last executing test programs: 2m56.110985722s ago: executing program 3 (id=8662): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="8a6490", 0x3}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m55.983616309s ago: executing program 3 (id=8663): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 2m55.841568618s ago: executing program 3 (id=8665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 2m55.61531585s ago: executing program 3 (id=8668): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m55.125832188s ago: executing program 3 (id=8675): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m54.519364353s ago: executing program 3 (id=8684): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x81, 0x2ba, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 2m53.986567144s ago: executing program 32 (id=8684): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x81, 0x2ba, &(0x7f0000000a40)="$eJzs3c+KI0UYAPCvJ51MRmWTgydZsEEPnoadfYIdZITFOSl90IuKmwWZhIUJBFbBuCfvgifBR/AdfAAvvoEHj4I39yC2JN35O524kTGr4+93ma+r6quuqq6ZgUBXPrw9uHjwaPjwya2fot1O4uBe3IunSXTjIGa+iIX2rQAA/uOeFkX8WpQiWlvbptP6olNe3T7YzwgBgOu2+v8fAPg/ePe9998+PT8/eyfL2hGDL0d5EhGDZJSX9acP45PoRy/uRCd+jyjmyvil++dnkWbZ7MOA0VHkEYMPfqiuT3+JmOafRCe6V/Pfun9+dpKV4vXBeJRP7jz52YwXkojTIik7uhudeDmiaEbVySL/bk1+5K1447VvqvH/0Yvj6MSPH8ej6MeDaReL/M9PsuzN4uvfPitnkEck41F+OG23UDT29lAAAAAAAAAAAAAAAAAAAAAAALjxjrO57vL5ObPTAI+P6+un5wM1as4Hqk74GS+dr3Mny7LZMT6jvBllfhqvpJE+18kDAAAAAAAAAAAAAAAAAADAv8Tw8acXH/X7vcuV4PtivaQmqN7oj6okXapKV6u291MTXHwXsXvWswTRqIbWT67cYjahZ+4w3dz4cLXk263TOarrJw42rWHaj3LwX+2+CK/uNMFJUPyNdZ7trskm2dK4EcPH7fpNsrQzj6rncjmcBkebNu1qUNQsXWNjVuua9ljrxV2yWn/ZZjLj5nwxV9u0J09yqaR5zb8pa5J/5O8PAAAAAAAAAAAAAAAAAACwsHjpN36+UvnkuQwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPZu8f3/8yC66yXrwbhK7tWlrwWHl8Oa23b3PE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuuD8DAAD//6EYVj0=") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 3.127123252s ago: executing program 4 (id=10781): unshare(0x20040600) landlock_restrict_self(0xffffffffffffffff, 0x0) 2.974711641s ago: executing program 4 (id=10784): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @local}}) 2.782453792s ago: executing program 4 (id=10788): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.556671734s ago: executing program 4 (id=10791): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000044c0)={{r0}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000600)=ANY=[]}, @subvolid=0x2380}) 1.790113048s ago: executing program 2 (id=10799): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f0000000280)) 1.766562759s ago: executing program 0 (id=10800): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) 1.568767831s ago: executing program 1 (id=10801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001ac0)=ANY=[@ANYBLOB="dc070000130001002bbd7000fbdbdf2508005400", @ANYRES32=0x0, @ANYBLOB="04007180bd07bc80080013803a48ad0408001c"], 0x7dc}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.562396511s ago: executing program 2 (id=10802): set_mempolicy(0x2002, &(0x7f0000000040)=0xa, 0x89) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) 1.40197728s ago: executing program 0 (id=10803): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) 1.306256815s ago: executing program 2 (id=10804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x8929, &(0x7f0000000000)="d84450a4bf57990ef9b33a") 1.217775381s ago: executing program 1 (id=10805): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d8026a2c5c3f3fa4e484"], 0x2c}}, 0x0) 1.164442054s ago: executing program 0 (id=10806): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) 862.863981ms ago: executing program 1 (id=10807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 854.301562ms ago: executing program 0 (id=10808): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1) 767.257326ms ago: executing program 4 (id=10809): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdcedd9467f5cd2d6c4e8b3043614238ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESDEC=0x0], 0x11, 0x31b, &(0x7f0000000240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 632.728014ms ago: executing program 1 (id=10810): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r0, 0x0, 0x1) 594.274776ms ago: executing program 0 (id=10811): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\'\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\'\x00') 558.409228ms ago: executing program 2 (id=10812): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0xe, @raw_data="02ca3c81462e38d9533ffce6e3f48d3a42583b334f479695af1f0baaa9121d5adf5f551b5b32416a781f2a7bee04ac730c2d4bd49aceb27e169ab830ae49d132dea21361dfb6de0098e37bd2d5bf4857cc86cb6366b5c467920fdafdffab927a7480a3e820d7faef90eb4176f40854002a98800be5253b0f7645aa8084878bf040820480e6feb2e8a801eddf3baf089a0a3f96d0786b2ca4d0229b3a44b09af97b75a7446bd32892c615c5b0534331140402a1c492ef46d90deb6b742dd28b7e7cd729955e77c905"}) 408.989187ms ago: executing program 0 (id=10813): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) 375.963739ms ago: executing program 2 (id=10814): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x138b, 0x9, 0xf909, 0x899d, 0x80, 0xfffffffb, 0x7, 0x10, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007}) 304.465013ms ago: executing program 1 (id=10815): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 148.286522ms ago: executing program 1 (id=10816): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x14) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') 77.392216ms ago: executing program 2 (id=10817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414400c000280050001000000000024000280140001"], 0xd4}}, 0x0) 0s ago: executing program 4 (id=10818): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000002600)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x48001) kernel console output (not intermixed with test programs): , bcdDevice=de.06 [ 806.616362][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.640116][ T5758] usb 3-1: Product: syz [ 806.665102][ T5758] usb 3-1: Manufacturer: syz [ 806.669808][ T5758] usb 3-1: SerialNumber: syz [ 806.680947][ T5758] r8152-cfgselector 3-1: config 0 descriptor?? [ 806.929177][T25528] loop4: detected capacity change from 0 to 32768 [ 807.002670][T25529] loop0: detected capacity change from 0 to 32768 [ 807.027052][ T969] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 807.071975][ T969] ath9k_htc: Failed to initialize the device [ 807.089150][ T5832] usb 2-1: ath9k_htc: USB layer deinitialized [ 807.122846][ T28] audit: type=1800 audit(2000000230.956:460): pid=25529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8979" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 807.160969][ T5758] r8152-cfgselector 3-1: Unknown version 0x0000 [ 807.196253][ T5758] r8152-cfgselector 3-1: USB disconnect, device number 53 [ 807.223982][ T1312] read_mapping_page failed! [ 807.271190][ T1312] ERROR: (device loop4): txCommit: [ 807.271190][ T1312] [ 807.309824][ T1312] jfs_write_inode: jfs_commit_inode failed! [ 807.527226][T25543] loop4: detected capacity change from 0 to 1024 [ 807.632141][ T5832] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 807.875053][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 807.906310][ T5832] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 807.931797][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.954812][ T5832] usb 2-1: Product: syz [ 807.959143][ T5832] usb 2-1: Manufacturer: syz [ 808.000965][ T5832] usb 2-1: SerialNumber: syz [ 808.027654][ T5832] usb 2-1: config 0 descriptor?? [ 808.282235][ T5832] speedtch 2-1:0.0: speedtch_bind: wrong device class 68 [ 808.296764][ T5832] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 808.515754][ T5832] usb 2-1: USB disconnect, device number 54 [ 808.685723][T25568] loop2: detected capacity change from 0 to 4096 [ 808.718775][T25568] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 808.786908][T25582] loop4: detected capacity change from 0 to 256 [ 808.925272][T25568] ntfs3: loop2: failed to convert "076c" to cp949 [ 808.956328][T25582] FAT-fs (loop4): Directory bread(block 64) failed [ 808.964689][T25585] netlink: 'syz.0.8995': attribute type 1 has an invalid length. [ 808.982999][T25585] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8995'. [ 809.001189][T25582] FAT-fs (loop4): Directory bread(block 65) failed [ 809.026130][T25582] FAT-fs (loop4): Directory bread(block 66) failed [ 809.048715][T25582] FAT-fs (loop4): Directory bread(block 67) failed [ 809.073052][T25582] FAT-fs (loop4): Directory bread(block 68) failed [ 809.079767][T25582] FAT-fs (loop4): Directory bread(block 69) failed [ 809.096973][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.113806][T25582] FAT-fs (loop4): Directory bread(block 70) failed [ 809.120435][T25582] FAT-fs (loop4): Directory bread(block 71) failed [ 809.184652][T25582] FAT-fs (loop4): Directory bread(block 72) failed [ 809.221896][T25582] FAT-fs (loop4): Directory bread(block 73) failed [ 809.523635][T25597] loop0: detected capacity change from 0 to 16 [ 809.535485][T25597] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 809.818689][T25605] loop2: detected capacity change from 0 to 1024 [ 809.829761][T25607] loop1: detected capacity change from 0 to 64 [ 809.889764][T25605] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 809.907093][T25605] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 810.291729][ T2131] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 810.531731][ T2131] usb 5-1: Using ep0 maxpacket: 32 [ 810.567253][ T2131] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 810.577870][ T2131] usb 5-1: config 0 has no interface number 0 [ 810.613167][ T2131] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 810.625399][ T2131] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 810.639050][ T2131] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 810.658052][ T2131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.671943][ T2131] usb 5-1: Product: syz [ 810.676461][ T2131] usb 5-1: Manufacturer: syz [ 810.681418][ T2131] usb 5-1: SerialNumber: syz [ 810.689536][ T2131] usb 5-1: config 0 descriptor?? [ 810.696062][T25611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 810.704097][T25611] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 810.722858][ T2131] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 62:77:e5:79:52:88 [ 810.831206][T25634] netlink: 'syz.0.9018': attribute type 15 has an invalid length. [ 811.302040][T25655] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 811.309908][T25655] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 811.330207][T25653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9024'. [ 812.136813][T25684] cgroup: name respecified [ 812.461069][T25695] netlink: 'syz.1.9040': attribute type 1 has an invalid length. [ 812.505963][T25695] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9040'. [ 812.541176][T25695] NCSI netlink: No device for ifindex 0 [ 812.607776][ T8] usb 5-1: USB disconnect, device number 4 [ 812.615631][ T8] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 812.703725][T25702] ax25_connect(): syz.0.9044 uses autobind, please contact jreuter@yaina.de [ 812.881811][ T2131] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 812.925911][T25707] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9046'. [ 813.073228][ T2131] usb 3-1: Using ep0 maxpacket: 16 [ 813.105149][ T2131] usb 3-1: config 0 has no interfaces? [ 813.131733][ T2131] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 813.140864][ T2131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.179508][ T2131] usb 3-1: Product: syz [ 813.195028][ T2131] usb 3-1: Manufacturer: syz [ 813.208185][T25718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9050'. [ 813.210177][ T2131] usb 3-1: SerialNumber: syz [ 813.253898][ T2131] r8152-cfgselector 3-1: config 0 descriptor?? [ 813.436656][T25725] netlink: 'syz.4.9053': attribute type 30 has an invalid length. [ 813.443688][T25726] netlink: 'syz.1.9052': attribute type 1 has an invalid length. [ 813.463417][T25726] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9052'. [ 813.520243][ T2131] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 813.720999][T25734] loop0: detected capacity change from 0 to 2048 [ 813.761349][T25734] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 813.778805][ T2131] usb 3-1: USB disconnect, device number 54 [ 813.834910][T25738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 813.964699][T25734] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 813.985217][T25734] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 814.014617][T25734] Remounting filesystem read-only [ 814.030255][T25734] NILFS (loop0): error -5 truncating bmap (ino=16) [ 814.171168][T25741] loop4: detected capacity change from 0 to 4096 [ 814.180800][ T5769] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 814.202177][ T5769] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 814.210830][ T5769] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 814.245919][ T5769] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 814.265239][ T5769] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 814.285683][ T5769] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 814.511742][T25750] netlink: 'syz.0.9059': attribute type 10 has an invalid length. [ 815.851732][ T8] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 816.073696][ T8] usb 1-1: config 0 has an invalid interface number: 36 but max is 0 [ 816.097435][ T8] usb 1-1: config 0 has no interface number 0 [ 816.109488][ T8] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 816.131748][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.143667][T25769] loop2: detected capacity change from 0 to 32768 [ 816.160468][ T8] usb 1-1: Product: syz [ 816.166910][ T8] usb 1-1: Manufacturer: syz [ 816.180835][ T8] usb 1-1: SerialNumber: syz [ 816.236238][ T8] usb 1-1: config 0 descriptor?? [ 816.241823][T25769] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 816.276914][ T8] gspca_main: spca505-2.14.0 probing 0733:0430 [ 816.621385][T25769] XFS (loop2): Ending clean mount [ 816.638531][T25826] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9084'. [ 816.658453][T25769] XFS (loop2): Quotacheck needed: Please wait. [ 816.743695][ T8] gspca_spca505: reg write: error -71 [ 816.749253][ T8] spca505: probe of 1-1:0.36 failed with error -5 [ 816.791129][T25769] XFS (loop2): Quotacheck: Done. [ 816.803338][ T8] usb 1-1: USB disconnect, device number 51 [ 816.915560][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 817.466419][T25843] loop4: detected capacity change from 0 to 16 [ 817.506865][T25843] erofs: (device loop4): mounted with root inode @ nid 36. [ 818.219815][T25869] overlayfs: conflicting options: nfs_export=on,index=off [ 818.483556][T25879] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9103'. [ 818.994614][T25897] loop2: detected capacity change from 0 to 2048 [ 819.054864][T25897] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 819.113217][T25904] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 819.174197][T25897] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 819.196624][T25906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9113'. [ 819.207909][T25906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9113'. [ 819.224010][T25897] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 819.265173][T25897] Remounting filesystem read-only [ 819.302187][T25897] NILFS (loop2): error -5 truncating bmap (ino=16) [ 819.442318][ T5771] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 819.467271][ T5771] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 819.497092][ T5771] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 819.536676][ T5771] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 819.561841][ T5771] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 819.620090][ T5771] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 819.657535][T25916] netlink: 'syz.0.9118': attribute type 10 has an invalid length. [ 820.024091][T25929] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 820.062006][T25929] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 820.326435][T25941] loop1: detected capacity change from 0 to 128 [ 820.380021][T25939] loop4: detected capacity change from 0 to 2048 [ 820.474223][T25945] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 820.542055][T25939] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 820.633131][T25939] Remounting filesystem read-only [ 820.762903][ T5870] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 820.924370][T25955] loop1: detected capacity change from 0 to 64 [ 821.010590][ T5870] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 821.034111][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.058573][ T5870] usb 1-1: Product: syz [ 821.083680][ T5870] usb 1-1: Manufacturer: syz [ 821.091887][ T5870] usb 1-1: SerialNumber: syz [ 821.117350][ T5870] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 821.145441][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 821.411018][T25964] SET target dimension over the limit! [ 821.604213][ T5832] usb 1-1: USB disconnect, device number 52 [ 821.636974][T25968] netlink: 288 bytes leftover after parsing attributes in process `syz.2.9135'. [ 822.443883][ T8] usb 1-1: Service connection timeout for: 256 [ 822.449111][T26003] loop0: detected capacity change from 0 to 256 [ 822.470337][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 822.512887][ T8] ath9k_htc: Failed to initialize the device [ 822.535125][ T5832] usb 1-1: ath9k_htc: USB layer deinitialized [ 822.559377][T26003] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 823.012271][T26019] netlink: 'syz.1.9152': attribute type 21 has an invalid length. [ 823.020366][T26019] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9152'. [ 823.071717][T26019] netlink: 'syz.1.9152': attribute type 5 has an invalid length. [ 823.079588][T26019] netlink: 'syz.1.9152': attribute type 6 has an invalid length. [ 823.166864][T26019] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9152'. [ 823.293631][T26024] can0: slcan on ttyS3. [ 823.385324][T26029] tmpfs: Bad value for 'mpol' [ 823.452273][T26023] can0 (unregistered): slcan off ttyS3. [ 823.586580][T25997] loop2: detected capacity change from 0 to 40427 [ 823.659448][T25997] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 823.689499][T26040] netlink: 'syz.1.9159': attribute type 24 has an invalid length. [ 823.702334][T25997] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 823.722248][T25997] F2FS-fs (loop2): invalid crc value [ 823.727791][T26040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9159'. [ 823.773637][T25997] F2FS-fs (loop2): Found nat_bits in checkpoint [ 823.931011][T25997] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 823.962288][T25997] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 824.336317][T26059] loop1: detected capacity change from 0 to 256 [ 824.377752][T26059] exfat: Deprecated parameter 'namecase' [ 824.432103][T26059] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 824.848604][T26064] comedi comedi2: dmm32at: I/O port conflict (0xfffffffffffffff9,16) [ 825.109269][T26068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9167'. [ 825.528419][T26054] loop4: detected capacity change from 0 to 32768 [ 825.616883][T26075] loop2: detected capacity change from 0 to 256 [ 825.837611][T26075] FAT-fs (loop2): Directory bread(block 64) failed [ 825.852014][T26075] FAT-fs (loop2): Directory bread(block 65) failed [ 825.858743][T26075] FAT-fs (loop2): Directory bread(block 66) failed [ 825.890057][T26075] FAT-fs (loop2): Directory bread(block 67) failed [ 825.897089][T26075] FAT-fs (loop2): Directory bread(block 68) failed [ 825.941794][T26075] FAT-fs (loop2): Directory bread(block 69) failed [ 825.964279][T26080] loop0: detected capacity change from 0 to 65 [ 825.970698][T26075] FAT-fs (loop2): Directory bread(block 70) failed [ 826.001258][T26080] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 826.015939][T26075] FAT-fs (loop2): Directory bread(block 71) failed [ 826.034076][T26075] FAT-fs (loop2): Directory bread(block 72) failed [ 826.040989][T26075] FAT-fs (loop2): Directory bread(block 73) failed [ 826.268330][T26084] loop4: detected capacity change from 0 to 512 [ 826.357984][T26084] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.9173: inode has both inline data and extents flags [ 826.493955][T26084] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.9173: couldn't read orphan inode 15 (err -117) [ 826.549994][T26084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.753994][T24732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.829723][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.017535][T26142] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9195'. [ 829.211948][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9211'. [ 829.631349][T26202] loop4: detected capacity change from 0 to 256 [ 829.746186][T26202] FAT-fs (loop4): Directory bread(block 64) failed [ 829.774639][T26202] FAT-fs (loop4): Directory bread(block 65) failed [ 829.795165][T26202] FAT-fs (loop4): Directory bread(block 66) failed [ 829.832221][T26202] FAT-fs (loop4): Directory bread(block 67) failed [ 829.859473][T26202] FAT-fs (loop4): Directory bread(block 68) failed [ 829.886981][T26202] FAT-fs (loop4): Directory bread(block 69) failed [ 829.942798][T26202] FAT-fs (loop4): Directory bread(block 70) failed [ 829.982822][T26202] FAT-fs (loop4): Directory bread(block 71) failed [ 829.989561][T26202] FAT-fs (loop4): Directory bread(block 72) failed [ 830.035831][T26202] FAT-fs (loop4): Directory bread(block 73) failed [ 830.769723][ T28] audit: type=1326 audit(2000000254.606:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26226 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 830.880794][ T28] audit: type=1326 audit(2000000254.636:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26226 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 830.981772][ T28] audit: type=1326 audit(2000000254.686:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26226 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 831.044059][ T28] audit: type=1326 audit(2000000254.686:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26226 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 831.136771][ T28] audit: type=1326 audit(2000000254.686:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26226 comm="syz.1.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 832.872014][T26303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9254'. [ 833.252600][T26314] netlink: 'syz.1.9259': attribute type 1 has an invalid length. [ 833.599645][T26328] loop2: detected capacity change from 0 to 256 [ 833.701784][ T2131] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 833.755584][T26330] loop4: detected capacity change from 0 to 4096 [ 833.911950][T26330] ntfs: (device loop4): parse_options(): NLS character set cp8ƒÓ O¥¿one_multiplier=0x0000000000000001gid=0 not found. Using previous one cp862. [ 833.929590][ T2131] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 833.949632][ T2131] usb 1-1: config 0 has no interface number 0 [ 833.966337][ T2131] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 833.988317][T26330] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 833.997579][ T2131] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 834.019923][ T2131] usb 1-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 834.038443][T26330] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 834.074495][ T2131] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 834.097699][ T2131] usb 1-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 834.116627][ T2131] usb 1-1: Product: syz [ 834.121058][ T2131] usb 1-1: Manufacturer: syz [ 834.125946][T26330] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 834.154318][ T2131] usb 1-1: SerialNumber: syz [ 834.186547][T26330] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 834.210970][ T2131] usb 1-1: config 0 descriptor?? [ 834.238771][T26322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 834.275892][T26330] ntfs: volume version 3.1. [ 834.296457][T26339] loop1: detected capacity change from 0 to 256 [ 834.307488][ T2131] ni6501 1-1:0.238: driver 'ni6501' failed to auto-configure device. [ 834.475386][ T5832] usb 1-1: USB disconnect, device number 53 [ 834.512639][T26339] FAT-fs (loop1): Directory bread(block 64) failed [ 834.531255][T26339] FAT-fs (loop1): Directory bread(block 65) failed [ 834.538876][T26339] FAT-fs (loop1): Directory bread(block 66) failed [ 834.554456][T26339] FAT-fs (loop1): Directory bread(block 67) failed [ 834.561534][T26339] FAT-fs (loop1): Directory bread(block 68) failed [ 834.569073][T26339] FAT-fs (loop1): Directory bread(block 69) failed [ 834.584205][T26339] FAT-fs (loop1): Directory bread(block 70) failed [ 834.590998][T26339] FAT-fs (loop1): Directory bread(block 71) failed [ 834.608581][T26339] FAT-fs (loop1): Directory bread(block 72) failed [ 834.628603][T26339] FAT-fs (loop1): Directory bread(block 73) failed [ 834.955778][T26349] netlink: 115 bytes leftover after parsing attributes in process `syz.4.9276'. [ 835.352353][T26360] kAFS: No cell specified [ 835.425299][T26363] loop4: detected capacity change from 0 to 164 [ 835.466232][T26363] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 835.683662][T26367] loop0: detected capacity change from 0 to 1764 [ 835.727668][T26371] loop4: detected capacity change from 0 to 256 [ 835.784792][T26371] FAT-fs (loop4): Directory bread(block 64) failed [ 835.821896][T26371] FAT-fs (loop4): Directory bread(block 65) failed [ 835.857810][T26371] FAT-fs (loop4): Directory bread(block 66) failed [ 835.879882][T26371] FAT-fs (loop4): Directory bread(block 67) failed [ 835.911901][T26371] FAT-fs (loop4): Directory bread(block 68) failed [ 835.931925][T26371] FAT-fs (loop4): Directory bread(block 69) failed [ 835.938768][T26371] FAT-fs (loop4): Directory bread(block 70) failed [ 835.975842][T26371] FAT-fs (loop4): Directory bread(block 71) failed [ 835.991878][T26371] FAT-fs (loop4): Directory bread(block 72) failed [ 836.005227][T26371] FAT-fs (loop4): Directory bread(block 73) failed [ 836.232628][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 836.232647][ T28] audit: type=1326 audit(2000000260.076:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.335914][ T28] audit: type=1326 audit(2000000260.076:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.421851][ T28] audit: type=1326 audit(2000000260.076:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.495997][ T28] audit: type=1326 audit(2000000260.076:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.579299][ T28] audit: type=1326 audit(2000000260.076:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.702661][ T28] audit: type=1326 audit(2000000260.076:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.789681][ T28] audit: type=1326 audit(2000000260.076:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.869652][ T28] audit: type=1326 audit(2000000260.106:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 836.941131][ T28] audit: type=1326 audit(2000000260.106:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 837.010062][ T28] audit: type=1326 audit(2000000260.756:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26398 comm="syz.4.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 837.641891][ T5832] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 837.832425][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 837.854516][ T5832] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 837.868401][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 837.891714][ T5832] usb 5-1: Product: syz [ 837.912674][ T5832] usb 5-1: config 0 descriptor?? [ 837.953167][T26425] loop0: detected capacity change from 0 to 8 [ 837.979926][T26425] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 838.005476][ T7543] udevd[7543]: incorrect cramfs checksum on /dev/loop0 [ 838.016343][T26425] cramfs: Error -5 while decompressing! [ 838.022183][T26425] cramfs: ffffffff973f8368(26)->ffff888057366000(4096) [ 838.037655][T26425] cramfs: Error -3 while decompressing! [ 838.043755][T26425] cramfs: ffffffff973f8382(26)->ffff88805732e000(4096) [ 838.050881][T26425] cramfs: Error -3 while decompressing! [ 838.064227][T26425] cramfs: ffffffff973f839c(16)->ffff888059be1000(4096) [ 838.071409][T26425] cramfs: Error -5 while decompressing! [ 838.085575][T26425] cramfs: ffffffff973f8368(26)->ffff888057366000(4096) [ 838.197480][ T5832] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 838.226259][T26427] netlink: 'syz.2.9315': attribute type 32 has an invalid length. [ 838.428695][T26396] loop1: detected capacity change from 0 to 40427 [ 838.464270][T26396] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 838.483310][ T5832] usb 5-1: USB disconnect, device number 5 [ 838.504320][T26396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 838.567053][T26396] F2FS-fs (loop1): invalid crc value [ 838.626873][T26396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 838.787699][T26396] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 838.810450][T26396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 839.368271][T26457] netlink: 'syz.0.9329': attribute type 6 has an invalid length. [ 840.007356][T26477] loop0: detected capacity change from 0 to 1024 [ 840.085737][T26477] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 840.417859][T26492] loop1: detected capacity change from 0 to 256 [ 840.439588][T26492] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 840.480159][T26487] loop4: detected capacity change from 0 to 4096 [ 840.579593][T26496] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.702453][T26487] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=16, inode=18446736377128157186, rec_len=255, name_len=2 [ 840.799311][T26487] Remounting filesystem read-only [ 840.994547][ T2131] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 841.224086][ T2131] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 841.253973][ T2131] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 841.281796][ T2131] usb 3-1: Product: syz [ 841.301678][ T2131] usb 3-1: SerialNumber: syz [ 841.320285][ T2131] usb 3-1: config 0 descriptor?? [ 841.578919][ T2131] hso 3-1:0.0: Failed to find BULK IN ep [ 841.797482][ T8] usb 3-1: USB disconnect, device number 55 [ 841.849111][T26525] loop1: detected capacity change from 0 to 4096 [ 841.871845][T26525] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 842.073018][T26525] ntfs3: loop1: ino=1e, "file1" failed to parse mft record [ 842.093735][T26525] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 842.140553][T26525] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 842.166767][T26515] loop4: detected capacity change from 0 to 32768 [ 842.258916][T26515] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 842.404883][T26515] XFS (loop4): Ending clean mount [ 842.439096][T26515] XFS (loop4): Quotacheck needed: Please wait. [ 842.444277][T26541] netlink: 'syz.1.9366': attribute type 1 has an invalid length. [ 842.508616][T26541] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9366'. [ 842.610464][T26515] XFS (loop4): Quotacheck: Done. [ 842.680957][T24732] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 843.630076][T26574] IPv6: Can't replace route, no match found [ 843.820402][T26578] PKCS7: Unknown OID: [4] 0.0 [ 843.851833][T26578] PKCS7: Only support pkcs7_signedData type [ 843.919642][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 843.919660][ T28] audit: type=1326 audit(2000000267.756:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.011803][ T28] audit: type=1326 audit(2000000267.796:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.071705][ T28] audit: type=1326 audit(2000000267.796:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.144534][T26560] loop0: detected capacity change from 0 to 32768 [ 844.187609][ T28] audit: type=1326 audit(2000000267.796:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.242284][ T28] audit: type=1326 audit(2000000267.796:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.267178][ T28] audit: type=1326 audit(2000000267.796:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.291320][ T28] audit: type=1326 audit(2000000267.796:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.318226][ T28] audit: type=1326 audit(2000000267.816:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.347982][T26560] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 844.397752][ T28] audit: type=1326 audit(2000000267.816:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26581 comm="syz.1.9386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 844.651138][T26560] XFS (loop0): Ending clean mount [ 844.693169][T26608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9393'. [ 844.919590][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 844.942574][T26612] loop1: detected capacity change from 0 to 512 [ 845.026301][T26612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.052368][T26612] ext4 filesystem being mounted at /2327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.152671][T26612] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 845.337179][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.952884][T26642] loop2: detected capacity change from 0 to 1024 [ 845.968165][T26644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9411'. [ 846.033460][T26644] netlink: 'syz.1.9411': attribute type 1 has an invalid length. [ 846.181788][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9413'. [ 846.191159][T26648] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9413'. [ 846.667073][T26667] ip6erspan0: entered promiscuous mode [ 846.770499][T26669] loop2: detected capacity change from 0 to 164 [ 847.141793][ T8] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 847.351754][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 847.383435][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 847.395161][ T8] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 847.419308][T26663] loop4: detected capacity change from 0 to 32768 [ 847.425271][ T8] usb 3-1: config 1 has no interface number 0 [ 847.448755][ T8] usb 3-1: string descriptor 0 read error: -22 [ 847.473658][ T8] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 847.511817][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.750479][ T8] usb 3-1: USB disconnect, device number 56 [ 848.499843][T26715] loop1: detected capacity change from 0 to 512 [ 848.538081][T26715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 848.547045][T26715] System zones: 1-12 [ 848.561356][T26715] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9446: error while reading EA inode 32 err=-116 [ 848.605504][T26715] EXT4-fs (loop1): Remounting filesystem read-only [ 848.612543][T26715] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 848.627501][T26715] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 848.637832][T26715] EXT4-fs (loop1): 1 orphan inode deleted [ 848.645764][T26715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.702097][ T969] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 848.784322][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.902431][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 848.923307][ T969] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 848.941868][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.960730][ T969] usb 3-1: Product: syz [ 848.971748][ T969] usb 3-1: Manufacturer: syz [ 848.976484][ T969] usb 3-1: SerialNumber: syz [ 849.020905][ T969] r8152-cfgselector 3-1: config 0 descriptor?? [ 849.138796][T26732] loop0: detected capacity change from 0 to 512 [ 849.198095][T26732] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 849.276980][T26732] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 849.293060][T26732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 849.301357][T26732] System zones: 0-1, 15-15, 18-18, 34-34 [ 849.314672][T26732] EXT4-fs (loop0): orphan cleanup on readonly fs [ 849.321455][T26732] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 849.348339][T26732] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 849.370499][T26732] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 849.378624][T26732] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.9452: bg 0: block 40: padding at end of block bitmap is not set [ 849.446520][T26732] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 849.464090][T26740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 849.476416][ T969] r8152-cfgselector 3-1: Unknown version 0x0000 [ 849.511960][T26732] EXT4-fs (loop0): 1 truncate cleaned up [ 849.517937][ T969] r8152-cfgselector 3-1: USB disconnect, device number 57 [ 849.531063][T26732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 849.605444][T26732] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.9452: bad symlink. [ 849.701143][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.759034][T26744] loop1: detected capacity change from 0 to 64 [ 850.055465][T26752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9461'. [ 850.730900][T26779] loop0: detected capacity change from 0 to 256 [ 850.730898][T26780] loop1: detected capacity change from 0 to 16 [ 850.760246][T26779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 850.832025][T26780] erofs: (device loop1): mounted with root inode @ nid 36. [ 851.265058][T26793] xt_hashlimit: size too large, truncated to 1048576 [ 851.273147][T26793] xt_hashlimit: max too large, truncated to 1048576 [ 851.626341][T26803] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9486'. [ 851.666469][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9486'. [ 851.682292][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9486'. [ 851.719842][ T28] audit: type=1326 audit(2000000275.556:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26806 comm="syz.2.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 851.791933][ T28] audit: type=1326 audit(2000000275.556:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26806 comm="syz.2.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 851.874512][ T28] audit: type=1326 audit(2000000275.596:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26806 comm="syz.2.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 851.959733][ T28] audit: type=1326 audit(2000000275.596:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26806 comm="syz.2.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 852.058706][T26784] loop4: detected capacity change from 0 to 32768 [ 852.078713][ T28] audit: type=1326 audit(2000000275.596:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26806 comm="syz.2.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 852.181228][T26817] loop0: detected capacity change from 0 to 1764 [ 852.184742][T26784] JBD2: Ignoring recovery information on journal [ 852.384014][T26784] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 852.661801][ T8] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 852.746895][T24732] ocfs2: Unmounting device (7,4) on (node local) [ 852.821909][ T5832] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 852.857494][ T8] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 852.890785][ T8] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 852.920556][ T8] usb 1-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 852.932117][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 852.939003][ T8] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 852.949018][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.961077][ T8] usb 1-1: config 0 descriptor?? [ 852.984721][T26817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 853.023491][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 853.033388][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.054477][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.087123][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 853.118568][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.159465][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.186742][ T5832] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.201712][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.217197][ T5832] usb 2-1: config 0 descriptor?? [ 853.248075][ T8] usb 1-1: string descriptor 0 read error: -71 [ 853.282801][ T8] usb 1-1: ucan: probing device on interface #0 [ 853.289587][ T8] usb 1-1: ucan: invalid endpoint configuration [ 853.327351][ T8] usb 1-1: ucan: probe failed; try to update the device firmware [ 853.331267][ T5832] rc_core: IR keymap rc-hauppauge not found [ 853.368644][ T5832] Registered IR keymap rc-empty [ 853.386218][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.403504][ T8] usb 1-1: USB disconnect, device number 54 [ 853.472234][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.514757][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 853.579058][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 853.664223][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.722052][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.774336][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.822233][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.883433][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.915128][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 853.955969][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 854.011772][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 854.051877][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 854.106128][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 854.155359][ T5832] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 854.191710][ T5832] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 854.241691][ T5832] usb 2-1: USB disconnect, device number 55 [ 854.419360][T26871] netlink: 'syz.2.9518': attribute type 2 has an invalid length. [ 854.483215][T26871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9518'. [ 854.509356][T26868] loop1: detected capacity change from 0 to 4096 [ 854.602933][T26876] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 855.059684][T26885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9524'. [ 855.292634][T26890] netlink: 'syz.2.9527': attribute type 2 has an invalid length. [ 855.300638][T26890] netlink: 'syz.2.9527': attribute type 1 has an invalid length. [ 855.472995][T26894] loop0: detected capacity change from 0 to 4096 [ 855.487499][T26894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 855.509208][T26894] EXT4-fs (loop0): Test dummy encryption mode enabled [ 855.556431][T26894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 855.633612][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.651024][T26898] loop2: detected capacity change from 0 to 4096 [ 855.693338][T26898] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 855.822910][T26898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 855.937729][T26912] xfrm0: entered promiscuous mode [ 855.962908][T26912] xfrm0: entered allmulticast mode [ 856.073266][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.257232][T26919] loop4: detected capacity change from 0 to 764 [ 856.349497][T26919] rock: directory entry would overflow storage [ 856.359333][T26919] rock: sig=0x4654, size=5, remaining=4 [ 856.442264][T26919] isofs: Unable to find the ".." directory for NFS. [ 856.957895][T26943] loop2: detected capacity change from 0 to 128 [ 857.355079][T26956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9556'. [ 858.194019][T26972] loop1: detected capacity change from 0 to 512 [ 858.246434][T26972] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 858.270708][T26972] FAT-fs (loop1): Filesystem has been set read-only [ 858.653352][T26958] loop0: detected capacity change from 0 to 40427 [ 858.674270][T26958] F2FS-fs (loop0): heap/no_heap options were deprecated [ 858.717374][T26958] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x5 [ 858.747851][T26958] F2FS-fs (loop0): invalid crc value [ 858.760030][T26958] F2FS-fs (loop0): Found nat_bits in checkpoint [ 858.870962][T26958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 858.883932][T26987] macvtap0: entered allmulticast mode [ 858.889497][T26987] veth0_macvtap: entered allmulticast mode [ 859.064243][T26968] loop2: detected capacity change from 0 to 32768 [ 859.186074][T26968] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 859.247527][T26968] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 859.283339][ T5769] syz-executor: attempt to access beyond end of device [ 859.283339][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 859.301761][ T28] audit: type=1326 audit(2000000283.146:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 859.343911][ T28] audit: type=1326 audit(2000000283.166:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 859.391104][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 859.412148][ T28] audit: type=1326 audit(2000000283.166:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 859.455011][T26968] XFS (loop2): Ending clean mount [ 859.465216][ T28] audit: type=1326 audit(2000000283.176:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94e0b9ac22 code=0x7ffc0000 [ 859.488959][T26968] XFS (loop2): Quotacheck needed: Please wait. [ 859.496587][ T28] audit: type=1326 audit(2000000283.176:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94e0b9ac22 code=0x7ffc0000 [ 859.519105][ T28] audit: type=1326 audit(2000000283.176:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 859.575964][ T28] audit: type=1326 audit(2000000283.176:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27002 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 859.598617][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.641391][T27009] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 859.650726][T25106] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 859.680266][T25106] XFS (loop2): Unmount and run xfs_repair [ 859.693723][T25106] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 859.701326][T25106] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 859.715242][T25106] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 859.728022][T25106] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 859.738030][T25106] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 859.747225][T25106] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 859.756316][T25106] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 859.767820][T25106] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 859.779318][T25106] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 859.788826][T24059] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 859.859526][T26968] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 860.031765][T27015] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9582'. [ 860.053716][T27015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9582'. [ 860.080608][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 860.090951][T27015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9582'. [ 860.529599][T27027] netlink: 'syz.4.9588': attribute type 5 has an invalid length. [ 860.567441][T27027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9588'. [ 861.266219][T27045] loop1: detected capacity change from 0 to 256 [ 861.345374][T27045] FAT-fs (loop1): Directory bread(block 64) failed [ 861.371690][T27045] FAT-fs (loop1): Directory bread(block 65) failed [ 861.378987][T27045] FAT-fs (loop1): Directory bread(block 66) failed [ 861.411708][T27045] FAT-fs (loop1): Directory bread(block 67) failed [ 861.418477][T27045] FAT-fs (loop1): Directory bread(block 68) failed [ 861.464193][T27045] FAT-fs (loop1): Directory bread(block 69) failed [ 861.471204][T27045] FAT-fs (loop1): Directory bread(block 70) failed [ 861.501676][T27045] FAT-fs (loop1): Directory bread(block 71) failed [ 861.508445][T27045] FAT-fs (loop1): Directory bread(block 72) failed [ 861.531680][T27045] FAT-fs (loop1): Directory bread(block 73) failed [ 861.599364][T27025] loop2: detected capacity change from 0 to 32768 [ 861.652052][T27025] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 861.758973][T27025] XFS (loop2): Ending clean mount [ 861.798684][T27025] XFS (loop2): Quotacheck needed: Please wait. [ 861.851831][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 861.871885][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 861.892090][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 861.900150][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 861.980209][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 862.000246][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 862.008448][T27025] XFS (loop2): Quotacheck: Done. [ 862.061959][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 862.103613][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 862.142111][T27059] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 862.205257][T27043] loop4: detected capacity change from 0 to 32768 [ 862.307146][T27043] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 862.318081][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 862.549319][T27043] XFS (loop4): Ending clean mount [ 862.576025][T27043] XFS (loop4): Quotacheck needed: Please wait. [ 862.596221][T27079] loop0: detected capacity change from 0 to 256 [ 862.715123][T27043] XFS (loop4): Quotacheck: Done. [ 862.751116][T27079] FAT-fs (loop0): Directory bread(block 64) failed [ 862.788477][T27079] FAT-fs (loop0): Directory bread(block 65) failed [ 862.795867][T27079] FAT-fs (loop0): Directory bread(block 66) failed [ 862.802969][T27079] FAT-fs (loop0): Directory bread(block 67) failed [ 862.809658][T27079] FAT-fs (loop0): Directory bread(block 68) failed [ 862.823300][T24732] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 862.847715][T27079] FAT-fs (loop0): Directory bread(block 69) failed [ 862.872190][T27079] FAT-fs (loop0): Directory bread(block 70) failed [ 862.878807][T27079] FAT-fs (loop0): Directory bread(block 71) failed [ 862.903746][T27079] FAT-fs (loop0): Directory bread(block 72) failed [ 862.910377][T27079] FAT-fs (loop0): Directory bread(block 73) failed [ 863.141389][ T28] audit: type=1800 audit(2000000286.976:501): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9606" name="file1" dev="loop0" ino=1048709 res=0 errno=0 [ 864.214388][T27107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 864.500727][T27117] loop1: detected capacity change from 0 to 64 [ 864.793630][T27125] loop4: detected capacity change from 0 to 1024 [ 864.880463][T27125] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 864.921000][T27125] hfsplus: filesystem is marked journaled, leaving read-only. [ 865.281708][ T28] audit: type=1326 audit(2000000289.116:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.4.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 865.370576][ T28] audit: type=1326 audit(2000000289.116:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.4.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 865.422639][ T28] audit: type=1326 audit(2000000289.176:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.4.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 865.471665][ T28] audit: type=1326 audit(2000000289.176:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.4.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 865.546994][ T28] audit: type=1326 audit(2000000289.176:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.4.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 865.952153][T27165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9648'. [ 866.373287][T27183] (null): rxe_set_mtu: Set mtu to 256 [ 866.397938][T27183] lo speed is unknown, defaulting to 1000 [ 866.440160][T27183] lo speed is unknown, defaulting to 1000 [ 866.477854][T27183] lo speed is unknown, defaulting to 1000 [ 867.006782][T27201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9665'. [ 867.042041][T27201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9665'. [ 867.051101][T27201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9665'. [ 867.080953][T27203] x_tables: unsorted underflow at hook 4 [ 867.139181][ T8] lo speed is unknown, defaulting to 1000 [ 867.155651][T27205] befs: (loop1): No write support. Marking filesystem read-only [ 867.157977][T27183] infiniband syz1: set down [ 867.176010][T27205] syz.1.9668: attempt to access beyond end of device [ 867.176010][T27205] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 867.191928][T27183] infiniband syz1: added lo [ 867.221841][T27205] befs: (loop1): unable to read superblock [ 867.600051][T27183] RDS/IB: syz1: added [ 867.617640][T27183] smc: adding ib device syz1 with port count 1 [ 867.624857][T27183] smc: ib device syz1 port 1 has pnetid [ 867.637630][T25106] lo speed is unknown, defaulting to 1000 [ 867.656997][T27183] lo speed is unknown, defaulting to 1000 [ 868.163347][T27183] lo speed is unknown, defaulting to 1000 [ 868.350173][T27236] loop4: detected capacity change from 0 to 4096 [ 868.377256][T27236] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 868.760836][T27183] lo speed is unknown, defaulting to 1000 [ 869.101853][T27256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9693'. [ 869.423015][T27262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 869.456769][T27183] lo speed is unknown, defaulting to 1000 [ 869.696980][T27274] QAT: failed to copy from user cfg_data. [ 870.527118][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.651305][T27301] loop4: detected capacity change from 0 to 256 [ 870.790502][T27301] FAT-fs (loop4): Directory bread(block 64) failed [ 870.817490][T27301] FAT-fs (loop4): Directory bread(block 65) failed [ 870.832788][T27301] FAT-fs (loop4): Directory bread(block 66) failed [ 870.854243][T27301] FAT-fs (loop4): Directory bread(block 67) failed [ 870.881386][T27301] FAT-fs (loop4): Directory bread(block 68) failed [ 870.899638][T27301] FAT-fs (loop4): Directory bread(block 69) failed [ 870.920254][T27301] FAT-fs (loop4): Directory bread(block 70) failed [ 870.948037][T27301] FAT-fs (loop4): Directory bread(block 71) failed [ 870.955695][T27282] loop2: detected capacity change from 0 to 32768 [ 870.972163][T27301] FAT-fs (loop4): Directory bread(block 72) failed [ 870.991097][T27301] FAT-fs (loop4): Directory bread(block 73) failed [ 871.059344][T27282] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 871.331812][ T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 871.340318][T27282] XFS (loop2): Ending clean mount [ 871.531804][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 871.547699][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.589433][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.612595][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 871.631739][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 871.640868][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.727643][ T8] usb 1-1: config 0 descriptor?? [ 871.736218][ T8] hub 1-1:0.0: USB hub found [ 871.948665][ T8] hub 1-1:0.0: 1 port detected [ 872.175214][ T8] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 872.200255][ T8] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 872.223272][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 872.229948][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 872.291312][ T8] usb 1-1: USB disconnect, device number 55 [ 872.726558][T27356] loop1: detected capacity change from 0 to 4096 [ 872.749512][T27356] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 872.931931][T27356] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 872.974644][T27356] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 873.081794][ T5832] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 873.115024][ T3527] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 873.281741][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 873.300841][ T5832] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 873.309419][ T5832] usb 3-1: config 0 has no interface number 0 [ 873.323673][ T5832] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 873.333012][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.341142][ T5832] usb 3-1: Product: syz [ 873.361677][ T5832] usb 3-1: Manufacturer: syz [ 873.366607][ T5832] usb 3-1: SerialNumber: syz [ 873.379832][ T5832] usb 3-1: config 0 descriptor?? [ 873.600587][ T5832] usb 3-1: selecting invalid altsetting 1 [ 873.622186][ T5832] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 873.642933][ T5832] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 873.650602][ T5832] speedtch: probe of 3-1:0.1 failed with error -22 [ 873.670195][ T5832] usb 3-1: USB disconnect, device number 58 [ 873.873713][T27393] loop1: detected capacity change from 0 to 256 [ 873.936615][T27395] loop0: detected capacity change from 0 to 256 [ 873.972491][T27393] FAT-fs (loop1): Directory bread(block 64) failed [ 873.979273][T27393] FAT-fs (loop1): Directory bread(block 65) failed [ 873.986423][T27391] loop4: detected capacity change from 0 to 4096 [ 874.000009][T27393] FAT-fs (loop1): Directory bread(block 66) failed [ 874.021752][T27393] FAT-fs (loop1): Directory bread(block 67) failed [ 874.058077][T27393] FAT-fs (loop1): Directory bread(block 68) failed [ 874.079809][T27391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.080614][T27393] FAT-fs (loop1): Directory bread(block 69) failed [ 874.108807][T27393] FAT-fs (loop1): Directory bread(block 70) failed [ 874.136201][T27393] FAT-fs (loop1): Directory bread(block 71) failed [ 874.203027][T27393] FAT-fs (loop1): Directory bread(block 72) failed [ 874.209793][T27393] FAT-fs (loop1): Directory bread(block 73) failed [ 874.329342][T24732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.540097][T27403] validate_nla: 37 callbacks suppressed [ 874.540117][T27403] netlink: 'syz.2.9760': attribute type 17 has an invalid length. [ 874.566970][T27403] netlink: 'syz.2.9760': attribute type 16 has an invalid length. [ 874.579479][T27403] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9760'. [ 874.970161][T27412] lo speed is unknown, defaulting to 1000 [ 875.757320][T27443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9779'. [ 875.767550][T27443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9779'. [ 875.791853][T27442] IPv6: NLM_F_CREATE should be specified when creating new route [ 875.800324][T27442] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9776'. [ 876.467505][T27467] smb3: Unexpected value for 'rdma' [ 876.506042][T27471] loop0: detected capacity change from 0 to 22 [ 876.513472][T27470] x_tables: unsorted entry at hook 3 [ 876.524645][T27471] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 876.561901][T27471] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 877.087784][T27487] loop0: detected capacity change from 0 to 512 [ 877.381156][T27487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.441726][T27487] ext4 filesystem being mounted at /2526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 877.553057][T27487] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.9800: corrupted inode contents [ 877.586831][T27487] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #2: comm syz.0.9800: mark_inode_dirty error [ 877.653738][T27487] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.9800: corrupted inode contents [ 877.671779][ T8] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 877.690164][T27487] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.9800: mark_inode_dirty error [ 877.721343][T27486] loop4: detected capacity change from 0 to 32768 [ 877.784486][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.810717][T27486] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 877.873077][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 877.914742][ T8] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 877.944380][ T8] usb 3-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 877.995227][ T8] usb 3-1: config 0 has no interface number 0 [ 878.027486][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 878.049980][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.069786][ T8] usb 3-1: Product: syz [ 878.076767][T27486] XFS (loop4): Ending clean mount [ 878.082726][ T8] usb 3-1: Manufacturer: syz [ 878.087479][ T8] usb 3-1: SerialNumber: syz [ 878.102070][T27486] XFS (loop4): Quotacheck needed: Please wait. [ 878.102419][T27504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9803'. [ 878.132476][ T8] usb 3-1: config 0 descriptor?? [ 878.137054][T27504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9803'. [ 878.158387][T27490] loop1: detected capacity change from 0 to 32768 [ 878.177280][T27490] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9801 (27490) [ 878.213041][T27486] XFS (loop4): Quotacheck: Done. [ 878.243976][T27490] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 878.279394][T27490] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 878.297775][T27490] BTRFS info (device loop1): using free space tree [ 878.428174][T27511] loop0: detected capacity change from 0 to 512 [ 878.446131][ T8] usb 3-1: USB disconnect, device number 59 [ 878.542308][T27490] BTRFS info (device loop1): enabling ssd optimizations [ 878.549489][T27490] BTRFS info (device loop1): auto enabling async discard [ 878.560170][T27511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.577443][T24732] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 878.588680][T27511] ext4 filesystem being mounted at /2528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.691764][T27511] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:335: inode #15: comm syz.0.9804: verity file corrupted; can't find descriptor [ 878.800578][T27490] BTRFS info (device loop1): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 878.850368][T27511] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 878.971484][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.012125][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 879.801977][T27544] netlink: 'syz.1.9814': attribute type 2 has an invalid length. [ 879.836922][T27544] netlink: 'syz.1.9814': attribute type 8 has an invalid length. [ 879.877969][T27544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9814'. [ 880.420969][T27536] loop2: detected capacity change from 0 to 32768 [ 880.514559][T27536] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 880.514559][T27536] [ 880.606956][T27536] ERROR: (device loop2): remounting filesystem as read-only [ 880.654040][T27536] ERROR: (device loop2): jfs_unlink: [ 880.654040][T27536] [ 880.792041][ T5771] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 880.792041][ T5771] [ 881.314587][T27587] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 881.525980][T27593] netlink: 'syz.1.9838': attribute type 21 has an invalid length. [ 881.540392][T27593] IPv6: NLM_F_CREATE should be specified when creating new route [ 881.570876][T27593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 881.578283][T27593] IPv6: NLM_F_CREATE should be set when creating new route [ 881.585684][T27593] IPv6: NLM_F_CREATE should be set when creating new route [ 881.593022][T27593] IPv6: NLM_F_CREATE should be set when creating new route [ 882.776898][T27641] bond0: Error: Cannot enslave bond to itself. [ 883.002180][T27650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.024421][T27650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.056695][T27653] loop4: detected capacity change from 0 to 512 [ 883.063861][T27650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.073270][T27653] EXT4-fs: Ignoring removed mblk_io_submit option [ 883.134696][T27650] bridge0: port 2(batadv0) entered disabled state [ 883.172572][T27653] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 883.197907][T27653] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.9867: attempt to clear invalid blocks 2 len 1 [ 883.292190][T27653] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 883.325272][T27653] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.9867: invalid indirect mapped block 1819239214 (level 0) [ 883.340133][T27653] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.9867: invalid indirect mapped block 1819239214 (level 1) [ 883.390398][T27650] bridge0: port 2(batadv0) entered disabled state [ 883.410403][T27653] EXT4-fs (loop4): 1 truncate cleaned up [ 883.420524][T27653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.478430][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9871'. [ 883.501726][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9871'. [ 883.650885][T24732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.215595][T27680] netlink: 'syz.4.9879': attribute type 15 has an invalid length. [ 884.234250][T27680] netlink: 666 bytes leftover after parsing attributes in process `syz.4.9879'. [ 884.439062][T27667] loop0: detected capacity change from 0 to 32768 [ 884.480624][T27667] (syz.0.9873,27667,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 884.500466][T27684] loop4: detected capacity change from 0 to 1764 [ 884.523330][T27667] (syz.0.9873,27667,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 884.618467][T27667] JBD2: Ignoring recovery information on journal [ 884.682658][T27671] loop2: detected capacity change from 0 to 32768 [ 884.692087][T27667] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 885.258828][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 885.678993][T27710] futex_wake_op: syz.2.9894 tries to shift op by 32; fix this program [ 885.875964][T27715] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9889'. [ 886.574568][T27739] netlink: 'syz.4.9908': attribute type 2 has an invalid length. [ 887.196186][T27755] netlink: 'syz.2.9916': attribute type 1 has an invalid length. [ 887.250341][T27759] vcan1: entered promiscuous mode [ 887.257790][T27755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9916'. [ 887.370167][T27756] loop1: detected capacity change from 0 to 4096 [ 887.647938][T27766] loop4: detected capacity change from 0 to 256 [ 887.791085][T27766] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 888.067175][T27774] loop1: detected capacity change from 0 to 256 [ 888.098896][T27774] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 888.123084][T27774] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 888.164586][T27774] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 888.572271][T27788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.588640][T27788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.608554][T27790] netlink: 'syz.1.9933': attribute type 1 has an invalid length. [ 888.640176][T27788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.659642][T27788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.677324][T27790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9933'. [ 889.628854][T27828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9952'. [ 889.795597][T27836] loop0: detected capacity change from 0 to 16 [ 889.822538][T27836] erofs: (device loop0): mounted with root inode @ nid 36. [ 889.885515][T27836] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 889.960854][T27836] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 890.212568][T27847] loop1: detected capacity change from 0 to 164 [ 890.543779][T27856] loop1: detected capacity change from 0 to 1024 [ 890.551210][T27856] EXT4-fs: Ignoring removed orlov option [ 890.655485][T27856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.766263][T27856] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.9966: bit already cleared for inode 13 [ 890.831687][ T5832] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 890.898176][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.902669][T27872] dlm: no locking on control device [ 891.032150][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 891.057689][ T5832] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 891.082410][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.111254][ T5832] usb 5-1: Product: syz [ 891.117247][ T5832] usb 5-1: Manufacturer: syz [ 891.123508][ T5832] usb 5-1: SerialNumber: syz [ 891.141954][ T5832] usb 5-1: config 0 descriptor?? [ 891.154061][ T5832] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 891.326268][ T2131] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 891.527396][ T2131] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 891.564991][ T2131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.576723][ T5832] gspca_sonixj: reg_r err -71 [ 891.584427][ T2131] usb 3-1: config 0 descriptor?? [ 891.596880][ T5832] sonixj: probe of 5-1:0.0 failed with error -71 [ 891.627357][ T5832] usb 5-1: USB disconnect, device number 6 [ 891.658578][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9983'. [ 891.826143][ T2131] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 891.844496][ T2131] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 892.028562][ T2131] [drm:udl_init] *ERROR* Selecting channel failed [ 892.078264][ T2131] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 892.094652][ T2131] [drm] Initialized udl on minor 2 [ 892.120878][ T2131] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.138568][ T2131] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 892.147628][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 892.164702][ T2131] usb 3-1: USB disconnect, device number 60 [ 892.171005][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 892.421668][ T5832] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 892.612181][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 892.624444][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 892.682315][ T5832] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 892.705417][ T5832] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 892.729332][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.763692][ T5832] usb 1-1: Product: syz [ 892.777843][ T5832] usb 1-1: Manufacturer: syz [ 892.802832][T27921] loop1: detected capacity change from 0 to 512 [ 892.810214][T27921] EXT4-fs: Ignoring removed nobh option [ 892.816179][ T5832] usb 1-1: SerialNumber: syz [ 892.886977][T27926] netlink: 'syz.4.9998': attribute type 2 has an invalid length. [ 892.895590][T27926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.912018][T27921] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #3: comm syz.1.9996: corrupted inode contents [ 892.947503][T27921] EXT4-fs (loop1): Remounting filesystem read-only [ 892.963028][T27921] Quota error (device loop1): write_blk: dquota write failed [ 892.990920][T27921] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 893.028555][T27921] EXT4-fs (loop1): 1 truncate cleaned up [ 893.036833][T27921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.061829][T27921] ext4 filesystem being mounted at /2509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.076833][ T5832] usb 1-1: Invalid number of CPorts: 0 [ 893.101682][ T5832] es2_ap_driver: probe of 1-1:7.0 failed with error -22 [ 893.190742][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.314662][ T2131] usb 1-1: USB disconnect, device number 56 [ 893.513864][T27943] netlink: 'syz.1.10005': attribute type 12 has an invalid length. [ 893.825689][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10011'. [ 893.883034][T25106] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 894.029787][T27963] tmpfs: Bad value for 'mpol' [ 894.087600][T25106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 894.129170][T25106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 894.161694][T25106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 894.191945][T25106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 894.231058][T25106] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 894.248835][T25106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.258304][T25106] usb 5-1: Product: syz [ 894.263128][T25106] usb 5-1: Manufacturer: syz [ 894.268053][T25106] usb 5-1: SerialNumber: syz [ 894.285815][T25106] usb 5-1: config 0 descriptor?? [ 894.363624][T27973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10021'. [ 894.383005][T27973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10021'. [ 894.512266][T25106] adutux 5-1:0.0: Could not retrieve serial number [ 894.544847][T25106] adutux: probe of 5-1:0.0 failed with error -5 [ 894.660201][T27983] SET target dimension over the limit! [ 894.749247][ T5832] usb 5-1: USB disconnect, device number 7 [ 894.912873][T25106] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 895.078875][T27999] SET target dimension over the limit! [ 895.107515][T25106] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 895.129276][T25106] usb 3-1: config 0 has no interface number 0 [ 895.164789][T25106] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 895.182467][T25106] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 895.196799][T25106] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 895.206344][T25106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.229260][T25106] usb 3-1: config 0 descriptor?? [ 895.245846][T25106] ttusbir 3-1:0.83: cannot find expected altsetting [ 895.458613][ T5860] usb 3-1: USB disconnect, device number 61 [ 895.920506][T28025] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 896.157045][T28033] loop1: detected capacity change from 0 to 2048 [ 896.233175][T28039] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 896.286295][T28040] vivid-007: disconnect [ 896.300592][T28038] vivid-007: reconnect [ 896.327013][T28033] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 896.364011][T28033] Remounting filesystem read-only [ 896.505617][T28046] loop4: detected capacity change from 0 to 64 [ 896.698343][T28051] veth0_vlan: left promiscuous mode [ 897.320206][T28074] C: renamed from lo (while UP) [ 897.358124][T28074] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 897.866211][T28099] loop2: detected capacity change from 0 to 64 [ 898.162353][T28107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10086'. [ 898.192198][T28107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10086'. [ 898.226693][T28107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10086'. [ 898.274426][T28113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10088'. [ 898.311806][T28113] netlink: 'syz.4.10088': attribute type 1 has an invalid length. [ 898.319721][T28113] netlink: 'syz.4.10088': attribute type 2 has an invalid length. [ 898.346493][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10088'. [ 898.919582][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10099'. [ 899.102411][T28140] netlink: 'syz.0.10101': attribute type 30 has an invalid length. [ 899.423541][T28154] loop1: detected capacity change from 0 to 8 [ 900.368583][T28191] loop4: detected capacity change from 0 to 1764 [ 900.433538][T28191] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 900.642515][ T2131] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 900.851686][ T2131] usb 1-1: Using ep0 maxpacket: 16 [ 900.874380][ T2131] usb 1-1: config 0 has an invalid interface number: 163 but max is 0 [ 900.892590][ T2131] usb 1-1: config 0 has no interface number 0 [ 900.905992][ T2131] usb 1-1: config 0 interface 163 has no altsetting 0 [ 900.925170][ T2131] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 900.938423][ T2131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.961786][ T2131] usb 1-1: Product: syz [ 900.966136][ T2131] usb 1-1: Manufacturer: syz [ 900.986641][ T2131] usb 1-1: SerialNumber: syz [ 901.008903][ T2131] usb 1-1: config 0 descriptor?? [ 901.446385][T25106] usb 1-1: USB disconnect, device number 57 [ 901.464027][T25106] f81534a_ctrl 1-1:0.163: failed to set register 0x116: -19 [ 901.471410][T25106] f81534a_ctrl 1-1:0.163: failed to enable ports: -19 [ 901.630951][T28231] loop4: detected capacity change from 0 to 8192 [ 901.649288][T28231] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 901.669952][T28231] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 901.681634][T28231] REISERFS (device loop4): using ordered data mode [ 901.688212][T28231] reiserfs: using flush barriers [ 901.702910][T28231] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 901.721167][T28231] REISERFS (device loop4): checking transaction log (loop4) [ 901.740768][T28231] REISERFS (device loop4): Using r5 hash to sort names [ 901.762554][T28231] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 901.781181][T28231] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 901.917215][T28236] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.10146'. [ 902.337908][T28248] openvswitch: netlink: Actions may not be safe on all matching packets [ 902.566469][T28260] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10158'. [ 903.190853][T28253] loop2: detected capacity change from 0 to 32768 [ 903.222877][T28278] ERROR: device name not specified. [ 903.312008][T28253] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 903.312008][T28253] [ 903.858556][T28298] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10177'. [ 903.883932][T28298] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10177'. [ 905.230560][T28354] (unnamed net_device) (uninitialized): option lacp_active: invalid value (2) [ 905.325620][T28359] netlink: 'syz.1.10206': attribute type 9 has an invalid length. [ 905.353896][T28359] netlink: 'syz.1.10206': attribute type 6 has an invalid length. [ 905.711858][ T8] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 905.914055][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 905.917087][T28381] loop2: detected capacity change from 0 to 256 [ 905.933635][ T8] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 905.960172][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.990946][ T8] usb 1-1: Product: syz [ 905.998389][ T8] usb 1-1: Manufacturer: syz [ 906.011703][ T8] usb 1-1: SerialNumber: syz [ 906.024144][ T8] usb 1-1: config 0 descriptor?? [ 906.080032][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 906.514374][ T8] gspca_vc032x: reg_w err -71 [ 906.519189][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.537663][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.553429][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.562092][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.567448][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.595627][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.601214][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.622170][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.627630][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.642083][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.647454][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.658510][T28403] loop2: detected capacity change from 0 to 256 [ 906.662592][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.670202][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.688028][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.714054][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.719434][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.741699][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.747086][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.774091][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 906.779559][ T8] gspca_vc032x: Unknown sensor... [ 906.802345][ T8] vc032x: probe of 1-1:0.0 failed with error -22 [ 906.843948][ T8] usb 1-1: USB disconnect, device number 58 [ 907.450941][T28401] loop4: detected capacity change from 0 to 32768 [ 907.517285][T28401] [ 907.517285][T28401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 907.517285][T28401] [ 907.729228][ T12] [ 907.729228][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 907.729228][ T12] [ 907.771630][ T12] [ 907.771630][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 907.771630][ T12] [ 907.816261][ T114] [ 907.816261][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 907.816261][ T114] [ 907.853565][T24732] [ 907.853565][T24732] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 907.853565][T24732] [ 907.883215][T24732] [ 907.883215][T24732] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 907.883215][T24732] [ 908.473934][T28456] loop4: detected capacity change from 0 to 256 [ 908.608390][T28456] FAT-fs (loop4): Directory bread(block 64) failed [ 908.648111][T28456] FAT-fs (loop4): Directory bread(block 65) failed [ 908.671904][T28456] FAT-fs (loop4): Directory bread(block 66) failed [ 908.678537][T28456] FAT-fs (loop4): Directory bread(block 67) failed [ 908.685606][T28458] loop0: detected capacity change from 0 to 1764 [ 908.695799][T28461] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 908.696268][T28456] FAT-fs (loop4): Directory bread(block 68) failed [ 908.768969][T28456] FAT-fs (loop4): Directory bread(block 69) failed [ 908.801795][T28456] FAT-fs (loop4): Directory bread(block 70) failed [ 908.808788][T28456] FAT-fs (loop4): Directory bread(block 71) failed [ 908.841868][T28456] FAT-fs (loop4): Directory bread(block 72) failed [ 908.858442][T28456] FAT-fs (loop4): Directory bread(block 73) failed [ 909.391885][T28480] xt_hashlimit: max too large, truncated to 1048576 [ 909.627747][ T28] audit: type=1326 audit(2000000333.466:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.4.10270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 909.650518][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.711694][ T28] audit: type=1326 audit(2000000333.466:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.4.10270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 909.734350][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.797755][ T28] audit: type=1326 audit(2000000333.496:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.4.10270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 909.820317][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.890082][ T28] audit: type=1326 audit(2000000333.496:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.4.10270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 909.941727][ T28] audit: type=1326 audit(2000000333.496:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.4.10270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f399aeb9 code=0x7ffc0000 [ 910.349726][T28507] loop0: detected capacity change from 0 to 4096 [ 910.368530][T28507] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 910.418905][T28507] ntfs3: loop0: Failed to load $Extend (-22). [ 910.450104][T28507] ntfs3: loop0: Failed to initialize $Extend. [ 910.544208][T28507] ntfs3: loop0: ino=5, "/" directory corrupted [ 910.642456][T28521] loop2: detected capacity change from 0 to 512 [ 910.771858][T28521] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 910.779793][T28521] System zones: 0-2, 18-18, 34-34 [ 910.875268][T28521] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #3: comm syz.2.10285: corrupted inode contents [ 910.902365][T28521] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #3: comm syz.2.10285: mark_inode_dirty error [ 910.943238][T28521] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #3: comm syz.2.10285: corrupted inode contents [ 910.983606][T28521] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.10285: mark_inode_dirty error [ 911.021167][T28521] Quota error (device loop2): write_blk: dquota write failed [ 911.046319][T28521] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 911.082861][T28521] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.10285: Failed to acquire dquot type 0 [ 911.176365][T28521] EXT4-fs (loop2): 1 orphan inode deleted [ 911.202555][ T3527] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 911.206349][T28521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.257615][ T3527] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:9: Failed to release dquot type 1 [ 911.269740][T28521] ext4 filesystem being mounted at /2534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.471271][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.458372][T28626] cgroup: Invalid name [ 913.571745][ T2131] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 913.679769][T28633] loop1: detected capacity change from 0 to 4096 [ 913.707805][T28633] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 913.751671][ T2131] usb 5-1: Using ep0 maxpacket: 32 [ 913.769243][ T2131] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 913.787942][ T2131] usb 5-1: config 0 has no interface number 0 [ 913.810873][ T2131] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 913.831756][T28633] ntfs3: loop1: failed to convert "c46c" to macroman [ 913.842495][ T2131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.850584][ T2131] usb 5-1: Product: syz [ 913.875370][ T2131] usb 5-1: Manufacturer: syz [ 913.880239][ T2131] usb 5-1: SerialNumber: syz [ 913.927701][ T2131] usb 5-1: config 0 descriptor?? [ 913.946602][ T2131] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 914.058547][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10345'. [ 914.067899][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10345'. [ 914.383601][ T2131] gspca_sn9c2028: read1 error -71 [ 914.396690][ T2131] gspca_sn9c2028: read1 error -71 [ 914.425504][ T2131] sn9c2028: probe of 5-1:0.119 failed with error -71 [ 914.446913][ T2131] usb 5-1: USB disconnect, device number 8 [ 914.713610][T28661] loop1: detected capacity change from 0 to 8 [ 914.799760][ T7543] udevd[7543]: incorrect cramfs checksum on /dev/loop1 [ 914.805579][T28661] cramfs: Error -3 while decompressing! [ 914.827068][T28661] cramfs: ffffffff973f4368(26)->ffff88805a1c6000(4096) [ 914.845838][T28661] cramfs: Error -3 while decompressing! [ 914.859904][ T5912] udevd[5912]: incorrect cramfs checksum on /dev/loop1 [ 914.866379][T28661] cramfs: ffffffff973f4382(26)->ffff888057111000(4096) [ 914.901879][T28661] cramfs: Error -3 while decompressing! [ 914.922947][T28661] cramfs: ffffffff973f439c(16)->ffff88805196f000(4096) [ 914.955028][T28661] cramfs: Error -3 while decompressing! [ 914.969289][T28661] cramfs: ffffffff973f4368(26)->ffff88805a1c6000(4096) [ 915.018355][T28667] loop0: detected capacity change from 0 to 1024 [ 915.033247][T28667] EXT4-fs: inline encryption not supported [ 915.093277][T28667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.359167][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.660287][T28692] netlink: 'syz.1.10364': attribute type 8 has an invalid length. [ 915.915098][T28700] loop0: detected capacity change from 0 to 8 [ 915.932712][T28700] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 916.954263][T28706] loop4: detected capacity change from 0 to 32768 [ 917.943936][T28735] loop1: detected capacity change from 0 to 32768 [ 917.989137][T28735] (syz.1.10386,28735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 918.017477][T28735] (syz.1.10386,28735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 918.089415][T28735] JBD2: Ignoring recovery information on journal [ 918.176863][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10399'. [ 918.226694][T28735] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 918.573237][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 918.593141][T28768] loop2: detected capacity change from 0 to 4096 [ 918.708361][T28768] ntfs3: loop2: MFT: r=b, expect seq=b instead of 1ff! [ 918.743446][T28774] usb usb8: usbfs: process 28774 (syz.4.10405) did not claim interface 0 before use [ 918.752973][T28768] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 918.774355][T28768] ntfs3: loop2: Failed to load $Extend (-22). [ 918.780653][T28768] ntfs3: loop2: Failed to initialize $Extend. [ 918.842933][T28772] loop0: detected capacity change from 0 to 4096 [ 918.881839][T28772] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 919.017911][T28772] ntfs3: loop0: Failed to initialize $Secure (-22). [ 919.396656][T28786] loop1: detected capacity change from 0 to 512 [ 919.447011][T28790] C: renamed from team_slave_0 (while UP) [ 919.481438][T28790] netlink: 'syz.4.10412': attribute type 1 has an invalid length. [ 919.493911][T28786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.500608][T28790] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10412'. [ 919.519922][T28790] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 919.536319][T28786] ext4 filesystem being mounted at /2622/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 919.621810][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.631374][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.691373][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.712014][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.725340][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.735705][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.748214][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.760245][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.775560][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.786138][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10413'. [ 919.828019][T28799] xt_hashlimit: overflow, try lower: 3/0 [ 919.999173][T28801] loop0: detected capacity change from 0 to 4096 [ 920.021353][T28801] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 920.080906][T28805] loop1: detected capacity change from 0 to 1024 [ 920.110887][T28801] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 920.122895][T28805] EXT4-fs: Ignoring removed mblk_io_submit option [ 920.130306][T28801] ntfs3: loop0: Failed to load $Extend (-22). [ 920.149817][T28801] ntfs3: loop0: Failed to initialize $Extend. [ 920.152342][T28805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 920.197999][T28805] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 920.257179][T28805] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.10418: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 920.280441][T28807] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 920.288142][T28807] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 920.342500][T28807] vhci_hcd vhci_hcd.0: Device attached [ 920.404329][T28805] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.10418: couldn't read orphan inode 11 (err -117) [ 920.431717][T28808] vhci_hcd: connection closed [ 920.444611][ T12] vhci_hcd: stop threads [ 920.455934][T28805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.496097][ T12] vhci_hcd: release socket [ 920.525684][ T12] vhci_hcd: disconnect device [ 920.598480][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.335712][T28814] loop4: detected capacity change from 0 to 40427 [ 921.375305][T28814] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 921.389250][T28814] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 921.415389][T28814] F2FS-fs (loop4): invalid crc value [ 921.468815][T28814] F2FS-fs (loop4): Found nat_bits in checkpoint [ 921.672723][T28814] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 921.679856][T28814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 921.797611][T28847] netlink: del zone limit has 8 unknown bytes [ 922.869374][T28889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 923.701871][ T2131] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 923.803974][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 923.911718][ T2131] usb 2-1: Using ep0 maxpacket: 8 [ 923.923883][ T2131] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 923.936275][ T2131] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 923.951660][ T2131] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 923.970225][ T2131] usb 2-1: Product: syz [ 923.975094][ T2131] usb 2-1: Manufacturer: syz [ 923.979780][ T2131] usb 2-1: SerialNumber: syz [ 924.235729][ T2131] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 924.250543][ T2131] usb 2-1: Handspring Visor / Palm OS: port 205, is for unknown use [ 924.284824][ T2131] usb 2-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 924.301267][ T2131] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 924.441875][ T2131] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 924.450360][ T2131] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 924.476942][ T2131] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 924.497823][ T2131] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 924.525981][ T2131] usb 2-1: USB disconnect, device number 56 [ 924.572380][ T2131] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 924.582219][ T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 924.621481][ T2131] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 924.644014][ T2131] visor 2-1:1.0: device disconnected [ 924.786690][ T8] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 924.797123][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.819366][ T8] usb 1-1: Product: syz [ 924.828290][ T8] usb 1-1: Manufacturer: syz [ 924.833688][ T8] usb 1-1: SerialNumber: syz [ 924.847531][T28947] __nla_validate_parse: 88 callbacks suppressed [ 924.847557][T28947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10484'. [ 924.875026][ T8] usb 1-1: config 0 descriptor?? [ 924.900189][T28947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10484'. [ 924.910037][T28947] netlink: 'syz.4.10484': attribute type 6 has an invalid length. [ 925.100321][ T8] mos7840 1-1:0.0: required endpoints missing [ 925.380737][ T5832] usb 1-1: USB disconnect, device number 59 [ 925.499157][T28965] loop1: detected capacity change from 0 to 256 [ 925.539250][T28965] FAT-fs (loop1): Directory bread(block 64) failed [ 925.557367][T28965] FAT-fs (loop1): Directory bread(block 65) failed [ 925.580310][T28965] FAT-fs (loop1): Directory bread(block 66) failed [ 925.599947][T28965] FAT-fs (loop1): Directory bread(block 67) failed [ 925.620368][T28965] FAT-fs (loop1): Directory bread(block 68) failed [ 925.638413][T28965] FAT-fs (loop1): Directory bread(block 69) failed [ 925.663268][T28965] FAT-fs (loop1): Directory bread(block 70) failed [ 925.674619][T28965] FAT-fs (loop1): Directory bread(block 71) failed [ 925.694042][T28965] FAT-fs (loop1): Directory bread(block 72) failed [ 925.700662][T28965] FAT-fs (loop1): Directory bread(block 73) failed [ 925.902051][T28965] syz.1.10494: attempt to access beyond end of device [ 925.902051][T28965] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 925.962673][T28965] syz.1.10494: attempt to access beyond end of device [ 925.962673][T28965] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 925.993108][ T28] audit: type=1800 audit(2000000349.836:512): pid=28965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10494" name="file0" dev="loop1" ino=1048718 res=0 errno=0 [ 926.545262][T28993] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10507'. [ 927.039150][T29013] loop2: detected capacity change from 0 to 512 [ 927.099036][T29013] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 927.127507][T29013] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 927.180131][T29018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10519'. [ 927.190495][T29019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10520'. [ 927.201791][T29013] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 927.266425][T29013] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 927.284901][T29013] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 927.352393][T29013] EXT4-fs (loop2): orphan cleanup on readonly fs [ 927.374949][T29013] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 927.440567][T29013] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 927.506376][T29013] EXT4-fs (loop2): 1 truncate cleaned up [ 927.516418][T29013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 927.643095][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.575443][T29062] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 929.183726][T29060] loop0: detected capacity change from 0 to 32768 [ 929.392635][T29088] loop1: detected capacity change from 0 to 512 [ 929.427272][T29088] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff7fff) [ 929.459016][T29088] FAT-fs (loop1): Filesystem has been set read-only [ 929.459609][T29091] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 930.065416][T29082] loop4: detected capacity change from 0 to 32768 [ 930.588583][T29119] loop4: detected capacity change from 0 to 2048 [ 930.609234][T29119] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 930.645213][T29119] NILFS (loop4): mounting unchecked fs [ 930.661667][T29119] NILFS (loop4): recovery required for readonly filesystem [ 930.681633][T29119] NILFS (loop4): write access will be enabled during recovery [ 930.704052][T29119] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 930.761279][T29119] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 930.922356][ T5912] udevd[5912]: incorrect nilfs2 checksum on /dev/loop4 [ 931.298963][T29112] loop2: detected capacity change from 0 to 32768 [ 931.537711][T29132] ./file0: Can't open blockdev [ 931.547972][T29120] loop0: detected capacity change from 0 to 32768 [ 931.686650][T29134] loop1: detected capacity change from 0 to 256 [ 931.838346][T29134] FAT-fs (loop1): Directory bread(block 64) failed [ 931.854222][T29134] FAT-fs (loop1): Directory bread(block 65) failed [ 931.864512][T29134] FAT-fs (loop1): Directory bread(block 66) failed [ 931.872283][T29134] FAT-fs (loop1): Directory bread(block 67) failed [ 931.894972][T29134] FAT-fs (loop1): Directory bread(block 68) failed [ 931.912207][T29134] FAT-fs (loop1): Directory bread(block 69) failed [ 931.918957][T29134] FAT-fs (loop1): Directory bread(block 70) failed [ 931.943666][T29134] FAT-fs (loop1): Directory bread(block 71) failed [ 931.950626][T29134] FAT-fs (loop1): Directory bread(block 72) failed [ 931.959521][T29134] FAT-fs (loop1): Directory bread(block 73) failed [ 931.968954][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.501102][T29150] netlink: 'syz.2.10576': attribute type 21 has an invalid length. [ 932.513401][T29150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10576'. [ 932.551671][ T5832] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 932.752929][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 932.788850][ T5832] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 932.811628][ T5832] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 932.815441][T29159] loop0: detected capacity change from 0 to 128 [ 932.830268][ T5832] usb 5-1: Product: syz [ 932.838710][T29160] netlink: 'syz.1.10590': attribute type 3 has an invalid length. [ 932.841299][ T5832] usb 5-1: Manufacturer: syz [ 932.855283][T29160] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10590'. [ 932.875471][ T5832] usb 5-1: SerialNumber: syz [ 932.892791][ T5832] usb 5-1: config 0 descriptor?? [ 932.915466][ T5832] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 932.933104][T29159] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 932.976266][T29159] ext4 filesystem being mounted at /2718/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 933.043471][T29168] xt_TPROXY: Can be used only with -p tcp or -p udp [ 933.209789][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 933.347545][ T5832] gspca_zc3xx: reg_r err -71 [ 933.371995][ T5832] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 933.395062][ T5832] usb 5-1: USB disconnect, device number 9 [ 933.445152][T29177] binder: 29176:29177 ioctl c018620c 0 returned -14 [ 933.643196][T29186] loop2: detected capacity change from 0 to 1024 [ 933.741070][T29188] loop1: detected capacity change from 0 to 8 [ 933.789098][T24059] hfsplus: b-tree write err: -5, ino 4 [ 933.830567][T29190] xt_TCPMSS: Only works on TCP SYN packets [ 934.036606][T29196] x_tables: duplicate entry at hook 3 [ 934.063261][T29194] loop1: detected capacity change from 0 to 512 [ 934.084256][T29198] loop2: detected capacity change from 0 to 512 [ 934.130954][T29194] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 934.157868][T29198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.205408][T29205] netlink: 'syz.4.10611': attribute type 8 has an invalid length. [ 934.241719][T29194] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 934.249924][T29194] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.10606: bad orphan inode 13 [ 934.262310][T29198] ext4 filesystem being mounted at /2624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.333089][T29194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.356988][T29198] EXT4-fs error (device loop2): ext4_get_first_dir_block:3584: inode #12: comm syz.2.10609: Attempting to read directory block (0) that is past i_size (3) [ 934.438047][T29198] EXT4-fs (loop2): Remounting filesystem read-only [ 934.496194][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.611670][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.638023][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 934.669760][ T12] Quota error (device loop2): write_blk: dquota write failed [ 934.706652][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 934.722419][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 934.737746][ T12] Quota error (device loop2): write_blk: dquota write failed [ 934.747683][ T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 934.764653][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 934.777867][ T12] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 934.800824][T29217] loop4: detected capacity change from 0 to 256 [ 934.846711][T29217] FAT-fs (loop4): Directory bread(block 1285) failed [ 934.891956][T29217] FAT-fs (loop4): Directory bread(block 1286) failed [ 934.911428][T29217] FAT-fs (loop4): Directory bread(block 1287) failed [ 934.949773][T29217] FAT-fs (loop4): Directory bread(block 1288) failed [ 934.995667][T29217] FAT-fs (loop4): Directory bread(block 1285) failed [ 935.007483][T29223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10619'. [ 935.016929][T29217] FAT-fs (loop4): Directory bread(block 1286) failed [ 935.024160][T29217] FAT-fs (loop4): Directory bread(block 1287) failed [ 935.031230][T29217] FAT-fs (loop4): Directory bread(block 1288) failed [ 935.038570][T29223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10619'. [ 935.050085][T29217] FAT-fs (loop4): Directory bread(block 1285) failed [ 935.058571][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10619'. [ 935.070524][T29217] FAT-fs (loop4): Directory bread(block 1286) failed [ 935.233512][T29226] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10621'. [ 935.685470][T29240] loop4: detected capacity change from 0 to 4096 [ 935.882729][T29246] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 936.302260][T29259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 937.015876][T29267] loop2: detected capacity change from 0 to 32768 [ 937.079500][T29288] loop4: detected capacity change from 0 to 256 [ 937.090865][T29267] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 937.114352][T29288] exfat: Deprecated parameter 'namecase' [ 937.142523][T29288] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 937.326279][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 938.231633][ T28] audit: type=1326 audit(2000000362.056:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29324 comm="syz.1.10665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 938.239435][T29327] loop2: detected capacity change from 0 to 64 [ 938.289205][T29329] loop4: detected capacity change from 0 to 512 [ 938.318129][ T28] audit: type=1326 audit(2000000362.056:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29324 comm="syz.1.10665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 938.405118][ T28] audit: type=1326 audit(2000000362.106:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29324 comm="syz.1.10665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 938.429654][T29329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.451903][T29329] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.463228][T29335] tmpfs: Bad value for 'nr_blocks' [ 938.504432][ T28] audit: type=1326 audit(2000000362.106:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29324 comm="syz.1.10665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e0b9aeb9 code=0x7ffc0000 [ 938.647766][T29329] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 938.693201][T29339] loop1: detected capacity change from 0 to 4096 [ 938.704714][T29329] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.10666: Failed to acquire dquot type 0 [ 938.727481][T29339] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 938.905329][T24732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.935509][T29339] ntfs3: loop1: failed to convert "c46c" to koi8-r [ 939.396677][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10677'. [ 939.589692][T29364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10680'. [ 939.810704][T29374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10685'. [ 940.185057][T29384] loop1: detected capacity change from 0 to 2048 [ 940.223790][T29384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 940.428755][T29387] block device autoloading is deprecated and will be removed. [ 940.476636][T29387] syz.2.10692: attempt to access beyond end of device [ 940.476636][T29387] ram200: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=8192 [ 940.976203][T29401] loop2: detected capacity change from 0 to 512 [ 940.993924][T29406] loop1: detected capacity change from 0 to 256 [ 941.046145][T29401] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 941.071644][T29401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 941.087287][T29401] System zones: 0-1, 15-15, 18-18, 34-34 [ 941.136067][T29401] EXT4-fs (loop2): orphan cleanup on readonly fs [ 941.146382][T29412] loop0: detected capacity change from 0 to 8 [ 941.189288][T29401] __quota_error: 6 callbacks suppressed [ 941.189307][T29401] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 941.205512][T29401] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 941.223109][T29410] loop4: detected capacity change from 0 to 1024 [ 941.229791][T29401] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 941.240605][T29401] EXT4-fs (loop2): 1 truncate cleaned up [ 941.266182][T29401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 941.305457][T29412] SQUASHFS error: Unable to read inode 0xe3 [ 941.363763][T29401] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 941.492081][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.781388][T29420] loop2: detected capacity change from 0 to 4096 [ 941.835998][T29420] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 941.881729][T29420] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 941.974667][T29420] ntfs: volume version 3.1. [ 941.983123][T29420] ntfs: (device loop2): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 942.021610][T29420] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 942.051974][T29420] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 942.081287][T29420] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 942.115167][T29432] loop4: detected capacity change from 0 to 256 [ 942.163915][T29432] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 942.226627][T29420] ntfs: (device loop2): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 942.265944][T29420] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 942.787553][T29450] syz.0.10722: attempt to access beyond end of device [ 942.787553][T29450] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 942.821665][T29450] FAT-fs (loop1): unable to read boot sector [ 942.902977][T29456] loop1: detected capacity change from 0 to 64 [ 943.163649][T29460] loop4: detected capacity change from 0 to 4096 [ 943.335738][T29460] ntfs3: loop4: ino=5, "/" directory corrupted [ 943.344628][T29460] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 943.392887][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.428882][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.444450][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.454527][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.475053][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.529945][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.577053][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10732'. [ 943.621920][T29470] 8021q: adding VLAN 0 to HW filter on device .` [ 943.647528][T29470] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.717769][T29470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.510192][T29508] loop2: detected capacity change from 0 to 1024 [ 944.651129][ T3527] hfsplus: b-tree write err: -5, ino 4 [ 944.957061][T29527] netlink: 'syz.0.10760': attribute type 5 has an invalid length. [ 945.479909][T29546] __nla_validate_parse: 10 callbacks suppressed [ 945.479929][T29546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10769'. [ 945.573881][T29551] loop4: detected capacity change from 0 to 8 [ 945.608597][T29551] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 945.646430][T29546] ~ÿ: entered promiscuous mode [ 946.152513][ T8] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 946.361805][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 946.378398][ T8] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 946.392037][ T8] usb 1-1: config 0 has no interface number 0 [ 946.424148][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 946.453454][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.482014][ T8] usb 1-1: Product: syz [ 946.486267][ T8] usb 1-1: Manufacturer: syz [ 946.490908][ T8] usb 1-1: SerialNumber: syz [ 946.543109][ T8] usb 1-1: config 0 descriptor?? [ 946.787586][ T8] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 946.816827][ T8] usb 1-1: No valid video chain found. [ 946.842185][ T8] usb 1-1: USB disconnect, device number 60 [ 947.114444][ T28] audit: type=1326 audit(2000000370.956:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.2.10795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 947.157506][ T28] audit: type=1326 audit(2000000370.956:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.2.10795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 947.211631][ T28] audit: type=1326 audit(2000000370.996:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.2.10795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 947.258224][ T28] audit: type=1326 audit(2000000370.996:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29598 comm="syz.2.10795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9357f9aeb9 code=0x7ffc0000 [ 947.440846][T29605] loop1: detected capacity change from 0 to 1764 [ 947.515504][T29605] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 947.594378][ T28] audit: type=1326 audit(2000000371.436:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.0.10800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718119aeb9 code=0x7ffc0000 [ 947.664973][ T28] audit: type=1326 audit(2000000371.436:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.0.10800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718119aeb9 code=0x7ffc0000 [ 947.676766][T29591] loop4: detected capacity change from 0 to 32768 [ 947.761039][T29591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.10791 (29591) [ 947.772024][ T28] audit: type=1326 audit(2000000371.466:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.0.10800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f718119aeb9 code=0x7ffc0000 [ 947.848329][T29613] netlink: 1964 bytes leftover after parsing attributes in process `syz.1.10801'. [ 947.872240][T29591] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 947.893403][ T28] audit: type=1326 audit(2000000371.466:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.0.10800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718119aeb9 code=0x7ffc0000 [ 947.916667][T29591] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 947.941966][T29591] BTRFS info (device loop4): using free space tree [ 948.216339][T29591] BTRFS info (device loop4): enabling ssd optimizations [ 948.273730][T29591] BTRFS info (device loop4): auto enabling async discard [ 948.399174][T24732] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 948.867590][T29651] loop4: detected capacity change from 0 to 64 [ 948.973840][T29651] hfs: unable to locate alternate MDB [ 948.979307][T29651] hfs: continuing without an alternate MDB [ 949.180941][ T12] [ 949.183345][ T12] ====================================================== [ 949.190405][ T12] WARNING: possible circular locking dependency detected [ 949.197469][ T12] syzkaller #0 Not tainted [ 949.201932][ T12] ------------------------------------------------------ [ 949.202051][T29659] autofs4:pid:29659:autofs_fill_super: called with bogus options [ 949.208968][ T12] kworker/u4:1/12 is trying to acquire lock: [ 949.208981][ T12] ffff8880596575f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 949.232969][T25106] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 949.234183][ T12] [ 949.234183][ T12] but task is already holding lock: [ 949.234192][ T12] ffff88805afa80b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 949.258712][ T12] [ 949.258712][ T12] which lock already depends on the new lock. [ 949.258712][ T12] [ 949.269770][ T12] [ 949.269770][ T12] the existing dependency chain (in reverse order) is: [ 949.278836][ T12] [ 949.278836][ T12] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 949.287005][ T12] __mutex_lock+0x136/0xcc0 [ 949.292090][ T12] hfs_find_init+0x17e/0x1f0 [ 949.297276][ T12] hfs_extend_file+0x361/0x1380 [ 949.302710][ T12] hfs_bmap_reserve+0x107/0x430 [ 949.308273][ T12] hfs_cat_create+0x1fe/0x6b0 [ 949.313721][ T12] hfs_mkdir+0x6c/0xe0 [ 949.318367][ T12] vfs_mkdir+0x296/0x440 [ 949.323173][ T12] do_mkdirat+0x1dc/0x450 [ 949.328158][ T12] __x64_sys_mkdirat+0x89/0xa0 [ 949.333509][ T12] do_syscall_64+0x55/0xa0 [ 949.338529][ T12] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.345021][ T12] [ 949.345021][ T12] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 949.354389][ T12] __lock_acquire+0x2df1/0x7d40 [ 949.359823][ T12] lock_acquire+0x19e/0x420 [ 949.364942][ T12] __mutex_lock+0x136/0xcc0 [ 949.370025][ T12] hfs_extend_file+0xff/0x1380 [ 949.375510][ T12] hfs_bmap_reserve+0x107/0x430 [ 949.380932][ T12] __hfs_ext_write_extent+0x1fa/0x470 [ 949.386876][ T12] hfs_ext_write_extent+0x17f/0x210 [ 949.392646][ T12] hfs_write_inode+0xdc/0x880 [ 949.397906][ T12] __writeback_single_inode+0x705/0xec0 [ 949.404033][ T12] writeback_sb_inodes+0x7cd/0xf50 [ 949.409758][ T12] wb_writeback+0x46a/0xbf0 [ 949.414856][ T12] wb_workfn+0x400/0xe60 [ 949.419677][ T12] process_scheduled_works+0xa5d/0x15d0 [ 949.425805][ T12] worker_thread+0xa55/0xfc0 [ 949.430973][ T12] kthread+0x2fa/0x390 [ 949.435703][ T12] ret_from_fork+0x48/0x80 [ 949.440688][ T12] ret_from_fork_asm+0x11/0x20 [ 949.446125][ T12] [ 949.446125][ T12] other info that might help us debug this: [ 949.446125][ T12] [ 949.456395][ T12] Possible unsafe locking scenario: [ 949.456395][ T12] [ 949.463888][ T12] CPU0 CPU1 [ 949.469293][ T12] ---- ---- [ 949.475132][ T12] lock(&tree->tree_lock#2/1); [ 949.480055][ T12] lock(&HFS_I(tree->inode)->extents_lock); [ 949.488626][ T12] lock(&tree->tree_lock#2/1); [ 949.489113][T25106] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 949.496051][ T12] lock(&HFS_I(tree->inode)->extents_lock); [ 949.496071][ T12] [ 949.496071][ T12] *** DEADLOCK *** [ 949.496071][ T12] [ 949.496077][ T12] 3 locks held by kworker/u4:1/12: [ 949.496090][ T12] #0: ffff888141e42538 ((wq_completion)writeback){+.+.}-{0:0} [ 949.521735][T25106] usb 1-1: config 0 has no interface number 0 [ 949.523504][ T12] , at: process_scheduled_works+0x96f/0x15d0 [ 949.543251][ T12] #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 949.547881][T25106] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 949.555832][ T12] #2: ffff88805afa80b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 949.555910][ T12] [ 949.555910][ T12] stack backtrace: [ 949.555919][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 949.590428][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 949.600615][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 949.606691][ T12] Call Trace: [ 949.607126][T25106] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 949.609990][ T12] [ 949.610001][ T12] dump_stack_lvl+0x18c/0x250 [ 949.627517][ T12] ? load_image+0x400/0x400 [ 949.632077][ T12] ? show_regs_print_info+0x20/0x20 [ 949.637333][ T12] ? print_circular_bug+0x12b/0x1a0 [ 949.640792][T25106] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 949.642574][ T12] check_noncircular+0x2fc/0x400 [ 949.642606][ T12] ? look_up_lock_class+0x75/0x140 [ 949.642632][ T12] ? print_deadlock_bug+0x5d0/0x5d0 [ 949.666863][T25106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.667231][ T12] ? lockdep_lock+0xf5/0x230 [ 949.680175][ T12] ? _find_first_zero_bit+0xd3/0x100 [ 949.685514][ T12] __lock_acquire+0x2df1/0x7d40 [ 949.690656][ T12] ? arch_stack_walk+0x16e/0x190 [ 949.695691][ T12] ? ret_from_fork_asm+0x11/0x20 [ 949.700694][ T12] ? verify_lock_unused+0x140/0x140 [ 949.705968][ T12] ? stack_trace_save+0xaa/0x100 [ 949.710967][ T12] ? stack_trace_snprint+0xf0/0xf0 [ 949.716137][ T12] ? check_noncircular+0x18a/0x400 [ 949.721356][ T12] ? print_deadlock_bug+0x5d0/0x5d0 [ 949.726648][ T12] lock_acquire+0x19e/0x420 [ 949.731204][ T12] ? hfs_extend_file+0xff/0x1380 [ 949.736196][ T12] ? __might_sleep+0xe0/0xe0 [ 949.740856][ T12] ? read_lock_is_recursive+0x20/0x20 [ 949.746290][ T12] __mutex_lock+0x136/0xcc0 [ 949.750859][ T12] ? hfs_extend_file+0xff/0x1380 [ 949.755854][ T12] ? verify_lock_unused+0x140/0x140 [ 949.761103][ T12] ? hfs_extend_file+0xff/0x1380 [ 949.766091][ T12] ? mutex_lock_nested+0x20/0x20 [ 949.771185][ T12] hfs_extend_file+0xff/0x1380 [ 949.776004][ T12] ? hfs_ext_write_extent+0x152/0x210 [ 949.781514][ T12] ? hfs_write_inode+0xdc/0x880 [ 949.784642][T25106] usb 1-1: config 0 descriptor?? [ 949.786414][ T12] ? hfs_get_block+0xc50/0xc50 [ 949.796189][ T12] ? trace_raw_output_contention_end+0xd0/0xd0 [ 949.802400][ T12] ? rcu_is_watching+0x15/0xb0 [ 949.807265][ T12] ? trace_contention_end+0x39/0xe0 [ 949.812522][ T12] ? __asan_memset+0x22/0x40 [ 949.817265][ T12] ? hfs_brec_find+0x19b/0x500 [ 949.817827][T25106] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 949.822073][ T12] ? hfs_find_init+0x17e/0x1f0 [ 949.822106][ T12] hfs_bmap_reserve+0x107/0x430 [ 949.842220][ T12] __hfs_ext_write_extent+0x1fa/0x470 [ 949.847661][ T12] hfs_ext_write_extent+0x17f/0x210 [ 949.852908][ T12] ? verify_lock_unused+0x140/0x140 [ 949.858244][ T12] ? hfs_ext_find_block+0x190/0x190 [ 949.863599][ T12] ? blk_start_plug+0x51/0x1a0 [ 949.868544][ T12] hfs_write_inode+0xdc/0x880 [ 949.873271][ T12] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 949.878706][ T12] ? __writeback_single_inode+0x48d/0xec0 [ 949.884489][ T12] ? __lock_acquire+0x7d40/0x7d40 [ 949.889569][ T12] ? do_raw_spin_lock+0x11f/0x2c0 [ 949.894654][ T12] ? __rwlock_init+0x150/0x150 [ 949.899490][ T12] __writeback_single_inode+0x705/0xec0 [ 949.905202][ T12] writeback_sb_inodes+0x7cd/0xf50 [ 949.910480][ T12] ? queue_io+0x550/0x550 [ 949.914884][ T12] ? rcu_is_watching+0x15/0xb0 [ 949.919722][ T12] wb_writeback+0x46a/0xbf0 [ 949.924290][ T12] ? queue_io+0x3b1/0x550 [ 949.928684][ T12] ? percpu_ref_tryget+0x250/0x250 [ 949.933862][ T12] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 949.939902][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 949.945154][ T12] wb_workfn+0x400/0xe60 [ 949.949461][ T12] ? inode_wait_for_writeback+0x230/0x230 [ 949.955242][ T12] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 949.961283][ T12] ? read_lock_is_recursive+0x20/0x20 [ 949.966709][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 949.971967][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 949.977997][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 949.983955][ T12] process_scheduled_works+0xa5d/0x15d0 [ 949.989564][ T12] ? assign_work+0x430/0x430 [ 949.994207][ T12] ? assign_work+0x3d0/0x430 [ 949.998857][ T12] worker_thread+0xa55/0xfc0 [ 950.003537][ T12] kthread+0x2fa/0x390 [ 950.007681][ T12] ? pr_cont_work+0x560/0x560 [ 950.012448][ T12] ? kthread_blkcg+0xd0/0xd0 [ 950.017080][ T12] ret_from_fork+0x48/0x80 [ 950.021544][ T12] ? kthread_blkcg+0xd0/0xd0 [ 950.026190][ T12] ret_from_fork_asm+0x11/0x20 [ 950.031011][ T12] [ 950.076257][T29654] iowarrior 1-1:0.1: Error -90 while submitting URB [ 950.090906][T25106] usb 1-1: USB disconnect, device number 61