last executing test programs: 6.554766904s ago: executing program 1 (id=7935): r0 = syz_io_uring_setup(0x132d, &(0x7f0000000000)={0x0, 0x5ef9, 0x1, 0xfffffffd, 0x208}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) 5.93557702s ago: executing program 1 (id=7940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x90, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 5.93535645s ago: executing program 2 (id=7941): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000003640)={{r0}, "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"}) 5.436440368s ago: executing program 1 (id=7944): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={[{@utf8no}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@fat=@nfs}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@utf8no}, {@uni_xlate}]}, 0x2a, 0x35a, &(0x7f0000000780)="$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") open(&(0x7f0000000180)='./file1\x00', 0x16d27f, 0x1b8) 4.113483251s ago: executing program 1 (id=7952): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)={0x7, 0x2}) 3.630965679s ago: executing program 0 (id=7955): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100000000a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "4d00ca0a3c2be96e678a92ddf91f0000003cc69320004d00", 0x31303453}) 3.478888469s ago: executing program 1 (id=7957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="78020000100013070000000000000020fc020000000000000000000000000001fe8000000000000000000000000000aa0000000000000000000000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e00000010000000000000000000000000300000000000000ffffffffffffffff0000000000000000f1a10000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e532c0112"], 0x278}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.196186923s ago: executing program 0 (id=7959): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x207], [0x7]], '\x00', [{0x0, 0x1}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x1000}) 3.134554625s ago: executing program 1 (id=7960): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x6, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x6, 0x0, 0x7fff, 0x9b}) 2.804040097s ago: executing program 0 (id=7963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.696260517s ago: executing program 4 (id=7964): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) 2.449994176s ago: executing program 2 (id=7967): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 2.405175783s ago: executing program 0 (id=7968): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x3, 0xa65, &(0x7f0000002800)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.244790759s ago: executing program 4 (id=7969): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7076, 0x20, 0x4, 0x316, 0x0, r0}, 0x0, 0x0) 2.163423112s ago: executing program 5 (id=7970): r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000009, 0x13, r0, 0x0) 1.872338103s ago: executing program 4 (id=7971): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) 1.859086787s ago: executing program 5 (id=7972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.700426989s ago: executing program 3 (id=7973): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000100)) 1.580015138s ago: executing program 5 (id=7974): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) 1.463265275s ago: executing program 2 (id=7975): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={0x0}) 1.289634323s ago: executing program 0 (id=7976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a00)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {@in=@multicast1, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x2}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 1.253127036s ago: executing program 3 (id=7977): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, &(0x7f0000000040)={0x27, 0xe, 0x3, 0x1b, 0x2, 0xdcfb, 0x0, 0x6e}) 1.252523426s ago: executing program 5 (id=7978): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010000000000080000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500fe8000000080000000000000000000bb04000100"], 0x44}}, 0x0) 1.084722353s ago: executing program 4 (id=7979): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'rti800\x00', [0x9, 0x3, 0x0, 0x1, 0x400032, 0x5, 0xffffffff, 0x9, 0xffe, 0x9, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0x5, 0x5, 0x8, 0x1ff, 0x3, 0x1ff, 0x0, 0x8, 0x0, 0x742f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x8049]}) 1.004095228s ago: executing program 2 (id=7980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}]}, 0x24}}, 0x0) 797.174875ms ago: executing program 3 (id=7981): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 628.47661ms ago: executing program 2 (id=7982): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x106, 0x486, 0x0, 0x0) 576.608307ms ago: executing program 5 (id=7983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) 558.498475ms ago: executing program 4 (id=7984): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x100000003) 527.702074ms ago: executing program 3 (id=7985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 442.672112ms ago: executing program 3 (id=7986): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 309.138521ms ago: executing program 3 (id=7987): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) 175.680887ms ago: executing program 2 (id=7988): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @pix_mp={0xee89, 0xb521, 0xa0363159, 0x1, 0x8, [{0x10000, 0xfffffffe}, {0x101, 0x8}, {0xc8d, 0x400}, {0x25, 0xb699}, {0x7ff, 0xa}, {0x4, 0x40}, {0x3, 0x3}, {0x4, 0x7}], 0x0, 0x8, 0x3, 0x0, 0x2}}) 79.939369ms ago: executing program 0 (id=7989): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x40100) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf010000, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0}) 9.07223ms ago: executing program 4 (id=7990): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x34, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 0s ago: executing program 5 (id=7991): fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@v2={0x3, 0x0, 0x17, 0x4, 0x4, "44dd0632"}, 0xd, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): (loop5, inode 15): Error -117 getting verity descriptor size [ 839.874844][ T30] audit: type=1326 audit(2000000385.724:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20415 comm="syz.0.6427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d678efc9 code=0x7ffc0000 [ 840.035611][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.047159][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.060405][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.438713][ T6580] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 840.635269][ T6580] usb 3-1: Using ep0 maxpacket: 16 [ 840.678114][ T6580] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 840.705654][ T6580] usb 3-1: config 0 has no interface number 0 [ 840.760684][ T6580] usb 3-1: config 0 interface 48 has no altsetting 0 [ 840.788662][ T6580] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 840.823050][ T6580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.847912][T20449] bond2: option lp_interval: invalid value (0) [ 840.859805][ T6580] usb 3-1: Product: syz [ 840.864014][ T6580] usb 3-1: Manufacturer: syz [ 840.871602][T20449] bond2: option lp_interval: allowed values 1 - 2147483647 [ 840.889351][ T6580] usb 3-1: SerialNumber: syz [ 840.904014][T20449] bond2 (unregistering): Released all slaves [ 840.911496][ T6580] usb 3-1: config 0 descriptor?? [ 841.056758][T20422] loop3: detected capacity change from 0 to 32768 [ 841.238823][T20436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.268475][T20436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.305759][ T5811] usb 3-1: USB disconnect, device number 125 [ 841.496144][T20466] loop1: detected capacity change from 0 to 1024 [ 841.709348][ T12] hfsplus: b-tree write err: -5, ino 8 [ 841.836496][T20472] loop0: detected capacity change from 0 to 2048 [ 841.883393][T20472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 841.942318][ T30] audit: type=1326 audit(2000000388.174:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 842.057427][ T30] audit: type=1326 audit(2000000388.184:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 842.125399][T20457] loop4: detected capacity change from 0 to 32768 [ 842.173308][T20457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6446 (20457) [ 842.198114][ T30] audit: type=1326 audit(2000000388.184:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 842.217844][T20480] loop2: detected capacity change from 0 to 128 [ 842.270267][T20457] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 842.292396][ T30] audit: type=1326 audit(2000000388.184:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 842.337876][T20457] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 842.387956][ T30] audit: type=1326 audit(2000000388.184:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 842.625786][T20457] BTRFS info (device loop4): enabling ssd optimizations [ 842.636709][T20457] BTRFS info (device loop4): turning on async discard [ 842.643523][T20457] BTRFS info (device loop4): enabling free space tree [ 842.670892][T20506] tmpfs: Bad value for 'size' [ 842.917341][ T6436] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 843.025659][T20510] loop1: detected capacity change from 0 to 2048 [ 843.052060][T20510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 843.416495][T20517] netlink: 'syz.5.6467': attribute type 8 has an invalid length. [ 843.493924][T20512] loop2: detected capacity change from 0 to 8192 [ 844.026951][T20491] loop3: detected capacity change from 0 to 32768 [ 844.080827][T20491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6452 (20491) [ 844.159393][T20491] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.196052][T20491] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 844.320249][T20488] loop0: detected capacity change from 0 to 40427 [ 844.412074][T20488] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 844.419943][T20488] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 844.463579][T20548] loop2: detected capacity change from 0 to 256 [ 844.471252][T20548] exfat: Deprecated parameter 'utf8' [ 844.501978][T20491] BTRFS info (device loop3): enabling ssd optimizations [ 844.503866][T20488] F2FS-fs (loop0): invalid crc value [ 844.527478][T20491] BTRFS info (device loop3): turning on async discard [ 844.534834][T20491] BTRFS info (device loop3): enabling free space tree [ 844.552833][T20548] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 844.852879][ T6426] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 845.131932][T20488] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 845.200662][T20488] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 845.246964][T20488] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 845.832173][T20584] ieee802154 phy0 wpan0: encryption failed: -22 [ 846.283381][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6497'. [ 846.501501][T20598] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.730145][ T30] audit: type=1326 audit(2000000392.626:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20603 comm="syz.4.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347fb8efc9 code=0x7ffc0000 [ 846.811960][ T30] audit: type=1326 audit(2000000392.626:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20603 comm="syz.4.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347fb8efc9 code=0x7ffc0000 [ 846.888171][ T30] audit: type=1326 audit(2000000392.626:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20603 comm="syz.4.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f347fb8efc9 code=0x7ffc0000 [ 847.018016][ T30] audit: type=1326 audit(2000000392.626:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20603 comm="syz.4.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347fb8efc9 code=0x7ffc0000 [ 847.097833][ T30] audit: type=1326 audit(2000000392.626:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20603 comm="syz.4.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347fb8efc9 code=0x7ffc0000 [ 847.472404][T20588] loop2: detected capacity change from 0 to 32768 [ 847.519559][T20625] loop3: detected capacity change from 0 to 16 [ 847.567218][T20588] [ 847.567218][T20588] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 847.567218][T20588] [ 847.578149][T20621] bond1: down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 847.610346][T20625] erofs (device loop3): mounted with root inode @ nid 36. [ 847.639422][T20621] bond1: entered promiscuous mode [ 847.654863][T20621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 847.865281][T18980] read_mapping_page failed! [ 847.870040][T18980] ERROR: (device loop2): txAbort: [ 847.870040][T18980] [ 847.949352][T18980] jfs_write_inode: jfs_commit_inode failed! [ 847.972150][ T6420] [ 847.972150][ T6420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 847.972150][ T6420] [ 848.072120][ T6420] [ 848.072120][ T6420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.072120][ T6420] [ 848.169014][T20633] binder: 20630:20633 ioctl c018620b 0 returned -14 [ 848.284612][T20637] random: crng reseeded on system resumption [ 848.485719][T20640] netlink: 'syz.3.6517': attribute type 2 has an invalid length. [ 848.830584][T20607] loop1: detected capacity change from 0 to 40427 [ 848.908951][T20649] loop3: detected capacity change from 0 to 2048 [ 848.932820][T20607] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 848.960008][T20607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 849.070671][T20607] F2FS-fs (loop1): invalid crc value [ 849.080649][ T6364] loop3: p1 p2 p3 [ 849.192474][T20649] loop3: p1 p2 p3 [ 849.196496][T20662] netlink: 'syz.0.6527': attribute type 1 has an invalid length. [ 849.254432][T20662] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6527'. [ 849.301966][T20662] NCSI netlink: No device for ifindex 0 [ 849.465429][T20607] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 849.491007][ T6639] udevd[6639]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 849.505401][ T8393] udevd[8393]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 849.560765][ T6364] udevd[6364]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 849.586995][T20607] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 849.632551][T20607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 849.790131][ T6367] udevd[6367]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 849.790354][ T6639] udevd[6639]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 849.812727][ T6364] udevd[6364]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 850.126536][T20684] netlink: 'syz.4.6538': attribute type 8 has an invalid length. [ 850.489798][T20667] loop2: detected capacity change from 0 to 32768 [ 850.524565][T20667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6529 (20667) [ 850.547694][T20693] dlm: no locking on control device [ 850.593956][T20667] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 850.639334][T20667] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 850.967669][T20667] BTRFS info (device loop2): setting nodatasum [ 851.028646][T20667] BTRFS info (device loop2): setting nodatacow [ 851.034869][T20667] BTRFS info (device loop2): enabling ssd optimizations [ 851.103500][T20667] BTRFS info (device loop2): turning on async discard [ 851.110792][T20667] BTRFS info (device loop2): enabling free space tree [ 851.341102][T20727] xt_bpf: check failed: parse error [ 851.360430][T20722] loop0: detected capacity change from 0 to 2048 [ 851.414659][T20722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 851.613470][ T6420] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 851.734595][ T6580] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 851.951239][ T6580] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 851.969625][ T6580] usb 6-1: config 0 has no interface number 0 [ 851.997456][ T6580] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 852.048202][ T6580] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 852.063171][ T6580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.101179][ T6580] usb 6-1: Product: syz [ 852.109727][ T6580] usb 6-1: Manufacturer: syz [ 852.114390][ T6580] usb 6-1: SerialNumber: syz [ 852.189571][ T6580] usb 6-1: config 0 descriptor?? [ 852.196948][T20746] loop0: detected capacity change from 0 to 16 [ 852.240976][T20730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 852.251371][T20746] erofs (device loop0): mounted with root inode @ nid 36. [ 852.252599][ T6580] usb-storage 6-1:0.20: USB Mass Storage device detected [ 852.334832][T20746] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 852.351572][T20746] erofs (device loop0): read error -117 @ 43 of nid 36 [ 852.397937][ T6580] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 852.502826][ T6580] scsi host1: usb-storage 6-1:0.20 [ 852.508829][T20751] loop1: detected capacity change from 0 to 1024 [ 852.613245][T20751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.813946][ T6560] usb 6-1: USB disconnect, device number 15 [ 853.001343][ T6419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.044465][T20740] loop3: detected capacity change from 0 to 32768 [ 853.093259][T20740] [ 853.093259][T20740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.093259][T20740] [ 853.290150][ T1151] read_mapping_page failed! [ 853.312173][ T1151] ERROR: (device loop3): txAbort: [ 853.312173][ T1151] [ 853.331786][ T1151] jfs_write_inode: jfs_commit_inode failed! [ 853.342097][ T6426] [ 853.342097][ T6426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.342097][ T6426] [ 853.367242][ T6426] [ 853.367242][ T6426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 853.367242][ T6426] [ 854.030524][T20789] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 854.127469][T20793] rtc_cmos 00:00: Alarms can be up to one day in the future [ 854.451024][T20799] netlink: 'syz.5.6583': attribute type 2 has an invalid length. [ 854.453405][T20802] loop2: detected capacity change from 0 to 64 [ 854.541816][T20802] hfs: keylen 94 too large [ 854.573244][T20805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6587'. [ 854.716911][T20766] loop0: detected capacity change from 0 to 32768 [ 854.762076][T20766] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6567 (20766) [ 854.767361][ T30] audit: type=1326 audit(2000000400.164:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20809 comm="syz.1.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 854.879421][T20766] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 854.908856][ T30] audit: type=1326 audit(2000000400.192:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20809 comm="syz.1.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 854.931183][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.940475][T20766] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 855.023572][ T30] audit: type=1326 audit(2000000400.211:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20809 comm="syz.1.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 855.091346][ T30] audit: type=1326 audit(2000000400.211:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20809 comm="syz.1.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 855.358642][T20766] BTRFS info (device loop0): setting nodatasum [ 855.409654][T20766] BTRFS info (device loop0): setting nodatacow [ 855.447988][T20766] BTRFS info (device loop0): enabling ssd optimizations [ 855.507121][T20766] BTRFS info (device loop0): turning on async discard [ 855.531049][T20766] BTRFS info (device loop0): enabling free space tree [ 856.000470][ T6421] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 856.171914][ T6560] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 856.288269][T20860] bond0: entered promiscuous mode [ 856.314663][T20860] bond_slave_0: entered promiscuous mode [ 856.342560][T20860] bond_slave_1: entered promiscuous mode [ 856.356865][ T6560] usb 3-1: Using ep0 maxpacket: 32 [ 856.388458][ T6560] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.419460][ T6560] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.491933][ T6560] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.535040][ T6560] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 856.590189][ T6560] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 856.629053][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6609'. [ 856.650575][ T6560] usb 3-1: Product: syz [ 856.655352][ T6560] usb 3-1: Manufacturer: syz [ 856.660110][ T6560] usb 3-1: SerialNumber: syz [ 856.749696][ T6560] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input69 [ 857.126772][T20882] loop4: detected capacity change from 0 to 256 [ 857.144972][ T30] audit: type=1326 audit(2000000402.380:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.3.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2adb78efc9 code=0x7ffc0000 [ 857.156101][T20882] exfat: Deprecated parameter 'utf8' [ 857.235032][T15873] usb 3-1: USB disconnect, device number 126 [ 857.251957][T20882] exfat: Deprecated parameter 'namecase' [ 857.280843][ T30] audit: type=1326 audit(2000000402.408:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.3.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2adb78efc9 code=0x7ffc0000 [ 857.303156][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.392290][T20882] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 857.449544][ T30] audit: type=1326 audit(2000000402.408:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.3.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2adb78efc9 code=0x7ffc0000 [ 857.539966][ T30] audit: type=1326 audit(2000000402.427:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.3.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f2adb78efc9 code=0x7ffc0000 [ 857.583699][T20890] xt_hashlimit: max too large, truncated to 1048576 [ 857.668876][ T30] audit: type=1326 audit(2000000402.427:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.3.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2adb78efc9 code=0x7ffc0000 [ 857.670072][T15873] appletouch 3-1:1.0: input: appletouch disconnected [ 857.691235][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.840110][ T30] audit: type=1326 audit(2000000402.427:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20880 comm="syz.3.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2adb78efc9 code=0x7ffc0000 [ 858.136626][T20903] loop4: detected capacity change from 0 to 512 [ 858.211982][T20903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.229302][T20903] ext4 filesystem being mounted at /1053/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.326277][T20903] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.6624: corrupted xattr block 32: bad e_name length [ 858.478957][T20903] EXT4-fs error (device loop4): ext4_get_inode_usage:888: inode #15: comm syz.4.6624: corrupted xattr block 32: bad e_name length [ 858.670068][T20919] loop5: detected capacity change from 0 to 764 [ 858.753037][T20919] rock: directory entry would overflow storage [ 858.793797][T20919] rock: sig=0x4f50, size=4, remaining=3 [ 858.834592][T20919] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 858.893520][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.230072][T15873] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 859.445457][T15873] usb 1-1: Using ep0 maxpacket: 8 [ 859.491023][T15873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 859.540161][T15873] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 859.552909][T15873] usb 1-1: config 8 has no interface number 0 [ 859.559042][T15873] usb 1-1: config 8 interface 255 has no altsetting 0 [ 859.627837][T15873] usb 1-1: string descriptor 0 read error: -22 [ 859.634834][T15873] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 859.656530][T20948] netlink: 'syz.5.6647': attribute type 2 has an invalid length. [ 859.675713][T15873] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 859.684712][T20949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6646'. [ 860.186854][T15873] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 860.274332][T15873] usb 1-1: USB disconnect, device number 8 [ 860.374168][ T6580] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 860.561573][ T6580] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 860.561624][ T6580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.561668][ T6580] usb 5-1: Product: syz [ 860.561697][ T6580] usb 5-1: Manufacturer: syz [ 860.561727][ T6580] usb 5-1: SerialNumber: syz [ 860.569677][T20972] loop2: detected capacity change from 0 to 4096 [ 860.576607][ T6580] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 860.592681][ T6560] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 860.637342][T20972] ntfs3(loop2): ino=1a, mi_enum_attr [ 860.838680][ C1] usb 5-1: ath9k_htc: invalid pkt_len (fd10) [ 861.089504][T20978] bond0: entered promiscuous mode [ 861.089540][T20978] bond_slave_0: entered promiscuous mode [ 861.089757][T20978] bond_slave_1: entered promiscuous mode [ 861.740797][T20961] loop1: detected capacity change from 0 to 32768 [ 861.821052][T20961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6653 (20961) [ 862.101924][ T6560] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 862.102165][ T6560] ath9k_htc: Failed to initialize the device [ 862.338832][T20988] loop4: detected capacity change from 0 to 128 [ 862.367423][T20988] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 862.391805][T20988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 862.628699][T20992] netlink: 'syz.0.6668': attribute type 30 has an invalid length. [ 863.534578][ T6580] usb 5-1: USB disconnect, device number 125 [ 863.556095][ T6580] usb 5-1: ath9k_htc: USB layer deinitialized [ 863.668407][T21007] overlayfs: workdir and upperdir must be separate subtrees [ 864.068959][T21021] loop2: detected capacity change from 0 to 8 [ 864.511340][T21035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6687'. [ 864.936744][T21044] loop0: detected capacity change from 0 to 256 [ 864.953792][T21047] loop3: detected capacity change from 0 to 64 [ 865.091857][T21044] FAT-fs (loop0): Directory bread(block 64) failed [ 865.116180][T21044] FAT-fs (loop0): Directory bread(block 65) failed [ 865.143875][T21044] FAT-fs (loop0): Directory bread(block 66) failed [ 865.150453][T21044] FAT-fs (loop0): Directory bread(block 67) failed [ 865.176788][T21044] FAT-fs (loop0): Directory bread(block 68) failed [ 865.183532][T21044] FAT-fs (loop0): Directory bread(block 69) failed [ 865.203680][T21044] FAT-fs (loop0): Directory bread(block 70) failed [ 865.211158][T21044] FAT-fs (loop0): Directory bread(block 71) failed [ 865.259120][T21044] FAT-fs (loop0): Directory bread(block 72) failed [ 865.292482][T21044] FAT-fs (loop0): Directory bread(block 73) failed [ 865.357359][ T6560] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 865.535715][ T6560] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 865.558531][ T6560] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 865.595431][ T6560] usb 5-1: config 8 has no interface number 0 [ 865.623352][ T6560] usb 5-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 865.667281][ T6560] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.701277][ T6560] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 865.728220][T21059] loop2: detected capacity change from 0 to 256 [ 865.754318][ T6560] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 865.805449][ T6560] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 865.825900][ T6560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.854606][T21059] FAT-fs (loop2): Directory bread(block 64) failed [ 865.884296][ T6560] usb 5-1: NFC: intf ffff888028a1b000 id ffffffff8f2e0aa0 [ 865.893524][T21059] FAT-fs (loop2): Directory bread(block 65) failed [ 865.900167][T21059] FAT-fs (loop2): Directory bread(block 66) failed [ 865.920720][T21059] FAT-fs (loop2): Directory bread(block 67) failed [ 865.959605][T21059] FAT-fs (loop2): Directory bread(block 68) failed [ 865.970561][ T6560] nfcmrvl 5-1:8.80: NFC: registered with nci successfully [ 865.988086][T21031] loop1: detected capacity change from 0 to 32768 [ 865.994733][T21059] FAT-fs (loop2): Directory bread(block 69) failed [ 866.020790][T21059] FAT-fs (loop2): Directory bread(block 70) failed [ 866.050403][T21031] __jfs_setxattr: xattr_size = 2175, new_size = 14154 [ 866.058222][T21059] FAT-fs (loop2): Directory bread(block 71) failed [ 866.085243][T21059] FAT-fs (loop2): Directory bread(block 72) failed [ 866.148473][T21059] FAT-fs (loop2): Directory bread(block 73) failed [ 866.150431][ T5811] usb 5-1: USB disconnect, device number 126 [ 866.178118][ T5811] usb 5-1: NFC: intf ffff888028a1b000 [ 866.770039][T21050] loop5: detected capacity change from 0 to 32768 [ 866.873709][T21050] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 866.897340][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6707'. [ 866.930241][T21090] loop0: detected capacity change from 0 to 64 [ 866.955197][T21050] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 867.081710][T21093] loop2: detected capacity change from 0 to 1764 [ 867.178644][T21050] XFS (loop5): Ending clean mount [ 867.234290][T21050] XFS (loop5): Quotacheck needed: Please wait. [ 867.345415][T21050] XFS (loop5): Quotacheck: Done. [ 867.714610][ T6431] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 867.962902][T21119] loop1: detected capacity change from 0 to 256 [ 868.026284][T21121] loop4: detected capacity change from 0 to 128 [ 868.109597][T21119] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 868.129040][T21121] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 868.254969][T21121] ext4 filesystem being mounted at /1068/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 868.532943][T21131] loop0: detected capacity change from 0 to 256 [ 868.634033][ T6436] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 868.646528][T21131] FAT-fs (loop0): Directory bread(block 64) failed [ 868.650928][T21133] overlayfs: missing 'lowerdir' [ 868.683152][T21131] FAT-fs (loop0): Directory bread(block 65) failed [ 868.689797][T21131] FAT-fs (loop0): Directory bread(block 66) failed [ 868.738296][T21138] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 868.770843][T21131] FAT-fs (loop0): Directory bread(block 67) failed [ 868.791582][T21131] FAT-fs (loop0): Directory bread(block 68) failed [ 868.814693][T21131] FAT-fs (loop0): Directory bread(block 69) failed [ 868.831237][T21131] FAT-fs (loop0): Directory bread(block 70) failed [ 868.851006][T21131] FAT-fs (loop0): Directory bread(block 71) failed [ 868.906140][T21131] FAT-fs (loop0): Directory bread(block 72) failed [ 868.934900][T21131] FAT-fs (loop0): Directory bread(block 73) failed [ 868.994344][T21141] binder: 21140:21141 ioctl c0306201 200000000180 returned -14 [ 869.398375][T21151] loop4: detected capacity change from 0 to 512 [ 869.456471][T21151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 869.542363][T21159] netlink: 'syz.3.6737': attribute type 10 has an invalid length. [ 869.551913][T21159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6737'. [ 869.563136][T21157] loop5: detected capacity change from 0 to 16 [ 869.564482][T21151] System zones: 1-12 [ 869.596625][T21151] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.6735: invalid indirect mapped block 8 (level 2) [ 869.630971][T21159] team0: Port device geneve0 added [ 869.636747][T21157] erofs (device loop5): mounted with root inode @ nid 36. [ 869.637006][T21151] EXT4-fs (loop4): Remounting filesystem read-only [ 869.687325][T21151] EXT4-fs (loop4): 1 truncate cleaned up [ 869.729100][T21151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.040235][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.270532][T21178] random: crng reseeded on system resumption [ 870.350675][ T6494] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 870.543341][ T6494] usb 6-1: Using ep0 maxpacket: 8 [ 870.562989][ T6494] usb 6-1: unable to get BOS descriptor or descriptor too short [ 870.581146][ T6494] usb 6-1: config 4 has an invalid interface number: 146 but max is 0 [ 870.630633][ T6494] usb 6-1: config 4 has no interface number 0 [ 870.650489][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6751'. [ 870.653199][ T6494] usb 6-1: config 4 interface 146 has no altsetting 0 [ 870.713280][ T6494] usb 6-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 870.729204][ T6494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.749716][ T6494] usb 6-1: Product: syz [ 870.760735][ T6494] usb 6-1: Manufacturer: syz [ 870.779051][ T6494] usb 6-1: SerialNumber: syz [ 870.800425][T21184] loop4: detected capacity change from 0 to 4096 [ 870.830457][T21184] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 870.918660][T21184] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 871.139723][ T6494] comedi comedi5: could not set alternate setting 3 in high speed [ 871.182012][ T6494] usbduxsigma 6-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 871.258361][ T6494] usbduxsigma 6-1:4.146: probe with driver usbduxsigma failed with error -71 [ 871.306320][ T6494] usb 6-1: USB disconnect, device number 16 [ 871.671772][T21206] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 871.699164][T21209] loop1: detected capacity change from 0 to 128 [ 871.706595][T21209] EXT4-fs: Ignoring removed orlov option [ 871.712430][T21206] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 871.785908][T21209] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 871.809732][T21209] ext4 filesystem being mounted at /1005/control supports timestamps until 2038-01-19 (0x7fffffff) [ 871.936635][T21209] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:104: comm syz.1.6763: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 872.180795][ T6419] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 872.323161][T21232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6773'. [ 872.667133][T21234] loop5: detected capacity change from 0 to 4096 [ 872.848822][T21234] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 872.899316][T21234] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 873.020279][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 873.020306][ T30] audit: type=1800 audit(2000000417.231:87): pid=21234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6774" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 873.069133][T21234] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 873.450767][T21267] autofs4:pid:21267:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 873.910016][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6796'. [ 873.966065][T21284] xt_socket: unknown flags 0x50 [ 874.032596][T21290] IPv6: NLM_F_CREATE should be specified when creating new route [ 874.278492][T21294] program syz.2.6801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 875.157596][T21323] program syz.4.6815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 875.441164][T21334] Unknown options in mask b7f2 [ 875.659642][T21342] tc_dump_action: action bad kind [ 875.786613][T21344] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 876.655812][T21375] loop3: detected capacity change from 0 to 128 [ 876.680712][T15873] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 876.727006][T21375] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 876.832630][T21375] ext4 filesystem being mounted at /1046/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 876.865758][T15873] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 876.886383][T15873] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 876.925432][T15873] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 876.934734][T15873] usb 2-1: Manufacturer: syz [ 876.950487][T15873] usb 2-1: SerialNumber: syz [ 877.057621][ T6426] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 877.168532][T21393] loop2: detected capacity change from 0 to 1764 [ 877.226527][T15873] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 877.253858][T15873] usb 2-1: USB disconnect, device number 98 [ 877.350551][T21393] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 877.439455][T21396] ip6tnl2: entered promiscuous mode [ 877.457924][T21396] ip6tnl2: entered allmulticast mode [ 877.647886][T21403] netlink: 'syz.3.6855': attribute type 11 has an invalid length. [ 877.712068][ T30] audit: type=1326 audit(2000000421.617:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21404 comm="syz.2.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ef78efc9 code=0x7ffc0000 [ 877.766125][ T30] audit: type=1326 audit(2000000421.617:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21404 comm="syz.2.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ef78efc9 code=0x7ffc0000 [ 877.849975][ T30] audit: type=1326 audit(2000000421.655:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21404 comm="syz.2.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f72ef78efc9 code=0x7ffc0000 [ 877.940812][ T30] audit: type=1326 audit(2000000421.655:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21404 comm="syz.2.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ef78efc9 code=0x7ffc0000 [ 878.074386][T21409] loop5: detected capacity change from 0 to 4096 [ 878.127463][T21409] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 878.299106][T21409] ntfs3(loop5): ino=19, mi_enum_attr [ 878.349059][T21409] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 878.473473][T21409] ntfs3(loop5): failed to convert "c46c" to cp950 [ 878.509585][T21409] ntfs3(loop5): ino=20, mi_enum_attr [ 878.588954][T21427] loop4: detected capacity change from 0 to 16 [ 878.630286][T21427] erofs (device loop4): mounted with root inode @ nid 36. [ 879.898537][T21423] loop1: detected capacity change from 0 to 32768 [ 879.973957][T21463] loop2: detected capacity change from 0 to 1024 [ 880.024102][T21423] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 880.075526][T21425] loop3: detected capacity change from 0 to 32768 [ 880.168955][T21425] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 880.209549][T21425] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.237208][T21481] loop0: detected capacity change from 0 to 256 [ 880.246322][T21423] XFS (loop1): Ending clean mount [ 880.277333][T21484] cgroup: noprefix used incorrectly [ 880.285770][T21481] exfat: Deprecated parameter 'utf8' [ 880.425689][T21481] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 880.467509][ T6419] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 880.476680][T21425] XFS (loop3): Ending clean mount [ 880.514876][T21425] XFS (loop3): Quotacheck needed: Please wait. [ 880.635011][T21425] XFS (loop3): Quotacheck: Done. [ 880.897785][ T6426] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 882.176762][T21533] loop2: detected capacity change from 0 to 256 [ 882.304713][T21533] FAT-fs (loop2): Directory bread(block 64) failed [ 882.330116][T21533] FAT-fs (loop2): Directory bread(block 65) failed [ 882.372028][T21533] FAT-fs (loop2): Directory bread(block 66) failed [ 882.404640][T21533] FAT-fs (loop2): Directory bread(block 67) failed [ 882.407252][T21543] netlink: 'syz.1.6917': attribute type 75 has an invalid length. [ 882.411300][T21533] FAT-fs (loop2): Directory bread(block 68) failed [ 882.519673][T21533] FAT-fs (loop2): Directory bread(block 69) failed [ 882.542259][T21533] FAT-fs (loop2): Directory bread(block 70) failed [ 882.561733][T21533] FAT-fs (loop2): Directory bread(block 71) failed [ 882.568410][T21533] FAT-fs (loop2): Directory bread(block 72) failed [ 882.613626][T21533] FAT-fs (loop2): Directory bread(block 73) failed [ 883.219260][T21567] loop3: detected capacity change from 0 to 8 [ 883.316613][T21567] SQUASHFS error: Unable to read inode 0xe3 [ 883.861869][T21588] loop3: detected capacity change from 0 to 256 [ 883.948184][T21588] FAT-fs (loop3): Directory bread(block 64) failed [ 883.965641][T21588] FAT-fs (loop3): Directory bread(block 65) failed [ 883.981545][T21588] FAT-fs (loop3): Directory bread(block 66) failed [ 883.992302][T21588] FAT-fs (loop3): Directory bread(block 67) failed [ 884.015576][T21588] FAT-fs (loop3): Directory bread(block 68) failed [ 884.039860][T21588] FAT-fs (loop3): Directory bread(block 69) failed [ 884.050119][T21588] FAT-fs (loop3): Directory bread(block 70) failed [ 884.069798][T21588] FAT-fs (loop3): Directory bread(block 71) failed [ 884.076553][T21588] FAT-fs (loop3): Directory bread(block 72) failed [ 884.089238][T21588] FAT-fs (loop3): Directory bread(block 73) failed [ 884.101573][T12719] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 884.229854][ T5811] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 884.279108][T12719] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 884.295718][T12719] usb 3-1: config 0 has no interface number 0 [ 884.348010][T12719] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 884.388258][T12719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.408613][T12719] usb 3-1: Product: syz [ 884.415164][ T5811] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 884.430202][T12719] usb 3-1: Manufacturer: syz [ 884.442532][T12719] usb 3-1: SerialNumber: syz [ 884.448553][ T5811] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 884.475310][T12719] usb 3-1: config 0 descriptor?? [ 884.487601][ T5811] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 884.518864][ T5811] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 884.539379][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.567915][T21592] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 884.611753][ T5811] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 884.784491][T12719] uvcvideo 3-1:0.64: Found Unit with invalid ID 0 [ 884.819079][T12719] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 884.860878][T12719] uvcvideo 3-1:0.64: Entity type for entity Output 65535 was not initialized! [ 884.903653][T12719] uvcvideo 3-1:0.64: Failed to create links for entity 65535 [ 884.911095][T12719] uvcvideo 3-1:0.64: Failed to register entities (-22). [ 884.989526][T12719] usb 3-1: USB disconnect, device number 127 [ 885.098357][T21615] loop3: detected capacity change from 0 to 128 [ 885.107160][ T5811] usb 2-1: USB disconnect, device number 99 [ 885.138948][T21615] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 885.204323][T21615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 885.426002][T21599] loop0: detected capacity change from 0 to 32768 [ 885.605889][T21623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6957'. [ 886.421917][T15873] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 886.574365][T21651] xt_TCPMSS: Only works on TCP SYN packets [ 886.619511][T15873] usb 5-1: Using ep0 maxpacket: 32 [ 886.648449][T15873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 886.708533][T15873] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 886.728704][T15873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.763974][T15873] usb 5-1: Product: syz [ 886.768191][T15873] usb 5-1: Manufacturer: syz [ 886.796478][T15873] usb 5-1: SerialNumber: syz [ 886.834209][T15873] usb 5-1: config 0 descriptor?? [ 886.864597][T15873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.200263][T15873] usb 5-1: USB disconnect, device number 127 [ 887.342509][T21678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.395266][ T6184] udevd[6184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.587482][T12719] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 887.656645][T21684] loop5: detected capacity change from 0 to 256 [ 887.783567][T12719] usb 1-1: Using ep0 maxpacket: 16 [ 887.800747][T12719] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 887.800796][T12719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.800835][T12719] usb 1-1: Product: syz [ 887.800863][T12719] usb 1-1: Manufacturer: syz [ 887.800903][T12719] usb 1-1: SerialNumber: syz [ 887.812476][T21684] FAT-fs (loop5): Directory bread(block 64) failed [ 887.812525][T21684] FAT-fs (loop5): Directory bread(block 65) failed [ 887.812633][T21684] FAT-fs (loop5): Directory bread(block 66) failed [ 887.812677][T21684] FAT-fs (loop5): Directory bread(block 67) failed [ 887.812779][T21684] FAT-fs (loop5): Directory bread(block 68) failed [ 887.812821][T21684] FAT-fs (loop5): Directory bread(block 69) failed [ 887.812930][T21684] FAT-fs (loop5): Directory bread(block 70) failed [ 887.812974][T21684] FAT-fs (loop5): Directory bread(block 71) failed [ 887.813079][T21684] FAT-fs (loop5): Directory bread(block 72) failed [ 887.813121][T21684] FAT-fs (loop5): Directory bread(block 73) failed [ 887.825561][T12719] usb 1-1: config 0 descriptor?? [ 887.837107][T12719] usb 1-1: bad CDC descriptors [ 887.937028][T21690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6990'. [ 888.115527][T12719] usb 1-1: USB disconnect, device number 9 [ 888.282968][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'. [ 888.325256][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'. [ 888.647948][T21708] netlink: 'syz.3.6999': attribute type 6 has an invalid length. [ 889.173381][ T7045] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 889.375049][ T7045] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 889.404958][ T7045] usb 1-1: config 0 has no interface number 0 [ 889.414793][ T7045] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 889.426503][ T7045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.434639][ T7045] usb 1-1: Product: syz [ 889.447936][ T7045] usb 1-1: Manufacturer: syz [ 889.452721][ T7045] usb 1-1: SerialNumber: syz [ 889.467023][ T7045] usb 1-1: config 0 descriptor?? [ 889.734516][ T7045] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 889.765975][ T7045] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 889.784656][T21748] loop2: detected capacity change from 0 to 16 [ 889.790102][ T7045] uvcvideo 1-1:0.64: Entity type for entity Output 65535 was not initialized! [ 889.827857][ T7045] uvcvideo 1-1:0.64: Failed to create links for entity 65535 [ 889.857817][ T7045] uvcvideo 1-1:0.64: Failed to register entities (-22). [ 889.866552][T21748] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 889.899732][ T7045] usb 1-1: USB disconnect, device number 10 [ 889.909797][T21750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.034893][T21756] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 890.064434][T21756] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 890.291766][T21763] loop2: detected capacity change from 0 to 256 [ 890.917451][T21782] loop5: detected capacity change from 0 to 256 [ 891.105440][ T6560] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 891.287099][ T6560] usb 3-1: Using ep0 maxpacket: 16 [ 891.326727][ T6560] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 891.342886][ T6560] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.375410][ T6560] usb 3-1: config 0 has no interface number 0 [ 891.386260][T21800] lo speed is unknown, defaulting to 1000 [ 891.421567][ T6560] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 891.435704][T21800] lo speed is unknown, defaulting to 1000 [ 891.468317][ T6560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.478070][T21800] lo speed is unknown, defaulting to 1000 [ 891.500954][ T6560] usb 3-1: Product: syz [ 891.505235][ T6560] usb 3-1: Manufacturer: syz [ 891.509873][ T6560] usb 3-1: SerialNumber: syz [ 891.544876][ T6560] usb 3-1: config 0 descriptor?? [ 891.661817][ T7045] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 891.798159][ T6560] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 891.816411][ T6560] uvcvideo 3-1:0.105: No valid video chain found. [ 891.864925][ T7045] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 891.890930][ T7045] usb 1-1: config 160 has no interface number 0 [ 891.922725][ T7045] usb 1-1: config 160 interface 200 has no altsetting 0 [ 891.945062][ T7045] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 891.962342][ T7045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.978834][ T7045] usb 1-1: Product: syz [ 891.994259][ T7045] usb 1-1: Manufacturer: syz [ 892.003814][ T7045] usb 1-1: SerialNumber: syz [ 892.083477][ T6560] usb 3-1: USB disconnect, device number 2 [ 892.310134][ T7045] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.318457][ T7045] usb 1-1: MIDIStreaming interface descriptor not found [ 892.445299][ T7045] usb 1-1: USB disconnect, device number 11 [ 892.542146][T21800] infiniband syz0: set active [ 892.550915][ T6560] lo speed is unknown, defaulting to 1000 [ 892.576571][ T6366] udevd[6366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.595353][T21800] infiniband syz0: added lo [ 892.600634][T21800] syz0: rxe_create_cq: returned err = -12 [ 892.673679][T21800] infiniband syz0: Couldn't create ib_mad CQ [ 892.720761][T21800] infiniband syz0: Couldn't open port 1 [ 892.807191][T21831] loop5: detected capacity change from 0 to 1024 [ 892.825545][T21800] RDS/IB: syz0: added [ 892.845252][T21800] smc: adding ib device syz0 with port count 1 [ 892.855336][T21833] netlink: 'syz.3.7061': attribute type 7 has an invalid length. [ 892.864068][T21800] smc: ib device syz0 port 1 has no pnetid [ 892.874968][ T6560] lo speed is unknown, defaulting to 1000 [ 892.894294][T21831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.906522][T21800] lo speed is unknown, defaulting to 1000 [ 893.239237][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.536336][T21854] netlink: 'syz.5.7067': attribute type 10 has an invalid length. [ 893.607872][T21854] team0: Device ªªªªªª is up. Set it down before adding it as a team port [ 893.699839][T21858] netlink: 'syz.3.7072': attribute type 4 has an invalid length. [ 893.723625][T21858] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7072'. [ 894.248753][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7081'. [ 894.357835][T21800] lo speed is unknown, defaulting to 1000 [ 894.526820][T21887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7086'. [ 894.568423][T21887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7086'. [ 895.371759][T21913] tmpfs: Bad value for 'nr_blocks' [ 895.477467][T21800] lo speed is unknown, defaulting to 1000 [ 895.578586][T21921] xt_l2tp: missing protocol rule (udp|l2tpip) [ 895.810343][T21926] netlink: 'syz.1.7105': attribute type 11 has an invalid length. [ 895.835866][T21926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7105'. [ 895.852435][T21928] ipt_REJECT: TCP_RESET invalid for non-tcp [ 896.162787][T21935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 896.459820][T21800] lo speed is unknown, defaulting to 1000 [ 896.836861][ T6494] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 897.055888][ T6494] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 897.091769][ T6494] usb 1-1: config 0 has no interface number 0 [ 897.111474][ T6494] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 897.148773][ T6494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.183044][ T6494] usb 1-1: Product: syz [ 897.204900][ T6494] usb 1-1: Manufacturer: syz [ 897.221602][ T6494] usb 1-1: SerialNumber: syz [ 897.228826][T21965] netlink: 'syz.1.7125': attribute type 21 has an invalid length. [ 897.261278][T21965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7125'. [ 897.276724][ T6494] usb 1-1: config 0 descriptor?? [ 897.515450][T21800] lo speed is unknown, defaulting to 1000 [ 897.522239][ T6494] cdc_subset 1-1:0.90: probe with driver cdc_subset failed with error -22 [ 897.585720][T21972] openvswitch: netlink: Key type 31 is not supported [ 897.670232][T21947] loop3: detected capacity change from 0 to 32768 [ 897.751325][ T6560] usb 1-1: USB disconnect, device number 12 [ 898.216268][T21987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7136'. [ 898.358914][T21985] loop5: detected capacity change from 0 to 4096 [ 898.369206][T21989] netlink: 'syz.2.7137': attribute type 10 has an invalid length. [ 898.646818][T21989] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 898.717719][T21800] lo speed is unknown, defaulting to 1000 [ 899.018599][ T7045] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 899.128352][T22007] loop5: detected capacity change from 0 to 512 [ 899.158226][T22007] EXT4-fs: Ignoring removed mblk_io_submit option [ 899.213013][ T7045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 899.243514][T22007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 899.257340][ T7045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 899.279994][ T7045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 899.302813][T22007] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 899.316980][ T7045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 899.338341][T22015] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7148'. [ 899.349548][T22007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 899.383477][T22007] System zones: 0-1, 15-15, 18-18, 34-34 [ 899.396946][ T7045] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 899.406535][T22007] EXT4-fs (loop5): orphan cleanup on readonly fs [ 899.423734][ T7045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.431932][T22007] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.7146: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 899.461775][ T7045] usb 4-1: Product: syz [ 899.465983][ T7045] usb 4-1: Manufacturer: syz [ 899.502617][ T7045] usb 4-1: SerialNumber: syz [ 899.511321][T22007] EXT4-fs error (device loop5): ext4_quota_enable:7138: comm syz.5.7146: Bad quota inode: 4, type: 1 [ 899.522760][T22007] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 899.539279][ T7045] usb 4-1: config 0 descriptor?? [ 899.592226][T22007] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 899.602790][T22007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 899.652074][T22007] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.7146: bad symlink. [ 899.790577][ T7045] adutux 4-1:0.0: Could not retrieve serial number [ 899.800555][T22022] loop0: detected capacity change from 0 to 2048 [ 899.819054][ T7045] adutux 4-1:0.0: probe with driver adutux failed with error -5 [ 899.825333][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.883251][T22022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 899.996231][T22027] wg1: entered promiscuous mode [ 900.001171][T22027] wg1: entered allmulticast mode [ 900.061795][T22028] ipvlan0: entered promiscuous mode [ 900.076860][T22028] ipvlan0: entered allmulticast mode [ 900.100115][T12719] usb 4-1: USB disconnect, device number 8 [ 900.101343][T22028] veth0_vlan: entered allmulticast mode [ 900.347790][T22034] netlink: 'syz.0.7157': attribute type 10 has an invalid length. [ 900.428577][T22038] netlink: 'syz.5.7160': attribute type 10 has an invalid length. [ 900.437243][T22038] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7160'. [ 900.485845][T22034] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 900.504138][T22038] batman_adv: batadv0: Adding interface: virt_wifi0 [ 900.535837][T22038] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.561543][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.620770][T22038] batman_adv: batadv0: Interface activated: virt_wifi0 [ 901.252986][T22064] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7171'. [ 901.267892][T22064] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7171'. [ 901.323856][T22064] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7171'. [ 901.646711][T22076] loop5: detected capacity change from 0 to 512 [ 901.653228][T22075] PKCS7: Unknown OID: [4] 0.0 [ 901.653258][T22075] PKCS7: Only support pkcs7_signedData type [ 901.720534][T22076] EXT4-fs warning (device loop5): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 901.814479][T22072] loop4: detected capacity change from 0 to 4096 [ 901.815164][T22078] netlink: 'syz.2.7180': attribute type 7 has an invalid length. [ 901.894509][T22078] netlink: 'syz.2.7180': attribute type 8 has an invalid length. [ 901.917983][T22072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.062943][T22072] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.7177: invalid fast symlink length 131109 [ 902.344715][ T6436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.411143][T22098] netlink: 'syz.1.7188': attribute type 4 has an invalid length. [ 902.429132][T22098] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7188'. [ 902.891058][T22112] loop0: detected capacity change from 0 to 512 [ 902.944451][T22114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7197'. [ 903.009769][T22112] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 903.101040][T22120] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 903.113108][T22112] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 903.407319][T22129] netlink: 'syz.3.7203': attribute type 10 has an invalid length. [ 903.625333][T22129] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 903.659671][T22129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 903.791792][T22141] loop2: detected capacity change from 0 to 16 [ 903.811436][T22141] erofs: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffÿÿ18446744073709551615' [ 903.844499][T22143] netlink: 'syz.4.7211': attribute type 11 has an invalid length. [ 903.872878][T22141] cgroup: Invalid name [ 903.894421][T22143] netlink: 'syz.4.7211': attribute type 11 has an invalid length. [ 903.913790][T22143] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7211'. [ 903.933613][T22147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7213'. [ 903.948490][T22145] vxcan3: entered promiscuous mode [ 903.954413][T22145] vxcan3: entered allmulticast mode [ 904.173564][T22153] loop2: detected capacity change from 0 to 512 [ 904.255925][T22151] loop5: detected capacity change from 0 to 4096 [ 904.292061][T22153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.317057][T22151] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 904.326887][T22153] ext4 filesystem being mounted at /1109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.377357][T22165] loop1: detected capacity change from 0 to 256 [ 904.409857][T22165] exfat: Deprecated parameter 'utf8' [ 904.469092][T22165] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x572a75a8, utbl_chksum : 0xe619d30d) [ 904.492361][T22151] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 904.608503][T22163] loop3: detected capacity change from 0 to 4096 [ 904.652378][ T6420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.815902][T22163] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 904.884291][T22163] ntfs3(loop3): Failed to load $Extend (-22). [ 904.902570][T22163] ntfs3(loop3): Failed to initialize $Extend. [ 905.317650][T22175] loop1: detected capacity change from 0 to 4096 [ 905.425013][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7227'. [ 905.558284][T22188] loop2: detected capacity change from 0 to 1024 [ 905.716915][T22190] loop0: detected capacity change from 0 to 8 [ 905.736290][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.742633][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.851330][T22190] SQUASHFS error: Failed to read block 0x2d7: -5 [ 905.857725][T22190] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 906.160392][T22202] loop4: detected capacity change from 0 to 256 [ 906.215460][T22202] exfat: Deprecated parameter 'utf8' [ 906.271115][T22208] program syz.1.7240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.346377][T22202] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x572a75a8, utbl_chksum : 0xe619d30d) [ 906.909362][ T7045] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 907.130162][ T7045] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 907.165962][ T7045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.194938][T22238] loop1: detected capacity change from 0 to 64 [ 907.208802][ T7045] usb 1-1: Product: syz [ 907.213013][ T7045] usb 1-1: Manufacturer: syz [ 907.217642][ T7045] usb 1-1: SerialNumber: syz [ 907.274031][ T7045] usb 1-1: config 0 descriptor?? [ 907.308297][ T7045] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 907.606603][T22246] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 907.614444][T22246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7258'. [ 907.676338][T22252] loop5: detected capacity change from 0 to 256 [ 907.706109][T22252] exfat: Deprecated parameter 'utf8' [ 907.723751][ T7045] gspca_sunplus: reg_r err -71 [ 907.732814][ T7045] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 907.766946][ T7045] usb 1-1: USB disconnect, device number 13 [ 907.861095][T12719] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 907.870299][T22252] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x572a75a8, utbl_chksum : 0xe619d30d) [ 908.052687][T12719] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 908.088821][T12719] usb 2-1: config 1 has no interface number 0 [ 908.095014][T12719] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 908.145660][T12719] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 908.165744][T22262] netlink: 'syz.2.7268': attribute type 32 has an invalid length. [ 908.180479][T12719] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.248094][T12719] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 908.267323][T12719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.286210][T12719] usb 2-1: Product: syz [ 908.296991][T12719] usb 2-1: Manufacturer: syz [ 908.305912][T12719] usb 2-1: SerialNumber: syz [ 908.346430][T22249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 908.527076][T22274] tmpfs: Bad value for 'mpol' [ 908.574158][T22249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 908.585464][T22276] netlink: 'syz.0.7274': attribute type 3 has an invalid length. [ 908.790763][T22284] loop3: detected capacity change from 0 to 256 [ 908.816773][T12719] usb 2-1: Incompatible driver and firmware versions [ 908.841153][T22284] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 908.859984][T12719] usb 2-1: USB disconnect, device number 100 [ 909.196067][T22287] loop0: detected capacity change from 0 to 4096 [ 909.212679][T22287] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 909.265970][T22287] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 909.550016][T22302] netlink: 'syz.2.7287': attribute type 10 has an invalid length. [ 909.573753][T22302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.634020][T22302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.734520][T22302] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 910.306991][T22327] loop1: detected capacity change from 0 to 256 [ 910.403138][T22327] FAT-fs (loop1): count of clusters too big (178174) [ 910.463979][T22327] FAT-fs (loop1): Can't find a valid FAT filesystem [ 910.801658][ T6560] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 910.833125][T22345] netlink: 'syz.0.7308': attribute type 10 has an invalid length. [ 910.866715][T22345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.923715][T22345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.956426][T22343] loop5: detected capacity change from 0 to 4096 [ 911.000694][T22345] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 911.018311][ T6560] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 911.054318][ T6560] usb 2-1: config 0 has no interface number 1 [ 911.072087][ T6560] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 911.115841][ T6560] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 911.131770][T22343] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 911.172935][T22343] ntfs3(loop5): Failed to load $Extend (-22). [ 911.176978][ T6560] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 911.208753][ T6560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 911.217923][T22343] ntfs3(loop5): Failed to initialize $Extend. [ 911.228090][ T6560] usb 2-1: SerialNumber: syz [ 911.272965][ T6560] usb 2-1: config 0 descriptor?? [ 911.545359][ T6560] uvcvideo 2-1:0.199: Found UVC 0.00 device (0002:0000) [ 911.565937][ T6560] uvcvideo 2-1:0.199: No valid video chain found. [ 911.617613][ T6560] usb 2-1: USB disconnect, device number 101 [ 911.756101][T22365] loop2: detected capacity change from 0 to 8 [ 911.886376][T22341] loop3: detected capacity change from 0 to 32768 [ 911.900806][T22369] loop0: detected capacity change from 0 to 1024 [ 911.924720][T22341] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7306 (22341) [ 911.986002][T22341] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 912.031346][T22341] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 912.233467][T18487] hfsplus: b-tree write err: -5, ino 4 [ 912.304899][T22341] BTRFS info (device loop3): enabling ssd optimizations [ 912.361078][T22341] BTRFS info (device loop3): turning on async discard [ 912.403303][T22341] BTRFS info (device loop3): enabling free space tree [ 912.551259][T22389] loop2: detected capacity change from 0 to 4096 [ 912.576727][T22396] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 912.585097][T22389] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 912.703606][T22389] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 912.714887][ T6426] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 912.769375][T22389] ntfs3(loop2): ino=19, mi_enum_attr [ 912.859290][T22389] ntfs3(loop2): failed to convert "c46c" to cp1251 [ 912.897688][T22389] ntfs3(loop2): ino=20, mi_enum_attr [ 912.953050][T22406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.972359][T22406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.027358][T22409] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7333'. [ 913.038772][T22406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.046745][T22406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.079395][T22409] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 913.138426][T22406] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 913.177958][T22406] batman_adv: batadv0: Removing interface: virt_wifi0 [ 914.299991][ T7045] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 914.523751][ T7045] usb 4-1: Using ep0 maxpacket: 8 [ 914.597954][ T7045] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 914.607054][ T7045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.661102][ T7045] usb 4-1: Product: syz [ 914.665848][ T7045] usb 4-1: Manufacturer: syz [ 914.670734][ T7045] usb 4-1: SerialNumber: syz [ 914.748287][ T7045] usb 4-1: config 0 descriptor?? [ 914.794106][ T7045] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 914.796351][T22456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7356'. [ 914.850227][T22458] loop5: detected capacity change from 0 to 512 [ 914.904953][T22458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 914.955550][T22458] EXT4-fs: Ignoring removed bh option [ 915.003004][ T6494] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 915.034081][T22458] EXT4-fs error (device loop5): mb_free_blocks:2014: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 915.142919][T22458] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #11: comm syz.5.7355: corrupted inode contents [ 915.197116][ T6494] usb 5-1: Using ep0 maxpacket: 8 [ 915.198943][T22458] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #11: comm syz.5.7355: mark_inode_dirty error [ 915.209142][ T6494] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 915.223251][ T7045] gspca_sonixj: reg_r err -71 [ 915.237592][ T7045] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 915.253233][ T6494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.263518][ T7045] usb 4-1: USB disconnect, device number 9 [ 915.268365][T22466] loop2: detected capacity change from 0 to 256 [ 915.270627][ T6494] usb 5-1: Product: syz [ 915.286866][T22458] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.7355: invalid indirect mapped block 1 (level 1) [ 915.301357][ T6494] usb 5-1: Manufacturer: syz [ 915.313744][ T6494] usb 5-1: SerialNumber: syz [ 915.335915][T22466] exfat: Deprecated parameter 'namecase' [ 915.353988][T22458] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #11: comm syz.5.7355: corrupted inode contents [ 915.358596][ T6494] usb 5-1: config 0 descriptor?? [ 915.388156][T22466] exfat: Deprecated parameter 'utf8' [ 915.403711][T22458] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 915.417752][ T6494] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 915.440426][T22466] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2b52634e, utbl_chksum : 0xe619d30d) [ 915.453666][T22443] loop1: detected capacity change from 0 to 32768 [ 915.460386][T22458] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #11: comm syz.5.7355: corrupted inode contents [ 915.522147][T22443] [ 915.522147][T22443] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 915.522147][T22443] [ 915.538619][T22458] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.7355: mark_inode_dirty error [ 915.588621][T22458] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 915.604398][T22443] ERROR: (device loop1): ea_get: invalid ea.flag [ 915.604398][T22443] [ 915.626496][T22458] EXT4-fs (loop5): 1 truncate cleaned up [ 915.655393][T22458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.672281][T22443] ERROR: (device loop1): remounting filesystem as read-only [ 915.830904][T22458] EXT4-fs error (device loop5): ext4_find_dest_de:2051: inode #2: block 13: comm syz.5.7355: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 915.891385][ T6494] gspca_sn9c2028: read1 error -71 [ 915.911862][ T6494] gspca_sn9c2028: read1 error -71 [ 915.930078][ T6494] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 915.942658][T22470] xt_connbytes: Forcing CT accounting to be enabled [ 915.996008][ T6494] usb 5-1: USB disconnect, device number 2 [ 916.144899][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.781043][T12719] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 916.804764][T22468] loop0: detected capacity change from 0 to 32768 [ 916.864691][T22468] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 916.880216][T22488] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 916.972389][T12719] usb 3-1: Using ep0 maxpacket: 8 [ 917.009305][T12719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 917.058729][T22468] XFS (loop0): Ending clean mount [ 917.064468][T12719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.076691][T22473] loop1: detected capacity change from 0 to 32768 [ 917.098162][T22473] btrfs: Deprecated parameter 'usebackuproot' [ 917.116911][T12719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 917.139446][T22473] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 917.153921][T12719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 917.199423][T12719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 917.199973][T22473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7362 (22473) [ 917.216386][T12719] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 917.232389][T12719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.295328][T12719] usb 3-1: config 0 descriptor?? [ 917.323662][T22481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.367399][ T6421] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 917.369114][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7372'. [ 917.392818][T22473] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 917.413724][T22505] loop3: detected capacity change from 0 to 512 [ 917.439383][T22473] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 917.750820][ C1] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 917.758839][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.766053][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.772987][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.780055][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.787205][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.794198][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.803172][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.810253][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.817322][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.824278][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.831300][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.833219][T22473] BTRFS info (device loop1): rebuilding free space tree [ 917.838895][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.852261][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.860034][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.867038][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.874010][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.880959][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.890207][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.904232][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.911197][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.920087][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.927070][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.935070][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.942164][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.949093][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.956196][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.963052][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.981154][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.988147][ T6423] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 917.995466][T22473] BTRFS info (device loop1): setting nodatasum [ 918.030629][T12719] usb 3-1: USB disconnect, device number 3 [ 918.042807][T17493] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 918.053623][T22473] BTRFS info (device loop1): setting nodatacow [ 918.077668][T22473] BTRFS info (device loop1): turning on async discard [ 918.146017][T22473] BTRFS info (device loop1): enabling free space tree [ 918.201876][T22473] BTRFS info (device loop1): force clearing of disk cache [ 918.220075][T22473] BTRFS info (device loop1): enabling auto defrag [ 918.252865][T22473] BTRFS info (device loop1): trying to use backup root at mount time [ 918.265203][ T7045] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 918.294464][T22473] BTRFS info (device loop1): max_inline set to 0 [ 918.489738][ T7045] usb 6-1: Using ep0 maxpacket: 16 [ 918.530175][ T7045] usb 6-1: config 1 has an invalid interface number: 69 but max is 0 [ 918.564527][ T7045] usb 6-1: config 1 has no interface number 0 [ 918.584375][ T7045] usb 6-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 918.612765][ T6419] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 918.628723][ T7045] usb 6-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 918.652404][ T7045] usb 6-1: config 1 interface 69 has no altsetting 0 [ 918.676489][ T7045] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 918.687939][ T7045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.713436][ T7045] usb 6-1: Product: syz [ 918.723861][ T7045] usb 6-1: Manufacturer: syz [ 918.782905][ T7045] usb 6-1: SerialNumber: syz [ 918.819168][T22525] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 918.884616][T22525] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 918.926397][ T7045] ipaq 6-1:1.69: PocketPC PDA converter detected [ 919.155937][T22544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.188606][ T7045] usb 6-1: PocketPC PDA converter now attached to ttyUSB0 [ 919.254335][T22552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.289618][T22552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.468957][ T7045] usb 6-1: USB disconnect, device number 17 [ 919.520944][ T7045] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 919.563630][ T7045] ipaq 6-1:1.69: device disconnected [ 921.177251][T22613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7418'. [ 921.222479][T22614] loop2: detected capacity change from 0 to 1024 [ 921.286008][T22614] EXT4-fs: Ignoring removed bh option [ 921.390014][T22614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.464944][T22624] loop0: detected capacity change from 0 to 256 [ 921.492518][T22614] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #11: comm syz.2.7419: directory missing '.' [ 921.553962][T22614] EXT4-fs (loop2): Remounting filesystem read-only [ 921.612536][T22624] FAT-fs (loop0): Directory bread(block 64) failed [ 921.650810][T22624] FAT-fs (loop0): Directory bread(block 65) failed [ 921.698502][T22624] FAT-fs (loop0): Directory bread(block 66) failed [ 921.705109][T22624] FAT-fs (loop0): Directory bread(block 67) failed [ 921.746498][T22624] FAT-fs (loop0): Directory bread(block 68) failed [ 921.789649][T22624] FAT-fs (loop0): Directory bread(block 69) failed [ 921.800587][ T6420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.838878][T22624] FAT-fs (loop0): Directory bread(block 70) failed [ 921.870406][T22624] FAT-fs (loop0): Directory bread(block 71) failed [ 921.877057][T22624] FAT-fs (loop0): Directory bread(block 72) failed [ 921.921476][T22624] FAT-fs (loop0): Directory bread(block 73) failed [ 922.451540][ T30] audit: type=1400 audit(2000000463.449:92): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=22647 comm="syz.0.7432" [ 922.727045][T22658] loop3: detected capacity change from 0 to 128 [ 922.863381][T22664] netlink: 'syz.4.7442': attribute type 1 has an invalid length. [ 922.916667][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7442'. [ 922.958179][T22664] netlink: 'syz.4.7442': attribute type 1 has an invalid length. [ 923.105472][T22668] netlink: 'syz.1.7444': attribute type 2 has an invalid length. [ 923.248271][ T30] audit: type=1326 audit(2000000464.197:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22671 comm="syz.5.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44818efc9 code=0x7ffc0000 [ 923.355098][T22675] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 923.362815][T22675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.387076][ T30] audit: type=1326 audit(2000000464.197:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22671 comm="syz.5.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44818efc9 code=0x7ffc0000 [ 923.505546][ T30] audit: type=1326 audit(2000000464.244:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22671 comm="syz.5.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb44818efc9 code=0x7ffc0000 [ 923.530994][T22680] loop1: detected capacity change from 0 to 64 [ 923.611845][ T30] audit: type=1326 audit(2000000464.244:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22671 comm="syz.5.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44818efc9 code=0x7ffc0000 [ 923.734129][T22684] netlink: 'syz.5.7451': attribute type 12 has an invalid length. [ 923.741826][ T30] audit: type=1326 audit(2000000464.244:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22671 comm="syz.5.7446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44818efc9 code=0x7ffc0000 [ 923.756729][T22687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.183241][T22656] loop2: detected capacity change from 0 to 32768 [ 924.204348][T22656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7438 (22656) [ 924.288325][T22695] netlink: 'syz.4.7457': attribute type 6 has an invalid length. [ 924.374342][T22656] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 924.430562][T22656] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 924.621833][ T6560] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 924.688747][T22656] BTRFS info (device loop2): enabling ssd optimizations [ 924.700056][T22656] BTRFS info (device loop2): turning on async discard [ 924.707420][T22656] BTRFS info (device loop2): enabling free space tree [ 924.811371][ T6560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.843626][T22728] loop4: detected capacity change from 0 to 256 [ 924.850064][ T6560] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.894266][T22730] loop3: detected capacity change from 0 to 256 [ 924.900995][ T6560] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 924.949457][ T6560] usb 1-1: config 1 interface 1 has no altsetting 0 [ 924.975816][ T6560] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 924.993288][ T6420] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 925.015619][ T6560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.054598][ T6560] usb 1-1: Product: syz [ 925.068053][ T6560] usb 1-1: Manufacturer: syz [ 925.072784][ T6560] usb 1-1: SerialNumber: syz [ 925.157185][ T6560] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 925.248913][ T6560] cdc_ncm 1-1:1.0: bind() failure [ 925.452237][T22738] loop3: detected capacity change from 0 to 512 [ 925.527927][T22738] EXT4-fs (loop3): orphan cleanup on readonly fs [ 925.566779][T22738] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 925.583510][T22738] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 925.691681][T22738] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.7471: attempt to clear invalid blocks 2 len 1 [ 925.763264][ T6560] usb 1-1: USB disconnect, device number 14 [ 925.772386][T22738] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.7471: invalid indirect mapped block 1819239214 (level 0) [ 925.889447][T22738] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.7471: invalid indirect mapped block 1819239214 (level 1) [ 925.940230][T22743] loop4: detected capacity change from 0 to 4096 [ 925.963719][T22738] EXT4-fs (loop3): 1 truncate cleaned up [ 926.006106][T22743] ntfs3(loop4): ino=3, Correct links count -> 2. [ 926.016831][T22738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 926.136513][T22738] EXT4-fs error (device loop3): ext4_lookup:1783: inode #2: comm syz.3.7471: 'file1' linked to parent dir [ 926.447220][ T6426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.890584][T22732] loop1: detected capacity change from 0 to 32768 [ 926.940666][T22732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7467 (22732) [ 927.027208][T22732] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.081555][T22732] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 927.368574][T22732] BTRFS info (device loop1): enabling ssd optimizations [ 927.449550][T22732] BTRFS info (device loop1): turning on async discard [ 927.476968][T22732] BTRFS info (device loop1): enabling free space tree [ 927.707401][T12719] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 927.792101][ T6419] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.922962][T12719] usb 6-1: Using ep0 maxpacket: 8 [ 927.958876][T12719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 928.036658][T12719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 928.090195][T12719] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 928.166858][T12719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 928.212000][T12719] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 928.244636][T12719] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 928.284367][T12719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.344393][T12719] usb 6-1: config 0 descriptor?? [ 928.385314][T22801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 928.791896][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.792758][ C1] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 928.801631][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.814334][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.821650][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.828670][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.836124][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.844158][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.858794][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.865804][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.873475][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.880446][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.887461][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.894420][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.901266][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.909901][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.919005][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.926627][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.933479][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.940488][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.947418][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.954268][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.961632][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.968485][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.975372][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.982312][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.989324][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 928.997117][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 929.004560][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 929.013044][T17493] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 929.069409][T12719] usb 6-1: USB disconnect, device number 18 [ 929.086653][ T6423] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 929.317461][T22832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 929.428251][T22800] loop2: detected capacity change from 0 to 32768 [ 929.450428][ T10] IPVS: starting estimator thread 0... [ 929.486655][T22800] btrfs: Deprecated parameter 'usebackuproot' [ 929.545547][T22800] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 929.569277][T22840] IPVS: using max 22 ests per chain, 52800 per kthread [ 929.580340][T22800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7486 (22800) [ 929.674713][T22800] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 929.758082][T22800] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 929.824346][T22847] openvswitch: netlink: Missing key (keys=40, expected=80) [ 929.886648][T22858] loop3: detected capacity change from 0 to 16 [ 929.960207][T22858] erofs (device loop3): mounted with root inode @ nid 36. [ 930.086217][T22800] BTRFS info (device loop2): rebuilding free space tree [ 930.181731][T22800] BTRFS info (device loop2): setting nodatasum [ 930.241418][T22800] BTRFS info (device loop2): setting nodatacow [ 930.280083][T22800] BTRFS info (device loop2): turning on async discard [ 930.323476][T22800] BTRFS info (device loop2): enabling free space tree [ 930.356437][T22800] BTRFS info (device loop2): force clearing of disk cache [ 930.388165][T22800] BTRFS info (device loop2): enabling auto defrag [ 930.412338][T22800] BTRFS info (device loop2): trying to use backup root at mount time [ 930.441774][T22800] BTRFS info (device loop2): max_inline set to 0 [ 930.642412][T22820] loop4: detected capacity change from 0 to 32768 [ 930.676810][ T6420] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 930.694507][T22820] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7494 (22820) [ 930.785391][T22820] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 930.838653][T22820] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 931.089754][T22820] BTRFS info (device loop4): turning off barriers [ 931.096245][T22820] BTRFS info (device loop4): enabling free space tree [ 931.260445][T22905] xt_HMARK: proto mask must be zero with L3 mode [ 931.420060][ T6436] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 931.482197][T22882] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 931.488907][T12719] IPVS: starting estimator thread 0... [ 931.598638][T22913] loop5: detected capacity change from 0 to 512 [ 931.607059][T22911] IPVS: using max 23 ests per chain, 55200 per kthread [ 931.628187][T22913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 931.787305][T22917] loop1: detected capacity change from 0 to 256 [ 931.809107][T22913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.862613][T22913] ext4 filesystem being mounted at /1160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.895572][T22922] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7520'. [ 931.906121][T22921] loop0: detected capacity change from 0 to 512 [ 931.964708][T22917] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 932.044621][T22921] EXT4-fs (loop0): orphan cleanup on readonly fs [ 932.112581][T22921] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 932.177042][T22917] loop1: Can't mount, would change RO state [ 932.200047][T22921] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 932.255859][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.293579][T22921] EXT4-fs error (device loop0): ext4_clear_blocks:874: inode #13: comm syz.0.7519: attempt to clear invalid blocks 2 len 1 [ 932.361187][T22931] netlink: 'syz.3.7521': attribute type 12 has an invalid length. [ 932.372792][T22921] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.7519: invalid indirect mapped block 1819239214 (level 0) [ 932.425917][T22921] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.7519: invalid indirect mapped block 1819239214 (level 1) [ 932.501633][T22921] EXT4-fs (loop0): 1 truncate cleaned up [ 932.557996][T22921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 932.594255][T22933] loop4: detected capacity change from 0 to 2048 [ 932.692771][T22933] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 932.753404][T22921] EXT4-fs error (device loop0): ext4_lookup:1783: inode #2: comm syz.0.7519: 'file1' linked to parent dir [ 933.002845][ T6421] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.678846][T22966] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.709616][T22966] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.861123][T22975] loop0: detected capacity change from 0 to 8 [ 934.478933][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7549'. [ 934.798578][T23005] loop0: detected capacity change from 0 to 256 [ 935.064340][T23015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7558'. [ 935.376301][T23021] loop0: detected capacity change from 0 to 1764 [ 935.481493][ T6494] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 935.501625][T23027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7566'. [ 935.534241][T23027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7566'. [ 935.676251][ T6494] usb 2-1: Using ep0 maxpacket: 32 [ 935.722935][ T6494] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 935.748127][ T6494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.781082][ T6494] usb 2-1: Product: syz [ 935.785302][ T6494] usb 2-1: Manufacturer: syz [ 935.789913][ T6494] usb 2-1: SerialNumber: syz [ 935.838834][ T6494] usb 2-1: config 0 descriptor?? [ 936.108408][ T6494] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 936.141508][ T6494] eb 9a 47 80 9b f8 7a f0 [ 936.157528][ T6494] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 936.335959][ T6494] usb 2-1: USB disconnect, device number 102 [ 936.522888][ T30] audit: type=1326 audit(2000000476.617:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d678efc9 code=0x7ffc0000 [ 936.579757][T23051] loop5: detected capacity change from 0 to 4096 [ 936.599591][ T30] audit: type=1326 audit(2000000476.617:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d678efc9 code=0x7ffc0000 [ 936.622519][T23051] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 936.664124][ T30] audit: type=1326 audit(2000000476.654:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f69d678efc9 code=0x7ffc0000 [ 936.702060][T23057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7581'. [ 936.769913][T23051] ntfs3(loop5): ino=19, mi_enum_attr [ 936.777231][ T30] audit: type=1326 audit(2000000476.654:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d678efc9 code=0x7ffc0000 [ 936.852307][T23031] loop4: detected capacity change from 0 to 32768 [ 936.867954][ T30] audit: type=1326 audit(2000000476.654:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23052 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d678efc9 code=0x7ffc0000 [ 936.894657][T23051] ntfs3(loop5): failed to convert "c46c" to iso8859-9 [ 936.913022][T23051] ntfs3(loop5): ino=20, mi_enum_attr [ 936.918818][T23031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7568 (23031) [ 937.003279][T23031] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.078797][T23031] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 937.244292][T23072] loop2: detected capacity change from 0 to 8 [ 937.381347][T23072] unable to read xattr id index table [ 937.407619][T23031] BTRFS info (device loop4): enabling ssd optimizations [ 937.447881][T23031] BTRFS info (device loop4): turning on async discard [ 937.480345][T23031] BTRFS info (device loop4): enabling free space tree [ 937.683627][T23093] loop0: detected capacity change from 0 to 512 [ 937.730300][T23093] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 937.766531][ T6436] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.822558][ T6560] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 938.025590][ T6560] usb 3-1: Using ep0 maxpacket: 32 [ 938.061727][ T6560] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 938.081001][ T6560] usb 3-1: config 0 has no interface number 0 [ 938.087140][ T6560] usb 3-1: too many endpoints for config 0 interface 130 altsetting 50: 167, using maximum allowed: 30 [ 938.174384][ T6560] usb 3-1: config 0 interface 130 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 938.249784][ T6421] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 938.260813][ T6560] usb 3-1: config 0 interface 130 has no altsetting 0 [ 938.282211][ T6560] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 938.357161][ T6560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.424288][ T6560] usb 3-1: config 0 descriptor?? [ 938.687664][ T6560] usb 3-1: string descriptor 0 read error: -71 [ 938.785011][ T6560] usb 3-1: USB disconnect, device number 4 [ 938.984984][T23087] loop5: detected capacity change from 0 to 32768 [ 939.076714][T23087] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 939.099241][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 939.286243][T23087] XFS (loop5): Ending clean mount [ 939.303482][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 939.323693][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.328325][T23103] loop4: detected capacity change from 0 to 32768 [ 939.368017][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.402186][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 939.407242][T23103] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 939.474000][ T10] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 939.514083][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.551545][T23103] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 939.562626][ T10] usb 2-1: Product: syz [ 939.578871][ T10] usb 2-1: Manufacturer: syz [ 939.608171][ T10] usb 2-1: SerialNumber: syz [ 939.634923][T23136] netlink: 'syz.3.7604': attribute type 5 has an invalid length. [ 939.653655][ T10] usb 2-1: config 0 descriptor?? [ 939.679952][ T10] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 939.682391][ T6431] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 939.696254][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7604'. [ 939.862963][T23140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7609'. [ 939.903115][T23140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.996057][T12719] usb 2-1: USB disconnect, device number 103 [ 940.053316][ T6436] ocfs2: Unmounting device (7,4) on (node local) [ 940.300326][T23148] loop3: detected capacity change from 0 to 8 [ 940.833645][T23164] random: crng reseeded on system resumption [ 941.026385][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7621'. [ 941.124478][T23172] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7624'. [ 941.637699][T23188] loop1: detected capacity change from 0 to 64 [ 942.292230][T23208] netlink: 'syz.5.7643': attribute type 4 has an invalid length. [ 942.613375][T23218] openvswitch: netlink: IP tunnel dst address not specified [ 942.667812][T23180] loop2: detected capacity change from 0 to 32768 [ 942.797496][T23180] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 942.827172][T23180] (syz.2.7628,23180,0):ocfs2_symlink:2080 ERROR: status = -2 [ 943.086686][ T6420] (syz-executor,6420,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode. [ 943.163189][T23230] loop1: detected capacity change from 0 to 1764 [ 943.163197][ T6420] ocfs2: Unmounting device (7,2) on (node local) [ 943.287601][T23236] loop5: detected capacity change from 0 to 1024 [ 943.320763][T23236] EXT4-fs: inline encryption not supported [ 943.359786][T23236] EXT4-fs: Ignoring removed i_version option [ 943.419304][T23236] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 943.492357][T23236] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.7654: lblock 2 mapped to illegal pblock 2 (length 1) [ 943.653924][T23236] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 943.699225][T23236] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.7654: lblock 0 mapped to illegal pblock 48 (length 1) [ 943.803803][T23236] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 943.858212][T23236] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.7654: Failed to acquire dquot type 0 [ 943.961112][T23236] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 943.986547][T23236] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.7654: mark_inode_dirty error [ 944.024036][T23236] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 944.067139][T23236] EXT4-fs (loop5): 1 orphan inode deleted [ 944.085338][T23236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.099459][T18487] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 944.113638][ T6580] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 944.193408][T18487] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 944.234522][T18487] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 944.285172][ T6580] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 944.304619][T23236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.307085][ T6580] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 944.360109][T23236] EXT4-fs error (device loop5): __ext4_get_inode_loc:4831: comm syz.5.7654: Invalid inode table block 1 in block_group 0 [ 944.365628][ T6580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.413708][ T6580] usb 2-1: config 0 has no interface number 0 [ 944.448061][ T6580] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 944.464983][T23236] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 944.484119][ T6580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.500139][ T6580] usb 2-1: Product: syz [ 944.518047][ T6580] usb 2-1: Manufacturer: syz [ 944.522798][ T6580] usb 2-1: SerialNumber: syz [ 944.529116][T23236] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz.5.7654: mark_inode_dirty error [ 944.563751][ T6580] usb 2-1: config 0 descriptor?? [ 944.593677][ T6580] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 944.612455][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 944.817202][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 944.832444][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.909181][ T10] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 944.929211][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.955994][ T10] usb 5-1: Product: syz [ 944.960226][ T10] usb 5-1: Manufacturer: syz [ 944.970551][ T6494] usb 2-1: USB disconnect, device number 104 [ 944.997756][ T10] usb 5-1: SerialNumber: syz [ 945.031386][ T10] usb 5-1: config 0 descriptor?? [ 945.054125][ T10] usb 5-1: bad CDC descriptors [ 945.088036][ T10] usb 5-1: unsupported MDLM descriptors [ 945.316424][ T43] usb 5-1: USB disconnect, device number 3 [ 945.690954][T23306] loop5: detected capacity change from 0 to 128 [ 945.799354][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 945.926117][T23311] loop3: detected capacity change from 0 to 1024 [ 945.976476][T23311] EXT4-fs: Ignoring removed orlov option [ 946.002357][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 946.040909][T23311] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 946.044497][ T10] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 946.067594][T23311] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 946.088061][ T10] usb 3-1: config 0 has no interface number 0 [ 946.121047][ T10] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 946.136267][T23311] EXT4-fs (loop3): invalid journal inode [ 946.147943][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.152282][T23311] EXT4-fs (loop3): can't get journal size [ 946.180371][ T10] usb 3-1: Product: syz [ 946.198455][T23311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 946.201992][ T10] usb 3-1: Manufacturer: syz [ 946.243974][ T10] usb 3-1: SerialNumber: syz [ 946.255818][T23311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.267042][ T10] usb 3-1: config 0 descriptor?? [ 946.499788][ T10] mos7840 3-1:0.225: required endpoints missing [ 946.623888][T23333] xt_cgroup: xt_cgroup: no path or classid specified [ 946.778604][T23334] loop1: detected capacity change from 0 to 2048 [ 946.806416][T23334] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504 [ 946.809092][ T10] usb 3-1: USB disconnect, device number 5 [ 946.896276][T23334] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.549556][T23319] loop4: detected capacity change from 0 to 32768 [ 947.558570][T23319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7687 (23319) [ 947.621970][T23319] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 947.671468][T23319] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 947.866872][T23319] BTRFS info (device loop4): enabling ssd optimizations [ 947.887729][T23319] BTRFS info (device loop4): turning on async discard [ 947.904796][T23319] BTRFS info (device loop4): enabling free space tree [ 948.238378][ T6436] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 948.250053][T23382] loop1: detected capacity change from 0 to 2048 [ 948.285599][T23382] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 948.352293][T23382] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 948.390009][T23382] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 948.454898][T23382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 948.489603][T23388] loop3: detected capacity change from 0 to 1764 [ 948.650515][T23393] overlayfs: overlapping lowerdir path [ 949.253226][T23407] loop5: detected capacity change from 0 to 1024 [ 949.379175][T23407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.510049][T23407] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.7721: inode #12: comm syz.5.7721: iget: illegal inode # [ 949.558269][T23407] EXT4-fs (loop5): Remounting filesystem read-only [ 949.703599][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.022828][T23432] loop5: detected capacity change from 0 to 2048 [ 950.093274][T23437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7735'. [ 950.109196][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 950.166832][T23440] tmpfs: Bad value for 'mpol' [ 950.279652][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 950.312030][ T10] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 950.336148][T23446] loop1: detected capacity change from 0 to 8 [ 950.342306][ T10] usb 4-1: config 0 has no interface number 0 [ 950.361328][ T10] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 950.399155][T23446] SQUASHFS error: Unable to read inode 0xe3 [ 950.418681][ T10] usb 4-1: config 0 interface 96 has no altsetting 0 [ 950.439251][ T10] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 950.456169][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.500418][ T10] usb 4-1: Product: syz [ 950.511206][ T10] usb 4-1: Manufacturer: syz [ 950.516745][ T10] usb 4-1: SerialNumber: syz [ 950.573015][ T10] usb 4-1: config 0 descriptor?? [ 950.600446][ T7045] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 950.654518][T23452] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 950.837117][ T7045] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 950.857919][ T7045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.865962][ T7045] usb 3-1: Product: syz [ 950.912467][ T7045] usb 3-1: Manufacturer: syz [ 950.924490][ T7045] usb 3-1: SerialNumber: syz [ 950.947219][ T7045] usb 3-1: config 0 descriptor?? [ 951.036628][ T10] usb 4-1: USB disconnect, device number 10 [ 951.187743][ T7045] usb-storage 3-1:0.0: USB Mass Storage device detected [ 951.345128][ T7045] usb 3-1: USB disconnect, device number 6 [ 951.635065][T23482] xt_TCPMSS: Only works on TCP SYN packets [ 953.615819][T23548] loop5: detected capacity change from 0 to 1024 [ 953.622684][T23512] loop0: detected capacity change from 0 to 32768 [ 953.729938][T23512] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 953.778670][T23512] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 953.885695][T18980] hfsplus: b-tree write err: -5, ino 4 [ 953.934205][T23559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7793'. [ 954.233926][ T6421] ocfs2: Unmounting device (7,0) on (node local) [ 954.289533][T15873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 954.465273][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7802'. [ 954.506349][T15873] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 954.547928][T15873] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 954.580126][T15873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.659616][T15873] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 954.685281][T23578] openvswitch: netlink: Flow key attribute not present in set flow. [ 955.135768][ T30] audit: type=1326 audit(2000000494.030:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.1.7810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 955.158182][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.230965][ T30] audit: type=1326 audit(2000000494.030:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.1.7810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 955.303640][ T30] audit: type=1326 audit(2000000494.030:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.1.7810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 955.406523][ T30] audit: type=1326 audit(2000000494.030:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23591 comm="syz.1.7810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff58efc9 code=0x7ffc0000 [ 955.443562][T23570] loop4: detected capacity change from 0 to 32768 [ 955.514755][T23570] read_mapping_page failed! [ 955.749001][T23606] netlink: 'syz.0.7818': attribute type 1 has an invalid length. [ 955.757064][T23606] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7818'. [ 955.853496][T15873] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 956.059145][T23611] loop3: detected capacity change from 0 to 4096 [ 956.080241][T15873] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 956.115113][T15873] stv0680 3-1:4.0: last error: 86, command = 0x70 [ 956.129214][T23611] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 956.171492][T15873] usb 3-1: USB disconnect, device number 7 [ 957.380886][T23655] loop3: detected capacity change from 0 to 8 [ 957.442568][T23656] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 957.477303][T23655] SQUASHFS error: Unable to read directory block [629:0] [ 957.530726][T23656] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 957.883784][T23670] netlink: 'syz.2.7848': attribute type 2 has an invalid length. [ 957.932023][T23670] netlink: 'syz.2.7848': attribute type 1 has an invalid length. [ 958.124917][T23674] kAFS: unable to lookup cell '' [ 958.543270][T23694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7861'. [ 958.550945][T23684] bond4: Removing last arp target with arp_interval on [ 959.262713][T23717] loop5: detected capacity change from 0 to 512 [ 959.352209][T23717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.392657][T23717] ext4 filesystem being mounted at /1226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 959.435784][T23727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7874'. [ 959.539466][T23727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.631215][ T6431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.683927][T23728] loop1: detected capacity change from 0 to 4096 [ 959.915213][T23736] bridge2: entered promiscuous mode [ 959.947263][T23736] bridge2: entered allmulticast mode [ 960.111773][T23744] loop3: detected capacity change from 0 to 2048 [ 960.179713][T23744] NILFS (loop3): invalid segment: Inconsistency found [ 960.233419][T23744] NILFS (loop3): trying rollback from an earlier position [ 960.288231][T23744] NILFS (loop3): recovery complete [ 960.472441][ T6501] kworker/0:6 (6501) used greatest stack depth: 17464 bytes left [ 960.734173][T23765] libceph: resolve '00' (ret=-3): failed [ 960.788414][T23756] hfs: unable to load iocharset "io#harset" [ 961.229340][T15873] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 961.425590][T15873] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 961.453519][T15873] usb 5-1: config 0 has no interface number 0 [ 961.483103][T15873] usb 5-1: config 0 interface 13 has no altsetting 0 [ 961.522835][T15873] usb 5-1: string descriptor 0 read error: -22 [ 961.541521][T15873] usb 5-1: New USB device found, idVendor=19d2, idProduct=0049, bcdDevice=5a.26 [ 961.571352][T15873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.636748][T15873] usb 5-1: config 0 descriptor?? [ 961.692888][T15873] usb 5-1: bad CDC descriptors [ 961.734519][T23789] loop0: detected capacity change from 0 to 4096 [ 961.790439][T23789] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 961.866157][ T7045] usb 5-1: USB disconnect, device number 4 [ 961.977306][T23753] loop2: detected capacity change from 0 to 40427 [ 962.031385][T23753] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 962.039172][T23753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 962.117924][T23753] F2FS-fs (loop2): invalid crc value [ 962.409863][T23810] loop1: detected capacity change from 0 to 256 [ 962.449533][T23810] exfat: Deprecated parameter 'utf8' [ 962.485476][T23810] exfat: Deprecated parameter 'namecase' [ 962.539215][T23753] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 962.587604][T23810] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 962.640536][T23753] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 962.744057][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7918'. [ 962.757612][T23753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 962.798821][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7918'. [ 963.145938][T23827] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7920'. [ 963.481289][T23830] loop1: detected capacity change from 0 to 4096 [ 963.536738][T23830] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 964.470188][T23820] loop4: detected capacity change from 0 to 32768 [ 964.544196][T23820] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7916 (23820) [ 964.666150][T23820] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 964.715515][T23820] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 964.962181][T23820] BTRFS info (device loop4): enabling ssd optimizations [ 965.001739][T23820] BTRFS info (device loop4): turning on async discard [ 965.057465][T23820] BTRFS info (device loop4): enabling free space tree [ 965.400399][ T6436] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 965.414062][T23890] bridge2: entered promiscuous mode [ 965.419321][T23890] bridge2: entered allmulticast mode [ 965.732051][T23898] loop1: detected capacity change from 0 to 256 [ 965.876209][T23898] FAT-fs (loop1): Directory bread(block 64) failed [ 965.907983][T23898] FAT-fs (loop1): Directory bread(block 65) failed [ 965.947133][T23898] FAT-fs (loop1): Directory bread(block 66) failed [ 965.985678][T23898] FAT-fs (loop1): Directory bread(block 67) failed [ 966.028210][T23898] FAT-fs (loop1): Directory bread(block 68) failed [ 966.067418][T23898] FAT-fs (loop1): Directory bread(block 69) failed [ 966.120303][T23898] FAT-fs (loop1): Directory bread(block 70) failed [ 966.130994][T23898] FAT-fs (loop1): Directory bread(block 71) failed [ 966.158797][T23898] FAT-fs (loop1): Directory bread(block 72) failed [ 966.165396][T23898] FAT-fs (loop1): Directory bread(block 73) failed [ 966.234665][T23906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7946'. [ 966.243880][T23906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7946'. [ 966.366748][T23858] loop0: detected capacity change from 0 to 32768 [ 966.409050][T23910] loop5: detected capacity change from 0 to 2048 [ 966.452726][T23910] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27485, location=27485 [ 966.544053][ T30] audit: type=1800 audit(2000000504.682:107): pid=23898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7944" name="file1" dev="loop1" ino=1048760 res=0 errno=0 [ 966.569174][T23910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 966.969408][T23892] loop2: detected capacity change from 0 to 32768 [ 967.029612][T23920] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 967.064461][T23892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7941 (23892) [ 967.181232][T23892] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.243753][T23892] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 967.420628][ T7045] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 967.639332][ T7045] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 967.662369][ T7045] usb 4-1: config 95 has no interface number 0 [ 967.688610][ T7045] usb 4-1: config 95 interface 1 has no altsetting 0 [ 967.716649][ T7045] usb 4-1: string descriptor 0 read error: -22 [ 967.738784][ T7045] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 967.809668][ T7045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.829473][T23892] BTRFS info (device loop2): rebuilding free space tree [ 967.907497][T23892] BTRFS info (device loop2): enabling ssd optimizations [ 967.939695][T23892] BTRFS info (device loop2): using spread ssd allocation scheme [ 967.976514][T23892] BTRFS info (device loop2): turning on async discard [ 968.030043][T23892] BTRFS info (device loop2): enabling free space tree [ 968.049534][T23892] BTRFS info (device loop2): force clearing of disk cache [ 968.533370][ T7045] usb 4-1: USB disconnect, device number 11 [ 968.668247][ T6420] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 968.992757][T23980] loop0: detected capacity change from 0 to 2048 [ 969.046104][T23980] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 969.261516][T23990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 969.368217][T23980] NILFS (loop0): failed to count free inodes: err=-34 [ 969.408536][T23993] loop4: detected capacity change from 0 to 128 [ 969.497736][T23993] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 969.584642][T23993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 969.970036][ T6421] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 147 [ 970.032246][T24007] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7978'. [ 970.040242][ T6421] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 970.128790][T23964] loop1: detected capacity change from 0 to 32768 [ 970.147969][ T6421] Remounting filesystem read-only [ 970.153149][ T6421] NILFS (loop0): error -5 truncating bmap (ino=15) [ 970.186670][T23964] (syz.1.7960,23964,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 970.245576][ T6421] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 970.259123][T24012] comedi comedi0: rti800: I/O port conflict (0x9,16) [ 970.284887][T23964] (syz.1.7960,23964,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 970.499682][T24019] netlink: 'syz.3.7985': attribute type 13 has an invalid length. [ 970.517362][T23964] JBD2: Ignoring recovery information on journal [ 970.757051][T23964] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 971.109979][T23964] [ 971.112347][T23964] ====================================================== [ 971.119366][T23964] WARNING: possible circular locking dependency detected [ 971.126381][T23964] syzkaller #0 Not tainted [ 971.130924][T23964] ------------------------------------------------------ [ 971.137933][T23964] syz.1.7960/23964 is trying to acquire lock: [ 971.143994][T23964] ffff888076528610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x563/0xb00 [ 971.153454][T23964] [ 971.153454][T23964] but task is already holding lock: [ 971.160814][T23964] ffff888051190660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 971.171745][T23964] [ 971.171745][T23964] which lock already depends on the new lock. [ 971.171745][T23964] [ 971.182149][T23964] [ 971.182149][T23964] the existing dependency chain (in reverse order) is: [ 971.191158][T23964] [ 971.191158][T23964] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 971.200050][T23964] down_write+0x92/0x200 [ 971.204857][T23964] ocfs2_lock_global_qf+0x1c1/0x2d0 [ 971.210596][T23964] ocfs2_acquire_dquot+0x258/0xb00 [ 971.216251][T23964] dqget+0x693/0x1180 [ 971.220787][T23964] dquot_set_dqblk+0x2b/0x1290 [ 971.226090][T23964] quota_setquota+0x4c4/0x5e0 [ 971.231328][T23964] do_quotactl+0xaf6/0x13d0 [ 971.236379][T23964] __x64_sys_quotactl+0x1b3/0x440 [ 971.241950][T23964] do_syscall_64+0xcd/0xfa0 [ 971.246987][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.253413][T23964] [ 971.253413][T23964] -> #5 (&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 971.264038][T23964] down_write+0x92/0x200 [ 971.268821][T23964] ocfs2_lock_global_qf+0x194/0x2d0 [ 971.274743][T23964] ocfs2_acquire_dquot+0x258/0xb00 [ 971.280393][T23964] dqget+0x693/0x1180 [ 971.284912][T23964] dquot_set_dqblk+0x2b/0x1290 [ 971.290214][T23964] quota_setquota+0x4c4/0x5e0 [ 971.295437][T23964] do_quotactl+0xaf6/0x13d0 [ 971.300487][T23964] __x64_sys_quotactl+0x1b3/0x440 [ 971.306057][T23964] do_syscall_64+0xcd/0xfa0 [ 971.311099][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.317524][T23964] [ 971.317524][T23964] -> #4 (&dquot->dq_lock){+.+.}-{4:4}: [ 971.325194][T23964] __mutex_lock+0x193/0x1060 [ 971.330321][T23964] dqget+0x5f1/0x1180 [ 971.334838][T23964] dquot_transfer+0x3a8/0x6a0 [ 971.340061][T23964] ext4_setattr+0x885/0x2ae0 [ 971.345195][T23964] notify_change+0x6d2/0x12a0 [ 971.350414][T23964] chown_common+0x54e/0x680 [ 971.355447][T23964] do_fchownat+0x1a7/0x200 [ 971.360392][T23964] __x64_sys_lchown+0x7e/0xc0 [ 971.365600][T23964] do_syscall_64+0xcd/0xfa0 [ 971.370635][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.377057][T23964] [ 971.377057][T23964] -> #3 (&ei->xattr_sem){++++}-{4:4}: [ 971.384640][T23964] down_read+0x9b/0x480 [ 971.389342][T23964] ext4_setattr+0x875/0x2ae0 [ 971.394474][T23964] notify_change+0x6d2/0x12a0 [ 971.399691][T23964] chown_common+0x54e/0x680 [ 971.404720][T23964] do_fchownat+0x1a7/0x200 [ 971.409662][T23964] __x64_sys_chown+0x7b/0xc0 [ 971.414779][T23964] do_syscall_64+0xcd/0xfa0 [ 971.419815][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.426254][T23964] [ 971.426254][T23964] -> #2 (jbd2_handle){++++}-{0:0}: [ 971.433570][T23964] start_this_handle+0x5ea/0x1410 [ 971.439145][T23964] jbd2__journal_start+0x394/0x6a0 [ 971.444811][T23964] jbd2_journal_start+0x29/0x40 [ 971.450245][T23964] ocfs2_start_trans+0x3b9/0x970 [ 971.455808][T23964] ocfs2_shutdown_local_alloc+0x281/0xa10 [ 971.462096][T23964] ocfs2_dismount_volume+0x1f5/0xa00 [ 971.467933][T23964] generic_shutdown_super+0x156/0x390 [ 971.473845][T23964] kill_block_super+0x3b/0x90 [ 971.479067][T23964] deactivate_locked_super+0xc1/0x1a0 [ 971.484986][T23964] deactivate_super+0xde/0x100 [ 971.490294][T23964] cleanup_mnt+0x225/0x450 [ 971.495273][T23964] task_work_run+0x150/0x240 [ 971.500401][T23964] exit_to_user_mode_loop+0xec/0x130 [ 971.506307][T23964] do_syscall_64+0x426/0xfa0 [ 971.511450][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.517877][T23964] [ 971.517877][T23964] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 971.526421][T23964] down_read+0x9b/0x480 [ 971.531120][T23964] ocfs2_start_trans+0x3ae/0x970 [ 971.536595][T23964] ocfs2_shutdown_local_alloc+0x281/0xa10 [ 971.542862][T23964] ocfs2_dismount_volume+0x1f5/0xa00 [ 971.548699][T23964] generic_shutdown_super+0x156/0x390 [ 971.554612][T23964] kill_block_super+0x3b/0x90 [ 971.559823][T23964] deactivate_locked_super+0xc1/0x1a0 [ 971.565746][T23964] deactivate_super+0xde/0x100 [ 971.571057][T23964] cleanup_mnt+0x225/0x450 [ 971.576014][T23964] task_work_run+0x150/0x240 [ 971.581135][T23964] exit_to_user_mode_loop+0xec/0x130 [ 971.586959][T23964] do_syscall_64+0x426/0xfa0 [ 971.592087][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.598507][T23964] [ 971.598507][T23964] -> #0 (sb_internal#4){.+.+}-{0:0}: [ 971.606013][T23964] __lock_acquire+0x126f/0x1c90 [ 971.611420][T23964] lock_acquire+0x179/0x350 [ 971.616445][T23964] ocfs2_start_trans+0x29d/0x970 [ 971.621918][T23964] ocfs2_acquire_dquot+0x563/0xb00 [ 971.627562][T23964] dqget+0x693/0x1180 [ 971.632111][T23964] dquot_set_dqblk+0x2b/0x1290 [ 971.637405][T23964] quota_setquota+0x4c4/0x5e0 [ 971.642622][T23964] do_quotactl+0xaf6/0x13d0 [ 971.647667][T23964] __x64_sys_quotactl+0x1b3/0x440 [ 971.653237][T23964] do_syscall_64+0xcd/0xfa0 [ 971.658274][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.664694][T23964] [ 971.664694][T23964] other info that might help us debug this: [ 971.664694][T23964] [ 971.674916][T23964] Chain exists of: [ 971.674916][T23964] sb_internal#4 --> &ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key [ 971.674916][T23964] [ 971.691994][T23964] Possible unsafe locking scenario: [ 971.691994][T23964] [ 971.699437][T23964] CPU0 CPU1 [ 971.704789][T23964] ---- ---- [ 971.710166][T23964] lock(&ocfs2_quota_ip_alloc_sem_key); [ 971.715804][T23964] lock(&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]); [ 971.725702][T23964] lock(&ocfs2_quota_ip_alloc_sem_key); [ 971.733863][T23964] rlock(sb_internal#4); [ 971.738214][T23964] [ 971.738214][T23964] *** DEADLOCK *** [ 971.738214][T23964] [ 971.746345][T23964] 4 locks held by syz.1.7960/23964: [ 971.751532][T23964] #0: ffff8880765280e0 (&type->s_umount_key#110){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 971.761514][T23964] #1: ffff88809b4cc0a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x24b/0xb00 [ 971.771685][T23964] #2: ffff8880511909c0 (&ocfs2_sysfile_lock_key[GROUP_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x194/0x2d0 [ 971.784787][T23964] #3: ffff888051190660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 971.796174][T23964] [ 971.796174][T23964] stack backtrace: [ 971.802056][T23964] CPU: 1 UID: 0 PID: 23964 Comm: syz.1.7960 Not tainted syzkaller #0 PREEMPT(full) [ 971.802097][T23964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 971.802119][T23964] Call Trace: [ 971.802131][T23964] [ 971.802145][T23964] dump_stack_lvl+0x116/0x1f0 [ 971.802187][T23964] print_circular_bug+0x275/0x350 [ 971.802246][T23964] check_noncircular+0x14c/0x170 [ 971.802306][T23964] __lock_acquire+0x126f/0x1c90 [ 971.802371][T23964] lock_acquire+0x179/0x350 [ 971.802401][T23964] ? ocfs2_acquire_dquot+0x563/0xb00 [ 971.802442][T23964] ? __pfx___might_resched+0x10/0x10 [ 971.802491][T23964] ocfs2_start_trans+0x29d/0x970 [ 971.802537][T23964] ? ocfs2_acquire_dquot+0x563/0xb00 [ 971.802577][T23964] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 971.802624][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.802667][T23964] ? do_raw_spin_unlock+0x172/0x230 [ 971.802706][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.802748][T23964] ? _raw_spin_unlock+0x28/0x50 [ 971.802784][T23964] ocfs2_acquire_dquot+0x563/0xb00 [ 971.802828][T23964] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 971.802869][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.802923][T23964] dqget+0x693/0x1180 [ 971.802962][T23964] ? __pfx_dqget+0x10/0x10 [ 971.802996][T23964] ? map_id_range_down+0x2bc/0x3b0 [ 971.803040][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803082][T23964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 971.803130][T23964] dquot_set_dqblk+0x2b/0x1290 [ 971.803173][T23964] quota_setquota+0x4c4/0x5e0 [ 971.803226][T23964] ? __pfx_quota_setquota+0x10/0x10 [ 971.803278][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803337][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803379][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803420][T23964] ? security_capable+0x7e/0x260 [ 971.803466][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803511][T23964] do_quotactl+0xaf6/0x13d0 [ 971.803563][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803606][T23964] ? __pfx_do_quotactl+0x10/0x10 [ 971.803658][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803705][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803748][T23964] ? user_get_super+0x109/0x1b0 [ 971.803801][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.803842][T23964] ? quotactl_block+0x17e/0x690 [ 971.803900][T23964] ? __pfx_quotactl_block+0x10/0x10 [ 971.803958][T23964] __x64_sys_quotactl+0x1b3/0x440 [ 971.804012][T23964] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 971.804066][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.804107][T23964] ? xfd_validate_state+0x61/0x180 [ 971.804163][T23964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.804210][T23964] do_syscall_64+0xcd/0xfa0 [ 971.804251][T23964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.804287][T23964] RIP: 0033:0x7fcfff58efc9 [ 971.804313][T23964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.804348][T23964] RSP: 002b:00007fd0003ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 971.804380][T23964] RAX: ffffffffffffffda RBX: 00007fcfff7e5fa0 RCX: 00007fcfff58efc9 [ 971.804405][T23964] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000801 [ 971.804430][T23964] RBP: 00007fcfff611f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.804452][T23964] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 971.804474][T23964] R13: 00007fcfff7e6038 R14: 00007fcfff7e5fa0 R15: 00007ffe77dcf398 [ 971.804510][T23964] [ 972.185542][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.191972][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.349255][ T6419] ocfs2: Unmounting device (7,1) on (node local) [ 972.488856][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 972.651788][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 972.658921][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 972.668659][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 972.680698][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 972.692003][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 972.701781][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 972.723530][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 972.733577][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 50 [ 972.745808][ T43] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 972.754950][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.765259][ T43] usb 6-1: Product: syz [ 972.769776][ T43] usb 6-1: Manufacturer: syz [ 972.774390][ T43] usb 6-1: SerialNumber: syz [ 972.781014][ T43] usb 6-1: config 0 descriptor?? [ 972.787320][T24043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 972.800138][T24043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 972.811451][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.064996][ T7045] usb 6-1: USB disconnect, device number 19