last executing test programs: 2m36.534302523s ago: executing program 1 (id=478): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000600)={0x0, 0x0, 0x81000}) 2m36.390449221s ago: executing program 1 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0) 2m36.150291205s ago: executing program 1 (id=484): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0x4010586e, &(0x7f00000000c0)=ANY=[]) 2m34.518478041s ago: executing program 1 (id=498): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, 0x0, 0x0) 2m33.950386965s ago: executing program 1 (id=504): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m32.894436177s ago: executing program 1 (id=516): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) 2m17.56193422s ago: executing program 32 (id=516): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) 3.725664901s ago: executing program 0 (id=2700): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setpriority(0x2, 0x0, 0xf) 3.519101953s ago: executing program 0 (id=2704): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x16}, 0x0, 0x0}) 2.420985298s ago: executing program 2 (id=2720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c0000001c0a05000000000000000000010000000c00024000000000000000010900010073797a31"], 0xc8}}, 0x0) 2.245994938s ago: executing program 2 (id=2722): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.717602849s ago: executing program 0 (id=2724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000), 0x8) 1.644938673s ago: executing program 0 (id=2726): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x80602) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x5, {0x2c6b, 0xc, 0xe, 0x5}}) 1.505189632s ago: executing program 0 (id=2728): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/117, 0x75, 0x41) 1.328927382s ago: executing program 0 (id=2730): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x800882, &(0x7f0000000400)={[{}, {@uid}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x21, 0x314, &(0x7f00000009c0)="$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") sync() 1.112271495s ago: executing program 2 (id=2734): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) 916.945896ms ago: executing program 2 (id=2737): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x719f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 846.51024ms ago: executing program 3 (id=2739): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000040)=0x5a) 771.938045ms ago: executing program 2 (id=2740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @loopback}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 745.258787ms ago: executing program 3 (id=2742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@dellink={0x34, 0x11, 0x9, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x51900, 0x4020}, [@IFLA_IFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x34}}, 0x0) 654.212212ms ago: executing program 2 (id=2743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5e}, 0x94) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000de0100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 562.422867ms ago: executing program 3 (id=2745): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x300) 444.948564ms ago: executing program 3 (id=2747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0x0, @in6=@local, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x36}, 0x0, @in=@empty, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x1bc}}, 0x0) 443.793364ms ago: executing program 4 (id=2748): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0x2, 0x4e2c, @local}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000400)="320a540a516412a892165a4f8be7a7e03beabe81", 0x14}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000004"], 0x10}}], 0x2, 0x4000044) 350.79168ms ago: executing program 3 (id=2749): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, &(0x7f0000003500)='./file0/file0\x00', 0x183042, 0x15) 344.55071ms ago: executing program 4 (id=2750): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000032c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) 230.638867ms ago: executing program 4 (id=2751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbf) 167.816721ms ago: executing program 4 (id=2752): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 72.320316ms ago: executing program 4 (id=2753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x3, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, 0x0, 0x6c}, 0x38) 27.099659ms ago: executing program 3 (id=2754): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 0s ago: executing program 4 (id=2755): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xc, 0x1}}]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x70}, 0x0) kernel console output (not intermixed with test programs): r=18446744073709551615, size=1024 [ 173.241257][ T7507] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.242715][ T8895] ADFS-fs (loop2): unrecognised mount option "gid=0x0000000000000000ÿÿÿÿ0x0000000000000000" or missing value [ 173.263318][ T7507] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.296895][ T7507] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 173.321808][ T7507] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.355232][ T7507] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.391206][ T7507] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 173.398544][ T7507] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.768703][ T8915] overlayfs: conflicting options: userxattr,metacopy=on [ 173.970070][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 173.982328][ T8923] loop0: detected capacity change from 0 to 128 [ 173.989721][ T8923] ADFS-fs (loop0): unrecognised mount option "gid=0x0000000000000000ÿÿÿÿ0x0000000000000000" or missing value [ 174.051407][ T5772] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.162345][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 174.178633][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.202441][ T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 174.221774][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.238666][ T9] usb 5-1: Product: syz [ 174.243217][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 174.248477][ T9] usb 5-1: Manufacturer: syz [ 174.254135][ T9] usb 5-1: SerialNumber: syz [ 174.260558][ T5772] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.269483][ T5772] usb 3-1: config 179 has no interface number 0 [ 174.276085][ T5772] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 174.292368][ T9] usb 5-1: config 0 descriptor?? [ 174.314377][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 174.321935][ T5772] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 174.342918][ T9] hub: probe of 5-1:0.0 failed with error -5 [ 174.359313][ T5772] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.373961][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 174.409955][ T5772] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.436297][ T5772] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.472397][ T5772] usb 3-1: config 179 interface 65 has no altsetting 0 [ 174.479314][ T5772] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 174.496188][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.555352][ T5772] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 174.708814][ T28] audit: type=1400 audit(1771253953.388:32): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8940 comm="syz.3.1335" [ 174.838267][ T8943] loop3: detected capacity change from 0 to 256 [ 174.874684][ T8943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 174.890210][ T5849] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.020461][ T23] usb 5-1: USB disconnect, device number 4 [ 175.081589][ T5849] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 175.089787][ T5849] usb 1-1: config 0 has no interface number 0 [ 175.100538][ T5849] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 175.111960][ T5849] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 175.123450][ T5849] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 175.123477][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.144516][ T5849] usb 1-1: config 0 descriptor?? [ 175.154391][ T5849] ttusbir 1-1:0.83: cannot find expected altsetting [ 175.388278][ T27] usb 1-1: USB disconnect, device number 7 [ 176.176077][ T8961] loop3: detected capacity change from 0 to 128 [ 176.187400][ T8963] loop0: detected capacity change from 0 to 128 [ 176.267694][ T8961] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 176.267749][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 176.267832][ T8965] openvswitch: netlink: Missing key (keys=40, expected=80) [ 176.290525][ T8961] FAT-fs (loop3): Filesystem has been set read-only [ 176.578732][ T28] audit: type=1326 audit(1771253955.258:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 176.652110][ T28] audit: type=1326 audit(1771253955.298:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 176.683741][ T28] audit: type=1326 audit(1771253955.308:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 176.751899][ T28] audit: type=1326 audit(1771253955.308:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 176.754480][ T5772] usb 3-1: USB disconnect, device number 8 [ 176.774200][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 176.782600][ T28] audit: type=1326 audit(1771253955.308:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 176.878814][ T5772] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 177.110086][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.310494][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 177.330667][ T23] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 177.340363][ T23] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 177.369954][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.410170][ T23] usb 5-1: config 0 has no interface number 0 [ 177.429979][ T23] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 177.451516][ T23] usb 5-1: config 0 interface 104 has no altsetting 1 [ 177.461296][ T23] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 177.472119][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.490228][ T23] usb 5-1: Product: syz [ 177.500200][ T23] usb 5-1: Manufacturer: syz [ 177.525585][ T23] usb 5-1: SerialNumber: syz [ 177.551365][ T23] usb 5-1: config 0 descriptor?? [ 177.568850][ T23] asix: probe of 5-1:0.104 failed with error -22 [ 177.795828][ T9010] loop0: detected capacity change from 0 to 2048 [ 177.848031][ T9012] loop3: detected capacity change from 0 to 512 [ 177.868922][ T23] usb 5-1: USB disconnect, device number 5 [ 177.876928][ T9013] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.938480][ T9012] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 177.953905][ T9010] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 177.975143][ T9010] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 177.980135][ T9012] System zones: 0-2, 18-18, 34-34 [ 177.996645][ T9010] Remounting filesystem read-only [ 178.002684][ T9010] NILFS (loop0): error -5 truncating bmap (ino=16) [ 178.016993][ T9012] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #3: comm syz.3.1370: corrupted inode contents [ 178.050533][ T9012] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #3: comm syz.3.1370: mark_inode_dirty error [ 178.063420][ T9012] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #3: comm syz.3.1370: corrupted inode contents [ 178.079323][ T9012] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.1370: mark_inode_dirty error [ 178.091339][ T5767] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 178.096623][ T9012] Quota error (device loop3): write_blk: dquota write failed [ 178.107953][ T9012] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 178.108474][ T5767] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 178.118053][ T9012] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1370: Failed to acquire dquot type 0 [ 178.133131][ T9012] EXT4-fs (loop3): 1 orphan inode deleted [ 178.155969][ T9012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.164167][ T8998] loop2: detected capacity change from 0 to 32768 [ 178.170238][ T42] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 178.180422][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.192328][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:2: Failed to release dquot type 1 [ 178.215175][ T9012] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.226198][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.240403][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.270672][ T5767] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 178.279607][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=16 [ 178.287494][ T5767] NILFS (loop0): discard dirty block: blocknr=23, size=1024 [ 178.300630][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.309599][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.325179][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.352444][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 178.369648][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.409964][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.455688][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.460090][ T5767] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 178.480178][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.904032][ T9029] loop3: detected capacity change from 0 to 512 [ 178.912365][ T9029] EXT4-fs: Ignoring removed nobh option [ 178.945868][ T9032] xt_connbytes: Forcing CT accounting to be enabled [ 178.989698][ T9029] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 179.071477][ T9029] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1378: attempt to clear invalid blocks 1 len 1 [ 179.160028][ T9029] EXT4-fs (loop3): Remounting filesystem read-only [ 179.167991][ T9029] EXT4-fs (loop3): 1 truncate cleaned up [ 179.213893][ T9029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.383632][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.721634][ T9033] loop4: detected capacity change from 0 to 32768 [ 179.749620][ T9033] (syz.4.1377,9033,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xd57e6c51. Applying ECC. [ 179.793442][ T9033] (syz.4.1377,9033,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc2d589a7, computed 0xf59bda01 [ 179.809257][ T9033] (syz.4.1377,9033,1):ocfs2_validate_inode_block:1382 ERROR: Checksum failed for dinode 17 [ 179.850213][ T9033] (syz.4.1377,9033,1):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 179.862151][ T9033] (syz.4.1377,9033,1):ocfs2_init_global_system_inodes:440 ERROR: status = -5 [ 179.872278][ T9033] (syz.4.1377,9033,1):ocfs2_init_global_system_inodes:472 ERROR: status = -5 [ 179.909999][ T9033] (syz.4.1377,9033,1):ocfs2_initialize_super:2254 ERROR: status = -5 [ 179.918302][ T9033] (syz.4.1377,9033,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 180.305557][ T9048] loop2: detected capacity change from 0 to 32768 [ 180.338236][ T9048] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 180.454401][ T9048] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.615243][ T9050] loop0: detected capacity change from 0 to 32768 [ 180.698168][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 180.772032][ T9050] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.943602][ T9084] loop2: detected capacity change from 0 to 512 [ 181.023460][ T9084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.054436][ T9084] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.083919][ T9084] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.1396: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 181.120646][ T9084] EXT4-fs (loop2): Remounting filesystem read-only [ 181.179754][ T9050] XFS (loop0): Ending clean mount [ 181.211120][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.246779][ T9050] XFS (loop0): Quotacheck needed: Please wait. [ 181.317916][ T9050] XFS (loop0): Quotacheck: Done. [ 181.356277][ T9094] loop3: detected capacity change from 0 to 1764 [ 181.410105][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.568749][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.586822][ T9100] MTD: Couldn't look up '/dev/sg0': -15 [ 181.621669][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 181.638621][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.680113][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.723986][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.752597][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.780935][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.818694][ T23] usb 5-1: Product: syz [ 181.830075][ T23] usb 5-1: Manufacturer: syz [ 181.839983][ T23] usb 5-1: SerialNumber: syz [ 181.886223][ T23] cdc_ncm 5-1:1.0: skipping garbage [ 181.905137][ T23] cdc_ncm 5-1:1.0: skipping garbage [ 181.920036][ T23] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 181.937129][ T23] cdc_ncm 5-1:1.0: bind() failure [ 182.043516][ T9112] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1411'. [ 182.060380][ T9112] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1411'. [ 182.142533][ T9114] loop0: detected capacity change from 0 to 2048 [ 182.154245][ T23] usb 5-1: USB disconnect, device number 7 [ 182.184438][ T9114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.267153][ T9116] loop2: detected capacity change from 0 to 4096 [ 182.295656][ T9116] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 182.590634][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 182.619992][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1416'. [ 183.124121][ T9120] loop2: detected capacity change from 0 to 32768 [ 183.144630][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.152375][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.188782][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.199408][ T9120] JBD2: Ignoring recovery information on journal [ 183.261326][ T9136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.284562][ T9120] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.348929][ T9136] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 183.359657][ T9120] (syz.2.1415,9120,0):ocfs2_mknod:502 ERROR: status = -31 [ 183.379251][ T9120] (syz.2.1415,9120,0):ocfs2_mkdir:659 ERROR: status = -31 [ 183.441781][ T9146] loop0: detected capacity change from 0 to 256 [ 183.476768][ T9146] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 183.574098][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.596533][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 183.622801][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.666008][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.709096][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 183.744741][ T9136] xfrm0 speed is unknown, defaulting to 1000 [ 184.123086][ T9155] loop0: detected capacity change from 0 to 8192 [ 184.150265][ T28] audit: type=1107 audit(1771253962.828:38): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 184.192614][ T9155] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.243142][ T9161] loop3: detected capacity change from 0 to 4096 [ 184.283654][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.320747][ T9155] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 184.332697][ T9155] REISERFS (device loop0): using ordered data mode [ 184.343231][ T9155] reiserfs: using flush barriers [ 184.352582][ T9155] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.374569][ T9161] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 184.387101][ T9161] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 184.402659][ T9155] REISERFS (device loop0): checking transaction log (loop0) [ 184.413442][ T9161] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 184.434130][ T9161] ntfs: volume version 3.1. [ 184.450813][ T9161] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 184.510175][ T9155] REISERFS (device loop0): Using r5 hash to sort names [ 184.896629][ T9179] netlink: 'syz.2.1441': attribute type 2 has an invalid length. [ 184.946155][ T9180] netlink: 'syz.4.1442': attribute type 8 has an invalid length. [ 184.985011][ T9180] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1442'. [ 185.447852][ T9202] loop4: detected capacity change from 0 to 2048 [ 185.479831][ T9202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.927097][ T9223] loop3: detected capacity change from 0 to 512 [ 185.948013][ T9223] EXT4-fs: Ignoring removed bh option [ 185.993290][ T9223] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.021981][ T9223] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 186.101498][ T9223] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 186.122133][ T9223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 186.173122][ T9223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.306729][ T9239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.407166][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.540047][ T5847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.580709][ T9248] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 186.767496][ T5847] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.790084][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.812160][ T5847] usb 5-1: config 0 descriptor?? [ 186.834626][ T5847] cp210x 5-1:0.0: cp210x converter detected [ 186.841542][ T9256] loop2: detected capacity change from 0 to 4096 [ 186.849025][ T9256] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 186.935956][ T9256] ntfs: volume version 3.1. [ 186.951905][ T9260] binder: 9259:9260 ioctl c018620c 200000000100 returned -22 [ 187.007715][ T9262] loop3: detected capacity change from 0 to 8 [ 187.053260][ T5847] usb 5-1: cp210x converter now attached to ttyUSB0 [ 187.254954][ T23] usb 5-1: USB disconnect, device number 8 [ 187.262551][ T9264] loop0: detected capacity change from 0 to 4096 [ 187.284409][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.297918][ T23] cp210x 5-1:0.0: device disconnected [ 187.574335][ T9272] loop2: detected capacity change from 0 to 128 [ 188.024248][ T9282] loop0: detected capacity change from 0 to 4096 [ 188.046830][ T9282] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 188.110313][ T9282] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 188.419080][ T9299] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 188.508666][ T9300] loop2: detected capacity change from 0 to 4096 [ 188.540885][ T9300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.612775][ T9300] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.651305][ T9300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.876847][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.129280][ T9296] loop3: detected capacity change from 0 to 32768 [ 189.197677][ T9296] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 189.239465][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'. [ 189.262824][ T9296] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 189.284068][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1510'. [ 189.561163][ T9322] loop0: detected capacity change from 0 to 32768 [ 189.568908][ T5764] ocfs2: Unmounting device (7,3) on (node local) [ 189.595404][ T9322] [ 189.595404][ T9322] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 189.595404][ T9322] [ 189.689648][ T9322] ERROR: (device loop0): ea_get: invalid ea.flag [ 189.689648][ T9322] [ 189.740649][ T9318] loop4: detected capacity change from 0 to 32768 [ 189.747240][ T9322] ERROR: (device loop0): remounting filesystem as read-only [ 189.987401][ T9318] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 190.046937][ T9318] (syz.4.1508,9318,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 190.110623][ T9341] siw: device registration error -23 [ 190.126277][ T9318] ocfs2: Unmounting device (7,4) on (node local) [ 190.437159][ T9352] sctp: [Deprecated]: syz.4.1522 (pid 9352) Use of int in max_burst socket option. [ 190.437159][ T9352] Use struct sctp_assoc_value instead [ 190.570902][ T9354] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1523'. [ 190.848592][ T9366] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1527'. [ 190.848637][ T9366] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 191.389755][ T9386] loop4: detected capacity change from 0 to 2048 [ 191.409546][ T9386] ext2: Unknown parameter 'uid<00000000000000000000' [ 191.542981][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 191.543703][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 191.549023][ T5770] Bluetooth: hci2: command 0x0406 tx timeout [ 191.555110][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 191.600159][ T9396] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.747512][ T9400] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 191.802274][ T9403] netlink: 'syz.2.1548': attribute type 3 has an invalid length. [ 191.803574][ T9400] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.178924][ T9416] netlink: 'syz.3.1554': attribute type 3 has an invalid length. [ 192.200053][ T9416] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 192.668602][ T9428] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1560'. [ 192.704043][ T9412] set_capacity_and_notify: 1 callbacks suppressed [ 192.704056][ T9412] loop2: detected capacity change from 0 to 32768 [ 192.748596][ T9412] read_mapping_page failed! [ 192.907473][ T9430] loop3: detected capacity change from 0 to 4096 [ 192.935707][ T9430] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 193.054174][ T9436] netlink: 'syz.4.1565': attribute type 9 has an invalid length. [ 193.089697][ T9436] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1565'. [ 193.111872][ T9430] ntfs: volume version 3.1. [ 193.682358][ T9452] netlink: 'syz.4.1572': attribute type 21 has an invalid length. [ 193.704299][ T9452] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1572'. [ 193.740170][ T9452] netlink: 'syz.4.1572': attribute type 5 has an invalid length. [ 193.760273][ T9452] netlink: 'syz.4.1572': attribute type 6 has an invalid length. [ 193.795376][ T9432] loop0: detected capacity change from 0 to 32768 [ 193.802308][ T9452] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1572'. [ 194.598657][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.627501][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.693589][ T9489] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 195.180192][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 195.250474][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 195.364267][ T9518] sit0: entered promiscuous mode [ 195.416958][ T9518] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 195.456288][ T9518] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1605'. [ 195.650485][ T9529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1610'. [ 195.666687][ T9529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1610'. [ 196.054559][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 196.180523][ T5772] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 196.194380][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 196.214225][ T9549] netlink: 'syz.4.1619': attribute type 3 has an invalid length. [ 196.230680][ T9549] netlink: 'syz.4.1619': attribute type 3 has an invalid length. [ 196.248042][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1619'. [ 196.269807][ T9533] loop2: detected capacity change from 0 to 32768 [ 196.319598][ T9533] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 196.319598][ T9533] [ 196.372417][ T9533] ERROR: (device loop2): remounting filesystem as read-only [ 196.379795][ T9533] jfs_lookup: dtSearch returned -5 [ 196.407366][ T5772] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 196.431499][ T5772] usb 1-1: config 5 has no interface number 0 [ 196.458029][ T5772] usb 1-1: config 5 interface 123 has no altsetting 0 [ 196.488901][ T5772] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 196.501315][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.554240][ T5772] usb 1-1: Product: syz [ 196.558451][ T5772] usb 1-1: Manufacturer: syz [ 196.580700][ T5772] usb 1-1: SerialNumber: syz [ 196.831983][ T9561] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 196.840339][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1626'. [ 196.841507][ T5772] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 196.901615][ T5772] usb 1-1: USB disconnect, device number 8 [ 196.972536][ T9564] ip6tnl2: entered allmulticast mode [ 197.428065][ T9584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1637'. [ 197.460488][ T9588] loop0: detected capacity change from 0 to 256 [ 197.467871][ T9588] exfat: Deprecated parameter 'namecase' [ 197.615601][ T9588] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 197.618600][ T9594] netlink: 'syz.3.1642': attribute type 7 has an invalid length. [ 197.859286][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.067041][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 198.078950][ T23] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 198.108659][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.136719][ T23] usb 5-1: Product: syz [ 198.158224][ T23] usb 5-1: Manufacturer: syz [ 198.170321][ T23] usb 5-1: SerialNumber: syz [ 198.187974][ T23] r8152-cfgselector 5-1: config 0 descriptor?? [ 198.497522][ T9625] veth2: entered promiscuous mode [ 198.510049][ T9625] veth2: entered allmulticast mode [ 198.634032][ T23] r8152-cfgselector 5-1: Unknown version 0x0000 [ 198.645764][ T23] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 198.878325][ T9642] overlayfs: unescaped trailing colons in lowerdir mount option. [ 198.950029][ T5849] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.152644][ T5849] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 199.164805][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.192195][ T5849] usb 1-1: config 0 descriptor?? [ 199.374559][ T9657] xt_CT: No such helper "netbios-ns" [ 199.646239][ T5849] [drm:udl_init] *ERROR* Selecting channel failed [ 199.698677][ T5849] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 199.784625][ T5849] [drm] Initialized udl on minor 2 [ 199.804701][ T5849] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.848579][ T5849] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 199.873974][ T23] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 199.900180][ T5849] usb 1-1: USB disconnect, device number 9 [ 199.906870][ T23] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 200.050146][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.260192][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 200.268262][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 200.292572][ T9] usb 5-1: config 0 has no interface number 0 [ 200.310877][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 200.324810][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.333048][ T9690] netlink: 'syz.2.1688': attribute type 1 has an invalid length. [ 200.343280][ T9] usb 5-1: Product: syz [ 200.347483][ T9] usb 5-1: Manufacturer: syz [ 200.352701][ T9690] __nla_validate_parse: 6 callbacks suppressed [ 200.352713][ T9690] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1688'. [ 200.368043][ T9] usb 5-1: SerialNumber: syz [ 200.395582][ T9] usb 5-1: config 0 descriptor?? [ 200.670095][ T9] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 200.676656][ T9] usb 5-1: Failed to initialize entity for entity 6 [ 200.699930][ T9] usb 5-1: Failed to register entities (-22). [ 200.724635][ T9696] bond0: Error: Cannot enslave bond to itself. [ 200.919509][ T27] usb 5-1: USB disconnect, device number 10 [ 200.998021][ T9706] loop2: detected capacity change from 0 to 64 [ 201.107081][ T9706] Trying to free block not in datazone [ 201.514405][ T9724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.521709][ T9724] IPv6: NLM_F_CREATE should be set when creating new route [ 201.528991][ T9724] IPv6: NLM_F_CREATE should be set when creating new route [ 201.751258][ T9732] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 201.759125][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1709'. [ 201.803332][ T9732] batman_adv: batadv0: Adding interface: virt_wifi0 [ 201.844972][ T9732] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.883774][ T9732] batman_adv: batadv0: Interface activated: virt_wifi0 [ 201.890743][ T9740] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1713'. [ 202.177084][ T9755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1719'. [ 202.279450][ T9757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1720'. [ 202.421627][ T9764] netlink: 'syz.0.1723': attribute type 7 has an invalid length. [ 202.437558][ T9765] Cannot find del_set index 6 as target [ 202.443408][ T1202] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.535325][ T9768] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 202.561302][ T9768] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 202.569604][ T9768] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.586343][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1725'. [ 202.610945][ T9769] veth2: entered promiscuous mode [ 202.616168][ T9769] veth2: entered allmulticast mode [ 202.645507][ T1202] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 202.655905][ T9771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.663159][ T9771] IPv6: NLM_F_CREATE should be set when creating new route [ 202.670458][ T9771] IPv6: NLM_F_CREATE should be set when creating new route [ 202.678804][ T1202] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 202.688398][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.712247][ T1202] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 202.874226][ T9777] loop3: detected capacity change from 0 to 2048 [ 202.933698][ T9777] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 202.941726][ T9777] UDF-fs: Scanning with blocksize 512 failed [ 202.957372][ T9777] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 202.970505][ T9777] UDF-fs: Scanning with blocksize 1024 failed [ 203.009198][ T9777] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 203.039344][ T9777] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 203.049903][ T9777] UDF-fs: Scanning with blocksize 2048 failed [ 203.076885][ T9777] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=259, location=259 [ 203.135186][ T9777] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 203.159661][ T9777] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 203.180270][ T9777] UDF-fs: Scanning with blocksize 4096 failed [ 203.187970][ T9777] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 203.988129][ T1202] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 204.189667][ T1202] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 204.204293][ T1202] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 204.227038][ T1202] usb 3-1: USB disconnect, device number 10 [ 204.787320][ T9824] loop3: detected capacity change from 0 to 32768 [ 204.840034][ T5754] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.858732][ T9824] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.874542][ T28] audit: type=1326 audit(1771253983.558:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 204.896711][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.906071][ T9846] capability: warning: `syz.4.1762' uses 32-bit capabilities (legacy support in use) [ 204.919285][ T28] audit: type=1326 audit(1771253983.588:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 204.942265][ T28] audit: type=1326 audit(1771253983.588:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 204.965142][ T28] audit: type=1326 audit(1771253983.598:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 204.987620][ T28] audit: type=1326 audit(1771253983.598:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 205.009840][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.011888][ T9824] XFS (loop3): Ending clean mount [ 205.055526][ T5754] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.093954][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.118186][ T5754] usb 1-1: Product: syz [ 205.130072][ T5754] usb 1-1: Manufacturer: syz [ 205.149962][ T5754] usb 1-1: SerialNumber: syz [ 205.178722][ T5754] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.259682][ T27] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.282518][ T9856] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1765'. [ 205.315335][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 205.393718][ T5764] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.762816][ T5754] usb 1-1: USB disconnect, device number 10 [ 205.878865][ T28] audit: type=1326 audit(1771253984.558:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906f79bf79 code=0x7ffc0000 [ 205.948876][ T28] audit: type=1326 audit(1771253984.558:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906f79bf79 code=0x7ffc0000 [ 206.028500][ T28] audit: type=1326 audit(1771253984.558:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906f79bf79 code=0x7ffc0000 [ 206.060148][ T9873] x_tables: unsorted underflow at hook 3 [ 206.090049][ T28] audit: type=1326 audit(1771253984.558:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f906f79bf79 code=0x7ffc0000 [ 206.175554][ T28] audit: type=1326 audit(1771253984.558:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906f79bf79 code=0x7ffc0000 [ 206.338675][ T9863] loop4: detected capacity change from 0 to 32768 [ 206.373798][ T9863] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1768 (9863) [ 206.430341][ T9863] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 206.470442][ T9863] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 206.486521][ T9863] BTRFS info (device loop4): turning off barriers [ 206.503287][ T9863] BTRFS info (device loop4): enabling all of the rescue options [ 206.516211][ T9863] BTRFS info (device loop4): ignoring data csums [ 206.523993][ T9863] BTRFS info (device loop4): ignoring bad roots [ 206.534793][ T9863] BTRFS info (device loop4): disabling log replay at mount time [ 206.543926][ T9863] BTRFS info (device loop4): disabling tree log [ 206.559987][ T9863] BTRFS info (device loop4): turning on flush-on-commit [ 206.577183][ T9863] BTRFS info (device loop4): using free space tree [ 206.585009][ T27] usb 1-1: Service connection timeout for: 256 [ 206.601051][ T27] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 206.623291][ T27] ath9k_htc: Failed to initialize the device [ 206.640022][ T5754] usb 1-1: ath9k_htc: USB layer deinitialized [ 206.746206][ T9863] BTRFS info (device loop4: state C): enabling ssd optimizations [ 206.916684][ T9881] loop2: detected capacity change from 0 to 32768 [ 206.956107][ T9881] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.984909][ T7507] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 207.009968][ T5754] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 207.118271][ T9881] XFS (loop2): Ending clean mount [ 207.147734][ T9917] xt_socket: unknown flags 0x58 [ 207.208476][ T7603] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (7603) [ 207.256012][ T5754] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 207.270081][ T5754] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 207.284557][ T5754] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 207.305760][ T5754] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 207.336026][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 207.345938][ T5766] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.403387][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 207.457266][ T5754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 207.473394][ T9924] veth1_vlan: left promiscuous mode [ 207.513761][ T5754] usb 1-1: string descriptor 0 read error: -22 [ 207.531267][ T5754] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 207.550090][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.581113][ T5754] usb 1-1: config 0 descriptor?? [ 207.626698][ T5754] hub 1-1:0.0: bad descriptor, ignoring hub [ 207.643825][ T5754] hub: probe of 1-1:0.0 failed with error -5 [ 207.698457][ T5754] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 207.872304][ T9932] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1785'. [ 208.070318][ T5754] usb 1-1: USB disconnect, device number 11 [ 208.095397][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 208.126856][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'. [ 208.266900][ T9942] loop4: detected capacity change from 0 to 1764 [ 208.572747][ T9950] loop2: detected capacity change from 0 to 4096 [ 208.604279][ T9950] ntfs3: loop2: ino=3, Correct links count -> 2. [ 208.730837][ T9958] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 208.780497][ T5754] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.989999][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 209.018186][ T5754] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 209.038085][ T5754] usb 4-1: config 0 has no interface number 0 [ 209.061210][ T5754] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 209.091081][ T5754] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.109437][ T5754] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 209.127117][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.136026][ T5754] usb 4-1: Product: syz [ 209.146635][ T5754] usb 4-1: Manufacturer: syz [ 209.154173][ T5754] usb 4-1: SerialNumber: syz [ 209.168477][ T9972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1809'. [ 209.185837][ T5754] usb 4-1: config 0 descriptor?? [ 209.220396][ T9952] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.348648][ T9974] loop2: detected capacity change from 0 to 4096 [ 209.388188][ T9974] ntfs: volume version 3.1. [ 209.482913][ T5754] usb 4-1: USB disconnect, device number 9 [ 209.679305][ T9986] loop4: detected capacity change from 0 to 8 [ 209.700232][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 209.740354][ T9986] SQUASHFS error: Failed to read block 0x6fc: -5 [ 209.747108][ T9986] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 209.890026][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 209.901792][ T23] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 209.922647][ T23] usb 1-1: config 0 has no interface number 0 [ 209.958155][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 209.978894][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.993262][ T23] usb 1-1: Product: syz [ 209.997465][ T23] usb 1-1: Manufacturer: syz [ 210.002433][ T23] usb 1-1: SerialNumber: syz [ 210.010909][ T23] usb 1-1: config 0 descriptor?? [ 210.260477][ T23] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 210.284760][ T23] usb 1-1: No valid video chain found. [ 210.312425][ T23] usb 1-1: USB disconnect, device number 12 [ 210.760881][T10023] loop4: detected capacity change from 0 to 8192 [ 210.851876][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 210.890748][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 210.921829][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 210.945193][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 210.967055][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 210.997723][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 211.030120][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 211.073371][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 211.108248][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 211.140171][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 211.157766][T10023] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 211.199941][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 211.199955][ T28] audit: type=1800 audit(1771253989.878:53): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1834" name="file2" dev="loop4" ino=1048613 res=0 errno=0 [ 211.461473][T10046] geneve2: entered promiscuous mode [ 211.535939][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1846'. [ 211.578532][T10048] veth3: entered allmulticast mode [ 211.686356][T10052] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 211.701968][T10052] netlink: 'syz.2.1848': attribute type 2 has an invalid length. [ 211.799164][T10031] loop3: detected capacity change from 0 to 32768 [ 211.896318][T10031] ialloc: diAlloc returned -17! [ 212.359306][T10074] loop4: detected capacity change from 0 to 512 [ 212.437945][T10074] EXT4-fs (loop4): Test dummy encryption mode enabled [ 212.530670][T10074] EXT4-fs (loop4): 1 truncate cleaned up [ 212.607780][T10074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.738056][T10091] loop2: detected capacity change from 0 to 256 [ 212.749250][T10092] loop0: detected capacity change from 0 to 256 [ 212.808780][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.862464][T10094] loop3: detected capacity change from 0 to 16 [ 212.894058][T10094] erofs: (device loop3): mounted with root inode @ nid 36. [ 212.941815][T10094] erofs: (device loop3): z_erofs_read_folio: read error -22 @ 43 of nid 36 [ 213.420275][T10112] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1877'. [ 213.643993][T10122] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 213.704345][T10122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.971826][T10135] Unknown options in mask b7f2 [ 214.087263][T10140] bridge_slave_1: left allmulticast mode [ 214.094516][T10140] bridge_slave_1: left promiscuous mode [ 214.102201][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.161543][T10140] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 214.175985][T10145] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 214.194512][T10145] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 214.291000][ T28] audit: type=1326 audit(1771253992.978:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.372982][ T28] audit: type=1326 audit(1771253992.998:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.395271][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.432080][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'. [ 214.441433][ T28] audit: type=1326 audit(1771253992.998:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.480823][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 214.501724][ T28] audit: type=1326 audit(1771253992.998:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.572296][ T28] audit: type=1326 audit(1771253992.998:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.595901][ T28] audit: type=1326 audit(1771253992.998:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.645330][T10160] netlink: 'syz.0.1901': attribute type 7 has an invalid length. [ 214.668583][T10160] netlink: 'syz.0.1901': attribute type 8 has an invalid length. [ 214.687608][T10160] netlink: 'syz.0.1901': attribute type 15 has an invalid length. [ 214.695633][ T28] audit: type=1326 audit(1771253992.998:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.701790][ T9] usb 3-1: config 0 has no interfaces? [ 214.718722][ T28] audit: type=1326 audit(1771253992.998:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.759973][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 214.774465][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.791915][ T9] usb 3-1: Product: syz [ 214.806414][ T9] usb 3-1: Manufacturer: syz [ 214.817618][ T9] usb 3-1: SerialNumber: syz [ 214.830651][ T28] audit: type=1326 audit(1771253993.008:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.4.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 214.870770][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 215.053851][T10175] ieee802154 phy0 wpan0: encryption failed: -90 [ 215.106011][ T9] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 215.126897][ T42] usb 3-1: config 0 descriptor?? [ 215.200366][ T787] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 215.389479][ T9] usb 3-1: USB disconnect, device number 11 [ 215.391771][ T787] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 215.396695][ T42] usb 3-1: can't set config #0, error -71 [ 215.427594][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.457719][ T787] usb 4-1: config 0 descriptor?? [ 215.474625][ T787] gspca_main: spca508-2.14.0 probing 8086:0110 [ 215.650179][ T5754] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 215.869501][ T5754] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 215.886547][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 215.900330][ T787] gspca_spca508: reg_read err -71 [ 215.911883][ T5754] usb 5-1: Product: syz [ 215.916908][ T5754] usb 5-1: Manufacturer: syz [ 215.921784][ T787] gspca_spca508: reg_read err -71 [ 215.928996][ T5754] usb 5-1: SerialNumber: syz [ 215.934597][ T787] gspca_spca508: reg_read err -71 [ 215.942062][ T787] gspca_spca508: reg_read err -71 [ 215.952121][ T5754] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 215.965272][ T787] gspca_spca508: reg write: error -71 [ 215.970871][ T787] spca508: probe of 4-1:0.0 failed with error -71 [ 215.983982][ T787] usb 4-1: USB disconnect, device number 10 [ 216.328164][T10212] loop0: detected capacity change from 0 to 4096 [ 216.352955][T10216] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1929'. [ 216.353549][T10212] __ntfs_error: 5 callbacks suppressed [ 216.353562][T10212] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 216.384141][T10212] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 216.412287][ T5754] vp7045: USB control message 'in' went wrong. [ 216.419273][ T5754] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 216.423126][T10212] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 216.437085][ T5754] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 216.472122][ T5754] usb 5-1: USB disconnect, device number 11 [ 216.498790][T10212] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 216.543377][T10212] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 216.574423][T10212] ntfs: volume version 3.1. [ 216.591102][T10212] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 216.626972][T10212] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 216.659938][T10212] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 216.713102][T10212] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 216.744486][T10212] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 217.113678][T10238] : renamed from bond_slave_0 (while UP) [ 217.227171][T10242] loop2: detected capacity change from 0 to 256 [ 217.263900][T10244] loop4: detected capacity change from 0 to 512 [ 217.285209][T10242] FAT-fs (loop2): Directory bread(block 64) failed [ 217.296904][T10242] FAT-fs (loop2): Directory bread(block 65) failed [ 217.312655][T10244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.318302][T10242] FAT-fs (loop2): Directory bread(block 66) failed [ 217.328994][T10242] FAT-fs (loop2): Directory bread(block 67) failed [ 217.329623][T10244] EXT4-fs: Ignoring removed i_version option [ 217.360817][ T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 217.361150][T10242] FAT-fs (loop2): Directory bread(block 68) failed [ 217.397756][T10242] FAT-fs (loop2): Directory bread(block 69) failed [ 217.419112][T10244] EXT4-fs (loop4): 1 orphan inode deleted [ 217.428244][T10242] FAT-fs (loop2): Directory bread(block 70) failed [ 217.456148][T10244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.474419][T10242] FAT-fs (loop2): Directory bread(block 71) failed [ 217.498516][T10242] FAT-fs (loop2): Directory bread(block 72) failed [ 217.522505][T10242] FAT-fs (loop2): Directory bread(block 73) failed [ 217.570092][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 217.577124][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.590999][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.618382][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 217.659955][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.672142][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.710052][ T787] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 217.729505][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.747906][ T787] usb 4-1: config 0 descriptor?? [ 217.920090][ T5772] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 217.920115][ T787] rc_core: IR keymap rc-hauppauge not found [ 217.920129][ T787] Registered IR keymap rc-empty [ 217.960979][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.010044][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.042929][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 218.081803][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 218.107570][ T5772] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 218.122551][ T5772] usb 5-1: config 0 has no interface number 0 [ 218.134021][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.134239][ T5772] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 218.190075][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.191662][ T5772] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 218.217728][T10254] loop0: detected capacity change from 0 to 32768 [ 218.235246][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.243149][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.254576][ T5772] usb 5-1: config 0 descriptor?? [ 218.291925][T10254] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.300035][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.311212][T10244] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 218.340978][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.341721][ T5772] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input18 [ 218.389106][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.405867][T10254] XFS (loop0): Ending clean mount [ 218.430212][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.469394][ C1] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 218.503742][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.553947][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.614462][ T787] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.622848][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.666525][ T787] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 218.675795][ T27] usb 5-1: USB disconnect, device number 12 [ 218.729974][ T787] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 218.791274][ T787] usb 4-1: USB disconnect, device number 11 [ 219.115717][T10284] netlink: 'syz.3.1958': attribute type 2 has an invalid length. [ 219.123768][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 219.131145][T10284] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 219.141722][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 219.341238][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.604353][T10296] loop3: detected capacity change from 0 to 8192 [ 219.654757][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1967'. [ 219.677023][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.680005][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1967'. [ 219.705758][T10306] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 219.714085][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.740179][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.760069][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.810101][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.869233][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.901300][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.959212][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.990694][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 219.999369][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 220.076652][T10296] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 220.243284][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 220.316875][T10300] loop4: detected capacity change from 0 to 32768 [ 220.379160][T10300] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 220.554235][T10300] OCFS2: ERROR (device loop4): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 220.580763][T10330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1977'. [ 220.614425][T10300] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 220.647244][T10300] OCFS2: Returning error to the calling process. [ 220.676966][T10300] (syz.4.1964,10300,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 220.735348][T10300] (syz.4.1964,10300,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 220.770083][T10300] (syz.4.1964,10300,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 220.778392][T10300] (syz.4.1964,10300,0):ocfs2_mknod:306 ERROR: status = -5 [ 220.843601][T10300] (syz.4.1964,10300,0):ocfs2_mknod:502 ERROR: status = -5 [ 220.863606][T10300] (syz.4.1964,10300,0):ocfs2_mkdir:659 ERROR: status = -5 [ 220.867440][T10336] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 221.041658][ T7507] ocfs2: Unmounting device (7,4) on (node local) [ 221.311161][T10351] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.450269][T10359] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 221.490005][T10359] CIFS mount error: No usable UNC path provided in device string! [ 221.490005][T10359] [ 221.549442][T10359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.865713][T10377] MTD: Attempt to mount non-MTD device "./file0" [ 221.890193][T10377] ./file0: Can't open blockdev [ 221.980452][T10381] overlayfs: disabling nfs_export due to verity=require [ 222.023562][T10381] overlayfs: conflicting options: userxattr,verity=require [ 222.134987][T10387] sit0: left promiscuous mode [ 222.336218][T10387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.474426][T10401] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 223.321061][T10441] loop2: detected capacity change from 0 to 2048 [ 223.387635][T10441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.448841][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.589924][T10451] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2038'. [ 223.592395][T10454] loop4: detected capacity change from 0 to 512 [ 223.599020][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 223.636260][T10454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.653646][T10451] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2038'. [ 223.689321][T10451] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2038'. [ 223.708518][T10454] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 223.738758][T10454] EXT4-fs (loop4): 1 truncate cleaned up [ 223.781281][T10454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.055945][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.191900][T10472] __nla_validate_parse: 1 callbacks suppressed [ 224.191916][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2047'. [ 224.258392][T10476] gretap1: entered promiscuous mode [ 224.304953][T10478] netlink: 'syz.3.2049': attribute type 46 has an invalid length. [ 224.347434][T10478] netlink: 'syz.3.2049': attribute type 28 has an invalid length. [ 224.469068][T10484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2052'. [ 224.492348][T10486] netlink: 'syz.0.2053': attribute type 21 has an invalid length. [ 224.504564][T10486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2053'. [ 224.690072][ T1202] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 224.895046][ T1202] usb 3-1: Using ep0 maxpacket: 32 [ 224.931302][ T1202] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 224.960145][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.988555][ T1202] usb 3-1: Product: syz [ 225.016200][ T1202] usb 3-1: Manufacturer: syz [ 225.032149][ T1202] usb 3-1: SerialNumber: syz [ 225.045123][ T1202] usb 3-1: config 0 descriptor?? [ 225.350939][T10517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2068'. [ 225.506043][ T1202] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 225.522323][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 225.522336][ T28] audit: type=1326 audit(1771254004.208:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 225.565629][ T1202] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 225.590472][ T28] audit: type=1326 audit(1771254004.218:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 225.650020][ T28] audit: type=1326 audit(1771254004.248:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 225.691272][ T1202] peak_usb: probe of 3-1:0.0 failed with error -71 [ 225.718427][ T28] audit: type=1326 audit(1771254004.248:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 225.747040][ T1202] usb 3-1: USB disconnect, device number 12 [ 225.802497][ T28] audit: type=1326 audit(1771254004.248:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10520 comm="syz.3.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92b99bf79 code=0x7ffc0000 [ 226.050030][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.111474][T10543] loop0: detected capacity change from 0 to 64 [ 226.119238][T10541] netlink: 'syz.4.2080': attribute type 9 has an invalid length. [ 226.250304][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 226.266902][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 226.285019][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.308422][ T27] usb 4-1: Product: syz [ 226.320342][ T27] usb 4-1: Manufacturer: syz [ 226.359272][ T27] usb 4-1: SerialNumber: syz [ 226.371959][ T27] r8152-cfgselector 4-1: config 0 descriptor?? [ 226.404803][T10549] comedi comedi2: s526: I/O port conflict (0xb013,64) [ 226.565369][T10556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2087'. [ 226.616520][ T27] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 226.787970][ T2878] usb 4-1: config 0 descriptor?? [ 226.826916][ T787] usb 4-1: USB disconnect, device number 12 [ 226.827405][T10562] loop2: detected capacity change from 0 to 4096 [ 226.833180][ T2878] usb 4-1: can't set config #0, error -71 [ 226.892304][T10562] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 226.900780][T10567] loop4: detected capacity change from 0 to 4096 [ 226.941304][T10567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.001417][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.049997][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 227.268896][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.281693][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.306749][ T27] usb 1-1: config 0 descriptor?? [ 227.326295][ T27] cp210x 1-1:0.0: cp210x converter detected [ 227.523203][T10583] netlink: 'syz.2.2100': attribute type 33 has an invalid length. [ 227.767090][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 227.812652][ T27] usb 1-1: USB disconnect, device number 13 [ 227.840606][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.875950][ T27] cp210x 1-1:0.0: device disconnected [ 228.072163][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 228.240329][T10612] hsr0: VLAN not yet supported [ 228.468958][T10614] loop4: detected capacity change from 0 to 8192 [ 228.514116][T10614] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.530507][T10614] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 228.580399][T10614] REISERFS (device loop4): using ordered data mode [ 228.586954][T10614] reiserfs: using flush barriers [ 228.666283][T10614] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.723613][T10614] REISERFS (device loop4): checking transaction log (loop4) [ 228.759965][ T1202] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.881529][T10628] loop3: detected capacity change from 0 to 4096 [ 228.883618][T10614] REISERFS (device loop4): Using tea hash to sort names [ 228.931732][T10614] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 228.932344][T10628] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 228.962110][ T1202] usb 1-1: Using ep0 maxpacket: 16 [ 228.990871][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 229.030163][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 229.075174][ T1202] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.104946][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.126686][ T1202] usb 1-1: Product: syz [ 229.141728][ T1202] usb 1-1: Manufacturer: syz [ 229.154090][ T1202] usb 1-1: SerialNumber: syz [ 229.168707][ T1202] usb 1-1: config 0 descriptor?? [ 229.183164][ T1202] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 229.202467][ T1202] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 229.452786][ T1202] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 229.553935][ T1202] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 229.575356][ T1202] em28xx 1-1:0.0: board has no eeprom [ 229.669963][ T1202] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 229.687999][ T1202] em28xx 1-1:0.0: dvb set to isoc mode. [ 229.701071][ T5847] em28xx 1-1:0.0: Binding DVB extension [ 229.730214][ T1202] usb 1-1: USB disconnect, device number 14 [ 229.758024][ T1202] em28xx 1-1:0.0: Disconnecting em28xx [ 229.821991][ T5847] em28xx 1-1:0.0: Registering input extension [ 229.830311][ T1202] em28xx 1-1:0.0: Closing input extension [ 229.983584][ T1202] em28xx 1-1:0.0: Freeing device [ 230.105164][T10638] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2126'. [ 230.160489][T10639] loop2: detected capacity change from 0 to 1024 [ 230.284362][T10639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 230.310627][T10639] syz.2.2127: attempt to access beyond end of device [ 230.310627][T10639] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 230.372559][T10639] Buffer I/O error on dev loop2, logical block 458752, async page read [ 230.393891][T10647] loop4: detected capacity change from 0 to 2048 [ 230.410285][T10639] syz.2.2127: attempt to access beyond end of device [ 230.410285][T10639] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 230.450727][T10639] Buffer I/O error on dev loop2, logical block 458752, async page read [ 230.467931][T10647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.621226][T10654] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2133'. [ 231.656132][T10694] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 232.345433][ T5754] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.560312][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 232.570888][ T5754] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.583449][ T5754] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.593783][ T5754] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.605595][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.633698][T10716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 232.644800][ T5754] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 232.762057][ T23] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 232.775525][ T23] usb 1-1: config 0 has no interface number 0 [ 232.801910][ T23] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.836486][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 232.863135][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.887559][ T23] usb 1-1: Product: syz [ 232.903319][ T23] usb 1-1: Manufacturer: syz [ 232.908368][ T23] usb 1-1: SerialNumber: syz [ 232.929703][ T23] usb 1-1: config 0 descriptor?? [ 232.965788][ T23] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 233.002534][ T23] usb 4-1: USB disconnect, device number 13 [ 233.379247][T10744] loop4: detected capacity change from 0 to 32768 [ 233.431497][ T787] usb 1-1: USB disconnect, device number 15 [ 233.446455][T10744] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 233.471605][ T787] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 233.620775][T10744] XFS (loop4): Ending clean mount [ 233.648841][T10768] loop2: detected capacity change from 0 to 512 [ 233.684465][T10744] XFS (loop4): Quotacheck needed: Please wait. [ 233.709558][T10768] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 233.727053][T10768] System zones: 0-2, 18-18, 34-35 [ 233.765730][T10744] XFS (loop4): Quotacheck: Done. [ 233.768839][T10768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.820287][ T7507] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 233.855674][T10768] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.983214][T10768] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.2184: invalid size [ 234.176879][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.189743][T10780] loop3: detected capacity change from 0 to 256 [ 234.327311][T10780] FAT-fs (loop3): Directory bread(block 64) failed [ 234.376825][T10780] FAT-fs (loop3): Directory bread(block 65) failed [ 234.411121][T10780] FAT-fs (loop3): Directory bread(block 66) failed [ 234.417697][T10780] FAT-fs (loop3): Directory bread(block 67) failed [ 234.490108][T10780] FAT-fs (loop3): Directory bread(block 68) failed [ 234.496688][T10780] FAT-fs (loop3): Directory bread(block 69) failed [ 234.518721][T10780] FAT-fs (loop3): Directory bread(block 70) failed [ 234.535925][T10780] FAT-fs (loop3): Directory bread(block 71) failed [ 234.570228][T10780] FAT-fs (loop3): Directory bread(block 72) failed [ 234.592201][T10780] FAT-fs (loop3): Directory bread(block 73) failed [ 234.985534][T10806] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 235.695443][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 235.729985][ T5847] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.866198][T10848] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2219'. [ 235.910201][ T1202] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 235.942669][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.959079][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.976580][ T5847] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.997651][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 236.013653][ T5847] usb 3-1: SerialNumber: syz [ 236.139799][ T1202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.157786][ T1202] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.179140][ T1202] usb 5-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 236.200121][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.227232][ T1202] usb 5-1: Product: syz [ 236.247378][ T1202] usb 5-1: Manufacturer: syz [ 236.259695][ T5847] usb 3-1: 0:2 : does not exist [ 236.266680][ T1202] usb 5-1: SerialNumber: syz [ 236.301272][ T1202] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 236.308680][ T5847] usb 3-1: USB disconnect, device number 13 [ 236.322188][ T1202] cdc_mbim 5-1:1.0: bind() failure [ 236.526308][ T787] usb 5-1: USB disconnect, device number 13 [ 236.800849][T10882] usb usb8: usbfs: process 10882 (syz.0.2237) did not claim interface 0 before use [ 236.972309][T10892] netlink: 'syz.3.2241': attribute type 7 has an invalid length. [ 237.018478][T10892] netlink: 'syz.3.2241': attribute type 8 has an invalid length. [ 237.058025][T10894] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2242'. [ 237.077688][T10896] loop2: detected capacity change from 0 to 1764 [ 237.340518][T10900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.383745][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2247'. [ 237.743781][T10919] program syz.0.2254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.807034][T10917] loop4: detected capacity change from 0 to 4096 [ 237.839589][T10917] EXT4-fs (loop4): Test dummy encryption mode enabled [ 237.894080][T10917] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 237.940806][T10917] System zones: 0-5 [ 237.951879][T10917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.042857][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.162637][T10933] openvswitch: netlink: Actions may not be safe on all matching packets [ 238.791502][T10965] loop4: detected capacity change from 0 to 8 [ 239.010176][ T787] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 239.194731][ T787] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 239.220500][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.249255][ T787] usb 4-1: Product: syz [ 239.270243][ T787] usb 4-1: Manufacturer: syz [ 239.274892][ T787] usb 4-1: SerialNumber: syz [ 239.288025][ T787] usb 4-1: config 0 descriptor?? [ 239.298922][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2285'. [ 239.314527][ T787] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 239.456868][T10996] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 239.828845][T11005] QAT: failed to copy from user cfg_data. [ 239.851810][T11003] loop4: detected capacity change from 0 to 16 [ 239.864796][ T787] usb 4-1: USB disconnect, device number 14 [ 239.894651][T11003] erofs: (device loop4): mounted with root inode @ nid 36. [ 239.974277][T11003] syz.4.2294: attempt to access beyond end of device [ 239.974277][T11003] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 240.013832][T11003] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -6 in[63, 4033] out[4096] [ 240.035816][ T28] audit: type=1800 audit(1771254018.718:74): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2294" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 240.308061][T11019] loop0: detected capacity change from 0 to 2048 [ 240.329799][T11019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.691459][T11034] loop0: detected capacity change from 0 to 512 [ 240.720926][T11034] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 240.731674][T11036] overlay: Bad value for 'metacopy' [ 240.732839][T11038] loop2: detected capacity change from 0 to 64 [ 240.762977][T11034] EXT4-fs (loop0): orphan cleanup on readonly fs [ 240.769559][T11034] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.2308: Block bitmap for bg 0 marked uninitialized [ 240.868258][T11034] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 240.890679][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2312'. [ 240.903988][T11034] EXT4-fs (loop0): 1 orphan inode deleted [ 240.917225][T11034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 240.930455][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2312'. [ 241.007538][T11034] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 241.028916][T11034] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 241.092809][T11046] loop3: detected capacity change from 0 to 164 [ 241.145143][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.149206][T11049] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2316'. [ 241.398051][T11057] loop2: detected capacity change from 0 to 1024 [ 241.458806][T11059] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 241.499981][ T1202] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 241.565109][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 241.575186][ T2878] hfsplus: b-tree write err: -5, ino 4 [ 241.710069][ T1202] usb 4-1: Using ep0 maxpacket: 16 [ 241.732262][ T1202] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.757761][T11068] loop2: detected capacity change from 0 to 2048 [ 241.770685][ T1202] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 241.778890][ T1202] usb 4-1: config 1 has no interface number 0 [ 241.808269][ T1202] usb 4-1: string descriptor 0 read error: -22 [ 241.816863][ T1202] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 241.837343][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.850070][T11073] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.088688][ T1202] usb 4-1: USB disconnect, device number 15 [ 242.816709][T11106] netlink: 'syz.4.2343': attribute type 5 has an invalid length. [ 242.957346][T11085] loop2: detected capacity change from 0 to 32768 [ 243.202547][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'. [ 243.231622][T11116] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 243.244165][T11118] netlink: 640 bytes leftover after parsing attributes in process `syz.3.2350'. [ 243.440901][T11126] geneve2: entered promiscuous mode [ 243.537452][T11130] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 243.842334][T11139] --map-set only usable from mangle table [ 244.360079][T11163] netlink: 'syz.4.2371': attribute type 6 has an invalid length. [ 244.386315][ T5847] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 244.612411][ T5847] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.630267][ T5847] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.646315][T11176] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 244.671152][ T5847] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.692952][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.724840][T11150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.762622][ T5847] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 244.889509][T11182] loop3: detected capacity change from 0 to 1024 [ 245.031749][ T3464] hfsplus: b-tree write err: -5, ino 4 [ 245.070906][T11190] loop4: detected capacity change from 0 to 8 [ 245.176688][ T787] usb 1-1: USB disconnect, device number 16 [ 245.376293][T11198] overlayfs: conflicting options: userxattr,redirect_dir=on [ 245.790366][T11216] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 245.830240][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 245.921718][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 246.159673][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2403'. [ 246.177861][T11230] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.389234][T11238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2409'. [ 246.550830][T11246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.925660][T11264] loop3: detected capacity change from 0 to 256 [ 247.023000][T11270] loop0: detected capacity change from 0 to 64 [ 247.047267][T11264] FAT-fs (loop3): Directory bread(block 64) failed [ 247.070698][T11264] FAT-fs (loop3): Directory bread(block 65) failed [ 247.077382][T11264] FAT-fs (loop3): Directory bread(block 66) failed [ 247.141448][T11264] FAT-fs (loop3): Directory bread(block 67) failed [ 247.156013][T11264] FAT-fs (loop3): Directory bread(block 68) failed [ 247.185607][T11264] FAT-fs (loop3): Directory bread(block 69) failed [ 247.219078][T11264] FAT-fs (loop3): Directory bread(block 70) failed [ 247.251359][T11264] FAT-fs (loop3): Directory bread(block 71) failed [ 247.258037][T11264] FAT-fs (loop3): Directory bread(block 72) failed [ 247.299671][T11264] FAT-fs (loop3): Directory bread(block 73) failed [ 247.412445][ T28] audit: type=1800 audit(1771254026.098:75): pid=11264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2422" name="cpu.stat" dev="loop3" ino=1048620 res=0 errno=0 [ 247.413404][T11264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 247.570597][T11282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2431'. [ 247.694238][T11284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2432'. [ 247.781459][T11288] set match dimension is over the limit! [ 247.901865][T11272] loop4: detected capacity change from 0 to 32768 [ 248.002035][T11272] JBD2: Ignoring recovery information on journal [ 248.109625][T11272] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 248.121451][T11302] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 248.269987][T11272] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 248.326249][T11272] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 248.403544][T11272] OCFS2: File system is now read-only. [ 248.409072][T11272] (syz.4.2426,11272,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 248.426933][ T5085] Bluetooth: hci2: Malformed Event: 0x02 [ 248.446139][T11272] (syz.4.2426,11272,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 248.493884][T11314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2446'. [ 248.510106][T11272] (syz.4.2426,11272,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 248.533432][T11272] (syz.4.2426,11272,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 248.570251][T11272] (syz.4.2426,11272,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 248.600797][T11272] (syz.4.2426,11272,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 248.639995][T11272] (syz.4.2426,11272,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 248.647903][T11272] (syz.4.2426,11272,0):ocfs2_mknod:385 ERROR: status = -30 [ 248.693887][T11272] (syz.4.2426,11272,0):ocfs2_mknod:502 ERROR: status = -30 [ 248.714029][T11272] (syz.4.2426,11272,0):ocfs2_mkdir:659 ERROR: status = -30 [ 248.728951][T11324] loop2: detected capacity change from 0 to 256 [ 248.740305][T11324] exfat: Deprecated parameter 'namecase' [ 248.748890][T11324] exfat: Deprecated parameter 'namecase' [ 248.848952][T11324] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 248.874057][ T7507] ocfs2: Unmounting device (7,4) on (node local) [ 248.910331][T11330] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 249.158112][T11332] loop0: detected capacity change from 0 to 4096 [ 249.187508][T11332] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 249.242448][T11332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.351784][T11342] CIFS mount error: No usable UNC path provided in device string! [ 249.351784][T11342] [ 249.361952][T11342] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.546877][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.826766][T11359] xfrm0: entered promiscuous mode [ 249.850833][T11359] xfrm0: entered allmulticast mode [ 249.963902][T11361] xt_CT: No such helper "pptp" [ 250.284231][T11379] netlink: 'syz.2.2478': attribute type 21 has an invalid length. [ 250.292440][T11379] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.725716][T11390] bond4: entered promiscuous mode [ 250.729818][T11370] loop3: detected capacity change from 0 to 32768 [ 250.739407][T11390] bond4: entered allmulticast mode [ 250.747243][T11390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.790891][ T28] audit: type=1800 audit(1771254029.468:76): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2472" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 250.860019][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 251.060273][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 251.072856][T11397] loop3: detected capacity change from 0 to 256 [ 251.086543][ T23] usb 5-1: config 0 has no interfaces? [ 251.097233][ T23] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 251.124723][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.138802][T11397] exfat: Deprecated parameter 'namecase' [ 251.159041][ T23] usb 5-1: Product: syz [ 251.169153][ T23] usb 5-1: Manufacturer: syz [ 251.179275][ T23] usb 5-1: SerialNumber: syz [ 251.185227][T11397] exfat: Deprecated parameter 'namecase' [ 251.191858][ T23] r8152-cfgselector 5-1: config 0 descriptor?? [ 251.251329][T11382] loop2: detected capacity change from 0 to 32768 [ 251.276687][T11397] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 251.364120][T11382] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 251.405533][ T23] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 251.450393][T11382] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 251.583084][T11382] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 251.624879][ T23] usb 5-1: USB disconnect, device number 14 [ 251.800099][T11382] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 251.814859][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'. [ 251.899076][T11382] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 251.932160][T11414] ip6gretap1: entered promiscuous mode [ 251.937783][T11382] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 251.937783][T11382] inode = 12 2341 [ 251.937783][T11382] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 251.959557][T11414] ip6gretap1: entered allmulticast mode [ 252.006542][T11382] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 252.021229][T11382] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:11382 [syz.2.2480] __gfs2_lookup+0xad/0x2a0 [ 252.053422][T11382] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 252.085119][T11382] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 252.097197][T11382] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 252.110042][T11418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2496'. [ 252.132704][T11382] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 252.148696][T11382] gfs2: fsid=syz:syz.s: File system withdrawn [ 252.155976][T11382] CPU: 0 PID: 11382 Comm: syz.2.2480 Not tainted syzkaller #0 [ 252.163471][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.173571][T11382] Call Trace: [ 252.176869][T11382] [ 252.179806][T11382] dump_stack_lvl+0x18c/0x250 [ 252.184516][T11382] ? kobject_uevent_env+0x363/0x8b0 [ 252.189732][T11382] ? show_regs_print_info+0x20/0x20 [ 252.194952][T11382] ? load_image+0x400/0x400 [ 252.199475][T11382] ? kobject_uevent_env+0x363/0x8b0 [ 252.204708][T11382] gfs2_withdraw+0xb24/0x13d0 [ 252.209428][T11382] ? gfs2_lm+0x240/0x240 [ 252.213704][T11382] ? load_image+0x400/0x400 [ 252.218239][T11382] ? gfs2_consist_inode_i+0xf5/0x110 [ 252.223552][T11382] gfs2_dirent_scan+0x525/0x650 [ 252.228430][T11382] ? gfs2_dirent_search+0x7f0/0x7f0 [ 252.233648][T11382] gfs2_dirent_search+0x2ed/0x7f0 [ 252.238685][T11382] ? gfs2_dirent_search+0x7f0/0x7f0 [ 252.243895][T11382] ? gfs2_permission+0x384/0x460 [ 252.248840][T11382] ? __might_sleep+0xe0/0xe0 [ 252.253428][T11382] ? gfs2_dir_search+0x220/0x220 [ 252.258365][T11382] ? gfs2_lookupi+0x640/0x640 [ 252.263051][T11382] ? do_raw_spin_lock+0x11f/0x2c0 [ 252.268081][T11382] gfs2_dir_search+0x4d/0x220 [ 252.272757][T11382] gfs2_lookupi+0x45c/0x640 [ 252.277263][T11382] ? gfs2_lookup_meta+0x180/0x180 [ 252.282287][T11382] ? __gfs2_lookup+0xad/0x2a0 [ 252.286958][T11382] ? d_alloc_parallel+0x13f6/0x1530 [ 252.292167][T11382] __gfs2_lookup+0xad/0x2a0 [ 252.296662][T11382] ? d_alloc_parallel+0x33e/0x1530 [ 252.301770][T11382] ? gfs2_atomic_open+0x220/0x220 [ 252.306789][T11382] ? __d_lookup+0x8f/0x7c0 [ 252.311197][T11382] ? d_hash_and_lookup+0x1b0/0x1b0 [ 252.316311][T11382] gfs2_atomic_open+0x92/0x220 [ 252.321073][T11382] ? gfs2_rename2+0x1f50/0x1f50 [ 252.325920][T11382] path_openat+0xf49/0x3230 [ 252.330439][T11382] ? do_filp_open+0x430/0x430 [ 252.335112][T11382] ? __virt_addr_valid+0x18c/0x540 [ 252.340227][T11382] do_filp_open+0x1f5/0x430 [ 252.344726][T11382] ? vfs_tmpfile+0x490/0x490 [ 252.349323][T11382] ? _raw_spin_unlock+0x28/0x40 [ 252.354170][T11382] ? alloc_fd+0x58f/0x630 [ 252.358504][T11382] do_sys_openat2+0x134/0x1d0 [ 252.363178][T11382] ? do_sys_open+0xe0/0xe0 [ 252.367586][T11382] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 252.373564][T11382] ? lock_chain_count+0x20/0x20 [ 252.378410][T11382] __x64_sys_openat+0x139/0x160 [ 252.383256][T11382] do_syscall_64+0x55/0xa0 [ 252.387666][T11382] ? clear_bhb_loop+0x40/0x90 [ 252.392330][T11382] ? clear_bhb_loop+0x40/0x90 [ 252.396994][T11382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.402874][T11382] RIP: 0033:0x7f906f79bf79 [ 252.407284][T11382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.426885][T11382] RSP: 002b:00007f907074d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.435298][T11382] RAX: ffffffffffffffda RBX: 00007f906fa15fa0 RCX: 00007f906f79bf79 [ 252.443262][T11382] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 252.451221][T11382] RBP: 00007f906f8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 252.459187][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.467152][T11382] R13: 00007f906fa16038 R14: 00007f906fa15fa0 R15: 00007fff781bc8f8 [ 252.475132][T11382] [ 252.478154][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.693547][T11428] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2501'. [ 252.738358][T11430] cgroup: release_agent respecified [ 253.319968][T11450] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.358988][T11454] JFS: discard option not supported on device [ 253.386077][T11454] Mount JFS Failure: -22 [ 253.394106][T11454] jfs_mount failed w/return code = -22 [ 253.610813][T11465] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2519'. [ 253.764728][T11465] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2519'. [ 253.940787][T11479] Cannot find add_set index 0 as target [ 253.950343][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'. [ 253.959353][T11478] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.042437][T11483] misc userio: Invalid payload size [ 254.308195][T11491] loop2: detected capacity change from 0 to 128 [ 254.354532][T11491] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 254.378974][T11491] hpfs: filesystem error: improperly stopped [ 254.418907][T11491] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 254.446751][T11491] hpfs: You really don't want any checks? You are crazy... [ 254.472536][T11491] hpfs: hpfs_map_sector(): read error [ 254.483409][T11491] hpfs: code page support is disabled [ 254.499700][T11491] hpfs: hpfs_map_4sectors(): unaligned read [ 254.521951][T11491] hpfs: hpfs_map_4sectors(): unaligned read [ 254.540752][T11491] hpfs: filesystem error: unable to find root dir [ 254.629422][T11481] loop0: detected capacity change from 0 to 32768 [ 254.698848][T11481] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.747255][T11508] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2539'. [ 255.056440][T11481] XFS (loop0): Ending clean mount [ 255.093259][T11481] XFS (loop0): Quotacheck needed: Please wait. [ 255.239725][T11481] XFS (loop0): Quotacheck: Done. [ 255.260431][T11529] netlink: 'syz.2.2548': attribute type 9 has an invalid length. [ 255.268240][T11529] netlink: 911 bytes leftover after parsing attributes in process `syz.2.2548'. [ 255.506055][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.957804][T11555] comedi comedi0: pcmmio: I/O port conflict (0x2,32) [ 256.012826][T11559] loop3: detected capacity change from 0 to 512 [ 256.024535][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031262][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.055596][T11559] EXT4-fs: Ignoring removed orlov option [ 256.099120][T11559] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 256.160908][T11559] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.2563: corrupted in-inode xattr: e_value size too large [ 256.180138][T11564] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.223318][T11559] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2563: couldn't read orphan inode 15 (err -117) [ 256.279814][T11559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.394748][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.466380][T11575] loop2: detected capacity change from 0 to 2048 [ 256.489807][T11575] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 256.509175][T11575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.531132][T11577] Cannot find del_set index 0 as target [ 256.550270][ T787] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 256.766530][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 256.786946][ T787] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 256.805983][ T787] usb 5-1: config 0 has no interface number 0 [ 256.827817][ T787] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 256.847864][ T787] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 256.859328][ T787] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 256.900263][ T787] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 256.909345][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.950082][ T787] usb 5-1: Product: syz [ 256.954296][ T787] usb 5-1: Manufacturer: syz [ 256.958905][ T787] usb 5-1: SerialNumber: syz [ 257.004445][ T787] usb 5-1: config 0 descriptor?? [ 257.010317][T11571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.017617][T11571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.279829][T11571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.310318][T11571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.574044][ T787] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 257.602691][ T787] asix: probe of 5-1:0.34 failed with error -71 [ 257.635234][ T787] usb 5-1: USB disconnect, device number 15 [ 257.879575][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 257.894217][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 258.103148][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 258.165400][T11633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2598'. [ 258.340151][T11640] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 258.609583][T11651] kernel read not supported for file /  (pid: 11651 comm: syz.0.2607) [ 258.627009][ T28] audit: type=1800 audit(1771254037.308:77): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2607" name=200120 dev="mqueue" ino=24417 res=0 errno=0 [ 258.742066][T11653] loop4: detected capacity change from 0 to 764 [ 258.744842][T11655] loop3: detected capacity change from 0 to 64 [ 258.767592][T11657] libceph: resolve 'c' (ret=-3): failed [ 258.801940][T11653] Symlink component flag not implemented [ 258.841512][T11653] Symlink component flag not implemented [ 258.859178][T11653] Symlink component flag not implemented (128) [ 258.899316][T11653] Symlink component flag not implemented (122) [ 258.978524][T11663] cgroup: subsys name conflicts with all [ 259.562158][T11687] loop4: detected capacity change from 0 to 64 [ 259.671058][T11687] syz.4.2624: attempt to access beyond end of device [ 259.671058][T11687] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 259.741888][T11687] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 259.778565][T11687] syz.4.2624: attempt to access beyond end of device [ 259.778565][T11687] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 259.836848][T11687] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 260.126358][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2633'. [ 260.149995][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2633'. [ 260.190146][T11705] netlink: 'syz.0.2633': attribute type 6 has an invalid length. [ 260.228991][T11703] loop4: detected capacity change from 0 to 4096 [ 260.242744][T11703] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 260.314233][T11709] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 260.324031][T11709] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2635'. [ 260.334477][T11709] NCSI netlink: No device for ifindex 0 [ 260.494624][T11703] ntfs3: loop4: failed to convert "c46c" to maccroatian [ 260.528985][T11715] loop2: detected capacity change from 0 to 16 [ 260.546433][T11715] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 260.579622][ T7603] udevd[7603]: incorrect cramfs checksum on /dev/loop2 [ 260.658879][ T7603] udevd[7603]: incorrect cramfs checksum on /dev/loop2 [ 260.861875][T11691] loop3: detected capacity change from 0 to 32768 [ 260.921905][T11691] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 260.940165][T11691] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 261.055716][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2646'. [ 261.118751][T11691] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 261.221259][ T787] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 261.228659][ T787] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 261.348207][T11738] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 261.351572][ T787] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 261.369572][T11732] loop0: detected capacity change from 0 to 8192 [ 261.401097][ T787] gfs2: fsid=syz:syz.0: jid=0: Done [ 261.414241][T11691] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 261.620501][ T5847] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 261.840160][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 261.847269][ T5847] usb 5-1: config 0 has an invalid interface number: 88 but max is 3 [ 261.864570][ T5847] usb 5-1: config 0 has an invalid interface number: 250 but max is 3 [ 261.881991][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.933742][ T5847] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 261.971403][T11691] gfs2: fsid=syz:syz.0: found 1 quota changes [ 261.977597][ T5847] usb 5-1: config 0 has no interface number 0 [ 261.998202][ T5847] usb 5-1: config 0 has no interface number 1 [ 262.015434][ T5847] usb 5-1: config 0 interface 88 has no altsetting 0 [ 262.040172][ T5847] usb 5-1: config 0 interface 250 has no altsetting 0 [ 262.071618][ T5847] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 262.112317][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.134058][ T5847] usb 5-1: config 0 descriptor?? [ 262.224087][ T5764] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 262.224087][ T5764] inode = 11 2339 [ 262.224087][ T5764] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 262.274107][ T5764] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 262.278698][T11756] netlink: 'syz.2.2657': attribute type 12 has an invalid length. [ 262.320500][ T5764] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5764 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 262.368298][ T5764] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 262.378123][ T5847] usb 5-1: string descriptor 0 read error: -71 [ 262.400227][ T5764] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 262.435113][ T5764] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 262.435879][ T5847] usb 5-1: USB disconnect, device number 16 [ 262.489985][ T5764] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 262.536996][ T5764] gfs2: fsid=syz:syz.0: File system withdrawn [ 262.562987][ T5764] CPU: 1 PID: 5764 Comm: syz-executor Not tainted syzkaller #0 [ 262.570580][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.580650][ T5764] Call Trace: [ 262.583945][ T5764] [ 262.586891][ T5764] dump_stack_lvl+0x18c/0x250 [ 262.591583][ T5764] ? kobject_uevent_env+0x363/0x8b0 [ 262.596883][ T5764] ? show_regs_print_info+0x20/0x20 [ 262.602101][ T5764] ? load_image+0x400/0x400 [ 262.606634][ T5764] ? kobject_uevent_env+0x363/0x8b0 [ 262.611863][ T5764] gfs2_withdraw+0xb24/0x13d0 [ 262.617009][ T5764] ? gfs2_lm+0x240/0x240 [ 262.621286][ T5764] ? gfs2_consist_inode_i+0xf5/0x110 [ 262.626587][ T5764] gfs2_inode_refresh+0xb89/0x1000 [ 262.631705][ T5764] ? gfs2_inode_metasync+0xf0/0xf0 [ 262.636810][ T5764] ? gfs2_glock_nq+0xd4f/0x1420 [ 262.641657][ T5764] gfs2_instantiate+0x162/0x220 [ 262.646506][ T5764] gfs2_glock_wait+0x1d4/0x2a0 [ 262.651269][ T5764] do_sync+0x4c6/0xe50 [ 262.655326][ T5764] ? gfs2_quota_sync+0x411/0x5a0 [ 262.660253][ T5764] ? bh_get+0x760/0x760 [ 262.664397][ T5764] ? __lock_acquire+0x7d40/0x7d40 [ 262.669406][ T5764] ? do_raw_spin_lock+0x11f/0x2c0 [ 262.674513][ T5764] ? gfs2_quota_sync+0x411/0x5a0 [ 262.679443][ T5764] ? do_raw_spin_unlock+0x121/0x230 [ 262.684634][ T5764] gfs2_quota_sync+0x411/0x5a0 [ 262.689391][ T5764] gfs2_sync_fs+0x4c/0xb0 [ 262.693714][ T5764] sync_filesystem+0xea/0x220 [ 262.698384][ T5764] generic_shutdown_super+0x6f/0x2b0 [ 262.703665][ T5764] kill_block_super+0x44/0x90 [ 262.708342][ T5764] deactivate_locked_super+0x97/0x100 [ 262.713705][ T5764] cleanup_mnt+0x43b/0x4d0 [ 262.718118][ T5764] task_work_run+0x1d4/0x260 [ 262.722710][ T5764] ? task_work_cancel+0x220/0x220 [ 262.727729][ T5764] ? exit_to_user_mode_loop+0x3b/0x110 [ 262.733179][ T5764] exit_to_user_mode_loop+0xe6/0x110 [ 262.738454][ T5764] exit_to_user_mode_prepare+0xee/0x180 [ 262.743993][ T5764] syscall_exit_to_user_mode+0x1a/0x50 [ 262.749437][ T5764] do_syscall_64+0x61/0xa0 [ 262.753842][ T5764] ? clear_bhb_loop+0x40/0x90 [ 262.758508][ T5764] ? clear_bhb_loop+0x40/0x90 [ 262.763177][ T5764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.769063][ T5764] RIP: 0033:0x7fe92b99d1d7 [ 262.773468][ T5764] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 262.793061][ T5764] RSP: 002b:00007ffd7c859898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 262.801462][ T5764] RAX: 0000000000000000 RBX: 00007fe92ba31c3b RCX: 00007fe92b99d1d7 [ 262.809432][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7c859950 [ 262.817391][ T5764] RBP: 00007ffd7c859950 R08: 00007ffd7c85a950 R09: 00000000ffffffff [ 262.825355][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7c85a9e0 [ 262.833314][ T5764] R13: 00007fe92ba31c3b R14: 000000000003ff70 R15: 00007ffd7c85aa20 [ 262.841288][ T5764] [ 262.954383][T11749] loop0: detected capacity change from 0 to 32768 [ 263.000185][T11749] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 263.007772][T11749] CPU: 1 PID: 11749 Comm: syz.0.2652 Not tainted syzkaller #0 [ 263.015251][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.025329][T11749] Call Trace: [ 263.028629][T11749] [ 263.031581][T11749] dump_stack_lvl+0x18c/0x250 [ 263.036289][T11749] ? show_regs_print_info+0x20/0x20 [ 263.041592][T11749] ? load_image+0x400/0x400 [ 263.046130][T11749] sysfs_create_dir_ns+0x26e/0x2a0 [ 263.051274][T11749] ? sysfs_warn_dup+0xa0/0xa0 [ 263.055970][T11749] ? do_raw_spin_unlock+0x121/0x230 [ 263.061178][T11749] kobject_add_internal+0x61c/0xcc0 [ 263.066382][T11749] kobject_init_and_add+0x12c/0x1a0 [ 263.071576][T11749] ? lockdep_softirqs_off+0x430/0x430 [ 263.076947][T11749] ? kobject_add+0x240/0x240 [ 263.081634][T11749] ? __init_swait_queue_head+0xa9/0x150 [ 263.087198][T11749] gfs2_sys_fs_add+0x253/0x4b0 [ 263.091966][T11749] ? gfs2_recover_set+0x250/0x250 [ 263.096998][T11749] ? apply_workqueue_attrs+0x180/0x180 [ 263.102470][T11749] gfs2_fill_super+0x12b6/0x1f30 [ 263.107410][T11749] ? __might_sleep+0xe0/0xe0 [ 263.112012][T11749] ? gfs2_reconfigure+0xb10/0xb10 [ 263.117048][T11749] ? setup_bdev_super+0x56b/0x660 [ 263.122077][T11749] get_tree_bdev+0x3f3/0x520 [ 263.126661][T11749] ? end_current_label_crit_section+0x170/0x170 [ 263.132896][T11749] ? gfs2_reconfigure+0xb10/0xb10 [ 263.137914][T11749] ? setup_bdev_super+0x660/0x660 [ 263.142933][T11749] gfs2_get_tree+0x51/0x1e0 [ 263.147433][T11749] vfs_get_tree+0x8c/0x280 [ 263.151845][T11749] do_new_mount+0x24b/0xa40 [ 263.156341][T11749] __se_sys_mount+0x2e7/0x3d0 [ 263.161024][T11749] ? __x64_sys_mount+0xc0/0xc0 [ 263.165865][T11749] ? lockdep_hardirqs_on+0x98/0x150 [ 263.171050][T11749] ? __x64_sys_mount+0x20/0xc0 [ 263.175802][T11749] do_syscall_64+0x55/0xa0 [ 263.180213][T11749] ? clear_bhb_loop+0x40/0x90 [ 263.184880][T11749] ? clear_bhb_loop+0x40/0x90 [ 263.189547][T11749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.195431][T11749] RIP: 0033:0x7f6ed099d20a [ 263.199836][T11749] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.219474][T11749] RSP: 002b:00007f6ed1939e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.227883][T11749] RAX: ffffffffffffffda RBX: 00007f6ed1939ee0 RCX: 00007f6ed099d20a [ 263.235847][T11749] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 00007f6ed1939ea0 [ 263.243824][T11749] RBP: 00002000000001c0 R08: 00007f6ed1939ee0 R09: 0000000000208c1b [ 263.251807][T11749] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000000 [ 263.259790][T11749] R13: 00007f6ed1939ea0 R14: 0000000000012751 R15: 00002000000000c0 [ 263.267777][T11749] [ 263.444219][T11771] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 263.452351][T11771] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2664'. [ 263.461675][T11749] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 263.483156][T11749] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 263.671803][T11773] x_tables: unsorted entry at hook 3 [ 263.717140][ T5847] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.929981][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 263.945481][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.970675][ T5847] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 264.008791][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.054663][ T5847] usb 3-1: config 0 descriptor?? [ 264.200237][T11792] Non-string source [ 264.227153][T11796] loop0: detected capacity change from 0 to 16 [ 264.279564][T11796] erofs: (device loop0): mounted with root inode @ nid 36. [ 264.292897][ T1202] usb 3-1: USB disconnect, device number 14 [ 264.349436][T11796] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 264.518452][T11804] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 264.545567][T11804] bridge1: entered promiscuous mode [ 264.572741][T11804] bridge1: entered allmulticast mode [ 264.943031][T11823] loop4: detected capacity change from 0 to 256 [ 264.969671][T11818] loop0: detected capacity change from 0 to 2048 [ 265.033057][T11818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.149481][T11823] FAT-fs (loop4): Directory bread(block 64) failed [ 265.160140][T11823] FAT-fs (loop4): Directory bread(block 65) failed [ 265.190144][T11823] FAT-fs (loop4): Directory bread(block 66) failed [ 265.198563][T11823] FAT-fs (loop4): Directory bread(block 67) failed [ 265.250321][T11823] FAT-fs (loop4): Directory bread(block 68) failed [ 265.257311][T11823] FAT-fs (loop4): Directory bread(block 69) failed [ 265.278631][T11823] FAT-fs (loop4): Directory bread(block 70) failed [ 265.312217][T11823] FAT-fs (loop4): Directory bread(block 71) failed [ 265.337248][T11823] FAT-fs (loop4): Directory bread(block 72) failed [ 265.357396][T11823] FAT-fs (loop4): Directory bread(block 73) failed [ 265.721036][T11849] netlink: 'syz.3.2699': attribute type 3 has an invalid length. [ 265.729328][T11849] netlink: 'syz.3.2699': attribute type 3 has an invalid length. [ 265.939320][ T28] audit: type=1326 audit(1771254044.618:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 265.962196][ T28] audit: type=1326 audit(1771254044.648:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 266.000278][ T28] audit: type=1326 audit(1771254044.658:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 266.077232][ T28] audit: type=1326 audit(1771254044.668:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3496b9bf79 code=0x7ffc0000 [ 266.170023][ T5847] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 266.200271][ T1202] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 266.370000][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 266.378492][ T5847] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 266.391059][ T5847] usb 4-1: config 0 has no interface number 0 [ 266.410515][ T1202] usb 1-1: Using ep0 maxpacket: 8 [ 266.418832][ T5847] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 266.433649][ T1202] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 266.454756][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.478678][ T5847] usb 4-1: Product: syz [ 266.484133][ T1202] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 266.499424][ T5847] usb 4-1: Manufacturer: syz [ 266.506623][ T1202] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 266.522472][ T5847] usb 4-1: SerialNumber: syz [ 266.544091][ T5847] usb 4-1: config 0 descriptor?? [ 266.549297][ T1202] usb 1-1: Product: syz [ 266.559914][ T1202] usb 1-1: Manufacturer: syz [ 266.575873][ T1202] usb 1-1: SerialNumber: syz [ 266.582436][ T5847] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 266.612270][ T5847] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 266.770608][ T5847] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 266.820628][ T1202] usb 1-1: Invalid connection information received from device [ 266.978231][ T5847] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 267.007315][ T5847] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 267.025432][ T1202] usb 1-1: USB disconnect, device number 17 [ 267.051933][ T5847] usb 4-1: USB disconnect, device number 16 [ 267.072144][ T5847] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 267.172750][T11892] loop4: detected capacity change from 0 to 256 [ 267.282199][T11892] FAT-fs (loop4): Directory bread(block 64) failed [ 267.288780][T11892] FAT-fs (loop4): Directory bread(block 65) failed [ 267.304159][T11892] FAT-fs (loop4): Directory bread(block 66) failed [ 267.314555][T11892] FAT-fs (loop4): Directory bread(block 67) failed [ 267.322150][T11892] FAT-fs (loop4): Directory bread(block 68) failed [ 267.328699][T11892] FAT-fs (loop4): Directory bread(block 69) failed [ 267.336724][T11892] FAT-fs (loop4): Directory bread(block 70) failed [ 267.343561][T11892] FAT-fs (loop4): Directory bread(block 71) failed [ 267.364947][T11892] FAT-fs (loop4): Directory bread(block 72) failed [ 267.377844][T11892] FAT-fs (loop4): Directory bread(block 73) failed [ 268.133213][T11913] loop0: detected capacity change from 0 to 64 [ 268.351485][T11921] sock: sock_timestamping_bind_phc: sock not bind to device [ 269.057922][ T1202] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 269.094197][T11953] loop3: detected capacity change from 0 to 512 [ 269.120691][T11953] EXT4-fs (loop3): 1 truncate cleaned up [ 269.127745][T11953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.257420][ T28] audit: type=1800 audit(1771254047.928:82): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2749" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 269.262099][ T1202] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.295152][ T1202] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.322336][ T1202] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.333464][ T1202] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 269.353648][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.364523][ T1202] usb 3-1: config 1 has no interface number 1 [ 269.375049][ T1202] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.403845][ T1202] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.413388][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.436335][ T1202] usb 3-1: Product: syz [ 269.446560][ T1202] usb 3-1: Manufacturer: syz [ 269.455773][ T1202] usb 3-1: SerialNumber: syz [ 269.461012][ T29] INFO: task syz-executor:5765 blocked for more than 143 seconds. [ 269.484948][ T29] Not tainted syzkaller #0 [ 269.503573][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.524547][ T29] task:syz-executor state:D stack:21704 pid:5765 ppid:1 flags:0x00004004 [ 269.541798][ T29] Call Trace: [ 269.545135][ T29] [ 269.548090][ T29] __schedule+0x1553/0x45a0 [ 269.552859][ T29] ? asan.module_dtor+0x20/0x20 [ 269.560066][ T29] ? mark_lock+0x94/0x320 [ 269.564925][ T29] ? lock_chain_count+0x20/0x20 [ 269.574716][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 269.582244][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 269.587838][ T29] schedule+0xbd/0x170 [ 269.592444][ T29] io_schedule+0x80/0xd0 [ 269.596808][ T29] folio_wait_bit_common+0x714/0xfa0 [ 269.602303][ T29] ? folio_wait_bit+0x30/0x30 [ 269.607036][ T29] ? filemap_get_entry+0x379/0x3f0 [ 269.617484][ T29] ? _compound_head+0x120/0x120 [ 269.628539][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 269.639971][ T29] __filemap_get_folio+0xbc/0xbb0 [ 269.645055][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 269.655333][ T29] ? mapping_evict_folio+0x510/0x510 [ 269.660782][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 269.665854][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.672005][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 269.677241][ T29] evict+0x4dd/0x8d0 [ 269.681293][ T29] ? proc_nr_inodes+0x230/0x230 [ 269.686177][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 269.691497][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 269.696725][ T29] evict_inodes+0x606/0x6a0 [ 269.701445][ T29] ? clear_inode+0x150/0x150 [ 269.706072][ T29] generic_shutdown_super+0x97/0x2b0 [ 269.711742][ T29] kill_block_super+0x44/0x90 [ 269.716452][ T29] deactivate_locked_super+0x97/0x100 [ 269.722155][ T29] cleanup_mnt+0x43b/0x4d0 [ 269.726893][ T29] task_work_run+0x1d4/0x260 [ 269.727854][ T1202] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 269.731563][ T29] ? task_work_cancel+0x220/0x220 [ 269.738108][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 269.739955][ T1202] usb 3-1: MIDIStreaming interface descriptor not found [ 269.744303][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 269.762703][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 269.768400][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 269.775269][ T29] do_syscall_64+0x61/0xa0 [ 269.779737][ T29] ? clear_bhb_loop+0x40/0x90 [ 269.796106][ T29] ? clear_bhb_loop+0x40/0x90 [ 269.799040][ T1202] usb 3-1: USB disconnect, device number 15 [ 269.809971][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.815905][ T29] RIP: 0033:0x7feb31f9d1d7 [ 269.830246][ T29] RSP: 002b:00007ffff5aaf618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 269.860063][ T29] RAX: 0000000000000000 RBX: 00007feb32031c3b RCX: 00007feb31f9d1d7 [ 269.870250][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff5aaf6d0 [ 269.878661][ T29] RBP: 00007ffff5aaf6d0 R08: 00007ffff5ab06d0 R09: 00000000ffffffff [ 269.893135][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff5ab0760 [ 269.909609][ T8093] udevd[8093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.919957][ T29] R13: 00007feb32031c3b R14: 000000000001c689 R15: 00007ffff5ab07a0 [ 269.946264][ T29] [ 269.958742][ T29] [ 269.958742][ T29] Showing all locks held in the system: [ 269.978474][ T29] 1 lock held by khungtaskd/29: [ 269.983893][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 269.994416][ T29] 3 locks held by kworker/0:3/1202: [ 269.999644][ T29] #0: ffff888147a78538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 270.018755][ T29] #1: ffffc90004c3fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 270.031058][ T29] #2: ffff888142f23190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0 [ 270.040141][ T29] 2 locks held by kworker/u4:7/2878: [ 270.045464][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 270.055652][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 270.064459][ T29] 2 locks held by getty/5526: [ 270.069123][ T29] #0: ffff88802d32f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 270.079369][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 270.089594][ T29] 1 lock held by syz-executor/5765: [ 270.094921][ T29] #0: ffff88802fa080e0 (&type->s_umount_key#64){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 270.105387][ T29] 1 lock held by syz.0.2730/11913: [ 270.110593][ T29] #0: ffff88802fa080e0 (&type->s_umount_key#64){++++}-{3:3}, at: super_lock+0x17f/0x3a0 [ 270.120689][ T29] [ 270.123033][ T29] ============================================= [ 270.123033][ T29] [ 270.131508][ T29] NMI backtrace for cpu 1 [ 270.135851][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 270.143060][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.153112][ T29] Call Trace: [ 270.156383][ T29] [ 270.159304][ T29] dump_stack_lvl+0x18c/0x250 [ 270.163984][ T29] ? preempt_count_add+0x91/0x1a0 [ 270.169016][ T29] ? show_regs_print_info+0x20/0x20 [ 270.174208][ T29] ? load_image+0x400/0x400 [ 270.178719][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 270.183666][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 270.189813][ T29] ? _printk+0xde/0x130 [ 270.193968][ T29] ? load_image+0x400/0x400 [ 270.198469][ T29] ? load_image+0x400/0x400 [ 270.202967][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 270.209031][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 270.215009][ T29] watchdog+0xf3d/0xf80 [ 270.219159][ T29] ? watchdog+0x1e1/0xf80 [ 270.223482][ T29] kthread+0x2fa/0x390 [ 270.227538][ T29] ? hungtask_pm_notify+0x90/0x90 [ 270.232561][ T29] ? kthread_blkcg+0xd0/0xd0 [ 270.237154][ T29] ret_from_fork+0x48/0x80 [ 270.241578][ T29] ? kthread_blkcg+0xd0/0xd0 [ 270.246172][ T29] ret_from_fork_asm+0x11/0x20 [ 270.250947][ T29] [ 270.255001][ T29] Sending NMI from CPU 1 to CPUs 0: [ 270.260565][ C0] NMI backtrace for cpu 0 [ 270.260576][ C0] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 270.260592][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.260601][ C0] Workqueue: bat_events batadv_nc_worker [ 270.260627][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 270.260649][ C0] Code: 48 8b 3d 7c cc 03 0d 48 89 de 5b e9 53 59 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 10 a2 7c 7e 65 8b 15 11 a2 7c 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 270.260662][ C0] RSP: 0018:ffffc90000007750 EFLAGS: 00000282 [ 270.260675][ C0] RAX: ffffffff813b5344 RBX: 0000000080000101 RCX: ffff888018ab1e00 [ 270.260687][ C0] RDX: 0000000080000101 RSI: 0000000080000101 RDI: 0000000000000000 [ 270.260697][ C0] RBP: ffffc90000b2fee8 R08: ffff888018ab1e00 R09: 0000000000000003 [ 270.260707][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007828 [ 270.260717][ C0] R13: dffffc0000000000 R14: ffffc90000b2ff30 R15: ffffc90000007838 [ 270.260729][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 270.260743][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.260753][ C0] CR2: 00007fffdbce3e68 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 270.260767][ C0] Call Trace: [ 270.260772][ C0] [ 270.260777][ C0] unwind_next_frame+0x1d24/0x2970 [ 270.260799][ C0] ? kthread+0x2fa/0x390 [ 270.260815][ C0] ? kthread+0x2fa/0x390 [ 270.260828][ C0] ? stack_trace_save+0x100/0x100 [ 270.260846][ C0] arch_stack_walk+0x144/0x190 [ 270.260863][ C0] ? ret_from_fork+0x48/0x80 [ 270.260883][ C0] stack_trace_save+0xaa/0x100 [ 270.260900][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 270.260916][ C0] ? __lock_acquire+0x1273/0x7d40 [ 270.260937][ C0] kasan_set_track+0x4e/0x70 [ 270.260952][ C0] ? kasan_set_track+0x4e/0x70 [ 270.260966][ C0] ? kasan_save_free_info+0x2e/0x50 [ 270.260984][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 270.260999][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 270.261013][ C0] ? kmem_cache_free+0xf8/0x270 [ 270.261033][ C0] ? rcu_core+0xcfb/0x1770 [ 270.261046][ C0] ? handle_softirqs+0x280/0x820 [ 270.261060][ C0] ? do_softirq+0xfa/0x1a0 [ 270.261073][ C0] ? __local_bh_enable_ip+0x184/0x1c0 [ 270.261087][ C0] ? batadv_nc_purge_paths+0x311/0x3a0 [ 270.261108][ C0] ? batadv_nc_worker+0x328/0x610 [ 270.261126][ C0] ? process_scheduled_works+0xa5d/0x15d0 [ 270.261149][ C0] ? worker_thread+0xa55/0xfc0 [ 270.261165][ C0] ? kthread+0x2fa/0x390 [ 270.261198][ C0] ? kmem_cache_free+0xf8/0x270 [ 270.261217][ C0] kasan_save_free_info+0x2e/0x50 [ 270.261236][ C0] ____kasan_slab_free+0x126/0x1e0 [ 270.261254][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 270.261270][ C0] ? rcu_core+0xc88/0x1770 [ 270.261282][ C0] ? rcu_core+0xcfb/0x1770 [ 270.261295][ C0] kmem_cache_free+0xf8/0x270 [ 270.261316][ C0] ? put_cred+0x60/0x60 [ 270.261337][ C0] rcu_core+0xcfb/0x1770 [ 270.261359][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 270.261375][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 270.261392][ C0] ? mark_lock+0x94/0x320 [ 270.261410][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 270.261428][ C0] ? lock_chain_count+0x20/0x20 [ 270.261448][ C0] handle_softirqs+0x280/0x820 [ 270.261465][ C0] ? do_softirq+0xfa/0x1a0 [ 270.261481][ C0] ? do_softirq+0x1a0/0x1a0 [ 270.261497][ C0] ? batadv_nc_purge_paths+0x311/0x3a0 [ 270.261519][ C0] do_softirq+0xfa/0x1a0 [ 270.261538][ C0] [ 270.261542][ C0] [ 270.261548][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 270.261563][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 270.261582][ C0] ? rcu_is_watching+0x15/0xb0 [ 270.261602][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 270.261617][ C0] ? _local_bh_enable+0xa0/0xa0 [ 270.261633][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 270.261651][ C0] ? batadv_nc_purge_paths+0x311/0x3a0 [ 270.261671][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 270.261692][ C0] batadv_nc_purge_paths+0x311/0x3a0 [ 270.261719][ C0] batadv_nc_worker+0x328/0x610 [ 270.261742][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 270.261759][ C0] process_scheduled_works+0xa5d/0x15d0 [ 270.261790][ C0] ? assign_work+0x430/0x430 [ 270.261810][ C0] ? assign_work+0x3d0/0x430 [ 270.261829][ C0] worker_thread+0xa55/0xfc0 [ 270.261859][ C0] kthread+0x2fa/0x390 [ 270.261872][ C0] ? pr_cont_work+0x560/0x560 [ 270.261890][ C0] ? kthread_blkcg+0xd0/0xd0 [ 270.261904][ C0] ret_from_fork+0x48/0x80 [ 270.261920][ C0] ? kthread_blkcg+0xd0/0xd0 [ 270.261934][ C0] ret_from_fork_asm+0x11/0x20 [ 270.261961][ C0] [ 270.263301][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 270.719414][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 270.726599][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.736641][ T29] Call Trace: [ 270.739908][ T29] [ 270.742825][ T29] dump_stack_lvl+0x18c/0x250 [ 270.747499][ T29] ? show_regs_print_info+0x20/0x20 [ 270.752691][ T29] ? load_image+0x400/0x400 [ 270.757189][ T29] panic+0x2dc/0x730 [ 270.761069][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 270.766695][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 270.771185][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 270.776720][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 270.782867][ T29] watchdog+0xf7c/0xf80 [ 270.787014][ T29] ? watchdog+0x1e1/0xf80 [ 270.791337][ T29] kthread+0x2fa/0x390 [ 270.795396][ T29] ? hungtask_pm_notify+0x90/0x90 [ 270.800412][ T29] ? kthread_blkcg+0xd0/0xd0 [ 270.804988][ T29] ret_from_fork+0x48/0x80 [ 270.809392][ T29] ? kthread_blkcg+0xd0/0xd0 [ 270.813971][ T29] ret_from_fork_asm+0x11/0x20 [ 270.818737][ T29] [ 270.822085][ T29] Kernel Offset: disabled [ 270.826394][ T29] Rebooting in 86400 seconds..