last executing test programs: 1.762233994s ago: executing program 1 (id=6964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0) 1.582075002s ago: executing program 1 (id=6969): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x1, 0x1, 0x3ff}) 1.453126738s ago: executing program 1 (id=6971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) 1.226259737s ago: executing program 1 (id=6975): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 1.094109072s ago: executing program 1 (id=6978): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r0, 0xc0285626, &(0x7f0000000000)={0xe, {0x2, 0x1b288141, 0xfffffffc, 0x8305}}) 1.082037243s ago: executing program 2 (id=6979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) 928.23012ms ago: executing program 1 (id=6982): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x441f, &(0x7f0000008940)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 898.710621ms ago: executing program 3 (id=6983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@flushpolicy={0x18, 0x12, 0x105, 0x1, 0x0, "", [@proto={0x5, 0x19, 0x33}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 875.191852ms ago: executing program 2 (id=6984): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000300)={'custom0\x00'}) 814.199015ms ago: executing program 0 (id=6985): mkdir(&(0x7f0000000280)='./file0\x00', 0x18a) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) 720.293239ms ago: executing program 2 (id=6986): setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 719.700459ms ago: executing program 0 (id=6987): syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x21, 0x0, [@empty]}]}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x38, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2180bb163c2b0c948be6273458325cc81dbf04b4760e3cfa5"}}}}}, 0x0) 694.41482ms ago: executing program 3 (id=6988): syz_mount_image$iso9660(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x3000404, &(0x7f0000001340)={[{@cruft}, {@hide}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x1, 0xab3, &(0x7f0000001380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 577.605655ms ago: executing program 2 (id=6989): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x350, 0x1d8, 0x1d8, 0x350, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xffff, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x122, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x4, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x9, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xe, 0xff, 0x0, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x80, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0xc}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7f, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0x90, 0x94}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 450.2008ms ago: executing program 0 (id=6990): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x1, 0x1, 0x7, 0x1, 0xff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x10) 442.047211ms ago: executing program 3 (id=6991): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0xfffffd57, 0x0, 0x0, 0x0, 0x0, 0x0}) 370.029184ms ago: executing program 2 (id=6992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 302.223107ms ago: executing program 0 (id=6993): r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r0, 0x110, 0x8001, 0x0, &(0x7f0000000280)) 262.770609ms ago: executing program 3 (id=6994): setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) 203.362741ms ago: executing program 0 (id=6995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 98.174006ms ago: executing program 2 (id=6996): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 98.005046ms ago: executing program 3 (id=6997): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x87, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0x0, 0x0, 0x0, @loopback, @private, {[@rr={0x7, 0x3, 0x6b}]}}}}}) 48.089168ms ago: executing program 0 (id=6998): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x0, &(0x7f0000000240)={[{@barrier}, {@autodefrag}, {@discard_sync}, {@compress_force}, {@clear_cache}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x2d, 0x37, 0x34, 0x67]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 0s ago: executing program 3 (id=6999): r0 = open(&(0x7f0000000040)='./bus\x00', 0x145442, 0x80) sendfile(r0, r0, 0x0, 0x800000009) kernel console output (not intermixed with test programs): 66) failed [ 411.622979][T17770] FAT-fs (loop1): Directory bread(block 67) failed [ 411.642550][T17764] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 411.674205][T17764] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 411.674292][T17770] FAT-fs (loop1): Directory bread(block 68) failed [ 411.704281][T17770] FAT-fs (loop1): Directory bread(block 69) failed [ 411.721290][T17770] FAT-fs (loop1): Directory bread(block 70) failed [ 411.734925][T17770] FAT-fs (loop1): Directory bread(block 71) failed [ 411.771784][T17770] FAT-fs (loop1): Directory bread(block 72) failed [ 411.793248][T17770] FAT-fs (loop1): Directory bread(block 73) failed [ 412.314129][ T1794] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 412.515910][ T1794] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 412.536019][ T1794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.566563][ T1794] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 412.604091][ T1794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.612186][ T1794] usb 3-1: Product: syz [ 412.633353][ T1794] usb 3-1: Manufacturer: syz [ 412.654175][ T1794] usb 3-1: SerialNumber: syz [ 412.667317][ T1794] usb 3-1: config 0 descriptor?? [ 412.687305][ T1794] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 412.702527][T17793] loop0: detected capacity change from 0 to 32768 [ 412.743660][T17793] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 412.849405][T17822] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5421'. [ 412.888187][T17793] XFS (loop0): Ending clean mount [ 412.959789][T17824] netlink: 'syz.1.5422': attribute type 12 has an invalid length. [ 412.973033][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 413.115224][ T1794] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 413.122117][ T1794] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 413.158196][ T1794] usb 3-1: USB disconnect, device number 25 [ 413.637929][T17828] loop1: detected capacity change from 0 to 40427 [ 413.700570][T17828] F2FS-fs (loop1): invalid crc value [ 413.731629][T17828] F2FS-fs (loop1): Found nat_bits in checkpoint [ 413.830056][T17828] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 414.435017][T17864] netlink: 'syz.3.5439': attribute type 2 has an invalid length. [ 414.658307][T17870] loop3: detected capacity change from 0 to 1024 [ 414.715453][T17870] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 414.787257][T17881] program syz.2.5445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.804452][T17870] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.5451: lblock 2 mapped to illegal pblock 2 (length 1) [ 414.853433][T17870] __quota_error: 1 callbacks suppressed [ 414.853451][T17870] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 414.916957][T17870] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.5451: lblock 0 mapped to illegal pblock 48 (length 1) [ 414.980176][T17870] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 415.022704][T17870] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5451: Failed to acquire dquot type 0 [ 415.039522][T17870] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 415.060603][T17870] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.5451: mark_inode_dirty error [ 415.080273][T17870] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 415.092625][T17870] EXT4-fs (loop3): 1 orphan inode deleted [ 415.105124][ T59] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.117576][T17894] loop1: detected capacity change from 0 to 64 [ 415.123103][T17870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.165413][ T59] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 415.203126][T17894] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 415.230113][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 0 [ 415.341017][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.355423][ T49] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.386431][T17900] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5454'. [ 415.396759][ T49] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 415.414395][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:3: Failed to release dquot type 0 [ 415.452580][ T5787] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 415.476543][ T5787] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 415.497421][ T5787] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 415.534182][ T1798] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 415.618469][T17909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5457'. [ 415.665067][T17911] xt_hashlimit: overflow, try lower: 18446744073709551614/15680 [ 415.717036][ T1798] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 415.733674][ T1798] usb 2-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 415.754721][ T1798] usb 2-1: config 0 has no interface number 0 [ 415.772725][ T1798] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 415.789037][ T1798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.797505][ T1798] usb 2-1: Product: syz [ 415.801701][ T1798] usb 2-1: Manufacturer: syz [ 415.815152][ T1798] usb 2-1: SerialNumber: syz [ 415.825504][ T1798] usb 2-1: config 0 descriptor?? [ 415.894541][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 416.052237][ T1798] qmi_wwan: probe of 2-1:0.207 failed with error -22 [ 416.074145][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 416.081087][ T1798] usb 2-1: USB disconnect, device number 29 [ 416.091764][ T9] usb 3-1: config 0 has an invalid interface number: 66 but max is 1 [ 416.120517][ T9] usb 3-1: config 0 has no interface number 1 [ 416.126975][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 416.145514][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 416.159584][ T9] usb 3-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 416.171469][ T9] usb 3-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 416.186191][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 416.193273][ T9] usb 3-1: config 0 interface 66 has no altsetting 0 [ 416.218630][ T9] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 416.234550][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 416.242699][ T9] usb 3-1: SerialNumber: syz [ 416.251937][ T9] usb 3-1: config 0 descriptor?? [ 416.261741][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 416.276394][ T9] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 416.459311][T17942] loop0: detected capacity change from 0 to 512 [ 416.479476][ T9] usb-storage 3-1:0.66: USB Mass Storage device detected [ 416.500574][ T9] usb-storage 3-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 416.520377][T17942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.542647][T17942] ext4 filesystem being mounted at /1386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.587809][ T9] usb 3-1: USB disconnect, device number 26 [ 416.633444][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.888029][T17960] Unsupported ieee802154 address type: 0 [ 416.938586][T17962] loop0: detected capacity change from 0 to 256 [ 416.965345][T17962] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 417.004360][ T1798] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 417.216919][ T1798] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 417.231740][ T1798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.274142][ T1798] usb 2-1: Product: syz [ 417.278411][ T1798] usb 2-1: Manufacturer: syz [ 417.283034][ T1798] usb 2-1: SerialNumber: syz [ 417.322444][ T1798] usb 2-1: config 0 descriptor?? [ 417.555042][ T1798] hso 2-1:0.0: Failed to find BULK IN ep [ 417.576303][ T1798] usb-storage 2-1:0.0: USB Mass Storage device detected [ 417.796457][T17994] loop3: detected capacity change from 0 to 256 [ 417.796841][ T1798] usb 2-1: USB disconnect, device number 30 [ 417.871085][T17994] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.962856][T17980] loop0: detected capacity change from 0 to 32768 [ 418.035296][T17980] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.149232][T17980] XFS (loop0): Ending clean mount [ 418.180948][T17980] XFS (loop0): Quotacheck needed: Please wait. [ 418.297356][T17980] XFS (loop0): Quotacheck: Done. [ 418.481305][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.481609][T18018] loop1: detected capacity change from 0 to 512 [ 418.546520][T18018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.581574][T18018] ext4 filesystem being mounted at /1360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.708183][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.878151][T18033] sctp: [Deprecated]: syz.1.5509 (pid 18033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.878151][T18033] Use struct sctp_sack_info instead [ 419.319081][T18053] xt_bpf: check failed: parse error [ 419.459645][T18041] loop1: detected capacity change from 0 to 32768 [ 419.495247][T18041] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.524100][ T1798] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 419.572443][T18041] XFS (loop1): Ending clean mount [ 419.603048][T18041] XFS (loop1): Quotacheck needed: Please wait. [ 419.721460][ T1798] usb 3-1: Using ep0 maxpacket: 32 [ 419.764093][ T1798] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 419.785571][ T1798] usb 3-1: config 0 has no interface number 0 [ 419.808916][ T1798] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 419.821174][ T1798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.839523][ T1798] usb 3-1: Product: syz [ 419.843784][ T1798] usb 3-1: Manufacturer: syz [ 419.850640][ T1798] usb 3-1: SerialNumber: syz [ 419.856998][T18041] XFS (loop1): Quotacheck: Done. [ 419.877127][ T1798] usb 3-1: config 0 descriptor?? [ 419.889898][ T1798] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 419.989555][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.140650][T18075] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5526'. [ 420.322447][ T1798] gspca_sn9c2028: read1 error -71 [ 420.337297][ T1798] gspca_sn9c2028: read1 error -71 [ 420.354704][ T1798] sn9c2028: probe of 3-1:0.119 failed with error -71 [ 420.370163][ T1798] usb 3-1: USB disconnect, device number 27 [ 420.581300][T18089] loop1: detected capacity change from 0 to 764 [ 420.630379][T18089] rock: directory entry would overflow storage [ 420.638348][T18089] rock: sig=0x4f50, size=4, remaining=3 [ 420.644290][T18089] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 421.575432][ T28] audit: type=1326 audit(1764166185.015:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 421.638561][ T28] audit: type=1326 audit(1764166185.015:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 421.671812][ T28] audit: type=1326 audit(1764166185.045:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 421.694540][ T28] audit: type=1326 audit(1764166185.045:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 421.717546][ T28] audit: type=1326 audit(1764166185.045:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18128 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 422.191822][T18158] loop3: detected capacity change from 0 to 512 [ 422.248371][T18158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.329026][T18165] loop2: detected capacity change from 0 to 1024 [ 422.459179][T18169] Unsupported ieee802154 address type: 0 [ 422.478791][T18171] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.5571'. [ 422.501546][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.513472][T18171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.662225][T18175] dlm: no local IP address has been set [ 422.681592][T18175] dlm: cannot start dlm midcomms -107 [ 422.752597][T18178] loop3: detected capacity change from 0 to 1764 [ 422.900652][T18183] loop0: detected capacity change from 0 to 256 [ 422.919516][T18183] exfat: Deprecated parameter 'namecase' [ 422.946887][T18183] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 423.171405][T18195] ipt_rpfilter: unknown options [ 423.566472][T18207] Unsupported ieee802154 address type: 0 [ 423.637520][T18205] loop0: detected capacity change from 0 to 4096 [ 423.647465][T18190] loop3: detected capacity change from 0 to 32768 [ 423.666089][T18205] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 423.760489][T18190] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.868784][T18205] ntfs3: loop0: failed to convert "c46c" to koi8-r [ 423.924686][T18224] loop2: detected capacity change from 0 to 1024 [ 423.941549][T18224] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 423.963284][T18224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 423.987795][T18224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.027856][T18190] XFS (loop3): Ending clean mount [ 424.079422][T18190] XFS (loop3): Quotacheck needed: Please wait. [ 424.091123][T18227] xt_hashlimit: size too large, truncated to 1048576 [ 424.172046][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.210684][T18190] XFS (loop3): Quotacheck: Done. [ 424.351901][T18231] --map-set only usable from mangle table [ 424.456061][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.471545][T18233] loop2: detected capacity change from 0 to 64 [ 425.134221][ T28] audit: type=1326 audit(1764166188.565:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18251 comm="syz.0.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 425.199372][ T28] audit: type=1326 audit(1764166188.565:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18251 comm="syz.0.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 425.268415][ T28] audit: type=1326 audit(1764166188.565:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18251 comm="syz.0.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 425.309230][T18261] misc userio: Invalid payload size [ 425.315633][ T28] audit: type=1326 audit(1764166188.565:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18251 comm="syz.0.5613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 425.560243][T18271] loop1: detected capacity change from 0 to 256 [ 425.643487][T18273] netlink: 'syz.0.5616': attribute type 6 has an invalid length. [ 425.681896][T18271] FAT-fs (loop1): Directory bread(block 64) failed [ 425.700839][T18271] FAT-fs (loop1): Directory bread(block 65) failed [ 425.719517][T18271] FAT-fs (loop1): Directory bread(block 66) failed [ 425.746570][T18271] FAT-fs (loop1): Directory bread(block 67) failed [ 425.753257][T18271] FAT-fs (loop1): Directory bread(block 68) failed [ 425.776374][T18271] FAT-fs (loop1): Directory bread(block 69) failed [ 425.783060][T18271] FAT-fs (loop1): Directory bread(block 70) failed [ 425.806475][T18271] FAT-fs (loop1): Directory bread(block 71) failed [ 425.813177][T18271] FAT-fs (loop1): Directory bread(block 72) failed [ 425.844131][T18271] FAT-fs (loop1): Directory bread(block 73) failed [ 425.900233][T18271] syz.1.5614: attempt to access beyond end of device [ 425.900233][T18271] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 426.606813][T18308] loop3: detected capacity change from 0 to 128 [ 426.699986][T18308] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.745245][T18308] ext4 filesystem being mounted at /1435/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.823230][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5636'. [ 426.864485][T18316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.950539][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.960910][T18323] loop1: detected capacity change from 0 to 128 [ 426.988178][T18323] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.050293][T18323] ext4 filesystem being mounted at /1394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.200062][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.304215][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 427.484085][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 427.489702][ T8] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 427.498493][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.506631][ T8] usb 4-1: config 0 has no interface number 0 [ 427.512786][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.522593][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.533463][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.541568][ T8] usb 4-1: config 0 has no interface number 0 [ 427.547758][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.558012][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.569247][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.577442][ T8] usb 4-1: config 0 has no interface number 0 [ 427.583527][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.593329][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.604109][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.612112][ T8] usb 4-1: config 0 has no interface number 0 [ 427.618268][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.628037][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.638851][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.646939][ T8] usb 4-1: config 0 has no interface number 0 [ 427.653541][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.663830][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.674875][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.682879][ T8] usb 4-1: config 0 has no interface number 0 [ 427.689017][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.698897][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.709771][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.717856][ T8] usb 4-1: config 0 has no interface number 0 [ 427.723941][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.733704][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.744916][ T8] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 427.752921][ T8] usb 4-1: config 0 has no interface number 0 [ 427.759085][ T8] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.769243][ T8] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.781072][ T8] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 427.790204][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.798301][ T8] usb 4-1: Product: syz [ 427.802466][ T8] usb 4-1: Manufacturer: syz [ 427.807128][ T8] usb 4-1: SerialNumber: syz [ 427.813345][ T8] usb 4-1: config 0 descriptor?? [ 427.820223][ T8] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 428.031113][ T8] etas_es58x 4-1:0.2: could not parse product info: 'à …' [ 428.296002][ T8] usb 4-1: USB disconnect, device number 25 [ 428.303318][ T8] etas_es58x 4-1:0.2: Disconnecting syz syz [ 428.882553][T18360] loop0: detected capacity change from 0 to 2048 [ 428.918789][T18360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.933344][T18401] loop2: detected capacity change from 0 to 2048 [ 429.982250][T18401] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 430.034919][T18401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.341255][T18417] loop2: detected capacity change from 0 to 2048 [ 430.363200][T18417] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504 [ 430.420495][T18417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.814673][T18437] netlink: 5064 bytes leftover after parsing attributes in process `syz.1.5690'. [ 431.402830][T18468] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5697'. [ 431.607563][T18479] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 431.664174][ T5831] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 431.730179][T18484] loop2: detected capacity change from 0 to 2048 [ 431.760873][T18484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.864140][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 431.877468][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 431.906489][ T5831] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 431.925991][ T5831] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 431.944794][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.955089][ T5831] usb 2-1: Product: syz [ 431.959368][ T5831] usb 2-1: Manufacturer: syz [ 431.966972][ T5831] usb 2-1: SerialNumber: syz [ 432.202385][ T5831] usb 2-1: Not enough endpoints found in device, aborting! [ 432.237284][T18500] loop0: detected capacity change from 0 to 256 [ 432.259889][T18500] exfat: Deprecated parameter 'utf8' [ 432.346659][T18500] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 432.450046][ T1798] usb 2-1: USB disconnect, device number 31 [ 432.556809][T18512] overlayfs: unescaped trailing colons in lowerdir mount option. [ 432.664446][ T5831] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 432.756800][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5731'. [ 432.866015][ T5831] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 432.877742][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.891699][ T5831] usb 3-1: config 0 has no interface number 0 [ 432.897484][T18524] loop3: detected capacity change from 0 to 4096 [ 432.907562][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 432.920097][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 432.921912][T18524] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 432.932413][ T5831] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.955143][ T5831] usb 3-1: config 0 interface 52 has no altsetting 0 [ 432.965486][ T5831] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 432.975403][ T5831] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 432.983522][ T5831] usb 3-1: Manufacturer: syz [ 433.018783][ T5831] usb 3-1: config 0 descriptor?? [ 433.037442][T18524] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 433.056987][ T5831] hub 3-1:0.52: bad descriptor, ignoring hub [ 433.063029][ T5831] hub: probe of 3-1:0.52 failed with error -5 [ 433.163128][T18530] loop1: detected capacity change from 0 to 4096 [ 433.186891][T18530] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 433.256352][ T5831] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 433.271545][ T5831] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 433.283319][T18530] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 433.313338][T18533] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.379015][T18530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 433.401812][T18530] Remounting filesystem read-only [ 433.477208][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 433.490792][ T5785] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 433.499033][T18535] netlink: 5064 bytes leftover after parsing attributes in process `syz.3.5729'. [ 433.510499][ T5785] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 433.517667][ T5785] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 433.534510][ T5785] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 433.551955][ T5785] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 433.566342][ T5785] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 433.587316][ T5831] usb 3-1: USB disconnect, device number 28 [ 433.609821][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 433.616905][ T5785] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 433.624896][ T5785] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 433.632017][ T5785] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 433.642230][ T5785] NILFS (loop1): discard dirty page: offset=270336, ino=3 [ 433.649794][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=4096 [ 434.100827][T18549] netlink: 772 bytes leftover after parsing attributes in process `syz.2.5736'. [ 434.306519][T18555] netlink: 'syz.0.5739': attribute type 12 has an invalid length. [ 434.768888][T18545] loop3: detected capacity change from 0 to 32768 [ 434.844276][T18545] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 434.904681][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 434.991040][T18545] XFS (loop3): Ending clean mount [ 435.103083][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 435.116387][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 435.131609][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.158998][ T9] usb 3-1: config 0 descriptor?? [ 435.168932][ T9] cp210x 3-1:0.0: cp210x converter detected [ 435.185598][ T1794] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 435.381066][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 435.382311][ T1794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.394057][ T9] cp210x 3-1:0.0: querying part number failed [ 435.423447][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 435.430945][ T1794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.458772][T18591] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 435.467040][ T1794] usb 2-1: config 1 interface 1 has no altsetting 1 [ 435.479457][ T1794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.495157][ T1794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.496285][T18591] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 435.509328][ T1794] usb 2-1: Product: syz [ 435.511923][T18593] loop3: detected capacity change from 0 to 4096 [ 435.514886][ T1794] usb 2-1: Manufacturer: syz [ 435.522866][T18593] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 435.538537][T18593] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 435.547053][ T1794] usb 2-1: SerialNumber: syz [ 435.572792][ T1794] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 435.592542][ T1798] usb 3-1: USB disconnect, device number 29 [ 435.604442][T18594] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 435.620298][ T1794] cdc_ncm 2-1:1.0: bind() failure [ 435.626027][ T1798] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 435.644992][ T1794] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 435.652500][ T1798] cp210x 3-1:0.0: device disconnected [ 435.661712][ T1794] cdc_ncm 2-1:1.1: bind() failure [ 435.722677][T18593] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 435.742310][T18593] Remounting filesystem read-only [ 435.847306][ T1794] usb 2-1: USB disconnect, device number 32 [ 435.853493][ T5787] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 435.863707][ T5787] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 435.879425][ T5787] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 435.887335][ T5787] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 435.896657][ T5787] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 435.903697][ T5787] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 435.911306][ T5787] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 435.923015][ T5787] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 435.929785][ T5787] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 435.937512][ T5787] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 435.944569][ T5787] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 435.951882][ T5787] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 435.959152][ T5787] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 435.991446][ T28] audit: type=1326 audit(1764166199.425:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18599 comm="syz.0.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 436.048632][ T28] audit: type=1326 audit(1764166199.455:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18599 comm="syz.0.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 436.100033][ T28] audit: type=1326 audit(1764166199.465:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18599 comm="syz.0.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 436.127465][ T28] audit: type=1326 audit(1764166199.465:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18599 comm="syz.0.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 436.188724][ T28] audit: type=1326 audit(1764166199.465:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18599 comm="syz.0.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7718f749 code=0x7ffc0000 [ 436.200761][T18606] loop3: detected capacity change from 0 to 256 [ 436.250273][T18608] tipc: Can't bind to reserved service type 2 [ 436.273661][T18606] FAT-fs (loop3): Directory bread(block 64) failed [ 436.284240][T18606] FAT-fs (loop3): Directory bread(block 65) failed [ 436.301164][T18606] FAT-fs (loop3): Directory bread(block 66) failed [ 436.317252][T18606] FAT-fs (loop3): Directory bread(block 67) failed [ 436.334271][T18606] FAT-fs (loop3): Directory bread(block 68) failed [ 436.363683][T18606] FAT-fs (loop3): Directory bread(block 69) failed [ 436.371215][T18606] FAT-fs (loop3): Directory bread(block 70) failed [ 436.380728][T18606] FAT-fs (loop3): Directory bread(block 71) failed [ 436.394225][T18606] FAT-fs (loop3): Directory bread(block 72) failed [ 436.400798][T18606] FAT-fs (loop3): Directory bread(block 73) failed [ 436.946757][T18630] SET target dimension over the limit! [ 437.523071][T18655] SET target dimension over the limit! [ 437.687539][T18663] loop2: detected capacity change from 0 to 256 [ 437.729866][T18667] bond0: entered promiscuous mode [ 437.739346][T18663] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 437.752526][T18667] bond0: entered allmulticast mode [ 438.027629][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5795'. [ 438.254534][T18690] openvswitch: netlink: Actions may not be safe on all matching packets [ 438.418768][T18698] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 438.441969][T18698] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 438.698768][ T28] audit: type=1326 audit(1764166202.125:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.1.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 438.760344][ T28] audit: type=1326 audit(1764166202.155:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.1.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 438.830224][ T28] audit: type=1326 audit(1764166202.165:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.1.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 438.892702][ T28] audit: type=1326 audit(1764166202.165:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.1.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 438.957288][ T28] audit: type=1326 audit(1764166202.165:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18711 comm="syz.1.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 439.154131][ T8] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 439.204509][ T1794] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 439.335719][T18742] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 439.346503][ T8] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 439.355236][ T8] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 439.367158][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.377732][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 439.384615][ T1794] usb 3-1: Using ep0 maxpacket: 32 [ 439.389239][ T8] usb 1-1: config 1 has no interface number 0 [ 439.395308][ T1794] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 439.398413][ T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 439.408302][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.416488][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.425671][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.438978][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 439.444567][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.457644][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.467630][ T1798] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 439.477075][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.485629][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.491747][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.501567][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.512641][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.520876][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.527082][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.536908][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.547775][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.556216][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.562350][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.572161][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.583284][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.591364][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.597572][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.607374][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.618581][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.626910][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.633201][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.641582][ T8] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 439.642962][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.651587][ T8] snd_usb_pod 1-1:1.1: invalid control EP [ 439.664077][ T1798] usb 4-1: Using ep0 maxpacket: 8 [ 439.668249][ T8] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 439.676811][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.678676][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 439.687593][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.700323][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.710400][ T1798] usb 4-1: unable to get BOS descriptor or descriptor too short [ 439.718693][ T8] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 439.718737][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.738716][ T1798] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 439.748850][ T1798] usb 4-1: config 8 interface 0 has no altsetting 0 [ 439.756638][ T1794] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.765489][ T1794] usb 3-1: config 0 has no interface number 0 [ 439.771838][ T1794] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.782281][ T1798] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 439.791454][ T1794] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.801380][ T1798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.809536][ T1798] usb 4-1: Product: syz [ 439.813857][ T1798] usb 4-1: Manufacturer: syz [ 439.818855][ T1798] usb 4-1: SerialNumber: syz [ 439.827729][T18735] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 439.835735][ T1794] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 439.845072][ T1794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.853122][ T1794] usb 3-1: Product: syz [ 439.858962][ T1794] usb 3-1: Manufacturer: syz [ 439.863600][ T1794] usb 3-1: SerialNumber: syz [ 439.871778][ T1794] usb 3-1: config 0 descriptor?? [ 439.879402][ T1794] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 439.883304][ T8] usb 1-1: USB disconnect, device number 27 [ 440.052042][ T1798] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 440.059243][ T1798] usb 4-1: selecting invalid altsetting 0 [ 440.083144][ T1798] usb 4-1: USB disconnect, device number 26 [ 440.100741][ T1794] etas_es58x 3-1:0.2: could not parse product info: 'à …' [ 440.136872][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.219869][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.355135][ T5831] usb 3-1: USB disconnect, device number 30 [ 440.368587][ T5831] etas_es58x 3-1:0.2: Disconnecting syz syz [ 440.496452][T18751] bond0: entered promiscuous mode [ 440.513433][T18751] bond0: entered allmulticast mode [ 440.694840][T18761] netlink: 'syz.1.5830': attribute type 2 has an invalid length. [ 440.907204][T18772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5833'. [ 441.255130][T18786] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 441.342508][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5842'. [ 441.574157][ T1794] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 441.610996][T18805] loop2: detected capacity change from 0 to 8 [ 441.650160][T18809] loop1: detected capacity change from 0 to 256 [ 441.741979][T18809] FAT-fs (loop1): Directory bread(block 64) failed [ 441.766453][ T1794] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.784867][T18809] FAT-fs (loop1): Directory bread(block 65) failed [ 441.791996][T18809] FAT-fs (loop1): Directory bread(block 66) failed [ 441.799769][ T1794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.851911][ T1794] usb 1-1: config 0 descriptor?? [ 441.864264][T18809] FAT-fs (loop1): Directory bread(block 67) failed [ 441.868690][ T1794] cp210x 1-1:0.0: cp210x converter detected [ 441.876340][T18809] FAT-fs (loop1): Directory bread(block 68) failed [ 441.883228][T18809] FAT-fs (loop1): Directory bread(block 69) failed [ 441.911801][T18809] FAT-fs (loop1): Directory bread(block 70) failed [ 441.919427][T18809] FAT-fs (loop1): Directory bread(block 71) failed [ 441.927646][T18809] FAT-fs (loop1): Directory bread(block 72) failed [ 441.940925][T18809] FAT-fs (loop1): Directory bread(block 73) failed [ 442.096582][ T1794] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 442.116347][ T1794] cp210x 1-1:0.0: querying part number failed [ 442.146745][ T1794] usb 1-1: cp210x converter now attached to ttyUSB0 [ 442.260537][T18825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.359250][ T1794] usb 1-1: USB disconnect, device number 28 [ 442.375734][ T1794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 442.413820][ T1794] cp210x 1-1:0.0: device disconnected [ 442.436338][T18831] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5857'. [ 443.186048][T18863] Cannot find del_set index 6 as target [ 443.244377][ T1790] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 443.288755][ T1794] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 443.363695][T18871] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5878'. [ 443.460826][ T1790] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.469941][ T1790] usb 4-1: config 0 has no interface number 0 [ 443.478288][ T1794] usb 1-1: Using ep0 maxpacket: 8 [ 443.483523][ T1790] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 443.496952][ T1790] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 443.507141][ T1794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 443.515617][ T1790] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.525980][ T1794] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 443.544087][ T1794] usb 1-1: config 8 interface 0 has no altsetting 0 [ 443.553095][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.568580][ T1794] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 443.586056][ T1794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.589973][T18879] netlink: 'syz.2.5881': attribute type 2 has an invalid length. [ 443.606788][ T1790] usb 4-1: config 0 descriptor?? [ 443.626901][ T1794] usb 1-1: Product: syz [ 443.631115][ T1794] usb 1-1: Manufacturer: syz [ 443.636391][ T1790] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 443.654120][ T1794] usb 1-1: SerialNumber: syz [ 443.667330][T18854] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 443.839372][T18887] binder: 18885:18887 ioctl c018620c 200000000380 returned -22 [ 443.865143][T18851] iowarrior 4-1:0.1: Error -90 while submitting URB [ 443.876722][ T8] usb 4-1: USB disconnect, device number 27 [ 443.937038][ T1794] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 443.967175][ T1794] usb 1-1: selecting invalid altsetting 0 [ 444.019867][T18891] loop1: detected capacity change from 0 to 1764 [ 444.021779][ T1794] usb 1-1: USB disconnect, device number 29 [ 444.068243][T18891] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 444.161571][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.236729][T18895] loop2: detected capacity change from 0 to 2048 [ 444.248808][T18895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.486466][T18901] netlink: 'syz.3.5890': attribute type 2 has an invalid length. [ 444.987074][T18921] loop1: detected capacity change from 0 to 128 [ 445.006517][T18921] EXT4-fs (loop1): Test dummy encryption mode enabled [ 445.040219][T18921] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.077552][T18924] loop2: detected capacity change from 0 to 512 [ 445.087221][T18924] EXT4-fs: Ignoring removed oldalloc option [ 445.097379][T18924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 445.107749][T18921] ext4 filesystem being mounted at /1458/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 445.178803][T18924] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.5904: invalid indirect mapped block 4294967295 (level 0) [ 445.244164][T18924] EXT4-fs (loop2): Remounting filesystem read-only [ 445.251514][T18924] EXT4-fs (loop2): 1 orphan inode deleted [ 445.264097][T18924] EXT4-fs (loop2): 1 truncate cleaned up [ 445.271105][T18924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.286699][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.320725][T18934] loop3: detected capacity change from 0 to 4096 [ 445.336597][T18934] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 445.409512][T18934] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 445.477118][T18934] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 445.486829][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.534481][T18934] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 445.602663][T18934] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 445.652715][T18934] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 445.710024][T18942] loop0: detected capacity change from 0 to 256 [ 445.743806][T18934] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 445.775828][T18934] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 445.856276][T18934] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 445.884219][T18934] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 445.968452][T18934] ntfs: volume version 3.1. [ 447.454368][T19006] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5941'. [ 447.494157][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'. [ 447.514157][T19006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5941'. [ 447.562644][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5945'. [ 447.689875][T19018] loop3: detected capacity change from 0 to 128 [ 447.714191][T19018] EXT4-fs (loop3): Test dummy encryption mode enabled [ 447.761798][T19018] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.847833][T19018] ext4 filesystem being mounted at /1507/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 447.981220][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.368344][T19017] loop1: detected capacity change from 0 to 32768 [ 448.447934][T19017] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 448.597411][T19017] XFS (loop1): Ending clean mount [ 448.767742][T19056] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 448.784718][ T5785] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 449.006166][T19040] loop0: detected capacity change from 0 to 32768 [ 449.162535][T19040] ialloc: diAlloc returned -5! [ 449.350983][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5969'. [ 450.018012][T19105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5986'. [ 450.155480][T19111] loop3: detected capacity change from 0 to 512 [ 450.215358][T19111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.240279][T19111] ext4 filesystem being mounted at /1519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.384390][ T1790] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 450.446661][T19119] loop2: detected capacity change from 0 to 4096 [ 450.481848][T19119] __ntfs_error: 15 callbacks suppressed [ 450.481865][T19119] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 450.507972][T19119] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 450.535361][T19119] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 450.550508][T19119] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 450.574586][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.595184][ T1790] usb 1-1: Using ep0 maxpacket: 32 [ 450.634871][T19119] ntfs: volume version 3.1. [ 450.644482][ T1790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 450.682274][ T1790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 450.700332][T19119] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 450.713373][T19119] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 450.735558][ T1790] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 450.763918][ T1790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.788790][ T1790] usb 1-1: Product: syz [ 450.793628][ T1790] usb 1-1: Manufacturer: syz [ 450.809500][ T1790] usb 1-1: SerialNumber: syz [ 450.830812][ T1790] usb 1-1: config 0 descriptor?? [ 450.858094][ T1790] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 450.967206][T19137] loop2: detected capacity change from 0 to 256 [ 451.001699][T19137] exfat: Deprecated parameter 'namecase' [ 451.059254][ T28] audit: type=1326 audit(1764166214.495:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19140 comm="syz.3.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0763b8f749 code=0x7ffc0000 [ 451.115433][T19137] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 451.146558][ T28] audit: type=1326 audit(1764166214.495:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19140 comm="syz.3.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0763b8f749 code=0x7ffc0000 [ 451.174372][ T1790] usb 1-1: USB disconnect, device number 30 [ 451.213147][ T28] audit: type=1326 audit(1764166214.495:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19140 comm="syz.3.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0763b8f749 code=0x7ffc0000 [ 451.283491][ T28] audit: type=1326 audit(1764166214.495:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19140 comm="syz.3.6002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0763b8f749 code=0x7ffc0000 [ 451.515603][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6008'. [ 451.532659][T19151] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 451.566319][T19153] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6009'. [ 451.796219][T19145] loop1: detected capacity change from 0 to 32768 [ 451.852114][T19145] ialloc: diAlloc returned -5! [ 451.984196][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 452.028084][T19163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6014'. [ 452.178892][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 452.209097][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.229873][ T9] usb 3-1: Product: syz [ 452.239831][ T9] usb 3-1: Manufacturer: syz [ 452.253357][ T9] usb 3-1: SerialNumber: syz [ 452.272682][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 452.294659][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.397530][T19155] loop3: detected capacity change from 0 to 32768 [ 452.464513][T19155] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 452.574386][T19155] XFS (loop3): Ending clean mount [ 452.755781][ T9] usb 3-1: USB disconnect, device number 31 [ 452.806874][ T5787] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 452.928306][T19192] xt_policy: too many policy elements [ 453.253178][T19204] netlink: 'syz.1.6030': attribute type 49 has an invalid length. [ 453.262851][T19204] netlink: 'syz.1.6030': attribute type 49 has an invalid length. [ 453.344118][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 453.351635][ T8] ath9k_htc: Failed to initialize the device [ 453.391699][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 454.299036][T19251] overlayfs: disabling nfs_export due to verity=require [ 454.308762][T19251] overlayfs: conflicting options: userxattr,verity=require [ 454.420928][T19257] netlink: 'syz.3.6053': attribute type 5 has an invalid length. [ 454.562302][T19265] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6060'. [ 454.779341][ T1794] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 454.984859][ T1794] usb 2-1: Using ep0 maxpacket: 32 [ 455.012191][ T1794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 455.030761][ T1794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 455.050193][ T1794] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 455.064140][ T1794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.082512][ T1794] usb 2-1: Product: syz [ 455.092656][ T1794] usb 2-1: Manufacturer: syz [ 455.102792][ T1794] usb 2-1: SerialNumber: syz [ 455.117555][ T1794] usb 2-1: config 0 descriptor?? [ 455.148196][ T1794] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 455.172474][T19288] loop0: detected capacity change from 0 to 4096 [ 455.211175][T19292] loop3: detected capacity change from 0 to 16 [ 455.227993][T19288] ntfs: volume version 3.1. [ 455.239473][T19292] erofs: (device loop3): mounted with root inode @ nid 36. [ 455.285369][T19292] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 455.320253][T19292] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851] [ 455.353891][T19292] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 455.472346][ T1794] usb 2-1: USB disconnect, device number 33 [ 455.597689][T19298] netlink: 'syz.3.6075': attribute type 49 has an invalid length. [ 455.632272][T19298] netlink: 'syz.3.6075': attribute type 49 has an invalid length. [ 455.979310][T19315] netlink: 'syz.2.6081': attribute type 5 has an invalid length. [ 456.054568][ T5795] Bluetooth: hci0: command tx timeout [ 456.093806][T19317] loop0: detected capacity change from 0 to 16 [ 456.141287][T19317] erofs: (device loop0): mounted with root inode @ nid 36. [ 456.211459][T19317] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 456.233441][T19317] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -10 in[58, 4038] out[1851] [ 456.285560][T19319] loop2: detected capacity change from 0 to 4096 [ 456.292067][T19317] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 456.303627][T19319] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 456.355979][T19327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.402599][T19319] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 456.596691][T19335] overlayfs: disabling nfs_export due to verity=require [ 456.616638][T19335] overlayfs: conflicting options: userxattr,verity=require [ 456.777194][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 456.777209][ T28] audit: type=1326 audit(1764166220.215:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 456.849462][ T28] audit: type=1326 audit(1764166220.245:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 456.919674][ T28] audit: type=1326 audit(1764166220.255:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 456.941142][T19344] loop3: detected capacity change from 0 to 4096 [ 456.976683][ T28] audit: type=1326 audit(1764166220.255:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 457.051174][T19352] ./file0: Can't open blockdev [ 457.058744][ T28] audit: type=1326 audit(1764166220.255:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.1.6096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66db18f749 code=0x7ffc0000 [ 457.077023][T19344] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 457.197680][T19344] ntfs3: loop3: Failed to load $Extend (-22). [ 457.203814][T19344] ntfs3: loop3: Failed to initialize $Extend. [ 457.474970][T19365] loop1: detected capacity change from 0 to 512 [ 457.579225][T19365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.639594][T19365] ext4 filesystem being mounted at /1513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.837449][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.895980][T19357] loop0: detected capacity change from 0 to 32768 [ 457.940239][T19357] (syz.0.6105,19357,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 457.965367][T19357] (syz.0.6105,19357,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 458.041561][T19357] JBD2: Ignoring recovery information on journal [ 458.165931][T19357] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 458.255285][T19397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6121'. [ 458.281774][T19397] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6121'. [ 458.324979][T19397] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6121'. [ 458.335798][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 458.351543][T19400] netlink: 'syz.2.6123': attribute type 1 has an invalid length. [ 458.363062][T19397] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 458.385944][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6123'. [ 458.874226][ T1794] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 458.905105][T19422] xt_bpf: check failed: parse error [ 459.060717][ T1794] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 459.082245][ T1794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.087225][T19429] loop2: detected capacity change from 0 to 16 [ 459.100758][ T1794] usb 4-1: Product: syz [ 459.114918][T19429] erofs: (device loop2): mounted with root inode @ nid 36. [ 459.115314][ T1794] usb 4-1: Manufacturer: syz [ 459.148582][ T1794] usb 4-1: SerialNumber: syz [ 459.166112][ T1794] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 459.185690][ T1798] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.398107][T19439] loop2: detected capacity change from 0 to 2048 [ 459.446319][T19439] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 459.504863][T19439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.576357][T19439] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 459.707508][ T1790] usb 4-1: USB disconnect, device number 28 [ 459.980752][T19459] loop0: detected capacity change from 0 to 16 [ 459.997918][T19459] erofs: (device loop0): mounted with root inode @ nid 36. [ 460.121811][T19464] tmpfs: Bad value for 'mpol' [ 460.216148][ T1798] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 460.223231][ T1798] ath9k_htc: Failed to initialize the device [ 460.254263][T19471] xt_bpf: check failed: parse error [ 460.263331][ T1790] usb 4-1: ath9k_htc: USB layer deinitialized [ 460.313881][T19470] loop0: detected capacity change from 0 to 2048 [ 460.342499][T19475] loop3: detected capacity change from 0 to 512 [ 460.353328][T19470] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 460.363451][T19475] EXT4-fs: Ignoring removed nobh option [ 460.404214][T19476] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.426329][T19475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.480053][T19475] ext4 filesystem being mounted at /1558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.667735][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.866492][T19491] netlink: 'syz.1.6166': attribute type 2 has an invalid length. [ 460.989103][T19499] loop1: detected capacity change from 0 to 256 [ 461.404209][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 461.616236][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 461.644340][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.681746][ T8] usb 1-1: config 0 descriptor?? [ 461.733311][T19535] loop2: detected capacity change from 0 to 512 [ 461.751477][T19535] EXT4-fs: Ignoring removed nobh option [ 461.760115][T19537] loop3: detected capacity change from 0 to 2048 [ 461.807222][T19537] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 461.875878][T19537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.910078][T19535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.944996][T19537] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 461.968016][T19535] ext4 filesystem being mounted at /1528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.109267][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.133617][ T8] ath6kl: Failed to read usb control message: -71 [ 462.142639][ T8] ath6kl: Unable to read the bmi data from the device: -71 [ 462.159994][ T8] ath6kl: Unable to recv target info: -71 [ 462.169393][ T8] ath6kl: Failed to init ath6kl core: -71 [ 462.177742][ T8] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 462.200893][ T8] usb 1-1: USB disconnect, device number 31 [ 462.544247][ T1790] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 462.573863][T19560] loop2: detected capacity change from 0 to 2048 [ 462.599441][T19560] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.639043][T19561] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.752776][ T1790] usb 2-1: Using ep0 maxpacket: 16 [ 462.767430][ T1790] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 462.794790][ T1790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.823815][ T1790] usb 2-1: config 0 has no interface number 0 [ 462.840511][ T1790] usb 2-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 462.872321][ T1790] usb 2-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 462.904348][ T1790] usb 2-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.923241][ T1790] usb 2-1: config 0 interface 223 has no altsetting 0 [ 462.934418][ T1790] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 462.953814][ T1790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.962524][ T1790] usb 2-1: Product: syz [ 462.984546][ T1790] usb 2-1: Manufacturer: syz [ 462.991294][ T1790] usb 2-1: SerialNumber: syz [ 463.006524][ T1790] usb 2-1: config 0 descriptor?? [ 463.221099][T19583] loop3: detected capacity change from 0 to 128 [ 463.248137][T19583] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 463.433013][ T1790] usb 2-1: USB disconnect, device number 34 [ 463.496564][T19591] loop0: detected capacity change from 0 to 256 [ 463.551832][ T5787] sysv_free_block: flc_count > flc_size [ 463.584108][ T5787] sysv_free_block: flc_count > flc_size [ 463.595061][ T5787] sysv_free_block: flc_count > flc_size [ 463.600694][ T5787] sysv_free_block: flc_count > flc_size [ 463.623381][ T5787] sysv_free_block: flc_count > flc_size [ 463.648759][ T5787] sysv_free_block: flc_count > flc_size [ 463.664606][ T5787] sysv_free_block: flc_count > flc_size [ 463.670607][ T5787] sysv_free_block: flc_count > flc_size [ 463.678516][ T5787] sysv_free_block: flc_count > flc_size [ 463.684843][ T5787] sysv_free_block: flc_count > flc_size [ 463.691084][ T5787] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 464.163574][T19615] loop1: detected capacity change from 0 to 256 [ 464.185433][T19615] exfat: Deprecated parameter 'namecase' [ 464.201458][T19615] exfat: Deprecated parameter 'utf8' [ 464.226322][T19615] exfat: Deprecated parameter 'utf8' [ 464.231686][T19615] exfat: Deprecated parameter 'namecase' [ 464.247944][T19617] loop3: detected capacity change from 0 to 256 [ 464.329051][T19615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 464.353529][T19617] FAT-fs (loop3): Directory bread(block 64) failed [ 464.364092][T19617] FAT-fs (loop3): Directory bread(block 65) failed [ 464.370790][T19617] FAT-fs (loop3): Directory bread(block 66) failed [ 464.404465][T19603] loop2: detected capacity change from 0 to 32768 [ 464.411629][T19617] FAT-fs (loop3): Directory bread(block 67) failed [ 464.429907][T19617] FAT-fs (loop3): Directory bread(block 68) failed [ 464.446770][T19617] FAT-fs (loop3): Directory bread(block 69) failed [ 464.459666][T19603] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 464.474250][T19617] FAT-fs (loop3): Directory bread(block 70) failed [ 464.482520][T19617] FAT-fs (loop3): Directory bread(block 71) failed [ 464.489783][T19617] FAT-fs (loop3): Directory bread(block 72) failed [ 464.496678][T19617] FAT-fs (loop3): Directory bread(block 73) failed [ 464.525878][T19603] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 464.637190][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6228'. [ 464.654111][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6228'. [ 464.709557][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 464.979025][T19613] loop0: detected capacity change from 0 to 32768 [ 465.033626][T19634] netlink: 'syz.2.6229': attribute type 3 has an invalid length. [ 465.035464][T19613] JBD2: Ignoring recovery information on journal [ 465.041860][T19634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6229'. [ 465.169371][T19613] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 465.193739][T19640] netlink: 'syz.1.6234': attribute type 4 has an invalid length. [ 465.341042][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 465.561828][T19652] tmpfs: Bad value for 'mpol' [ 465.661805][T19655] overlay: Bad value for 'verity' [ 465.840572][T19665] set match dimension is over the limit! [ 465.903064][T19669] comedi comedi0: rti802: I/O port conflict (0x5,4) [ 466.058988][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6251'. [ 466.068606][T19677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6251'. [ 466.206477][T19681] loop2: detected capacity change from 0 to 8 [ 466.222685][T19679] loop0: detected capacity change from 0 to 256 [ 466.231012][T19681] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 466.248759][ T6067] udevd[6067]: incorrect cramfs checksum on /dev/loop2 [ 466.263174][T19679] exfat: Deprecated parameter 'namecase' [ 466.283699][T19681] cramfs: bad data blocksize 3221485570 [ 466.299349][ T6067] udevd[6067]: incorrect cramfs checksum on /dev/loop2 [ 466.304877][T19681] cramfs: bad data blocksize 3221485570 [ 466.314064][T19679] exfat: Deprecated parameter 'utf8' [ 466.319462][T19679] exfat: Deprecated parameter 'utf8' [ 466.334944][ T28] audit: type=1800 audit(1764166229.765:155): pid=19681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6253" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 466.341834][T19679] exfat: Deprecated parameter 'namecase' [ 466.440310][T19679] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 466.998411][T19713] netlink: 'syz.1.6266': attribute type 10 has an invalid length. [ 467.020817][T19713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6266'. [ 467.035060][T19713] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 467.512108][T19731] loop1: detected capacity change from 0 to 256 [ 467.528974][T19707] loop3: detected capacity change from 0 to 32768 [ 467.598071][T19707] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.610455][T19731] FAT-fs (loop1): Directory bread(block 64) failed [ 467.627983][T19731] FAT-fs (loop1): Directory bread(block 65) failed [ 467.651284][T19740] loop2: detected capacity change from 0 to 2048 [ 467.661127][T19731] FAT-fs (loop1): Directory bread(block 66) failed [ 467.670289][T19731] FAT-fs (loop1): Directory bread(block 67) failed [ 467.679737][T19731] FAT-fs (loop1): Directory bread(block 68) failed [ 467.687448][T19731] FAT-fs (loop1): Directory bread(block 69) failed [ 467.697915][T19731] FAT-fs (loop1): Directory bread(block 70) failed [ 467.705125][T19731] FAT-fs (loop1): Directory bread(block 71) failed [ 467.712768][T19731] FAT-fs (loop1): Directory bread(block 72) failed [ 467.719969][T19731] FAT-fs (loop1): Directory bread(block 73) failed [ 467.729964][T19740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.754150][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 467.848606][T19707] XFS (loop3): Ending clean mount [ 467.954074][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 467.976065][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.986392][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 468.008991][ T8] usb 1-1: config 8 has an invalid interface number: 61 but max is 2 [ 468.021095][ T8] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 468.053711][ T8] usb 1-1: config 8 has no interface number 0 [ 468.061019][ T8] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.071647][ T8] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.093800][ T8] usb 1-1: config 8 interface 61 has no altsetting 0 [ 468.108457][ T8] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 468.119815][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.146305][ T8] usb 1-1: Product: syz [ 468.150545][ T8] usb 1-1: Manufacturer: syz [ 468.163886][ T8] usb 1-1: SerialNumber: syz [ 468.373614][T19750] loop1: detected capacity change from 0 to 8 [ 468.391669][ T8] bfusb: probe of 1-1:8.61 failed with error -5 [ 468.399026][T19750] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 468.406146][T19751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.422747][ T8] usb 1-1: USB disconnect, device number 32 [ 468.443016][T19750] cramfs: bad data blocksize 3221485570 [ 468.446996][ T6067] udevd[6067]: incorrect cramfs checksum on /dev/loop1 [ 468.461804][T19750] cramfs: bad data blocksize 3221485570 [ 468.474754][ T28] audit: type=1800 audit(1764166231.915:156): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6282" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 468.572784][T19756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6284'. [ 468.671243][T19760] xt_l2tp: invalid flags combination: 0 [ 468.884088][ T1794] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 469.029516][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'. [ 469.039787][T19777] netlink: 540 bytes leftover after parsing attributes in process `syz.1.6295'. [ 469.049044][T19777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6295'. [ 469.097738][ T1794] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 469.115147][ T1794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.134692][ T1794] usb 4-1: config 0 descriptor?? [ 469.184709][ T5831] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 469.374316][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 469.382029][ T5831] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 469.394207][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.409666][ T5831] usb 3-1: config 0 has no interface number 0 [ 469.416010][ T5831] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 469.427777][ T5831] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 469.444376][ T5831] usb 3-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.459815][ T5831] usb 3-1: config 0 interface 223 has no altsetting 0 [ 469.481367][ T5831] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 469.490700][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.498954][ T5831] usb 3-1: Product: syz [ 469.503250][ T5831] usb 3-1: Manufacturer: syz [ 469.507999][ T5831] usb 3-1: SerialNumber: syz [ 469.523874][ T5831] usb 3-1: config 0 descriptor?? [ 469.566731][ T1794] ath6kl: Failed to read usb control message: -71 [ 469.576713][ T1794] ath6kl: Unable to read the bmi data from the device: -71 [ 469.583966][ T1794] ath6kl: Unable to recv target info: -71 [ 469.600308][ T1794] ath6kl: Failed to init ath6kl core: -71 [ 469.607439][ T1794] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 469.632215][ T1794] usb 4-1: USB disconnect, device number 29 [ 469.677010][T19789] loop1: detected capacity change from 0 to 32768 [ 469.704130][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 469.722830][T19789] JBD2: Ignoring recovery information on journal [ 469.768375][T19789] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 469.838564][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 469.896090][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.914106][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.953889][ T8] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 469.973337][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.989940][ T8] usb 1-1: config 0 descriptor?? [ 469.999336][ T1794] usb 3-1: USB disconnect, device number 32 [ 470.189818][T19800] netlink: 'syz.3.6304': attribute type 10 has an invalid length. [ 470.200801][T19800] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6304'. [ 470.213051][T19800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 470.286145][T19791] loop0: detected capacity change from 0 to 1024 [ 470.341929][ T1794] usb 1-1: USB disconnect, device number 33 [ 470.647605][T19815] loop2: detected capacity change from 0 to 512 [ 470.671845][T19815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 470.706391][T19815] System zones: 1-12 [ 470.723883][T19815] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.6311: Directory hole found for htree index block 0 [ 470.747468][T19815] EXT4-fs (loop2): Remounting filesystem read-only [ 470.780989][T19815] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 470.791312][T19815] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 470.806330][T19815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.841223][T19813] loop3: detected capacity change from 0 to 32768 [ 470.848508][T19815] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 470.885859][T19813] JBD2: Ignoring recovery information on journal [ 470.940038][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.942443][ T49] hfsplus: b-tree write err: -5, ino 4 [ 470.995423][T19813] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 471.295416][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 471.481280][T19841] loop2: detected capacity change from 0 to 64 [ 471.711270][T19845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.933136][T19853] loop3: detected capacity change from 0 to 4096 [ 471.991217][T19860] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.066622][T19862] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6332'. [ 472.649669][T19884] xt_ecn: cannot match TCP bits for non-tcp packets [ 472.736538][T19858] loop2: detected capacity change from 0 to 32768 [ 472.757632][T19888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6346'. [ 472.816549][T19858] JBD2: Ignoring recovery information on journal [ 472.859741][T19858] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 472.951768][T19896] loop1: detected capacity change from 0 to 64 [ 472.998264][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 473.446607][T19910] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6356'. [ 473.568267][T19913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6357'. [ 473.717353][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6360'. [ 473.732359][T19894] loop0: detected capacity change from 0 to 32768 [ 473.766573][T19894] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.974682][T19894] XFS (loop0): Ending clean mount [ 474.121067][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.600367][T19959] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6376'. [ 474.628391][T19959] 0ªX¹¦À: renamed from caif0 [ 474.642205][T19959] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 474.677407][T19964] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 474.813169][T19968] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6380'. [ 474.838940][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6380'. [ 474.860144][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6380'. [ 475.613839][T20009] netlink: zone id is out of range [ 475.626329][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6403'. [ 475.651481][T20009] netlink: set zone limit has 4 unknown bytes [ 475.801686][T20016] loop3: detected capacity change from 0 to 2048 [ 475.882446][T20021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.930519][T20016] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 475.966403][T20016] Remounting filesystem read-only [ 476.250896][T20037] loop3: detected capacity change from 0 to 16 [ 476.283864][T20037] erofs: (device loop3): mounted with root inode @ nid 36. [ 476.435972][T20044] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 476.704150][T20056] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6423'. [ 476.751734][T20056] 0ªX¹¦À: renamed from caif0 [ 476.769780][T20056] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 477.032540][T20072] netlink: 'syz.3.6432': attribute type 30 has an invalid length. [ 477.088464][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6434'. [ 477.538920][T20098] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 477.544182][ T5831] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 477.765979][ T5831] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 477.790408][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.811600][ T5831] usb 3-1: config 0 has no interface number 0 [ 477.828549][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 477.846067][T20110] netlink: 'syz.0.6450': attribute type 10 has an invalid length. [ 477.869740][ T5831] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 477.883031][ T5831] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.898593][T20110] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.6450'. [ 477.908265][ T5831] usb 3-1: config 0 interface 52 has no altsetting 0 [ 477.920008][ T5831] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 477.923430][T20112] loop1: detected capacity change from 0 to 4096 [ 477.932068][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 477.970914][ T5831] usb 3-1: SerialNumber: syz [ 477.989437][T20112] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 477.995981][ T5831] usb 3-1: config 0 descriptor?? [ 478.035938][T20112] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 478.076450][T20112] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 478.100333][T20112] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 478.140697][T20112] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 478.185587][T20112] ntfs: volume version 3.1. [ 478.192168][T20112] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 478.211492][T20112] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 478.228302][T20112] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 478.235569][ T5831] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 478.249894][T20122] sctp: [Deprecated]: syz.0.6457 (pid 20122) Use of int in max_burst socket option. [ 478.249894][T20122] Use struct sctp_assoc_value instead [ 478.266015][T20112] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 478.271729][ T5831] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 478.294446][T20112] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 478.561258][ T5831] usb 3-1: USB disconnect, device number 33 [ 478.603708][T20130] loop1: detected capacity change from 0 to 2048 [ 478.656001][T20133] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.713891][T20130] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 478.735487][T20130] Remounting filesystem read-only [ 478.747135][T20132] loop3: detected capacity change from 0 to 4096 [ 478.872576][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6464'. [ 479.003186][T20132] ntfs3: loop3: ino=5, "/" directory corrupted [ 479.060678][T20141] netlink: zone id is out of range [ 479.086921][T20141] netlink: set zone limit has 4 unknown bytes [ 479.296848][T20147] loop2: detected capacity change from 0 to 2048 [ 479.323149][T20147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.525223][T20157] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6473'. [ 479.650759][T20163] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 479.729333][T20169] netlink: zone id is out of range [ 479.810462][T20169] netlink: set zone limit has 4 unknown bytes [ 479.918510][T20175] netlink: 'syz.3.6481': attribute type 10 has an invalid length. [ 479.926581][T20175] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.6481'. [ 480.508601][T20196] netlink: zone id is out of range [ 480.542377][T20196] netlink: set zone limit has 4 unknown bytes [ 480.881037][T20205] loop1: detected capacity change from 0 to 512 [ 480.923509][T20205] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.979850][T20205] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 481.087411][T20205] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.6496: bg 0: block 248: padding at end of block bitmap is not set [ 481.143818][T20193] loop2: detected capacity change from 0 to 32768 [ 481.166597][T20214] sctp: [Deprecated]: syz.3.6499 (pid 20214) Use of int in max_burst socket option. [ 481.166597][T20214] Use struct sctp_assoc_value instead [ 481.190336][T20205] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6496: Failed to acquire dquot type 1 [ 481.233614][T20205] EXT4-fs (loop1): 1 truncate cleaned up [ 481.265373][T20205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 481.426410][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 481.476545][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:2: Failed to release dquot type 1 [ 481.853727][T20232] loop0: detected capacity change from 0 to 4096 [ 481.991057][T20232] ntfs3: loop0: ino=5, "/" directory corrupted [ 482.114250][ T5831] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 482.324605][ T5831] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 482.344071][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.364766][ T5831] usb 4-1: config 0 has no interface number 0 [ 482.384229][ T5831] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 482.406232][ T5831] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 482.432176][ T5831] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.468158][ T5831] usb 4-1: config 0 interface 52 has no altsetting 0 [ 482.489037][ T5831] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 482.504330][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 482.532794][ T5831] usb 4-1: SerialNumber: syz [ 482.547663][ T5831] usb 4-1: config 0 descriptor?? [ 482.672001][T20265] loop2: detected capacity change from 0 to 4096 [ 482.779303][ T5831] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 482.804485][ T5831] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 482.857251][T20265] ntfs3: loop2: ino=5, "/" directory corrupted [ 482.982293][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6532'. [ 483.056640][ T5831] usb 4-1: USB disconnect, device number 30 [ 483.614101][ T5831] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 483.738515][T20285] loop0: detected capacity change from 0 to 40427 [ 483.775368][T20285] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 483.804982][T20285] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 483.815261][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 483.839413][ T5831] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 483.850684][T20285] F2FS-fs (loop0): invalid crc value [ 483.869335][ T5831] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 483.897516][T20285] F2FS-fs (loop0): Found nat_bits in checkpoint [ 483.903721][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 483.923734][ T5831] usb 2-1: config 1 has no interface number 0 [ 483.940866][ T5831] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.952606][ T5831] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 483.966348][ T5831] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 483.980047][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.032704][ T5831] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 484.053607][T20285] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 484.085646][T20285] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 484.233021][ T5831] snd_usb_pod 2-1:1.1: invalid control EP [ 484.240081][T20321] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 484.248701][ T5831] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 484.274367][ T5831] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 484.282270][ T5831] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 484.446250][ T8] usb 2-1: USB disconnect, device number 35 [ 484.870405][T20338] Timeout policy `syz0' can only be used by L3 protocol number 37120 [ 485.100474][T20326] loop2: detected capacity change from 0 to 40427 [ 485.124929][T20326] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 485.132715][T20326] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 485.206172][T20348] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6564'. [ 485.218771][T20346] loop0: detected capacity change from 0 to 8192 [ 485.226139][T20326] F2FS-fs (loop2): invalid crc value [ 485.242823][T20326] F2FS-fs (loop2): Found nat_bits in checkpoint [ 485.251831][T20348] openvswitch: netlink: Key type 29 is not supported [ 485.454129][T20326] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 485.461218][T20326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 485.927534][T20367] vivid-006: disconnect [ 485.954793][T20366] vivid-006: reconnect [ 486.148853][T20371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6573'. [ 487.167156][T20418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6593'. [ 487.613235][T20434] --map-set only usable from mangle table [ 487.783051][T20442] tmpfs: Bad value for 'mpol' [ 488.182337][T20460] vivid-002: disconnect [ 488.189791][T20459] vivid-002: reconnect [ 488.726455][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6628'. [ 488.747989][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6628'. [ 489.262296][T20510] loop2: detected capacity change from 0 to 256 [ 489.457729][T20510] FAT-fs (loop2): Directory bread(block 64) failed [ 489.474415][T20510] FAT-fs (loop2): Directory bread(block 65) failed [ 489.481090][T20510] FAT-fs (loop2): Directory bread(block 66) failed [ 489.507574][T20510] FAT-fs (loop2): Directory bread(block 67) failed [ 489.522939][T20510] FAT-fs (loop2): Directory bread(block 68) failed [ 489.532057][T20510] FAT-fs (loop2): Directory bread(block 69) failed [ 489.561680][T20510] FAT-fs (loop2): Directory bread(block 70) failed [ 489.579038][T20510] FAT-fs (loop2): Directory bread(block 71) failed [ 489.594706][T20510] FAT-fs (loop2): Directory bread(block 72) failed [ 489.614270][T20510] FAT-fs (loop2): Directory bread(block 73) failed [ 489.709226][T20528] loop1: detected capacity change from 0 to 2048 [ 489.777398][T20528] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.954206][T20536] netlink: 'syz.3.6654': attribute type 3 has an invalid length. [ 490.640107][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 490.640122][ T28] audit: type=1326 audit(1764166254.075:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.2.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 490.697287][ T28] audit: type=1326 audit(1764166254.075:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.2.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 490.752907][ T28] audit: type=1326 audit(1764166254.115:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.2.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 490.821923][ T28] audit: type=1326 audit(1764166254.115:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.2.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 490.866305][ T28] audit: type=1326 audit(1764166254.115:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20565 comm="syz.2.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 491.291331][T20598] loop0: detected capacity change from 0 to 2048 [ 491.319623][T20598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.461287][T20600] loop2: detected capacity change from 0 to 256 [ 491.497073][T20602] netlink: 'syz.1.6686': attribute type 3 has an invalid length. [ 491.521994][T20600] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 491.777797][T20612] loop1: detected capacity change from 0 to 256 [ 491.849144][T20616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6691'. [ 491.882131][T20612] FAT-fs (loop1): Directory bread(block 64) failed [ 491.914318][T20612] FAT-fs (loop1): Directory bread(block 65) failed [ 491.934275][T20612] FAT-fs (loop1): Directory bread(block 66) failed [ 491.940855][T20612] FAT-fs (loop1): Directory bread(block 67) failed [ 491.977508][T20612] FAT-fs (loop1): Directory bread(block 68) failed [ 491.987936][T20612] FAT-fs (loop1): Directory bread(block 69) failed [ 491.994820][T20612] FAT-fs (loop1): Directory bread(block 70) failed [ 492.001502][T20612] FAT-fs (loop1): Directory bread(block 71) failed [ 492.012271][T20612] FAT-fs (loop1): Directory bread(block 72) failed [ 492.020766][T20612] FAT-fs (loop1): Directory bread(block 73) failed [ 492.113032][ T28] audit: type=1800 audit(1764166255.545:162): pid=20612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6698" name="cpu.stat" dev="loop1" ino=1048662 res=0 errno=0 [ 492.143111][T20612] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61) [ 492.281816][T20626] sctp: [Deprecated]: syz.2.6697 (pid 20626) Use of int in max_burst socket option deprecated. [ 492.281816][T20626] Use struct sctp_assoc_value instead [ 492.478283][T20632] netlink: 'syz.2.6701': attribute type 6 has an invalid length. [ 492.491492][T20607] loop0: detected capacity change from 0 to 32768 [ 492.524286][T20632] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6701'. [ 492.619677][T20607] jfs: Unrecognized mount option "ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 492.889987][T20646] sctp: [Deprecated]: syz.1.6709 (pid 20646) Use of int in max_burst socket option deprecated. [ 492.889987][T20646] Use struct sctp_assoc_value instead [ 493.048819][T20650] netlink: 'syz.2.6711': attribute type 28 has an invalid length. [ 493.235482][T20662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6716'. [ 493.323053][T20664] loop0: detected capacity change from 0 to 64 [ 493.368215][T20668] binder: BC_ATTEMPT_ACQUIRE not supported [ 493.383147][T20668] binder: 20666:20668 ioctl c0306201 2000000003c0 returned -22 [ 493.387236][T20664] hfs: request for non-existent node 327680 in B*Tree [ 493.411070][T20664] hfs: request for non-existent node 327680 in B*Tree [ 493.428634][ T1798] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 493.635307][ T1798] usb 4-1: unable to get BOS descriptor or descriptor too short [ 493.663082][ T1798] usb 4-1: not running at top speed; connect to a high speed hub [ 493.677841][ T1798] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.691870][ T1798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.715971][ T1798] usb 4-1: string descriptor 0 read error: -22 [ 493.731861][ T1798] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.761708][ T1798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.797543][ T1798] usb 4-1: 0:2 : does not exist [ 494.031646][T20690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6731'. [ 494.236488][ T1798] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 494.261262][ T1798] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 494.290525][ T1798] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 494.322374][T20704] loop2: detected capacity change from 0 to 1024 [ 494.345429][ T1798] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 494.374641][ T1798] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 494.429756][ T1798] usb 4-1: USB disconnect, device number 31 [ 494.599734][T20712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6741'. [ 494.795749][T20720] netlink: 'syz.0.6745': attribute type 6 has an invalid length. [ 494.801353][T20724] loop1: detected capacity change from 0 to 64 [ 494.803511][T20720] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6745'. [ 494.844686][T20724] hfs: request for non-existent node 327680 in B*Tree [ 494.874090][T20724] hfs: request for non-existent node 327680 in B*Tree [ 495.192577][T20742] netlink: 'syz.1.6756': attribute type 21 has an invalid length. [ 495.201736][T20742] netlink: 'syz.1.6756': attribute type 15 has an invalid length. [ 495.210116][T20742] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6756'. [ 495.222511][T20742] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.232420][T20742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.239728][T20742] IPv6: NLM_F_CREATE should be set when creating new route [ 495.247047][T20742] IPv6: NLM_F_CREATE should be set when creating new route [ 495.254372][T20742] IPv6: NLM_F_CREATE should be set when creating new route [ 495.314941][T20746] ieee802154 phy1 wpan1: encryption failed: -90 [ 495.438581][T20750] netlink: 'syz.3.6760': attribute type 10 has an invalid length. [ 495.453908][T20750] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 495.476818][T20750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 495.666260][ T5831] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 495.722864][T20766] loop3: detected capacity change from 0 to 512 [ 495.740497][T20766] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 495.755881][T20768] tmpfs: User quota inode hardlimit too large. [ 495.758106][T20766] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 495.774654][T20766] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 495.815168][T20766] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 495.823121][T20766] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 495.844515][T20766] EXT4-fs (loop3): orphan cleanup on readonly fs [ 495.868341][T20766] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.6768: bg 0: block 34: padding at end of block bitmap is not set [ 495.895938][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 495.904940][ T5831] usb 2-1: not running at top speed; connect to a high speed hub [ 495.923136][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.957594][T20766] Quota error (device loop3): write_blk: dquota write failed [ 495.965436][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.983319][T20775] loop0: detected capacity change from 0 to 512 [ 495.991299][T20766] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 496.007061][T20766] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6768: Failed to acquire dquot type 1 [ 496.027349][T20775] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 496.029324][ T5831] usb 2-1: string descriptor 0 read error: -22 [ 496.051727][ T5831] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.052114][T20775] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.075448][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.086079][T20766] EXT4-fs (loop3): 1 truncate cleaned up [ 496.100261][ T5831] usb 2-1: 0:2 : does not exist [ 496.115037][T20766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 496.201980][T20766] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 496.211874][T20766] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 496.235150][ T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 496.276133][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.373087][T20783] loop0: detected capacity change from 0 to 1024 [ 496.415502][T20785] loop3: detected capacity change from 0 to 256 [ 496.423735][T20785] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.444249][T20785] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 496.477311][T20785] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 496.542689][ T5831] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 496.577221][ T5831] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 496.603021][ T5831] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 496.667399][ T5831] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 496.698898][ T5831] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 496.756686][ T5831] usb 2-1: USB disconnect, device number 36 [ 496.897692][T20795] loop0: detected capacity change from 0 to 1024 [ 496.913686][T20799] loop3: detected capacity change from 0 to 256 [ 496.922852][T20795] EXT4-fs (loop0): Test dummy encryption mode enabled [ 496.949374][T20795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00ec01c, mo2=0082] [ 496.964609][T20795] System zones: 0-1, 3-36 [ 496.981662][T20795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.049776][T20799] FAT-fs (loop3): Directory bread(block 64) failed [ 497.065819][T20799] FAT-fs (loop3): Directory bread(block 65) failed [ 497.084318][T20799] FAT-fs (loop3): Directory bread(block 66) failed [ 497.102973][T20799] FAT-fs (loop3): Directory bread(block 67) failed [ 497.125428][T20799] FAT-fs (loop3): Directory bread(block 68) failed [ 497.132001][T20799] FAT-fs (loop3): Directory bread(block 69) failed [ 497.147544][T20799] FAT-fs (loop3): Directory bread(block 70) failed [ 497.157207][T20799] FAT-fs (loop3): Directory bread(block 71) failed [ 497.164015][T20799] FAT-fs (loop3): Directory bread(block 72) failed [ 497.171153][T20799] FAT-fs (loop3): Directory bread(block 73) failed [ 497.222015][T20799] syz.3.6784: attempt to access beyond end of device [ 497.222015][T20799] loop3: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 497.385070][T20805] loop3: detected capacity change from 0 to 512 [ 497.424276][T20805] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 497.424397][T20795] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 497.452589][T20805] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.476910][T20797] loop2: detected capacity change from 0 to 32768 [ 497.539251][T20797] jfs: Unrecognized mount option "ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 497.599996][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.628235][ T49] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 497.776530][T20812] bond0: left promiscuous mode [ 497.801681][T20812] bond0: left allmulticast mode [ 497.824673][T20812] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 497.869300][T20816] netlink: 'syz.0.6789': attribute type 10 has an invalid length. [ 497.884204][T20816] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 497.906737][T20816] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 497.922710][T20816] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 497.931843][T20816] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 498.283727][T20828] loop1: detected capacity change from 0 to 4096 [ 498.292049][T20832] loop0: detected capacity change from 0 to 512 [ 498.311156][T20828] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 498.322467][T20832] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 498.334673][T20830] loop2: detected capacity change from 0 to 4096 [ 498.342455][T20832] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 498.352930][T20828] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 498.362267][T20830] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 498.371468][T20832] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 498.401261][T20828] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 498.401822][ T8] IPVS: starting estimator thread 0... [ 498.420018][T20828] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 498.433802][T20828] ntfs: volume version 3.1. [ 498.440182][T20832] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 498.448214][T20832] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 498.456901][T20832] EXT4-fs (loop0): orphan cleanup on readonly fs [ 498.471285][T20832] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.6797: bg 0: block 34: padding at end of block bitmap is not set [ 498.511852][T20832] Quota error (device loop0): write_blk: dquota write failed [ 498.520389][T20832] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 498.531659][T20832] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6797: Failed to acquire dquot type 1 [ 498.549013][T20828] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 498.562351][T20832] EXT4-fs (loop0): 1 truncate cleaned up [ 498.587052][T20830] ntfs3: loop2: failed to convert "c46c" to cp1250 [ 498.596344][T20832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 498.606460][T20828] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 498.684178][T20835] IPVS: using max 20 ests per chain, 48000 per kthread [ 498.736099][T20832] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 498.788290][T20832] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 498.862375][T20844] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6803'. [ 498.958121][T20846] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6801'. [ 498.976580][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.992320][T20848] netlink: 'syz.2.6804': attribute type 10 has an invalid length. [ 499.052113][T20848] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 499.405389][T20868] loop2: detected capacity change from 0 to 1024 [ 499.414809][T20868] EXT4-fs (loop2): Test dummy encryption mode enabled [ 499.446837][T20868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00ec01c, mo2=0082] [ 499.495073][T20868] System zones: 0-1, 3-36 [ 499.510713][T20873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6817'. [ 499.557496][T20868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.740875][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.883816][T20888] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 499.927029][T20892] loop0: detected capacity change from 0 to 256 [ 500.008951][T20894] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6827'. [ 500.047697][T20892] FAT-fs (loop0): Directory bread(block 64) failed [ 500.059550][T20892] FAT-fs (loop0): Directory bread(block 65) failed [ 500.087073][T20892] FAT-fs (loop0): Directory bread(block 66) failed [ 500.104144][T20892] FAT-fs (loop0): Directory bread(block 67) failed [ 500.110806][T20892] FAT-fs (loop0): Directory bread(block 68) failed [ 500.134530][T20892] FAT-fs (loop0): Directory bread(block 69) failed [ 500.144408][T20892] FAT-fs (loop0): Directory bread(block 70) failed [ 500.150985][T20892] FAT-fs (loop0): Directory bread(block 71) failed [ 500.161951][T20892] FAT-fs (loop0): Directory bread(block 72) failed [ 500.168668][T20892] FAT-fs (loop0): Directory bread(block 73) failed [ 500.184729][T20902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.281003][T20892] syz.0.6824: attempt to access beyond end of device [ 500.281003][T20892] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 500.304541][ T1798] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 500.449949][T20910] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6843'. [ 500.473890][T20913] netlink: 'syz.1.6835': attribute type 10 has an invalid length. [ 500.515912][ T1798] usb 3-1: config 1 has an invalid interface number: 28 but max is 0 [ 500.519158][T20913] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 500.527246][ T1798] usb 3-1: config 1 has no interface number 0 [ 500.539657][ T1798] usb 3-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 500.585359][ T1798] usb 3-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 500.608147][ T1798] usb 3-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 500.630581][ T1798] usb 3-1: config 1 interface 28 has no altsetting 0 [ 500.649081][ T1798] usb 3-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 500.664107][ T1798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.696599][ T1798] usb 3-1: Product: syz [ 500.700824][ T1798] usb 3-1: Manufacturer: syz [ 500.724986][ T1798] usb 3-1: SerialNumber: syz [ 500.741801][T20898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 500.751767][ T1798] ipaq 3-1:1.28: PocketPC PDA converter detected [ 500.998297][ T1798] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 501.242312][ T1798] usb 3-1: USB disconnect, device number 34 [ 501.260080][ T1798] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 501.285750][ T1798] ipaq 3-1:1.28: device disconnected [ 501.417310][T20952] loop1: detected capacity change from 0 to 1024 [ 501.437745][T20952] EXT4-fs (loop1): Test dummy encryption mode enabled [ 501.472578][T20952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00ec01c, mo2=0082] [ 501.496491][T20952] System zones: 0-1, 3-36 [ 501.504666][T20952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.615840][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.660104][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.741869][T20969] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 501.841152][T20972] vlan0: entered promiscuous mode [ 501.893652][T20976] comedi comedi0: s526: I/O port conflict (0x1,64) [ 501.967898][T20978] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6870'. [ 501.998163][T20980] netlink: 'syz.2.6868': attribute type 1 has an invalid length. [ 502.088395][T20984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.127225][ T1798] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 502.228859][T20990] loop1: detected capacity change from 0 to 128 [ 502.634570][ T1798] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 502.781408][ T59] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 502.969113][T21024] loop1: detected capacity change from 0 to 1024 [ 503.019198][T21024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.093362][T21024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 503.136705][T21024] System zones: 0-1, 3-12 [ 503.157560][T21024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.207436][T21024] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.6890: Abort forced by user [ 503.228492][T21024] EXT4-fs (loop1): Remounting filesystem read-only [ 503.235996][T21024] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 503.282306][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.376822][T21043] SET target dimension over the limit! [ 503.814516][ T2968] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 503.833593][ T2968] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 504.097183][T21076] loop3: detected capacity change from 0 to 4096 [ 504.138023][T21076] ntfs3: loop3: MFT: r=b, expect seq=b instead of 1ff! [ 504.154832][T21076] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 504.165663][T21076] ntfs3: loop3: Failed to load $Extend (-22). [ 504.173576][T21076] ntfs3: loop3: Failed to initialize $Extend. [ 504.234336][ T1790] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 504.655665][T21089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6928'. [ 504.904225][ T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 505.094698][T21113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6933'. [ 505.095797][ T8] usb 4-1: config 1 has an invalid interface number: 28 but max is 0 [ 505.107173][T21113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6933'. [ 505.133686][ T8] usb 4-1: config 1 has no interface number 0 [ 505.141190][ T8] usb 4-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 505.152739][ T8] usb 4-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 505.165609][ T8] usb 4-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 505.180502][ T8] usb 4-1: config 1 interface 28 has no altsetting 0 [ 505.181827][T21115] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6934'. [ 505.193461][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 505.205494][T21115] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6934'. [ 505.216931][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.225414][ T8] usb 4-1: Product: syz [ 505.225434][ T8] usb 4-1: Manufacturer: syz [ 505.225447][ T8] usb 4-1: SerialNumber: syz [ 505.230177][T21086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 505.256617][ T8] ipaq 4-1:1.28: PocketPC PDA converter detected [ 505.405805][T21123] AppArmor: change_hat: Invalid input '0' [ 505.510161][ T8] usb 4-1: PocketPC PDA converter now attached to ttyUSB0 [ 505.580172][T21131] netlink: 'syz.0.6942': attribute type 3 has an invalid length. [ 505.797387][ T1790] usb 4-1: USB disconnect, device number 32 [ 505.814891][ T1790] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 505.836903][ T1790] ipaq 4-1:1.28: device disconnected [ 505.913104][ T28] audit: type=1326 audit(2000000013.727:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 505.942817][ T28] audit: type=1326 audit(2000000013.727:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 505.988312][ T28] audit: type=1326 audit(2000000013.757:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 506.028624][ T28] audit: type=1326 audit(2000000013.757:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 506.089754][ T28] audit: type=1326 audit(2000000013.757:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66b18f749 code=0x7ffc0000 [ 506.158762][T21153] loop0: detected capacity change from 0 to 16 [ 506.175639][T21153] erofs: (device loop0): mounted with root inode @ nid 36. [ 506.225459][T21153] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 506.264242][T21153] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 506.472852][T21167] kernel read not supported for file /  (pid: 21167 comm: syz.3.6959) [ 506.490766][ T28] audit: type=1800 audit(2000000014.297:168): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6959" name=200120 dev="mqueue" ino=53941 res=0 errno=0 [ 506.664102][T21176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.671402][T21176] IPv6: NLM_F_CREATE should be set when creating new route [ 506.678725][T21176] IPv6: NLM_F_CREATE should be set when creating new route [ 506.691822][T21178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6965'. [ 507.851702][T21225] loop3: detected capacity change from 0 to 1764 [ 508.054187][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 508.412217][T21215] loop1: detected capacity change from 0 to 32768 [ 508.439938][T21215] JBD2: Ignoring recovery information on journal [ 508.499075][T21215] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 508.526039][T21215] [ 508.528417][T21215] ====================================================== [ 508.535443][T21215] WARNING: possible circular locking dependency detected [ 508.542475][T21215] syzkaller #0 Not tainted [ 508.546899][T21215] ------------------------------------------------------ [ 508.553923][T21215] syz.1.6982/21215 is trying to acquire lock: [ 508.559997][T21215] ffff888025e52608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0x102f/0x1b20 [ 508.569085][T21215] [ 508.569085][T21215] but task is already holding lock: [ 508.576460][T21215] ffff88805e33b120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xfb9/0x1b20 [ 508.586755][T21215] [ 508.586755][T21215] which lock already depends on the new lock. [ 508.586755][T21215] [ 508.597170][T21215] [ 508.597170][T21215] the existing dependency chain (in reverse order) is: [ 508.604080][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 508.606179][T21215] [ 508.606179][T21215] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 508.606211][T21215] down_write+0x97/0x1f0 [ 508.627265][T21215] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 508.633787][T21215] ocfs2_xattr_set+0x596/0x11f0 [ 508.639186][T21215] ocfs2_set_acl+0x4e1/0x590 [ 508.644318][T21215] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 508.649788][T21215] vfs_remove_acl+0x4e3/0x740 [ 508.655002][T21215] path_removexattr+0x23b/0x3f0 [ 508.660392][T21215] __x64_sys_removexattr+0x60/0x70 [ 508.666043][T21215] do_syscall_64+0x55/0xb0 [ 508.670998][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.677429][T21215] [ 508.677429][T21215] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 508.685270][T21215] down_read+0x46/0x2e0 [ 508.689965][T21215] ocfs2_init_acl+0x2fa/0x720 [ 508.695187][T21215] ocfs2_mknod+0x12e5/0x20f0 [ 508.700315][T21215] ocfs2_create+0x196/0x410 [ 508.705357][T21215] path_openat+0x1277/0x3190 [ 508.710493][T21215] do_filp_open+0x1c5/0x3d0 [ 508.715551][T21215] do_sys_openat2+0x12c/0x1c0 [ 508.720763][T21215] __x64_sys_openat+0x139/0x160 [ 508.726148][T21215] do_syscall_64+0x55/0xb0 [ 508.731111][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.737545][T21215] [ 508.737545][T21215] -> #2 (jbd2_handle){++++}-{0:0}: [ 508.744856][T21215] start_this_handle+0x1e9d/0x20c0 [ 508.750499][T21215] jbd2__journal_start+0x2bb/0x5b0 [ 508.756142][T21215] jbd2_journal_start+0x2a/0x40 [ 508.761525][T21215] ocfs2_start_trans+0x376/0x6c0 [ 508.767048][T21215] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 508.773303][T21215] ocfs2_dismount_volume+0x1e2/0x890 [ 508.779476][T21215] generic_shutdown_super+0x134/0x2b0 [ 508.785438][T21215] kill_block_super+0x44/0x90 [ 508.790660][T21215] deactivate_locked_super+0x97/0x100 [ 508.790755][T21246] loop0: detected capacity change from 0 to 32768 [ 508.796574][T21215] cleanup_mnt+0x429/0x4c0 [ 508.796593][T21215] task_work_run+0x1ce/0x250 [ 508.796612][T21215] exit_to_user_mode_loop+0xe6/0x110 [ 508.796630][T21215] exit_to_user_mode_prepare+0xf6/0x180 [ 508.796649][T21215] syscall_exit_to_user_mode+0x1a/0x50 [ 508.796665][T21215] do_syscall_64+0x61/0xb0 [ 508.803154][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 508.807983][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.808008][T21215] [ 508.808008][T21215] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 508.808033][T21215] down_read+0x46/0x2e0 [ 508.814974][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 508.818902][T21215] ocfs2_start_trans+0x36a/0x6c0 [ 508.818932][T21215] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 508.835406][T21246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.6998 (21246) [ 508.835865][T21215] ocfs2_dismount_volume+0x1e2/0x890 [ 508.857293][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.860513][T21215] generic_shutdown_super+0x134/0x2b0 [ 508.913051][T21215] kill_block_super+0x44/0x90 [ 508.918241][T21215] deactivate_locked_super+0x97/0x100 [ 508.924209][T21215] cleanup_mnt+0x429/0x4c0 [ 508.929130][T21215] task_work_run+0x1ce/0x250 [ 508.934227][T21215] exit_to_user_mode_loop+0xe6/0x110 [ 508.940017][T21215] exit_to_user_mode_prepare+0xf6/0x180 [ 508.946074][T21215] syscall_exit_to_user_mode+0x1a/0x50 [ 508.952039][T21215] do_syscall_64+0x61/0xb0 [ 508.956965][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.963367][T21215] [ 508.963367][T21215] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 508.970829][T21215] __lock_acquire+0x2ddb/0x7c80 [ 508.976188][T21215] lock_acquire+0x197/0x410 [ 508.981196][T21215] ocfs2_start_trans+0x26b/0x6c0 [ 508.986646][T21215] ocfs2_setattr+0x102f/0x1b20 [ 508.991915][T21215] notify_change+0xb0d/0xe10 [ 508.997010][T21215] chown_common+0x3f9/0x5a0 [ 509.002020][T21215] do_fchownat+0x168/0x270 [ 509.006942][T21215] __x64_sys_lchown+0x85/0x90 [ 509.012125][T21215] do_syscall_64+0x55/0xb0 [ 509.017049][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.023453][T21215] [ 509.023453][T21215] other info that might help us debug this: [ 509.023453][T21215] [ 509.033661][T21215] Chain exists of: [ 509.033661][T21215] sb_internal#2 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 509.033661][T21215] [ 509.047814][T21215] Possible unsafe locking scenario: [ 509.047814][T21215] [ 509.055246][T21215] CPU0 CPU1 [ 509.060594][T21215] ---- ---- [ 509.065943][T21215] lock(&ocfs2_file_ip_alloc_sem_key); [ 509.071475][T21215] lock(&oi->ip_xattr_sem); [ 509.078595][T21215] lock(&ocfs2_file_ip_alloc_sem_key); [ 509.086651][T21215] rlock(sb_internal#2); [ 509.090968][T21215] [ 509.090968][T21215] *** DEADLOCK *** [ 509.090968][T21215] [ 509.099100][T21215] 3 locks held by syz.1.6982/21215: [ 509.104278][T21215] #0: ffff888025e52418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 509.113500][T21215] #1: ffff88805e33b498 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: chown_common+0x313/0x5a0 [ 509.123756][T21215] #2: ffff88805e33b120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xfb9/0x1b20 [ 509.134443][T21215] [ 509.134443][T21215] stack backtrace: [ 509.140330][T21215] CPU: 1 PID: 21215 Comm: syz.1.6982 Not tainted syzkaller #0 [ 509.147770][T21215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 509.157821][T21215] Call Trace: [ 509.161176][T21215] [ 509.164108][T21215] dump_stack_lvl+0x16c/0x230 [ 509.168807][T21215] ? load_image+0x3b0/0x3b0 [ 509.173313][T21215] ? show_regs_print_info+0x20/0x20 [ 509.178526][T21215] ? print_circular_bug+0x12b/0x1a0 [ 509.183746][T21215] check_noncircular+0x2bd/0x3c0 [ 509.188692][T21215] ? look_up_lock_class+0x75/0x140 [ 509.193799][T21215] ? print_deadlock_bug+0x5d0/0x5d0 [ 509.198986][T21215] ? lockdep_lock+0xe0/0x220 [ 509.203570][T21215] ? _find_first_zero_bit+0xd3/0x100 [ 509.208853][T21215] __lock_acquire+0x2ddb/0x7c80 [ 509.213699][T21215] ? verify_lock_unused+0x140/0x140 [ 509.218883][T21215] ? verify_lock_unused+0x140/0x140 [ 509.224070][T21215] ? verify_lock_unused+0x140/0x140 [ 509.229259][T21215] lock_acquire+0x197/0x410 [ 509.233752][T21215] ? ocfs2_setattr+0x102f/0x1b20 [ 509.238680][T21215] ? __might_sleep+0xe0/0xe0 [ 509.243262][T21215] ? do_raw_spin_lock+0x121/0x2c0 [ 509.248275][T21215] ? read_lock_is_recursive+0x20/0x20 [ 509.253632][T21215] ? __rwlock_init+0x150/0x150 [ 509.258383][T21215] ? do_raw_spin_unlock+0x121/0x230 [ 509.263572][T21215] ocfs2_start_trans+0x26b/0x6c0 [ 509.268506][T21215] ? ocfs2_setattr+0x102f/0x1b20 [ 509.273436][T21215] ? ocfs2_recovery_exit+0x50/0x50 [ 509.278540][T21215] ? setattr_prepare+0x1e6/0xac0 [ 509.283472][T21215] ocfs2_setattr+0x102f/0x1b20 [ 509.288233][T21215] ? ocfs2_extend_allocation+0x1760/0x1760 [ 509.294039][T21215] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 509.299844][T21215] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 509.306087][T21215] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 509.311979][T21215] ? current_time+0x18d/0x270 [ 509.316646][T21215] ? inode_set_ctime_current+0x2d0/0x2d0 [ 509.322261][T21215] ? apparmor_path_chown+0x239/0x2d0 [ 509.327529][T21215] ? evm_inode_setattr+0x94/0x6a0 [ 509.332552][T21215] ? bpf_lsm_inode_setattr+0x9/0x10 [ 509.337736][T21215] ? try_break_deleg+0x79/0x120 [ 509.342578][T21215] ? ocfs2_extend_allocation+0x1760/0x1760 [ 509.348377][T21215] notify_change+0xb0d/0xe10 [ 509.352958][T21215] chown_common+0x3f9/0x5a0 [ 509.357454][T21215] ? __ia32_sys_chmod+0x70/0x70 [ 509.362288][T21215] ? rcu_read_lock_any_held+0xb4/0x120 [ 509.367735][T21215] ? __mnt_want_write+0x223/0x2a0 [ 509.372758][T21215] do_fchownat+0x168/0x270 [ 509.377163][T21215] ? chown_common+0x5a0/0x5a0 [ 509.381833][T21215] __x64_sys_lchown+0x85/0x90 [ 509.386499][T21215] do_syscall_64+0x55/0xb0 [ 509.390903][T21215] ? clear_bhb_loop+0x40/0x90 [ 509.395567][T21215] ? clear_bhb_loop+0x40/0x90 [ 509.400229][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.406108][T21215] RIP: 0033:0x7f66db18f749 [ 509.410542][T21215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.430134][T21215] RSP: 002b:00007f66dc110038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 509.438537][T21215] RAX: ffffffffffffffda RBX: 00007f66db3e5fa0 RCX: 00007f66db18f749 [ 509.446494][T21215] RDX: 000000000000ee01 RSI: ffffffffffffffff RDI: 0000200000000000 [ 509.454541][T21215] RBP: 00007f66db213f91 R08: 0000000000000000 R09: 0000000000000000 [ 509.462501][T21215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.470455][T21215] R13: 00007f66db3e6038 R14: 00007f66db3e5fa0 R15: 00007ffdcc1fe348 [ 509.478430][T21215] [ 509.490808][ T9] usb 3-1: config 0 descriptor?? [ 509.495248][T21246] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 509.507653][ T9] as10x_usb: device has been detected [ 509.513661][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 509.523509][T21246] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 509.546279][T21246] BTRFS info (device loop0): enabling auto defrag [ 509.558974][T21246] BTRFS info (device loop0): turning on sync discard [ 509.566251][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 509.568609][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 509.575663][T21246] BTRFS info (device loop0): force zlib compression, level 3 [ 509.595185][T21246] BTRFS info (device loop0): force clearing of disk cache [ 509.603588][T21246] BTRFS info (device loop0): max_inline at 0 [ 509.610189][T21246] BTRFS info (device loop0): disabling free space tree [ 509.620239][ T9] as10x_usb: error during firmware upload part1 [ 509.649951][ T9] Registered device nBox DVB-T Dongle [ 509.691276][T21246] BTRFS info (device loop0): enabling ssd optimizations [ 509.727101][T21246] BTRFS info (device loop0): rebuilding free space tree [ 509.729046][ T9] usb 3-1: USB disconnect, device number 35 [ 509.749990][ T9] Unregistered device nBox DVB-T Dongle [ 509.751208][ T9] as10x_usb: device has been disconnected [ 509.755544][T21246] BTRFS info (device loop0): disabling free space tree [ 509.788045][T21246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 509.797877][T21246] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 509.837399][ T5786] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 509.859877][ T6067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (6067) [ 517.014398][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!