+0x59/0x80 [ 696.394628][ T28] panic+0x318/0x764 [ 696.394648][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 696.394665][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 696.394686][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 696.394701][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 696.394719][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 696.394738][ T28] watchdog+0xfc7/0xfd0 [ 696.394763][ T28] ? watchdog+0x1f8/0xfd0 [ 696.394785][ T28] kthread+0x28d/0x320 [ 696.394798][ T28] ? hungtask_pm_notify+0x50/0x50 [ 696.394816][ T28] ? kthread_blkcg+0xd0/0xd0 [ 696.394833][ T28] ret_from_fork+0x1f/0x30 [ 696.394862][ T28] [ 696.396226][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.396469][ T28] Kernel Offset: disabled [ 696.795821][ T28] Rebooting in 86400 seconds..