last executing test programs: 14m47.985090839s ago: executing program 2 (id=8801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14m47.747150429s ago: executing program 2 (id=8805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 14m47.50129151s ago: executing program 2 (id=8809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00080003400000000008000440000000000800054000000000090002000000000007000000080001"], 0x40}}, 0x0) 14m47.288883895s ago: executing program 2 (id=8813): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 14m46.84277197s ago: executing program 2 (id=8819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000929800000000030000008500000027000000850000002300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m46.103185304s ago: executing program 2 (id=8827): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x61}}], 0x1, 0x0) 14m45.599553328s ago: executing program 32 (id=8827): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x61}}], 0x1, 0x0) 4m58.285240766s ago: executing program 0 (id=16364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 4m58.126116262s ago: executing program 0 (id=16367): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000180)) 4m57.90539566s ago: executing program 0 (id=16368): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0xa, {0x2, 0x0, @empty}}, 0x24) 4m57.48375332s ago: executing program 0 (id=16378): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'maccenteuro'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$eJzs3U1sHGf5APBn1uu1N5XcbZq0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRht9Pmp13Zt6PZx7PvF7PJtoA/mctvhWT25HE4sU3t9Lthzv15sOd+mpRjoipiChFlNurSNYikk8jrkV7if9Ld+bdJfuN8/qjTz648OCjenurnC9Z/dKwdrtaQ0bYzpeYjYiJfD2m8n793Yg3Bvq7P1bXSSfuNGHni8TBSWsN2B6n+Qj3LfC0ux8xMbnH/lrEqYiYzt8HRD47lI45vEM31iwHAAAAT6eJgyo8/zgex1bMHE84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GxI2t8ZmORLqSjPRlJ8/38l35eqVE443uG+csDx928dUyAAAAAAAAAAcCQ+zj+4P/c4HsdWzBT7W0n2mf+r2caZ7PW5eDc2YinW41JsRSM2YzPWYz5icqarw8pWY3NzfX6w5a8jbdlqte7nLRciojbQcmGfQEuHfOIAAAAAAAAA8Gz6SSzGzEkHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3ZKIifYqW84U5VqUyhExHRGVtN52xJ+K8ufZn086AAAAADh61Xw9k/ynXWgl2d/8L2V/90/Hu7EWm7Ecm9GMpbiZPQto/9Vf+vt2vflwp76aLoMdf/tfY8WR9RgRE/HePiPPZTXOdlosxnfj+3ExZuN6rMdy/DAasRlLMRvV9CSiEUnUqu2nF7Uizr3jvdazdb0/tnN9269kkVTjVixnsV2KG5VoPzbJziEd85Wu0f5Qiegb8b00O8m3ciPm6GbXz+tX+XOZXOv5Efs4GrXszCc7GZlLc59n44XhuR/zOukfaT5KnWdQZ3ZHSTf7Rypy/oNxcn6qvZpOX37em/PDNuajtP5MLEQpv/oiXurN+Z0vPjjd2/jL//jL9dultZXbtzYuHuEpPYnZgypMFoX+TNS7MvHyXlff6a3dXrJMNNNMbI+eicn+HdOjtjxalTwb2VQ04mz5nazUiFe7LsF34mYsxZWYi/m4GnPxjViIeucKS5ezPXkt11d7c5Lda6XB+a06JPjzX+qq9IsDKh+vNC8vdOW1e6arZcfyPdd+GXNdV9/p4XPf2L8F0vH/Py+nY/y08xvnadCTiXxuLqJ7cXgmftNKXzeaayvrtxt3RhzvQr5Ob9v3e+fm344edf9v98OQXi/pjFvOtrKcVIvrJT32Yifa3nxV8k9c2u1KA8fOdo7VYiaW43v73qmV/D3cYE/tYy93H/vn7sxZyd/fFMd63uXEO9HM3oX0OXCqBuCYnXrtVKX6qPq36ofVn1VvV9+cfmPq6tQXKjH51/IfJ35f+l3pm8lr8WH8OGZOOlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWbNy9t9JoNpfWO4WY7t/zpIXKvmMNL0TpwDo7z43WYdQiho+V5IXK4Z778RSKn+bhdFjt76f4hqUn7fnjiBhSp/LEwSdjX2NjF9I8HEqHrVY7qdme1sQYzctFq73rlGNjOlYaSXmPO25q9y6I2kqj+e9WT/NqdN0ywDPu8ubqncsbd+99dXm18fbS20trC1evXL1S//r81y7fWm4uzbVfTzpK4Chs3L03scfugW+6BQAAAAAAAAAAAJ4e+b/+3/zM/5mhfECdyvrG3iOfO+5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6nFt+Kye1IYn7u0ly6/XCn3kyXorxbsxwRpYhIfhSRfBpxLdpL1Lq6S/Yb5/VHn3xw4cFH9d2+ykX90rB2o9nOl5iNiIl8fbCpPboZ7O9GV3/bnym8pHOGacLOF4mDk/bfAAAA//9l//QV") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 4m57.088970086s ago: executing program 0 (id=16373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m56.735508115s ago: executing program 0 (id=16375): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, 0x0, 0x4) 4m55.904120844s ago: executing program 33 (id=16375): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, 0x0, 0x4) 3.622216035s ago: executing program 4 (id=19587): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0xffff0000, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{0xfe}, {0x0, 0x5}}}], 0x70) 3.605472558s ago: executing program 1 (id=19588): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', 0xd) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), &(0x7f0000000100)="746e5aaf5f035db155dd", 0xa, 0x0) 3.390012354s ago: executing program 1 (id=19590): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) 3.382261235s ago: executing program 4 (id=19591): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000200)={0x20, 0x0, 0x2b, {0x2b, 0x31, "f70ba381038de583bb48fd16a2cb4fdca0560fb30d54f3e5c5b1d43ee44fbf6fc93f0808251f2e9c4c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.225970828s ago: executing program 3 (id=19598): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r0, 0x540a, 0x3) 2.111003997s ago: executing program 3 (id=19599): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', 0xd) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), &(0x7f0000000100)="746e5aaf5f035db155dd", 0xa, 0x0) 2.056140556s ago: executing program 5 (id=19601): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000100)={[{@ikeep}, {@inode32}]}, 0x1, 0x9825, &(0x7f000001c900)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f0000000000)=@ng={0x4, 0x15}, 0x2, 0x2) 1.968868801s ago: executing program 3 (id=19602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000200081dc000000000300000002000000000000031f0000000500160004000000080017004e2230bf72"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1.771219414s ago: executing program 3 (id=19603): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4) 1.745412878s ago: executing program 1 (id=19604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000faffffff000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fd0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.587489655s ago: executing program 3 (id=19605): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x4) fcntl$setstatus(r0, 0x4, 0x4a000) 1.586829075s ago: executing program 1 (id=19606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.410955465s ago: executing program 1 (id=19607): socket(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 1.341347856s ago: executing program 3 (id=19608): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.261153839s ago: executing program 1 (id=19609): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000880)=ANY=[@ANYBLOB="636f6d6d69743d30303030303030303030303030303030303030302c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c61636c2c6c6f63616c666c6f636b732c00092c028a3e5e3d356729aea7ca3fad2d183adad8e398462724e676c20f8d5ba5e324d43b4cb2740b9ed587e8e1eb9abed9bd1956375ca4a2e7e8b12a206ab1c1873177d9589d17e2c24c1e4a723b69720830e8e0b63e0c9f8821b1ea6faf51f5e1b81113cc5f437d61b627977f194fe72b02c4178f1c4913ba476fd820cf2e88f51ada7c10e8f40b2d21840ccacbaf197d71f86cc2a7ffdf45cfee1fba03d0005b892e718935374e7e068e5ea9a7fd1c16a7ee5cb028ca153c5efb24de48d5a1ab5ac938b648c9f683142b93ec377285d20155596b9be69a2c05a6d247fc04aedb7946a49b53caa904"], 0x1, 0x4422, &(0x7f0000004480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.229797165s ago: executing program 4 (id=19610): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x1000000}) 892.005291ms ago: executing program 4 (id=19611): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="2cc7411e8600000001ffffffffffffff"}}) 825.022172ms ago: executing program 5 (id=19612): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r0, 0x540a, 0x3) 660.932439ms ago: executing program 5 (id=19613): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 460.240673ms ago: executing program 5 (id=19614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x0, 0x0, 0x0) 423.626379ms ago: executing program 4 (id=19615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 257.367357ms ago: executing program 5 (id=19616): r0 = socket$kcm(0x10, 0x2, 0x4) setreuid(0xffffffffffffffff, 0xee01) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 110.439631ms ago: executing program 5 (id=19617): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 0s ago: executing program 4 (id=19618): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") unlink(&(0x7f0000000040)='./file1\x00') kernel console output (not intermixed with test programs): services, check your ipvs configuration [ 1480.519224][ T4936] cramfs: ffffffff973fe368(26)->ffff88805831d000(4096) [ 1480.536150][ T4938] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1480.546415][ T4936] cramfs: Error -3 while decompressing! [ 1480.573452][ T4936] cramfs: ffffffff973fe382(26)->ffff8880761b8000(4096) [ 1480.604242][T30046] udevd[30046]: incorrect cramfs checksum on /dev/loop1 [ 1480.616231][ T4936] cramfs: Error -3 while decompressing! [ 1480.631358][ T4936] cramfs: ffffffff973fe39c(16)->ffff8880755ba000(4096) [ 1480.653238][ T4936] cramfs: Error -5 while decompressing! [ 1480.665269][ T4936] cramfs: ffffffff973fe368(26)->ffff88805831d000(4096) [ 1480.822444][ T2133] usb 5-1: USB disconnect, device number 61 [ 1481.007072][ T4968] loop1: detected capacity change from 0 to 64 [ 1481.058368][ T4968] syz.1.18245: attempt to access beyond end of device [ 1481.058368][ T4968] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1481.120153][ T4968] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 1481.393220][ T1417] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1481.596162][ T1417] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1481.622783][ T1417] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1481.646613][ T1417] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1481.678082][ T1417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.703326][ T1417] usb 4-1: Product: syz [ 1481.707845][ T1417] usb 4-1: Manufacturer: syz [ 1481.712574][ T1417] usb 4-1: SerialNumber: syz [ 1481.763593][ T1417] usb 4-1: config 0 descriptor?? [ 1481.785944][ T1417] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1481.820056][ T5007] openvswitch: netlink: Actions may not be safe on all matching packets [ 1482.124337][ T5011] loop1: detected capacity change from 0 to 4096 [ 1482.172635][ T5011] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1482.226277][ T1417] gspca_sunplus: reg_r err -71 [ 1482.243914][ T1417] sunplus: probe of 4-1:0.0 failed with error -71 [ 1482.273827][ T1417] usb 4-1: USB disconnect, device number 100 [ 1482.293700][ T5011] ntfs3: loop1: Failed to initialize $Secure (-22). [ 1482.448817][ T3561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1482.555831][ T5042] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1482.843262][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18269'. [ 1483.038642][ T5067] netlink: 'syz.1.18272': attribute type 1 has an invalid length. [ 1483.197495][T18493] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1483.425117][T18493] usb 5-1: Using ep0 maxpacket: 16 [ 1483.455453][T18493] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1483.475465][T18493] usb 5-1: config 254 has no interface number 0 [ 1483.489288][ T5095] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1483.504875][T18493] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1483.535400][T18493] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1483.543983][ T2133] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1483.566061][T18493] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1483.577832][T18493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 1483.593031][T18493] usb 5-1: Product: syz [ 1483.600103][T18493] usb 5-1: Manufacturer: syz [ 1483.623271][T18493] usb 5-1: SerialNumber: syz [ 1483.640296][ T5059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1483.760392][ T2133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.793050][ T2133] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 1483.808938][ T2133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1483.837609][ T2133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 1483.894877][ T2133] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1483.908066][T18493] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 1483.931844][T18493] usbtest: probe of 5-1:254.235 failed with error -71 [ 1483.955228][ T2133] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1483.979847][T18493] usb 5-1: USB disconnect, device number 62 [ 1483.993119][ T2133] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1484.014503][ T2133] usb 2-1: Manufacturer: syz [ 1484.034788][ T2133] usb 2-1: config 0 descriptor?? [ 1484.161810][ T5128] netlink: 'syz.3.18283': attribute type 3 has an invalid length. [ 1484.326473][T18493] usb 2-1: USB disconnect, device number 106 [ 1484.978442][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.102055][ T5180] xt_TCPMSS: Only works on TCP SYN packets [ 1485.111279][ T5181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18298'. [ 1485.617217][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.720296][ T5212] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1485.783046][ T2133] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1485.993148][ T2133] usb 5-1: Using ep0 maxpacket: 16 [ 1486.023197][ T2133] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1486.032319][ T2133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.075103][ T2133] usb 5-1: Product: syz [ 1486.079350][ T2133] usb 5-1: Manufacturer: syz [ 1486.109319][ T2133] usb 5-1: SerialNumber: syz [ 1486.151004][ T2133] usb 5-1: config 0 descriptor?? [ 1486.197233][ T5234] loop1: detected capacity change from 0 to 512 [ 1486.275242][ T5234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1486.304634][ T5234] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.18315: invalid block [ 1486.373239][ T5234] EXT4-fs (loop1): Remounting filesystem read-only [ 1486.380155][ T5234] EXT4-fs (loop1): 2 truncates cleaned up [ 1486.389071][ T5234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.495953][ T2133] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 1486.521163][ T2133] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1486.585505][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.718618][ T5260] loop3: detected capacity change from 0 to 256 [ 1486.733239][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18322'. [ 1486.745263][ T2133] usb 5-1: USB disconnect, device number 63 [ 1486.775302][ T5263] tmpfs: Group quota block hardlimit too large. [ 1486.818992][ T5260] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1486.840205][ T5260] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1486.859339][ T5260] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1487.071539][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18324'. [ 1487.201386][ T5285] loop3: detected capacity change from 0 to 164 [ 1487.279537][ T5285] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1487.299408][ T5289] loop1: detected capacity change from 0 to 2048 [ 1487.370182][ T5289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1487.917708][ T5321] loop1: detected capacity change from 0 to 256 [ 1487.952683][ T5321] exfat: Deprecated parameter 'namecase' [ 1488.030546][ T5321] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1488.173596][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.273884][T18493] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1488.467368][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18342'. [ 1488.479317][T18493] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.498172][ T5347] netlink: 10 bytes leftover after parsing attributes in process `syz.1.18342'. [ 1488.506493][T18493] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1488.553403][T18493] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1488.583518][T18493] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1488.621740][T18493] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1488.653276][T18493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.690181][T18493] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1488.729085][T18493] usb 4-1: invalid MIDI out EP 0 [ 1488.847885][T29921] udevd[29921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1488.896862][T18493] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1488.971609][ T2133] usb 4-1: USB disconnect, device number 101 [ 1489.270038][ T5337] loop4: detected capacity change from 0 to 32768 [ 1489.311251][ T5337] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.18340 (5337) [ 1489.396501][ T5337] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1489.423172][ T5337] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1489.432478][ T5337] BTRFS info (device loop4): using free space tree [ 1489.610046][ T5357] loop1: detected capacity change from 0 to 32768 [ 1489.621142][ T5337] BTRFS info (device loop4): enabling ssd optimizations [ 1489.633279][ T5357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.18345 (5357) [ 1489.673283][ T5337] BTRFS info (device loop4): auto enabling async discard [ 1489.698463][ T5357] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1489.745187][ T5357] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1489.793516][ T5357] BTRFS info (device loop1): using free space tree [ 1489.903284][ T5337] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 1490.104009][ T5357] BTRFS info (device loop1): enabling ssd optimizations [ 1490.134717][ T5357] BTRFS info (device loop1): auto enabling async discard [ 1490.163520][T31605] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1490.506415][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1490.703508][ T5465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18360'. [ 1490.712638][ T5465] netlink: 172 bytes leftover after parsing attributes in process `syz.3.18360'. [ 1490.947609][ T5474] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1491.384313][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1491.648434][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18367'. [ 1491.683291][ T5494] netlink: 'syz.1.18367': attribute type 1 has an invalid length. [ 1491.707429][ T5494] netlink: 'syz.1.18367': attribute type 2 has an invalid length. [ 1491.753174][ T5494] netlink: 120 bytes leftover after parsing attributes in process `syz.1.18367'. [ 1492.303185][ T5525] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18375'. [ 1492.593640][ T5539] xt_l2tp: v2 doesn't support IP mode [ 1492.819240][ T5553] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18390'. [ 1492.859265][ T5553] 6eth1_to_bond: renamed from gre0 (while UP) [ 1492.915447][ T5553] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 1493.275022][ T5574] netlink: 'syz.3.18389': attribute type 21 has an invalid length. [ 1493.302550][ T5574] IPv6: NLM_F_CREATE should be specified when creating new route [ 1493.945058][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.325071][ T5636] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18410'. [ 1494.425191][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18409'. [ 1494.457493][ T5636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.494894][ T5636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.537314][ T5636] bond0 (unregistering): Released all slaves [ 1494.942497][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18417'. [ 1494.977943][ T5664] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1495.222626][ T28] audit: type=1326 audit(2000000816.466:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.5.18421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1495.313344][ T28] audit: type=1326 audit(2000000816.466:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.5.18421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1495.336085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.383013][ T28] audit: type=1326 audit(2000000816.496:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.5.18421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1495.405898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.494990][ T28] audit: type=1326 audit(2000000816.496:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.5.18421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1495.541136][ T28] audit: type=1326 audit(2000000816.496:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.5.18421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1496.498884][ T5727] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 1496.512291][ T5725] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18436'. [ 1496.538280][ T5727] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1497.135784][ T1095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1497.520985][ T5776] tmpfs: Bad value for 'mpol' [ 1497.536652][ T5765] loop3: detected capacity change from 0 to 4096 [ 1497.555818][ T5765] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1497.643841][ T5765] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1497.680276][ T5765] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1497.733824][ T5765] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1497.789281][ T5765] ntfs: volume version 3.1. [ 1497.836180][ T5765] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1497.837690][ T5791] loop1: detected capacity change from 0 to 1024 [ 1497.969389][T29921] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1497.979600][ T5791] hfsplus: Filesystem is marked locked, mounting read-only. [ 1497.992215][ T5791] hfsplus: invalid catalog entry type in lookup [ 1498.447502][ T5821] netlink: 'syz.1.18460': attribute type 1 has an invalid length. [ 1498.930111][ T5847] loop3: detected capacity change from 0 to 4096 [ 1498.951412][ T5847] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1498.987559][ T1416] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1499.023553][T15815] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1499.055551][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1499.194101][ T1416] usb 6-1: Using ep0 maxpacket: 8 [ 1499.202635][ T1416] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1499.221088][ T1416] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.224614][ T5859] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1499.242239][ T1416] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.254820][ T5859] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 1499.265650][T15815] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1499.276262][T15815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.282901][ T1416] usb 6-1: New USB device found, idVendor=0402, idProduct=c010, bcdDevice= 0.40 [ 1499.294250][ T1416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.302358][ T1416] usb 6-1: Product: syz [ 1499.304266][T15815] usb 5-1: config 0 descriptor?? [ 1499.333167][ T1416] usb 6-1: Manufacturer: syz [ 1499.351070][ T1416] usb 6-1: SerialNumber: syz [ 1499.382048][ T5857] loop1: detected capacity change from 0 to 4096 [ 1499.428996][ T5857] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1499.496036][ T5857] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1499.577661][T15815] snd-usb-hiface: probe of 5-1:0.0 failed with error -22 [ 1499.651092][ T1416] usb 6-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1499.720661][ T1416] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1499.766250][ T1416] usb 6-1: USB disconnect, device number 12 [ 1499.824765][T30046] udevd[30046]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1499.847964][ T1418] usb 5-1: USB disconnect, device number 64 [ 1500.659083][ T5929] netlink: 'syz.4.18485': attribute type 2 has an invalid length. [ 1500.683036][ T5929] netlink: 'syz.4.18485': attribute type 1 has an invalid length. [ 1501.437078][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18497'. [ 1501.499329][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18498'. [ 1502.067526][ T5952] loop4: detected capacity change from 0 to 32768 [ 1502.159826][ T5952] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1502.255266][ T3477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1502.594244][ T5952] XFS (loop4): Ending clean mount [ 1502.859917][T31605] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1504.175821][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.251387][ T6075] netlink: 'syz.3.18529': attribute type 29 has an invalid length. [ 1504.903096][T18493] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1504.911180][T15815] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1505.110090][T15815] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1505.119282][T18493] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1505.131099][T18493] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1505.141250][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.150607][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.161853][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.171120][T18493] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1505.180764][T18493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1505.189276][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.198471][T18493] usb 5-1: SerialNumber: syz [ 1505.205237][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.225896][T18493] usb 5-1: bad CDC descriptors [ 1505.231419][T18493] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1505.238549][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.247735][T18493] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1505.256024][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.265456][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.277847][T18493] scsi host1: usb-storage 5-1:1.0 [ 1505.285828][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.310158][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.327842][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.340683][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.352115][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.364052][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.385320][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.396885][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.413169][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.454586][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.462828][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.480694][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.497179][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.534912][T15815] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1505.584330][T15815] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1505.601389][T15815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1505.633668][T15815] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1505.643481][T15815] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1505.652157][T15815] usb 2-1: Product: syz [ 1505.663028][T15815] usb 2-1: Manufacturer: syz [ 1505.667696][T15815] usb 2-1: SerialNumber: syz [ 1505.688049][T15815] usb 2-1: config 0 descriptor?? [ 1505.738099][T15815] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1505.958696][ T1417] usb 2-1: USB disconnect, device number 107 [ 1505.972392][ T1417] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1506.078774][T15815] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1506.285633][T15815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.298728][T15815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.308893][T15815] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1506.319370][T15815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.332119][T15815] usb 4-1: config 0 descriptor?? [ 1506.569681][ T6156] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1506.975629][ T6177] Bluetooth: MGMT ver 1.22 [ 1506.992358][T15815] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71 [ 1507.025027][T15815] usb 4-1: USB disconnect, device number 102 [ 1507.171301][ T6193] loop1: detected capacity change from 0 to 128 [ 1507.208101][ T6193] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1507.300661][ T6193] ext4 filesystem being mounted at /4603/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.431980][T18493] usb 5-1: USB disconnect, device number 65 [ 1507.537399][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1507.759803][ T6213] loop4: detected capacity change from 0 to 4096 [ 1507.785952][ T6213] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1507.826828][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.943937][ T6213] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1507.985958][ T6236] loop1: detected capacity change from 0 to 1024 [ 1508.033907][ T1095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1508.106521][ T6236] hfsplus: bad catalog entry type [ 1508.123990][T31605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.210931][ T3477] hfsplus: b-tree write err: -5, ino 25 [ 1508.246884][ T3477] hfsplus: b-tree write err: -5, ino 4 [ 1508.303002][ T3477] hfsplus: b-tree write err: -5, ino 2 [ 1508.465152][ T6256] loop4: detected capacity change from 0 to 256 [ 1508.472534][ T6256] exfat: Deprecated parameter 'namecase' [ 1508.527097][ T6256] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 1508.673442][ T28] audit: type=1400 audit(2000000829.916:1114): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.5.18568': attribute type 4 has an invalid length. [ 1508.908080][T18493] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1509.108574][T18493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1509.130240][T18493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.173271][T18493] usb 4-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 1509.192079][T18493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.203391][T18493] usb 4-1: config 0 descriptor?? [ 1509.304440][T18129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1509.399358][ T6300] loop1: detected capacity change from 0 to 1024 [ 1509.619715][ T6308] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1509.646812][T18493] wacom 0003:056A:0217.0003: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 1509.681920][ T1077] hfsplus: b-tree write err: -5, ino 25 [ 1509.703902][ T1077] hfsplus: b-tree write err: -5, ino 4 [ 1509.706442][ T6310] loop4: detected capacity change from 0 to 4096 [ 1509.709522][ T1077] hfsplus: b-tree write err: -5, ino 2 [ 1509.786960][ T6318] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1509.930505][T18493] usb 4-1: USB disconnect, device number 103 [ 1511.074789][ T1418] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1511.192896][ T6396] loop3: detected capacity change from 0 to 2048 [ 1511.238134][ T6401] netlink: 'syz.1.18598': attribute type 1 has an invalid length. [ 1511.254245][ T6396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1511.264739][ T1418] usb 5-1: config 0 has no interfaces? [ 1511.276170][ T1418] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1511.279483][ T6396] ext4 filesystem being mounted at /3550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.303233][ T1418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.338422][ T6396] EXT4-fs (loop3): resizing filesystem from 256 to 0 blocks [ 1511.346148][ T6396] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 1511.353897][ T1418] usb 5-1: Product: syz [ 1511.376962][T15815] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1511.377151][ T1418] usb 5-1: Manufacturer: syz [ 1511.423235][ T1418] usb 5-1: SerialNumber: syz [ 1511.430923][T15833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.469083][ T1418] r8152-cfgselector 5-1: config 0 descriptor?? [ 1511.594577][T15815] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1511.601852][ T6414] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18602'. [ 1511.615493][ T6414] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18602'. [ 1511.616385][T15815] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1511.645485][T15815] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.656090][T15815] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1511.670905][T15815] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1511.677990][T15815] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1511.687816][T15815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.735036][ T1418] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1511.739240][T15815] usb 6-1: config 0 descriptor?? [ 1511.996411][ T1418] usb 5-1: USB disconnect, device number 66 [ 1512.142709][ T6432] loop3: detected capacity change from 0 to 4096 [ 1512.191327][ T6442] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1512.200896][T15815] hid-alps 0003:044E:120C.0004: unbalanced delimiter at end of report description [ 1512.243061][T15815] hid-alps 0003:044E:120C.0004: parse failed [ 1512.264816][T15815] hid-alps: probe of 0003:044E:120C.0004 failed with error -22 [ 1512.444798][ T6452] loop1: detected capacity change from 0 to 256 [ 1512.519663][T15815] usb 6-1: USB disconnect, device number 13 [ 1512.953891][ T6481] netlink: 'syz.1.18625': attribute type 9 has an invalid length. [ 1512.972032][ T6481] netlink: 911 bytes leftover after parsing attributes in process `syz.1.18625'. [ 1513.324172][ T6504] loop3: detected capacity change from 0 to 256 [ 1513.503291][ T1417] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1513.724464][ T1417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.741066][ T1417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.751344][ T1417] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1513.761186][ T1417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.772394][ T1417] usb 6-1: config 0 descriptor?? [ 1513.790324][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1513.803308][T18493] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1514.017053][T18493] usb 4-1: config 0 has no interfaces? [ 1514.036580][T18493] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1514.059371][T18493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.067757][T18493] usb 4-1: Product: syz [ 1514.072007][T18493] usb 4-1: Manufacturer: syz [ 1514.076771][T18493] usb 4-1: SerialNumber: syz [ 1514.092096][T18493] r8152-cfgselector 4-1: config 0 descriptor?? [ 1514.313237][ T1418] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1514.345307][T18493] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1514.414349][T18127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1514.422097][ T1417] hid-led: probe of 0003:27B8:01ED.0005 failed with error -71 [ 1514.441516][T16461] usb 4-1: config 0 descriptor?? [ 1514.452593][ T1417] usb 6-1: USB disconnect, device number 14 [ 1514.509146][ T1418] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1514.518623][ T1418] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1514.533406][ T1418] usb 5-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 1514.553194][ T1418] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1514.581593][T16461] usb 4-1: can't set config #0, error -71 [ 1514.582054][ T1416] usb 4-1: USB disconnect, device number 104 [ 1514.607395][ T1418] usb 5-1: New USB device found, idVendor=04b8, idProduct=1222, bcdDevice= 0.40 [ 1514.625082][ T1418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.640862][ T1418] usb 5-1: Product: syz [ 1514.645429][ T1418] usb 5-1: Manufacturer: syz [ 1514.650065][ T1418] usb 5-1: SerialNumber: syz [ 1514.891423][ T1418] usb 5-1: USB disconnect, device number 67 [ 1515.149677][ T6581] netlink: 'syz.5.18637': attribute type 1 has an invalid length. [ 1515.444438][ T6593] xt_CONNSECMARK: invalid mode: 129 [ 1515.963317][ T1416] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1516.164069][ T1416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.185663][ T1416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.206099][ T1416] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1516.226798][ T1416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.264514][ T1416] usb 2-1: config 0 descriptor?? [ 1516.340420][ T6643] xt_CONNSECMARK: invalid mode: 129 [ 1516.419432][ T6648] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.18657'. [ 1516.433893][ T6648] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1516.681343][ T6658] loop3: detected capacity change from 0 to 256 [ 1516.735081][ T6658] FAT-fs (loop3): Directory bread(block 64) failed [ 1516.741759][ T6658] FAT-fs (loop3): Directory bread(block 65) failed [ 1516.791706][ T6658] FAT-fs (loop3): Directory bread(block 66) failed [ 1516.820294][ T6658] FAT-fs (loop3): Directory bread(block 67) failed [ 1516.852227][ T6658] FAT-fs (loop3): Directory bread(block 68) failed [ 1516.879672][ T6658] FAT-fs (loop3): Directory bread(block 69) failed [ 1516.889691][ T6658] FAT-fs (loop3): Directory bread(block 70) failed [ 1516.897448][ T6658] FAT-fs (loop3): Directory bread(block 71) failed [ 1516.904972][ T6658] FAT-fs (loop3): Directory bread(block 72) failed [ 1516.912166][ T6658] FAT-fs (loop3): Directory bread(block 73) failed [ 1516.958678][ T1416] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 1517.001134][ T1416] usb 2-1: USB disconnect, device number 108 [ 1517.307191][ T6691] loop3: detected capacity change from 0 to 256 [ 1517.352371][ T6691] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 1517.523322][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18667'. [ 1518.476690][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18680'. [ 1519.090784][ T6772] loop1: detected capacity change from 0 to 4096 [ 1519.115010][ T6772] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1519.161051][ T6772] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1519.190353][ T6772] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1519.535011][ T3477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1520.093604][ T6822] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.18706'. [ 1520.143111][ T6822] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1520.174659][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1520.433324][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18712'. [ 1521.415872][ T6892] loop4: detected capacity change from 0 to 64 [ 1521.533818][ T6892] syz.4.18728: attempt to access beyond end of device [ 1521.533818][ T6892] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1521.576203][ T6892] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 1522.050430][T18493] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1522.242378][ T6934] loop1: detected capacity change from 0 to 128 [ 1522.263224][T18493] usb 6-1: Using ep0 maxpacket: 16 [ 1522.273697][ T6934] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1522.319106][T18493] usb 6-1: config 7 has an invalid interface number: 152 but max is 0 [ 1522.328477][ T6934] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1522.329313][T18493] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 1522.365520][ T6940] openvswitch: netlink: Actions may not be safe on all matching packets [ 1522.375259][T18493] usb 6-1: config 7 has no interface number 0 [ 1522.392002][T18493] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 1522.424485][T18493] usb 6-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.468812][T18493] usb 6-1: config 7 interface 152 has no altsetting 0 [ 1522.497611][T18493] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 1522.507231][T18493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.547840][T18493] usb 6-1: Product: syz [ 1522.552190][T18493] usb 6-1: Manufacturer: syz [ 1522.583113][T18493] usb 6-1: SerialNumber: syz [ 1522.841068][T18493] usbtest 6-1:7.152: couldn't get endpoints, -71 [ 1522.873216][T18493] usbtest: probe of 6-1:7.152 failed with error -71 [ 1522.923661][T18493] usb 6-1: USB disconnect, device number 15 [ 1522.973650][ T6967] loop3: detected capacity change from 0 to 64 [ 1523.142068][ T6979] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1523.905667][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18765'. [ 1524.088252][ T7025] 9pnet_fd: p9_fd_create_unix (7025): problem connecting socket: ./file0: -111 [ 1524.124335][ T7028] netlink: 'syz.4.18768': attribute type 41 has an invalid length. [ 1524.132510][ T7028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18768'. [ 1524.204332][ T7034] netlink: 'syz.1.18770': attribute type 3 has an invalid length. [ 1524.217898][ T7032] loop3: detected capacity change from 0 to 2048 [ 1524.249129][ T7032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1524.379780][ T7039] netlink: 'syz.5.18771': attribute type 1 has an invalid length. [ 1524.656826][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.678065][ T7051] loop3: detected capacity change from 0 to 2048 [ 1524.722118][ T7051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1524.785939][T15833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.393185][ T7092] netlink: 'syz.5.18784': attribute type 3 has an invalid length. [ 1525.827348][ T7118] loop1: detected capacity change from 0 to 2048 [ 1525.851657][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1525.883331][T15815] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1525.933665][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1525.954625][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.106410][T15815] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1526.116475][T15815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1526.133697][T15815] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1526.161295][T15815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.210396][T15815] usb 5-1: Product: syz [ 1526.217306][T15815] usb 5-1: Manufacturer: syz [ 1526.232400][T15815] usb 5-1: SerialNumber: syz [ 1526.258196][T15815] usb 5-1: config 0 descriptor?? [ 1526.274205][ T7138] loop1: detected capacity change from 0 to 64 [ 1526.296552][T15815] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1526.570643][ T7153] Cannot find set identified by id 0 to match [ 1526.716165][T15815] gspca_sunplus: reg_r err -71 [ 1526.734345][T15815] sunplus: probe of 5-1:0.0 failed with error -71 [ 1526.764584][T15815] usb 5-1: USB disconnect, device number 68 [ 1526.982770][ T7175] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1527.293433][T15815] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1527.522468][T15815] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1527.531887][T30089] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1527.563262][T15815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.582713][T15815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1527.593893][T15815] usb 4-1: config 1 has no interface number 0 [ 1527.600055][T15815] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1527.623253][T15815] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1527.666264][T15815] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.682425][T15815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.701269][T15815] usb 4-1: Product: syz [ 1527.707434][T15815] usb 4-1: Manufacturer: syz [ 1527.715600][T15815] usb 4-1: SerialNumber: syz [ 1527.783650][T30089] usb 6-1: Using ep0 maxpacket: 16 [ 1527.791302][T30089] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1527.827973][T30089] usb 6-1: config 254 has no interface number 0 [ 1527.841317][T30089] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1527.859215][T30089] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1527.885000][T30089] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1527.902977][T30089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 1527.911217][T30089] usb 6-1: Product: syz [ 1527.917045][T30089] usb 6-1: Manufacturer: syz [ 1527.930608][T30089] usb 6-1: SerialNumber: syz [ 1527.940261][ T7191] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1527.998810][ T7228] loop4: detected capacity change from 0 to 512 [ 1528.018662][ T7228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1528.082499][ T7228] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.18817: invalid indirect mapped block 4294967295 (level 1) [ 1528.135512][ T7228] EXT4-fs (loop4): Remounting filesystem read-only [ 1528.142483][ T7228] EXT4-fs (loop4): 2 truncates cleaned up [ 1528.150866][ T7228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.215260][T30089] usbtest 6-1:254.235: couldn't get endpoints, -71 [ 1528.228261][T30089] usbtest: probe of 6-1:254.235 failed with error -71 [ 1528.231017][ T1416] usb 4-1: USB disconnect, device number 105 [ 1528.243375][T30089] usb 6-1: USB disconnect, device number 16 [ 1528.335225][T31605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.788383][ T7275] loop4: detected capacity change from 0 to 256 [ 1528.844792][ T7275] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1528.894295][ T7275] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1528.936334][ T7275] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1530.225168][ T7299] loop4: detected capacity change from 0 to 32768 [ 1530.236231][ T7299] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.18834 (7299) [ 1530.265390][ T7299] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1530.303446][ T7299] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1530.321403][ T7299] BTRFS info (device loop4): using free space tree [ 1530.328261][T30089] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1530.363460][ T1416] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1530.533374][T30089] usb 4-1: Using ep0 maxpacket: 16 [ 1530.553573][ T7299] BTRFS info (device loop4): enabling ssd optimizations [ 1530.554807][ T1416] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.560687][ T7299] BTRFS info (device loop4): auto enabling async discard [ 1530.562263][T30089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.591363][ T1416] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1530.613011][ T1416] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1530.632875][ T1416] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1530.653398][T30089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.683073][T30089] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1530.696251][ T1416] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1530.702991][T30089] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1530.733271][T30089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.736129][ T1416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.778895][T30089] usb 4-1: config 0 descriptor?? [ 1530.804722][ T1416] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1530.833953][ T1416] usb 2-1: invalid MIDI out EP 0 [ 1530.856505][T31605] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1531.054711][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1531.080695][ T1416] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1531.081326][ T7389] netlink: 72 bytes leftover after parsing attributes in process `syz.5.18852'. [ 1531.133221][ T7389] netlink: 172 bytes leftover after parsing attributes in process `syz.5.18852'. [ 1531.170399][ T1416] usb 2-1: USB disconnect, device number 109 [ 1531.294670][T30089] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 1531.323506][T30089] microsoft 0003:045E:07DA.0007: item 0 4 0 9 parsing failed [ 1531.332532][T30089] microsoft 0003:045E:07DA.0007: parse failed [ 1531.387958][T30089] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 1531.626507][ T1418] usb 4-1: USB disconnect, device number 106 [ 1531.738664][ T7428] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1532.241909][ T7449] netlink: 72 bytes leftover after parsing attributes in process `syz.4.18861'. [ 1532.286240][ T7449] netlink: 172 bytes leftover after parsing attributes in process `syz.4.18861'. [ 1532.780881][ T7470] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1533.043129][ T7485] netlink: 1964 bytes leftover after parsing attributes in process `syz.3.18873'. [ 1533.466946][ T7505] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18880'. [ 1534.188008][ T7493] loop1: detected capacity change from 0 to 32768 [ 1534.249790][ T7493] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1534.351875][ T7493] XFS (loop1): Ending clean mount [ 1534.548879][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1535.187809][ T7571] loop3: detected capacity change from 0 to 4096 [ 1535.317669][ T7571] ntfs: (device loop3): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 1535.337779][ T7571] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1535.418559][ T7571] ntfs: volume version 3.1. [ 1535.448864][ T7571] ntfs: (device loop3): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1535.468641][ T7571] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1535.481920][ T7571] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1535.502421][ T7571] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1535.512843][ T7571] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 1535.523544][ T7571] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1536.173710][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1536.683893][ T7629] netlink: 'syz.5.18922': attribute type 21 has an invalid length. [ 1536.694947][ T7629] IPv6: NLM_F_CREATE should be specified when creating new route [ 1536.705178][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18922'. [ 1536.993557][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.5.18916'. [ 1537.104177][ T7647] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18919'. [ 1537.141173][ T7639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.195945][ T7639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.237268][ T7639] bond0 (unregistering): Released all slaves [ 1537.289138][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18917'. [ 1537.298613][ T7646] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1537.344050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1538.369229][ T7700] loop1: detected capacity change from 0 to 512 [ 1538.444228][ T7700] EXT4-fs: Ignoring removed bh option [ 1538.449789][ T7700] EXT4-fs: inline encryption not supported [ 1538.476881][ T7700] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1538.527291][ T7700] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1538.565881][ T7700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.18934: bg 0: block 248: padding at end of block bitmap is not set [ 1538.623598][ T7700] Quota error (device loop1): write_blk: dquota write failed [ 1538.649695][ T7700] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1538.680942][ T7700] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.18934: Failed to acquire dquot type 1 [ 1538.682064][ T7685] loop3: detected capacity change from 0 to 32768 [ 1538.725714][ T7700] EXT4-fs (loop1): 1 truncate cleaned up [ 1538.745905][ T7700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1538.790161][ T7685] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1538.918175][ T7685] XFS (loop3): Ending clean mount [ 1538.946584][T30089] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 1538.989416][T30089] XFS (loop3): Unmount and run xfs_repair [ 1539.002882][T30089] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1539.009901][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1539.027028][T18127] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 1539.044920][T30089] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1539.082069][T30089] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1539.093241][T30089] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 1539.102257][T30089] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 1539.121120][T30089] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1539.141879][T30089] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1539.180687][T30089] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 1539.204132][T30089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1539.224626][ T7685] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 1539.247456][ T7685] XFS (loop3): Failed to initialize disk quotas. [ 1539.270255][ T7729] netlink: 'syz.4.18941': attribute type 1 has an invalid length. [ 1539.471302][T15833] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1539.980890][ T7754] loop4: detected capacity change from 0 to 4096 [ 1540.048337][ T7754] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1540.061265][ T7762] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 1540.124315][ T7762] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1540.135052][ T7754] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1540.384949][ T7772] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1540.451004][ T7776] loop4: detected capacity change from 0 to 512 [ 1540.476479][ T7776] EXT4-fs: Ignoring removed bh option [ 1540.496624][ T7776] EXT4-fs: inline encryption not supported [ 1540.554843][ T7776] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1540.663785][ T7776] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1540.715323][ T7776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.18949: bg 0: block 248: padding at end of block bitmap is not set [ 1540.817026][ T7776] __quota_error: 1 callbacks suppressed [ 1540.817048][ T7776] Quota error (device loop4): write_blk: dquota write failed [ 1540.881088][ T7776] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1540.897951][ T7776] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.18949: Failed to acquire dquot type 1 [ 1540.931608][ T7776] EXT4-fs (loop4): 1 truncate cleaned up [ 1540.939628][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1541.035082][ T7774] loop1: detected capacity change from 0 to 32768 [ 1541.127361][ T7774] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1541.163199][T30089] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1541.183462][T31605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1541.194180][T16461] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 1541.212147][T16461] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 1541.234052][ T7774] XFS (loop1): Ending clean mount [ 1541.267039][ T7774] XFS (loop1): Quotacheck needed: Please wait. [ 1541.401973][ T7774] XFS (loop1): Quotacheck: Done. [ 1541.413313][T30089] usb 4-1: Using ep0 maxpacket: 8 [ 1541.425321][ T788] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1541.453534][T30089] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1541.473030][T30089] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.503236][T30089] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1541.525684][T30089] usb 4-1: New USB device found, idVendor=0402, idProduct=c010, bcdDevice= 0.40 [ 1541.555724][T30089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.579011][T30089] usb 4-1: Product: syz [ 1541.580320][ T5772] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1541.589134][T30089] usb 4-1: Manufacturer: syz [ 1541.597382][T30089] usb 4-1: SerialNumber: syz [ 1541.625642][ T788] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1541.642279][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.660991][ T788] usb 6-1: config 0 descriptor?? [ 1541.900164][ T788] snd-usb-hiface: probe of 6-1:0.0 failed with error -22 [ 1541.910211][T30089] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1541.934022][T18129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.968751][T30089] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1541.995096][T30089] usb 4-1: USB disconnect, device number 107 [ 1542.020531][T29921] udevd[29921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1542.127789][ T788] usb 6-1: USB disconnect, device number 17 [ 1542.161796][ T7849] netlink: 'syz.1.18961': attribute type 2 has an invalid length. [ 1542.171983][ T7849] netlink: 'syz.1.18961': attribute type 1 has an invalid length. [ 1542.244655][ T7853] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18963'. [ 1542.298066][ T7853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.317865][ T7853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.342828][ T7853] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1542.370881][ T7853] bond0 (unregistering): Released all slaves [ 1543.609164][ T7907] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18975'. [ 1543.724068][ T7907] bond0 (unregistering): Released all slaves [ 1543.853558][ T1095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1544.707682][ T28] audit: type=1326 audit(2000000865.956:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.18994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1451d9c819 code=0x7ffc0000 [ 1544.781187][ T28] audit: type=1326 audit(2000000865.956:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.18994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1451d9c819 code=0x7ffc0000 [ 1544.889102][ T28] audit: type=1326 audit(2000000865.996:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.18994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f1451d9c819 code=0x7ffc0000 [ 1544.950994][ T7971] openvswitch: netlink: Message has 245 unknown bytes. [ 1544.975035][ T7971] openvswitch: netlink: Actions may not be safe on all matching packets [ 1544.981019][ T28] audit: type=1326 audit(2000000865.996:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.18994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1451d9c819 code=0x7ffc0000 [ 1545.006899][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.343116][ T1416] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1545.533369][ T1416] usb 2-1: Using ep0 maxpacket: 8 [ 1545.551218][ T1416] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1545.578830][ T1416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.606843][ T1416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.629994][ T1416] usb 2-1: New USB device found, idVendor=0402, idProduct=c010, bcdDevice= 0.40 [ 1545.642989][ T1416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.650417][T30089] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1545.652260][ T1416] usb 2-1: Product: syz [ 1545.663831][ T1416] usb 2-1: Manufacturer: syz [ 1545.668478][ T1416] usb 2-1: SerialNumber: syz [ 1545.822180][ T8019] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19010'. [ 1545.889814][T30089] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.903442][ T1416] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1545.924344][T30089] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1545.957977][T30089] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1545.981526][T30089] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1546.012815][ T1416] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1546.013191][T30089] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1546.050900][ T1416] usb 2-1: USB disconnect, device number 110 [ 1546.073019][T30089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.121860][T29921] udevd[29921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1546.205360][T30089] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1546.229455][T30089] usb 6-1: invalid MIDI out EP 0 [ 1546.418884][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.421969][T30089] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1546.490236][T30089] usb 6-1: USB disconnect, device number 18 [ 1546.701994][ T8086] loop4: detected capacity change from 0 to 256 [ 1546.734144][ T1416] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1546.783725][ T8090] netlink: 'syz.1.19019': attribute type 12 has an invalid length. [ 1546.792098][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19019'. [ 1546.801088][ T8086] FAT-fs (loop4): Directory bread(block 64) failed [ 1546.816208][ T8086] FAT-fs (loop4): Directory bread(block 65) failed [ 1546.823868][ T8086] FAT-fs (loop4): Directory bread(block 66) failed [ 1546.830624][ T8086] FAT-fs (loop4): Directory bread(block 67) failed [ 1546.837481][ T8086] FAT-fs (loop4): Directory bread(block 68) failed [ 1546.845664][ T8086] FAT-fs (loop4): Directory bread(block 69) failed [ 1546.852513][ T8086] FAT-fs (loop4): Directory bread(block 70) failed [ 1546.859482][ T8086] FAT-fs (loop4): Directory bread(block 71) failed [ 1546.876466][ T8086] FAT-fs (loop4): Directory bread(block 72) failed [ 1546.883857][ T8086] FAT-fs (loop4): Directory bread(block 73) failed [ 1546.947313][ T1416] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1546.967371][ T1416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.985182][ T1416] usb 4-1: config 0 descriptor?? [ 1547.273968][ T1416] snd-usb-hiface: probe of 4-1:0.0 failed with error -22 [ 1547.471097][ T1416] usb 4-1: USB disconnect, device number 108 [ 1547.694044][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1547.818597][ T8125] loop1: detected capacity change from 0 to 4096 [ 1547.852729][ T8125] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1548.186204][ T8141] loop4: detected capacity change from 0 to 64 [ 1548.572156][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19035'. [ 1548.868763][ T8164] loop3: detected capacity change from 0 to 4096 [ 1548.891417][ T8164] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1548.975168][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.984408][ T8164] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1549.259203][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19040'. [ 1550.181513][ T8226] loop1: detected capacity change from 0 to 128 [ 1550.204460][ T8226] UDF-fs: bad mount option "Í[CX§.ìÓìú-½ö¾ðF(?£ê-Ôƃ+ ° þ[è“cnùÿ€7Í [ 1550.204460][ T8226]  +ÑÉ ‚Ít+K3¼Ê‚˜ñ¶&sFðç" or missing value [ 1550.347350][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19054'. [ 1550.422999][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19054'. [ 1550.585569][T30089] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1550.679165][ T8253] netlink: 'syz.1.19062': attribute type 29 has an invalid length. [ 1550.798683][T30089] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1550.837585][T30089] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1550.859718][T30089] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1550.872350][T30089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1550.890588][T30089] usb 6-1: SerialNumber: syz [ 1550.948113][T30089] usb 6-1: bad CDC descriptors [ 1550.955876][T30089] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1550.990444][T30089] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1551.009696][T30089] scsi host1: usb-storage 6-1:1.0 [ 1551.323041][T30089] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1551.563523][T30089] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1551.580056][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.592986][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.622960][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.630888][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.643425][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.672995][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.681406][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.702995][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.715003][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.733969][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.750877][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.773011][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.781154][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.796049][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.822957][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.837208][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.853002][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.873005][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.881034][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.890101][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.912989][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.920908][T30089] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.943489][T30089] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.954533][T30089] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1551.975208][T30089] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1551.984463][T30089] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1552.000665][T30089] usb 4-1: Product: syz [ 1552.005516][T30089] usb 4-1: Manufacturer: syz [ 1552.010168][T30089] usb 4-1: SerialNumber: syz [ 1552.019218][T30089] usb 4-1: config 0 descriptor?? [ 1552.041411][T30089] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1552.292511][ T1416] usb 4-1: USB disconnect, device number 109 [ 1552.301373][T30089] usb 6-1: USB disconnect, device number 19 [ 1552.306519][ T1416] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1553.454455][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1554.073056][ T1416] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1554.126605][T30089] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1554.314870][T30089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1554.323444][ T1416] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1554.335083][T30089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1554.348704][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.354790][T30089] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1554.370287][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.393062][T30089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1554.417137][T30089] usb 2-1: SerialNumber: syz [ 1554.422247][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.438671][T30089] usb 2-1: bad CDC descriptors [ 1554.443947][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.457129][T30089] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1554.483188][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.527946][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.528951][T30089] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1554.559481][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.579183][T30089] scsi host1: usb-storage 2-1:1.0 [ 1554.593641][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.673100][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.703724][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.727057][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.739627][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1554.754712][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.772624][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.782286][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.793576][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.804699][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.822390][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.833748][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.844349][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.863094][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.874637][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.883228][ T1416] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1554.892191][ T1416] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1554.912705][ T1416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1554.922577][ T1416] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1554.943760][ T1416] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1554.952345][ T1416] usb 5-1: Product: syz [ 1554.973341][ T1416] usb 5-1: Manufacturer: syz [ 1554.978035][ T1416] usb 5-1: SerialNumber: syz [ 1554.995834][ T1416] usb 5-1: config 0 descriptor?? [ 1555.019976][ T1416] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1555.309606][T30089] usb 5-1: USB disconnect, device number 69 [ 1555.326897][T30089] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1556.061862][ T8449] vivid-007: ================= START STATUS ================= [ 1556.094296][ T8449] vivid-007: Enable Output Cropping: true [ 1556.101186][ T8449] vivid-007: Enable Output Composing: true [ 1556.121100][ T8449] vivid-007: Enable Output Scaler: true [ 1556.143606][ T8449] vivid-007: Tx RGB Quantization Range: Automatic [ 1556.150137][ T8449] vivid-007: Transmit Mode: HDMI [ 1556.176191][ T8449] vivid-007: Display Present: true inactive [ 1556.182207][ T8449] vivid-007: Hotplug Present: 0x00000001 [ 1556.198502][ T8449] vivid-007: RxSense Present: 0x00000001 [ 1556.221303][ T8449] vivid-007: EDID Present: 0x00000001 [ 1556.244073][ T8449] vivid-007: ================== END STATUS ================== [ 1556.683407][ T1416] usb 2-1: USB disconnect, device number 111 [ 1556.745434][ T8471] loop4: detected capacity change from 0 to 4096 [ 1556.772436][ T8471] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1557.054430][ T28] audit: type=1800 audit(2000000878.276:1119): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19110" name="file3" dev="loop4" ino=31 res=0 errno=0 [ 1557.253610][ T8500] vivid-007: ================= START STATUS ================= [ 1557.302600][ T8500] vivid-007: Enable Output Cropping: true [ 1557.332159][ T8502] vlan2: entered promiscuous mode [ 1557.335293][ T8500] vivid-007: Enable Output Composing: true [ 1557.360785][ T8502] syz_tun: entered promiscuous mode [ 1557.367937][ T8500] vivid-007: Enable Output Scaler: true [ 1557.377319][ T8502] vlan2: entered allmulticast mode [ 1557.385209][ T8500] vivid-007: Tx RGB Quantization Range: Automatic [ 1557.403358][ T8502] syz_tun: entered allmulticast mode [ 1557.413343][ T8500] vivid-007: Transmit Mode: HDMI [ 1557.435941][ T8500] vivid-007: Display Present: true inactive [ 1557.480195][ T8500] vivid-007: Hotplug Present: 0x00000001 [ 1557.492821][ T8500] vivid-007: RxSense Present: 0x00000001 [ 1557.502695][ T8500] vivid-007: EDID Present: 0x00000001 [ 1557.508378][ T8500] vivid-007: ================== END STATUS ================== [ 1558.337716][ T8534] loop3: detected capacity change from 0 to 4096 [ 1558.343773][ T8545] vivid-007: ================= START STATUS ================= [ 1558.392644][ T8545] vivid-007: Enable Output Cropping: true [ 1558.400744][ T8534] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1558.442789][ T8545] vivid-007: Enable Output Composing: true [ 1558.473120][ T8545] vivid-007: Enable Output Scaler: true [ 1558.493330][ T8545] vivid-007: Tx RGB Quantization Range: Automatic [ 1558.510162][ T8545] vivid-007: Transmit Mode: HDMI [ 1558.552683][ T8545] vivid-007: Display Present: true inactive [ 1558.584105][ T8545] vivid-007: Hotplug Present: 0x00000001 [ 1558.589858][ T8545] vivid-007: RxSense Present: 0x00000001 [ 1558.609607][ T8545] vivid-007: EDID Present: 0x00000001 [ 1558.616470][ T8545] vivid-007: ================== END STATUS ================== [ 1558.646622][ T28] audit: type=1800 audit(2000000879.896:1120): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19125" name="file3" dev="loop3" ino=31 res=0 errno=0 [ 1559.213783][ T1095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1559.417883][ T8589] vivid-007: ================= START STATUS ================= [ 1559.434335][ T8589] vivid-007: Enable Output Cropping: true [ 1559.440163][ T8589] vivid-007: Enable Output Composing: true [ 1559.457013][ T8589] vivid-007: Enable Output Scaler: true [ 1559.467160][ T8589] vivid-007: Tx RGB Quantization Range: Automatic [ 1559.477306][ T8589] vivid-007: Transmit Mode: HDMI [ 1559.482327][ T8589] vivid-007: Display Present: true inactive [ 1559.507448][ T8589] vivid-007: Hotplug Present: 0x00000001 [ 1559.517650][ T8589] vivid-007: RxSense Present: 0x00000001 [ 1559.546940][ T8589] vivid-007: EDID Present: 0x00000001 [ 1559.552544][ T8589] vivid-007: ================== END STATUS ================== [ 1559.864257][ T1095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1560.134205][T30089] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1560.145867][ T8624] loop1: detected capacity change from 0 to 512 [ 1560.186850][ T8624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1560.226063][ T8624] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1560.269357][ T8624] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.19160: bad orphan inode 4 [ 1560.296381][ T8624] EXT4-fs (loop1): Remounting filesystem read-only [ 1560.333206][ T8624] EXT4-fs (loop1): 1 orphan inode deleted [ 1560.349660][T30089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.373184][T30089] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.383541][ T8624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.403062][T30089] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1560.432111][T30089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.482708][T30089] usb 4-1: config 0 descriptor?? [ 1560.653913][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.965719][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.000460][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.034876][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.072273][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.093061][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.109341][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.129356][T30089] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 1561.193451][T30089] usb 4-1: USB disconnect, device number 110 [ 1561.295863][ T8666] loop1: detected capacity change from 0 to 4096 [ 1561.309003][ T8684] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1561.477876][ T8689] loop4: detected capacity change from 0 to 64 [ 1562.259085][ T8727] loop3: detected capacity change from 0 to 512 [ 1562.276099][ T8727] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1562.295822][ T8727] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1562.313540][ T8727] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.19177: bad orphan inode 4 [ 1562.345749][ T8727] EXT4-fs (loop3): Remounting filesystem read-only [ 1562.353092][ T8727] EXT4-fs (loop3): 1 orphan inode deleted [ 1562.379029][ T8727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.536633][ T8729] loop4: detected capacity change from 0 to 4096 [ 1562.591672][T15833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.104101][ T1418] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1563.315056][ T1418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.346831][ T1418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.387654][ T1418] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1563.411432][ T1418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.436754][ T1418] usb 2-1: config 0 descriptor?? [ 1563.896956][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1563.920685][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1563.929795][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1563.938504][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1563.958752][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1563.993140][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1564.001394][ T1418] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 1564.142661][T30089] usb 2-1: USB disconnect, device number 112 [ 1564.338507][ T8824] loop3: detected capacity change from 0 to 64 [ 1564.563163][ T1418] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1564.753032][ T1418] usb 6-1: Using ep0 maxpacket: 8 [ 1564.775199][ T1418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1564.803113][ T1418] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1564.812391][ T1418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.863893][ T1418] usb 6-1: config 0 descriptor?? [ 1564.938999][ T8849] loop3: detected capacity change from 0 to 512 [ 1564.979415][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1564.991288][T18129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1565.006579][ T8849] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1565.036025][ T8849] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1565.063482][ T8849] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1565.085009][ T8849] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1565.126319][ T8849] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1565.169042][ T8849] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19207: corrupted inode contents [ 1565.190131][ T8849] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #12: comm syz.3.19207: mark_inode_dirty error [ 1565.219977][ T8849] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19207: corrupted inode contents [ 1565.237055][ T8849] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.19207: mark_inode_dirty error [ 1565.249618][ T8849] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19207: corrupted inode contents [ 1565.293325][ T8849] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1565.324449][ T1418] kye 0003:0458:0138.000A: unknown main item tag 0x3 [ 1565.331251][ T1418] kye 0003:0458:0138.000A: unknown global tag 0xe [ 1565.343246][ T8849] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.19207: corrupted inode contents [ 1565.358497][ T1418] kye 0003:0458:0138.000A: item 0 1 1 14 parsing failed [ 1565.368807][ T8849] EXT4-fs error (device loop3): ext4_truncate:4301: inode #12: comm syz.3.19207: mark_inode_dirty error [ 1565.381105][ T1418] kye 0003:0458:0138.000A: parse failed [ 1565.393458][ T1418] kye: probe of 0003:0458:0138.000A failed with error -22 [ 1565.401202][ T8849] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1565.424316][ T8849] EXT4-fs (loop3): 1 truncate cleaned up [ 1565.434658][ T8849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1565.604866][ T1418] usb 6-1: USB disconnect, device number 20 [ 1565.665196][T15833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.859437][ T8894] loop3: detected capacity change from 0 to 2048 [ 1565.891877][ T8894] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1565.974508][ T8902] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1565.988605][T30046] udevd[30046]: incorrect nilfs2 checksum on /dev/loop3 [ 1566.118106][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19220'. [ 1566.131904][ T8909] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19220'. [ 1566.426018][ T8923] loop4: detected capacity change from 0 to 512 [ 1566.450058][ T8923] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1566.486261][ T8923] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1566.575634][ T8923] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1566.673735][ T8923] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1566.706591][ T8923] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1566.766284][ T8923] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.19224: corrupted inode contents [ 1566.815889][ T8923] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #12: comm syz.4.19224: mark_inode_dirty error [ 1566.856216][ T8923] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.19224: corrupted inode contents [ 1566.892445][ T8923] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.19224: mark_inode_dirty error [ 1566.925158][ T8923] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.19224: corrupted inode contents [ 1566.962451][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19231'. [ 1566.987286][ T8923] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1566.991630][ T8947] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19231'. [ 1567.009082][ T8923] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.19224: corrupted inode contents [ 1567.054507][ T8923] EXT4-fs error (device loop4): ext4_truncate:4301: inode #12: comm syz.4.19224: mark_inode_dirty error [ 1567.073968][ T8923] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1567.084299][ T8923] EXT4-fs (loop4): 1 truncate cleaned up [ 1567.091611][ T8923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1567.256807][T31605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.313317][ T1418] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1567.533535][ T1418] usb 2-1: Using ep0 maxpacket: 8 [ 1567.557198][ T1418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1567.587245][ T1418] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1567.606905][ T1418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.635133][ T1418] usb 2-1: config 0 descriptor?? [ 1567.873079][ T1416] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1568.013316][T30089] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1568.057224][ T1416] usb 4-1: Using ep0 maxpacket: 8 [ 1568.069369][ T1416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.085398][ T1418] kye 0003:0458:0138.000B: unknown main item tag 0x3 [ 1568.085879][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19243'. [ 1568.093855][ T1416] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1568.121872][ T1418] kye 0003:0458:0138.000B: unknown global tag 0xe [ 1568.129724][ T1418] kye 0003:0458:0138.000B: item 0 1 1 14 parsing failed [ 1568.145904][ T1418] kye 0003:0458:0138.000B: parse failed [ 1568.149125][ T8999] netlink: 64 bytes leftover after parsing attributes in process `syz.4.19243'. [ 1568.151666][ T1416] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1568.170699][ T1418] kye: probe of 0003:0458:0138.000B failed with error -22 [ 1568.181051][ T1416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.195728][ T1416] usb 4-1: config 0 descriptor?? [ 1568.230009][T30089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.251218][T30089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.272597][T30089] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1568.284710][T30089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.304838][T30089] usb 6-1: config 0 descriptor?? [ 1568.341972][ T1418] usb 2-1: USB disconnect, device number 113 [ 1568.624608][ T1416] cypress 0003:04B4:DE61.000C: invalid report_size 60495 [ 1568.631731][ T1416] cypress 0003:04B4:DE61.000C: item 0 2 1 7 parsing failed [ 1568.640127][ T1416] cypress 0003:04B4:DE61.000C: parse failed [ 1568.646439][ T1416] cypress: probe of 0003:04B4:DE61.000C failed with error -22 [ 1568.735146][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.747896][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.756147][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.764914][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.773157][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.781427][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.790096][T30089] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 1568.857997][ T1416] usb 4-1: USB disconnect, device number 111 [ 1568.990293][T30089] usb 6-1: USB disconnect, device number 21 [ 1569.601638][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19254'. [ 1569.797956][ T9081] loop3: detected capacity change from 0 to 16 [ 1569.815914][ T9081] erofs: (device loop3): mounted with root inode @ nid 36. [ 1570.115169][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1570.619058][ T9115] netlink: 19 bytes leftover after parsing attributes in process `syz.4.19268'. [ 1570.733637][T18127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1571.033488][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19283'. [ 1571.196608][ T9138] loop1: detected capacity change from 0 to 4096 [ 1571.309846][ T9138] ntfs: volume version 3.1. [ 1572.107660][ T9181] netlink: 19 bytes leftover after parsing attributes in process `syz.3.19288'. [ 1572.581637][ T9199] loop3: detected capacity change from 0 to 4096 [ 1572.766430][ T9199] ntfs: volume version 3.1. [ 1573.313980][ T9226] netlink: 19 bytes leftover after parsing attributes in process `syz.5.19300'. [ 1573.441280][ T9228] loop4: detected capacity change from 0 to 4096 [ 1573.642402][ T9228] ntfs: volume version 3.1. [ 1573.760618][ T28] audit: type=1326 audit(2000000895.006:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1573.815785][ T28] audit: type=1326 audit(2000000895.036:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1573.878663][ T28] audit: type=1326 audit(2000000895.036:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e639c819 code=0x7ffc0000 [ 1574.983810][ T9275] loop1: detected capacity change from 0 to 512 [ 1575.004374][ T9275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1575.079979][ T9275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.143277][ T9275] ext4 filesystem being mounted at /4791/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1575.406599][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.532084][ T9292] loop3: detected capacity change from 0 to 4096 [ 1575.778773][ T9292] ntfs: volume version 3.1. [ 1575.854117][T18129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.503884][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.862958][ T9354] loop1: detected capacity change from 0 to 4096 [ 1576.918958][ T9354] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1576.956286][ T9354] ntfs3: loop1: Failed to load $Extend (-22). [ 1576.977467][ T9354] ntfs3: loop1: Failed to initialize $Extend. [ 1577.111351][ T28] audit: type=1800 audit(2000000898.356:1124): pid=9354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19338" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1578.127419][ T9393] loop4: detected capacity change from 0 to 512 [ 1578.134171][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19357'. [ 1578.157233][ T9393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1578.212123][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19357'. [ 1578.229761][ T9393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.246862][ T9393] ext4 filesystem being mounted at /2562/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1578.584263][T31605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.701516][ T9422] loop3: detected capacity change from 0 to 512 [ 1578.812144][ T9422] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1578.833353][ T9422] UDF-fs: Scanning with blocksize 512 failed [ 1578.867944][ T9422] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1578.895784][ T9422] UDF-fs: Scanning with blocksize 1024 failed [ 1578.912506][ T9422] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1578.931881][ T9422] UDF-fs: Scanning with blocksize 2048 failed [ 1578.947898][ T9432] loop4: detected capacity change from 0 to 256 [ 1579.003116][ T9422] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1579.061160][ T9432] FAT-fs (loop4): Directory bread(block 64) failed [ 1579.066957][ T9422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1579.078063][ T9432] FAT-fs (loop4): Directory bread(block 65) failed [ 1579.108971][ T9440] loop1: detected capacity change from 0 to 1024 [ 1579.124433][ T9440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1579.133871][ T9432] FAT-fs (loop4): Directory bread(block 66) failed [ 1579.163132][ T9432] FAT-fs (loop4): Directory bread(block 67) failed [ 1579.169948][ T9432] FAT-fs (loop4): Directory bread(block 68) failed [ 1579.205765][ T9432] FAT-fs (loop4): Directory bread(block 69) failed [ 1579.212536][ T9432] FAT-fs (loop4): Directory bread(block 70) failed [ 1579.224706][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.302963][ T9432] FAT-fs (loop4): Directory bread(block 71) failed [ 1579.335624][ T9432] FAT-fs (loop4): Directory bread(block 72) failed [ 1579.423172][ T9432] FAT-fs (loop4): Directory bread(block 73) failed [ 1579.640421][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.959833][ T9486] loop1: detected capacity change from 0 to 32768 [ 1580.972174][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19376'. [ 1580.982311][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1581.025439][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19376'. [ 1581.058250][ T9486] ialloc: diAlloc returned -5! [ 1581.081825][ T9486] ialloc: diAlloc returned -5! [ 1581.408385][ T9520] sock: sock_timestamping_bind_phc: sock not bind to device [ 1581.819529][ T9536] loop4: detected capacity change from 0 to 512 [ 1581.846841][ T9536] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1581.880070][ T9536] UDF-fs: Scanning with blocksize 512 failed [ 1581.919541][ T9536] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1581.937725][ T9536] UDF-fs: Scanning with blocksize 1024 failed [ 1581.948425][ T9536] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1581.961438][ T9536] UDF-fs: Scanning with blocksize 2048 failed [ 1581.971370][ T9536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1581.990197][ T9536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1582.181179][ T9545] netlink: 134700 bytes leftover after parsing attributes in process `syz.3.19387'. [ 1582.197926][ T9545] openvswitch: netlink: Message has 5 unknown bytes. [ 1582.255055][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1582.570439][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19392'. [ 1582.613410][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19392'. [ 1582.757478][ T9573] loop1: detected capacity change from 0 to 512 [ 1582.785698][ T9573] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1582.812306][ T9573] UDF-fs: Scanning with blocksize 512 failed [ 1582.870332][ T9573] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1582.889880][ T9577] netlink: 134700 bytes leftover after parsing attributes in process `syz.5.19397'. [ 1582.913396][ T9573] UDF-fs: Scanning with blocksize 1024 failed [ 1582.935692][ T9573] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1582.953539][ T9577] openvswitch: netlink: Message has 5 unknown bytes. [ 1582.966956][ T9573] UDF-fs: Scanning with blocksize 2048 failed [ 1582.993678][ T9573] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1583.025963][ T9573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1583.402011][ T9601] loop1: detected capacity change from 0 to 256 [ 1583.623789][ T9601] FAT-fs (loop1): Directory bread(block 64) failed [ 1583.630535][ T9601] FAT-fs (loop1): Directory bread(block 65) failed [ 1583.642207][ T9601] FAT-fs (loop1): Directory bread(block 66) failed [ 1583.656239][ T9601] FAT-fs (loop1): Directory bread(block 67) failed [ 1583.674270][ T9601] FAT-fs (loop1): Directory bread(block 68) failed [ 1583.710857][ T9601] FAT-fs (loop1): Directory bread(block 69) failed [ 1583.726647][ T9601] FAT-fs (loop1): Directory bread(block 70) failed [ 1583.749417][ T9601] FAT-fs (loop1): Directory bread(block 71) failed [ 1583.773561][ T9601] FAT-fs (loop1): Directory bread(block 72) failed [ 1583.781506][ T9616] netlink: 134700 bytes leftover after parsing attributes in process `syz.4.19407'. [ 1583.811955][ T9601] FAT-fs (loop1): Directory bread(block 73) failed [ 1583.813089][ T9616] openvswitch: netlink: Message has 5 unknown bytes. [ 1584.929332][ T9649] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1584.943079][ T9649] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1584.959904][ T9649] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1584.993558][ T9649] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1585.013849][ T9649] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1585.034431][ T9649] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1585.056127][ T9649] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1585.066671][ T9626] loop4: detected capacity change from 0 to 32768 [ 1585.080212][ T9649] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1585.088675][ T9659] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1585.098488][ T9649] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1585.111801][ T9659] [U] J"—E:ÀÆ" [ 1585.130248][ T9626] JBD2: Ignoring recovery information on journal [ 1585.137195][ T9649] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1585.177109][ T9649] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1585.215541][ T9649] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1585.246280][ T9649] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1585.253324][ T9649] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1585.261147][ T9649] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1585.269360][ T9649] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1585.276263][ T9649] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1585.286530][ T9649] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1585.289926][ T9626] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1585.294879][ T9649] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1585.310762][ T9649] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 1585.318506][ T9649] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1585.343565][ T9649] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1585.361249][ T9649] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 1585.774739][T31605] ocfs2: Unmounting device (7,4) on (node local) [ 1586.451845][ T9696] Bluetooth: MGMT ver 1.22 [ 1586.734017][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.821253][ T9715] loop3: detected capacity change from 0 to 4096 [ 1586.874114][ T9720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1586.910660][ T9719] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1586.929316][ T9719] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1586.953111][ T9719] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1586.982292][ T9719] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1587.007562][ T9719] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1587.037053][ T9715] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 1587.043054][ T9719] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1587.088905][ T9719] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1587.116496][ T9719] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1587.143273][ T9719] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1587.146694][ T9715] Remounting filesystem read-only [ 1587.162257][ T9719] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1587.172102][ T9719] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1587.186437][ T9719] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1587.194282][ T9719] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1587.237900][ T9719] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1587.273591][ T9719] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1587.281447][ T9719] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1587.295103][ T9731] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1587.315272][T15833] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1587.316662][ T9719] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1587.342181][ T9719] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1587.343256][ T9731] [U] J"—E:ÀÆ" [ 1587.350142][ T9719] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1587.360196][ T9719] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 1587.372085][T15833] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 1587.385872][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1587.403311][ T9719] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1587.413084][T15833] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 1587.414628][ T9719] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1587.420510][T15833] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1587.450037][T15833] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 1587.461136][T15833] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1587.468731][T15833] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 1587.471206][ T9719] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 1587.476528][T15833] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1587.500138][T15833] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 1587.509181][T15833] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 1587.561324][T15833] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 1587.596516][T15833] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1587.613062][T15833] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 1587.620436][T15833] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 1587.633030][T15833] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 1587.640396][T15833] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 1587.673201][T15833] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 1588.446104][ T9772] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1588.473143][ T9772] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1588.479750][ T9772] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.533390][ T9772] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1588.540554][ T9772] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.573076][ T9772] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1588.589971][ T9772] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1588.608030][ T9772] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.623060][ T9772] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1588.639968][ T9772] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1588.667546][ T9772] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1588.690905][ T9772] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1588.731654][ T9772] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1588.747885][ T9772] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1588.764267][ T9772] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1588.772676][ T9772] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1588.791469][ T9772] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1588.801887][ T9772] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1588.816150][ T9772] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1588.828799][ T9772] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 1588.839329][ T9772] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1588.867993][ T9772] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1588.886987][ T9772] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 1589.097612][ T9768] loop1: detected capacity change from 0 to 32768 [ 1589.256799][ T9770] loop3: detected capacity change from 0 to 32768 [ 1589.370597][ T9770] JBD2: Ignoring recovery information on journal [ 1589.577712][ T9770] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1589.967981][ T9811] netlink: 256 bytes leftover after parsing attributes in process `syz.4.19461'. [ 1590.009387][ T9811] netlink: 72 bytes leftover after parsing attributes in process `syz.4.19461'. [ 1590.105621][T15833] ocfs2: Unmounting device (7,3) on (node local) [ 1590.283353][ T788] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1590.478992][ T788] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1590.487348][ T788] usb 6-1: config 1 has no interface number 0 [ 1590.513073][ T788] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1590.557812][ T788] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.576707][ T788] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1590.586541][ T9809] loop1: detected capacity change from 0 to 32768 [ 1590.596469][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.616119][ T788] usb 6-1: Product: syz [ 1590.632343][ T788] usb 6-1: Manufacturer: syz [ 1590.643032][ T788] usb 6-1: SerialNumber: syz [ 1590.699638][ T9815] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1590.714162][ T9809] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1590.753658][ T788] usb 6-1: Expected 3 endpoints, found: 2 [ 1591.159581][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 1592.025892][ T9893] loop3: detected capacity change from 0 to 16 [ 1592.042398][ T9893] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1592.495779][ T3477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.586265][ T28] audit: type=1326 audit(2000000913.836:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.19488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75379c819 code=0x7ffc0000 [ 1592.634999][ T28] audit: type=1326 audit(2000000913.836:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.19488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75379c819 code=0x7ffc0000 [ 1592.637546][ T9925] overlayfs: missing 'lowerdir' [ 1592.658003][ T28] audit: type=1326 audit(2000000913.836:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.19488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa75379c819 code=0x7ffc0000 [ 1592.722268][ T28] audit: type=1326 audit(2000000913.836:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.19488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75379c819 code=0x7ffc0000 [ 1592.754689][ T28] audit: type=1326 audit(2000000913.836:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.3.19488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75379c819 code=0x7ffc0000 [ 1593.016537][ T1416] usb 6-1: USB disconnect, device number 22 [ 1593.891755][T30089] kernel write not supported for file /vcs (pid: 30089 comm: kworker/0:6) [ 1594.003142][ T1416] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1594.209042][ T1416] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1594.243395][ T1416] usb 2-1: config 1 has no interface number 0 [ 1594.249648][ T1416] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1594.293000][ T1416] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.333522][ T1416] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1594.363145][ T1416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.371281][ T1416] usb 2-1: Product: syz [ 1594.407232][ T1416] usb 2-1: Manufacturer: syz [ 1594.411920][ T1416] usb 2-1: SerialNumber: syz [ 1594.443545][ T9982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1594.464561][ T1416] usb 2-1: Expected 3 endpoints, found: 2 [ 1594.779355][T10029] loop3: detected capacity change from 0 to 512 [ 1594.796563][T10029] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1594.813283][T30089] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1594.838955][T10029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1594.881144][T10029] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.19517: Invalid block bitmap block 0 in block_group 0 [ 1594.904595][T10029] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1594.921921][T10029] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.19517: attempt to clear invalid blocks 983261 len 1 [ 1594.946871][T10029] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.19517: Invalid inode table block 0 in block_group 0 [ 1594.970665][T10029] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1595.001527][T10029] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1595.015083][T30089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1595.019246][T10029] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.19517: Invalid inode table block 0 in block_group 0 [ 1595.037218][T30089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1595.063523][T30089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1595.090855][T30089] usb 6-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 1595.099717][T10029] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1595.101354][T30089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.110320][T10029] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.19517: mark_inode_dirty error [ 1595.135673][T30089] usb 6-1: config 0 descriptor?? [ 1595.137414][T10019] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1595.170737][T10029] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1595.176505][T10029] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.19517: Invalid inode table block 0 in block_group 0 [ 1595.182809][T10029] EXT4-fs (loop3): 1 truncate cleaned up [ 1595.192336][T10029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1595.198700][T10038] 9pnet_fd: Insufficient options for proto=fd [ 1595.310128][T15833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.587817][T30089] logitech-hidpp-device 0003:046D:C081.000E: ignoring exceeding usage max [ 1595.600880][T30089] logitech-hidpp-device 0003:046D:C081.000E: item fetching failed at offset 24/40 [ 1595.614801][T30089] logitech-hidpp-device 0003:046D:C081.000E: hidpp_probe:parse failed [ 1595.623427][T30089] logitech-hidpp-device: probe of 0003:046D:C081.000E failed with error -22 [ 1595.703377][ T1416] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1595.792396][ T788] usb 6-1: USB disconnect, device number 23 [ 1595.883114][ T1416] usb 4-1: Using ep0 maxpacket: 16 [ 1595.892388][ T1416] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1595.901995][ T1416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.910286][ T1416] usb 4-1: Product: syz [ 1595.914623][ T1416] usb 4-1: Manufacturer: syz [ 1595.919276][ T1416] usb 4-1: SerialNumber: syz [ 1595.927085][ T1416] usb 4-1: config 0 descriptor?? [ 1595.935720][ T1416] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1596.137752][ T1416] usb 4-1: USB disconnect, device number 112 [ 1596.496562][ T28] audit: type=1326 audit(2000000917.746:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.19522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a93b9c819 code=0x7ffc0000 [ 1596.565238][ T28] audit: type=1326 audit(2000000917.766:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.19522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a93b9c819 code=0x7ffc0000 [ 1596.636030][ T28] audit: type=1326 audit(2000000917.766:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.19522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a93b9c819 code=0x7ffc0000 [ 1596.642533][T10087] overlayfs: missing 'lowerdir' [ 1596.693398][ T28] audit: type=1326 audit(2000000917.746:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.19522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a93b9c819 code=0x7ffc0000 [ 1596.716385][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.756879][T30089] usb 2-1: USB disconnect, device number 114 [ 1596.765880][ T28] audit: type=1326 audit(2000000917.776:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.4.19522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9a93b9c819 code=0x7ffc0000 [ 1596.987068][T18129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1597.139492][T10114] loop4: detected capacity change from 0 to 256 [ 1597.751233][T10147] netlink: 'syz.1.19538': attribute type 1 has an invalid length. [ 1597.873139][T30089] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1598.065614][T30089] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1598.095799][T30089] usb 5-1: config 1 has no interface number 0 [ 1598.102467][T30089] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1598.130065][T30089] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.144706][T10152] overlayfs: missing 'lowerdir' [ 1598.175053][T30089] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1598.205891][T30089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.224531][T30089] usb 5-1: Product: syz [ 1598.242543][T30089] usb 5-1: Manufacturer: syz [ 1598.253348][T30089] usb 5-1: SerialNumber: syz [ 1598.258623][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1598.296945][T10138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1598.339020][T30089] usb 5-1: Expected 3 endpoints, found: 2 [ 1598.554889][T10170] loop1: detected capacity change from 0 to 256 [ 1599.203841][T10194] xfrm0 speed is unknown, defaulting to 1000 [ 1599.588063][T10182] loop3: detected capacity change from 0 to 32768 [ 1599.646973][T10182] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1600.135841][T15833] ocfs2: Unmounting device (7,3) on (node local) [ 1600.560480][ T1416] usb 5-1: USB disconnect, device number 70 [ 1600.710962][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19564'. [ 1600.802762][T10239] xfrm0 speed is unknown, defaulting to 1000 [ 1601.623270][ T788] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1601.848612][ T788] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1601.872422][ T788] usb 5-1: config 0 has no interface number 0 [ 1601.893052][ T788] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.911963][ T788] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.922165][ T788] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1601.933257][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.944270][ T788] usb 5-1: config 0 descriptor?? [ 1602.390242][ T788] uclogic 0003:28BD:0905.000F: Interface probing failed: -22 [ 1602.414261][ T788] uclogic 0003:28BD:0905.000F: interface is invalid, ignoring [ 1602.674951][T18493] usb 5-1: USB disconnect, device number 71 [ 1602.741361][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1602.913191][T30089] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1603.125209][T30089] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1603.147078][T30089] usb 4-1: config 1 has no interface number 0 [ 1603.161560][T30089] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1603.179044][T30089] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.194494][T30089] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1603.213223][T30089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.231812][T30089] usb 4-1: Product: syz [ 1603.252074][T30089] usb 4-1: Manufacturer: syz [ 1603.262484][T30089] usb 4-1: SerialNumber: syz [ 1603.292806][T10326] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1603.335686][T30089] usb 4-1: Expected 3 endpoints, found: 2 [ 1603.516967][T10368] xfrm0 speed is unknown, defaulting to 1000 [ 1603.836592][T10359] loop1: detected capacity change from 0 to 32768 [ 1603.856331][T10359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.19575 (10359) [ 1603.933072][T10359] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1603.974635][T10359] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1603.993104][T10359] BTRFS info (device loop1): setting nodatasum [ 1603.999359][T10359] BTRFS info (device loop1): force zlib compression, level 3 [ 1604.016282][T10359] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1604.028249][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1604.045835][T10359] BTRFS info (device loop1): use lzo compression, level 0 [ 1604.055220][T10359] BTRFS info (device loop1): turning on flush-on-commit [ 1604.062289][T10359] BTRFS info (device loop1): enabling auto defrag [ 1604.074520][T10359] BTRFS info (device loop1): max_inline at 4096 [ 1604.093406][T10359] BTRFS info (device loop1): using free space tree [ 1604.254930][T10359] BTRFS info (device loop1): enabling ssd optimizations [ 1604.403570][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1605.672554][T15815] usb 4-1: USB disconnect, device number 113 [ 1605.843137][ T788] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1605.893152][ T1416] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1606.025294][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1606.036801][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1606.073024][ T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1606.093313][ T1416] usb 2-1: Using ep0 maxpacket: 16 [ 1606.099756][ T788] usb 5-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 1606.116064][ T1416] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1606.125941][ T1416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.143106][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.151302][ T1416] usb 2-1: Product: syz [ 1606.155964][ T1416] usb 2-1: Manufacturer: syz [ 1606.160622][ T1416] usb 2-1: SerialNumber: syz [ 1606.168103][ T788] usb 5-1: config 0 descriptor?? [ 1606.186576][ T1416] usb 2-1: config 0 descriptor?? [ 1606.192600][T10458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1606.218234][ T1416] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1606.478772][ T1416] usb 2-1: USB disconnect, device number 115 [ 1606.656651][ T788] logitech-hidpp-device 0003:046D:C081.0010: ignoring exceeding usage max [ 1606.674318][ T788] logitech-hidpp-device 0003:046D:C081.0010: item fetching failed at offset 24/40 [ 1606.684983][ T788] logitech-hidpp-device 0003:046D:C081.0010: hidpp_probe:parse failed [ 1606.694527][ T788] logitech-hidpp-device: probe of 0003:046D:C081.0010 failed with error -22 [ 1606.922509][ T788] usb 5-1: USB disconnect, device number 72 [ 1607.311650][T10543] loop3: detected capacity change from 0 to 1024 [ 1607.836616][T18493] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1607.858645][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.051281][T18493] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1608.070085][T18493] usb 4-1: config 0 has no interface number 0 [ 1608.086811][T18493] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.100531][T10573] loop4: detected capacity change from 0 to 2048 [ 1608.125297][T18493] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.162461][T18493] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1608.173307][T10573] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1608.199024][T18493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.224226][T10577] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1608.251121][T18493] usb 4-1: config 0 descriptor?? [ 1608.505825][T18127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1608.590336][T10563] loop1: detected capacity change from 0 to 32768 [ 1608.710224][T10563] JBD2: Ignoring recovery information on journal [ 1608.752616][T18493] uclogic 0003:28BD:0905.0011: Interface probing failed: -22 [ 1608.807028][T18493] uclogic 0003:28BD:0905.0011: interface is invalid, ignoring [ 1608.827795][T10563] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1608.887511][T10602] loop4: detected capacity change from 0 to 2048 [ 1608.992798][T10602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1609.016671][T18493] usb 4-1: USB disconnect, device number 114 [ 1609.072384][T10563] [ 1609.074819][T10563] ====================================================== [ 1609.081899][T10563] WARNING: possible circular locking dependency detected [ 1609.088950][T10563] syzkaller #0 Not tainted [ 1609.093397][T10563] ------------------------------------------------------ [ 1609.100440][T10563] syz.1.19609/10563 is trying to acquire lock: [ 1609.106632][T10563] ffff88805bd55118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba4/0x13e0 [ 1609.119324][T10563] [ 1609.119324][T10563] but task is already holding lock: [ 1609.126897][T10563] ffff888056ba06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 1609.136477][T10563] [ 1609.136477][T10563] which lock already depends on the new lock. [ 1609.136477][T10563] [ 1609.146899][T10563] [ 1609.146899][T10563] the existing dependency chain (in reverse order) is: [ 1609.156016][T10563] [ 1609.156016][T10563] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1609.163892][T10563] down_read+0x46/0x2e0 [ 1609.168718][T10563] ocfs2_init_acl+0x30a/0x770 [ 1609.174020][T10563] ocfs2_mknod+0x140f/0x2300 [ 1609.179179][T10563] ocfs2_mkdir+0x196/0x430 [ 1609.184214][T10563] vfs_mkdir+0x296/0x440 [ 1609.188990][T10563] do_mkdirat+0x1dc/0x450 [ 1609.193847][T10563] __x64_sys_mkdirat+0x89/0xa0 [ 1609.199139][T10563] do_syscall_64+0x55/0xa0 [ 1609.204105][T10563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.210539][T10563] [ 1609.210539][T10563] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1609.219087][T10563] down_read+0x46/0x2e0 [ 1609.223777][T10563] ocfs2_start_trans+0x3a8/0x6f0 [ 1609.229251][T10563] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 1609.235599][T10563] ocfs2_dismount_volume+0x1e5/0x8a0 [ 1609.241416][T10563] generic_shutdown_super+0x134/0x2b0 [ 1609.247348][T10563] kill_block_super+0x44/0x90 [ 1609.252578][T10563] deactivate_locked_super+0x97/0x100 [ 1609.258508][T10563] cleanup_mnt+0x43b/0x4d0 [ 1609.263646][T10563] task_work_run+0x1d4/0x260 [ 1609.268775][T10563] exit_to_user_mode_loop+0xe6/0x110 [ 1609.274695][T10563] exit_to_user_mode_prepare+0xee/0x180 [ 1609.280804][T10563] syscall_exit_to_user_mode+0x1a/0x50 [ 1609.286821][T10563] do_syscall_64+0x61/0xa0 [ 1609.291770][T10563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.298202][T10563] [ 1609.298202][T10563] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 1609.305702][T10563] ocfs2_start_trans+0x2a9/0x6f0 [ 1609.311171][T10563] ocfs2_remove_btree_range+0x849/0x15e0 [ 1609.317354][T10563] ocfs2_commit_truncate+0xb7f/0x2280 [ 1609.323271][T10563] ocfs2_evict_inode+0x1926/0x41e0 [ 1609.328918][T10563] evict+0x4ca/0x8d0 [ 1609.333346][T10563] do_unlinkat+0x38c/0x590 [ 1609.338303][T10563] __x64_sys_unlinkat+0xd5/0xe0 [ 1609.343688][T10563] do_syscall_64+0x55/0xa0 [ 1609.348631][T10563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.355054][T10563] [ 1609.355054][T10563] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 1609.365590][T10563] __lock_acquire+0x2df1/0x7d40 [ 1609.370975][T10563] lock_acquire+0x19e/0x420 [ 1609.376009][T10563] down_write+0x97/0x200 [ 1609.380873][T10563] ocfs2_xattr_set+0xba4/0x13e0 [ 1609.386271][T10563] ocfs2_set_acl+0x4e1/0x590 [ 1609.391395][T10563] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1609.396971][T10563] vfs_set_acl+0x803/0xa60 [ 1609.402006][T10563] do_set_acl+0xf5/0x180 [ 1609.406794][T10563] path_setxattr+0x41d/0x5d0 [ 1609.412006][T10563] __x64_sys_setxattr+0xbb/0xd0 [ 1609.417399][T10563] do_syscall_64+0x55/0xa0 [ 1609.422343][T10563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.428774][T10563] [ 1609.428774][T10563] other info that might help us debug this: [ 1609.428774][T10563] [ 1609.439007][T10563] Chain exists of: [ 1609.439007][T10563] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1609.439007][T10563] [ 1609.456322][T10563] Possible unsafe locking scenario: [ 1609.456322][T10563] [ 1609.463778][T10563] CPU0 CPU1 [ 1609.469161][T10563] ---- ---- [ 1609.474549][T10563] lock(&oi->ip_xattr_sem); [ 1609.479166][T10563] lock(&journal->j_trans_barrier); [ 1609.486989][T10563] lock(&oi->ip_xattr_sem); [ 1609.494238][T10563] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 1609.501552][T10563] [ 1609.501552][T10563] *** DEADLOCK *** [ 1609.501552][T10563] [ 1609.509721][T10563] 3 locks held by syz.1.19609/10563: [ 1609.515097][T10563] #0: ffff88802d9a8418 (sb_writers#37){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1609.524452][T10563] #1: ffff888056ba09d8 (&type->i_mutex_dir_key#26){++++}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 1609.534741][T10563] #2: ffff888056ba06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 1609.544788][T10563] [ 1609.544788][T10563] stack backtrace: [ 1609.550705][T10563] CPU: 1 PID: 10563 Comm: syz.1.19609 Not tainted syzkaller #0 [ 1609.558285][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1609.568373][T10563] Call Trace: [ 1609.571771][T10563] [ 1609.574730][T10563] dump_stack_lvl+0x18c/0x250 [ 1609.579441][T10563] ? load_image+0x420/0x420 [ 1609.584055][T10563] ? show_regs_print_info+0x20/0x20 [ 1609.589370][T10563] ? print_circular_bug+0x12b/0x1a0 [ 1609.594597][T10563] check_noncircular+0x2fc/0x400 [ 1609.599552][T10563] ? look_up_lock_class+0x75/0x140 [ 1609.604774][T10563] ? print_deadlock_bug+0x5d0/0x5d0 [ 1609.609984][T10563] ? lockdep_lock+0xf5/0x230 [ 1609.614643][T10563] ? _find_first_zero_bit+0xd3/0x100 [ 1609.619959][T10563] __lock_acquire+0x2df1/0x7d40 [ 1609.624861][T10563] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 1609.631040][T10563] ? _raw_spin_unlock+0x40/0x40 [ 1609.635929][T10563] ? verify_lock_unused+0x140/0x140 [ 1609.641154][T10563] ? stack_trace_save+0xaa/0x100 [ 1609.646127][T10563] ? stack_trace_snprint+0xf0/0xf0 [ 1609.651257][T10563] ? ocfs2_downconvert_lock+0x4d0/0x4d0 [ 1609.656835][T10563] lock_acquire+0x19e/0x420 [ 1609.661353][T10563] ? ocfs2_xattr_set+0xba4/0x13e0 [ 1609.666401][T10563] ? __might_sleep+0xe0/0xe0 [ 1609.671009][T10563] ? read_lock_is_recursive+0x20/0x20 [ 1609.676400][T10563] ? ocfs2_inode_lock_tracker+0x47c/0x700 [ 1609.682141][T10563] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 1609.687704][T10563] down_write+0x97/0x200 [ 1609.692054][T10563] ? ocfs2_xattr_set+0xba4/0x13e0 [ 1609.697094][T10563] ? down_read_killable+0x340/0x340 [ 1609.702345][T10563] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 1609.707912][T10563] ocfs2_xattr_set+0xba4/0x13e0 [ 1609.712795][T10563] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 1609.718736][T10563] ? __kasan_kmalloc+0x8f/0xa0 [ 1609.723559][T10563] ? ocfs2_set_acl+0x11e/0x590 [ 1609.728378][T10563] ? ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1609.733550][T10563] ? vfs_set_acl+0x803/0xa60 [ 1609.738152][T10563] ? path_setxattr+0x41d/0x5d0 [ 1609.742931][T10563] ? do_syscall_64+0x55/0xa0 [ 1609.747594][T10563] ? ocfs2_set_acl+0x11e/0x590 [ 1609.752366][T10563] ? rcu_is_watching+0x15/0xb0 [ 1609.757143][T10563] ? ocfs2_set_acl+0x11e/0x590 [ 1609.761911][T10563] ? __kmalloc+0xe2/0x230 [ 1609.766256][T10563] ? ocfs2_inode_lock_atime+0x530/0x530 [ 1609.771934][T10563] ocfs2_set_acl+0x4e1/0x590 [ 1609.776553][T10563] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1609.781507][T10563] ? ocfs2_xattr_get+0x260/0x260 [ 1609.786458][T10563] ? evm_inode_set_acl+0xbc/0x430 [ 1609.791755][T10563] ? down_read_killable+0x340/0x340 [ 1609.797057][T10563] ? evm_revalidate_status+0x4f/0xb0 [ 1609.802355][T10563] ? posix_acl_valid+0x352/0x3d0 [ 1609.807313][T10563] vfs_set_acl+0x803/0xa60 [ 1609.811754][T10563] do_set_acl+0xf5/0x180 [ 1609.816032][T10563] path_setxattr+0x41d/0x5d0 [ 1609.820663][T10563] ? simple_xattrs_free+0x150/0x150 [ 1609.825920][T10563] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1609.831919][T10563] ? lock_chain_count+0x20/0x20 [ 1609.836792][T10563] __x64_sys_setxattr+0xbb/0xd0 [ 1609.841748][T10563] do_syscall_64+0x55/0xa0 [ 1609.846217][T10563] ? clear_bhb_loop+0x40/0x90 [ 1609.850909][T10563] ? clear_bhb_loop+0x40/0x90 [ 1609.855600][T10563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.861509][T10563] RIP: 0033:0x7f1451d9c819 [ 1609.865950][T10563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.885748][T10563] RSP: 002b:00007f1452d32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1609.894185][T10563] RAX: ffffffffffffffda RBX: 00007f1452015fa0 RCX: 00007f1451d9c819 [ 1609.902166][T10563] RDX: 00002000000003c0 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 1609.910231][T10563] RBP: 00007f1451e32c91 R08: 0000000000000002 R09: 0000000000000000 [ 1609.918394][T10563] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1609.926629][T10563] R13: 00007f1452016038 R14: 00007f1452015fa0 R15: 00007fffb9504cb8 [ 1609.934619][T10563] [ 1609.938204][T10609] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1609.945538][T26307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1610.016880][T31605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.070347][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 1614.253701][ T1095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1615.543476][T16461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration