last executing test programs: 2.672315689s ago: executing program 4 (id=5860): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80, 0x6}, 'port1\x00', 0x54, 0x110000, 0x7ffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x2}) 2.55511238s ago: executing program 1 (id=5861): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000003980)={0x9, @pix_mp={0x6, 0x7, 0x50323234, 0x9, 0x8, [{0x8ebb, 0x3}, {0x6, 0x4}, {0x6}, {0x7, 0x80000001}, {0x4, 0xfffffff8}, {0x8, 0xffff0001}, {0xa6, 0x7}, {0x4, 0x9}], 0x7, 0x0, 0x8, 0x2}}) 2.509341958s ago: executing program 5 (id=5864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) 2.493299297s ago: executing program 4 (id=5866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x44, 0x6, 0x518, 0x170, 0x0, 0x208, 0x208, 0x170, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5826b78f3a540842}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'wg2\x00'}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e22], [0x4e24, 0x4e20], [0x7fff, 0x3, 0x95, 0x0, 0xffffffff, 0x0, 0x4, 0x4, 0x0, 0x3, 0x9, 0x9, 0x1000, 0xb, 0xc4f, 0x3, 0x6, 0x3, 0x81, 0x0, 0x40000000, 0x2, 0x3, 0xffff, 0x6, 0x9, 0x7f, 0x401, 0x8, 0x3, 0x5, 0x0, 0xe4, 0xfffff801, 0x1, 0xffffffff, 0xb, 0x8, 0x5, 0xffff, 0x4, 0x3, 0x39c, 0x4, 0x5, 0x64, 0x7, 0x8, 0x3, 0x3, 0x8, 0xa, 0x0, 0x8, 0x3, 0xeb2, 0x8000, 0x6, 0xc0, 0xe, 0x4, 0x7f, 0x100], 0x4, [{0x9, 0x1, 0x8}, {0x5, 0x4, 0x10}, {0x81, 0x5, 0x7f}, {0x1, 0x29, 0x7f}], 0x1, 0x2, 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) 2.391107829s ago: executing program 4 (id=5867): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x6, 0x80, 0x4}, 0x6}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.172611875s ago: executing program 5 (id=5870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c30000000000000000000280012800b000106000000746e6c0000180002"], 0x5c}}, 0x0) 2.115680642s ago: executing program 4 (id=5872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000008c0)=0x3, 0x4) 1.949772215s ago: executing program 1 (id=5873): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.828024028s ago: executing program 5 (id=5876): setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') 1.82668914s ago: executing program 4 (id=5877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xcd74cfa22645be9d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x84) 1.738828192s ago: executing program 2 (id=5879): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x141a82, 0x4) write$P9_RLERROR(r0, &(0x7f0000000180)={0x9, 0x7, 0x1}, 0x9) 1.610409844s ago: executing program 5 (id=5881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_delrule={0x50, 0x21, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x14, 0x10, 0x5, 0x3, 0x0, 0x0, 0x1, 0x10006}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff, 0xffffffffffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) 1.469369759s ago: executing program 4 (id=5882): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009040000000202"], 0x0) 1.467463668s ago: executing program 2 (id=5883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1.41037387s ago: executing program 0 (id=5884): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8040801) 1.299343542s ago: executing program 5 (id=5885): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) 1.268739906s ago: executing program 3 (id=5886): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x10, 0x3011, 0x1}) 1.268591398s ago: executing program 2 (id=5887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000035c0)={{0x2, 0xffff, @private=0xa010102}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @private}, 'sit0\x00'}) 1.255490973s ago: executing program 1 (id=5888): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x15, 0x1, 0xffffffff, 0x0, {0xa}, [@typed={0x8, 0x1001, 0x0, 0x0, @u32=0xc4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) 1.237689403s ago: executing program 0 (id=5889): prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) socket$tipc(0x1e, 0x5, 0x0) 1.142969942s ago: executing program 5 (id=5890): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 1.118170252s ago: executing program 2 (id=5891): r0 = syz_open_dev$loop(&(0x7f0000000340), 0x7ff, 0x8542) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/194, 0xc2}], 0x1, 0x10000fff, 0x0, 0xb) 995.261578ms ago: executing program 3 (id=5892): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x138}, 0x4000010) 995.150994ms ago: executing program 0 (id=5893): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5434, 0x0) 985.381285ms ago: executing program 2 (id=5894): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp1250 INT_MAX [ 540.191005][T16293] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 540.270868][ T6098] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 540.422468][T16337] loop1: detected capacity change from 0 to 1024 [ 540.454579][ T6098] usb 1-1: Using ep0 maxpacket: 16 [ 540.483412][ T6098] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 540.497920][ T6098] usb 1-1: config 254 has no interface number 0 [ 540.525703][ T6098] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 540.585590][ T6098] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.620920][ T6098] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.621295][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4623'. [ 540.653965][ T6098] usb 1-1: config 254 interface 235 has no altsetting 0 [ 540.663958][ T6098] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 540.673236][ T6098] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 540.682032][ T6098] usb 1-1: Product: syz [ 540.705626][ T6098] usb 1-1: Manufacturer: syz [ 540.721323][ T6098] usb 1-1: SerialNumber: syz [ 540.790692][T16325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 540.978522][T16347] loop3: detected capacity change from 0 to 2048 [ 541.018181][T16347] EXT4-fs: Ignoring removed orlov option [ 541.045829][T16347] EXT4-fs: Ignoring removed oldalloc option [ 541.064839][T16325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 541.125918][T16347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.156133][ T6098] usbtest 1-1:254.235: Linux gadget zero [ 541.203647][ T6098] usbtest 1-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 541.262427][T16347] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.4627: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 541.319971][T16358] loop4: detected capacity change from 0 to 256 [ 541.385195][ T6202] usb 1-1: USB disconnect, device number 98 [ 541.430206][ T6124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.699038][T16341] loop5: detected capacity change from 0 to 32768 [ 541.744761][T16341] xfs: Deprecated parameter 'attr2' [ 541.774381][T16341] XFS: attr2 mount option is deprecated. [ 541.877368][T16341] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 541.897505][T16382] loop2: detected capacity change from 0 to 64 [ 542.000970][T16382] Trying to free block not in datazone [ 542.020963][T16341] XFS (loop5): Ending clean mount [ 542.102392][T16341] XFS (loop5): Quotacheck needed: Please wait. [ 542.273242][T16341] XFS (loop5): Quotacheck: Done. [ 542.397664][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4644'. [ 542.537770][ T6130] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 543.258343][T16422] loop3: detected capacity change from 0 to 512 [ 543.349160][T16426] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4661'. [ 543.374235][T16422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.392721][T16422] ext4 filesystem being mounted at /680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.435009][T16435] loop4: detected capacity change from 0 to 8 [ 543.436741][T16432] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 543.490886][T16422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 543.589333][T16435] SQUASHFS error: Unable to read inode 0xa7 [ 543.708033][T16404] loop2: detected capacity change from 0 to 32768 [ 543.736253][T16404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4649 (16404) [ 543.738262][ T6124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.799296][T16404] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.838106][T16404] BTRFS info (device loop2): using sha256 checksum algorithm [ 544.058925][T16404] BTRFS info (device loop2): enabling ssd optimizations [ 544.138790][T16404] BTRFS info (device loop2): turning on async discard [ 544.145635][T16404] BTRFS info (device loop2): enabling free space tree [ 544.580270][ T6121] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 544.630259][T16488] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 545.009564][T16502] loop0: detected capacity change from 0 to 8 [ 545.016303][ T6202] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 545.215338][ T6202] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 545.255031][ T6202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.337484][ T6202] usb 4-1: config 0 descriptor?? [ 545.386486][ T6202] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 545.695426][T16522] loop0: detected capacity change from 0 to 512 [ 545.812345][ T6202] gspca_cpia1: usb_control_msg 03, error -71 [ 545.817175][T16527] vivid-001: disconnect [ 545.823115][ T6202] gspca_cpia1: usb_control_msg 01, error -71 [ 545.842548][T16522] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 545.847082][T16525] vivid-001: reconnect [ 545.870144][ T6202] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 545.885692][T16522] EXT4-fs (loop0): mount failed [ 545.892193][ T6202] usb 4-1: USB disconnect, device number 61 [ 546.199237][T16538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4704'. [ 546.325488][T16544] openvswitch: netlink: Port -1024 exceeds max allowable 65535 [ 547.089065][T16571] loop2: detected capacity change from 0 to 4096 [ 547.126791][T16571] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 547.215248][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4727'. [ 547.453007][T16588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4730'. [ 547.657000][T16551] loop0: detected capacity change from 0 to 32768 [ 547.688525][T16592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4733'. [ 547.749355][T16596] loop3: detected capacity change from 0 to 8 [ 547.779014][T16599] TCP: TCP_TX_DELAY enabled [ 547.803578][T16600] IPv6: Can't replace route, no match found [ 548.133611][T16608] CIFS mount error: No usable UNC path provided in device string! [ 548.133611][T16608] [ 548.170495][T16608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 548.462943][T16618] comedi comedi4: bad chanlist[0]=0x04004007 chan=16391 range length=2 [ 549.184846][T16640] loop4: detected capacity change from 0 to 1764 [ 549.587356][T16606] loop3: detected capacity change from 0 to 40427 [ 549.598017][T16649] loop5: detected capacity change from 0 to 4096 [ 549.614945][T16649] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 549.647286][T16606] F2FS-fs (loop3): Image doesn't support compression [ 549.668403][T16606] F2FS-fs (loop3): build fault injection rate: 693 [ 549.699414][T16606] F2FS-fs (loop3): invalid crc value [ 549.752225][ T6202] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 549.965307][ T6202] usb 1-1: Using ep0 maxpacket: 16 [ 549.973909][ T6202] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 549.988932][T16668] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 550.039652][ T6202] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 550.059647][T16606] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 550.083288][ T6202] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 550.102141][T16606] F2FS-fs (loop3): Start checkpoint disabled! [ 550.145682][ T6202] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.160674][T16606] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 550.188538][ T6202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 550.207962][ T6202] usb 1-1: SerialNumber: syz [ 550.213666][T16606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 550.281973][T16656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 550.319261][ T6202] cdc_acm 1-1:1.0: skipping garbage [ 550.326038][ T6202] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 550.345250][T16606] syz.3.4739: attempt to access beyond end of device [ 550.345250][T16606] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 550.534682][ T998] kworker/u8:8: attempt to access beyond end of device [ 550.534682][ T998] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 550.618371][ T998] CPU: 1 UID: 0 PID: 998 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 550.618411][ T998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.618429][ T998] Workqueue: writeback wb_workfn (flush-7:3) [ 550.618471][ T998] Call Trace: [ 550.618481][ T998] [ 550.618492][ T998] dump_stack_lvl+0xe8/0x150 [ 550.618530][ T998] f2fs_handle_critical_error+0x37c/0x540 [ 550.618568][ T998] f2fs_write_end_io+0xcdb/0xff0 [ 550.618625][ T998] __submit_merged_bio+0x256/0x700 [ 550.618664][ T998] __submit_merged_write_cond+0x3c9/0x4e0 [ 550.618705][ T998] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 550.618761][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.618803][ T998] f2fs_write_data_pages+0x2975/0x35e0 [ 550.618880][ T998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 550.618966][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.618996][ T998] ? __lock_acquire+0x6b5/0x2cf0 [ 550.619037][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619068][ T998] ? __lock_acquire+0x6b5/0x2cf0 [ 550.619123][ T998] ? unwind_next_frame+0xa5/0x23c0 [ 550.619186][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619217][ T998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 550.619253][ T998] do_writepages+0x32e/0x550 [ 550.619298][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619335][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619366][ T998] ? reacquire_held_locks+0x104/0x190 [ 550.619405][ T998] ? writeback_sb_inodes+0x477/0x1a20 [ 550.619449][ T998] __writeback_single_inode+0x133/0x11a0 [ 550.619487][ T998] ? do_raw_spin_unlock+0xf5/0x210 [ 550.619521][ T998] writeback_sb_inodes+0x992/0x1a20 [ 550.619581][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619621][ T998] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 550.619656][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.619729][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619766][ T998] ? rcu_is_watching+0x15/0xb0 [ 550.619803][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.619845][ T998] wb_writeback+0x456/0xb70 [ 550.619885][ T998] ? queue_io+0x1d1/0x4a0 [ 550.619929][ T998] ? __pfx_wb_writeback+0x10/0x10 [ 550.619962][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.620008][ T998] wb_workfn+0x414/0xf50 [ 550.620044][ T998] ? look_up_lock_class+0x57/0x110 [ 550.620103][ T998] ? __pfx_wb_workfn+0x10/0x10 [ 550.620137][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620168][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.620199][ T998] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 550.620226][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620265][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620300][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620332][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620366][ T998] ? process_scheduled_works+0xa25/0x1830 [ 550.620433][ T998] ? process_scheduled_works+0xa25/0x1830 [ 550.620470][ T998] process_scheduled_works+0xb02/0x1830 [ 550.620538][ T998] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.620580][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620611][ T998] ? assign_work+0x3d5/0x5e0 [ 550.620652][ T998] worker_thread+0xa50/0xfc0 [ 550.620690][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620739][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620787][ T998] kthread+0x388/0x470 [ 550.620814][ T998] ? __pfx_worker_thread+0x10/0x10 [ 550.620848][ T998] ? __pfx_kthread+0x10/0x10 [ 550.620875][ T998] ret_from_fork+0x51e/0xb90 [ 550.620914][ T998] ? __pfx_ret_from_fork+0x10/0x10 [ 550.620947][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.620978][ T998] ? __switch_to+0xc7d/0x1450 [ 550.621012][ T998] ? __pfx_kthread+0x10/0x10 [ 550.621040][ T998] ret_from_fork_asm+0x1a/0x30 [ 550.621100][ T998] [ 550.623696][T16683] veth0_to_bond: entered promiscuous mode [ 550.632077][ T998] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 550.668032][T16683] veth0_to_bond: entered allmulticast mode [ 550.678263][ T6098] usb 1-1: USB disconnect, device number 99 [ 550.698822][T16683] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 550.740514][T16658] loop4: detected capacity change from 0 to 32768 [ 550.940822][T16687] loop2: detected capacity change from 0 to 256 [ 551.069590][T16658] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 059a4da7-7718-49bc-b913-3a37abe24058 [ 551.097486][T16658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4765 (16658) [ 551.119907][T16658] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.137809][T16658] BTRFS info (device loop4): using crc32c checksum algorithm [ 551.236367][T16687] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 551.411576][T16687] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 551.420826][T16658] BTRFS info (device loop4): turning off barriers [ 551.429713][T16658] BTRFS info (device loop4): enabling free space tree [ 551.457054][T16658] BTRFS info (device loop4): use zstd compression, level 3 [ 551.469446][T16687] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 551.719435][ T6118] BTRFS info (device loop4): last unmount of filesystem 059a4da7-7718-49bc-b913-3a37abe24058 [ 552.349131][ T6098] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 552.380428][T16727] ptrace attach of "./syz-executor exec"[6118] was attempted by "./syz-executor exec"[16727] [ 552.456442][T16731] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4792'. [ 552.534198][T16731] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4792'. [ 552.569211][ T6098] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 552.606683][ T6098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.615632][T16735] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4794'. [ 552.673123][ T6098] usb 1-1: Product: syz [ 552.677465][ T6098] usb 1-1: Manufacturer: syz [ 552.726246][ T6098] usb 1-1: SerialNumber: syz [ 552.765837][ T6098] usb 1-1: config 0 descriptor?? [ 552.842680][T16743] loop2: detected capacity change from 0 to 64 [ 552.923977][T16749] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 552.931172][T16749] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 552.993699][ T30] audit: type=1800 audit(1773837088.509:39): pid=16743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4798" name=E91F7189591E9233614B dev="loop2" ino=22 res=0 errno=0 [ 553.026861][ T6098] mos7840 1-1:0.0: required endpoints missing [ 553.252551][ T6098] usb 1-1: USB disconnect, device number 100 [ 553.544279][T16767] loop3: detected capacity change from 0 to 2048 [ 553.631248][T16767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.231444][T16794] loop0: detected capacity change from 0 to 256 [ 554.351288][T16794] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 554.445321][T16759] loop5: detected capacity change from 0 to 32768 [ 554.503615][T16759] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 554.663821][T16818] loop2: detected capacity change from 0 to 64 [ 554.703217][T16759] XFS (loop5): Ending clean mount [ 554.997106][T16824] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4834'. [ 555.035644][ T6130] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 555.341929][T16836] loop3: detected capacity change from 0 to 128 [ 555.441336][T16842] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 556.106032][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4853'. [ 556.126192][T16864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4853'. [ 556.151447][T16864] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4853'. [ 556.193761][T16864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4853'. [ 556.236956][T16866] dlm: no local IP address has been set [ 556.262194][T16866] dlm: cannot start dlm midcomms -107 [ 556.538674][T16877] fuse: Bad value for 'group_id' [ 556.564470][T16877] fuse: Bad value for 'group_id' [ 556.587820][T16841] loop0: detected capacity change from 0 to 32768 [ 556.607337][T16872] loop1: detected capacity change from 0 to 4096 [ 556.646762][T16872] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 556.708030][T16841] JBD2: Ignoring recovery information on journal [ 556.791878][T16872] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 556.878800][T16887] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4863'. [ 556.879155][T16872] ntfs3(loop1): ino=5, "/" The size of extended attributes must not exceed 64KiB [ 556.937308][T16887] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4863'. [ 556.945783][T16841] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 556.982215][T16849] loop3: detected capacity change from 0 to 32768 [ 557.046578][T16849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4846 (16849) [ 557.149570][T16849] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.181339][T16841] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 557.202934][T16849] BTRFS info (device loop3): using sha256 checksum algorithm [ 557.248769][T16841] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 557.322639][T16841] OCFS2: File system is now read-only. [ 557.341207][T16841] (syz.0.4843,16841,0):ocfs2_search_chain:1923 ERROR: status = -30 [ 557.411361][T16841] (syz.0.4843,16841,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 557.449018][T16841] (syz.0.4843,16841,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 557.459002][T16841] (syz.0.4843,16841,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 557.525305][T16841] (syz.0.4843,16841,0):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 557.533736][T16841] (syz.0.4843,16841,0):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 557.542368][T16841] (syz.0.4843,16841,0):ocfs2_mknod_locked:642 ERROR: status = -30 [ 557.544056][T16849] BTRFS info (device loop3): enabling ssd optimizations [ 557.554708][T16841] (syz.0.4843,16841,0):ocfs2_mknod:389 ERROR: status = -30 [ 557.567860][T16841] (syz.0.4843,16841,0):ocfs2_mknod:506 ERROR: status = -30 [ 557.575641][T16841] (syz.0.4843,16841,0):ocfs2_mkdir:662 ERROR: status = -30 [ 557.609001][T16849] BTRFS info (device loop3): turning on async discard [ 557.616072][T16849] BTRFS info (device loop3): enabling free space tree [ 557.937438][ T6124] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.985183][ T6112] ocfs2: Unmounting device (7,0) on (node local) [ 558.016389][T16931] loop1: detected capacity change from 0 to 256 [ 558.052149][T16931] exfat: Deprecated parameter 'namecase' [ 558.126473][T16931] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 559.057917][T16960] loop3: detected capacity change from 0 to 256 [ 559.061855][T16962] loop1: detected capacity change from 0 to 8 [ 559.156179][T16960] FAT-fs (loop3): Directory bread(block 64) failed [ 559.190048][T16960] FAT-fs (loop3): Directory bread(block 65) failed [ 559.238317][T16960] FAT-fs (loop3): Directory bread(block 66) failed [ 559.296867][T16960] FAT-fs (loop3): Directory bread(block 67) failed [ 559.366876][T16960] FAT-fs (loop3): Directory bread(block 68) failed [ 559.414085][T16960] FAT-fs (loop3): Directory bread(block 69) failed [ 559.458461][T16960] FAT-fs (loop3): Directory bread(block 70) failed [ 559.486890][T16960] FAT-fs (loop3): Directory bread(block 71) failed [ 559.524043][T16960] FAT-fs (loop3): Directory bread(block 72) failed [ 559.556541][T16960] FAT-fs (loop3): Directory bread(block 73) failed [ 559.560607][T16973] loop1: detected capacity change from 0 to 764 [ 560.108393][T16991] loop2: detected capacity change from 0 to 1024 [ 560.167961][ T792] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 560.254501][T16953] loop4: detected capacity change from 0 to 32768 [ 560.365751][ T30] audit: type=1400 audit(1773837095.402:40): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA pid=16996 comm="syz.3.4911" [ 560.422452][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 560.509953][ T792] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 560.527759][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.535893][ T792] usb 1-1: Product: syz [ 560.602356][ T792] usb 1-1: Manufacturer: syz [ 560.607018][ T792] usb 1-1: SerialNumber: syz [ 560.668256][ T792] usb 1-1: config 0 descriptor?? [ 560.677509][T16983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 560.685036][T16983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 560.745950][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 560.752193][T17008] loop5: detected capacity change from 0 to 64 [ 560.752675][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 560.824742][ T792] port100 1-1:0.0: NFC: Could not get supported command types [ 561.052988][ T792] usb 1-1: USB disconnect, device number 101 [ 561.289435][T17020] netlink: 'syz.2.4923': attribute type 2 has an invalid length. [ 561.427488][T17028] netlink: 'syz.5.4926': attribute type 1 has an invalid length. [ 561.435342][T17028] netlink: 'syz.5.4926': attribute type 1 has an invalid length. [ 561.525936][T17028] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.4926'. [ 561.869738][T17003] loop3: detected capacity change from 0 to 32768 [ 561.947109][T17003] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 561.947109][T17003] [ 562.003533][T17003] xtLookup: xtSearch returned -5 [ 562.039122][T17003] add_index: get/read_metapage failed! [ 562.060676][T17003] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 562.060676][T17003] [ 562.114599][T17003] xtLookup: xtSearch returned -5 [ 562.119727][T17003] free_index: error reading directory table [ 562.208847][T17003] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 562.208847][T17003] [ 562.236470][T17054] x_tables: duplicate underflow at hook 2 [ 562.253697][T17003] xtLookup: xtSearch returned -5 [ 562.258714][T17003] free_index: error reading directory table [ 562.282628][T17003] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 562.282628][T17003] [ 562.302256][T17003] xtLookup: xtSearch returned -5 [ 562.310898][T17003] free_index: error reading directory table [ 562.328038][T17003] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 562.328038][T17003] [ 562.363017][T17003] xtLookup: xtSearch returned -5 [ 562.392913][T17003] free_index: error reading directory table [ 562.423854][T17003] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 562.423854][T17003] [ 562.464093][T17003] xtLookup: xtSearch returned -5 [ 562.491349][T17003] free_index: error reading directory table [ 562.894946][T17078] loop5: detected capacity change from 0 to 512 [ 562.919023][T17078] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.4951: Directory hole found for htree index block 0 [ 562.940676][T17078] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 562.942864][T17078] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 562.952067][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 562.952093][ C0] EXT4-fs (loop5): initial error at time 1773837097: dx_probe:791: inode 2 [ 562.952133][ C0] EXT4-fs (loop5): last error at time 1773837097: dx_probe:791: inode 2 [ 563.003431][T17078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.087958][T17086] loop2: detected capacity change from 0 to 512 [ 563.108575][T17086] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 563.109770][ T792] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 563.132975][T17086] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 563.299319][ T6130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.320161][ T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.354187][ T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.407826][ T792] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 563.418580][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 563.450475][ T792] usb 2-1: SerialNumber: syz [ 563.489337][ T6103] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 563.770401][ T792] usb 2-1: 0:2 : does not exist [ 563.777345][ T6103] usb 3-1: Using ep0 maxpacket: 16 [ 563.834305][ T6103] usb 3-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 563.854130][ T6103] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 563.889419][ T6103] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 563.902890][ T6103] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 563.916885][ T6103] usb 3-1: Product: syz [ 563.921086][ T6103] usb 3-1: Manufacturer: syz [ 563.944619][ T792] usb 2-1: USB disconnect, device number 97 [ 563.969534][ T6103] cdc_ether 3-1:1.0: skipping garbage [ 564.026436][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.046130][ T6103] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 564.221985][ T6296] usb 3-1: USB disconnect, device number 91 [ 564.245935][T17114] delete_channel: no stack [ 564.278607][T17116] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 564.321597][T17118] loop4: detected capacity change from 0 to 16 [ 564.378395][T17118] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 565.088031][T17141] bond1: option updelay: invalid value (18446744072924056005) [ 565.095673][ T6202] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 565.139399][T17141] bond1: option updelay: allowed values 0 - 2147483647 [ 565.177314][T17141] bond1 (unregistering): Released all slaves [ 565.271406][T17151] loop5: detected capacity change from 0 to 256 [ 565.294121][T17151] exfat: Deprecated parameter 'utf8' [ 565.308146][ T6202] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 565.320194][ T6202] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 565.337640][T17151] exfat: Deprecated parameter 'namecase' [ 565.355497][T17151] exfat: Deprecated parameter 'namecase' [ 565.359805][ T6202] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 565.370236][T17151] exfat: Deprecated parameter 'utf8' [ 565.389023][ T6202] usb 5-1: config 220 has no interface number 2 [ 565.398461][ T6202] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 565.421486][T17151] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 565.433947][ T6202] usb 5-1: config 220 interface 0 has no altsetting 0 [ 565.441477][T17151] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 565.458598][ T6202] usb 5-1: config 220 interface 76 has no altsetting 0 [ 565.494904][ T6202] usb 5-1: config 220 interface 1 has no altsetting 0 [ 565.511305][ T6202] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 565.520829][ T6202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.528909][ T6202] usb 5-1: Product: syz [ 565.543457][ T6202] usb 5-1: Manufacturer: syz [ 565.548273][ T6202] usb 5-1: SerialNumber: syz [ 565.586843][T17154] warning: `syz.2.4986' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 565.833105][ T6202] usb 5-1: selecting invalid altsetting 0 [ 565.863112][ T6202] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 565.870575][ T6202] uvcvideo 5-1:220.0: No valid video chain found. [ 565.919139][ T6202] usb 5-1: selecting invalid altsetting 0 [ 565.924983][ T6202] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 565.977620][ T6202] usb 5-1: USB disconnect, device number 99 [ 566.190361][ T30] audit: type=1326 audit(1773837100.856:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.2.4994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdc459c799 code=0x0 [ 566.306487][T17152] loop0: detected capacity change from 0 to 32768 [ 566.314491][T17152] xfs: Deprecated parameter 'attr2' [ 566.324631][T17152] XFS: attr2 mount option is deprecated. [ 566.342004][T17152] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.364610][ T6202] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 566.403479][T17152] XFS (loop0): Ending clean mount [ 566.465845][T17152] XFS (loop0): Quotacheck needed: Please wait. [ 566.531630][ T6202] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 566.557070][ T6202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.582194][ T6202] usb 2-1: config 0 descriptor?? [ 566.608754][ T6202] cp210x 2-1:0.0: cp210x converter detected [ 566.621183][T17152] XFS (loop0): Quotacheck: Done. [ 566.775755][ T6112] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 566.790383][T17196] netlink: 'syz.4.5003': attribute type 4 has an invalid length. [ 566.832317][T17198] loop5: detected capacity change from 0 to 136 [ 566.855013][ T6202] usb 2-1: cp210x converter now attached to ttyUSB0 [ 567.065673][ T6098] usb 2-1: USB disconnect, device number 98 [ 567.137603][ T6098] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 567.192657][ T6098] cp210x 2-1:0.0: device disconnected [ 567.264985][T17206] loop5: detected capacity change from 0 to 1024 [ 567.276378][T17206] EXT4-fs: inline encryption not supported [ 567.312988][T17206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.478525][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 567.588510][T17219] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5013'. [ 567.604049][ T6130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.800769][T17227] bond0: option miimon: invalid value (18446744073709551104) [ 567.825957][T17227] bond0: option miimon: allowed values 0 - 2147483647 [ 568.037944][T17236] netlink: 'syz.4.5021': attribute type 3 has an invalid length. [ 568.064299][ T6098] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 568.098652][ T6202] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 568.249311][ T6098] usb 1-1: Using ep0 maxpacket: 16 [ 568.258120][T17241] loop5: detected capacity change from 0 to 8192 [ 568.267802][ T6202] usb 4-1: Using ep0 maxpacket: 16 [ 568.271626][ T6098] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 568.279435][ T6202] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 568.300103][ T6098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.301945][ T6202] usb 4-1: config 0 has no interface number 0 [ 568.316510][ T6202] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 568.319291][ T6098] usb 1-1: Product: syz [ 568.327978][ T6202] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 568.346524][ T6202] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 568.359314][ T6098] usb 1-1: Manufacturer: syz [ 568.369732][ T6098] usb 1-1: SerialNumber: syz [ 568.371468][ T6202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.422913][T17249] netlink: 'syz.4.5028': attribute type 10 has an invalid length. [ 568.435068][ T6202] usb 4-1: Product: syz [ 568.437062][ T6098] usb 1-1: config 0 descriptor?? [ 568.452098][ T6202] usb 4-1: Manufacturer: syz [ 568.463209][ T6202] usb 4-1: SerialNumber: syz [ 568.502788][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 568.539120][ T6202] usb 4-1: config 0 descriptor?? [ 568.557292][T17230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 568.576783][T17230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 568.686803][ T10] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 568.707044][ T6098] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 568.729862][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.760382][ T10] usb 3-1: config 0 has no interface number 0 [ 568.810572][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 568.835227][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.859818][T17230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 568.872947][ T10] usb 3-1: Product: syz [ 568.879117][ T10] usb 3-1: Manufacturer: syz [ 568.881464][T17230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 568.899012][ T10] usb 3-1: SerialNumber: syz [ 568.934246][ T10] usb 3-1: config 0 descriptor?? [ 568.991506][ T6098] usb 1-1: USB disconnect, device number 102 [ 569.135427][T17245] loop1: detected capacity change from 0 to 32768 [ 569.137203][ T6202] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 569.183635][T17245] jfs_strtoUCS: char2uni returned -22. [ 569.184096][ T6202] asix 4-1:0.34: probe with driver asix failed with error -71 [ 569.207537][ T10] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 569.215216][T17245] charset = ascii, char = 0xc5 [ 569.241095][ T10] uvcvideo 3-1:0.64: No valid video chain found. [ 569.274505][ T6202] usb 4-1: USB disconnect, device number 62 [ 569.431398][ T5825] usb 3-1: USB disconnect, device number 92 [ 569.794955][T17279] netlink: 'syz.5.5043': attribute type 1 has an invalid length. [ 570.446334][T17303] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5055'. [ 570.451941][T17302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 570.761853][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5062'. [ 571.274542][T17286] loop0: detected capacity change from 0 to 32768 [ 571.304326][T17286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5046 (17286) [ 571.330385][T17331] lo speed is unknown, defaulting to 1000 [ 571.364701][T17331] lo speed is unknown, defaulting to 1000 [ 571.406002][T17331] lo speed is unknown, defaulting to 1000 [ 571.415781][T17286] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 571.453207][T17286] BTRFS info (device loop0): using sha256 checksum algorithm [ 571.484605][T17331] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 571.552756][T17331] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 571.636024][T17345] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5073'. [ 571.667904][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5073'. [ 571.742797][T17331] lo speed is unknown, defaulting to 1000 [ 571.797628][T17331] lo speed is unknown, defaulting to 1000 [ 571.849645][T17286] BTRFS info (device loop0): enabling ssd optimizations [ 571.907047][T17331] lo speed is unknown, defaulting to 1000 [ 571.917035][T17286] BTRFS info (device loop0): turning on async discard [ 571.940083][T17331] lo speed is unknown, defaulting to 1000 [ 571.949768][T17286] BTRFS info (device loop0): enabling free space tree [ 572.038315][T17331] lo speed is unknown, defaulting to 1000 [ 572.079024][T17317] loop3: detected capacity change from 0 to 32768 [ 572.088350][T17362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5077'. [ 572.096942][T17331] lo speed is unknown, defaulting to 1000 [ 572.127848][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5077'. [ 572.138739][T17317] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 45d250f2-9f8c-49b0-a9f9-0ea6cb3325dc [ 572.201858][T17317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5061 (17317) [ 572.218713][ T6112] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.259397][T17321] loop1: detected capacity change from 0 to 32768 [ 572.296186][T17321] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 062a05e1-4247-4678-8913-c585e52dbb61 [ 572.324731][T17317] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.351400][T17321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5064 (17321) [ 572.383352][T17317] BTRFS info (device loop3): using sha256 checksum algorithm [ 572.442916][T17321] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 572.511793][T17367] openvswitch: netlink: Key type 30 is not supported [ 572.528069][T17321] BTRFS info (device loop1): using sha256 checksum algorithm [ 572.819127][T17317] BTRFS info (device loop3): enabling ssd optimizations [ 572.819163][T17317] BTRFS info (device loop3): turning on async discard [ 572.819185][T17317] BTRFS info (device loop3): enabling free space tree [ 573.054116][T17321] BTRFS info (device loop1): enabling ssd optimizations [ 573.114458][T17321] BTRFS info (device loop1): turning on async discard [ 573.135635][T17321] BTRFS info (device loop1): enabling free space tree [ 573.148740][ T6124] BTRFS info (device loop3): last unmount of filesystem 45d250f2-9f8c-49b0-a9f9-0ea6cb3325dc [ 573.195927][ T5825] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 573.411274][ T5825] usb 1-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 573.506873][ T5825] usb 1-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 573.516210][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.543452][ T6115] BTRFS info (device loop1): last unmount of filesystem 062a05e1-4247-4678-8913-c585e52dbb61 [ 573.572552][ T5825] usb 1-1: Product: syz [ 573.586568][ T5825] usb 1-1: Manufacturer: syz [ 573.607724][ T5825] usb 1-1: SerialNumber: syz [ 573.944285][ T5825] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 573.998207][T17426] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.070849][T17431] loop4: detected capacity change from 0 to 256 [ 574.192652][ T5825] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 574.229706][T17431] FAT-fs (loop4): Directory bread(block 64) failed [ 574.275849][T17431] FAT-fs (loop4): Directory bread(block 65) failed [ 574.276309][T17433] loop5: detected capacity change from 0 to 128 [ 574.283897][T17431] FAT-fs (loop4): Directory bread(block 66) failed [ 574.333039][ T5825] usb 1-1: USB disconnect, device number 103 [ 574.340192][T17431] FAT-fs (loop4): Directory bread(block 67) failed [ 574.375799][T17431] FAT-fs (loop4): Directory bread(block 68) failed [ 574.415546][T17431] FAT-fs (loop4): Directory bread(block 69) failed [ 574.479197][T17431] FAT-fs (loop4): Directory bread(block 70) failed [ 574.500628][T17433] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.523306][T17431] FAT-fs (loop4): Directory bread(block 71) failed [ 574.580060][T17433] ext4 filesystem being mounted at /813/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 574.596409][T17431] FAT-fs (loop4): Directory bread(block 72) failed [ 574.613050][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.645021][T17431] FAT-fs (loop4): Directory bread(block 73) failed [ 574.818417][ T30] audit: type=1800 audit(1773837108.919:42): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5094" name="file2" dev="loop4" ino=1048723 res=0 errno=0 [ 574.913942][ T6130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.362708][ T30] audit: type=1326 audit(1773837109.433:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 575.486625][ T30] audit: type=1326 audit(1773837109.433:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 575.559778][ T30] audit: type=1326 audit(1773837109.433:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 575.681055][ T30] audit: type=1326 audit(1773837109.433:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 575.804313][ T30] audit: type=1326 audit(1773837109.471:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 575.915625][ T30] audit: type=1326 audit(1773837109.471:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 575.959588][T17471] loop4: detected capacity change from 0 to 4096 [ 575.995685][T17471] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 576.039675][ T30] audit: type=1326 audit(1773837109.471:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 576.045135][T17480] usb usb8: usbfs: process 17480 (syz.2.5118) did not claim interface 1 before use [ 576.145535][ T30] audit: type=1326 audit(1773837109.471:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 576.155405][T17471] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 576.274860][ T30] audit: type=1326 audit(1773837109.471:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17456 comm="syz.4.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 577.127390][ T6098] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 577.318939][ T6098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.386553][ T6098] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.409307][ T6098] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 577.423708][ T6098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 577.443033][ T6098] usb 1-1: SerialNumber: syz [ 577.679071][ T6098] usb 1-1: 0:2 : does not exist [ 577.860126][ T6098] usb 1-1: USB disconnect, device number 104 [ 577.931608][T17555] loop4: detected capacity change from 0 to 256 [ 577.996207][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.022013][ T6202] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 578.068157][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5156'. [ 578.220371][ T6202] usb 6-1: Using ep0 maxpacket: 16 [ 578.233064][ T6202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.283308][ T6202] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 578.307918][ T6202] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 578.336659][ T6202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.384054][ T6202] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 578.421853][ T6202] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 578.442092][ T6202] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 578.486055][ T6202] usb 6-1: Product: syz [ 578.501747][T17569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5162'. [ 578.522694][ T6202] usb 6-1: Manufacturer: syz [ 578.527349][ T6202] usb 6-1: SerialNumber: syz [ 578.568450][ T6202] usb 6-1: config 0 descriptor?? [ 578.596472][ T6202] usb 6-1: NFC: intf ffff888078ecb000 id ffffffff8f1cfe40 [ 578.604687][T17569] ip6tnl1: entered allmulticast mode [ 578.604887][T17572] loop2: detected capacity change from 0 to 1764 [ 578.823512][ T5825] usb 6-1: USB disconnect, device number 100 [ 578.908192][T17581] openvswitch: netlink: IP tunnel dst address not specified [ 579.158893][T17561] loop1: detected capacity change from 0 to 32768 [ 579.204002][T17561] __jfs_setxattr: xattr_size = 2175, new_size = 14921 [ 579.265364][T17595] syz.0.5175 uses old SIOCAX25GETINFO [ 579.580994][T17605] netlink: 'syz.0.5179': attribute type 21 has an invalid length. [ 579.622859][T17605] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5179'. [ 579.660589][T17607] loop5: detected capacity change from 0 to 64 [ 579.687348][T17605] netlink: 'syz.0.5179': attribute type 4 has an invalid length. [ 579.723732][T17605] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5179'. [ 580.865663][T17611] loop1: detected capacity change from 0 to 32768 [ 580.914549][T17611] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5182 (17611) [ 580.998270][T17642] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 581.054051][T17611] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 581.069893][T17611] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 581.071955][T17642] bond1: option packets_per_slave: allowed values 0 - 65535 [ 581.145618][T17642] bond1 (unregistering): Released all slaves [ 581.255052][T17611] BTRFS info (device loop1): enabling ssd optimizations [ 581.277219][T17618] loop5: detected capacity change from 0 to 32768 [ 581.285032][T17611] BTRFS info (device loop1): turning on flush-on-commit [ 581.295750][T17611] BTRFS info (device loop1): turning on async discard [ 581.304346][T17611] BTRFS info (device loop1): enabling free space tree [ 581.312005][T17611] BTRFS info (device loop1): force zlib compression, level 3 [ 581.322141][T17611] BTRFS info (device loop1): max_inline set to 4096 [ 581.499160][T17618] ERROR: (device loop5): dbAlloc: unable to allocate blocks [ 581.499160][T17618] [ 581.576229][T17618] jfs_create: dtInsert returned -EIO [ 581.587653][ T6115] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 581.620089][T17618] ERROR: (device loop5): jfs_create: [ 581.620089][T17618] [ 582.239191][T17688] loop3: detected capacity change from 0 to 8 [ 582.333890][T17688] SQUASHFS error: Unable to read directory block [1d0:26] [ 582.551915][T17694] loop2: detected capacity change from 0 to 512 [ 582.581961][T17694] EXT4-fs: Ignoring removed bh option [ 582.686327][T17694] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 582.731311][T17694] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 582.770247][T17694] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 582.812066][T17694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 582.837877][T17694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.884400][T17702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.932531][T17667] loop0: detected capacity change from 0 to 32768 [ 583.035659][T17667] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 583.047506][ T6121] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.156244][T17667] XFS (loop0): Ending clean mount [ 583.266916][T17667] XFS (loop0): Quotacheck needed: Please wait. [ 583.348975][T17667] XFS (loop0): Quotacheck: Done. [ 583.376732][T17716] loop5: detected capacity change from 0 to 4096 [ 583.401122][T17716] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 583.538416][T17716] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 583.590962][T17716] ntfs3(loop5): ino=1f, "file2" failed to open parent directory r=5 to update [ 583.615545][ T6112] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 583.664461][T17685] loop4: detected capacity change from 0 to 32768 [ 583.666366][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5224'. [ 583.720288][T17723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5224'. [ 583.752519][T17723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5224'. [ 583.766975][ T49] ntfs3(loop5): ino=1f, failed to open parent directory r=5 to update [ 583.816124][T17685] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 583.816926][T17723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5224'. [ 583.887708][T17685] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 583.896710][T17723] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5224'. [ 584.148430][T17685] XFS (loop4): Ending clean mount [ 584.186396][T17735] loop3: detected capacity change from 0 to 1024 [ 584.194320][T17685] XFS (loop4): Quotacheck needed: Please wait. [ 584.210678][T17735] EXT4-fs: inline encryption not supported [ 584.271485][T17735] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 584.304798][T17685] XFS (loop4): Quotacheck: Done. [ 584.344288][T17735] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.5227: lblock 2 mapped to illegal pblock 2 (length 1) [ 584.401139][T17735] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 584.410364][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 584.410403][ C1] EXT4-fs (loop3): initial error at time 1773837117: ext4_map_blocks:776: inode 3: block 2 [ 584.410460][ C1] EXT4-fs (loop3): last error at time 1773837117: ext4_map_blocks:776: inode 3: block 2 [ 584.442840][T17735] EXT4-fs (loop3): Remounting filesystem read-only [ 584.442873][T17735] __quota_error: 11 callbacks suppressed [ 584.442889][T17735] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 584.442944][T17735] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 584.443038][T17735] EXT4-fs (loop3): 1 orphan inode deleted [ 584.445067][T17735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.528348][ T6118] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 584.586591][ T6124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.168266][T17761] loop1: detected capacity change from 0 to 4096 [ 585.338382][T17767] loop3: detected capacity change from 0 to 4096 [ 585.365903][T17771] loop0: detected capacity change from 0 to 16 [ 585.541284][T17775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5245'. [ 585.574967][T17775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5245'. [ 585.694992][T17767] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 586.229717][T17771] erofs (device loop0): mounted with root inode @ nid 36. [ 586.783660][T17815] netlink: 'syz.1.5265': attribute type 1 has an invalid length. [ 586.804016][T17817] netlink: 'syz.3.5267': attribute type 21 has an invalid length. [ 586.858522][T17817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5267'. [ 587.429925][ T30] audit: type=1326 audit(1773837120.724:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17842 comm="syz.4.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 587.540495][ T30] audit: type=1326 audit(1773837120.724:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17842 comm="syz.4.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 587.621961][ T30] audit: type=1326 audit(1773837120.761:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17842 comm="syz.4.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 587.702993][ T30] audit: type=1326 audit(1773837120.761:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17842 comm="syz.4.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 587.827493][ T30] audit: type=1326 audit(1773837120.761:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17842 comm="syz.4.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bff39c799 code=0x7ffc0000 [ 587.882513][T17865] netlink: 'syz.3.5289': attribute type 1 has an invalid length. [ 588.091194][T17874] netlink: 'syz.1.5294': attribute type 5 has an invalid length. [ 588.138605][ T30] audit: type=1326 audit(1773837121.378:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17875 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 588.257166][T17881] misc userio: Invalid payload size [ 588.269061][ T30] audit: type=1326 audit(1773837121.378:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17875 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 588.339428][ T30] audit: type=1326 audit(1773837121.378:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17875 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 588.525182][T17891] ubi31: attaching mtd0 [ 588.589940][T17891] ubi31: scanning is finished [ 588.628023][T17891] ubi31: empty MTD device detected [ 588.956997][T17891] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 588.997292][T17891] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 589.023837][T17891] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 589.042035][T17866] loop5: detected capacity change from 0 to 32768 [ 589.070296][T17891] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 589.081172][T17866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5290 (17866) [ 589.114442][T17891] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 589.121699][T17891] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 589.155367][T17891] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3784992597 [ 589.181105][T17914] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.188537][T17914] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.221157][T17891] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 589.231415][T17866] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 589.241969][T17866] BTRFS info (device loop5): using sha256 checksum algorithm [ 589.254816][T17914] bridge0: entered allmulticast mode [ 589.288890][T17906] ubi31: background thread "ubi_bgt31d" started, PID 17906 [ 589.291385][T17914] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 589.530746][T17866] BTRFS info (device loop5): enabling ssd optimizations [ 589.595222][T17866] BTRFS info (device loop5): turning on async discard [ 589.602082][T17866] BTRFS info (device loop5): enabling free space tree [ 589.624009][T17934] loop3: detected capacity change from 0 to 4096 [ 589.658740][T17934] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 589.797954][T17934] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 589.861652][T17934] ntfs3(loop3): ino=5, mi_enum_attr [ 589.863945][T17944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5320'. [ 589.987830][T17944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5320'. [ 589.998749][ T6130] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 590.044190][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5320'. [ 590.515365][T17962] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5324'. [ 590.524592][T17962] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5324'. [ 590.588306][T17966] netlink: 'syz.2.5331': attribute type 3 has an invalid length. [ 590.979971][T17982] netlink: 'syz.4.5340': attribute type 64 has an invalid length. [ 591.294036][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.300694][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.148533][ T6098] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 592.321485][ T6098] usb 5-1: Using ep0 maxpacket: 8 [ 592.341933][ T6098] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.385518][ T6098] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c [ 592.428543][ T6098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.470467][T18038] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5368'. [ 592.519073][ T6098] usb 5-1: config 0 descriptor?? [ 592.532893][ T6098] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 592.567251][ T6098] gspca_stv06xx: st6422 sensor detected [ 592.858618][T18020] loop3: detected capacity change from 0 to 32768 [ 592.881268][T18020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5359 (18020) [ 592.957217][T18020] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 592.989314][T18020] BTRFS info (device loop3): using sha256 checksum algorithm [ 593.051404][T18024] loop1: detected capacity change from 0 to 32768 [ 593.105402][ T6098] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 593.136628][ T6098] usb 5-1: USB disconnect, device number 100 [ 593.153728][T18024] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 593.186568][T18020] BTRFS info (device loop3): enabling ssd optimizations [ 593.208035][T18020] BTRFS info (device loop3): turning on async discard [ 593.248260][T18024] XFS (loop1): Ending clean mount [ 593.257384][T18020] BTRFS info (device loop3): enabling free space tree [ 593.266078][ T6296] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 593.299629][T18024] XFS (loop1): Quotacheck needed: Please wait. [ 593.394737][T18024] XFS (loop1): Quotacheck: Done. [ 593.498979][ T6124] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 593.512513][ T6296] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 593.539869][ T6296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.569538][ T6115] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 593.574144][ T6296] usb 6-1: Product: syz [ 593.646470][ T6296] usb 6-1: Manufacturer: syz [ 593.668094][ T6296] usb 6-1: SerialNumber: syz [ 593.758492][ T6296] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 593.863911][ T6202] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 593.990579][T18095] netlink: zone id is out of range [ 593.995883][T18095] netlink: zone id is out of range [ 594.053861][T18095] netlink: zone id is out of range [ 594.059018][T18095] netlink: zone id is out of range [ 594.330494][ T6098] usb 6-1: USB disconnect, device number 101 [ 594.580035][T18114] loop3: detected capacity change from 0 to 16 [ 594.767090][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5396'. [ 594.805652][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5396'. [ 594.983261][ T6202] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 594.990541][ T6202] ath9k_htc: Failed to initialize the device [ 595.058041][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 595.058064][ T30] audit: type=1326 audit(1773837127.842:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 595.117405][ T6098] usb 6-1: ath9k_htc: USB layer deinitialized [ 595.189446][ T30] audit: type=1326 audit(1773837127.842:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 595.319683][ T30] audit: type=1326 audit(1773837127.889:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 595.392760][T18114] erofs (device loop3): mounted with root inode @ nid 36. [ 595.436541][ T30] audit: type=1326 audit(1773837127.889:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 595.502185][ T30] audit: type=1326 audit(1773837127.889:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 595.553765][T18133] loop4: detected capacity change from 0 to 4096 [ 595.571467][ T30] audit: type=1326 audit(1773837127.945:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86b615cfce code=0x7ffc0000 [ 595.661287][ T30] audit: type=1326 audit(1773837127.954:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86b615cfce code=0x7ffc0000 [ 595.714552][ T30] audit: type=1326 audit(1773837127.954:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86b615cfce code=0x7ffc0000 [ 595.769544][T18106] loop2: detected capacity change from 0 to 32768 [ 595.807275][ T30] audit: type=1326 audit(1773837127.954:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86b615cfce code=0x7ffc0000 [ 595.861996][T18106] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 595.872614][ T30] audit: type=1326 audit(1773837127.954:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18122 comm="syz.1.5397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86b615cfce code=0x7ffc0000 [ 596.101042][T18106] XFS (loop2): Ending clean mount [ 596.362800][ T6121] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 596.449456][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.791789][T18179] FAT-fs (loop7): unable to read boot sector [ 596.807954][T18181] overlayfs: conflicting options: userxattr,redirect_dir=on [ 597.091670][T18188] netlink: 'syz.1.5425': attribute type 126 has an invalid length. [ 597.390761][T18204] loop4: detected capacity change from 0 to 256 [ 597.398122][T18204] exfat: Deprecated parameter 'namecase' [ 597.496302][T18204] exfat: Deprecated parameter 'utf8' [ 597.561266][T18204] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 597.720256][ T792] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 597.912524][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 597.913050][ T6296] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 597.944973][ T792] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 597.953196][ T792] usb 3-1: config 0 has no interface number 0 [ 597.998013][ T792] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.008033][ T792] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.052830][ T792] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 598.081503][T18192] loop3: detected capacity change from 0 to 32768 [ 598.088714][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.118225][T18192] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5426 (18192) [ 598.125504][ T6296] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 598.133162][ T792] usb 3-1: Product: syz [ 598.148789][ T792] usb 3-1: Manufacturer: syz [ 598.159993][ T792] usb 3-1: SerialNumber: syz [ 598.169099][ T6296] usb 2-1: config 0 has no interface number 0 [ 598.183176][ T792] usb 3-1: config 0 descriptor?? [ 598.189176][T18192] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.202382][ T6296] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 598.217763][ T792] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 598.248715][ T6296] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 598.251678][T18192] BTRFS info (device loop3): using sha256 checksum algorithm [ 598.292452][ T6296] usb 2-1: config 0 interface 200 has no altsetting 0 [ 598.323259][ T6296] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 598.356901][ T6296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.387537][ T6296] usb 2-1: Product: syz [ 598.408997][ T6296] usb 2-1: Manufacturer: syz [ 598.432900][ T6296] usb 2-1: SerialNumber: syz [ 598.454125][ T792] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 598.462918][ T792] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 598.494784][T18192] BTRFS info (device loop3): enabling ssd optimizations [ 598.523749][ T6296] usb 2-1: config 0 descriptor?? [ 598.550913][T18192] BTRFS info (device loop3): turning on async discard [ 598.575442][T18192] BTRFS info (device loop3): enabling free space tree [ 598.603178][T18246] loop0: detected capacity change from 0 to 2048 [ 598.621015][T18248] openvswitch: netlink: Actions may not be safe on all matching packets [ 598.664408][T18252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.676311][ T6202] usb 3-1: USB disconnect, device number 93 [ 598.773481][ T6296] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input39 [ 598.857461][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.864848][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.872349][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.879822][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.887567][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.895267][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.903179][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.910763][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.913904][ T6124] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.918983][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.936711][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.945063][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.953709][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.961461][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.968968][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.981277][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.989160][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 598.996752][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.004126][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.011549][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.011791][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.012006][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.012214][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.012442][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.012649][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.012861][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.013072][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.013288][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.013497][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.013776][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.014012][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.014221][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.014435][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.014714][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.014927][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.015137][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.015344][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.015551][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.015763][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.015971][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.016186][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.016390][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.016601][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.016807][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.017017][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.017226][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.017436][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.017646][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.017863][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.018074][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.018280][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.018486][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.018695][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.018920][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.019132][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.019344][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.019564][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.019777][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.019991][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.020200][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.020411][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.020619][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.020825][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.021035][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.021248][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.021453][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.021660][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.021868][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.022073][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.022279][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.022483][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.022691][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.022897][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.023101][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.023306][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.023509][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.023710][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.023913][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.024117][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.024356][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.024601][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.024833][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.025052][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.025258][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.025456][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.025664][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.025863][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.026057][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.026259][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.026459][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.026738][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.026974][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.027182][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.027389][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.027589][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.027814][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.028012][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.028222][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.028462][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.028688][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.028914][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.029121][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.029334][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.029542][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.029752][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.029981][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.030194][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.030410][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.030619][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.030831][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.031043][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.031257][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.031472][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.031685][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.031891][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.032100][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.032311][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.032513][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.032721][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.032921][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.033120][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.033324][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 599.777625][ C0] usb 2-1: hanwang_irq - urb shutting down with status: -2 [ 599.840923][ T6296] usb 2-1: USB disconnect, device number 99 [ 600.396078][T18277] loop5: detected capacity change from 0 to 128 [ 600.434690][T18277] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 600.482945][T18280] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 600.526191][T18277] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 600.650777][T18277] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 600.963300][ T6130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.971172][T18297] binfmt_misc: register: failed to install interpreter file ./file0 [ 601.600887][T18322] vlan0: entered promiscuous mode [ 601.691340][T18319] loop2: detected capacity change from 0 to 4096 [ 601.766569][T18328] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.887386][T18331] netlink: 'syz.5.5486': attribute type 23 has an invalid length. [ 601.905703][T18334] loop0: detected capacity change from 0 to 256 [ 602.000687][T18334] FAT-fs (loop0): Directory bread(block 64) failed [ 602.028348][T18334] FAT-fs (loop0): Directory bread(block 65) failed [ 602.068169][T18334] FAT-fs (loop0): Directory bread(block 66) failed [ 602.139104][T18334] FAT-fs (loop0): Directory bread(block 67) failed [ 602.210504][T18334] FAT-fs (loop0): Directory bread(block 68) failed [ 602.276282][T18334] FAT-fs (loop0): Directory bread(block 69) failed [ 602.295967][T18334] FAT-fs (loop0): Directory bread(block 70) failed [ 602.355224][T18334] FAT-fs (loop0): Directory bread(block 71) failed [ 602.387953][T18334] FAT-fs (loop0): Directory bread(block 72) failed [ 602.434586][T18334] FAT-fs (loop0): Directory bread(block 73) failed [ 602.920717][T18316] loop4: detected capacity change from 0 to 40427 [ 602.963265][T18316] F2FS-fs (loop4): invalid crc value [ 602.984409][T18356] loop5: detected capacity change from 0 to 1024 [ 603.275345][T18364] loop3: detected capacity change from 0 to 2048 [ 603.344937][T18364] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 603.383587][T18316] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 603.424075][T18316] F2FS-fs (loop4): Start checkpoint disabled! [ 603.434229][T18364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.537599][T18316] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 603.624966][T18316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 603.717569][T18316] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 604.083416][T18394] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5517'. [ 604.175037][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 604.175061][ T30] audit: type=1326 audit(1773837136.382:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.212108][T18399] netlink: 'syz.5.5520': attribute type 2 has an invalid length. [ 604.269409][ T30] audit: type=1326 audit(1773837136.429:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.274691][ T6202] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 604.353385][ T30] audit: type=1326 audit(1773837136.429:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.492438][ T30] audit: type=1326 audit(1773837136.429:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.565364][ T30] audit: type=1326 audit(1773837136.429:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.598570][ T6202] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 604.616118][ T6202] usb 3-1: config 0 has no interface number 0 [ 604.622392][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5524'. [ 604.642453][ T30] audit: type=1326 audit(1773837136.429:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.658712][ T6202] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 604.724760][ T30] audit: type=1326 audit(1773837136.429:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.728059][ T6202] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 604.828724][ T6202] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 604.838653][ T30] audit: type=1326 audit(1773837136.429:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.880109][ T6202] usb 3-1: config 0 interface 11 has no altsetting 0 [ 604.898603][ T6202] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 604.922182][ T30] audit: type=1326 audit(1773837136.429:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 604.923239][ T6202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.003773][ T30] audit: type=1326 audit(1773837136.981:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18412 comm="syz.1.5527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b619c799 code=0x7ffc0000 [ 605.108127][ T6202] usb 3-1: config 0 descriptor?? [ 605.130217][T18392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 605.150969][T18392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 605.197918][ T6202] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 605.233074][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 605.260660][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 605.289102][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 605.321180][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 605.341658][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 605.375166][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 605.410903][ T6202] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 605.452528][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 605.489876][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 605.519543][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 605.544134][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 605.574578][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 605.642034][ T6202] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 605.678847][ T6202] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 605.733854][ T6202] usb 3-1: USB disconnect, device number 94 [ 605.795788][ T6202] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 605.802952][T18450] CIFS: VFS: Malformed UNC in devname [ 605.805685][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5542'. [ 605.863987][ T6202] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 605.902173][ T6202] keyspan 3-1:0.11: device disconnected [ 605.910070][T18454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5545'. [ 605.940913][T18448] netlink: 'syz.4.5542': attribute type 1 has an invalid length. [ 606.599043][T18478] netlink: 'syz.5.5558': attribute type 3 has an invalid length. [ 606.657495][T18478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5558'. [ 607.187471][T18464] loop0: detected capacity change from 0 to 32768 [ 607.202878][ T6098] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 607.211906][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'. [ 607.243353][T18464] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 607.308267][T18464] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 607.402941][T18464] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 607.419798][ T6098] usb 6-1: Using ep0 maxpacket: 32 [ 607.447444][ T6098] usb 6-1: unable to get BOS descriptor or descriptor too short [ 607.469532][T18464] (syz.0.5551,18464,0):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 607.472812][ T6098] usb 6-1: config 1 interface 0 has no altsetting 0 [ 607.536419][ T6098] usb 6-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 607.544822][T18464] (syz.0.5551,18464,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 607.554923][T18464] (syz.0.5551,18464,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 607.568136][ T6098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.576199][ T6098] usb 6-1: Product: syz [ 607.588844][T18464] (syz.0.5551,18464,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 607.645834][ T6098] usb 6-1: Manufacturer: syz [ 607.670312][ T6098] usb 6-1: SerialNumber: syz [ 607.675897][T18464] (syz.0.5551,18464,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 607.698116][T18519] loop4: detected capacity change from 0 to 1024 [ 607.720749][T18464] (syz.0.5551,18464,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 607.876104][T18519] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 607.885961][T18519] syz.4.5575: attempt to access beyond end of device [ 607.885961][T18519] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 607.940585][T18519] Buffer I/O error on dev loop4, logical block 458752, async page read [ 607.972987][T18519] syz.4.5575: attempt to access beyond end of device [ 607.972987][T18519] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 608.003118][ T6098] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input40 [ 608.039568][ T5173] bcm5974 6-1:1.0: could not read from device [ 608.046073][T18519] Buffer I/O error on dev loop4, logical block 458752, async page read [ 608.059181][T18531] netlink: 'syz.0.5582': attribute type 32 has an invalid length. [ 608.067025][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'. [ 608.084687][ T6098] usb 6-1: USB disconnect, device number 102 [ 608.209746][T18525] loop3: detected capacity change from 0 to 8192 [ 608.351558][T18538] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 608.377475][T18531] bond1: Setting coupled_control to off (0) [ 608.758754][T18550] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 608.784433][T18549] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 609.258227][T18566] xt_CT: No such helper "netbios-ns" [ 609.295332][T18572] xt_connbytes: Forcing CT accounting to be enabled [ 609.307429][T18572] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 609.471635][T18578] loop5: detected capacity change from 0 to 2048 [ 609.580298][T18578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.697986][ T6202] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 609.896623][ T6202] usb 3-1: Using ep0 maxpacket: 32 [ 609.908743][ T6202] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 609.942606][ T6202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.989132][ T6202] usb 3-1: config 0 has no interface number 0 [ 610.022199][ T6202] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 610.064508][T18602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5616'. [ 610.066980][ T6202] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.110695][T18602] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5616'. [ 610.136004][ T6202] usb 3-1: config 0 interface 196 has no altsetting 0 [ 610.146821][ T6202] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 610.166250][ T6202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.228192][ T6202] usb 3-1: Product: syz [ 610.232495][ T6202] usb 3-1: Manufacturer: syz [ 610.255789][ T6202] usb 3-1: SerialNumber: syz [ 610.300315][ T6202] usb 3-1: config 0 descriptor?? [ 610.330448][T18581] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 610.586950][ T6202] ipheth 3-1:0.196: Unable to find endpoints [ 610.621177][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.646108][ T6103] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 610.654077][ T6202] usb 3-1: USB disconnect, device number 95 [ 610.768935][T18621] loop0: detected capacity change from 0 to 4096 [ 610.833444][ T6103] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 610.846844][ T6103] usb 4-1: config 0 has no interface number 0 [ 610.857027][T18621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.871918][ T6103] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 610.884197][ T6103] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.896804][ T6103] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 610.903043][T18621] __quota_error: 7 callbacks suppressed [ 610.903070][T18621] Quota error (device loop0): do_check_range: Getting block 256 out of range 1-5 [ 610.912420][ T6103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.929093][ T6103] usb 4-1: Product: syz [ 610.933278][ T6103] usb 4-1: Manufacturer: syz [ 610.937972][ T6103] usb 4-1: SerialNumber: syz [ 610.946772][ T6103] usb 4-1: config 0 descriptor?? [ 610.953667][T18616] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 610.969902][T18621] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 610.987417][ T6103] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.998019][ T6103] usb 4-1: invalid MIDI in EP 0 [ 611.051311][T18621] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.5625: Failed to acquire dquot type 1 [ 611.192308][T18641] m1Ie5nè‹: entered promiscuous mode [ 611.239063][ T6103] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 611.275914][ T6103] usb 4-1: USB disconnect, device number 63 [ 611.310910][ T6112] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.385205][ T6876] udevd[6876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.976651][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5648'. [ 611.997018][T18667] loop1: detected capacity change from 0 to 2048 [ 612.050953][T18667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.262584][T18675] loop0: detected capacity change from 0 to 1764 [ 612.456420][T18687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5655'. [ 612.960611][T18708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5668'. [ 613.205984][T18719] loop4: detected capacity change from 0 to 16 [ 613.259559][T18719] erofs (device loop4): mounted with root inode @ nid 36. [ 613.320946][T18719] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 613.354691][T18719] erofs (device loop4): bogus lookback distance 0 @ lcn 1 of nid 89 [ 613.395088][T18719] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 613.428499][ T6129] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 613.442821][T18719] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 613.458321][T18719] erofs (device loop4): read error -117 @ 0 of nid 89 [ 613.471996][ T30] audit: type=1800 audit(1773837145.072:403): pid=18719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5671" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 613.716914][T18735] loop1: detected capacity change from 0 to 1024 [ 613.751217][T18735] EXT4-fs: inline encryption not supported [ 613.791963][T18735] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 613.849099][T18735] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.5680: lblock 2 mapped to illegal pblock 2 (length 1) [ 613.899436][T18743] netlink: 'syz.2.5684': attribute type 2 has an invalid length. [ 613.948468][T18743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5684'. [ 613.957385][T18735] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 613.959016][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 613.974677][ C1] EXT4-fs (loop1): initial error at time 1773837145: ext4_map_blocks:776: inode 3: block 2 [ 613.975590][T18735] EXT4-fs (loop1): Remounting filesystem read-only [ 613.984752][ C1] EXT4-fs (loop1): last error at time 1773837145: ext4_map_blocks:776: inode 3: block 2 [ 614.078761][T18735] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 614.087118][T18735] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 614.227568][T18735] EXT4-fs (loop1): 1 orphan inode deleted [ 614.291765][T18735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.441329][T18735] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 614.665345][ T6115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.891809][T18777] loop4: detected capacity change from 0 to 2048 [ 614.899641][T18772] loop0: detected capacity change from 0 to 4096 [ 614.929147][T18772] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 614.983607][T18777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.049027][T18772] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 615.089040][T18772] ntfs3(loop0): ino=19, mi_enum_attr [ 615.437880][T18801] QAT: failed to copy from user cfg_data. [ 615.692340][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 615.874904][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 615.926369][T18819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5721'. [ 615.935471][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 615.971233][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 616.011657][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.033897][ T9] usb 4-1: Product: syz [ 616.038530][ T9] usb 4-1: Manufacturer: syz [ 616.058061][ T9] usb 4-1: SerialNumber: syz [ 616.080542][ T9] usb 4-1: config 0 descriptor?? [ 616.172443][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 616.181329][ T9] usb 4-1: Detected FT232R [ 616.546466][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 616.571621][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 616.624630][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 616.665072][ T9] usb 4-1: USB disconnect, device number 64 [ 616.692391][T18846] loop5: detected capacity change from 0 to 1024 [ 616.702311][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 616.704766][T18849] loop2: detected capacity change from 0 to 64 [ 616.766765][ T9] ftdi_sio 4-1:0.0: device disconnected [ 616.860496][T18853] netlink: 'syz.0.5739': attribute type 1 has an invalid length. [ 617.053315][T18857] loop1: detected capacity change from 0 to 512 [ 617.152936][T18857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.170297][T18857] ext4 filesystem being mounted at /977/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.502670][ T6115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.630598][ T30] audit: type=1326 audit(1773837148.973:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18877 comm="syz.3.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 617.667650][T18878] futex_wake_op: syz.3.5751 tries to shift op by 32; fix this program [ 617.734326][ T30] audit: type=1326 audit(1773837148.973:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18877 comm="syz.3.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 617.819359][ T30] audit: type=1326 audit(1773837149.001:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18877 comm="syz.3.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 617.895658][ T30] audit: type=1326 audit(1773837149.094:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18877 comm="syz.3.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 617.989599][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5756'. [ 618.002383][ T30] audit: type=1326 audit(1773837149.094:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18877 comm="syz.3.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfaa79c799 code=0x7ffc0000 [ 618.033654][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5756'. [ 618.064547][T18888] loop0: detected capacity change from 0 to 1764 [ 618.175749][T18855] loop4: detected capacity change from 0 to 32768 [ 618.224731][T18855] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5740 (18855) [ 618.304250][T18855] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 618.362318][T18855] BTRFS info (device loop4): using sha256 checksum algorithm [ 618.426161][T18870] loop2: detected capacity change from 0 to 32768 [ 618.449658][T18870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5746 (18870) [ 618.610800][T18870] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 618.667833][T18855] BTRFS info (device loop4): turning off barriers [ 618.674627][T18870] BTRFS info (device loop2): using sha256 checksum algorithm [ 618.735890][T18855] BTRFS info (device loop4): enabling free space tree [ 618.993898][T18870] BTRFS info (device loop2): enabling ssd optimizations [ 619.047925][T18870] BTRFS info (device loop2): turning on async discard [ 619.054763][T18870] BTRFS info (device loop2): enabling free space tree [ 619.122679][T18870] BTRFS info (device loop2): enabling auto defrag [ 619.140934][ T6118] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 619.144021][T18870] BTRFS info (device loop2): max_inline set to 4096 [ 619.240609][ T6202] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 619.433031][T18951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5773'. [ 619.453228][T18951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5773'. [ 619.479513][ T6202] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 619.516499][ T6121] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 619.518244][ T6202] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 619.600430][ T6202] usb 2-1: config 0 has no interface number 0 [ 619.641413][ T6202] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 619.683683][ T6202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.717193][ T6202] usb 2-1: Product: syz [ 619.748961][ T6202] usb 2-1: Manufacturer: syz [ 619.778442][T18961] cgroup: Unknown subsys name 'cpuset' [ 619.780117][ T6202] usb 2-1: SerialNumber: syz [ 619.824433][ T6202] usb 2-1: config 0 descriptor?? [ 619.926264][T18962] bridge3: entered promiscuous mode [ 619.967277][T18962] bridge3: entered allmulticast mode [ 620.170459][T18968] netlink: 'syz.5.5779': attribute type 11 has an invalid length. [ 620.211309][T18968] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5779'. [ 620.343958][ T6202] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 620.351485][ T6202] uvcvideo 2-1:0.64: No valid video chain found. [ 620.417560][ T6202] usb 2-1: USB disconnect, device number 100 [ 620.637079][T18986] loop0: detected capacity change from 0 to 16 [ 620.673726][T18986] erofs (device loop0): mounted with root inode @ nid 36. [ 620.741757][T18986] syz.0.5787: attempt to access beyond end of device [ 620.741757][T18986] loop0: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 620.810665][T18986] syz.0.5787: attempt to access beyond end of device [ 620.810665][T18986] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 620.827059][T18988] loop5: detected capacity change from 0 to 8 [ 620.879975][T18988] SQUASHFS error: Failed to read block 0x2d7: -5 [ 620.903871][T18988] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 620.968967][T18986] syz.0.5787: attempt to access beyond end of device [ 620.968967][T18986] loop0: rw=524288, sector=0, nr_sectors = 1792 limit=16 [ 621.078307][T18986] syz.0.5787: attempt to access beyond end of device [ 621.078307][T18986] loop0: rw=0, sector=256, nr_sectors = 8 limit=16 [ 621.132349][T18986] erofs (device loop0): read error -5 @ 1 of nid 89 [ 621.169211][ T30] audit: type=1800 audit(1773837152.275:409): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5787" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 621.522460][T19011] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5800'. [ 621.775985][T19025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5805'. [ 622.020106][T19034] cgroup: Unexpected value for 'nofavordynmods' [ 622.152585][T19037] loop5: detected capacity change from 0 to 64 [ 622.223503][T19040] loop2: detected capacity change from 0 to 512 [ 622.345320][T19040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.396858][T19040] ext4 filesystem being mounted at /977/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.509725][T19040] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.5812: corrupted inode contents [ 622.533067][ T6202] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 622.604122][T19040] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.5812: mark_inode_dirty error [ 622.653472][T19059] loop0: detected capacity change from 0 to 64 [ 622.668162][T19040] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.5812: corrupted inode contents [ 622.725157][T19040] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.5812: mark_inode_dirty error [ 622.747187][ T6202] usb 4-1: Using ep0 maxpacket: 32 [ 622.765912][ T6202] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 622.800870][ T6202] usb 4-1: config 0 has no interface number 0 [ 622.842672][ T6202] usb 4-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 622.886887][ T6202] usb 4-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 622.950751][ T6202] usb 4-1: config 0 interface 86 has no altsetting 0 [ 622.955127][ T6121] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.989091][ T6202] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 623.008496][ T6202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.035670][ T6202] usb 4-1: Product: syz [ 623.052302][ T6202] usb 4-1: Manufacturer: syz [ 623.064967][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5827'. [ 623.075674][ T6202] usb 4-1: SerialNumber: syz [ 623.125063][ T6202] usb 4-1: config 0 descriptor?? [ 623.131236][T19044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 623.163762][T19044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 623.449257][ T6202] ljca 4-1:0.86: probe with driver ljca failed with error -71 [ 623.525599][T19084] loop2: detected capacity change from 0 to 4096 [ 623.554833][T19084] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 623.584564][ T6202] usb 4-1: USB disconnect, device number 65 [ 623.653199][T19084] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 623.882202][T19097] netlink: 'syz.4.5840': attribute type 28 has an invalid length. [ 623.929207][T19099] loop5: detected capacity change from 0 to 1024 [ 623.946984][T19097] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5840'. [ 624.130299][T19103] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 624.204672][ T76] hfsplus: b-tree write err: -5, ino 25 [ 624.210384][ T76] hfsplus: b-tree write err: -5, ino 4 [ 624.251492][ T76] hfsplus: b-tree write err: -5, ino 2 [ 624.267246][T19107] netlink: 420 bytes leftover after parsing attributes in process `syz.4.5846'. [ 624.297437][ T76] hfsplus: b-tree write err: -5, ino 17 [ 624.304886][T19107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5846'. [ 624.364016][T19107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5846'. [ 624.407509][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5846'. [ 624.628411][T19119] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5852'. [ 624.687210][T19088] loop1: detected capacity change from 0 to 32768 [ 624.805537][T19088] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 625.019709][T19088] XFS (loop1): Ending clean mount [ 625.129045][ T6115] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 625.172526][T19145] ipt_rpfilter: unknown options [ 625.340692][T19155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5867'. [ 625.865221][T19173] usb usb8: usbfs: process 19173 (syz.3.5875) did not claim interface 0 before use [ 626.077221][T19179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.520769][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 626.745243][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 626.778609][ T9] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 626.833591][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 626.864707][ T6202] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 626.884017][ T9] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 626.892527][ T9] usb 5-1: Product: syz [ 626.916218][ T9] usb 5-1: Manufacturer: syz [ 626.930662][T19211] loop2: detected capacity change from 0 to 4096 [ 626.950138][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 626.956451][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 627.066807][ T6202] usb 6-1: Using ep0 maxpacket: 16 [ 627.093455][ T6202] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 627.115869][T19219] loop1: detected capacity change from 0 to 2048 [ 627.123976][ T6202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.154833][ T6202] usb 6-1: Product: syz [ 627.180874][ T6202] usb 6-1: Manufacturer: syz [ 627.197145][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 627.224138][ T6202] usb 6-1: SerialNumber: syz [ 627.226974][T19219] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 627.255604][ T9] r8152-cfgselector 5-1: USB disconnect, device number 101 [ 627.298136][ T6202] usb 6-1: config 0 descriptor?? [ 627.306964][T19219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.386836][ T6202] as10x_usb: device has been detected [ 627.404152][ T6202] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 627.497619][ T6202] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 627.551012][ T6202] as10x_usb: error during firmware upload part1 [ 627.578109][T19203] random: crng reseeded on system resumption [ 627.590876][ T6202] Registered device Sky IT Digital Key (green led) [ 627.611305][T19227] loop2: detected capacity change from 0 to 1024 [ 627.689632][T19227] hfsplus: b-tree write err: -5, ino 2 [ 627.709887][ T6202] usb 6-1: USB disconnect, device number 103 [ 627.755992][ T998] [ 627.758362][ T998] ====================================================== [ 627.763010][ T6202] Unregistered device Sky IT Digital Key (green led) [ 627.765524][ T998] WARNING: possible circular locking dependency detected [ 627.765545][ T998] syzkaller #0 Tainted: G L [ 627.765560][ T998] ------------------------------------------------------ [ 627.765571][ T998] kworker/u8:8/998 is trying to acquire lock: [ 627.765586][ T998] ffff8880340a6950 [ 627.796838][ T6202] as10x_usb: device has been disconnected [ 627.798876][ T998] (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 627.816550][ T998] [ 627.816550][ T998] but task is already holding lock: [ 627.823912][ T998] ffff888034100b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 627.833954][ T998] [ 627.833954][ T998] which lock already depends on the new lock. [ 627.833954][ T998] [ 627.844447][ T998] [ 627.844447][ T998] the existing dependency chain (in reverse order) is: [ 627.853465][ T998] [ 627.853465][ T998] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 627.861909][ T998] percpu_down_read_internal+0x48/0x1c0 [ 627.868344][ T998] ext4_writepages+0x205/0x3b0 [ 627.873659][ T998] do_writepages+0x32e/0x550 [ 627.878897][ T998] __writeback_single_inode+0x133/0x11a0 [ 627.885148][ T998] writeback_single_inode+0x4ac/0xdc0 [ 627.891045][ T998] write_inode_now+0x1c2/0x290 [ 627.896331][ T998] iput+0x8c1/0xe80 [ 627.900677][ T998] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 627.906598][ T998] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 627.913112][ T998] __ext4_expand_extra_isize+0x30d/0x400 [ 627.919277][ T998] __ext4_mark_inode_dirty+0x45c/0x730 [ 627.925301][ T998] ext4_evict_inode+0x7a1/0xeb0 [ 627.930685][ T998] evict+0x61e/0xb10 [ 627.935099][ T998] ext4_orphan_cleanup+0xc38/0x1470 [ 627.940811][ T998] ext4_fill_super+0x59ff/0x6320 [ 627.946280][ T998] get_tree_bdev_flags+0x431/0x4f0 [ 627.951917][ T998] vfs_get_tree+0x92/0x2a0 [ 627.957061][ T998] do_new_mount+0x341/0xd30 [ 627.962142][ T998] __se_sys_mount+0x31d/0x420 [ 627.967517][ T998] do_syscall_64+0x14d/0xf80 [ 627.972749][ T998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.979621][ T998] [ 627.979621][ T998] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 627.987209][ T998] down_read+0x47/0x2e0 [ 627.991895][ T998] ext4_setattr+0x888/0x1c60 [ 627.997030][ T998] notify_change+0xc1a/0xf40 [ 628.002152][ T998] chown_common+0x466/0x6b0 [ 628.007488][ T998] do_fchownat+0x14c/0x250 [ 628.012439][ T998] __x64_sys_chown+0x82/0xa0 [ 628.018025][ T998] do_syscall_64+0x14d/0xf80 [ 628.023225][ T998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.029744][ T998] [ 628.029744][ T998] -> #0 (jbd2_handle){++++}-{0:0}: [ 628.037058][ T998] __lock_acquire+0x15a5/0x2cf0 [ 628.042614][ T998] lock_acquire+0xf0/0x2e0 [ 628.047644][ T998] wait_transaction_locked+0x1c2/0x280 [ 628.053808][ T998] start_this_handle+0x7dc/0x2290 [ 628.059364][ T998] jbd2__journal_start+0x2c0/0x5b0 [ 628.065083][ T998] __ext4_journal_start_sb+0x203/0x620 [ 628.071412][ T998] ext4_do_writepages+0xf94/0x46e0 [ 628.077224][ T998] ext4_writepages+0x241/0x3b0 [ 628.082515][ T998] do_writepages+0x32e/0x550 [ 628.087719][ T998] __writeback_single_inode+0x133/0x11a0 [ 628.093959][ T998] writeback_sb_inodes+0x992/0x1a20 [ 628.099676][ T998] __writeback_inodes_wb+0x111/0x240 [ 628.105571][ T998] wb_writeback+0x46a/0xb70 [ 628.110643][ T998] wb_workfn+0xb4c/0xf50 [ 628.115394][ T998] process_scheduled_works+0xb02/0x1830 [ 628.121719][ T998] worker_thread+0xa50/0xfc0 [ 628.126931][ T998] kthread+0x388/0x470 [ 628.131537][ T998] ret_from_fork+0x51e/0xb90 [ 628.136756][ T998] ret_from_fork_asm+0x1a/0x30 [ 628.142143][ T998] [ 628.142143][ T998] other info that might help us debug this: [ 628.142143][ T998] [ 628.152770][ T998] Chain exists of: [ 628.152770][ T998] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 628.152770][ T998] [ 628.166185][ T998] Possible unsafe locking scenario: [ 628.166185][ T998] [ 628.173684][ T998] CPU0 CPU1 [ 628.179426][ T998] ---- ---- [ 628.184791][ T998] rlock(&sbi->s_writepages_rwsem); [ 628.190078][ T998] lock(&ei->xattr_sem); [ 628.197064][ T998] lock(&sbi->s_writepages_rwsem); [ 628.204785][ T998] lock(jbd2_handle); [ 628.208858][ T998] [ 628.208858][ T998] *** DEADLOCK *** [ 628.208858][ T998] [ 628.216983][ T998] 4 locks held by kworker/u8:8/998: [ 628.222256][ T998] #0: ffff88801baf3148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 628.233511][ T998] #1: ffffc900046bfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 628.245978][ T998] #2: ffff8880341020e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 628.256555][ T998] #3: ffff888034100b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 628.267043][ T998] [ 628.267043][ T998] stack backtrace: [ 628.273035][ T998] CPU: 1 UID: 0 PID: 998 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.273071][ T998] Tainted: [L]=SOFTLOCKUP [ 628.273081][ T998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.273098][ T998] Workqueue: writeback wb_workfn (flush-8:0) [ 628.273135][ T998] Call Trace: [ 628.273147][ T998] [ 628.273158][ T998] dump_stack_lvl+0xe8/0x150 [ 628.273193][ T998] print_circular_bug+0x2e1/0x300 [ 628.273231][ T998] check_noncircular+0x12e/0x150 [ 628.273270][ T998] __lock_acquire+0x15a5/0x2cf0 [ 628.273304][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.273332][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 628.273356][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.273388][ T998] lock_acquire+0xf0/0x2e0 [ 628.273415][ T998] ? wait_transaction_locked+0x1a9/0x280 [ 628.273450][ T998] ? wait_transaction_locked+0x1a9/0x280 [ 628.273479][ T998] wait_transaction_locked+0x1c2/0x280 [ 628.273509][ T998] ? wait_transaction_locked+0x1a9/0x280 [ 628.273540][ T998] ? __pfx_wait_transaction_locked+0x10/0x10 [ 628.273570][ T998] ? __pfx_autoremove_wake_function+0x10/0x10 [ 628.273595][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.273630][ T998] ? __pfx_stack_trace_save+0x10/0x10 [ 628.273659][ T998] start_this_handle+0x7dc/0x2290 [ 628.273692][ T998] ? process_scheduled_works+0xb02/0x1830 [ 628.273730][ T998] ? __pfx_start_this_handle+0x10/0x10 [ 628.273767][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.273794][ T998] ? rcu_is_watching+0x15/0xb0 [ 628.273827][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.273853][ T998] ? trace_kmem_cache_alloc+0x29/0xf0 [ 628.273877][ T998] ? jbd2__journal_start+0x1db/0x5b0 [ 628.273903][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.273929][ T998] ? kmem_cache_alloc_noprof+0x307/0x650 [ 628.273952][ T998] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 628.273978][ T998] jbd2__journal_start+0x2c0/0x5b0 [ 628.274006][ T998] __ext4_journal_start_sb+0x203/0x620 [ 628.274039][ T998] ext4_do_writepages+0xf94/0x46e0 [ 628.274089][ T998] ? __pfx_ext4_do_writepages+0x10/0x10 [ 628.274129][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274160][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274189][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274218][ T998] ext4_writepages+0x241/0x3b0 [ 628.274251][ T998] ? __pfx_ext4_writepages+0x10/0x10 [ 628.274290][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274316][ T998] ? do_raw_spin_unlock+0xf5/0x210 [ 628.274339][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274366][ T998] ? __pfx_ext4_writepages+0x10/0x10 [ 628.274397][ T998] do_writepages+0x32e/0x550 [ 628.274433][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274460][ T998] ? reacquire_held_locks+0x104/0x190 [ 628.274492][ T998] ? writeback_sb_inodes+0x477/0x1a20 [ 628.274527][ T998] __writeback_single_inode+0x133/0x11a0 [ 628.274559][ T998] ? do_raw_spin_unlock+0xf5/0x210 [ 628.274584][ T998] writeback_sb_inodes+0x992/0x1a20 [ 628.274638][ T998] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 628.274687][ T998] ? __pfx_down_read_trylock+0x10/0x10 [ 628.274709][ T998] ? __pfx___up_read+0x10/0x10 [ 628.274730][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274760][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.274789][ T998] __writeback_inodes_wb+0x111/0x240 [ 628.274824][ T998] wb_writeback+0x46a/0xb70 [ 628.274855][ T998] ? queue_io+0x1d1/0x4a0 [ 628.274888][ T998] ? __pfx_wb_writeback+0x10/0x10 [ 628.274916][ T998] ? do_raw_spin_lock+0x12b/0x2f0 [ 628.274946][ T998] wb_workfn+0xb4c/0xf50 [ 628.274980][ T998] ? __pfx_wb_workfn+0x10/0x10 [ 628.275002][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275030][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275058][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275085][ T998] ? do_raw_spin_unlock+0xf5/0x210 [ 628.275112][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275140][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275168][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275196][ T998] ? process_scheduled_works+0xa25/0x1830 [ 628.275225][ T998] ? process_scheduled_works+0xa25/0x1830 [ 628.275255][ T998] process_scheduled_works+0xb02/0x1830 [ 628.275298][ T998] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.275330][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275357][ T998] ? assign_work+0x3d5/0x5e0 [ 628.275388][ T998] worker_thread+0xa50/0xfc0 [ 628.275418][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275453][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275484][ T998] kthread+0x388/0x470 [ 628.275506][ T998] ? __pfx_worker_thread+0x10/0x10 [ 628.275534][ T998] ? __pfx_kthread+0x10/0x10 [ 628.275556][ T998] ret_from_fork+0x51e/0xb90 [ 628.275587][ T998] ? __pfx_ret_from_fork+0x10/0x10 [ 628.275616][ T998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.275647][ T998] ? __switch_to+0xc7d/0x1450 [ 628.275675][ T998] ? __pfx_kthread+0x10/0x10 [ 628.275696][ T998] ret_from_fork_asm+0x1a/0x30 [ 628.275740][ T998] [ 628.774620][ T49] hfsplus: b-tree write err: -5, ino 25 [ 628.781865][ T49] hfsplus: b-tree write err: -5, ino 4 [ 628.787467][ T49] hfsplus: b-tree write err: -5, ino 2 [ 628.792999][ T49] hfsplus: b-tree write err: -5, ino 26 [ 628.860089][T19236] netlink: 'syz.2.5906': attribute type 10 has an invalid length. [ 628.931853][T19236] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 629.032868][ T6098] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 629.203920][ T6098] usb 2-1: Using ep0 maxpacket: 16 [ 629.212978][ T6098] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 629.222123][ T6098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.230738][ T6098] usb 2-1: Product: syz [ 629.234963][ T6098] usb 2-1: Manufacturer: syz [ 629.239756][ T6098] usb 2-1: SerialNumber: syz [ 629.246335][ T6098] usb 2-1: config 0 descriptor?? [ 629.253880][ T6098] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 629.687567][ T6098] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 629.697833][ T6098] usb 2-1: USB disconnect, device number 101