last executing test programs: 3.604705701s ago: executing program 0 (id=2530): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x40000) 3.604493961s ago: executing program 1 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r1, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 3.451082796s ago: executing program 1 (id=2533): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 3.191069234s ago: executing program 1 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x122, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14, 0x32, 0x871a15abc695fa3d, 0x70bd29, 0x25dfdc02}, 0x14}}, 0x4000010) 3.135578955s ago: executing program 0 (id=2537): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r0, 0x84) 2.715647028s ago: executing program 1 (id=2541): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/123, 0x7b}], 0x1) 2.402126737s ago: executing program 0 (id=2544): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x18010, &(0x7f0000000300)={[{@dots}, {@fat=@dos1xfloppy}, {@fat=@errors_remount}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@fat=@nfs_stale_rw}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@debug}, {@nodots}, {@dots}, {@dots}]}, 0x1, 0x243, &(0x7f0000000540)="$eJzs3b9u00AcB/Bf07R1u9AZMVhiYaqAN4hQkBCWkII8wISlwtIipHQxTHkMnoFH4jE6dTOiNokxfwZIcIM/H6nyV/r2orsll+EueXXn7dnpu4s31eePkSRpjCMWcRVxHKPYjdpO8xxd5/1oWwQAsG1ms2LS9xz4ewffws4P1WFEFHvt/1nKP21+ZgAAAAAAAAAAAGyC8/8AMDzO////5vNJcdR8fvue8/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAf66q6lb1m7++5wcArJ/9HwCGx/4PAMNj/weA4Xn+4uXTSZZNZ2maRFwuyrzM62fdP36STe+n145Xoy7LMt9rcjZ9UPdptz9qxj/8ab8f9+7W/dfu0bOs0x/E6aYXDwAAAAAAAAAAAAAAAAAAADfESbrUud+/W/cnv+rr1Pp+gM79/XHcHv+zZQAAAAAAAAAAAAAAAAAAAMBWu3j/4aw4P389F4RlOIw/GJXEzZi8sJbQ9zsTAAAAAAAAAAAAAAAAAAAMz+rSb98zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+rH7/f71h1HrlvtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMOXAAAA//+RHI+6") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) 2.064360387s ago: executing program 3 (id=2547): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) 1.826926445s ago: executing program 3 (id=2548): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x40000) 1.816612806s ago: executing program 0 (id=2558): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0xd, 0x5ed, &(0x7f0000000600)="$eJzs3c1vFVUbAPBnbm9LS3nfFmJUXEgTYyBRWlrAEOMCtoY0+BE3bqy0IFKgoTVaNKEY3JgYN8aYuHIh/hdKZMtKVy7cuDIkRA1LEq+Z2xnox9yW3n5Mw/x+yaVnzrnDOdN7n86Zc8+ZG0BlDaT/1CL2RsRUEtGXzD0oq0dWODD/vHv/fHI6fSTRaLzxVxJJlpc/P8l+9mY7d0fELz8nsadjeb3Ts1fOj01OTlzOtodmLkwNTc9eOXjuwtjZibMTF0deGjl29MjRY8OH2jquqwV5J6+//2Hf56Nvf//t/WT4h99Hkzger2ZPXHgcG2UgBpq/k2R5Ue+xja6sJB3Z+2ThS5zUS2wQa5K/fp0R8VT0RUc8fPH64rPXSm0csKkaSUQDqKhE/ENF5f2A/Np+6XVwrZReCbAV7p6YHwCYj/00J4//+vzYYHQ3xwZ23kti4bBOEhHtjcwttisibt8avX7m1uj12KRxOKDY3LWIeLro/J80478/uqO/Gf+1RfGf9gtOZT/T/NfbrH/pULH4h60zH//dK8Z/tIj/dxbE/7tt1j/wMPlez6L472n3kAAAAAAAAKCybp6IiBeLPv+vPZj/EwXzf3oj4vgG1D+wZHv55/+1OxtQDVDg7omIVwrn/9by2b/9HVnqf835AJ3JmXOTE4ci4v8RcSA6d6TbwyvUcfCLPd+0KhvI5v/lj7T+29lcwKwdd+o7Fu8zPjYztt7jBiLuXot4pt56/l96/k8Kzv/p34OpR6xjz/M3TrUqWz3+gc3S+C5if+H5/+FdK5KV788x1OwPDOW9guWe/fjLH1vV3278u8UErF96/t+5cvz3Jwvv1zO99joOz9Ybrcra7f93JW82b13SleV9NDYzc3k4ois52RHRFYvyR9beZngc5fGQx0sa/weeW3n8r6j/3xMRc0v+7+TvxWuKc0/+2/tHq/bo/0N50vgfX9P5f+2JkRv9P7Wq/9HO/0eat5c7kOUY/4N5X+dh2rU4vyAc60VFW91eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgc1CJiVyS1wQfpWm1wMKI3Ip6InbXJS9MzL5y59MHF8bSs+f3/tfybfvvmt5P8+//7F2yPLNk+HBG7I+Krjp7m9uDpS5PjZR88AAAAAAAAAAAAAAAAAAAAbBO9Ldb/p/7sKLt1wKarl90AoDQF8f9rGe0Atp7zP1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q/VJf4BAAAAAOCxsnvfzd+SiJh7uaf5SHVlZZ2ltgzYbLWyGwCUxi1+oLpM/YHqco0PJKuUd7fcabU9VzJ1eh07AwAAAAAAAAAAAEDl7N9r/T9UlfX/UF3W/0N15ev/95XcDmDrucYHYpWV/IXr/1fdCwAAAAAAAAAAAADYSNOzV86PTU5OXG4n0eiLWMfu2yzx1vZoxlYmGo3G1fRd0Mz59P4GvCUqncinwm+X9ixJ5Gv9Hm2vkv4gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy/wXAAD//8jfH2A=") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1.715312138s ago: executing program 4 (id=2549): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x7eb20d52caf0b75b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086e81, 0x0) 1.554258943s ago: executing program 2 (id=2550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000440)=""/17, &(0x7f00000001c0)=0x11) 1.282441931s ago: executing program 4 (id=2551): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000000)=@kern={0x1d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000000)=ANY=[], 0x10}, {&(0x7f0000001f40)=ANY=[], 0x28}], 0x2, 0x0, 0x0, 0x4000804}, 0x4000) 1.166476955s ago: executing program 2 (id=2552): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030372c6e6f7374726963742c7569643d69676e6f72652c6769643d666f726765742c6c6f6e6761642c6e6f7672732c756e64656c6574652c6d6f64653d30303030303030303030303030303030303033353031362c646d6f64653d30303030303030303030303030303030303030303031312c00e3cc6abaa52ef118fcbe734b47a6bf66bdd357c81c22ed4c07659e40ba6f24e50fafda55f8d6b01f7fa9505996c5c8e5fac082523b41c69e892f8f3372228da85b089c449c8243489693fc724dc3a34a1c85226b306f86ba0484aad17849d21905b8e3dbc20bf4c98777720c05637db44ef1224790223b183be4cbccef28b6dc7701cf3b6d45babe7a0177b34116f8033c0614d351a01526a5e4626159b2d7a3176575b87ce23efc23d6fc182ecb01ea4d182720d93ab9a99e432ce3c68dcdeec61f9cc21345ccd818e18d6d9c4bb97e0f79e4cfb80641"], 0x1, 0xc57, &(0x7f0000001a00)="$eJzs3U9sHNd9B/DfGy21S7mtmdhVnDQONm2Ryorl6l9MxSrcVU2zLSDLQijmFoArkVIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocipJ6KFjaDogS0CBCgQMJjZt+KKIhNaFEVK/nxs6Ts7897MezPrGVrQmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvvXrh5Km0xYZD+9AYAOChuDT2pZOnt3r+AwCPrSvb/f8/AAAAAAAAAAAAAABwUKQo4qlIMXdpLU1Un7saFzsDt26Pj4xuXW0wVTUPVeXLX41Tp8+c/cKLw+d6ebEz83PqP2ifitfHrlxovjJ7c25+amFharI5PtO5Njs5teM97Lb+ZserE9C8+catyevXF5qnXzhz1+bbQx/Unzg6dH74uRPP9sqOj4yOjm0UafSXr913Q7q2G+FxOIo4ESme//aPUjsiitj9uWg83Gu/2WDVieNVJ8ZHRquOTHfaM4vlxsu9E1FENPsqtXrnaOtrEbWBh9qH7bUilsrmlw0+XnZvbK493746PdW83J5f7Cx2Zmcup25ry/40o4hzKWI5Ilbr9+5uIIqoRYpvPrmWrua3flTn4fPVwODt21HsYR93oGxncyBiuXgErtkBVo8iXosUP373WFzL95nqXvO5iNfK/G7E22W+HJHKL8bZiPe3+B7xaKpFEX9RXv/za2myuh/07isXv9z8w5nrs31le/eVD/l8uOdOsU/Ph8FN+XAc8HtTI4poV3f8tXT/P+wAAAAAAAAAAAAAAAAA8KANRhGfjBSv/vsfV+OKoxqX/uT54d8f+uX+MePP/IL9lGVfiIilYmdjcg/ngYGX0+WU9nks8UdZI4r4kzz+7+v73RgAAAAAAAAAAAAAAAAAAICPtCJ+GCleeu9Yd2T+nTnFOzM3mlfaV6e7s8L25v7tzZm+vr6+3kzdbOWcyLmUcznnSs7VnFHk+vXujlr580TOpZzLOVdyruaMQ7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjAMydy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Gim+8dW1FCkiWhET0c2V+n63DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo1VMR34kUzT9o3VlXi4hU/dt1rPztbLQOl/nxaA2X+XK0LuRsV1lrfX0f2s/uDKQifhAp6o137lzwfP0Hup/ufA3i7a9FDOblT9W6eai3ceiD+hNHnzw/PPqZZ7ZbTls14PjFzsyt283xkdHRsb7VtXz0j/etG8rHLR5M14mIhTffeqM9PT01fz8Lh6uF8itwX9UfuYVU24ee1j8yp/fgLUTtQDRjf/p+l8Z+3aDYU+Xz//1I8dvv/Ufvgd99/jfil7qf7jzh4yd/uvHTwEubd7TD539tc738/C+f6Vs9/5/qW/dS/mlkoBbRWLw5N3A0orHw5lsnOjfbN6ZuTM2cPXnyi8PDXzxzcuBwRON6Z3qqb+mBnC4AAAAAAAAAAAAAAACAhycV8buRov2DtdSMiNvVeK2h88PPnXj2UByqxlvdNW779bErF5qvzN6cm59aWJiabI7PdK7NTk7t9HCNarjX+MjonnTmFxrc4/YPNl6ZnXtzvnPjjxa33H6kceHqwuJ8+9rWm2MwiohW/5rjVYPHR0arRk932jNV1ctbDqb/8AZSEf8ZKa6dbabP5nV5/P/mEf7V+P/eYZc27+gBjv//zJGN8X8f6ytaHjOlIn4SKX7rL5+Jz1btPBL3nLNc7m8jxfFzn87l4nBZrteG7nsFuiMDy7L/Gyn+8ad3l+2Nh3xqo+ypD3VyHwHl9X8yUnznz78Vv57X3f3+h62v/5HNO9qj9z883bfuyF3vK9h118nX/0SkePmpd+I3qjX//3Pf/9F798axbuGN93Ps0fX/1b51Q/m4v/mgOg8AAAAAAAAAAPAIG0hF/F2k+N5oLb2Y1+3k7/9Nbt7RHv39r0/0rZvc7XxFO1zY9UkFAAAAgANiIBXxw0hxY/GdO2Oo7x7/3Tf+83c2xn+OpE1bqz/n+5XqvQEP8s//+g3l407svtsAAAAAAAAAAAAAAAAAAABwoKRUxIt5PvWJajz/5Lbzqa9Eilf/+/lcLh0ty/XmgR+qfm9cmp05cWF6erYRi+2r01PNsbn2tamy7tORYu1vPp3rFtX86r355rtzvG/MxT4fKUb/vle2Oxd7b27ypzfKnirLfixS/Nc/3F02T02d546uyp4uy/51pPjKP29d9uhG2TNl2W9Fiu9/pdkre6Qs23s/6ic2yr5wbbbYg6sCAAAAAAAAAAAAAAAAAADAR81AKuLPIsX/3Fy+M5Y/z/8/0Pex8vbX+ub73+R2Nc//UDX//3bL9zP/f/VegaXtjgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+nFEW8FSnmLq2llXr5uatxsVPE7fGR0a2rDaaq5qGqfPmrcer0mbNfeHH4XC8vdmZubV//QftkvD525ULzldmbc/NTCwtTk83xmc612cmpHe9ht/U3O16dgObNN25NXr++0Dz9wpm7Nt8e+qD+xNGh88PPnXi2V3Z8ZHR0rK9MbeC+j36PtM36w1HEX0WK57/9o/S9ekQRuz8XjYd77TcbrDpxvOrE+Mho1ZHpTntmsdx4uXciiohmX6VW7xw9hGuxK62IpbL5ZYOPl90bm2vPt69OTzUvt+cXO4ud2ZnLqdvasj/NKOJciliOiNX6vbsbiCLeiBTffHIt/Us94lDvPHz+0tiXTp7evh3FHvZxB8p2Ngcilovtr9nhfWzfo6IeRfxTpPjxu8fiX+sRtej+is9FvFbmdyPeju71TuUX42zE+1t8j3g01aKI/yuv//m19G69vB/07isXv5yWImb7yvbuK4/88+FhOuDPk0YU8f3qjr+W/s1/1wAAAAAAAAAAAAAAAAAHSBG/Fileeu9YqsYH3xlT3Jm50bzSvjrdHdbXG/vXGzO9vr6+3kzdbOWcyLmUcznnSs7VnFHk+jlbZTbW1yfy56WcyzlXcq7mjEO5fs5WzomcSzmXc67kXM0ZtVw/ZyvnRM6lnMs5V3Ku5owDMnYPAAAAAAAAAAAAAAAAAAB4vBTVPym+8dW1tF7vzi89Ed1cMR/oY+9nAQAA//9/2PP4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0xfb) 1.061757488s ago: executing program 0 (id=2553): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 1.061076578s ago: executing program 3 (id=2554): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x31}, 0x20) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) 869.182024ms ago: executing program 4 (id=2555): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000040000000000000800000850000002f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 756.429687ms ago: executing program 2 (id=2556): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 651.103201ms ago: executing program 4 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104"], 0x1508}}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 518.144625ms ago: executing program 3 (id=2559): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x13, 0x2, 0x1, 0x4000, 0x3, 0x0}) 517.986415ms ago: executing program 1 (id=2560): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000780), 0x0, 0x48c, &(0x7f00000002c0)="$eJzs3MtrXNUfAPDvvXm0/fWR/Gp9tFaNFiH4SJq0ahduFAUXFQVd1GVMpiV02kgTxZZiU5G6EaSga3Ep+Be4EEQQdSW41Y0rKRTtptVV5N65N52ZzrSNnWRi5vOByZwz99yc873Pc8+ZJICeNZL9SCK2RcQvETFUyzYWGKm9XbtydvqvK2enk1haeu2PJC939crZ6bJoud7WIjOaRqQfJEUlmxvqnT995vhUtVo5VeTHF068NT5/+syT75yYOlY5Vjk5eejQwQMTzzw9+VRH4sziurrnvbm9u1964+LL00cuvvnDl1l7txXL6+PolJEs8D+Xcs3LHu10ZV22vS6d9HexIaxIX0Rku2sgP/+Hoi+u77yhePH9rjYOWFXZvWlT+8WLS8AGlkS3WwB0R3mjz55/81fS+efg9ezyc7UHoCz2a8WrtqQ/0qLMQNPzbSeNRMSRxb8/y16xSuMQAAD1Ppr+9HA8Udf/W+5/pHFP/v5b/nNHMYcyHBH/j4idEXFXROyKiLsj8rL3RsR9K6x/pCl/Y/8nvfSvg7sNWf/v2WJuq7H/V/b+YrivyG3P4x9Ijs5WK/uLbTIaA5uy/MRN6vjmhZ8/bresvv+XvbL6y75g0Y5L/U0DdDNTC1N5p7QDLp+P2NPfKv5keSYgiYjdEbGnxfpft//VO8rE7GNf7G1X6Nbx30QH5pmWPs/CW8ziX4ym+EtJ/fzk7A3zk+Obo1rZP14eFTf68acLr7ar/47i74DLldp73f5vLjKc1M/Xzq+8jgu/ftj2meZ6/FvaH/9J4zozUwvpYPJ6Ps88WHz27tTCwqmJiMHkcJ5v+Hzy+rplviyfHf+j+1qf/zuLdbLq74+I7CB+ICIejIiHirY/HBGPRMS+m8T//fPtl5XxR9ql/X8+Yqbl9W95ozft/5Un+o5/91W7+m/v+ncwT40Wn+TXv1to1ZzsctHcwDvZdgAAAPBfkebfgU/SseV0mo6N1b7Dvyv+l1bn5hcePzr39smZ2nflh2MgLUe6horx0OpstTKRLBa/sTY+OlmMFZfjpQeKceNP+rbk+bHpuepMl2OHXre1zfmf+b2v260DVtmWlp9ODq55Q4AuaJ5HTxuz514JFwPYqPy9NvSuW5z/6Vq1A1h77v/Qu1qd/+ea8uYCYGNy/4fe5fyHHpV+2+0WAF3k/g896U7+rn8VE5vXRzMa/lPA4lptsfW6U/JERJlI10V7JFYp0e0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA///cRegb") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x1) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 505.607755ms ago: executing program 2 (id=2561): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x2af9, 0x4) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 426.246957ms ago: executing program 4 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x10004000) 306.203171ms ago: executing program 3 (id=2563): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 264.294082ms ago: executing program 3 (id=2564): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='pagemap\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 235.223473ms ago: executing program 2 (id=2565): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$fb(r1, &(0x7f0000000140)="d0f278df9b", 0x5) 13.151909ms ago: executing program 2 (id=2566): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x40000) 13.078209ms ago: executing program 4 (id=2567): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x10a4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 4.33059ms ago: executing program 0 (id=2576): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x30, r1, 0x1a1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "79cf4c2d537f11ad6186710887ee90ed7b"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) kernel console output (not intermixed with test programs): iled [ 143.913197][ T6240] FAT-fs (loop1): Directory bread(block 70) failed [ 143.941490][ T6200] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.000353][ T6240] FAT-fs (loop1): Directory bread(block 71) failed [ 144.039172][ T6240] FAT-fs (loop1): Directory bread(block 72) failed [ 144.071883][ T6240] FAT-fs (loop1): Directory bread(block 73) failed [ 144.416500][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 144.760817][ T6263] __vm_enough_memory: pid: 6263, comm: syz.0.885, no enough memory for the allocation [ 145.218653][ T6276] device wlan0 entered promiscuous mode [ 145.259679][ T6276] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 145.611429][ T6295] i2c i2c-0: Invalid block write size 34 [ 146.008905][ T6312] loop1: detected capacity change from 0 to 736 [ 146.188658][ T6316] loop3: detected capacity change from 0 to 256 [ 146.301606][ T6316] FAT-fs (loop3): Directory bread(block 64) failed [ 146.345181][ T6322] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 146.363857][ T6316] FAT-fs (loop3): Directory bread(block 65) failed [ 146.370621][ T6316] FAT-fs (loop3): Directory bread(block 66) failed [ 146.420475][ T6316] FAT-fs (loop3): Directory bread(block 67) failed [ 146.464457][ T6316] FAT-fs (loop3): Directory bread(block 68) failed [ 146.471062][ T6316] FAT-fs (loop3): Directory bread(block 69) failed [ 146.528933][ T6316] FAT-fs (loop3): Directory bread(block 70) failed [ 146.578542][ T6316] FAT-fs (loop3): Directory bread(block 71) failed [ 146.597407][ T6316] FAT-fs (loop3): Directory bread(block 72) failed [ 146.621463][ T6316] FAT-fs (loop3): Directory bread(block 73) failed [ 147.704703][ T6371] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 147.749848][ T5384] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.966642][ T5384] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 147.983535][ T5384] usb 2-1: config 0 has no interface number 0 [ 148.000171][ T5384] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.022489][ T6384] loop3: detected capacity change from 0 to 512 [ 148.036232][ T5384] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 148.056126][ T6384] EXT4-fs: Ignoring removed bh option [ 148.068969][ T5384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.115066][ T5384] usb 2-1: config 0 descriptor?? [ 148.149003][ T5384] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input9 [ 148.442566][ T5384] usb 2-1: USB disconnect, device number 6 [ 148.518160][ T6397] netlink: 'syz.4.949': attribute type 28 has an invalid length. [ 148.541845][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 148.651149][ T6384] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.680222][ T6384] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 148.737018][ T6384] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 148.755834][ T6384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.859207][ T6384] EXT4-fs: Ignoring removed bh option [ 148.873765][ T6403] loop2: detected capacity change from 0 to 4096 [ 148.900507][ T6403] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 148.925594][ T6384] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 149.019872][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 149.456901][ T6427] netlink: 'syz.3.963': attribute type 24 has an invalid length. [ 149.802389][ T6441] loop1: detected capacity change from 0 to 1024 [ 149.912735][ T6441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.985164][ T6441] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.059698][ T6441] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.969: bg 0: block 488: padding at end of block bitmap is not set [ 150.203817][ T5384] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.305592][ T6456] loop0: detected capacity change from 0 to 4096 [ 150.323206][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 150.335921][ T6462] netlink: 2 bytes leftover after parsing attributes in process `syz.2.978'. [ 150.350167][ T6456] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 150.419007][ T5384] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.440813][ T5384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.459537][ T5384] usb 4-1: Product: syz [ 150.464522][ T5384] usb 4-1: Manufacturer: syz [ 150.469168][ T5384] usb 4-1: SerialNumber: syz [ 150.672564][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 150.730907][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.982'. [ 150.774479][ T6469] device vlan0 entered promiscuous mode [ 150.917716][ T5384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 150.945368][ T5384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 150.996284][ T5384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 151.058721][ T5384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 151.085720][ T5384] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.141568][ T5384] lan78xx: probe of 4-1:1.0 failed with error -71 [ 151.172763][ T5384] usb 4-1: USB disconnect, device number 5 [ 151.520315][ T6498] loop2: detected capacity change from 0 to 256 [ 151.639603][ T6498] FAT-fs (loop2): Directory bread(block 64) failed [ 151.644308][ T5382] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 151.656445][ T6498] FAT-fs (loop2): Directory bread(block 65) failed [ 151.663113][ T6498] FAT-fs (loop2): Directory bread(block 66) failed [ 151.713532][ T6498] FAT-fs (loop2): Directory bread(block 67) failed [ 151.733827][ T6498] FAT-fs (loop2): Directory bread(block 68) failed [ 151.763034][ T6498] FAT-fs (loop2): Directory bread(block 69) failed [ 151.783859][ T6498] FAT-fs (loop2): Directory bread(block 70) failed [ 151.813776][ T6498] FAT-fs (loop2): Directory bread(block 71) failed [ 151.820622][ T6498] FAT-fs (loop2): Directory bread(block 72) failed [ 151.855617][ T5382] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 151.874070][ T6498] FAT-fs (loop2): Directory bread(block 73) failed [ 151.887223][ T5382] usb 1-1: config 2 interface 0 has no altsetting 0 [ 151.924606][ T5382] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 151.954877][ T5382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.991226][ T5382] usb 1-1: Product: syz [ 152.003786][ T5382] usb 1-1: Manufacturer: syz [ 152.044361][ T5382] usb 1-1: SerialNumber: syz [ 152.074571][ T5382] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 152.103749][ T5382] usb 1-1: selecting invalid altsetting 0 [ 152.156321][ T5382] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 152.279431][ T5382] usb 1-1: USB disconnect, device number 4 [ 152.408110][ T6516] cgroup: Name too long [ 152.611797][ T6525] loop2: detected capacity change from 0 to 1024 [ 152.695502][ T6525] hfsplus: cannot replace xattr [ 152.930253][ T6530] loop4: detected capacity change from 0 to 4096 [ 152.964892][ T6530] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 152.992672][ T6530] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 153.026144][ T6530] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 153.098025][ T6530] ntfs: volume version 3.1. [ 153.196666][ T6538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.855957][ T6560] UBIFS error (pid: 6560): cannot open "(null)", error -22 [ 154.000956][ T6534] loop1: detected capacity change from 0 to 32768 [ 154.112324][ T6534] [ 154.112324][ T6534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.112324][ T6534] [ 154.283785][ T4359] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.329631][ T1261] [ 154.329631][ T1261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.329631][ T1261] [ 154.361255][ T1261] [ 154.361255][ T1261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.361255][ T1261] [ 154.396349][ T108] [ 154.396349][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.396349][ T108] [ 154.445966][ T4272] [ 154.445966][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.445966][ T4272] [ 154.482361][ T4272] [ 154.482361][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.482361][ T4272] [ 154.504823][ T4359] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.529852][ T4359] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.550557][ T4359] usb 3-1: config 220 has no interface number 2 [ 154.573389][ T4359] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 154.609120][ T4359] usb 3-1: config 220 interface 0 has no altsetting 0 [ 154.633691][ T4359] usb 3-1: config 220 interface 76 has no altsetting 0 [ 154.640630][ T4359] usb 3-1: config 220 interface 1 has no altsetting 0 [ 154.713005][ T4359] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.753949][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.762136][ T4359] usb 3-1: Product: syz [ 154.784272][ T4359] usb 3-1: Manufacturer: syz [ 154.788950][ T4359] usb 3-1: SerialNumber: syz [ 154.882462][ T6589] loop4: detected capacity change from 0 to 512 [ 154.989152][ T6589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.044735][ T4359] usb 3-1: selecting invalid altsetting 0 [ 155.080096][ T6589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.1040: bg 0: bad block bitmap checksum [ 155.088990][ T6596] trusted_key: encrypted_key: keylen parameter is missing [ 155.100946][ T4359] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 155.138511][ T4359] usb 3-1: No valid video chain found. [ 155.190963][ T4359] usb 3-1: selecting invalid altsetting 0 [ 155.217529][ T4359] usbtest: probe of 3-1:220.1 failed with error -22 [ 155.252214][ T4359] usb 3-1: USB disconnect, device number 5 [ 155.309396][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 155.516120][ T6602] loop4: detected capacity change from 0 to 4096 [ 155.519826][ T6602] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 155.983873][ T5384] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.180687][ T5384] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.217129][ T5384] usb 4-1: config index 0 descriptor too short (expected 53237, got 245) [ 156.246210][ T5384] usb 4-1: config 1 has too many interfaces: 75, using maximum allowed: 32 [ 156.265142][ T5384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.289889][ T5384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 75 [ 156.310148][ T5384] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 156.330717][ T5384] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 156.353742][ T5384] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 156.408737][ T5384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.429231][ T5384] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 156.470409][ T5384] usb 4-1: New USB device found, idVendor=0008, idProduct=0000, bcdDevice= 0.00 [ 156.495483][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.507352][ T5384] usb 4-1: SerialNumber: syz [ 156.524529][ T6610] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.533180][ T6630] loop1: detected capacity change from 0 to 4096 [ 156.547459][ T6630] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 156.752554][ T6638] loop2: detected capacity change from 0 to 512 [ 156.810482][ T5384] usb 4-1: MIDIStreaming interface descriptor not found [ 156.911713][ T5384] usb 4-1: USB disconnect, device number 6 [ 157.319019][ T5342] udevd[5342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.623912][ T6657] loop4: detected capacity change from 0 to 4096 [ 157.678167][ T6657] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 157.940878][ T6674] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1081' sets config #2 [ 158.471219][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1090'. [ 158.521240][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1090'. [ 158.625761][ T6697] loop2: detected capacity change from 0 to 512 [ 158.709210][ T6697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.760423][ T6697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.1092: bg 0: bad block bitmap checksum [ 158.777883][ T6700] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1093'. [ 158.798409][ T6706] loop4: detected capacity change from 0 to 1764 [ 158.957057][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 159.269979][ T5382] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.463851][ T5382] usb 1-1: Using ep0 maxpacket: 32 [ 159.471085][ T5382] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 159.493752][ T5382] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.523795][ T5382] usb 1-1: config 0 has no interface number 0 [ 159.565366][ T5382] usb 1-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.635582][ T5382] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 159.648133][ T5382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.666770][ T5382] usb 1-1: Product: syz [ 159.671009][ T5382] usb 1-1: Manufacturer: syz [ 159.713769][ T5382] usb 1-1: SerialNumber: syz [ 159.729543][ T5382] usb 1-1: config 0 descriptor?? [ 159.830292][ T6736] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 160.072355][ T6745] loop1: detected capacity change from 0 to 2048 [ 160.119371][ T6745] loop1: p1 < > p4 < > [ 160.258139][ T5382] usb 1-1: USB disconnect, device number 5 [ 160.494716][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.724619][ T26] audit: type=1326 audit(1779322016.111:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.4.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e019ce59 code=0x7ffc0000 [ 160.823205][ T26] audit: type=1326 audit(1779322016.151:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.4.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe2e019ce59 code=0x7ffc0000 [ 160.939214][ T26] audit: type=1326 audit(1779322016.161:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.4.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e019ce59 code=0x7ffc0000 [ 161.048154][ T26] audit: type=1326 audit(1779322016.161:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.4.1126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e019ce59 code=0x7ffc0000 [ 162.291884][ T6827] loop1: detected capacity change from 0 to 128 [ 162.365072][ T6825] loop4: detected capacity change from 0 to 4096 [ 162.499648][ T6833] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.628422][ T26] audit: type=1326 audit(1779322018.011:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.1160" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5ab9ce59 code=0x7ffc0000 [ 162.660933][ T6825] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 162.742401][ T26] audit: type=1326 audit(1779322018.011:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.1160" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5ab9ce59 code=0x7ffc0000 [ 162.773252][ T6825] Remounting filesystem read-only [ 162.848802][ T26] audit: type=1326 audit(1779322018.011:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.1160" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5ab9ce59 code=0x7ffc0000 [ 162.907520][ T6842] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 162.958988][ T26] audit: type=1326 audit(1779322018.071:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.1160" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7faf5ab9ce59 code=0x7ffc0000 [ 163.082714][ T26] audit: type=1326 audit(1779322018.071:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.1160" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5ab9ce59 code=0x7ffc0000 [ 163.131442][ T26] audit: type=1326 audit(1779322018.071:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.3.1160" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5ab9ce59 code=0x7ffc0000 [ 163.843064][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 165.063508][ T6914] loop4: detected capacity change from 0 to 256 [ 165.101669][ T6919] netlink: 'syz.0.1198': attribute type 6 has an invalid length. [ 165.184745][ T6914] FAT-fs (loop4): Directory bread(block 1285) failed [ 165.191543][ T6914] FAT-fs (loop4): Directory bread(block 1286) failed [ 165.240833][ T6915] loop1: detected capacity change from 0 to 4096 [ 165.272307][ T6914] FAT-fs (loop4): Directory bread(block 1287) failed [ 165.308205][ T6915] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 165.354006][ T6914] FAT-fs (loop4): Directory bread(block 1288) failed [ 165.379927][ T6914] FAT-fs (loop4): Directory bread(block 1285) failed [ 165.413888][ T6914] FAT-fs (loop4): Directory bread(block 1286) failed [ 165.420702][ T6914] FAT-fs (loop4): Directory bread(block 1287) failed [ 165.429672][ T6915] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 165.453741][ T6915] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 165.490250][ T6914] FAT-fs (loop4): Directory bread(block 1288) failed [ 165.514066][ T6914] FAT-fs (loop4): Directory bread(block 1285) failed [ 165.515648][ T6915] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 165.574002][ T6914] FAT-fs (loop4): Directory bread(block 1286) failed [ 165.979008][ T6939] autofs4:pid:6939:autofs_fill_super: called with bogus options [ 166.210106][ T6951] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1215'. [ 166.252514][ T6947] loop2: detected capacity change from 0 to 2048 [ 166.346650][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1217'. [ 166.359654][ T6947] loop2: p1 < > p4 < > [ 166.626930][ T6653] udevd[6653]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 166.653867][ T6957] loop0: detected capacity change from 0 to 4096 [ 166.661507][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 166.776467][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 166.799306][ T6966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.825708][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1223'. [ 166.854302][ T6957] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 166.907591][ T6957] Remounting filesystem read-only [ 167.460487][ T6990] loop0: detected capacity change from 0 to 2048 [ 167.516624][ T6990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.783327][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 167.783342][ T26] audit: type=1326 audit(1779322023.161:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137799ce59 code=0x7ffc0000 [ 167.903692][ T26] audit: type=1326 audit(1779322023.201:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f137799ce59 code=0x7ffc0000 [ 168.027250][ T26] audit: type=1326 audit(1779322023.201:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137799ce59 code=0x7ffc0000 [ 168.138827][ T26] audit: type=1326 audit(1779322023.201:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.1241" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137799ce59 code=0x7ffc0000 [ 168.278672][ T7010] loop1: detected capacity change from 0 to 4096 [ 168.299550][ T7010] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 168.360700][ T7022] device bond2 entered promiscuous mode [ 168.369040][ T7022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.383234][ T7010] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 168.473709][ T7010] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 168.497733][ T7010] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 168.524579][ T7010] ntfs: volume version 3.1. [ 168.545957][ T7010] ntfs: (device loop1): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 168.701323][ T4272] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 168.737676][ T7031] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 169.729698][ T7076] xt_TCPMSS: Only works on TCP SYN packets [ 169.971520][ T7081] loop0: detected capacity change from 0 to 2364 [ 170.532541][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1292'. [ 170.581539][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 171.195875][ T5384] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.409517][ T5384] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.423245][ T5384] usb 5-1: string descriptor 0 read error: -22 [ 171.423332][ T5384] usb 5-1: New USB device found, idVendor=420c, idProduct=1058, bcdDevice= 0.40 [ 171.423357][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.473473][ T5384] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.656072][ T5384] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 171.900549][ T5384] usb 5-1: USB disconnect, device number 3 [ 172.046625][ T7159] loop1: detected capacity change from 0 to 128 [ 172.079593][ T7157] loop3: detected capacity change from 0 to 4096 [ 172.157629][ T7157] ntfs: volume version 3.1. [ 172.200721][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.430577][ T7168] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.083096][ T7192] tmpfs: Bad value for 'nr_blocks' [ 173.366778][ T7207] loop2: detected capacity change from 0 to 256 [ 173.481210][ T7207] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 173.722794][ T7219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 174.036321][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 174.132084][ T7232] netlink: 'syz.3.1354': attribute type 6 has an invalid length. [ 175.028990][ T4315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.223942][ T7273] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 175.238345][ T4315] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 175.257705][ T4315] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 175.266651][ T7273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1374'. [ 175.276841][ T4315] usb 1-1: Product: syz [ 175.281057][ T4315] usb 1-1: Manufacturer: syz [ 175.286781][ T4315] usb 1-1: SerialNumber: syz [ 175.308334][ T4315] usb 1-1: config 0 descriptor?? [ 175.326608][ T4315] ch341 1-1:0.0: ch341-uart converter detected [ 175.427293][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 175.438422][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 175.517509][ T7283] loop3: detected capacity change from 0 to 256 [ 175.632058][ T7283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 175.705340][ T7285] loop1: detected capacity change from 0 to 1024 [ 175.756222][ T4315] usb 1-1: failed to send control message: -71 [ 175.762532][ T4315] ch341-uart: probe of ttyUSB0 failed with error -71 [ 175.773714][ T7285] hfsplus: invalid file type 0120411 for inode 2 [ 175.789247][ T4315] usb 1-1: USB disconnect, device number 6 [ 175.816225][ T4315] ch341 1-1:0.0: device disconnected [ 175.842433][ T7285] hfsplus: failed to load root directory [ 176.462437][ T7281] loop2: detected capacity change from 0 to 32768 [ 176.525753][ T7281] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 176.525753][ T7281] [ 176.574430][ T7281] ERROR: (device loop2): remounting filesystem as read-only [ 176.762978][ T7313] hsr0: VLAN not yet supported [ 177.240585][ T7323] loop3: detected capacity change from 0 to 4096 [ 177.312703][ T7330] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1401'. [ 177.399844][ T7323] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 177.459328][ T7323] ntfs3: loop3: Failed to load $Extend. [ 177.577000][ T7335] netlink: 'syz.0.1404': attribute type 32 has an invalid length. [ 177.599325][ T7323] ntfs3: loop3: ino=5, "/" directory corrupted [ 177.700586][ T4271] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 177.765910][ T4271] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 177.908953][ T7347] loop4: detected capacity change from 0 to 512 [ 177.945832][ T7347] EXT4-fs: inline encryption not supported [ 177.978231][ T7347] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.035886][ T7351] loop3: detected capacity change from 0 to 256 [ 178.073138][ T7349] loop2: detected capacity change from 0 to 4096 [ 178.096118][ T7347] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.196833][ T7351] FAT-fs (loop3): Directory bread(block 64) failed [ 178.223771][ T7351] FAT-fs (loop3): Directory bread(block 65) failed [ 178.241958][ T7351] FAT-fs (loop3): Directory bread(block 66) failed [ 178.250978][ T7351] FAT-fs (loop3): Directory bread(block 67) failed [ 178.270515][ T7347] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1411: bg 0: block 248: padding at end of block bitmap is not set [ 178.282150][ T7351] FAT-fs (loop3): Directory bread(block 68) failed [ 178.357472][ T7351] FAT-fs (loop3): Directory bread(block 69) failed [ 178.379004][ T7347] __quota_error: 9 callbacks suppressed [ 178.379022][ T7347] Quota error (device loop4): write_blk: dquota write failed [ 178.393825][ T7351] FAT-fs (loop3): Directory bread(block 70) failed [ 178.415439][ T7347] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 178.440852][ T7347] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1411: Failed to acquire dquot type 1 [ 178.452382][ T7351] FAT-fs (loop3): Directory bread(block 71) failed [ 178.452547][ T7351] FAT-fs (loop3): Directory bread(block 72) failed [ 178.506240][ T7351] FAT-fs (loop3): Directory bread(block 73) failed [ 178.584444][ T7347] EXT4-fs (loop4): 1 truncate cleaned up [ 178.590365][ T7347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.729835][ T7347] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.1411: Abort forced by user [ 178.771120][ T7347] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 178.970735][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 179.104534][ T7377] loop3: detected capacity change from 0 to 64 [ 179.387660][ T7389] loop4: detected capacity change from 0 to 8 [ 179.467070][ T7389] SQUASHFS error: Failed to read block 0x1ec: -5 [ 179.489834][ T7389] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 179.496360][ T7391] netlink: 'syz.3.1428': attribute type 21 has an invalid length. [ 179.505674][ T5384] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.703144][ T5384] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.730065][ T5384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.776882][ T5384] usb 2-1: Product: syz [ 179.781130][ T5384] usb 2-1: Manufacturer: syz [ 179.805799][ T5384] usb 2-1: SerialNumber: syz [ 179.838183][ T5384] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.934216][ T5384] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.068640][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1438'. [ 180.393797][ T5381] usb 2-1: USB disconnect, device number 7 [ 181.043897][ T5384] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 181.063493][ T5384] ath9k_htc: Failed to initialize the device [ 181.103752][ T5382] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.124583][ T5381] usb 2-1: ath9k_htc: USB layer deinitialized [ 181.249567][ T7453] loop4: detected capacity change from 0 to 1024 [ 181.296538][ T5382] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.323406][ T5382] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.339515][ T7453] hfsplus: invalid file type 0174377 for inode 21 [ 181.353360][ T5382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 181.407442][ T5382] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 181.437313][ T5382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.468011][ T5382] usb 4-1: Product: syz [ 181.485848][ T5382] usb 4-1: Manufacturer: syz [ 181.506524][ T5382] usb 4-1: SerialNumber: syz [ 181.795934][ T5382] usb 4-1: Can't get UAC3 power state for id 10 [ 181.816507][ T5382] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 181.993592][ T5382] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 182.043285][ T5382] usb 4-1: USB disconnect, device number 7 [ 182.103389][ T7449] loop1: detected capacity change from 0 to 32768 [ 182.115223][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.149071][ T7452] loop0: detected capacity change from 0 to 32768 [ 182.217814][ T7449] XFS (loop1): Mounting V5 Filesystem [ 182.285418][ T7452] XFS (loop0): Mounting V5 Filesystem [ 182.381847][ T7452] XFS (loop0): Ending clean mount [ 182.463590][ T7449] XFS (loop1): Ending clean mount [ 182.492937][ T4278] XFS (loop0): Unmounting Filesystem [ 182.533962][ T4316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.734532][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 182.744307][ T4316] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 182.799833][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.817264][ T4272] XFS (loop1): Unmounting Filesystem [ 182.834006][ T4316] usb 3-1: Product: syz [ 182.838262][ T4316] usb 3-1: Manufacturer: syz [ 182.842898][ T4316] usb 3-1: SerialNumber: syz [ 182.897659][ T4316] usb 3-1: config 0 descriptor?? [ 182.949068][ T5381] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 183.111779][ T4316] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 183.124082][ T4316] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 183.165714][ T5381] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 183.193722][ T5381] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.224096][ T5381] usb 4-1: config 0 has no interface number 0 [ 183.243746][ T5381] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 183.285758][ T5381] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 183.321767][ T5381] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.349477][ T4315] usb 3-1: USB disconnect, device number 6 [ 183.376749][ T5381] usb 4-1: config 0 interface 52 has no altsetting 0 [ 183.398234][ T5381] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 183.454655][ T5381] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 183.493178][ T5381] usb 4-1: Product: syz [ 183.503263][ T5381] usb 4-1: SerialNumber: syz [ 183.524294][ T5381] usb 4-1: config 0 descriptor?? [ 183.747725][ T5381] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 183.778922][ T5381] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 183.809285][ T7513] netlink: 'syz.4.1479': attribute type 24 has an invalid length. [ 183.999361][ T5381] usb 4-1: USB disconnect, device number 8 [ 184.052312][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 184.351471][ T7533] delete_channel: no stack [ 184.699350][ T7546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'. [ 185.473875][ T129] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.493171][ T7542] loop2: detected capacity change from 0 to 32768 [ 185.601175][ T7542] XFS (loop2): Mounting V5 Filesystem [ 185.609813][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 185.673870][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 185.682159][ T129] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 185.691781][ T129] usb 1-1: config 4 has no interface number 0 [ 185.698428][ T129] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.712764][ T129] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.734885][ T7542] XFS (loop2): Ending clean mount [ 185.755546][ T129] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.787440][ T7542] XFS (loop2): Quotacheck needed: Please wait. [ 185.815294][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.838650][ T129] hub 1-1:4.128: USB hub found [ 185.924149][ T7542] XFS (loop2): Quotacheck: Done. [ 186.042004][ T129] hub 1-1:4.128: 19 ports detected [ 186.058109][ T129] hub 1-1:4.128: Using single TT (err -22) [ 186.084562][ T129] hub 1-1:4.128: insufficient power available to use all downstream ports [ 186.140987][ T4280] XFS (loop2): Unmounting Filesystem [ 186.156615][ T7566] loop3: detected capacity change from 0 to 32768 [ 186.175032][ T7566] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1505 (7566) [ 186.254287][ T129] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 186.260934][ T129] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 186.275854][ T7566] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 186.352323][ T7566] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 186.375262][ T7566] BTRFS info (device loop3): enabling auto defrag [ 186.380656][ T129] usb 1-1: USB disconnect, device number 7 [ 186.386131][ T7566] BTRFS info (device loop3): force clearing of disk cache [ 186.454318][ T7566] BTRFS info (device loop3): ignoring data csums [ 186.460738][ T7566] BTRFS info (device loop3): turning on async discard [ 186.513757][ T7566] BTRFS info (device loop3): setting nodatacow, compression disabled [ 186.521927][ T7566] BTRFS info (device loop3): turning off async discard [ 186.564533][ T7566] BTRFS info (device loop3): disabling free space tree [ 186.705155][ T7603] loop1: detected capacity change from 0 to 2048 [ 186.717423][ T7603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.873094][ T7603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 186.949837][ T7566] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 186.980892][ T7603] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.1518: inline data xattr refers to an external xattr inode [ 187.075637][ T7603] EXT4-fs (loop1): Remounting filesystem read-only [ 187.309293][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 187.455086][ T7594] loop4: detected capacity change from 0 to 32768 [ 187.564788][ T7594] jfs_rename: dtInsert returned -EIO [ 188.479917][ T7671] loop0: detected capacity change from 0 to 512 [ 188.580171][ T7671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.655095][ T7671] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.851875][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 189.294349][ T7632] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.336936][ T7703] xt_TCPMSS: Only works on TCP SYN packets [ 189.515580][ T7632] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.531812][ T7632] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.560366][ T7632] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.579585][ T7632] usb 3-1: config 220 has no interface number 2 [ 189.586820][ T7632] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.601241][ T7632] usb 3-1: config 220 interface 0 has no altsetting 0 [ 189.608850][ T7632] usb 3-1: config 220 interface 76 has no altsetting 0 [ 189.629805][ T7632] usb 3-1: config 220 interface 1 has no altsetting 0 [ 189.668008][ T7713] device wlan0 entered promiscuous mode [ 189.674874][ T7632] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.695429][ T7632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.713792][ T7632] usb 3-1: Product: syz [ 189.718116][ T7632] usb 3-1: Manufacturer: syz [ 189.733026][ T7632] usb 3-1: SerialNumber: syz [ 189.933840][ T7631] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 189.968413][ T7632] usb 3-1: selecting invalid altsetting 0 [ 189.980568][ T7632] usb 3-1: selecting invalid altsetting 0 [ 190.004177][ T7632] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 190.024005][ T7632] usb 3-1: No valid video chain found. [ 190.069293][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'. [ 190.085121][ T7632] usb 3-1: selecting invalid altsetting 0 [ 190.091050][ T7632] usbtest: probe of 3-1:220.1 failed with error -22 [ 190.113973][ T7632] usb 3-1: USB disconnect, device number 7 [ 190.136545][ T7631] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.150387][ T7631] usb 2-1: config 0 has no interface number 0 [ 190.160920][ T7631] usb 2-1: config 0 interface 41 has no altsetting 0 [ 190.202313][ T7631] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 190.222092][ T7631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.242500][ T7631] usb 2-1: Product: syz [ 190.253077][ T7631] usb 2-1: Manufacturer: syz [ 190.258924][ T7631] usb 2-1: SerialNumber: syz [ 190.266153][ T7631] usb 2-1: config 0 descriptor?? [ 190.297861][ T7731] loop4: detected capacity change from 0 to 512 [ 190.369699][ T7731] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.388772][ T7731] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.482467][ T4316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.541257][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 190.699265][ T7727] loop3: detected capacity change from 0 to 32768 [ 190.718189][ T7631] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 190.735271][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.741018][ T7736] netlink: 'syz.2.1570': attribute type 27 has an invalid length. [ 190.764622][ T7631] CoreChips: probe of 2-1:0.41 failed with error -71 [ 190.772511][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 190.792825][ T7727] JBD2: Ignoring recovery information on journal [ 190.811303][ T7631] usb 2-1: USB disconnect, device number 8 [ 190.826762][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.846534][ T4316] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 190.860838][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.869852][ T4316] usb 1-1: Product: syz [ 190.875052][ T4316] usb 1-1: Manufacturer: syz [ 190.879880][ T4316] usb 1-1: SerialNumber: syz [ 190.886873][ T4316] usb 1-1: config 0 descriptor?? [ 190.981624][ T7727] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 190.986416][ T7740] netlink: 'syz.4.1571': attribute type 13 has an invalid length. [ 191.029337][ T7740] gretap0: refused to change device tx_queue_len [ 191.042603][ T7740] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 191.094697][ T7727] (syz.3.1566,7727,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 191.145108][ T7727] (syz.3.1566,7727,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 191.161013][ T7631] usb 1-1: USB disconnect, device number 8 [ 191.168559][ T7727] (syz.3.1566,7727,0):ocfs2_mknod:502 ERROR: status = -117 [ 191.344995][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 191.877468][ T7765] netlink: 'syz.1.1583': attribute type 21 has an invalid length. [ 192.217192][ T7778] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 192.238167][ T7778] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 192.536944][ T7791] netlink: 'syz.4.1595': attribute type 2 has an invalid length. [ 192.576745][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 192.600284][ T7794] netlink: 'syz.1.1598': attribute type 12 has an invalid length. [ 192.963739][ T7806] loop3: detected capacity change from 0 to 4096 [ 193.064599][ T7806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.123759][ T4359] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.242829][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 193.333876][ T4359] usb 2-1: Using ep0 maxpacket: 16 [ 193.341185][ T4359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.385898][ T4359] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.457122][ T4359] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 193.487044][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.507270][ T4359] usb 2-1: Product: syz [ 193.520227][ T4359] usb 2-1: Manufacturer: syz [ 193.534721][ T4359] usb 2-1: SerialNumber: syz [ 193.574371][ T4359] r8152-cfgselector 2-1: config 0 descriptor?? [ 193.672665][ T7828] loop0: detected capacity change from 0 to 4096 [ 193.706508][ T7828] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.763570][ T7828] NILFS (loop0): mounting unchecked fs [ 193.770146][ T7828] NILFS (loop0): recovery required for readonly filesystem [ 193.817554][ T4359] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 193.823900][ T7828] NILFS (loop0): write access will be enabled during recovery [ 193.926707][ T66] usb 2-1: config 0 descriptor?? [ 193.953438][ T7828] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 193.977640][ T4362] udevd[4362]: incorrect nilfs2 checksum on /dev/loop0 [ 194.037932][ T66] usb 2-1: can't set config #0, error -71 [ 194.044747][ T7632] usb 2-1: USB disconnect, device number 9 [ 194.067492][ T7828] NILFS (loop0): the device already has a read-only mount. [ 194.129122][ T7840] team0: Port device team_slave_1 removed [ 194.146059][ T7840] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 194.167244][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173833][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.213848][ T4359] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.243073][ T4350] udevd[4350]: incorrect nilfs2 checksum on /dev/loop0 [ 194.423840][ T4359] usb 5-1: Using ep0 maxpacket: 32 [ 194.435596][ T4359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.463962][ T4316] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.473958][ T4359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.484928][ T4359] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.494944][ T4359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.514362][ T4359] usb 5-1: config 0 descriptor?? [ 194.521861][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 194.527951][ T4359] hub 5-1:0.0: USB hub found [ 194.676171][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.695254][ T4316] usb 3-1: config 1 has an invalid interface number: 31 but max is 1 [ 194.713928][ T4316] usb 3-1: config 1 has no interface number 1 [ 194.732332][ T4359] hub 5-1:0.0: 1 port detected [ 194.738092][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.741535][ T4316] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.779582][ T4316] usb 3-1: too many endpoints for config 1 interface 31 altsetting 99: 101, using maximum allowed: 30 [ 194.811289][ T4316] usb 3-1: config 1 interface 31 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 194.835018][ T4316] usb 3-1: config 1 interface 0 has no altsetting 0 [ 194.841719][ T4316] usb 3-1: config 1 interface 31 has no altsetting 0 [ 194.882064][ T4316] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 194.911717][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.911992][ T7859] loop1: detected capacity change from 0 to 64 [ 194.928227][ T4316] usb 3-1: Product: syz [ 194.938752][ T4359] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 194.945755][ T4316] usb 3-1: Manufacturer: syz [ 194.950410][ T4316] usb 3-1: SerialNumber: syz [ 194.963762][ T4359] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 194.976669][ T14] usb 1-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 194.988754][ T4359] usbhid 5-1:0.0: can't add hid device: -71 [ 194.997158][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 195.004061][ T4359] usbhid: probe of 5-1:0.0 failed with error -71 [ 195.035393][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.054699][ T4359] usb 5-1: USB disconnect, device number 4 [ 195.082714][ T14] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 195.123992][ T14] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 195.132179][ T14] usb 1-1: Product: syz [ 195.164417][ T14] usb 1-1: Manufacturer: syz [ 195.169106][ T14] usb 1-1: SerialNumber: syz [ 195.207207][ T4316] smsusb:smsusb_probe: board id=8, interface number 0 [ 195.224761][ T14] usb 1-1: config 0 descriptor?? [ 195.245541][ T4316] smsusb:smsusb_probe: board id=8, interface number 31 [ 195.264750][ T4316] usb 3-1: USB disconnect, device number 8 [ 195.438117][ T7868] netlink: 'syz.3.1634': attribute type 1 has an invalid length. [ 195.449530][ T7868] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1634'. [ 195.641905][ T7873] netlink: 'syz.4.1636': attribute type 1 has an invalid length. [ 195.684810][ T5381] usb 1-1: USB disconnect, device number 9 [ 196.276786][ T7897] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 196.489948][ T4316] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 196.685965][ T4316] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 196.703917][ T4316] usb 3-1: config 8 has no interface number 0 [ 196.730853][ T4316] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 196.762659][ T4316] usb 3-1: config 8 interface 177 has no altsetting 0 [ 196.786089][ T4316] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 196.838381][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.883954][ T7895] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.124725][ T4316] usb 3-1: string descriptor 0 read error: -71 [ 197.138767][ C1] ir_toy 3-1:8.177: out urb status: -71 [ 197.183757][ T4315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.201713][ T7894] loop1: detected capacity change from 0 to 40427 [ 197.259411][ T7894] F2FS-fs (loop1): invalid crc value [ 197.315989][ T7894] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.373706][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 197.380789][ T4315] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 197.425234][ T4315] usb 4-1: config 0 has no interface number 0 [ 197.435932][ T4315] usb 4-1: config 0 interface 7 has no altsetting 0 [ 197.470470][ T4315] usb 4-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 197.500211][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.517787][ T4315] usb 4-1: Product: syz [ 197.522145][ T4315] usb 4-1: Manufacturer: syz [ 197.559443][ T4315] usb 4-1: SerialNumber: syz [ 197.559943][ T7894] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.585976][ T4315] usb 4-1: config 0 descriptor?? [ 197.684113][ T4316] ir_toy 3-1:8.177: could not write reset command: -110 [ 197.704040][ T4316] ir_toy: probe of 3-1:8.177 failed with error -110 [ 197.738931][ T4316] usb 3-1: USB disconnect, device number 9 [ 197.818951][ T4315] usb 4-1: bad CDC descriptors [ 197.826896][ T4315] usb 4-1: bad CDC descriptors [ 197.832216][ T4315] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 197.920172][ T4315] usb 4-1: USB disconnect, device number 9 [ 198.073884][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'. [ 198.327625][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 199.047502][ T7970] loop2: detected capacity change from 0 to 4096 [ 199.684005][ T7997] IPv6: sit1: Disabled Multicast RS [ 199.727154][ T26] audit: type=1326 audit(1779322055.111:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.1.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63f59ce59 code=0x7ffc0000 [ 199.810108][ T26] audit: type=1326 audit(1779322055.131:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.1.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63f59ce59 code=0x7ffc0000 [ 199.891635][ T26] audit: type=1326 audit(1779322055.131:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.1.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7ff63f59ce59 code=0x7ffc0000 [ 199.983736][ T26] audit: type=1326 audit(1779322055.131:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.1.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63f59ce59 code=0x7ffc0000 [ 200.112946][ T8013] libceph: resolve '0' (ret=-3): failed [ 200.113762][ T26] audit: type=1326 audit(1779322055.131:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7998 comm="syz.1.1697" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63f59ce59 code=0x7ffc0000 [ 200.572469][ T8031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.829867][ T8040] netlink: 'syz.2.1718': attribute type 30 has an invalid length. [ 201.100203][ T8053] loop1: detected capacity change from 0 to 1024 [ 201.333909][ T4316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.363893][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.370000][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.376258][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 201.382313][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 201.463504][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.507587][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.534772][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.547927][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.575173][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.590565][ T4316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.603565][ T4316] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.646102][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.669826][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 201.671186][ T4316] usb 3-1: config 0 descriptor?? [ 201.710572][ T4316] hub 3-1:0.0: USB hub found [ 201.903017][ T8075] affs: No valid root block on device nbd0 [ 201.923281][ T4316] hub 3-1:0.0: 9 ports detected [ 201.928870][ T4316] hub 3-1:0.0: insufficient power available to use all downstream ports [ 202.131132][ T4316] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 202.144872][ T4316] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 202.231047][ T4316] usb 3-1: USB disconnect, device number 10 [ 203.664917][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1768'. [ 204.330587][ T8166] loop1: detected capacity change from 0 to 256 [ 204.417699][ T8166] FAT-fs (loop1): Directory bread(block 64) failed [ 204.453162][ T8166] FAT-fs (loop1): Directory bread(block 65) failed [ 204.480608][ T8166] FAT-fs (loop1): Directory bread(block 66) failed [ 204.543672][ T8166] FAT-fs (loop1): Directory bread(block 67) failed [ 204.550373][ T8166] FAT-fs (loop1): Directory bread(block 68) failed [ 204.653909][ T8166] FAT-fs (loop1): Directory bread(block 69) failed [ 204.704665][ T8166] FAT-fs (loop1): Directory bread(block 70) failed [ 204.752273][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.764437][ T8166] FAT-fs (loop1): Directory bread(block 71) failed [ 204.771123][ T8166] FAT-fs (loop1): Directory bread(block 72) failed [ 204.834385][ T8176] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.853184][ T8166] FAT-fs (loop1): Directory bread(block 73) failed [ 205.088578][ T8186] loop4: detected capacity change from 0 to 256 [ 205.550599][ T8198] (unnamed net_device) (uninitialized): (slave netdevsim1): Device is not bonding slave [ 205.591258][ T8198] (unnamed net_device) (uninitialized): option active_slave: invalid value (netdevsim1) [ 205.623814][ T8201] loop0: detected capacity change from 0 to 64 [ 206.022064][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1805'. [ 206.790040][ T8231] loop1: detected capacity change from 0 to 8192 [ 206.864364][ T8231] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.877802][ T8231] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 206.887928][ T8231] REISERFS (device loop1): using ordered data mode [ 206.894772][ T8231] reiserfs: using flush barriers [ 206.901821][ T8231] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.918593][ T8231] REISERFS (device loop1): checking transaction log (loop1) [ 207.208206][ T8231] REISERFS (device loop1): Using tea hash to sort names [ 207.221356][ T8255] tmpfs: Bad value for 'mpol' [ 207.230130][ T8231] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 207.439921][ T8262] netlink: 'syz.4.1825': attribute type 2 has an invalid length. [ 207.697058][ T8270] loop0: detected capacity change from 0 to 128 [ 208.016649][ T26] audit: type=1326 audit(1779322063.401:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.2.1834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 208.040607][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.129767][ T26] audit: type=1326 audit(1779322063.431:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.2.1834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 208.204523][ T26] audit: type=1326 audit(1779322063.431:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.2.1834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 208.228476][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.341891][ T26] audit: type=1326 audit(1779322063.431:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.2.1834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 208.373786][ T5381] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.437222][ T26] audit: type=1326 audit(1779322063.431:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.2.1834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 208.461173][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.579363][ T5381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.609903][ T5381] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 208.647914][ T5381] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 208.671459][ T5381] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 208.701411][ T5381] usb 1-1: config 129 has no interface number 0 [ 208.718914][ T5381] usb 1-1: config 129 has no interface number 1 [ 208.730799][ T26] audit: type=1400 audit(1779322064.111:61): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8297 comm="syz.2.1843" [ 208.748835][ T5381] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 208.798104][ T5381] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 208.838752][ T5381] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 208.882558][ T5381] usb 1-1: config 129 interface 135 has no altsetting 0 [ 208.910651][ T5381] usb 1-1: config 129 interface 5 has no altsetting 0 [ 208.939815][ T5381] usb 1-1: string descriptor 0 read error: -22 [ 208.962733][ T5381] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 208.990506][ T5381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.028651][ T5381] usb 1-1: MIDIStreaming interface descriptor not found [ 209.260378][ T8286] loop1: detected capacity change from 0 to 32768 [ 209.346242][ T5384] usb 1-1: USB disconnect, device number 10 [ 209.351205][ T8286] XFS (loop1): Mounting V5 Filesystem [ 209.479784][ T8286] XFS (loop1): Ending clean mount [ 209.731440][ T4272] XFS (loop1): Unmounting Filesystem [ 210.937088][ T8358] loop2: detected capacity change from 0 to 2048 [ 211.029168][ T8365] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.081230][ T8358] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446744072317042688, rec_len=65535, name_len=255 [ 211.185796][ T8358] Remounting filesystem read-only [ 211.935276][ T8401] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 212.283304][ T8415] netlink: 'syz.3.1895': attribute type 49 has an invalid length. [ 212.301912][ T8414] Cannot find del_set index 4 as target [ 212.584245][ T8415] device ip6gretap0 entered promiscuous mode [ 212.635978][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'. [ 212.762634][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 212.976086][ T8439] netlink: 'syz.0.1906': attribute type 13 has an invalid length. [ 214.138735][ T8481] loop3: detected capacity change from 0 to 2048 [ 214.202695][ T8481] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.340942][ T8491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.402046][ T8481] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 214.469800][ T8481] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 214.505425][ T8481] Remounting filesystem read-only [ 214.523787][ T8481] NILFS (loop3): error -5 truncating bmap (ino=15) [ 214.585640][ T8481] syz.3.1924: attempt to access beyond end of device [ 214.585640][ T8481] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 214.674707][ T8481] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 214.909066][ T4271] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 216.083530][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1948'. [ 216.275463][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 216.575882][ T8561] MTD: Couldn't look up './bus': -15 [ 216.756502][ T8565] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.793697][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 216.985932][ T14] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 217.008194][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.053596][ T14] usb 2-1: config 0 descriptor?? [ 217.348582][ T8590] dlm: Unknown command passed to DLM device : 8 [ 217.348582][ T8590] [ 217.376069][ T8594] loop0: detected capacity change from 0 to 512 [ 217.444492][ T8594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.478032][ T14] [drm:udl_init] *ERROR* Selecting channel failed [ 217.501123][ T8594] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.521755][ T14] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 217.529554][ T14] [drm] Initialized udl on minor 2 [ 217.538611][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 217.549337][ T14] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 217.560373][ T14] usb 2-1: USB disconnect, device number 10 [ 217.575940][ T5382] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 217.602122][ T5382] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 217.618926][ T5382] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 217.804653][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 218.899279][ T8643] device wg1 entered promiscuous mode [ 219.207017][ T8657] xt_l2tp: v2 sid > 0xffff: 262144 [ 219.620296][ T8676] loop4: detected capacity change from 0 to 2048 [ 219.697995][ T8676] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 219.749976][ T8676] FAT-fs (loop4): bogus number of reserved sectors [ 219.767850][ T8676] FAT-fs (loop4): Can't find a valid FAT filesystem [ 219.809779][ T8682] overlayfs: conflicting options: nfs_export=on,index=off [ 220.062582][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 220.118990][ T8693] loop4: detected capacity change from 0 to 256 [ 220.488500][ T8702] loop0: detected capacity change from 0 to 8 [ 220.564206][ T8702] SQUASHFS error: zlib decompression failed, data probably corrupt [ 220.593746][ T8702] SQUASHFS error: Failed to read block 0x9b: -5 [ 220.610331][ T8702] SQUASHFS error: Unable to read metadata cache entry [99] [ 220.644320][ T8702] SQUASHFS error: Unable to read inode 0x127 [ 220.803541][ T8713] loop1: detected capacity change from 0 to 2048 [ 220.889669][ T8713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.241588][ T8721] loop4: detected capacity change from 0 to 4096 [ 221.353853][ T8721] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 221.494434][ T8735] loop3: detected capacity change from 0 to 128 [ 221.519655][ T8735] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 221.538260][ T8737] SET target dimension over the limit! [ 221.585189][ T8735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.652181][ T8735] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 221.753092][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 222.447039][ T8769] usb usb1: check_ctrlrecip: process 8769 (syz.1.2052) requesting ep 01 but needs 81 [ 222.477239][ T8769] usb usb1: usbfs: process 8769 (syz.1.2052) did not claim interface 0 before use [ 222.919769][ T8788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.965093][ T4316] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.163781][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 223.184511][ T4316] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 223.192784][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.246411][ T4316] usb 1-1: config 0 has no interface number 0 [ 223.258432][ T4316] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 223.283715][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.303697][ T4316] usb 1-1: Product: syz [ 223.308287][ T4316] usb 1-1: Manufacturer: syz [ 223.360640][ T4316] usb 1-1: SerialNumber: syz [ 223.386838][ T4316] usb 1-1: config 0 descriptor?? [ 223.474053][ T8808] loop4: detected capacity change from 0 to 128 [ 223.531400][ T8808] EXT4-fs (loop4): Test dummy encryption mode enabled [ 223.597239][ T4316] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 223.631460][ T4316] usb 1-1: No valid video chain found. [ 223.649866][ T8808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 223.673852][ T8808] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.811589][ T4316] usb 1-1: USB disconnect, device number 11 [ 223.908874][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 223.916951][ T8823] loop1: detected capacity change from 0 to 64 [ 224.074550][ T8829] loop4: detected capacity change from 0 to 16 [ 224.126682][ T4350] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.423676][ T4316] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.603704][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 224.605679][ T4316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.606765][ T4316] usb 5-1: config 6 has an invalid interface number: 35 but max is 1 [ 224.606792][ T4316] usb 5-1: config 6 has an invalid descriptor of length 163, skipping remainder of the config [ 224.606813][ T4316] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 224.606835][ T4316] usb 5-1: config 6 has no interface number 0 [ 224.606858][ T4316] usb 5-1: too many endpoints for config 6 interface 35 altsetting 230: 86, using maximum allowed: 30 [ 224.606892][ T4316] usb 5-1: config 6 interface 35 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 224.606921][ T4316] usb 5-1: config 6 interface 35 has no altsetting 0 [ 224.609011][ T4316] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 224.609040][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.609062][ T4316] usb 5-1: Product: syz [ 224.609077][ T4316] usb 5-1: Manufacturer: syz [ 224.609093][ T4316] usb 5-1: SerialNumber: syz [ 224.819615][ T4316] ums-jumpshot 5-1:6.35: USB Mass Storage device detected [ 224.833165][ T4316] ums-jumpshot 5-1:6.35: Quirks match for vid 05dc pid 0001: 2 [ 224.908494][ T4316] usb 5-1: USB disconnect, device number 5 [ 224.994800][ T8859] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 225.143902][ T26] audit: type=1400 audit(1779322080.531:62): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=8861 comm="syz.3.2095" [ 225.749488][ T8881] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2104'. [ 226.018756][ T8889] loop4: detected capacity change from 0 to 4096 [ 226.064733][ T8889] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 226.119923][ T8894] loop1: detected capacity change from 0 to 4096 [ 226.138341][ T8894] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 226.170679][ T8889] ntfs: volume version 3.1. [ 226.220065][ T8889] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 226.312627][ T8889] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 226.331272][ T8894] ntfs3: loop1: failed to convert "c46c" to iso8859-14 [ 226.823724][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 226.889900][ T8914] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.913945][ T4316] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.019446][ T14] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 227.037827][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.061688][ T14] usb 1-1: Product: syz [ 227.076174][ T14] usb 1-1: Manufacturer: syz [ 227.090818][ T14] usb 1-1: SerialNumber: syz [ 227.108596][ T14] usb 1-1: config 0 descriptor?? [ 227.124085][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 227.131587][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.135665][ T14] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 227.170961][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.202348][ T4316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.236149][ T4316] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.253740][ T8921] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.2123'. [ 227.273687][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.300429][ T4316] usb 5-1: config 0 descriptor?? [ 227.732500][ T14] gspca_sunplus: reg_w_riv err -71 [ 227.743009][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.744178][ T14] sunplus: probe of 1-1:0.0 failed with error -71 [ 227.763910][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.776553][ T14] usb 1-1: USB disconnect, device number 12 [ 227.790435][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.808210][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.827740][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.845152][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.852528][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.864285][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.871769][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.884223][ T4316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 227.904898][ T4316] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input14 [ 227.946526][ T8939] netlink: 'syz.3.2132': attribute type 10 has an invalid length. [ 227.991400][ T8939] team0: Device wg1 is of different type [ 228.029375][ T4316] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 228.080943][ T4316] usb 5-1: USB disconnect, device number 6 [ 228.105507][ T8939] syz.3.2132 (8939) used greatest stack depth: 20432 bytes left [ 228.173095][ T8943] loop2: detected capacity change from 0 to 512 [ 228.188446][ T8943] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.247914][ T8943] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 228.635897][ T8946] fido_id[8946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 228.959935][ T8964] loop1: detected capacity change from 0 to 512 [ 229.086130][ T8964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.110482][ T8964] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.384732][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 230.510529][ T9027] sock: sock_timestamping_bind_phc: sock not bind to device [ 230.562533][ T9019] loop2: detected capacity change from 0 to 4096 [ 230.587186][ T9019] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 230.705438][ T9019] ntfs3: loop2: failed to convert "c46c" to cp857 [ 230.729833][ T7632] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.952622][ T7632] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.979316][ T7632] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 231.020434][ T7632] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 231.060366][ T7632] usb 1-1: string descriptor 0 read error: -22 [ 231.080170][ T7632] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 231.114028][ T7632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.323801][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2173'. [ 231.365697][ T9048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2173'. [ 231.582896][ T7632] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 231.601530][ T7632] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 231.663390][ T7632] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 231.694066][ T7632] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 231.752302][ T7632] usb 1-1: USB disconnect, device number 13 [ 232.098501][ T9074] loop4: detected capacity change from 0 to 128 [ 232.135958][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.180936][ T9074] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 232.277352][ T26] audit: type=1326 audit(1779322087.661:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.426449][ T26] audit: type=1326 audit(1779322087.701:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.492345][ T9074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.528609][ T26] audit: type=1326 audit(1779322087.701:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.553822][ T9074] ext2 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.564867][ T26] audit: type=1326 audit(1779322087.701:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.612142][ T9086] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 232.645020][ T9086] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 232.691761][ T9085] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 232.718371][ T26] audit: type=1326 audit(1779322087.701:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.742195][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.799208][ T26] audit: type=1326 audit(1779322087.701:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.893706][ T26] audit: type=1326 audit(1779322087.701:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.2.2185" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 232.926212][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 233.102460][ T9095] loop3: detected capacity change from 0 to 1024 [ 233.121493][ T9099] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 233.150610][ T9069] loop1: detected capacity change from 0 to 40427 [ 233.204002][ T9099] team0: Device wg1 is of different type [ 233.222147][ T9069] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 233.262579][ T9069] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 233.327671][ T9069] F2FS-fs (loop1): invalid crc value [ 233.406989][ T9069] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 233.449885][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 233.483662][ T46] hfsplus: b-tree write err: -5, ino 25 [ 233.491557][ T46] hfsplus: b-tree write err: -5, ino 4 [ 233.497994][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2193'. [ 233.519743][ T46] hfsplus: b-tree write err: -5, ino 2 [ 233.553865][ T9108] netlink: 'syz.4.2193': attribute type 14 has an invalid length. [ 233.589826][ T9108] netlink: 'syz.4.2193': attribute type 13 has an invalid length. [ 233.720132][ T9114] loop3: detected capacity change from 0 to 1024 [ 233.747602][ T9069] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 233.773565][ T9069] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 234.064246][ T46] hfsplus: b-tree write err: -5, ino 20 [ 234.172584][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 235.072961][ T9144] loop1: detected capacity change from 0 to 128 [ 235.244319][ T9132] loop0: detected capacity change from 0 to 32768 [ 235.294342][ T9130] loop2: detected capacity change from 0 to 32768 [ 235.346040][ T9146] loop4: detected capacity change from 0 to 1024 [ 235.365353][ T9132] JBD2: Unknown checksum type [ 235.370116][ T9132] (syz.0.2203,9132,0):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 235.383729][ T9132] (syz.0.2203,9132,1):ocfs2_check_volume:2420 ERROR: status = -22 [ 235.391670][ T9132] (syz.0.2203,9132,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 235.405605][ T9130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2201 (9130) [ 235.434072][ T9130] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.481713][ T9130] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 235.500620][ T9146] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 235.519173][ T9132] (syz.0.2203,9132,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 235.543811][ T9130] BTRFS info (device loop2): using free space tree [ 235.619710][ T9132] (syz.0.2203,9132,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 235.693915][ T9132] exFAT-fs (loop0): invalid boot record signature [ 235.718013][ T9160] loop3: detected capacity change from 0 to 64 [ 235.735264][ T9132] exFAT-fs (loop0): failed to read boot sector [ 235.744620][ T9132] exFAT-fs (loop0): failed to recognize exfat type [ 235.893937][ T9130] BTRFS info (device loop2): enabling ssd optimizations [ 236.181331][ T4280] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.317720][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 236.389717][ T4359] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.593131][ T4359] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 236.628776][ T4359] usb 5-1: config 0 has no interface number 0 [ 236.653674][ T4359] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.683800][ T4359] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 236.703237][ T4359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.733767][ T4359] usb 5-1: Product: syz [ 236.738015][ T4359] usb 5-1: Manufacturer: syz [ 236.742650][ T4359] usb 5-1: SerialNumber: syz [ 236.750910][ T9187] nbd: must specify a device to reconfigure [ 236.794421][ T4359] usb 5-1: config 0 descriptor?? [ 236.917408][ T4359] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 237.048273][ T4359] usb 5-1: USB disconnect, device number 7 [ 237.067084][ T4359] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 237.098080][ T9193] loop0: detected capacity change from 0 to 16 [ 237.119981][ T9193] erofs: (device loop0): mounted with root inode @ nid 36. [ 237.441415][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 237.450848][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 237.461134][ T9203] netlink: 'syz.3.2226': attribute type 14 has an invalid length. [ 237.470666][ T9203] netlink: 'syz.3.2226': attribute type 13 has an invalid length. [ 237.651960][ T9205] loop0: detected capacity change from 0 to 256 [ 237.663709][ T14] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 237.718051][ T9205] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 237.759005][ T9205] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 237.785752][ T9205] exFAT-fs (loop0): failed to initialize root inode [ 237.880346][ T14] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 237.901996][ T14] usb 3-1: config 0 has no interface number 0 [ 237.915741][ T14] usb 3-1: config 0 interface 231 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.995125][ T14] usb 3-1: config 0 interface 231 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.026233][ T14] usb 3-1: config 0 interface 231 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 238.078145][ T14] usb 3-1: config 0 interface 231 has no altsetting 0 [ 238.113692][ T14] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 238.122905][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.185963][ T14] usb 3-1: config 0 descriptor?? [ 238.400687][ T9225] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2237'. [ 238.462873][ T9217] infiniband syg0: set active [ 238.468959][ T9217] infiniband syg0: added team0 [ 238.555665][ T9217] RDS/IB: syg0: added [ 238.561046][ T9217] smc: adding ib device syg0 with port count 1 [ 238.619737][ T9217] smc: ib device syg0 port 1 has pnetid [ 238.646816][ T14] uclogic 0003:28BD:1903.0002: interface is invalid, ignoring [ 238.764724][ T9219] loop4: detected capacity change from 0 to 32768 [ 238.806409][ T9219] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 238.819537][ T9219] JBD2: Ignoring recovery information on journal [ 238.874858][ T4359] usb 3-1: USB disconnect, device number 11 [ 238.951000][ T9219] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 239.062619][ T9219] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 393248 [ 239.100241][ T9219] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 239.121302][ T9219] OCFS2: File system is now read-only. [ 239.133679][ T9219] (syz.4.2234,9219,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 239.152855][ T9219] (syz.4.2234,9219,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 239.172666][ T9219] (syz.4.2234,9219,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 239.194426][ T9219] (syz.4.2234,9219,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 239.212766][ T9219] (syz.4.2234,9219,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 239.231411][ T9219] (syz.4.2234,9219,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 239.250065][ T9219] (syz.4.2234,9219,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 239.269200][ T9219] (syz.4.2234,9219,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 239.288466][ T9219] (syz.4.2234,9219,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 239.308220][ T9219] (syz.4.2234,9219,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 239.339486][ T9219] (syz.4.2234,9219,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 239.358573][ T9219] (syz.4.2234,9219,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 239.369823][ T9219] (syz.4.2234,9219,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 239.379359][ T9219] (syz.4.2234,9219,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 239.388819][ T9219] (syz.4.2234,9219,0):ocfs2_mknod:357 ERROR: status = -30 [ 239.397698][ T9219] (syz.4.2234,9219,0):ocfs2_mknod:502 ERROR: status = -30 [ 239.405343][ T9219] (syz.4.2234,9219,0):ocfs2_mkdir:659 ERROR: status = -30 [ 239.513506][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 240.041697][ T9250] loop2: detected capacity change from 0 to 64 [ 240.082514][ T9250] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 240.264428][ T9253] loop0: detected capacity change from 0 to 1024 [ 240.649057][ T9258] loop3: detected capacity change from 0 to 8 [ 241.283788][ T4279] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 241.292773][ T4279] Bluetooth: hci3: Injecting HCI hardware error event [ 241.303516][ T4287] Bluetooth: hci3: hardware error 0x00 [ 241.653846][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 241.843736][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 241.869756][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.905030][ T14] usb 4-1: config 4 interface 0 has no altsetting 0 [ 241.917545][ T14] usb 4-1: string descriptor 0 read error: -22 [ 241.933723][ T14] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 241.962057][ T14] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 242.009912][ T14] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 242.065282][ T14] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 242.095830][ T14] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 242.113734][ T14] usb 4-1: media controller created [ 242.179780][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.291853][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 242.354526][ T14] usb 4-1: USB disconnect, device number 10 [ 242.402610][ T9308] loop2: detected capacity change from 0 to 4096 [ 242.595950][ T4368] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.761167][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2277'. [ 242.795527][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.834623][ T4368] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.867918][ T4368] usb 5-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 242.887700][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.959194][ T4368] usb 5-1: Product: syz [ 242.973735][ T4368] usb 5-1: Manufacturer: syz [ 242.978449][ T4368] usb 5-1: SerialNumber: syz [ 243.216877][ T9331] Zero length message leads to an empty skb [ 243.238648][ T4368] usb 5-1: unit 5 not found! [ 243.243369][ T4368] usb 5-1: unit 3 not found! [ 243.291790][ T4368] usb 5-1: USB disconnect, device number 8 [ 243.523927][ T4287] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 243.585200][ T9068] udevd[9068]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.923617][ T9356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2294'. [ 244.725232][ T9383] loop0: detected capacity change from 0 to 128 [ 244.791655][ T9383] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 244.849182][ T9383] hpfs: filesystem error: improperly stopped [ 244.863206][ T9383] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 244.880446][ T9383] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 244.901094][ T9383] hpfs: You really don't want any checks? You are crazy... [ 244.917835][ T9383] hpfs: hpfs_map_sector(): read error [ 244.943808][ T9383] hpfs: code page support is disabled [ 244.976700][ T9383] hpfs: hpfs_map_4sectors(): unaligned read [ 244.983003][ T9383] hpfs: hpfs_map_4sectors(): unaligned read [ 245.019472][ T9383] hpfs: filesystem error: unable to find root dir [ 245.091718][ T9369] loop4: detected capacity change from 0 to 32768 [ 245.266180][ T9371] loop2: detected capacity change from 0 to 32768 [ 245.278288][ T9379] loop1: detected capacity change from 0 to 32768 [ 245.340043][ T9371] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2302 (9371) [ 245.366239][ T9379] JBD2: Ignoring recovery information on journal [ 245.493815][ T9371] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 245.553763][ T9371] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 245.584400][ T9371] BTRFS info (device loop2): using free space tree [ 245.667293][ T9379] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 245.898963][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 245.933793][ T4368] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.969520][ T9371] BTRFS info (device loop2): enabling ssd optimizations [ 246.123924][ T5384] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.135524][ T4368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.153862][ T4368] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.203549][ T4368] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.212743][ T4368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.231929][ T4368] usb 4-1: SerialNumber: syz [ 246.306372][ T4280] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 246.336554][ T5384] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 246.345719][ T5384] usb 5-1: config 0 has no interface number 0 [ 246.351930][ T5384] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 246.364314][ T5384] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.415598][ T5384] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 246.431366][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.443134][ T5384] usb 5-1: Product: syz [ 246.453241][ T5384] usb 5-1: Manufacturer: syz [ 246.466934][ T4368] usb 4-1: 0:2 : does not exist [ 246.471939][ T4368] usb 4-1: unit 255 not found! [ 246.483539][ T5384] usb 5-1: SerialNumber: syz [ 246.507386][ T5384] usb 5-1: config 0 descriptor?? [ 246.513081][ T9405] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 246.525713][ T5384] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 246.555773][ T4368] usb 4-1: USB disconnect, device number 11 [ 246.574383][ T5384] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 246.589901][ T9081] udevd[9081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.760883][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 246.988296][ T7] usb 5-1: USB disconnect, device number 9 [ 247.012158][ T7] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 247.050299][ T7] cyberjack 5-1:0.69: device disconnected [ 247.646335][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'. [ 247.947498][ T9461] loop0: detected capacity change from 0 to 1024 [ 248.230112][ T9469] Unsupported ieee802154 address type: 0 [ 248.293701][ T4316] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.424833][ T9473] loop2: detected capacity change from 0 to 1024 [ 248.460049][ T9475] loop0: detected capacity change from 0 to 2048 [ 248.486809][ T9473] hfsplus: bad catalog entry type [ 248.497801][ T4316] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.506166][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.526890][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.548825][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.571634][ T4316] usb 5-1: Product: syz [ 248.579707][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.591227][ T4316] usb 5-1: Manufacturer: syz [ 248.620228][ T4316] usb 5-1: SerialNumber: syz [ 248.654417][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.672117][ T4316] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 248.696562][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.707951][ T11] hfsplus: b-tree write err: -5, ino 25 [ 248.728099][ T11] hfsplus: b-tree write err: -5, ino 4 [ 248.739272][ T9457] loop3: detected capacity change from 0 to 32768 [ 248.749673][ T9475] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 248.758242][ T11] hfsplus: b-tree write err: -5, ino 2 [ 248.772985][ T4316] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 248.812685][ T9475] UDF-fs: Scanning with blocksize 512 failed [ 248.852776][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.926883][ T9475] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.946791][ T9457] ERROR: (device loop3): diWrite: ixpxd invalid [ 248.946791][ T9457] [ 249.000713][ T9475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.027171][ T9457] ERROR: (device loop3): remounting filesystem as read-only [ 249.073249][ T9457] ERROR: (device loop3): txCommit: [ 249.073249][ T9457] [ 249.404768][ T9423] usb 5-1: USB disconnect, device number 10 [ 249.542077][ T9485] loop2: detected capacity change from 0 to 8192 [ 249.552047][ T9491] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 249.573403][ T9491] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 249.586862][ T9485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 249.594387][ T9491] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 249.614719][ T9491] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 249.621488][ T9491] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 249.629130][ T9491] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 249.636153][ T9491] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 249.642729][ T9491] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 249.650033][ T9491] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 249.656910][ T9491] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 249.664082][ T9491] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 249.670738][ T9491] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 249.677961][ T9491] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 249.684868][ T9491] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 249.692529][ T9485] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 249.743906][ T9485] REISERFS (device loop2): using ordered data mode [ 249.769981][ T9485] reiserfs: using flush barriers [ 249.813688][ T9485] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.843785][ T4316] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 249.861115][ T4316] ath9k_htc: Failed to initialize the device [ 249.887759][ T9423] usb 5-1: ath9k_htc: USB layer deinitialized [ 249.913459][ T9494] loop0: detected capacity change from 0 to 1024 [ 249.934952][ T9485] REISERFS (device loop2): checking transaction log (loop2) [ 249.974033][ T9494] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 250.354509][ T9485] REISERFS (device loop2): Using tea hash to sort names [ 250.378515][ T9485] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 250.899651][ T9518] loop1: detected capacity change from 0 to 4096 [ 250.957121][ T9518] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 251.125763][ T9518] ntfs: volume version 3.1. [ 251.406038][ T1261] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 251.726511][ T9514] loop4: detected capacity change from 0 to 32768 [ 251.856099][ T9514] XFS (loop4): Mounting V5 Filesystem [ 251.957971][ T9514] XFS (loop4): Starting recovery (logdev: internal) [ 251.973827][ T9423] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 252.128700][ T9514] XFS (loop4): Ending recovery (logdev: internal) [ 252.174688][ T9423] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.202781][ T9423] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 252.224598][ T9423] usb 1-1: can't read configurations, error -71 [ 252.449999][ T4283] XFS (loop4): Unmounting Filesystem [ 252.832237][ T4359] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.868391][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 252.893121][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 253.060220][ T4359] usb 3-1: Using ep0 maxpacket: 32 [ 253.068339][ T4359] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.093707][ T4359] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.122523][ T4359] usb 3-1: config 0 interface 0 has no altsetting 0 [ 253.136594][ T4359] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 253.163666][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.192705][ T4359] usb 3-1: Product: syz [ 253.199060][ T4359] usb 3-1: Manufacturer: syz [ 253.209434][ T4359] usb 3-1: SerialNumber: syz [ 253.230659][ T4359] usb 3-1: config 0 descriptor?? [ 253.600769][ T9594] loop0: detected capacity change from 0 to 1024 [ 253.653448][ T4359] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 253.805468][ T9596] loop1: detected capacity change from 0 to 2048 [ 253.861267][ T4359] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 253.881323][ T4359] gs_usb: probe of 3-1:0.0 failed with error -71 [ 253.932803][ T9596] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 253.959452][ T9602] loop0: detected capacity change from 0 to 64 [ 253.969535][ T9596] System zones: 0-4 [ 253.977876][ T9596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 253.984280][ T4359] usb 3-1: USB disconnect, device number 12 [ 253.992640][ T9596] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.018800][ T9596] fs-verity: sha256 using implementation "sha256-avx2" [ 254.028240][ T9596] fs-verity (loop1, inode 18): fs-verity keyring is empty, rejecting signed file! [ 254.077230][ T9602] hfs: request for non-existent node 1280 in B*Tree [ 254.106430][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 254.132234][ T9602] hfs: request for non-existent node 1280 in B*Tree [ 254.237791][ T4325] hfs: request for non-existent node 1280 in B*Tree [ 254.253717][ T4325] hfs: request for non-existent node 1280 in B*Tree [ 254.424115][ T9613] Bluetooth: MGMT ver 1.22 [ 254.738926][ T9629] loop4: detected capacity change from 0 to 64 [ 254.791125][ T9629] hfs: request for non-existent node 1025 in B*Tree [ 254.820311][ T9629] hfs: request for non-existent node 1025 in B*Tree [ 255.141275][ T9640] loop2: detected capacity change from 0 to 64 [ 255.260667][ T9646] netlink: 'syz.1.2417': attribute type 1 has an invalid length. [ 255.549391][ T9652] loop4: detected capacity change from 0 to 8 [ 255.607030][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.613426][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.407345][ T9677] xt_policy: neither incoming nor outgoing policy selected [ 256.621348][ T9685] loop4: detected capacity change from 0 to 512 [ 256.703051][ T9685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.733846][ T9685] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.769445][ T26] audit: type=1326 audit(1779322112.151:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 256.896386][ T26] audit: type=1326 audit(1779322112.191:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 256.921380][ T9685] EXT4-fs: Ignoring removed orlov option [ 256.938620][ T9685] EXT4-fs: Ignoring removed bh option [ 256.953132][ T9685] EXT4-fs: can't change dax mount option while remounting [ 256.970931][ T26] audit: type=1326 audit(1779322112.191:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.063757][ T26] audit: type=1326 audit(1779322112.201:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.107840][ T9695] loop3: detected capacity change from 0 to 1024 [ 257.140666][ T9695] EXT4-fs: inline encryption not supported [ 257.150086][ T9697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2442'. [ 257.164782][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 257.173124][ T26] audit: type=1326 audit(1779322112.201:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.241065][ T26] audit: type=1326 audit(1779322112.201:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.311041][ T26] audit: type=1326 audit(1779322112.201:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.344391][ T9695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.403251][ T26] audit: type=1326 audit(1779322112.201:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.427419][ T26] audit: type=1326 audit(1779322112.201:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.453054][ T26] audit: type=1326 audit(1779322112.241:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.2.2439" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821f99ce59 code=0x7ffc0000 [ 257.572213][ T9703] loop2: detected capacity change from 0 to 64 [ 257.684158][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 257.882471][ T9690] loop0: detected capacity change from 0 to 32768 [ 257.893536][ T9681] loop1: detected capacity change from 0 to 32768 [ 257.902793][ T9705] loop4: detected capacity change from 0 to 1024 [ 257.921541][ T9705] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 258.042940][ T9690] XFS (loop0): Mounting V5 Filesystem [ 258.236972][ T9690] XFS (loop0): Ending clean mount [ 258.296394][ T9690] XFS (loop0): Quotacheck needed: Please wait. [ 258.424735][ T9727] loop4: detected capacity change from 0 to 1024 [ 258.463385][ T9690] XFS (loop0): Quotacheck: Done. [ 258.706794][ T33] hfsplus: b-tree write err: -5, ino 25 [ 258.712577][ T33] hfsplus: b-tree write err: -5, ino 4 [ 258.747202][ T4278] XFS (loop0): Unmounting Filesystem [ 258.759833][ T33] hfsplus: b-tree write err: -5, ino 2 [ 259.449593][ T9747] loop2: detected capacity change from 0 to 256 [ 259.511733][ T9747] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 259.622646][ T9751] loop1: detected capacity change from 0 to 1764 [ 259.754912][ T9751] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 259.961255][ T9739] loop3: detected capacity change from 0 to 40427 [ 259.985927][ T9739] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 260.008067][ T9739] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 260.043953][ T9739] F2FS-fs (loop3): invalid crc value [ 260.052507][ T9759] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.109958][ T9739] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.143759][ T4316] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 260.199561][ T9759] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 260.345523][ T4316] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 260.363883][ T4316] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 260.393192][ T4316] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 260.411624][ T9739] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 260.429174][ T9739] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.449459][ T4316] usb 1-1: config 220 has no interface number 2 [ 260.473780][ T4316] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 260.533678][ T4316] usb 1-1: config 220 interface 0 has no altsetting 0 [ 260.560846][ T4316] usb 1-1: config 220 interface 76 has no altsetting 0 [ 260.581841][ T4316] usb 1-1: config 220 interface 1 has no altsetting 0 [ 260.605394][ T4316] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 260.645240][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.653317][ T4316] usb 1-1: Product: syz [ 260.693674][ T4316] usb 1-1: Manufacturer: syz [ 260.698492][ T4316] usb 1-1: SerialNumber: syz [ 260.813276][ T66] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 260.855642][ T66] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 260.932671][ T4316] usb 1-1: selecting invalid altsetting 0 [ 260.945658][ T4316] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 260.952070][ T4316] usb 1-1: No valid video chain found. [ 260.989691][ T4316] usb 1-1: selecting invalid altsetting 0 [ 261.008009][ T4316] usbtest: probe of 1-1:220.1 failed with error -22 [ 261.065483][ T4316] usb 1-1: USB disconnect, device number 16 [ 261.165927][ T9757] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 261.182601][ T9757] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 261.228341][ T9757] F2FS-fs (loop2): invalid crc value [ 261.247483][ T9757] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 261.287295][ T9757] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.457698][ T9757] F2FS-fs (loop2): recover fsync data on readonly fs [ 261.481057][ T9757] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 261.518274][ T9757] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.768695][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 262.015621][ T9785] set_capacity_and_notify: 2 callbacks suppressed [ 262.015638][ T9785] loop3: detected capacity change from 0 to 2048 [ 262.044953][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 262.095767][ T9793] loop1: detected capacity change from 0 to 64 [ 262.128193][ T9785] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 262.189077][ T9785] System zones: 0-7 [ 262.225539][ T9785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.319745][ T9785] EXT4-fs error (device loop3): ext4_ext_precache:627: inode #2: comm syz.3.2479: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 262.426392][ T9785] EXT4-fs (loop3): Remounting filesystem read-only [ 262.563714][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 262.991810][ T9813] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in; [ 262.991810][ T9813] program syz.2.2489 not setting count and/or reply_len properly [ 263.221216][ T9818] netlink: 'syz.4.2491': attribute type 29 has an invalid length. [ 263.238372][ T9819] loop1: detected capacity change from 0 to 256 [ 263.254889][ T9818] netlink: 'syz.4.2491': attribute type 29 has an invalid length. [ 263.292411][ T9819] FAT-fs (loop1): Directory bread(block 64) failed [ 263.308778][ T9819] FAT-fs (loop1): Directory bread(block 65) failed [ 263.328271][ T9819] FAT-fs (loop1): Directory bread(block 66) failed [ 263.349139][ T9819] FAT-fs (loop1): Directory bread(block 67) failed [ 263.369158][ T9819] FAT-fs (loop1): Directory bread(block 68) failed [ 263.375430][ T9824] netlink: 'syz.4.2491': attribute type 29 has an invalid length. [ 263.408444][ T9819] FAT-fs (loop1): Directory bread(block 69) failed [ 263.438628][ T9819] FAT-fs (loop1): Directory bread(block 70) failed [ 263.455944][ T9819] FAT-fs (loop1): Directory bread(block 71) failed [ 263.483761][ T9819] FAT-fs (loop1): Directory bread(block 72) failed [ 263.493853][ T4316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.511861][ T9819] FAT-fs (loop1): Directory bread(block 73) failed [ 263.668863][ T9834] loop4: detected capacity change from 0 to 128 [ 263.702811][ T4316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.750360][ T9834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 263.754009][ T4316] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.775757][ T9834] ext4 filesystem being mounted at /499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.830469][ T9834] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.2498: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 263.843753][ T4316] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.868594][ T4316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.877429][ T4316] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 263.891984][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.911024][ T4316] usb 3-1: config 0 descriptor?? [ 263.990966][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 264.224302][ T9843] loop0: detected capacity change from 0 to 512 [ 264.231722][ T9843] EXT4-fs: Ignoring removed nobh option [ 264.263705][ T9843] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.312784][ T9843] EXT4-fs (loop0): orphan cleanup on readonly fs [ 264.350665][ T4316] kye 0003:0458:5015.0003: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 264.365640][ T9843] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 264.426994][ T4316] kye 0003:0458:5015.0003: tablet-enabling feature report not found [ 264.455967][ T9843] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2503: attempt to clear invalid blocks 2 len 1 [ 264.463970][ T4316] kye 0003:0458:5015.0003: tablet enabling failed [ 264.484178][ T9843] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 264.544065][ T9843] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2503: invalid indirect mapped block 1819239214 (level 0) [ 264.574117][ T9843] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2503: invalid indirect mapped block 1819239214 (level 1) [ 264.602611][ T4316] usb 3-1: USB disconnect, device number 13 [ 264.649837][ T9843] EXT4-fs (loop0): 1 truncate cleaned up [ 264.666232][ T9843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 264.744735][ T9850] loop4: detected capacity change from 0 to 4096 [ 264.751487][ T9843] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 264.781969][ T9850] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 264.882202][ T9855] fido_id[9855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 264.922182][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 265.142687][ T9863] loop0: detected capacity change from 0 to 256 [ 265.261390][ T9865] loop3: detected capacity change from 0 to 1024 [ 265.303651][ T9869] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 265.740885][ T9876] loop3: detected capacity change from 0 to 4096 [ 265.774533][ T9876] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 265.792105][ T9879] loop1: detected capacity change from 0 to 4096 [ 265.893794][ T4315] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.101002][ T9887] EXT4-fs (loop4): Test dummy encryption mode enabled [ 266.115538][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.144358][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.171135][ T4315] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 266.213996][ T9887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 266.228791][ T9887] CIFS: iocharset name too long [ 266.237631][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.279020][ T4315] usb 3-1: config 0 descriptor?? [ 266.409044][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 266.727560][ T4315] pyra 0003:1E7D:2CF6.0004: ignoring exceeding usage max [ 266.746490][ T4315] pyra 0003:1E7D:2CF6.0004: usage index exceeded [ 266.773897][ T4315] pyra 0003:1E7D:2CF6.0004: item 0 0 2 0 parsing failed [ 266.781564][ T4315] pyra 0003:1E7D:2CF6.0004: parse failed [ 266.798054][ T4315] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -22 [ 266.956521][ T9908] sp0: Synchronizing with TNC [ 266.978971][ T4260] usb 3-1: USB disconnect, device number 14 [ 267.016217][ T9907] [U] è [ 267.343326][ T9894] set_capacity_and_notify: 1 callbacks suppressed [ 267.343344][ T9894] loop3: detected capacity change from 0 to 32768 [ 267.584314][ T9921] loop4: detected capacity change from 0 to 512 [ 267.599804][ T9894] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 267.745678][ T9921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.755131][ T9931] tc_dump_action: action bad kind [ 267.792215][ T9927] loop0: detected capacity change from 0 to 2048 [ 267.808525][ T9921] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.882472][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 267.938567][ T9927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.155985][ T9935] loop2: detected capacity change from 0 to 4096 [ 268.169646][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 268.194139][ T9935] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 268.423671][ T4359] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 268.464307][ T9946] loop0: detected capacity change from 0 to 512 [ 268.523959][ T9946] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 268.533329][ T4280] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 268.604763][ T4280] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 268.611377][ T4280] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 268.625185][ T4359] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 268.654719][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.689357][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.736084][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.767891][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.814165][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.840564][ T66] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 268.852607][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.895962][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.936379][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.987456][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.995879][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.038424][ T9958] loop0: detected capacity change from 0 to 1024 [ 269.045874][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.079534][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.092589][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.113333][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.145556][ T9959] loop4: detected capacity change from 0 to 4096 [ 269.158529][ T9958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.169292][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.181463][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.190844][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.202343][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.211317][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.220761][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.232097][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.241018][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.250632][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.262096][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.271456][ T4359] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 269.281045][ T4359] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 269.289877][ T4359] usb 2-1: Product: syz [ 269.294575][ T4359] usb 2-1: Manufacturer: syz [ 269.299218][ T4359] usb 2-1: SerialNumber: syz [ 269.306335][ T4359] usb 2-1: config 0 descriptor?? [ 269.336213][ T9963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.352128][ T4359] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 269.557215][ T4359] usb 2-1: USB disconnect, device number 11 [ 269.565830][ T4359] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 269.651405][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 269.772789][ T9968] loop2: detected capacity change from 0 to 2048 [ 269.799748][ T9968] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.100363][ T9980] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.2557'. [ 270.234115][ T9982] usb usb8: check_ctrlrecip: process 9982 (syz.3.2559) requesting ep 01 but needs 81 [ 270.271006][ T9984] loop1: detected capacity change from 0 to 512 [ 270.358052][ T9984] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.2560: ea_inode with extended attributes [ 270.450017][ T9984] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2560: error while reading EA inode 11 err=-117 [ 270.474655][ T9984] EXT4-fs (loop1): 1 orphan inode deleted [ 270.480609][ T9984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.545417][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 270.793326][T10001] [ 270.795739][T10001] ====================================================== [ 270.802795][T10001] WARNING: possible circular locking dependency detected [ 270.809860][T10001] syzkaller #0 Not tainted [ 270.814307][T10001] ------------------------------------------------------ [ 270.821353][T10001] syz.0.2576/10001 is trying to acquire lock: [ 270.827447][T10001] ffff88807cccf958 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 270.837185][T10001] [ 270.837185][T10001] but task is already holding lock: [ 270.844589][T10001] ffff888051d37430 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 270.855535][T10001] [ 270.855535][T10001] which lock already depends on the new lock. [ 270.855535][T10001] [ 270.865981][T10001] [ 270.865981][T10001] the existing dependency chain (in reverse order) is: [ 270.875027][T10001] [ 270.875027][T10001] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 270.883775][T10001] down_write+0x36/0x60 [ 270.888507][T10001] process_measurement+0x3a2/0x1c30 [ 270.894279][T10001] ima_file_mmap+0x102/0x150 [ 270.899423][T10001] __se_sys_remap_file_pages+0x559/0x7b0 [ 270.905795][T10001] do_syscall_64+0x4c/0xa0 [ 270.910784][T10001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.917247][T10001] [ 270.917247][T10001] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 270.925239][T10001] __lock_acquire+0x2d07/0x7d10 [ 270.930669][T10001] lock_acquire+0x1bb/0x4a0 [ 270.936027][T10001] down_read_killable+0x4c/0x340 [ 270.941562][T10001] mmap_read_lock_killable+0x1d/0x60 [ 270.947415][T10001] lock_mm_and_find_vma+0x2b1/0x2f0 [ 270.953189][T10001] do_user_addr_fault+0x2db/0xb10 [ 270.958792][T10001] exc_page_fault+0x60/0x100 [ 270.963931][T10001] asm_exc_page_fault+0x22/0x30 [ 270.969331][T10001] fault_in_readable+0x13e/0x1f0 [ 270.974823][T10001] fault_in_iov_iter_readable+0x18e/0x2e0 [ 270.981147][T10001] generic_perform_write+0x1f1/0x5c0 [ 270.986991][T10001] __generic_file_write_iter+0x148/0x2a0 [ 270.993197][T10001] generic_file_write_iter+0xab/0x2e0 [ 270.999147][T10001] do_iter_write+0x642/0xb10 [ 271.004299][T10001] do_pwritev+0x23d/0x3a0 [ 271.009173][T10001] do_syscall_64+0x4c/0xa0 [ 271.014142][T10001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.020586][T10001] [ 271.020586][T10001] other info that might help us debug this: [ 271.020586][T10001] [ 271.030832][T10001] Possible unsafe locking scenario: [ 271.030832][T10001] [ 271.038299][T10001] CPU0 CPU1 [ 271.043683][T10001] ---- ---- [ 271.049065][T10001] lock(&sb->s_type->i_mutex_key#13); [ 271.054557][T10001] lock(&mm->mmap_lock); [ 271.061438][T10001] lock(&sb->s_type->i_mutex_key#13); [ 271.069445][T10001] lock(&mm->mmap_lock); [ 271.073792][T10001] [ 271.073792][T10001] *** DEADLOCK *** [ 271.073792][T10001] [ 271.081953][T10001] 2 locks held by syz.0.2576/10001: [ 271.087161][T10001] #0: ffff88807a4e8460 (sb_writers#5){.+.+}-{0:0}, at: do_pwritev+0x226/0x3a0 [ 271.096156][T10001] #1: ffff888051d37430 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 271.107503][T10001] [ 271.107503][T10001] stack backtrace: [ 271.113417][T10001] CPU: 0 PID: 10001 Comm: syz.0.2576 Not tainted syzkaller #0 [ 271.120899][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.130987][T10001] Call Trace: [ 271.134290][T10001] [ 271.137238][T10001] dump_stack_lvl+0x188/0x24e [ 271.141950][T10001] ? load_image+0x400/0x400 [ 271.146476][T10001] ? show_regs_print_info+0x12/0x12 [ 271.151703][T10001] ? print_circular_bug+0x12b/0x1a0 [ 271.156929][T10001] check_noncircular+0x296/0x330 [ 271.161898][T10001] ? add_chain_block+0x940/0x940 [ 271.166863][T10001] ? lockdep_lock+0xf1/0x1f0 [ 271.171483][T10001] ? _find_first_zero_bit+0xcf/0x100 [ 271.176789][T10001] __lock_acquire+0x2d07/0x7d10 [ 271.181680][T10001] ? verify_lock_unused+0x140/0x140 [ 271.186906][T10001] ? cgroup_rstat_updated+0xd7/0x350 [ 271.192216][T10001] ? verify_lock_unused+0x140/0x140 [ 271.197442][T10001] ? verify_lock_unused+0x140/0x140 [ 271.202667][T10001] ? mark_lock+0x94/0x320 [ 271.207033][T10001] lock_acquire+0x1bb/0x4a0 [ 271.211571][T10001] ? mmap_read_lock_killable+0x1d/0x60 [ 271.217063][T10001] ? read_lock_is_recursive+0x10/0x10 [ 271.222464][T10001] ? cmp_ex_search+0x1a/0x70 [ 271.227084][T10001] ? bsearch+0x8a/0xb0 [ 271.231176][T10001] ? fault_in_readable+0x13e/0x1f0 [ 271.236335][T10001] ? search_extable+0x8c/0xd0 [ 271.241032][T10001] ? trim_init_extable+0x3b0/0x3b0 [ 271.246170][T10001] ? mmap_read_lock_killable+0x1d/0x60 [ 271.251648][T10001] down_read_killable+0x4c/0x340 [ 271.256620][T10001] ? mmap_read_lock_killable+0x1d/0x60 [ 271.262101][T10001] mmap_read_lock_killable+0x1d/0x60 [ 271.267422][T10001] lock_mm_and_find_vma+0x2b1/0x2f0 [ 271.272641][T10001] do_user_addr_fault+0x2db/0xb10 [ 271.277688][T10001] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.282907][T10001] exc_page_fault+0x60/0x100 [ 271.287518][T10001] asm_exc_page_fault+0x22/0x30 [ 271.292392][T10001] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 271.298143][T10001] Code: d8 57 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 57 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 57 [ 271.317771][T10001] RSP: 0018:ffffc9000361f990 EFLAGS: 00050287 [ 271.323860][T10001] RAX: ffffffff81be2ef9 RBX: 0000000000001000 RCX: 0000000000080000 [ 271.331850][T10001] RDX: ffffc90005af9000 RSI: 000000000002fd57 RDI: 000000000002fd58 [ 271.339839][T10001] RBP: 0000000000000000 R08: ffff88802cc78000 R09: 0000000000000002 [ 271.347913][T10001] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000001a4000 [ 271.355900][T10001] R13: 0000000000001000 R14: 00002000001a2241 R15: 00002000001a3000 [ 271.363900][T10001] ? fault_in_readable+0x139/0x1f0 [ 271.369052][T10001] fault_in_iov_iter_readable+0x18e/0x2e0 [ 271.374811][T10001] generic_perform_write+0x1f1/0x5c0 [ 271.380130][T10001] ? generic_file_direct_write+0x330/0x330 [ 271.385963][T10001] ? __file_remove_privs+0x5f0/0x5f0 [ 271.391285][T10001] ? rwsem_write_trylock+0x135/0x1c0 [ 271.396608][T10001] ? clear_nonspinnable+0x60/0x60 [ 271.401663][T10001] ? generic_write_checks_count+0x3d9/0x4c0 [ 271.407585][T10001] __generic_file_write_iter+0x148/0x2a0 [ 271.413257][T10001] generic_file_write_iter+0xab/0x2e0 [ 271.418662][T10001] do_iter_write+0x642/0xb10 [ 271.423288][T10001] ? vfs_iter_write+0xa0/0xa0 [ 271.427999][T10001] ? rcu_read_lock_any_held+0xb0/0x130 [ 271.433486][T10001] do_pwritev+0x23d/0x3a0 [ 271.437840][T10001] ? do_preadv+0x390/0x390 [ 271.442287][T10001] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.448301][T10001] ? lock_chain_count+0x20/0x20 [ 271.453179][T10001] ? lockdep_hardirqs_on+0x94/0x140 [ 271.458398][T10001] ? __x64_sys_pwritev2+0xba/0x100 [ 271.463533][T10001] do_syscall_64+0x4c/0xa0 [ 271.467984][T10001] ? clear_bhb_loop+0x60/0xb0 [ 271.472696][T10001] ? clear_bhb_loop+0x60/0xb0 [ 271.477402][T10001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.483317][T10001] RIP: 0033:0x7f137799ce59 [ 271.487761][T10001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.507386][T10001] RSP: 002b:00007f1378789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 271.515820][T10001] RAX: ffffffffffffffda RBX: 00007f1377c15fa0 RCX: 00007f137799ce59 [ 271.524763][T10001] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 271.532753][T10001] RBP: 00007f1377a32d6f R08: 000000000000000c R09: 0000000000000004 [ 271.540738][T10001] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000000 [ 271.548729][T10001] R13: 00007f1377c16038 R14: 00007f1377c15fa0 R15: 00007ffdac893e58 [ 271.556818][T10001]