last executing test programs: 3.538397962s ago: executing program 0 (id=6093): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000001) 3.412336366s ago: executing program 4 (id=6095): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)) 3.196284078s ago: executing program 0 (id=6097): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x4, 0x20000002, 0x101) 3.082677228s ago: executing program 4 (id=6100): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') read$FUSE(r0, 0x0, 0x0) 2.874433s ago: executing program 4 (id=6102): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2.857703371s ago: executing program 0 (id=6104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a00000001900010000000000000000001c14"], 0xa0}}, 0x0) 2.546549292s ago: executing program 4 (id=6108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x2b, 0xb, 0x70bd2c, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.49635285s ago: executing program 1 (id=6109): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8500) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x92, 0x8}) 2.325834846s ago: executing program 5 (id=6111): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='A']) 2.297721004s ago: executing program 3 (id=6112): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0xa5, 0x1, 0x1, "795ca1ce205b8de2322348e8e3681e8b3bed6b3286bcfd8da4b550fb3388ab9f", 0x43353039}) 2.28916672s ago: executing program 0 (id=6113): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80044dff, 0x1000000000000) 2.284446155s ago: executing program 4 (id=6114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x3f0, 0xffffffff, 0x0, 0x0, 0x138, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'syz_tun\x00'}, 0x203, 0x110, 0x138, 0x8502, {0x700}, [@common=@unspec=@rateest={{0x68}, {'syz_tun\x00', 'bond_slave_1\x00', 0x0, 0x2, 0x98000000, 0xa, 0x200, 0x3ff, {0xd}, {0xffffffff}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'veth1_macvtap\x00', {}, {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 2.094795831s ago: executing program 1 (id=6115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010065727370616e"], 0x4c}}, 0x0) 2.085225452s ago: executing program 2 (id=6116): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 2.000723208s ago: executing program 0 (id=6117): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x3c, 0x0, 0x0) 1.989907277s ago: executing program 3 (id=6118): syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x1, 0x1058, &(0x7f0000002180)="$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") mknod(&(0x7f0000000080)='./file0\x00', 0x40, 0x3) 1.962625281s ago: executing program 4 (id=6119): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.825649002s ago: executing program 5 (id=6120): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x440, &(0x7f0000000a80)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x65]}}]}) 1.708191441s ago: executing program 2 (id=6121): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000380)='romfs\x00', 0x0, 0x0) 1.707990548s ago: executing program 1 (id=6122): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000880)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) 1.707928341s ago: executing program 0 (id=6123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.485021921s ago: executing program 5 (id=6124): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0xfffffffd, 0x180, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 1.413229596s ago: executing program 2 (id=6125): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) 1.41313389s ago: executing program 3 (id=6126): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0xc, 0x1d}, 0x10) 1.336187924s ago: executing program 1 (id=6127): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0xe}]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1}, 0x28) 1.079260014s ago: executing program 3 (id=6128): mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) mount$nfs4(&(0x7f0000000100)='(+-)\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000000, 0x0) 1.061047708s ago: executing program 5 (id=6129): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000980)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) 1.050586113s ago: executing program 1 (id=6130): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) 905.06908ms ago: executing program 2 (id=6131): r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x0, 0x0, 0xfffffffffffffe82) 829.941174ms ago: executing program 3 (id=6132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=ANY=[@ANYBLOB="38000000180001000000000000000000022000000000fe0600000000060015000400000014001680100008800c0003800500010002"], 0x38}}, 0x8000) 586.844869ms ago: executing program 2 (id=6133): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x4515, 0x0, &(0x7f0000000000)) 396.888992ms ago: executing program 3 (id=6134): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 365.822513ms ago: executing program 2 (id=6135): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000200)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@uid}, {@force}, {@type={'type', 0x3d, "05f2875e"}}, {@nls={'nls', 0x3d, 'cp950'}}]}, 0x3, 0x632, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 363.480842ms ago: executing program 5 (id=6136): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000002740)) 1.053016ms ago: executing program 1 (id=6137): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, 0xffffffffffffffff) 0s ago: executing program 5 (id=6138): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1}}) kernel console output (not intermixed with test programs): failed [ 744.852392][T16517] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 744.949945][T16517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.956214][T16525] loop3: detected capacity change from 0 to 512 [ 744.981914][T16524] loop1: detected capacity change from 0 to 128 [ 745.000450][T16524] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 745.066116][T16524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.119419][T16521] loop4: detected capacity change from 0 to 4096 [ 745.229893][T16521] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 745.250941][T16521] UDF-fs: Scanning with blocksize 512 failed [ 745.390306][T16521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.435390][T16527] loop0: detected capacity change from 0 to 512 [ 745.519601][T16532] loop5: detected capacity change from 0 to 128 [ 745.561637][T16533] loop3: detected capacity change from 0 to 512 [ 745.981146][T16537] loop4: detected capacity change from 0 to 128 [ 746.123050][T16539] loop0: detected capacity change from 0 to 2048 [ 746.151271][T16543] loop3: detected capacity change from 0 to 512 [ 746.198464][T16542] loop5: detected capacity change from 0 to 512 [ 746.751115][T16535] loop2: detected capacity change from 0 to 16384 [ 746.882659][T16552] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.063233][T16530] loop1: detected capacity change from 0 to 32768 [ 747.213174][T16547] loop3: detected capacity change from 0 to 16384 [ 747.265616][T16547] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 747.292697][T16547] UDF-fs: Scanning with blocksize 512 failed [ 747.337511][T16547] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 747.374893][T16547] UDF-fs: Scanning with blocksize 1024 failed [ 747.492392][T16555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.492613][T16547] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 747.566356][T16547] UDF-fs: Scanning with blocksize 2048 failed [ 747.623073][T16547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.902467][T16557] loop2: detected capacity change from 0 to 128 [ 747.984765][T16557] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 748.057923][T16557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.345281][T16551] loop5: detected capacity change from 0 to 32768 [ 748.467439][T16551] (syz.5.4436,16551,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 748.524933][T16551] (syz.5.4436,16551,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 749.194344][T16566] loop5: detected capacity change from 0 to 8192 [ 749.287653][ T6242] loop5: p1 p2 p3 [ 749.351051][T16566] loop5: p1 p2 p3 [ 750.137147][T16564] loop1: detected capacity change from 0 to 32768 [ 750.338241][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 750.380343][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 750.397181][T16564] XFS (loop1): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2 [ 750.426282][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 750.461626][T16564] XFS (loop1): Log size 768 blocks too small, minimum size is 1056 blocks [ 750.516358][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 750.523482][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 750.579069][T16564] XFS (loop1): AAIEEE! Log failed size checks. Abort! [ 750.591026][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 750.611404][T16564] XFS (loop1): log mount failed [ 750.781197][T16581] loop0: detected capacity change from 0 to 128 [ 751.035792][T16559] loop3: detected capacity change from 0 to 65536 [ 751.109329][T16559] XFS (loop3): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 751.268891][T16559] XFS (loop3): Ending clean mount [ 751.480821][T16561] loop2: detected capacity change from 0 to 65536 [ 751.499480][ T5925] XFS (loop3): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 751.627533][T16561] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop2": -EINTR [ 751.923239][T16601] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4450'. [ 753.112038][T16612] loop2: detected capacity change from 0 to 2048 [ 753.221280][T16570] loop5: detected capacity change from 0 to 65536 [ 753.236392][T16612] loop2: p1 p2 p3 [ 753.390322][ T5210] loop2: p1 p2 p3 [ 753.971417][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 753.997600][T16608] loop4: detected capacity change from 0 to 32768 [ 754.009214][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 754.011152][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 754.084613][T16608] (syz.4.4453,16608,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 754.106123][T16608] (syz.4.4453,16608,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 754.184561][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 754.200918][ T6102] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 754.371747][ T6102] usb 3-1: Using ep0 maxpacket: 8 [ 754.381854][ T6102] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 754.424810][ T6102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.437551][ T6102] usb 3-1: Product: syz [ 754.441792][ T6102] usb 3-1: Manufacturer: syz [ 754.482717][ T6102] usb 3-1: SerialNumber: syz [ 754.957313][ T6102] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 755.002733][ T6102] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 755.049079][ T6102] usb 3-1: USB disconnect, device number 7 [ 755.605982][T16631] netlink: 'syz.4.4464': attribute type 21 has an invalid length. [ 755.640877][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4464'. [ 755.678537][T16635] xt_l2tp: v2 tid > 0xffff: 134217728 [ 756.429184][T16639] loop0: detected capacity change from 0 to 32768 [ 756.553380][ T6242] loop0: p1 p2 p3 [ 756.608970][T16639] loop0: p1 p2 p3 [ 757.033118][T16663] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 757.093593][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 757.126854][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 757.233875][T16669] xt_cgroup: xt_cgroup: no path or classid specified [ 757.876222][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 757.886223][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 757.900584][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 757.915251][T16683] IPv6: NLM_F_CREATE should be specified when creating new route [ 758.032495][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 758.050362][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 758.104674][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 758.870755][T16704] netlink: 'syz.2.4501': attribute type 21 has an invalid length. [ 758.894341][T16704] IPv6: NLM_F_CREATE should be specified when creating new route [ 758.912230][ T6016] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 758.967581][T16642] loop4: detected capacity change from 0 to 65536 [ 759.027078][T16642] XFS (loop4): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 759.085440][ T6016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.101731][ T6016] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 759.147609][ T6016] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 759.224355][ T6016] usb 4-1: Manufacturer: syz [ 759.229016][ T6016] usb 4-1: SerialNumber: syz [ 759.256022][T16642] XFS (loop4): Ending clean mount [ 759.319050][ T6016] usb 4-1: config 0 descriptor?? [ 759.420282][T16649] loop5: detected capacity change from 0 to 65536 [ 759.436578][ T5933] XFS (loop4): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 759.553919][ T6016] usb 4-1: USB disconnect, device number 117 [ 760.046696][T16735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4512'. [ 760.583028][T16751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4517'. [ 760.680266][T16753] netlink: 'syz.0.4521': attribute type 1 has an invalid length. [ 760.743925][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 760.878982][T16757] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4524'. [ 760.888007][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4524'. [ 761.327058][T16766] loop3: detected capacity change from 0 to 64 [ 761.432432][T16771] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4529'. [ 761.679308][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 761.877640][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 761.904557][ T5910] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 761.913248][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'. [ 761.931546][ T5910] usb 3-1: config 162 has no interface number 0 [ 761.989166][ T5910] usb 3-1: config 162 interface 97 has no altsetting 0 [ 762.017723][ T5910] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 762.037675][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.310595][ T5910] usb 3-1: Product: syz [ 762.315169][ T5910] usb 3-1: Manufacturer: syz [ 762.320077][ T5910] usb 3-1: SerialNumber: syz [ 762.329122][T16777] loop5: detected capacity change from 0 to 32768 [ 762.331288][T16791] openvswitch: netlink: IP tunnel dst address not specified [ 762.408359][ T6241] loop5: p1 p9 p11 [ 762.459583][T16777] loop5: p1 p9 p11 [ 762.578178][ T5910] metro_usb 3-1:162.97: Metrologic USB to Serial converter detected [ 762.642568][ T5910] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 762.689474][ T5910] usb 3-1: USB disconnect, device number 8 [ 762.768277][ T5910] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 762.835698][ T5910] metro_usb 3-1:162.97: device disconnected [ 763.766674][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 763.823765][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 763.836327][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 763.854112][T16825] netlink: 'syz.0.4556': attribute type 21 has an invalid length. [ 763.919895][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4556'. [ 763.991906][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 763.994923][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 764.015547][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 764.122299][T16829] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 764.271462][T16837] loop2: detected capacity change from 0 to 256 [ 764.612600][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.619220][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 765.894095][T16867] bond1: entered allmulticast mode [ 765.933813][T16867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.403543][T16886] Illegal XDP return value 4294967262 on prog (id 263) dev N/A, expect packet loss! [ 767.376025][ T30] audit: type=1326 audit(2000000329.218:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.1.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259898e9a9 code=0x7ffc0000 [ 767.434544][T16922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 767.494761][ T30] audit: type=1326 audit(2000000329.265:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.1.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f259898e9a9 code=0x7ffc0000 [ 767.596898][ T30] audit: type=1326 audit(2000000329.265:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.1.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259898e9a9 code=0x7ffc0000 [ 767.652696][ T5910] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 767.696302][ T30] audit: type=1326 audit(2000000329.265:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16915 comm="syz.1.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259898e9a9 code=0x7ffc0000 [ 767.838457][T16934] loop3: detected capacity change from 0 to 128 [ 767.855724][ T5910] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 767.886595][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 767.949965][ T5910] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 767.975600][T16934] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 768.003904][ T5910] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 768.011952][ T5910] usb 6-1: Manufacturer: syz [ 768.047787][T16934] ext4 filesystem being mounted at /790/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.087760][T16939] loop0: detected capacity change from 0 to 64 [ 768.135850][ T5910] usb 6-1: config 0 descriptor?? [ 768.157816][T16934] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.4606: No space for directory leaf checksum. Please run e2fsck -D. [ 768.187905][ T5910] igorplugusb 6-1:0.0: endpoint incorrect [ 768.228504][T16934] EXT4-fs error (device loop3): __ext4_find_entry:1624: inode #2: comm syz.3.4606: checksumming directory block 0 [ 768.259168][T16943] xt_policy: neither incoming nor outgoing policy selected [ 768.403949][ T5910] usb 6-1: USB disconnect, device number 116 [ 768.497698][T16945] netlink: 'syz.2.4614': attribute type 21 has an invalid length. [ 768.522518][ T5925] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.656394][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'. [ 768.782596][T16947] bridge1: entered promiscuous mode [ 769.350380][T16969] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 770.213758][T16993] bridge1: entered promiscuous mode [ 770.514664][T17004] qrtr: Invalid version 43 [ 770.573318][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 770.636869][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4644'. [ 770.920540][T17022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 771.556542][T17039] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 771.702296][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4658'. [ 772.253752][T17062] tmpfs: Bad value for 'nr_inodes' [ 772.932846][T17082] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 773.156294][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4682'. [ 773.211846][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4682'. [ 773.391882][T17095] loop5: detected capacity change from 0 to 64 [ 773.534091][T17098] netlink: 'syz.0.4688': attribute type 5 has an invalid length. [ 774.776029][T17132] netlink: 'syz.1.4705': attribute type 1 has an invalid length. [ 774.785061][T17132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4705'. [ 774.836780][T17127] bond1: entered allmulticast mode [ 774.863406][T17127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.067246][T17138] netlink: 'syz.1.4709': attribute type 1 has an invalid length. [ 775.108588][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4709'. [ 775.378088][T17146] netlink: 'syz.2.4712': attribute type 10 has an invalid length. [ 775.385967][T17146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4712'. [ 775.510892][T17146] team0: Port device geneve0 added [ 775.704290][T17154] xt_policy: neither incoming nor outgoing policy selected [ 775.941065][T17164] loop2: detected capacity change from 0 to 24 [ 776.622858][T17172] bond1: entered allmulticast mode [ 776.660312][T17172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.698805][T17181] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.4731'. [ 776.713578][T17181] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 777.393348][T17203] netlink: del zone limit has 4 unknown bytes [ 777.491935][T17206] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.4738'. [ 777.685387][T17208] loop0: detected capacity change from 0 to 1024 [ 777.692974][T17208] EXT4-fs: Ignoring removed oldalloc option [ 777.715259][T17160] infiniband syz1: set active [ 777.720171][T17160] infiniband syz1: added bond_slave_1 [ 777.767582][T17208] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 777.782807][T17160] syz1: rxe_create_cq: returned err = -12 [ 777.788920][T17160] infiniband syz1: Couldn't create ib_mad CQ [ 777.859418][T17208] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 777.871178][T17160] infiniband syz1: Couldn't open port 1 [ 777.946567][T17208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.049454][T17160] RDS/IB: syz1: added [ 778.082271][T17160] smc: adding ib device syz1 with port count 1 [ 778.088594][T17160] smc: ib device syz1 port 1 has pnetid [ 778.091155][T17208] fscrypt (loop0, inode 15): Error -61 getting encryption context [ 778.269658][T17226] netlink: 'syz.2.4748': attribute type 4 has an invalid length. [ 778.366576][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.652596][T17235] dlm: non-version read from control device 36 [ 778.922761][T17240] openvswitch: netlink: Key type 251 is out of range max 32 [ 779.280546][T17250] loop3: detected capacity change from 0 to 16 [ 779.350952][T17250] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 779.574461][ T6016] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 779.755892][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 779.775104][ T6016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.805983][ T6016] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.838288][ T6016] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.858717][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.879450][ T6016] usb 5-1: Product: syz [ 779.899356][ T6016] usb 5-1: Manufacturer: syz [ 779.903983][ T6016] usb 5-1: SerialNumber: syz [ 779.916699][T17262] loop2: detected capacity change from 0 to 2048 [ 779.967154][T17262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.272506][ T6016] usb 5-1: 0:2 : does not exist [ 780.300778][ T6016] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 780.344678][ T6016] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 780.429701][ T6016] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 780.473114][T17274] bond1: entered allmulticast mode [ 780.474845][T17273] loop2: detected capacity change from 0 to 128 [ 780.484873][T17274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 780.536077][ T6016] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 780.647523][ T6016] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 780.766467][ T6016] usb 5-1: USB disconnect, device number 17 [ 780.782016][T17279] loop0: detected capacity change from 0 to 1024 [ 781.013554][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.096588][ T1140] hfsplus: b-tree write err: -5, ino 4 [ 781.136033][ T6102] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 781.293269][T17287] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 781.326535][T17287] overlayfs: missing 'lowerdir' [ 781.346808][ T6102] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 781.362446][ T6102] usb 4-1: config 0 has no interface number 0 [ 781.388823][ T6102] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 781.422428][ T6102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.455963][ T6102] usb 4-1: Product: syz [ 781.472059][ T6102] usb 4-1: Manufacturer: syz [ 781.497994][ T6102] usb 4-1: SerialNumber: syz [ 781.525380][ T6102] usb 4-1: config 0 descriptor?? [ 782.064192][ T6102] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 782.091046][ T6102] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 782.132554][ T6102] asix 4-1:0.251: probe with driver asix failed with error -5 [ 782.188222][ T6102] usb 4-1: USB disconnect, device number 118 [ 782.574341][T17297] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 782.607014][T17315] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 782.995247][T17323] loop0: detected capacity change from 0 to 1024 [ 783.036098][T17323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 783.056744][T17323] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 783.103174][T17323] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 783.164501][T17323] EXT4-fs (loop0): invalid journal inode [ 783.170232][T17323] EXT4-fs (loop0): can't get journal size [ 783.204364][T17331] loop4: detected capacity change from 0 to 256 [ 783.219445][T17323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 783.300075][T17331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 783.347729][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.602313][T17373] loop2: detected capacity change from 0 to 8 [ 784.899697][T17380] comedi comedi0: comedi_config --init_data is deprecated [ 784.967363][T17382] bond2: entered allmulticast mode [ 784.981839][T17382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.421362][ T30] audit: type=1326 audit(2000000346.113:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.2.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea98e9a9 code=0x7ffc0000 [ 785.451159][T17398] comedi comedi2: pcl816: I/O port conflict (0x209e1,16) [ 785.535672][ T30] audit: type=1326 audit(2000000346.123:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.2.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea98e9a9 code=0x7ffc0000 [ 785.624759][ T30] audit: type=1326 audit(2000000346.151:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.2.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f01ea98e9a9 code=0x7ffc0000 [ 785.651761][ T30] audit: type=1326 audit(2000000346.151:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17394 comm="syz.2.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea98e9a9 code=0x7ffc0000 [ 786.418748][T17419] loop0: detected capacity change from 0 to 512 [ 786.542158][T17419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.606080][T17423] loop3: detected capacity change from 0 to 2048 [ 786.619287][T17419] ext4 filesystem being mounted at /875/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 786.675300][T17423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.820338][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.995880][T17440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4851'. [ 787.304608][T17443] loop5: detected capacity change from 0 to 4096 [ 787.337117][T17443] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 787.480251][T17453] netlink: 'syz.2.4856': attribute type 49 has an invalid length. [ 787.565475][T17443] ntfs3(loop5): ino=19, mi_enum_attr [ 787.653478][T17443] ntfs3(loop5): failed to convert "c46c" to euc-jp [ 787.687643][T17443] ntfs3(loop5): ino=20, mi_enum_attr [ 787.714913][T17451] loop4: detected capacity change from 0 to 4096 [ 787.783471][T17451] ntfs3(loop4): It is recommened to use chkdsk. [ 787.808771][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 787.874806][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 787.929196][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 787.937080][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 787.976528][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 788.022411][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 788.078363][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 788.097857][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 788.140377][T17451] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 788.238796][ T5887] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 788.380310][T17469] loop0: detected capacity change from 0 to 2048 [ 788.458285][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 788.461483][T17469] GPT:first_usable_lbas don't match. [ 788.469894][ T5887] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 788.485054][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.496830][ T5887] usb 3-1: config 0 descriptor?? [ 788.502687][T17463] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 788.511304][T17469] GPT:34 != 290 [ 788.514798][T17469] GPT: Use GNU Parted to correct GPT errors. [ 788.521381][T17469] loop0: p1 p2 p3 [ 788.636244][T17472] bond2: entered allmulticast mode [ 788.641970][T17472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 788.748068][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 788.804932][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 788.873024][ T5887] usb 3-1: USB disconnect, device number 9 [ 789.090657][T17485] loop5: detected capacity change from 0 to 64 [ 789.102228][T17486] netlink: 'syz.3.4870': attribute type 2 has an invalid length. [ 789.170181][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 789.337383][ T6239] udevd[6239]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 789.349861][ T5910] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 789.401556][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 789.444356][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4875'. [ 789.467234][T17494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4875'. [ 789.517040][T17495] loop3: detected capacity change from 0 to 512 [ 789.572620][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.581087][T17495] EXT4-fs: Ignoring removed nobh option [ 789.595490][ T6016] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 789.626349][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.671378][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 789.716147][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.757698][T17495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.759252][ T5910] usb 5-1: SerialNumber: syz [ 789.803962][ T6016] usb 1-1: config 0 has an invalid interface number: 222 but max is 0 [ 789.815395][ T5910] usb 5-1: 0:2 : does not exist [ 789.866703][ T6016] usb 1-1: config 0 has no interface number 0 [ 789.872856][ T6016] usb 1-1: config 0 interface 222 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 789.909346][ T5925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.965137][ T6016] usb 1-1: config 0 interface 222 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 790.033915][T14694] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 790.044787][ T6016] usb 1-1: config 0 interface 222 has no altsetting 0 [ 790.073026][ T6016] usb 1-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=86.41 [ 790.119044][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.150946][ T6016] usb 1-1: Product: syz [ 790.155148][ T6016] usb 1-1: Manufacturer: syz [ 790.159765][ T6016] usb 1-1: SerialNumber: syz [ 790.229594][ T6016] usb 1-1: config 0 descriptor?? [ 790.243620][T14694] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 790.269034][T17491] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 790.276275][T14694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.306538][T17491] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 790.317421][T14694] usb 2-1: Product: syz [ 790.338772][T14694] usb 2-1: Manufacturer: syz [ 790.375336][T14694] usb 2-1: SerialNumber: syz [ 790.392269][T14694] usb 2-1: config 0 descriptor?? [ 790.427959][ T5910] usb 5-1: USB disconnect, device number 18 [ 790.621937][ T6016] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.222/input/input40 [ 790.663138][T14694] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 790.917927][T17527] netlink: 'syz.3.4885': attribute type 1 has an invalid length. [ 790.935215][T14694] usb 2-1: USB disconnect, device number 4 [ 791.008744][ T5910] usb 1-1: USB disconnect, device number 121 [ 791.276194][T17535] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4890'. [ 791.640352][T17548] ipt_REJECT: ECHOREPLY no longer supported. [ 792.235977][T17559] loop3: detected capacity change from 0 to 4096 [ 792.366897][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'. [ 792.403984][T17572] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 792.414953][T17568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.653248][T17577] loop1: detected capacity change from 0 to 512 [ 792.923888][T17577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.032978][T17577] ext4 filesystem being mounted at /797/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.418842][T17606] loop5: detected capacity change from 0 to 256 [ 793.446216][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.537780][T17606] FAT-fs (loop5): Directory bread(block 64) failed [ 793.591152][T17606] FAT-fs (loop5): Directory bread(block 65) failed [ 793.633918][T17611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4918'. [ 793.655396][T17606] FAT-fs (loop5): Directory bread(block 66) failed [ 793.661973][T17606] FAT-fs (loop5): Directory bread(block 67) failed [ 793.730642][T17606] FAT-fs (loop5): Directory bread(block 68) failed [ 793.746388][T17614] loop4: detected capacity change from 0 to 512 [ 793.758897][T17606] FAT-fs (loop5): Directory bread(block 69) failed [ 793.797485][T17608] loop2: detected capacity change from 0 to 4096 [ 793.809690][T17614] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 793.825448][T17606] FAT-fs (loop5): Directory bread(block 70) failed [ 793.861004][T17608] ntfs3(loop2): It is recommened to use chkdsk. [ 793.893284][T17606] FAT-fs (loop5): Directory bread(block 71) failed [ 793.905006][T17606] FAT-fs (loop5): Directory bread(block 72) failed [ 793.907675][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 793.951021][T17606] FAT-fs (loop5): Directory bread(block 73) failed [ 793.986372][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 793.994390][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 794.002619][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 794.002641][T17614] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.4920: corrupted in-inode xattr: e_value out of bounds [ 794.010918][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 794.034503][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 794.042701][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 794.050894][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 794.068052][T17614] EXT4-fs (loop4): Remounting filesystem read-only [ 794.087579][T17614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.136539][T17608] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 794.594696][ T5933] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.877747][T17674] nftables ruleset with unbound chain [ 796.294039][T14694] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 796.497166][T14694] usb 3-1: Using ep0 maxpacket: 8 [ 796.550475][T14694] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.598984][T14694] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 796.625235][T14694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 796.633461][T14694] usb 3-1: SerialNumber: syz [ 796.733195][T14694] usb 3-1: config 0 descriptor?? [ 796.769230][T14694] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 796.849854][T14694] usb 3-1: No valid video chain found. [ 797.074819][T14694] usb 3-1: USB disconnect, device number 10 [ 797.548212][T17727] loop4: detected capacity change from 0 to 512 [ 797.606901][T17727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 797.655115][T17731] loop5: detected capacity change from 0 to 512 [ 797.712646][T17731] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.753720][T17727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.824306][T17727] ext4 filesystem being mounted at /798/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 797.856312][T17733] loop1: detected capacity change from 0 to 2048 [ 797.928345][ T6241] GPT:first_usable_lbas don't match. [ 797.953572][ T6241] GPT:34 != 290 [ 797.976471][T17731] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 797.984499][ T6241] GPT: Use GNU Parted to correct GPT errors. [ 797.993249][ T6241] loop1: p1 p2 p3 [ 798.016952][T17731] EXT4-fs (loop5): orphan cleanup on readonly fs [ 798.051665][T17731] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 798.098426][T17731] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 798.132086][T17731] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 798.146634][T17731] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.4968: bg 0: block 40: padding at end of block bitmap is not set [ 798.166953][ T5933] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.202645][T17733] GPT:first_usable_lbas don't match. [ 798.222530][T17733] GPT:34 != 290 [ 798.226023][T17733] GPT: Use GNU Parted to correct GPT errors. [ 798.238598][T17733] loop1: p1 p2 p3 [ 798.243971][T17731] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 798.324402][T17731] EXT4-fs (loop5): 1 truncate cleaned up [ 798.332192][T17731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 798.524608][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 798.550550][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 798.562209][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 798.648731][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 798.663632][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 798.671712][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 798.827577][T17731] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.4968: bad symlink. [ 798.893049][T17751] netlink: 'syz.0.4975': attribute type 9 has an invalid length. [ 798.918926][T17759] cgroup: No subsys list or none specified [ 798.994739][ T5931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.242861][T17767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4983'. [ 799.434986][T14694] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 799.515738][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 799.657407][T14694] usb 4-1: Using ep0 maxpacket: 16 [ 799.680887][T14694] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.708362][T17781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4990'. [ 799.740142][T14694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 99, changing to 10 [ 799.808938][T14694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24941, setting to 1024 [ 799.860461][T14694] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 799.888921][T14694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.923927][T14694] usb 4-1: Product: syz [ 799.939377][T14694] usb 4-1: Manufacturer: syz [ 799.963750][T14694] usb 4-1: SerialNumber: syz [ 800.053986][T14694] usb 4-1: config 0 descriptor?? [ 800.068476][T14694] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 800.286569][T14694] usb 4-1: USB disconnect, device number 119 [ 800.444105][T17801] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5001'. [ 800.722375][T17812] netlink: 'syz.5.5005': attribute type 2 has an invalid length. [ 800.738417][ T6016] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 800.766757][T17812] netlink: 'syz.5.5005': attribute type 3 has an invalid length. [ 800.934538][ T6016] usb 5-1: Using ep0 maxpacket: 8 [ 800.974071][ T6016] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 800.996608][ T6016] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 801.032931][ T6016] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.094789][ T6016] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.107425][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.122317][T17822] loop0: detected capacity change from 0 to 1024 [ 801.139983][ T6016] usb 5-1: Product: syz [ 801.144191][ T6016] usb 5-1: Manufacturer: syz [ 801.158889][ T6016] usb 5-1: SerialNumber: syz [ 801.668757][ T6016] usb 5-1: 0:2 : does not exist [ 801.818361][ T6016] usb 5-1: USB disconnect, device number 19 [ 802.007581][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.266382][T17855] delete_channel: no stack [ 802.642635][T17870] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 802.768368][ T24] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 802.832357][ T5910] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 802.962739][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 802.984461][ T24] usb 2-1: config 0 has no interface number 0 [ 803.024679][ T6102] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 803.032911][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.038936][ T5910] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 803.071167][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 803.086306][ T5910] usb 5-1: config 179 has no interface number 0 [ 803.107960][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 803.125265][ T5910] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 803.125967][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 803.154700][ T5910] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.208471][ T5910] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 803.220697][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 803.249133][ T5910] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 803.263267][ T6102] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 803.285023][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 803.309986][ T6102] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.347270][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 803.348051][ T5910] usb 5-1: config 179 interface 65 has no altsetting 0 [ 803.381481][ T6102] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 803.398750][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.409256][ T5910] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 803.439962][ T6102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.440315][ T24] usb 2-1: config 0 descriptor?? [ 803.471521][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.481618][T17866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 803.498829][ T6102] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.520144][T17868] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 803.530672][ T6102] usb 1-1: invalid MIDI out EP 0 [ 803.546107][T17866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 803.630696][ T5910] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input45 [ 803.634266][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 803.703804][T17894] libceph: resolve '4..' (ret=-3): failed [ 803.823133][T17868] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 803.829707][T17868] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 803.851985][ T24] usb 2-1: USB disconnect, device number 5 [ 803.879541][T17868] vhci_hcd vhci_hcd.0: Device attached [ 803.901365][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 803.971927][T17900] vhci_hcd: connection closed [ 803.982183][ T13] vhci_hcd: stop threads [ 804.006749][ T13] vhci_hcd: release socket [ 804.015017][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.021600][ T6102] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 804.053339][T14694] usb 5-1: USB disconnect, device number 20 [ 804.053415][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 804.071681][ T13] vhci_hcd: disconnect device [ 804.108130][ T6102] usb 1-1: USB disconnect, device number 122 [ 805.097718][T17931] dvmrp0: entered allmulticast mode [ 805.857598][T17910] loop5: detected capacity change from 0 to 32768 [ 805.860357][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5062'. [ 805.886023][T17910] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5045 (17910) [ 805.963471][T17952] netlink: 'syz.3.5064': attribute type 10 has an invalid length. [ 805.993812][T17910] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 806.014645][T17952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5064'. [ 806.018663][T17910] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 806.125408][T17910] BTRFS info (device loop5): using free-space-tree [ 806.185827][T17952] team0: Port device geneve0 added [ 806.696276][ T5931] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 806.841458][T17929] loop0: detected capacity change from 0 to 32768 [ 806.896143][T17929] XFS: ikeep mount option is deprecated. [ 807.019086][T17929] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 807.368504][T17929] XFS (loop0): Ending clean mount [ 807.413851][T17929] XFS (loop0): Quotacheck needed: Please wait. [ 807.628668][T17929] XFS (loop0): Quotacheck: Done. [ 807.927307][T17969] loop4: detected capacity change from 0 to 32768 [ 808.068775][ T5919] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 808.138742][T17969] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 808.633152][ T5933] ocfs2: Unmounting device (7,4) on (node local) [ 808.707696][T18025] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.5087'. [ 809.141767][T18035] loop1: detected capacity change from 0 to 16 [ 809.200134][T18035] erofs (device loop1): mounted with root inode @ nid 36. [ 809.288738][T18035] syz.1.5092: attempt to access beyond end of device [ 809.288738][T18035] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 809.382096][T18035] erofs (device loop1): read error -5 @ 43 of nid 36 [ 809.460683][T18041] loop2: detected capacity change from 0 to 764 [ 809.557609][T18041] Symlink component flag not implemented [ 809.589306][T18041] Symlink component flag not implemented [ 809.616760][T18041] Symlink component flag not implemented (128) [ 809.659228][T18041] Symlink component flag not implemented (122) [ 809.678849][T18009] loop5: detected capacity change from 0 to 32768 [ 809.850558][T18009] ERROR: (device loop5): dtSearch: stack overrun! [ 809.850558][T18009] [ 809.948030][T18009] ERROR: (device loop5): remounting filesystem as read-only [ 809.993822][T18009] btstack dump: [ 810.022416][T18009] bn = 0, index = 4 [ 810.054421][T18009] bn = 0, index = 4 [ 810.058294][T18009] bn = 0, index = 4 [ 810.062121][T18009] bn = 0, index = 4 [ 810.115732][T18009] bn = 0, index = 4 [ 810.136674][T18009] bn = 0, index = 4 [ 810.146385][T18009] bn = 0, index = 4 [ 810.171942][T18009] bn = 0, index = 0 [ 810.175848][T18009] jfs_lookup: dtSearch returned -5 [ 810.546004][T18067] netlink: 'syz.4.5105': attribute type 8 has an invalid length. [ 810.955785][T18081] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 811.518281][T18097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5122'. [ 811.945104][T18111] netlink: 'syz.3.5129': attribute type 2 has an invalid length. [ 811.981326][T18110] loop2: detected capacity change from 0 to 1024 [ 812.124235][T18119] loop5: detected capacity change from 0 to 1024 [ 812.402432][T18119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.493725][T18119] EXT4-fs error (device loop5): ext4_get_first_dir_block:3536: inode #11: comm syz.5.5132: directory missing '.' [ 812.586757][T18119] EXT4-fs (loop5): Remounting filesystem read-only [ 812.701345][T18138] loop0: detected capacity change from 0 to 128 [ 812.799122][T18138] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 812.881198][ T5931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.947466][T18138] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 813.013781][T18138] FAT-fs (loop0): Filesystem has been set read-only [ 813.123303][T18145] warning: `syz.3.5145' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 813.708524][T18165] No control pipe specified [ 814.049100][T18176] loop4: detected capacity change from 0 to 164 [ 814.104023][T18176] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 814.172989][T18176] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 814.184550][T18182] xt_TCPMSS: Only works on TCP SYN packets [ 814.254575][T18176] rock: directory entry would overflow storage [ 814.276068][T18176] rock: sig=0x4f50, size=4, remaining=3 [ 814.281670][T18176] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 814.453447][T18188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 814.574230][T18192] netlink: 'syz.5.5168': attribute type 1 has an invalid length. [ 814.843535][T18201] loop0: detected capacity change from 0 to 16 [ 814.859844][T18201] erofs (device loop0): mounted with root inode @ nid 36. [ 815.004911][T18208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5176'. [ 815.186959][T18211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5177'. [ 815.443536][ T30] audit: type=1326 audit(2000000374.222:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.5.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 815.533709][ T30] audit: type=1326 audit(2000000374.222:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.5.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 815.569838][T18221] netlink: 'syz.1.5183': attribute type 1 has an invalid length. [ 815.577600][T18221] netlink: 784 bytes leftover after parsing attributes in process `syz.1.5183'. [ 815.631560][ T30] audit: type=1326 audit(2000000374.222:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.5.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 815.708126][ T30] audit: type=1326 audit(2000000374.222:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.5.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 815.739735][T14694] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 815.812207][ T30] audit: type=1326 audit(2000000374.222:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.5.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 815.935096][T14694] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 815.945543][T14694] usb 1-1: config 0 has no interface number 1 [ 815.987219][T14694] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 816.018558][T14694] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.060446][T14694] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 816.089707][T14694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 816.119441][T14694] usb 1-1: SerialNumber: syz [ 816.140866][T14694] usb 1-1: config 0 descriptor?? [ 816.259000][T18204] loop2: detected capacity change from 0 to 32768 [ 816.316470][T18238] loop3: detected capacity change from 0 to 16 [ 816.323028][T18241] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.5192' sets config #0 [ 816.344947][T18238] erofs (device loop3): mounted with root inode @ nid 36. [ 816.356722][T18204] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 816.402997][T14694] usb 1-1: Found UVC 0.00 device (0002:0000) [ 816.410236][T14694] usb 1-1: No valid video chain found. [ 816.431312][T18204] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 816.449625][T14694] usb 1-1: USB disconnect, device number 123 [ 816.790738][T18248] loop4: detected capacity change from 0 to 1024 [ 816.825791][ T5929] ocfs2: Unmounting device (7,2) on (node local) [ 816.885601][T18248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.064922][T18248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.5196: missing EA_INODE flag [ 817.144025][T18248] EXT4-fs (loop4): Remounting filesystem read-only [ 817.382170][T18264] xt_l2tp: invalid flags combination: 0 [ 817.419840][ T5933] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.737710][T18274] loop1: detected capacity change from 0 to 164 [ 817.834849][T18274] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 818.741177][T18306] netlink: 'syz.4.5223': attribute type 33 has an invalid length. [ 818.749510][T18306] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5223'. [ 818.833895][T18313] netlink: 'syz.5.5226': attribute type 1 has an invalid length. [ 818.868008][T18313] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5226'. [ 818.947299][T18315] loop1: detected capacity change from 0 to 64 [ 819.351136][T18329] CIFS mount error: No usable UNC path provided in device string! [ 819.351136][T18329] [ 819.389981][T18329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 819.498071][T18321] Cannot find add_set index 0 as target [ 819.521002][T18333] comedi comedi4: bad chanlist[0]=0x7fffffff chan=65535 range length=2 [ 819.642810][T18336] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5237'. [ 819.712575][T18336] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5237'. [ 819.887384][T18342] loop0: detected capacity change from 0 to 256 [ 820.001422][T18342] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 820.018165][T18348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 820.345821][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5246'. [ 820.631325][ T44] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 820.642153][ T6102] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 820.751545][T18368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 820.834125][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 820.888036][ T6102] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.907541][ T6102] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 820.911350][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 820.953139][ T44] usb 4-1: config 8 has an invalid interface number: 97 but max is 0 [ 820.962909][ T6102] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.982172][ T44] usb 4-1: config 8 has no interface number 0 [ 820.993030][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5256'. [ 821.026722][ T6102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.028415][ T44] usb 4-1: New USB device found, idVendor=0403, idProduct=dafa, bcdDevice= 1.5c [ 821.069193][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.084021][ T6102] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 821.118906][ T44] usb 4-1: Product: syz [ 821.131771][ T6102] usb 3-1: invalid MIDI out EP 0 [ 821.142980][ T44] usb 4-1: Manufacturer: syz [ 821.165394][ T44] usb 4-1: SerialNumber: syz [ 821.173007][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5258'. [ 821.255581][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5258'. [ 821.378415][ T6102] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 821.391136][ T6239] udevd[6239]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.449098][ T6102] usb 3-1: USB disconnect, device number 11 [ 821.450054][ T44] ftdi_sio 4-1:8.97: FTDI USB Serial Device converter detected [ 821.474524][ T44] usb 4-1: Detected SIO [ 821.499000][ T44] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 821.600913][ T44] usb 4-1: USB disconnect, device number 120 [ 821.684193][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 821.737280][ T44] ftdi_sio 4-1:8.97: device disconnected [ 822.019453][T15973] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 822.108946][T18401] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5268'. [ 822.353822][ T24] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 822.575529][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 822.588864][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 822.638012][ T24] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 822.681280][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.756592][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.771323][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.807241][ T24] usb 6-1: Product: syz [ 822.831823][ T24] usb 6-1: Manufacturer: syz [ 822.871765][ T24] usb 6-1: SerialNumber: syz [ 823.387807][ T24] usb 6-1: 0:2 : does not exist [ 823.452385][T18431] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5280'. [ 823.462656][T18431] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 823.470930][T18431] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 823.487243][ T24] usb 6-1: USB disconnect, device number 117 [ 823.691886][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.932749][ T6016] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 824.007755][ T5910] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 824.130373][ T6016] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.159101][ T6016] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.208191][ T6016] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.218178][T18447] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 824.243575][ T5910] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 824.248843][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.265716][ T5910] usb 1-1: config 0 has no interface number 1 [ 824.295367][T18449] loop1: detected capacity change from 0 to 2048 [ 824.301160][ T6016] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.317493][ T5910] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 824.335237][ T6016] usb 5-1: invalid MIDI out EP 0 [ 824.359504][ T5910] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 824.383028][T18449] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 824.401233][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 824.409778][ T5910] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 824.419639][T18449] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 824.445663][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.478920][T18449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 824.528295][ T5910] usb 1-1: config 0 descriptor?? [ 824.594642][ T6016] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 824.732551][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.763894][ T6016] usb 5-1: USB disconnect, device number 21 [ 824.768257][ T5910] usb 1-1: Could not set interface, error -71 [ 824.849256][ T5910] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 824.939582][T18462] loop1: detected capacity change from 0 to 64 [ 824.958243][T18463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.977481][ T5910] usb 1-1: USB disconnect, device number 124 [ 825.829516][T18490] loop3: detected capacity change from 0 to 64 [ 825.871550][T18490] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 825.962246][ T5910] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 826.176176][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 826.198619][ T5910] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 826.207250][ T5910] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 826.240011][ T5910] usb 6-1: config 0 has no interface number 0 [ 826.284142][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 826.314880][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.322917][ T5910] usb 6-1: Product: syz [ 826.379141][ T5910] usb 6-1: Manufacturer: syz [ 826.383818][ T5910] usb 6-1: SerialNumber: syz [ 826.421007][ T5910] usb 6-1: config 0 descriptor?? [ 826.438108][T18502] IPVS: length: 202 != 8 [ 826.621856][T18505] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 826.678222][ T5910] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 826.684733][ T5910] usb 6-1: No valid video chain found. [ 826.731867][ T5910] usb 6-1: USB disconnect, device number 118 [ 827.252621][T18484] loop2: detected capacity change from 0 to 32768 [ 827.386373][T18484] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 827.635318][ T30] audit: type=1107 audit(2000000385.623:25): pid=18535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 827.655048][T18541] xt_hashlimit: overflow, rate too high: 0 [ 827.705485][T18484] XFS (loop2): Ending clean mount [ 828.031239][ T5929] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 828.047998][T18545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.376875][T18560] comedi: No check for data length of config insn id 4095 is implemented [ 828.407791][T18560] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 828.452537][T18560] comedi: Assuming n=15 is correct [ 829.081513][T18577] loop0: detected capacity change from 0 to 1764 [ 829.198707][T18580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5350'. [ 829.240205][T18580] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5350'. [ 829.287642][T18580] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 829.333064][T18584] dlm: no locking on control device [ 829.585962][T18564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 829.592316][T18564] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 829.695550][T18564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 829.734358][T18564] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 829.811510][T18564] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 829.904460][T18564] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 829.980021][T18562] loop5: detected capacity change from 0 to 32768 [ 830.037322][T18562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5343 (18562) [ 830.083232][T18562] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 830.160346][T18562] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 830.214298][T18562] BTRFS info (device loop5): using free-space-tree [ 830.252959][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.259476][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 830.532570][T18627] netlink: 'syz.0.5362': attribute type 5 has an invalid length. [ 830.556230][T18627] netlink: 'syz.0.5362': attribute type 7 has an invalid length. [ 830.644940][T18634] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 830.796675][T18627] : entered promiscuous mode [ 830.982103][ T5931] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.443244][T18649] loop3: detected capacity change from 0 to 256 [ 831.480043][T18649] exfat: Deprecated parameter 'utf8' [ 831.628168][T18649] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 832.010344][T18666] loop4: detected capacity change from 0 to 764 [ 832.179057][T18668] loop0: detected capacity change from 0 to 1764 [ 832.208848][T18670] loop3: detected capacity change from 0 to 8 [ 832.263670][T18670] SQUASHFS error: Unable to read inode 0xe3 [ 832.393443][T18668] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 832.466824][T18676] netlink: 'syz.5.5382': attribute type 3 has an invalid length. [ 832.523262][T18676] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5382'. [ 832.641232][T18680] loop2: detected capacity change from 0 to 64 [ 833.049329][T18687] loop0: detected capacity change from 0 to 1024 [ 833.242903][T18687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.446122][T18704] loop4: detected capacity change from 0 to 256 [ 833.564908][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.594286][T18704] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 833.695639][T18703] loop2: detected capacity change from 0 to 4096 [ 833.723901][T18703] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 833.836197][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 834.030812][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 834.086466][ T24] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 834.108593][ T24] usb 2-1: config 0 has no interface number 1 [ 834.140720][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 834.177913][ T24] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 834.239037][ T24] usb 2-1: Product: syz [ 834.255684][ T24] usb 2-1: Manufacturer: syz [ 834.284176][ T24] usb 2-1: SerialNumber: syz [ 834.333343][ T24] usb 2-1: config 0 descriptor?? [ 834.652068][ T24] qcserial 2-1:0.37: Qualcomm USB modem converter detected [ 834.752501][T18736] loop0: detected capacity change from 0 to 512 [ 834.908851][ T5887] usb 2-1: USB disconnect, device number 6 [ 834.950885][ T5887] qcserial 2-1:0.37: device disconnected [ 834.984580][T18736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 835.060224][T18736] ext4 filesystem being mounted at /964/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 835.342191][T18754] loop5: detected capacity change from 0 to 4096 [ 835.380137][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 835.658223][T18765] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 835.802611][T18754] NILFS error (device loop5): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 835.898649][T18754] Remounting filesystem read-only [ 835.983334][T18775] netlink: 'syz.4.5416': attribute type 5 has an invalid length. [ 836.041992][T18775] netlink: 'syz.4.5416': attribute type 7 has an invalid length. [ 836.048821][T18769] loop3: detected capacity change from 0 to 4096 [ 836.150698][T18775] : entered promiscuous mode [ 836.160221][T18777] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 836.720411][T18794] loop1: detected capacity change from 0 to 128 [ 837.034847][T18796] JFS: charset not found [ 837.066063][T18804] netlink: 'syz.3.5427': attribute type 1 has an invalid length. [ 837.105239][T18804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5427'. [ 837.525816][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5432'. [ 837.627142][T18820] loop3: detected capacity change from 0 to 256 [ 837.687836][T18820] exfat: Deprecated parameter 'utf8' [ 837.805430][T18820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 837.944914][T18831] netlink: 'syz.2.5436': attribute type 5 has an invalid length. [ 838.000560][T18831] netlink: 'syz.2.5436': attribute type 7 has an invalid length. [ 838.073465][T18831] : entered promiscuous mode [ 838.157948][T18830] loop0: detected capacity change from 0 to 4096 [ 838.224026][T18830] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 838.486655][T18830] ntfs3(loop0): ino=19, mi_enum_attr [ 838.618406][T18830] ntfs3(loop0): ino=5, "/" indx_read [ 838.689643][T18830] ntfs3(loop0): ino=5, ntfs_readdir [ 838.710747][T18807] loop4: detected capacity change from 0 to 32768 [ 838.886458][T18807] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 838.886458][T18807] [ 838.937638][T18807] ERROR: (device loop4): remounting filesystem as read-only [ 838.937751][T18807] jfs_mkdir: dtInsert returned -EIO [ 838.938058][T18807] ERROR: (device loop4): txAbort: [ 838.938058][T18807] [ 838.968996][T18855] netlink: 'syz.2.5446': attribute type 10 has an invalid length. [ 838.969045][T18855] macvlan1: entered allmulticast mode [ 838.969093][T18855] veth1_vlan: entered allmulticast mode [ 838.969311][T18855] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 839.673020][T18869] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 839.691041][T18867] loop0: detected capacity change from 0 to 2048 [ 839.776911][T18867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 840.544725][T18850] loop1: detected capacity change from 0 to 32768 [ 840.749387][T18898] netlink: 'syz.0.5464': attribute type 11 has an invalid length. [ 841.949193][T18930] netlink: 'syz.4.5478': attribute type 3 has an invalid length. [ 841.988558][T18933] loop0: detected capacity change from 0 to 512 [ 841.994952][T18930] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5478'. [ 842.043750][T18933] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 3: comm syz.0.5482: lblock 0 mapped to illegal pblock 3 (length 1) [ 842.098514][T18933] EXT4-fs (loop0): Remounting filesystem read-only [ 842.132125][T18935] loop2: detected capacity change from 0 to 2048 [ 842.143492][T18933] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.5482: error -117 reading directory block [ 842.201561][T18933] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 842.275277][T18935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 842.310172][T18933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.689829][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.224404][T18972] loop1: detected capacity change from 0 to 64 [ 843.766964][T18991] loop1: detected capacity change from 0 to 128 [ 843.846428][T18989] loop4: detected capacity change from 0 to 4096 [ 843.941809][T19000] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 843.944482][T18995] loop3: detected capacity change from 0 to 2048 [ 844.036405][T18995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.045569][T18989] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 844.131215][T18989] Remounting filesystem read-only [ 844.419073][T19009] loop0: detected capacity change from 0 to 512 [ 844.542082][T19009] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.5510: bad orphan inode 13 [ 844.646495][T19009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.866999][T19021] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 844.937419][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.260400][T19027] veth3: entered promiscuous mode [ 845.300075][T19033] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5521'. [ 845.801946][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5526'. [ 845.855122][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5526'. [ 845.945513][T19051] geneve2: entered promiscuous mode [ 845.975421][T19051] geneve2: entered allmulticast mode [ 846.238599][T19063] loop0: detected capacity change from 0 to 1024 [ 846.325888][T19069] capability: warning: `syz.5.5539' uses deprecated v2 capabilities in a way that may be insecure [ 846.336767][T19065] netlink: 'syz.2.5537': attribute type 1 has an invalid length. [ 846.344529][T19065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5537'. [ 846.364756][T19059] loop3: detected capacity change from 0 to 4096 [ 846.406441][T19059] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 846.460693][T19063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.576562][T19063] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz.0.5536: reserved inode found cleared - inode=18 [ 846.615131][T19076] loop4: detected capacity change from 0 to 4096 [ 846.627061][T19059] ntfs3(loop3): ino=19, mi_enum_attr [ 846.632511][T19076] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 846.667144][T19059] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 846.743414][T19059] ntfs3(loop3): failed to convert "c46c" to cp862 [ 846.797269][T19059] ntfs3(loop3): ino=20, mi_enum_attr [ 846.855679][T19076] ntfs3(loop4): ino=19, mi_enum_attr [ 846.874833][T19080] netlink: 'syz.1.5543': attribute type 10 has an invalid length. [ 846.915649][T19080] macvlan1: entered allmulticast mode [ 846.919281][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.932092][T19080] veth1_vlan: entered allmulticast mode [ 846.941612][T19080] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 846.959363][T19082] loop5: detected capacity change from 0 to 128 [ 846.980116][T19076] ntfs3(loop4): ino=5, "/" indx_read [ 847.034860][T19076] ntfs3(loop4): ino=5, ntfs_readdir [ 847.381537][T19089] loop0: detected capacity change from 0 to 256 [ 847.993008][T19104] loop4: detected capacity change from 0 to 64 [ 848.186506][T19104] hfs: request for non-existent node 56 in B*Tree [ 848.211348][T19104] hfs: request for non-existent node 56 in B*Tree [ 848.240698][T19104] hfs: request for non-existent node 57 in B*Tree [ 848.268264][T19104] hfs: request for non-existent node 57 in B*Tree [ 849.060421][ T6102] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 849.222034][T19100] loop1: detected capacity change from 0 to 32768 [ 849.260266][ T6102] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 849.276095][ T6102] usb 5-1: config 0 has no interface number 0 [ 849.285905][T19100] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 849.305248][ T6102] usb 5-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 849.337958][ T6102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.389340][ T6102] usb 5-1: config 0 descriptor?? [ 849.410335][T19100] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 849.455610][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 849.544691][T19139] Process accounting resumed [ 849.649288][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 849.684090][ T5921] ocfs2: Unmounting device (7,1) on (node local) [ 849.689466][ T6102] asix 5-1:0.146 (unnamed net_device) (uninitialized): invalid hw address, using random [ 849.712494][ T5887] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 849.726410][ T5887] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 849.771273][ T5887] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 849.782278][T19149] loop5: detected capacity change from 0 to 128 [ 849.807637][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 849.829994][ T5887] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 849.855532][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.885515][T19149] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 849.909524][ T5887] usb 3-1: Product: syz [ 849.913747][ T5887] usb 3-1: Manufacturer: syz [ 849.926227][ T6102] asix 5-1:0.146 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 849.960784][ T5887] usb 3-1: SerialNumber: syz [ 849.965604][ T6102] asix 5-1:0.146 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 849.974539][T19149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.998009][ T5887] usb 3-1: config 0 descriptor?? [ 850.014142][ T6102] asix 5-1:0.146: probe with driver asix failed with error -71 [ 850.056109][ T44] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 850.112303][ T6102] usb 5-1: USB disconnect, device number 22 [ 850.248334][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 850.254199][ T5887] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 850.267991][ T44] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 850.289897][ T44] usb 1-1: config 0 has no interface number 0 [ 850.296033][ T44] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 850.301616][ T5195] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 850.371154][ T5195] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 850.371969][ T44] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 850.422058][ T44] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 850.468892][ T6016] usb 3-1: USB disconnect, device number 12 [ 850.481116][ T44] usb 1-1: Product: syz [ 850.485318][ T44] usb 1-1: SerialNumber: syz [ 850.490585][ T5195] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 850.522461][ T5195] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 850.570456][ T44] usb 1-1: config 0 descriptor?? [ 850.602871][ T44] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 850.629784][ T44] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input51 [ 850.783205][T19164] loop3: detected capacity change from 0 to 1024 [ 850.832792][T19164] hfsplus: filesystem is marked journaled, leaving read-only. [ 851.164268][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 851.171850][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.179045][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.186869][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.194108][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.201322][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.208508][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.215695][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.222884][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.230079][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.237261][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 851.246842][ T44] usb 1-1: USB disconnect, device number 125 [ 851.246913][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 851.347619][ T44] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 851.490402][T19182] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 851.834389][T14694] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 852.085384][T14694] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 852.104956][T14694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.154404][T14694] usb 6-1: config 0 descriptor?? [ 852.650020][T14694] ath6kl: Failed to submit usb control message: -71 [ 852.656710][T14694] ath6kl: unable to send the bmi data to the device: -71 [ 852.660655][T19214] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5607'. [ 852.674009][T14694] ath6kl: Unable to send get target info: -71 [ 852.691218][T14694] ath6kl: Failed to init ath6kl core: -71 [ 852.725994][T14694] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 852.797371][T14694] usb 6-1: USB disconnect, device number 119 [ 852.821135][T19217] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 852.821135][T19217] SÃȘØÈžZ§6ŸÂ' [ 852.966568][T19194] loop2: detected capacity change from 0 to 32768 [ 853.013171][T19194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5596 (19194) [ 853.128404][T19194] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 853.173349][T19194] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 853.210065][T19194] BTRFS info (device loop2): using free-space-tree [ 853.255791][T19227] loop1: detected capacity change from 0 to 2048 [ 853.305340][T19227] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 853.507553][T19249] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 853.522075][ T6242] udevd[6242]: incorrect nilfs2 checksum on /dev/loop1 [ 853.644364][T19227] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=16, inode=2, rec_len=65366, name_len=255 [ 853.787546][T19227] Remounting filesystem read-only [ 853.832788][T19257] loop0: detected capacity change from 0 to 128 [ 853.935820][ T5929] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 853.947671][T19257] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 854.024247][T19259] loop3: detected capacity change from 0 to 64 [ 854.165061][T19259] syz.3.5632: attempt to access beyond end of device [ 854.165061][T19259] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 854.278051][ T77] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 854.375286][T19262] loop5: detected capacity change from 0 to 4096 [ 854.465984][T19262] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 854.623283][T19262] ntfs3(loop5): ino=19, mi_enum_attr [ 854.666836][T19262] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 854.790026][T19262] ntfs3(loop5): failed to convert "c46c" to cp862 [ 854.837253][ T30] audit: type=1326 audit(2000000411.073:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.3.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 854.852509][T19262] ntfs3(loop5): ino=20, mi_enum_attr [ 854.966120][ T30] audit: type=1326 audit(2000000411.073:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.3.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.081415][ T30] audit: type=1326 audit(2000000411.120:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.3.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.248820][ T30] audit: type=1326 audit(2000000411.120:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.3.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.358726][ T30] audit: type=1326 audit(2000000411.120:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.3.5626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.662260][T19296] comedi comedi3: pcl818: I/O port conflict (0xcf7,16) [ 855.720203][ T30] audit: type=1326 audit(2000000411.925:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.3.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.800269][ T30] audit: type=1326 audit(2000000411.925:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.3.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.897649][ T30] audit: type=1326 audit(2000000411.925:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.3.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 855.978487][ T30] audit: type=1326 audit(2000000411.925:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19297 comm="syz.3.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 856.453503][T19313] SET target dimension over the limit! [ 856.507233][ T30] audit: type=1326 audit(2000000412.655:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19315 comm="syz.2.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ea98e9a9 code=0x7ffc0000 [ 856.998803][T19292] loop5: detected capacity change from 0 to 32768 [ 857.051667][T19292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5636 (19292) [ 857.072938][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5654'. [ 857.128975][T19331] loop1: detected capacity change from 0 to 128 [ 857.166796][T19292] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 857.204124][T19292] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 857.245071][T19292] BTRFS info (device loop5): using free-space-tree [ 857.246385][T19331] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.273903][T19301] loop0: detected capacity change from 0 to 32768 [ 857.356935][T19331] ext4 filesystem being mounted at /923/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 857.495765][T19331] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #2: comm syz.1.5656: Directory block failed checksum [ 857.832929][ T5921] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 857.901286][ T5931] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 858.060015][T19365] loop4: detected capacity change from 0 to 1024 [ 858.633175][T19381] loop4: detected capacity change from 0 to 64 [ 858.805027][ T6016] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 859.033812][ T6016] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 859.062466][ T6016] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 859.101586][ T6016] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 859.160060][ T6016] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 859.220465][ T6016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 859.280044][ T6016] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 859.365749][ T6016] usb 3-1: string descriptor 0 read error: -22 [ 859.372421][ T6016] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 859.418998][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.476017][ T6016] usb 3-1: config 0 descriptor?? [ 859.490307][ T6016] hub 3-1:0.0: bad descriptor, ignoring hub [ 859.508676][ T6016] hub 3-1:0.0: probe with driver hub failed with error -5 [ 859.861797][ T6016] usb 3-1: USB disconnect, device number 13 [ 860.613763][T19439] netlink: 'syz.0.5699': attribute type 8 has an invalid length. [ 860.775390][T19434] loop4: detected capacity change from 0 to 4096 [ 860.866339][ T5910] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 860.903228][T19434] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 861.063671][ T5910] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 861.081534][T19434] ntfs3(loop4): ino=19, mi_enum_attr [ 861.086918][T19434] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 861.104449][ T5910] usb 6-1: config 0 has no interface number 0 [ 861.132234][ T5910] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.158687][T19434] ntfs3(loop4): failed to convert "c46c" to cp865 [ 861.181350][ T5910] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 861.197121][T19434] ntfs3(loop4): ino=20, mi_enum_attr [ 861.213072][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.240528][ T5910] usb 6-1: Product: syz [ 861.266433][ T5910] usb 6-1: Manufacturer: syz [ 861.288011][ T5910] usb 6-1: SerialNumber: syz [ 861.311627][ T5910] usb 6-1: config 0 descriptor?? [ 861.378831][ T5910] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 861.560365][T19462] xt_ecn: cannot match TCP bits for non-tcp packets [ 861.671775][ C0] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 861.891103][ T5910] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 861.934168][T19473] netlink: 'syz.2.5717': attribute type 13 has an invalid length. [ 861.934570][ T6102] usb 6-1: USB disconnect, device number 120 [ 861.977179][T19473] netlink: 'syz.2.5717': attribute type 17 has an invalid length. [ 861.988694][ T6102] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 862.150533][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.179551][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 862.208944][T19473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.224033][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 862.265807][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 862.311365][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 862.325624][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5721'. [ 862.363973][ T5910] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 862.373347][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 862.381454][ T5910] usb 4-1: Product: syz [ 862.403901][ T5910] usb 4-1: Manufacturer: syz [ 862.408709][ T5910] usb 4-1: SerialNumber: syz [ 862.429098][ T5910] usb 4-1: config 0 descriptor?? [ 862.627153][T19489] loop0: detected capacity change from 0 to 256 [ 862.677893][T19489] exfat: Deprecated parameter 'utf8' [ 862.707025][ T5910] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 862.737107][ T5910] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 862.765196][T19489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 862.919039][ T5910] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 862.960941][ T5910] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 862.969911][ T5910] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 863.044153][T19500] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 863.086472][ T5910] usb 4-1: USB disconnect, device number 121 [ 863.524254][T19517] loop0: detected capacity change from 0 to 128 [ 863.763786][T19521] loop4: detected capacity change from 0 to 1024 [ 863.830354][T19521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 863.897415][T19521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.972195][T19528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5744'. [ 864.121484][T19521] EXT4-fs warning (device loop4): empty_inline_dir:1773: bad inline directory (dir #12) - no `..' [ 864.344973][ T5933] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.499398][ T6016] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 864.711608][ T6016] usb 1-1: Using ep0 maxpacket: 16 [ 864.722266][ T6016] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 864.752576][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.786042][ T6016] usb 1-1: Product: syz [ 864.822926][ T6016] usb 1-1: Manufacturer: syz [ 864.827569][ T6016] usb 1-1: SerialNumber: syz [ 864.876881][ T6016] usb 1-1: config 0 descriptor?? [ 865.113125][ T6016] usb 1-1: ignoring: not an USB2CAN converter [ 865.331064][ T6016] usb 1-1: USB disconnect, device number 126 [ 865.430549][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5765'. [ 866.110803][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5775'. [ 866.137314][T19596] loop4: detected capacity change from 0 to 128 [ 866.180208][T19596] befs: (loop4): invalid magic header [ 866.355663][T19602] netlink: 'syz.5.5780': attribute type 1 has an invalid length. [ 866.389109][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5780'. [ 866.494147][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 866.494171][ T30] audit: type=1326 audit(2000000422.006:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9738e9a9 code=0x7ffc0000 [ 866.522807][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.656934][ T30] audit: type=1326 audit(2000000422.006:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9738e9a9 code=0x7ffc0000 [ 866.750154][ T30] audit: type=1326 audit(2000000422.071:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e9738e9a9 code=0x7ffc0000 [ 866.772440][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.825368][T19607] loop4: detected capacity change from 0 to 2048 [ 866.888443][ T30] audit: type=1326 audit(2000000422.071:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e9738e9e3 code=0x7ffc0000 [ 866.970181][ T30] audit: type=1326 audit(2000000422.090:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e9738d45f code=0x7ffc0000 [ 866.983695][ T6242] Alternate GPT is invalid, using primary GPT. [ 867.040908][ T6242] loop4: p1 p2 p3 [ 867.114187][ T30] audit: type=1326 audit(2000000422.249:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6e9738ea37 code=0x7ffc0000 [ 867.236917][ T30] audit: type=1326 audit(2000000422.315:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19615 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 867.244310][T19607] Alternate GPT is invalid, using primary GPT. [ 867.317779][T19607] loop4: p1 p2 p3 [ 867.363907][ T30] audit: type=1326 audit(2000000422.315:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19615 comm="syz.5.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9edf8e9a9 code=0x7ffc0000 [ 867.497883][ T30] audit: type=1326 audit(2000000422.315:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9738d310 code=0x7ffc0000 [ 867.520169][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.638897][ T30] audit: type=1326 audit(2000000422.315:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19606 comm="syz.4.5784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e9738e5ab code=0x7ffc0000 [ 867.661216][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.932098][ T6241] udevd[6241]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 867.946964][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 867.958127][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 868.175252][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 868.177198][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 868.205002][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 868.456850][T19649] loop2: detected capacity change from 0 to 2048 [ 868.547015][T19649] NILFS (loop2): invalid segment: Checksum error in segment payload [ 868.573200][T19649] NILFS (loop2): trying rollback from an earlier position [ 868.648106][T19649] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 868.763275][T19649] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 868.895120][T19664] loop3: detected capacity change from 0 to 256 [ 868.949774][T19664] exfat: Deprecated parameter 'namecase' [ 868.999309][T19664] exfat: Deprecated parameter 'utf8' [ 869.107313][T19664] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 869.246796][T19674] delete_channel: no stack [ 869.289982][T19677] loop1: detected capacity change from 0 to 256 [ 869.305772][ T6102] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 869.511551][ T6102] usb 5-1: Using ep0 maxpacket: 32 [ 869.551226][ T6102] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 869.620944][ T6102] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 869.657803][ T6102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.690645][ T6102] usb 5-1: Product: syz [ 869.695346][ T6102] usb 5-1: Manufacturer: syz [ 869.737084][ T6102] usb 5-1: SerialNumber: syz [ 869.762883][ T6102] usb 5-1: config 0 descriptor?? [ 869.780009][T19669] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 869.833161][ T6102] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.079693][T19695] loop0: detected capacity change from 0 to 1024 [ 870.196980][ T6016] usb 5-1: USB disconnect, device number 23 [ 870.234585][T19703] loop5: detected capacity change from 0 to 512 [ 870.257117][T19701] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 870.317583][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.352769][ T77] hfsplus: b-tree write err: -5, ino 4 [ 870.415752][T19703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.439627][T19703] ext4 filesystem being mounted at /942/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.561357][T19703] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 870.634927][T19717] xt_hashlimit: invalid interval [ 870.768990][ T5931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.824041][T19720] process 'syz.2.5838' launched './file0' with NULL argv: empty string added [ 871.585814][T19741] netlink: 'syz.4.5848': attribute type 1 has an invalid length. [ 871.684953][T19741] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5848'. [ 872.026764][T19756] loop0: detected capacity change from 0 to 22 [ 872.058650][T19756] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 872.074025][T19758] loop5: detected capacity change from 0 to 512 [ 872.084214][T19756] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 872.108978][T19758] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 872.123185][T19758] EXT4-fs (loop5): orphan cleanup on readonly fs [ 872.173508][T19758] __quota_error: 19 callbacks suppressed [ 872.173531][T19758] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 872.217386][T19723] loop3: detected capacity change from 0 to 32768 [ 872.232847][ T6016] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 872.275963][T19758] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 872.299903][T19723] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 872.331925][T19758] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 872.383526][T19758] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.5855: bg 0: block 40: padding at end of block bitmap is not set [ 872.399861][T19758] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 872.415527][ T6016] usb 5-1: Using ep0 maxpacket: 32 [ 872.424991][ T6016] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 872.430645][T19758] EXT4-fs (loop5): 1 truncate cleaned up [ 872.434764][ T6016] usb 5-1: config 0 has no interface number 0 [ 872.450556][ T6016] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 872.459916][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.470685][ T6016] usb 5-1: Product: syz [ 872.474879][ T6016] usb 5-1: Manufacturer: syz [ 872.490495][ T6016] usb 5-1: SerialNumber: syz [ 872.513042][T19758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 872.525822][T19723] XFS (loop3): Ending clean mount [ 872.542910][T19723] XFS (loop3): Quotacheck needed: Please wait. [ 872.553027][ T6016] usb 5-1: config 0 descriptor?? [ 872.595029][ T6016] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 872.617405][ T6016] usb 5-1: selecting invalid altsetting 1 [ 872.623178][ T6016] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 872.649931][T19758] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.5855: bad symlink. [ 872.709951][T19723] XFS (loop3): Quotacheck: Done. [ 872.727090][ T6016] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 872.752729][T19772] loop0: detected capacity change from 0 to 1024 [ 872.789783][T19772] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 872.815444][ T6016] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 872.825760][T19772] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 872.871141][ T6016] usb 5-1: media controller created [ 872.897124][T19772] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 872.911235][ T5931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.951531][T19777] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5859'. [ 872.976909][ T6016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 872.981092][T19772] EXT4-fs (loop0): orphan cleanup on readonly fs [ 873.057692][T19772] EXT4-fs error (device loop0): ext4_read_inode_bitmap:166: comm syz.0.5857: Inode bitmap for bg 0 marked uninitialized [ 873.079782][ T5925] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 873.185216][T19772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 873.263277][T19772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.294373][ T6016] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 873.522668][ T6016] usb 5-1: USB disconnect, device number 24 [ 873.532915][T19786] netlink: 'syz.5.5865': attribute type 1 has an invalid length. [ 873.549469][T19787] netlink: 'syz.1.5864': attribute type 1 has an invalid length. [ 873.576507][T19786] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5865'. [ 873.643563][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 874.161562][T19801] loop0: detected capacity change from 0 to 64 [ 874.494132][T19811] loop2: detected capacity change from 0 to 1764 [ 874.671654][T19817] netlink: 'syz.3.5879': attribute type 13 has an invalid length. [ 874.703677][T19817] netlink: 'syz.3.5879': attribute type 17 has an invalid length. [ 874.968582][T19829] comedi comedi0: Minor 14 could not be opened [ 874.987514][T19817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.297910][T19836] netlink: 9292 bytes leftover after parsing attributes in process `syz.4.5888'. [ 875.331597][T19837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5889'. [ 875.433156][T19845] netlink: 'syz.4.5893': attribute type 13 has an invalid length. [ 875.441145][T19845] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5893'. [ 875.453871][T19845] syz_tun: refused to change device tx_queue_len [ 875.477799][T19845] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 875.611579][ T6102] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 875.739672][T19851] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5897'. [ 875.801345][ T6102] usb 1-1: Using ep0 maxpacket: 8 [ 875.842300][ T6102] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 875.847242][T19857] bridge0: port 3(netdevsim0) entered blocking state [ 875.863356][ T6102] usb 1-1: config 0 has no interface number 0 [ 875.907784][T19857] bridge0: port 3(netdevsim0) entered disabled state [ 875.918344][ T6102] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 875.944416][ T6102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.966694][ T6102] usb 1-1: Product: syz [ 875.970890][ T6102] usb 1-1: Manufacturer: syz [ 875.973969][T19857] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 875.986885][ T6102] usb 1-1: SerialNumber: syz [ 876.026679][ T6102] usb 1-1: config 0 descriptor?? [ 876.299027][ T6102] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 876.307323][ T6102] usb 1-1: No valid video chain found. [ 876.328503][T19867] loop2: detected capacity change from 0 to 16 [ 876.329418][ T6102] usb 1-1: USB disconnect, device number 127 [ 876.358007][T19869] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5905'. [ 876.410324][T19867] erofs (device loop2): mounted with root inode @ nid 36. [ 876.479136][T19867] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 876.553558][T19867] erofs (device loop2): read error -117 @ 43 of nid 36 [ 876.563633][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5907'. [ 877.260656][T19899] loop5: detected capacity change from 0 to 64 [ 878.209405][T19923] loop3: detected capacity change from 0 to 2048 [ 878.239839][T19932] netlink: 'syz.1.5936': attribute type 13 has an invalid length. [ 878.261165][T19932] netlink: 'syz.1.5936': attribute type 17 has an invalid length. [ 878.295643][T19923] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 878.380014][T19923] UDF-fs: unknown compression code (0) [ 878.629221][T19932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 879.223111][T19951] loop3: detected capacity change from 0 to 16 [ 879.262178][T19951] erofs (device loop3): mounted with root inode @ nid 36. [ 879.644927][T19925] loop5: detected capacity change from 0 to 32768 [ 879.715357][T19964] loop3: detected capacity change from 0 to 1024 [ 879.915069][T19969] xt_hashlimit: overflow, try lower: 5/0 [ 880.018020][ T77] hfsplus: b-tree write err: -5, ino 4 [ 880.331669][T19981] binder: 19979:19981 ioctl c0306201 200000000640 returned -22 [ 881.378856][T20017] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5960'. [ 881.735825][T20026] netlink: 'syz.5.5983': attribute type 13 has an invalid length. [ 881.755015][T20026] netlink: 'syz.5.5983': attribute type 17 has an invalid length. [ 881.821475][T14694] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 881.981139][T20026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.031297][T14694] usb 5-1: Using ep0 maxpacket: 8 [ 882.132297][T14694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 882.167899][T14694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.239719][T14694] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 882.283496][T14694] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 882.314287][T14694] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 882.350194][T14694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.402521][T14694] usb 5-1: config 0 descriptor?? [ 882.429093][T20019] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 882.586153][ T6102] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 882.657127][T20013] loop0: detected capacity change from 0 to 32768 [ 882.744711][T20013] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 882.777866][ T6176] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 882.794153][ T6102] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 882.812151][ T6102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.836577][ T6102] usb 2-1: config 0 descriptor?? [ 882.847167][ T6102] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 882.921019][T20013] XFS (loop0): Ending clean mount [ 882.958775][T14694] usb 5-1: USB disconnect, device number 25 [ 882.960881][T15973] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 882.997822][ T6176] usb 4-1: config index 0 descriptor too short (expected 63506, got 18) [ 883.003352][T20013] XFS (loop0): Quotacheck needed: Please wait. [ 883.009877][ T6176] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 883.032356][ T6176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.055359][ T6176] usb 4-1: Product: syz [ 883.067711][ T6176] usb 4-1: Manufacturer: syz [ 883.072775][ T6176] usb 4-1: SerialNumber: syz [ 883.181505][T20013] XFS (loop0): Quotacheck: Done. [ 883.252695][T20065] bridge0: port 3() entered blocking state [ 883.262398][T20065] bridge0: port 3() entered disabled state [ 883.268587][T20065] netdevsim netdevsim2 : entered allmulticast mode [ 883.284039][ T6102] gp8psk: usb in 128 operation failed. [ 883.308663][T20065] netdevsim netdevsim2 : entered promiscuous mode [ 883.322131][ T6102] gp8psk: usb in 137 operation failed. [ 883.322345][T20065] bridge0: port 3() entered blocking state [ 883.333438][ T6176] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 883.333879][T20065] bridge0: port 3() entered forwarding state [ 883.365552][ T6102] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 883.389038][ T6102] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 883.398526][ T6176] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 883.433608][ T6176] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 883.449351][ T6102] usb 2-1: USB disconnect, device number 7 [ 883.470239][ T5919] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 883.616389][ T24] usb 4-1: USB disconnect, device number 122 [ 883.656676][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 883.688937][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 883.711998][ T24] visor 4-1:1.0: device disconnected [ 884.291654][T20061] loop5: detected capacity change from 0 to 32768 [ 884.366159][T20061] (syz.5.5997,20061,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 884.425873][T20061] (syz.5.5997,20061,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 884.508448][T20086] loop1: detected capacity change from 0 to 64 [ 884.571007][T20061] JBD2: Ignoring recovery information on journal [ 884.634824][T20090] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 884.642523][T20090] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 884.855510][T20093] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6025'. [ 884.891581][T20061] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 885.288556][ T5931] ocfs2: Unmounting device (7,5) on (node local) [ 885.306110][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6016'. [ 885.362164][T20107] netlink: 'syz.1.6016': attribute type 2 has an invalid length. [ 885.395175][T20107] netlink: 'syz.1.6016': attribute type 1 has an invalid length. [ 885.543658][ T30] audit: type=1326 audit(2000000439.837:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.3.6021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 885.657864][ T30] audit: type=1326 audit(2000000439.884:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.3.6021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 885.680229][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.802086][ T30] audit: type=1326 audit(2000000439.884:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.3.6021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 885.824370][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.909474][ T30] audit: type=1326 audit(2000000439.884:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.3.6021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484a98e9a9 code=0x7ffc0000 [ 885.931825][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.273080][T20097] loop2: detected capacity change from 0 to 32768 [ 886.377589][T20097] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 886.498883][T20139] loop3: detected capacity change from 0 to 64 [ 886.533181][T20097] XFS (loop2): Ending clean mount [ 886.568733][T20097] XFS (loop2): Quotacheck needed: Please wait. [ 886.710096][T20097] XFS (loop2): Quotacheck: Done. [ 886.851007][T20147] loop1: detected capacity change from 0 to 512 [ 886.927289][T20147] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 886.986841][T20151] mmap: syz.3.6035 (20151): VmData 37482496 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 887.001313][T20147] EXT4-fs (loop1): 1 truncate cleaned up [ 887.015319][ T5929] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 887.035540][T20147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.113081][T20147] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.6034: Logical block already allocated [ 887.200559][T20147] EXT4-fs (loop1): Remounting filesystem read-only [ 887.428575][T20125] loop5: detected capacity change from 0 to 32768 [ 887.435780][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.591899][T20125] JBD2: Ignoring recovery information on journal [ 887.825541][T20125] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 887.913387][T20125] (syz.5.6019,20125,1):ocfs2_reflink_ioctl:4417 ERROR: status = -14 [ 888.020601][T20171] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6043'. [ 888.142407][ T5931] ocfs2: Unmounting device (7,5) on (node local) [ 888.733119][T20185] JFS: discard option not supported on device [ 888.764802][T20185] Mount JFS Failure: -22 [ 888.769094][T20185] jfs_mount failed w/return code = -22 [ 888.807248][T20154] loop0: detected capacity change from 0 to 32768 [ 888.873709][T20154] [ 888.873709][T20154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 888.873709][T20154] [ 888.910666][T20189] loop2: detected capacity change from 0 to 256 [ 888.938907][T20189] exfat: Deprecated parameter 'namecase' [ 888.964380][T20154] ERROR: (device loop0): diWrite: ixpxd invalid [ 888.964380][T20154] [ 888.969517][T20189] exfat: Deprecated parameter 'namecase' [ 889.014201][T20154] ERROR: (device loop0): txAbort: [ 889.014201][T20154] [ 889.073704][T20189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 889.218415][ T5919] [ 889.218415][ T5919] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.218415][ T5919] [ 889.242977][T20194] loop1: detected capacity change from 0 to 256 [ 889.273760][ T5919] [ 889.273760][ T5919] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 889.273760][ T5919] [ 889.314684][T20194] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 889.687578][T20173] loop4: detected capacity change from 0 to 32768 [ 889.716786][ T30] audit: type=1400 audit(2000000443.740:72): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A22 pid=20200 comm="syz.3.6059" [ 889.768281][T20205] netlink: 300 bytes leftover after parsing attributes in process `syz.5.6060'. [ 889.777503][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6060'. [ 889.787057][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6060'. [ 889.818069][T20173] jfs_strtoUCS: char2uni returned -22. [ 889.823969][T20173] charset = cp869, char = 0x81 [ 891.319863][T20249] ipt_REJECT: TCP_RESET invalid for non-tcp [ 891.409980][T20252] loop5: detected capacity change from 0 to 256 [ 891.452795][T20256] binder: 20255:20256 ioctl c0046209 0 returned -22 [ 891.492996][T20252] FAT-fs (loop5): Directory bread(block 64) failed [ 891.526287][T20252] FAT-fs (loop5): Directory bread(block 65) failed [ 891.548350][T20252] FAT-fs (loop5): Directory bread(block 66) failed [ 891.610785][T20252] FAT-fs (loop5): Directory bread(block 67) failed [ 891.649857][T20252] FAT-fs (loop5): Directory bread(block 68) failed [ 891.683304][T20252] FAT-fs (loop5): Directory bread(block 69) failed [ 891.730437][T20252] FAT-fs (loop5): Directory bread(block 70) failed [ 891.737091][T20252] FAT-fs (loop5): Directory bread(block 71) failed [ 891.792417][T20252] FAT-fs (loop5): Directory bread(block 72) failed [ 891.824771][T20252] FAT-fs (loop5): Directory bread(block 73) failed [ 892.434624][T20286] netlink: 'syz.1.6099': attribute type 5 has an invalid length. [ 892.693118][T20292] xt_l2tp: missing protocol rule (udp|l2tpip) [ 892.903691][T20295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6104'. [ 893.290996][T20309] 9p: Unknown access argument A: -22 [ 893.483611][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6115'. [ 893.712631][T20327] tmpfs: Bad value for 'nr_blocks' [ 893.737041][T20325] loop3: detected capacity change from 0 to 1756 [ 893.810545][T20331] loop1: detected capacity change from 0 to 256 [ 893.828487][T20333] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 893.849959][T20333] /dev/nullb0: Can't open blockdev [ 893.856769][ T6016] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 894.048736][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 894.082194][ T6016] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 894.102247][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 894.110234][ T6016] usb 5-1: config 4 has no interface number 0 [ 894.123205][ T6016] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 894.163416][ T6016] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 894.198392][ T6016] usb 5-1: config 4 interface 51 has no altsetting 0 [ 894.237424][ T6016] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 894.262536][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.292337][ T6016] usb 5-1: Product: syz [ 894.311003][ T6016] usb 5-1: Manufacturer: syz [ 894.326522][ T6016] usb 5-1: SerialNumber: syz [ 894.331635][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 894.374871][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 894.390574][ T5887] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 894.410687][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.437010][ T5887] usb 1-1: Product: syz [ 894.441203][ T5887] usb 1-1: Manufacturer: syz [ 894.451463][ T5887] usb 1-1: SerialNumber: syz [ 894.456803][T20324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.473146][ T5887] usb 1-1: config 0 descriptor?? [ 894.505289][T20324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.539786][T20347] loop1: detected capacity change from 0 to 512 [ 894.584834][T20347] EXT4-fs: Ignoring removed nobh option [ 894.591137][T20345] loop5: detected capacity change from 0 to 2048 [ 894.633966][T20347] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 894.666839][T20345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.693545][T20347] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 894.784345][T20324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.785868][T20347] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.6130: casefold flag without casefold feature [ 894.802607][T20324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 894.875536][ T6016] cdc_eem 5-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.4-1, CDC EEM Device, 22:e0:cb:a9:3c:e6 [ 894.879300][T20347] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6130: couldn't read orphan inode 13 (err -117) [ 894.968691][ T5887] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 894.987267][T20347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.015825][ T5887] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 895.116439][ T5887] usb 1-1: USB disconnect, device number 2 [ 895.152351][T20347] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 895.182050][ T6176] usb 5-1: USB disconnect, device number 26 [ 895.223303][ T6176] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device [ 895.268580][T20361] loop2: detected capacity change from 0 to 1024 [ 895.400134][T20361] [ 895.402510][T20361] ====================================================== [ 895.409531][T20361] WARNING: possible circular locking dependency detected [ 895.416550][T20361] 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 Not tainted [ 895.423661][T20361] ------------------------------------------------------ [ 895.430677][T20361] syz.2.6135/20361 is trying to acquire lock: [ 895.436745][T20361] ffff88807c0778f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xdc/0x5f0 [ 895.446414][T20361] [ 895.446414][T20361] but task is already holding lock: [ 895.453780][T20361] ffff8880776b0e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x203/0xb70 [ 895.464989][T20361] [ 895.464989][T20361] which lock already depends on the new lock. [ 895.464989][T20361] [ 895.475415][T20361] [ 895.475415][T20361] the existing dependency chain (in reverse order) is: [ 895.484536][T20361] [ 895.484536][T20361] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 895.493609][T20361] __mutex_lock+0x199/0xb90 [ 895.498682][T20361] hfsplus_get_block+0x272/0x9d0 [ 895.504157][T20361] block_read_full_folio+0x457/0x850 [ 895.509999][T20361] filemap_read_folio+0xc8/0x2a0 [ 895.515484][T20361] do_read_cache_folio+0x263/0x5c0 [ 895.521146][T20361] read_cache_page+0x5b/0x160 [ 895.526464][T20361] hfsplus_block_allocate+0x144/0xa40 [ 895.532387][T20361] hfsplus_file_extend+0x459/0x10f0 [ 895.538120][T20361] hfsplus_get_block+0x1a9/0x9d0 [ 895.543594][T20361] __block_write_begin_int+0x4f4/0x16d0 [ 895.549678][T20361] block_write_begin+0x9a/0x1d0 [ 895.555066][T20361] cont_write_begin+0x61b/0x950 [ 895.560449][T20361] hfsplus_write_begin+0x64/0x120 [ 895.566029][T20361] page_symlink+0x3fc/0x4c0 [ 895.571065][T20361] hfsplus_symlink+0xd3/0x2b0 [ 895.576278][T20361] vfs_symlink+0x403/0x680 [ 895.581233][T20361] do_symlinkat+0x261/0x310 [ 895.586307][T20361] __x64_sys_symlink+0x75/0x90 [ 895.591627][T20361] do_syscall_64+0xcd/0x4c0 [ 895.596668][T20361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.603126][T20361] [ 895.603126][T20361] -> #0 (&sbi->alloc_mutex){+.+.}-{4:4}: [ 895.611008][T20361] __lock_acquire+0x126f/0x1c90 [ 895.616416][T20361] lock_acquire+0x179/0x350 [ 895.621450][T20361] __mutex_lock+0x199/0xb90 [ 895.626490][T20361] hfsplus_block_free+0xdc/0x5f0 [ 895.631979][T20361] hfsplus_free_extents+0x3b4/0x530 [ 895.637725][T20361] hfsplus_file_truncate+0x8da/0xb70 [ 895.643558][T20361] hfsplus_delete_inode+0x18f/0x220 [ 895.649317][T20361] hfsplus_unlink+0x581/0x7f0 [ 895.654531][T20361] vfs_unlink+0x2fe/0x9b0 [ 895.659398][T20361] do_unlinkat+0x4c5/0x6a0 [ 895.664364][T20361] __x64_sys_unlinkat+0xbf/0x130 [ 895.669872][T20361] do_syscall_64+0xcd/0x4c0 [ 895.674917][T20361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.681345][T20361] [ 895.681345][T20361] other info that might help us debug this: [ 895.681345][T20361] [ 895.691576][T20361] Possible unsafe locking scenario: [ 895.691576][T20361] [ 895.699030][T20361] CPU0 CPU1 [ 895.704417][T20361] ---- ---- [ 895.709782][T20361] lock(&HFSPLUS_I(inode)->extents_lock); [ 895.715607][T20361] lock(&sbi->alloc_mutex); [ 895.722735][T20361] lock(&HFSPLUS_I(inode)->extents_lock); [ 895.731077][T20361] lock(&sbi->alloc_mutex); [ 895.735714][T20361] [ 895.735714][T20361] *** DEADLOCK *** [ 895.735714][T20361] [ 895.743854][T20361] 5 locks held by syz.2.6135/20361: [ 895.749061][T20361] #0: ffff8880255d4428 (sb_writers#25){.+.+}-{0:0}, at: do_unlinkat+0x1bd/0x6a0 [ 895.758285][T20361] #1: ffff8880776b38f8 (&type->i_mutex_dir_key#17/1){+.+.}-{4:4}, at: do_unlinkat+0x26c/0x6a0 [ 895.768737][T20361] #2: ffff8880776b1078 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: vfs_unlink+0xd3/0x9b0 [ 895.778997][T20361] #3: ffff88807c077998 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_unlink+0x183/0x7f0 [ 895.788555][T20361] #4: ffff8880776b0e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x203/0xb70 [ 895.800190][T20361] [ 895.800190][T20361] stack backtrace: [ 895.806082][T20361] CPU: 0 UID: 0 PID: 20361 Comm: syz.2.6135 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 895.806125][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 895.806146][T20361] Call Trace: [ 895.806157][T20361] [ 895.806169][T20361] dump_stack_lvl+0x116/0x1f0 [ 895.806205][T20361] print_circular_bug+0x275/0x350 [ 895.806260][T20361] check_noncircular+0x14c/0x170 [ 895.806309][T20361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.806357][T20361] __lock_acquire+0x126f/0x1c90 [ 895.806419][T20361] lock_acquire+0x179/0x350 [ 895.806447][T20361] ? hfsplus_block_free+0xdc/0x5f0 [ 895.806497][T20361] ? __pfx___might_resched+0x10/0x10 [ 895.806546][T20361] __mutex_lock+0x199/0xb90 [ 895.806580][T20361] ? hfsplus_block_free+0xdc/0x5f0 [ 895.806629][T20361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.806670][T20361] ? hfsplus_block_free+0xdc/0x5f0 [ 895.806716][T20361] ? __pfx___might_resched+0x10/0x10 [ 895.806761][T20361] ? __pfx___mutex_lock+0x10/0x10 [ 895.806795][T20361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.806835][T20361] ? trace_contention_end+0xdd/0x130 [ 895.806867][T20361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.806911][T20361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.806953][T20361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.807000][T20361] ? hfsplus_block_free+0xdc/0x5f0 [ 895.807047][T20361] hfsplus_block_free+0xdc/0x5f0 [ 895.807094][T20361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 895.807137][T20361] hfsplus_free_extents+0x3b4/0x530 [ 895.807173][T20361] hfsplus_file_truncate+0x8da/0xb70 [ 895.807208][T20361] ? hfsplus_delete_cat+0x140/0xde0 [ 895.807247][T20361] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 895.807283][T20361] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 895.807333][T20361] hfsplus_delete_inode+0x18f/0x220 [ 895.807366][T20361] hfsplus_unlink+0x581/0x7f0 [ 895.807405][T20361] ? __pfx_hfsplus_unlink+0x10/0x10 [ 895.807445][T20361] ? __pfx_down_write+0x10/0x10 [ 895.807482][T20361] ? may_delete+0x56b/0x820 [ 895.807523][T20361] vfs_unlink+0x2fe/0x9b0 [ 895.807562][T20361] do_unlinkat+0x4c5/0x6a0 [ 895.807611][T20361] ? __pfx_do_unlinkat+0x10/0x10 [ 895.807661][T20361] ? strncpy_from_user+0x203/0x2e0 [ 895.807716][T20361] ? getname_flags.part.0+0x1c5/0x550 [ 895.807757][T20361] __x64_sys_unlinkat+0xbf/0x130 [ 895.807807][T20361] do_syscall_64+0xcd/0x4c0 [ 895.807844][T20361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.807882][T20361] RIP: 0033:0x7f01ea98e9a9 [ 895.807908][T20361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.807941][T20361] RSP: 002b:00007f01eb7f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 895.807971][T20361] RAX: ffffffffffffffda RBX: 00007f01eabb5fa0 RCX: 00007f01ea98e9a9 [ 895.807995][T20361] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 895.808017][T20361] RBP: 00007f01eaa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 895.808039][T20361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.808059][T20361] R13: 0000000000000000 R14: 00007f01eabb5fa0 R15: 00007ffc9bbee468 [ 895.808092][T20361] [ 896.161298][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 896.171622][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 896.196550][T20361] syz.2.6135: attempt to access beyond end of device [ 896.196550][T20361] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 896.222500][T20361] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 896.237223][T20361] hfsplus: unable to mark blocks free: error -5 [ 896.245421][T20361] hfsplus: can't free extent [ 896.272360][ T5921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.479350][T20372] base_sock_release(ffff888063c0f800) sk=ffff8880292a0000