last executing test programs: 7m30.982832814s ago: executing program 1 (id=6137): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xca4, 0x0, 0xfffffffd}, 0x10) 7m30.472746922s ago: executing program 1 (id=6141): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x3666a5802dfc8431) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000400)='no\'\x91\x03a\x8f\xa3N\xf0[\x1dG\xb6zob,,er\xe8\xe8\xb5;%j\xb8\xbc\n\x87\xfc\x03z\xe6,,\x80@q\xac\x14\xda\xf7\x1d\b\xf4\x0f\xd0\x13\xe5\xe9J#\xb3\"\x8e\xda\x04h/\x15.\x9dW1\x15\xc8\xb1\xa8n\aNC\xba\x12\"\x86C\xd9\xd7\xf0\xda<\x93\x99+`#\xa0\xf7\x8e\xa2k\xb2\x96=ed\x1f\xca\xa3\xa3\xa28\xee\xc3\n\xbc\x92,H@\xdd\x1b\xb2y\\\xe5\x12\xa9\x9a$\xef\x89\xdb\r\xc8G;0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)) 221.063387ms ago: executing program 3 (id=9119): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa0c000, &(0x7f0000002600)=ANY=[@ANYBLOB="0aad73b2f336a1228b69ffbdeb91187d7ab9c3380366652a2b9da2870fad37f45132fe30a8b023507a1cec2d8fc33c7ec99492a3798b0c7225440fa91455d7a792485ae4e0758d578a3408f1e4b52eb303e9f59b3f0d5059da", @ANYBLOB="a47c55ec84520c8afbb585ad3431d744fe7df03779cd6a754513feb36df7ca7bde8de3b288c9d452757114cfd04d445696c6ed2cad9303ef67a67321912af6e3be32203a4673c50f21bca2c855fcaa398ea14ad19ca2913fc3c3284d77174734640cf388f4ff2521b48a133ebe352c"], 0x1, 0xa0, &(0x7f00000024c0)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==") mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='bfs\x00', 0x200000, 0x0) 0s ago: executing program 5 (id=9120): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011140100000000000000000008004b0013"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): ttyUSB0 [ 873.336668][ T5908] cp210x 6-1:0.0: device disconnected [ 874.422629][T22524] xt_ecn: cannot match TCP bits for non-tcp packets [ 874.568869][T22533] netlink: 'syz.3.7274': attribute type 1 has an invalid length. [ 874.645419][T22533] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7274'. [ 875.144195][T22545] loop3: detected capacity change from 0 to 256 [ 875.540912][T22545] FAT-fs (loop3): Directory bread(block 64) failed [ 875.592444][T22545] FAT-fs (loop3): Directory bread(block 65) failed [ 875.599202][T22545] FAT-fs (loop3): Directory bread(block 66) failed [ 875.697225][T22545] FAT-fs (loop3): Directory bread(block 67) failed [ 875.724588][T22545] FAT-fs (loop3): Directory bread(block 68) failed [ 875.768132][T22545] FAT-fs (loop3): Directory bread(block 69) failed [ 875.816082][T22545] FAT-fs (loop3): Directory bread(block 70) failed [ 875.855844][T22545] FAT-fs (loop3): Directory bread(block 71) failed [ 875.921163][T22545] FAT-fs (loop3): Directory bread(block 72) failed [ 875.978305][T22545] FAT-fs (loop3): Directory bread(block 73) failed [ 876.209934][T22564] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7289'. [ 876.232368][T22565] loop4: detected capacity change from 0 to 8 [ 876.424207][T22565] SQUASHFS error: Unable to read directory block [629:26] [ 876.634773][T22569] loop0: detected capacity change from 0 to 256 [ 877.012737][T22569] FAT-fs (loop0): Directory bread(block 64) failed [ 877.078615][T22569] FAT-fs (loop0): Directory bread(block 65) failed [ 877.155922][T22569] FAT-fs (loop0): Directory bread(block 66) failed [ 877.255934][T22569] FAT-fs (loop0): Directory bread(block 67) failed [ 877.322259][T22569] FAT-fs (loop0): Directory bread(block 68) failed [ 877.328851][T22569] FAT-fs (loop0): Directory bread(block 69) failed [ 877.515151][T22569] FAT-fs (loop0): Directory bread(block 70) failed [ 877.652112][T22583] loop5: detected capacity change from 0 to 1024 [ 877.757775][T22569] FAT-fs (loop0): Directory bread(block 71) failed [ 877.839287][T22569] FAT-fs (loop0): Directory bread(block 72) failed [ 877.914623][T22569] FAT-fs (loop0): Directory bread(block 73) failed [ 878.380478][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7304'. [ 878.412476][ T36] hfsplus: b-tree write err: -5, ino 4 [ 879.104747][T22606] netlink: 'syz.0.7306': attribute type 8 has an invalid length. [ 879.941535][T22613] loop5: detected capacity change from 0 to 4096 [ 880.020225][T22613] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 880.720251][T22613] ntfs3(loop5): ino=19, mi_enum_attr [ 880.850427][T22613] ntfs3(loop5): failed to convert "c46c" to cp936 [ 880.904127][T22613] ntfs3(loop5): ino=20, mi_enum_attr [ 881.895369][T22651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7332'. [ 883.251345][T22667] netlink: 'syz.0.7340': attribute type 1 has an invalid length. [ 883.279910][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 883.376255][T22634] loop3: detected capacity change from 0 to 32768 [ 883.483619][T22634] read_mapping_page failed! [ 883.504358][T22645] loop4: detected capacity change from 0 to 32768 [ 883.511063][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 883.569615][T22634] jfs_mount: Failed to read AGGREGATE_I [ 883.584106][ T5908] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.617707][T22634] Mount JFS Failure: -5 [ 883.682406][T22634] jfs_mount failed w/return code = -5 [ 883.688055][ T5908] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.730514][T22645] [ 883.730514][T22645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 883.730514][T22645] [ 883.773452][ T5908] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.830132][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 883.909333][ T5908] usb 7-1: SerialNumber: syz [ 884.014268][ T5908] cdc_acm 7-1:1.0: skipping garbage [ 884.075286][ T5835] [ 884.075286][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 884.075286][ T5835] [ 884.086216][ T5908] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 884.169792][ T5908] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 884.187332][ T5835] [ 884.187332][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 884.187332][ T5835] [ 884.253329][ T5908] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 884.396056][ T5908] usb 7-1: USB disconnect, device number 3 [ 884.851775][T22679] loop5: detected capacity change from 0 to 2048 [ 885.135784][T22679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.375228][T22679] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 885.586042][T22693] kAFS: unparsable volume name [ 885.826251][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.510851][T22704] netlink: 'syz.3.7357': attribute type 1 has an invalid length. [ 886.518646][T22704] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7357'. [ 887.280185][T22716] loop3: detected capacity change from 0 to 64 [ 887.299653][T22720] netlink: 'syz.4.7364': attribute type 21 has an invalid length. [ 887.300195][T22718] xt_connbytes: Forcing CT accounting to be enabled [ 887.375064][T22722] tmpfs: Bad value for 'mpol' [ 888.801217][T22742] openvswitch: netlink: Missing key (keys=40, expected=100) [ 889.542489][T22759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7383'. [ 889.594992][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7384'. [ 890.436237][ T5908] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 890.689999][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 890.760348][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.815713][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 890.888819][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 890.910324][T22786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 890.933583][T22788] loop6: detected capacity change from 0 to 256 [ 890.949801][ T5908] usb 4-1: SerialNumber: syz [ 890.979498][T22788] exfat: Deprecated parameter 'namecase' [ 890.997483][ T5908] usb 4-1: config 0 descriptor?? [ 891.046006][ T5908] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 891.133893][ T5908] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized! [ 891.143399][T22788] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 891.213568][ T5908] usb 4-1: Failed to create links for entity 255 [ 891.250085][ T5908] usb 4-1: Failed to register entities (-22). [ 891.364126][ T5908] usb 4-1: USB disconnect, device number 103 [ 892.729859][ T5908] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 892.951903][ T5908] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 892.992426][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.042012][ T5908] usb 3-1: Product: syz [ 893.064684][ T5908] usb 3-1: Manufacturer: syz [ 893.101674][ T5908] usb 3-1: SerialNumber: syz [ 893.129505][ T5908] r8152-cfgselector 3-1: Unknown version 0x0000 [ 893.159796][ T5908] r8152-cfgselector 3-1: config 0 descriptor?? [ 893.368910][T22804] loop3: detected capacity change from 0 to 32768 [ 893.655229][ T5893] r8152-cfgselector 3-1: USB disconnect, device number 97 [ 894.283353][T22804] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 894.588631][T22804] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 894.588631][T22804] allowing incompatible features above 0.0: (unknown version) [ 894.868927][T22846] loop6: detected capacity change from 0 to 16 [ 894.901458][T22804] bcachefs (loop3): initializing new filesystem [ 894.978373][T22804] bcachefs (loop3): going read-write [ 895.061569][T22804] bcachefs (loop3): bch2_rebalance_start(): error creating rebalance thread EINTR [ 895.090718][T22846] erofs (device loop6): mounted with root inode @ nid 36. [ 895.170169][T22804] bcachefs (loop3): __bch2_fs_read_write(): error error starting rebalance thread EINTR [ 895.260159][T22804] bcachefs (loop3): going read-only [ 895.309871][T22804] bcachefs (loop3): finished waiting for writes to stop [ 895.359913][T22804] bcachefs (loop3): flushing journal and stopping allocators, journal seq 0 [ 895.428493][T22804] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 0 [ 895.498241][T22855] loop4: detected capacity change from 0 to 2048 [ 895.553146][T22855] EXT4-fs: Ignoring removed mblk_io_submit option [ 895.626972][T22804] bcachefs (loop3): unclean shutdown complete, journal seq 1 [ 895.813358][T22804] bcachefs (loop3): done going read-only, filesystem not clean [ 895.860128][T22855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.891547][T22804] bcachefs (loop3): bch2_fs_initialize(): error EINTR [ 895.933650][T22857] loop0: detected capacity change from 0 to 4096 [ 895.950845][T22804] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 896.021764][T22804] bcachefs (loop3): shutting down [ 896.040514][T22857] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 896.091257][T22855] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7426: bg 0: block 234: padding at end of block bitmap is not set [ 896.252610][T22855] EXT4-fs (loop4): Remounting filesystem read-only [ 896.408973][T22857] ntfs3(loop0): ino=19, mi_enum_attr [ 896.445802][T22857] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 896.499993][T22804] bcachefs (loop3): shutdown complete [ 896.540056][T22870] loop6: detected capacity change from 0 to 16 [ 896.578227][T22857] ntfs3(loop0): failed to convert "c46c" to iso8859-2 [ 896.629544][T22870] erofs (device loop6): mounted with root inode @ nid 36. [ 896.709821][T22857] ntfs3(loop0): ino=20, mi_enum_attr [ 896.881837][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.649121][T22879] bond1: entered promiscuous mode [ 897.692973][T22879] bond1: entered allmulticast mode [ 897.731794][T22879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 898.359657][T22892] netlink: set zone limit has 8 unknown bytes [ 899.349510][T22907] netlink: 404 bytes leftover after parsing attributes in process `syz.4.7449'. [ 900.345689][T22926] loop2: detected capacity change from 0 to 128 [ 900.507525][T22926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 900.570732][T22926] System zones: 1-3, 19-19, 35-36 [ 900.648148][T22926] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 900.784746][T22926] ext4 filesystem being mounted at /1191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 900.936878][T22926] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 901.191504][T22939] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7465'. [ 901.296303][ T5837] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.360080][T22939] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7465'. [ 901.451016][T22943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7467'. [ 902.592681][T22952] loop0: detected capacity change from 0 to 4096 [ 902.840336][T22965] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 902.959644][T22952] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 903.043126][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7478'. [ 903.096251][T22952] Remounting filesystem read-only [ 903.750416][T22977] Timeout policy `syz1' can only be used by L3 protocol number 32821 [ 904.229193][T22985] loop4: detected capacity change from 0 to 256 [ 904.355149][T22985] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 904.614761][T22985] exFAT-fs (loop4): error, in sector 160, dentry 12 should be unused, but 0x85 [ 904.680076][T22985] exFAT-fs (loop4): Filesystem has been set read-only [ 905.116436][T22804] bcachefs: bch2_fs_get_tree() error: EINTR [ 906.673211][T23021] loop0: detected capacity change from 0 to 512 [ 906.735211][T23021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 906.889251][T23021] EXT4-fs (loop0): 1 truncate cleaned up [ 906.960573][T23021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.567685][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.378988][T23054] loop4: detected capacity change from 0 to 512 [ 908.478055][T23054] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 908.510355][T23058] netlink: 'syz.0.7520': attribute type 5 has an invalid length. [ 908.625411][T23054] EXT4-fs (loop4): orphan cleanup on readonly fs [ 908.704151][T23054] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.7518: bad orphan inode 15 [ 908.839963][T23054] ext4_test_bit(bit=14, block=18) = 1 [ 908.845408][T23054] is_bad_inode(inode)=0 [ 908.925083][T23054] NEXT_ORPHAN(inode)=1023 [ 908.929475][T23054] max_ino=32 [ 909.019769][T23054] i_nlink=0 [ 909.059890][T23054] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.7518: corrupted xattr block 19: e_value size too large [ 909.210477][T23072] loop2: detected capacity change from 0 to 8 [ 909.251229][T23054] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 909.323440][T23054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 909.371086][T23072] SQUASHFS error: zlib decompression failed, data probably corrupt [ 909.438598][T23072] SQUASHFS error: Failed to read block 0x9b: -5 [ 909.519292][T23075] loop6: detected capacity change from 0 to 2048 [ 909.527039][T23072] SQUASHFS error: Unable to read metadata cache entry [99] [ 909.601722][T23072] SQUASHFS error: Unable to read inode 0x127 [ 909.778047][T23075] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 909.834837][T23081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7531'. [ 909.897246][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.041770][T23082] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 910.175763][T23075] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 910.291520][T23075] Remounting filesystem read-only [ 910.296753][T23075] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 911.518399][T23107] loop0: detected capacity change from 0 to 64 [ 913.558134][T23142] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7560'. [ 913.640041][T23142] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7560'. [ 913.685961][T23142] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7560'. [ 913.714622][T23144] openvswitch: netlink: Message has 2 unknown bytes. [ 914.089384][T23110] loop4: detected capacity change from 0 to 32768 [ 914.167740][T23110] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7541 (23110) [ 915.961087][T23183] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7578'. [ 916.084988][T23183] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7578'. [ 916.294073][T23183] gretap1: entered promiscuous mode [ 916.349869][T23183] gretap1: entered allmulticast mode [ 916.722952][T23188] veth3: entered allmulticast mode [ 916.890047][T23196] No such timeout policy "syz0" [ 916.895124][ T970] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 917.149808][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 917.230249][ T970] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 917.238490][ T970] usb 3-1: config 0 has no interface number 0 [ 917.389955][ T970] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 917.519880][ T970] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 917.689374][ T970] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 917.756983][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.789093][T23202] loop3: detected capacity change from 0 to 4096 [ 917.811773][ T970] usb 3-1: Product: syz [ 917.834414][ T970] usb 3-1: Manufacturer: syz [ 917.858161][T16602] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 917.879974][ T970] usb 3-1: SerialNumber: syz [ 917.915221][ T970] usb 3-1: config 0 descriptor?? [ 917.949078][T23191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.977497][T23202] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 918.013977][T23191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 918.415671][T23191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 918.425997][T23217] loop4: detected capacity change from 0 to 128 [ 918.505443][T23217] FAT-fs (loop4): Directory bread(block 11554) failed [ 918.576232][T23217] FAT-fs (loop4): Directory bread(block 11555) failed [ 918.583596][T23191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 918.633225][T23217] FAT-fs (loop4): Directory bread(block 11556) failed [ 918.700303][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7595'. [ 918.723252][T23217] FAT-fs (loop4): Directory bread(block 11557) failed [ 918.809889][T23217] FAT-fs (loop4): Directory bread(block 11558) failed [ 918.894780][T23217] FAT-fs (loop4): Directory bread(block 11559) failed [ 918.916253][ T970] asix 3-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 918.989817][T23217] FAT-fs (loop4): Directory bread(block 11560) failed [ 919.027370][ T970] asix 3-1:0.255: probe with driver asix failed with error -71 [ 919.063554][T23217] FAT-fs (loop4): Directory bread(block 11561) failed [ 919.113335][T23217] FAT-fs (loop4): Directory bread(block 11562) failed [ 919.158424][ T970] usb 3-1: USB disconnect, device number 98 [ 919.225458][T23217] FAT-fs (loop4): Directory bread(block 11563) failed [ 920.268162][ T72] bridge0: port 3(macvlan1) entered disabled state [ 920.717775][T23246] loop5: detected capacity change from 0 to 1024 [ 920.764968][T23246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 921.011274][T23255] netlink: 'syz.3.7611': attribute type 3 has an invalid length. [ 921.019078][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7611'. [ 921.071908][T23246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.656732][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.665995][ T5908] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 921.870106][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 921.980120][ T5908] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 921.988349][ T5908] usb 3-1: config 4 has no interface number 0 [ 922.069811][ T5908] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.091083][T23270] bridge0: port 1(netdevsim0) entered blocking state [ 922.138998][T23270] bridge0: port 1(netdevsim0) entered disabled state [ 922.154092][ T5908] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.218773][T23270] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 922.281232][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 922.332220][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.384137][T23272] loop5: detected capacity change from 0 to 256 [ 922.449582][ T5908] hub 3-1:4.128: USB hub found [ 922.636431][ T5908] hub 3-1:4.128: config failed, hub has too many ports! (err -19) [ 922.665889][T23272] FAT-fs (loop5): Directory bread(block 64) failed [ 922.734995][T23272] FAT-fs (loop5): Directory bread(block 65) failed [ 922.791127][T23272] FAT-fs (loop5): Directory bread(block 66) failed [ 922.876128][T23272] FAT-fs (loop5): Directory bread(block 67) failed [ 922.932222][T23272] FAT-fs (loop5): Directory bread(block 68) failed [ 922.985145][T23272] FAT-fs (loop5): Directory bread(block 69) failed [ 923.011488][ T5908] usb 3-1: USB disconnect, device number 99 [ 923.049905][T23272] FAT-fs (loop5): Directory bread(block 70) failed [ 923.056502][T23272] FAT-fs (loop5): Directory bread(block 71) failed [ 923.140690][T23272] FAT-fs (loop5): Directory bread(block 72) failed [ 923.203556][T23272] FAT-fs (loop5): Directory bread(block 73) failed [ 923.393306][T23282] loop3: detected capacity change from 0 to 8 [ 923.475899][T23272] syz.5.7618: attempt to access beyond end of device [ 923.475899][T23272] loop5: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 923.630473][T23272] syz.5.7618: attempt to access beyond end of device [ 923.630473][T23272] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 923.802438][ T30] audit: type=1800 audit(2000000041.600:133): pid=23272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7618" name="file1" dev="loop5" ino=1048669 res=0 errno=0 [ 923.971649][T23286] loop4: detected capacity change from 0 to 8 [ 924.103893][T23286] SQUASHFS error: Failed to read block 0x6e6: -5 [ 924.203056][T23286] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 924.279860][T23286] SQUASHFS error: Unable to read directory block [631:26] [ 924.490250][T23268] loop6: detected capacity change from 0 to 32768 [ 924.573295][T23268] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7617 (23268) [ 924.678562][ T30] audit: type=1326 audit(2000000042.470:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23293 comm="syz.3.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 924.899942][ T30] audit: type=1326 audit(2000000042.470:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23293 comm="syz.3.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 925.129091][ T30] audit: type=1326 audit(2000000042.510:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23293 comm="syz.3.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 925.400336][ T30] audit: type=1326 audit(2000000042.510:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23293 comm="syz.3.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 925.636613][ T30] audit: type=1326 audit(2000000042.510:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23293 comm="syz.3.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 926.044016][T23310] loop2: detected capacity change from 0 to 4096 [ 926.145214][T23310] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 926.697129][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7640'. [ 926.706621][T23332] syz.3.7650: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 926.824349][T23334] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.866294][T23332] CPU: 0 UID: 0 PID: 23332 Comm: syz.3.7650 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 926.866331][T23332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.866348][T23332] Call Trace: [ 926.866358][T23332] [ 926.866370][T23332] dump_stack_lvl+0x189/0x250 [ 926.866418][T23332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.866457][T23332] ? __pfx__printk+0x10/0x10 [ 926.866484][T23332] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 926.866513][T23332] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 926.866542][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.866573][T23332] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 926.866605][T23332] warn_alloc+0x214/0x310 [ 926.866644][T23332] ? __pfx___schedule+0x10/0x10 [ 926.866679][T23332] ? __pfx_warn_alloc+0x10/0x10 [ 926.866717][T23332] ? kasan_save_track+0x4f/0x80 [ 926.866747][T23332] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 926.866780][T23332] ? xskq_create+0x56/0x170 [ 926.866813][T23332] ? __x64_sys_setsockopt+0x18b/0x220 [ 926.866846][T23332] ? do_syscall_64+0xf6/0x210 [ 926.866879][T23332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.866920][T23332] __vmalloc_node_range_noprof+0x125/0x12c0 [ 926.867003][T23332] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 926.867046][T23332] ? __kasan_kmalloc+0x93/0xb0 [ 926.867080][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867115][T23332] vmalloc_user_noprof+0x74/0x80 [ 926.867154][T23332] ? xskq_create+0xbf/0x170 [ 926.867184][T23332] xskq_create+0xbf/0x170 [ 926.867219][T23332] xsk_init_queue+0xb0/0x110 [ 926.867254][T23332] xsk_setsockopt+0x43f/0x710 [ 926.867287][T23332] ? __pfx_xsk_setsockopt+0x10/0x10 [ 926.867317][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867352][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867386][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867415][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867444][T23332] ? __pfx_xsk_setsockopt+0x10/0x10 [ 926.867476][T23332] do_sock_setsockopt+0x25a/0x3e0 [ 926.867515][T23332] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 926.867553][T23332] ? __fget_files+0x2a/0x420 [ 926.867595][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867624][T23332] ? __fget_files+0x3a0/0x420 [ 926.867658][T23332] ? __fget_files+0x2a/0x420 [ 926.867705][T23332] __x64_sys_setsockopt+0x18b/0x220 [ 926.867805][T23332] do_syscall_64+0xf6/0x210 [ 926.867845][T23332] ? srso_alias_return_thunk+0x5/0xfbef5 [ 926.867875][T23332] ? exc_page_fault+0x91/0x110 [ 926.867910][T23332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.867936][T23332] RIP: 0033:0x7fd73af8e969 [ 926.867959][T23332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.867981][T23332] RSP: 002b:00007fd73be3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 926.868008][T23332] RAX: ffffffffffffffda RBX: 00007fd73b1b5fa0 RCX: 00007fd73af8e969 [ 926.868029][T23332] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 926.868046][T23332] RBP: 00007fd73b010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 926.868062][T23332] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 926.868080][T23332] R13: 0000000000000000 R14: 00007fd73b1b5fa0 R15: 00007ffc063d80b8 [ 926.868120][T23332] [ 926.868130][T23332] Mem-Info: [ 927.243629][T23334] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 927.246110][T23332] active_anon:9367 inactive_anon:1 isolated_anon:0 [ 927.246110][T23332] active_file:14097 inactive_file:40589 isolated_file:0 [ 927.246110][T23332] unevictable:768 dirty:350 writeback:0 [ 927.246110][T23332] slab_reclaimable:10947 slab_unreclaimable:107808 [ 927.246110][T23332] mapped:35960 shmem:2400 pagetables:1227 [ 927.246110][T23332] sec_pagetables:0 bounce:0 [ 927.246110][T23332] kernel_misc_reclaimable:0 [ 927.246110][T23332] free:1297114 free_pcp:630 free_cma:0 [ 927.385698][T23310] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 927.385751][T23310] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 927.508223][T23332] Node 0 active_anon:37268kB inactive_anon:4kB active_file:56388kB inactive_file:162260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143840kB dirty:1296kB writeback:0kB shmem:8064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11532kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.508306][T23332] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.508374][T23332] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.508450][T23332] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 927.508511][T23332] Node 0 DMA32 free:1262324kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:37260kB inactive_anon:4kB active_file:56388kB inactive_file:162168kB unevictable:1536kB writepending:1392kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:3420kB local_pcp:1300kB free_cma:0kB [ 927.508589][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 927.508647][T23332] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 927.508717][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 927.508783][T23332] Node 1 Normal free:3909852kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.508859][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 927.508918][T23332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 927.509124][T23332] Node 0 DMA32: 356*4kB (UM) 1144*8kB (UM) 947*16kB (UME) 550*32kB (UME) 542*64kB (UME) 546*128kB (UME) 345*256kB (UME) 168*512kB (UME) 86*1024kB (UME) 6*2048kB (UME) 205*4096kB (UM) = 1262272kB [ 927.509448][T23332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 927.509604][T23332] Node 1 Normal: 227*4kB (UM) 80*8kB (UME) 49*16kB (UME) 208*32kB (UME) 99*64kB (UME) 32*128kB (UME) 17*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3909852kB [ 927.660030][T23332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.660056][T23332] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.660080][T23332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.660104][T23332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.660127][T23332] 57021 total pagecache pages [ 927.660140][T23332] 1 pages in swap cache [ 927.660152][T23332] Free swap = 124992kB [ 927.660165][T23332] Total swap = 124996kB [ 927.660179][T23332] 2097051 pages RAM [ 927.660191][T23332] 0 pages HighMem/MovableOnly [ 927.660202][T23332] 424361 pages reserved [ 927.660214][T23332] 0 pages cma reserved [ 927.762379][T16602] Bluetooth: hci4: unexpected event for opcode 0x200a [ 927.946033][T20058] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 927.946245][ T5837] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 927.946291][ T5837] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 927.946330][ T5837] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 927.971215][T20058] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 928.420714][T23351] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 928.947527][T23350] loop2: detected capacity change from 0 to 4096 [ 930.684782][T23341] loop0: detected capacity change from 0 to 32768 [ 930.856282][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.036127][T23379] loop4: detected capacity change from 0 to 16 [ 931.098309][T23379] erofs (device loop4): mounted with root inode @ nid 36. [ 931.150555][T23379] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 931.172650][T23379] erofs (device loop4): read error -117 @ 43 of nid 36 [ 931.279289][T23381] loop6: detected capacity change from 0 to 8 [ 931.915282][T23390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7677'. [ 931.915313][T23390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7677'. [ 931.915334][T23390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7677'. [ 932.530808][T23397] ubi31: attaching mtd0 [ 932.562910][T23397] ubi31: scanning is finished [ 932.562935][T23397] ubi31: empty MTD device detected [ 932.799898][ T5908] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 932.910466][T23337] tty tty1: ldisc open failed (-12), clearing slot 0 [ 932.968368][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.022880][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.120152][ T5908] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 933.198537][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 933.298012][ T5908] usb 3-1: SerialNumber: syz [ 933.519035][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7686'. [ 933.553818][T23412] loop5: detected capacity change from 0 to 64 [ 933.709888][T23397] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 933.755336][ T5908] usb 3-1: 0:2 : does not exist [ 933.797797][T23397] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 933.827589][ T5908] usb 3-1: unit 5: unexpected type 0x03 [ 933.919475][T23397] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 933.991522][T23397] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 934.084794][ T5908] usb 3-1: USB disconnect, device number 100 [ 934.110645][T23397] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 934.215937][T23397] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 934.320032][T23397] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2044906158 [ 934.436161][T23397] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 934.535265][T23413] ubi31: background thread "ubi_bgt31d" started, PID 23413 [ 934.592664][ T7347] udevd[7347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.910727][T23426] kAFS: unable to lookup cell 'sy@0' [ 937.598776][T23458] loop3: detected capacity change from 0 to 4096 [ 937.730016][T23458] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 938.336660][T23474] lo speed is unknown, defaulting to 1000 [ 938.429932][T23474] lo speed is unknown, defaulting to 1000 [ 938.468154][T23458] ntfs3(loop3): ino=1a, mi_enum_attr [ 938.498915][T23458] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 938.549923][T23474] lo speed is unknown, defaulting to 1000 [ 938.578446][T23480] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7720'. [ 938.636398][T23458] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 938.650613][T23482] netlink: 248 bytes leftover after parsing attributes in process `syz.6.7721'. [ 938.689158][T23474] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 938.964614][T23474] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 939.396251][T23490] program syz.6.7725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.470808][T23474] lo speed is unknown, defaulting to 1000 [ 939.480417][ T5908] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 939.555045][T23490] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 939.595133][T23474] lo speed is unknown, defaulting to 1000 [ 939.721887][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 939.727735][T23474] lo speed is unknown, defaulting to 1000 [ 939.785268][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 939.838902][T23474] lo speed is unknown, defaulting to 1000 [ 939.919414][T23474] lo speed is unknown, defaulting to 1000 [ 939.925614][ T5908] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 940.016340][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.074306][T23474] lo speed is unknown, defaulting to 1000 [ 940.104985][ T5908] usb 6-1: config 0 descriptor?? [ 940.205979][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input57 [ 940.392083][ T5179] bcm5974 6-1:0.0: could not read from device [ 940.460683][T23504] x_tables: duplicate underflow at hook 3 [ 940.512929][ T5908] bcm5974 6-1:0.0: could not read from device [ 940.641959][ T5179] bcm5974 6-1:0.0: could not read from device [ 940.844334][ T5908] input: failed to attach handler mousedev to device input57, error: -5 [ 940.943734][ T5179] bcm5974 6-1:0.0: could not read from device [ 940.994672][ T5908] usb 6-1: USB disconnect, device number 109 [ 941.402608][T23519] netlink: 'syz.2.7739': attribute type 21 has an invalid length. [ 941.750879][T23522] loop4: detected capacity change from 0 to 1024 [ 942.054934][T23522] fuse: Bad value for 'fd' [ 943.153639][T23545] loop3: detected capacity change from 0 to 164 [ 943.412729][ T30] audit: type=1326 audit(2000000061.220:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.4.7753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 943.483398][T23545] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 943.632043][ T30] audit: type=1326 audit(2000000061.220:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.4.7753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 944.148178][T23560] netlink: 'syz.3.7759': attribute type 1 has an invalid length. [ 946.210524][T23595] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 946.399559][T23601] usb usb1: check_ctrlrecip: process 23601 (syz.2.7779) requesting ep 01 but needs 81 [ 946.496860][T23601] usb usb1: usbfs: process 23601 (syz.2.7779) did not claim interface 0 before use [ 946.518132][T23603] loop3: detected capacity change from 0 to 512 [ 946.676697][T23603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.830011][T23603] ext4 filesystem being mounted at /1301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.230933][T23614] dvmrp0: entered allmulticast mode [ 947.413455][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.339841][ T5908] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 948.587624][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 948.639915][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.717384][T23638] C: renamed from team_slave_0 (while UP) [ 948.717836][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 948.777267][T23593] loop5: detected capacity change from 0 to 32768 [ 948.857081][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 948.872103][T23593] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7775 (23593) [ 948.950960][T23638] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7794'. [ 948.978235][ T5908] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 948.978271][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.996234][ T5908] usb 7-1: config 0 descriptor?? [ 949.070759][T23629] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 949.099826][T23638] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 949.144970][ T5908] hub 7-1:0.0: USB hub found [ 949.331801][ T5908] hub 7-1:0.0: config failed, hub has too many ports! (err -19) [ 949.461682][ T5893] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 949.541794][ T5908] usbhid 7-1:0.0: can't add hid device: -71 [ 949.548209][ T5908] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 949.720922][ T5908] usb 7-1: USB disconnect, device number 4 [ 949.730685][ T5893] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 949.773471][ T5893] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 949.878381][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 949.939866][ T5893] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 950.097305][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 950.194212][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 950.305923][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 950.512024][ T5893] usb 5-1: string descriptor 0 read error: -22 [ 950.518364][ T5893] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 950.659602][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.734981][T23665] libceph: resolve '0' (ret=-3): failed [ 950.784798][ T5893] usb 5-1: config 0 descriptor?? [ 950.864158][ T5893] hub 5-1:0.0: bad descriptor, ignoring hub [ 950.929904][ T5893] hub 5-1:0.0: probe with driver hub failed with error -5 [ 950.993738][ T5893] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 951.343548][ T5893] usb 5-1: USB disconnect, device number 103 [ 951.670171][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7815'. [ 952.521670][T23690] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 953.235330][T23706] sit0: entered promiscuous mode [ 953.301484][T23706] netlink: 'syz.2.7829': attribute type 1 has an invalid length. [ 953.301510][T23706] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7829'. [ 953.650313][T23711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7832'. [ 954.748359][T23735] loop0: detected capacity change from 0 to 16 [ 954.755202][T23734] netlink: 'syz.6.7843': attribute type 11 has an invalid length. [ 954.836639][T23734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7843'. [ 954.854136][T23735] erofs (device loop0): mounted with root inode @ nid 36. [ 954.990245][T23735] erofs (device loop0): inconsistent algorithmtype 0 for nid 36 [ 955.060911][T23735] erofs (device loop0): inconsistent algorithmtype 0 for nid 36 [ 955.068616][T23735] erofs (device loop0): read error -117 @ 72 of nid 36 [ 956.043024][T23761] loop6: detected capacity change from 0 to 256 [ 956.315359][T23761] FAT-fs (loop6): Directory bread(block 64) failed [ 956.340032][T23761] FAT-fs (loop6): Directory bread(block 65) failed [ 956.346690][T23761] FAT-fs (loop6): Directory bread(block 66) failed [ 956.471805][T23761] FAT-fs (loop6): Directory bread(block 67) failed [ 956.478512][T23761] FAT-fs (loop6): Directory bread(block 68) failed [ 956.516518][T23761] FAT-fs (loop6): Directory bread(block 69) failed [ 956.605410][T23761] FAT-fs (loop6): Directory bread(block 70) failed [ 956.677342][T23761] FAT-fs (loop6): Directory bread(block 71) failed [ 956.743878][T23761] FAT-fs (loop6): Directory bread(block 72) failed [ 956.815673][T23761] FAT-fs (loop6): Directory bread(block 73) failed [ 956.987160][T23777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.056156][T23781] loop3: detected capacity change from 0 to 16 [ 957.141061][T23781] erofs (device loop3): mounted with root inode @ nid 36. [ 957.367246][ T30] audit: type=1800 audit(2000000075.160:141): pid=23761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7856" name="file2" dev="loop6" ino=1048670 res=0 errno=0 [ 958.644674][T23804] netlink: 'syz.4.7876': attribute type 1 has an invalid length. [ 958.772540][T23797] loop6: detected capacity change from 0 to 4096 [ 959.081428][T23797] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 959.231925][T23797] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 959.630887][T19883] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 959.799910][T23822] netlink: 'syz.5.7886': attribute type 10 has an invalid length. [ 960.009192][T23822] team0: Device veth1_macvtap failed to register rx_handler [ 960.072111][T23826] loop6: detected capacity change from 0 to 24 [ 960.226562][T23823] loop4: detected capacity change from 0 to 4096 [ 961.177330][T23799] loop2: detected capacity change from 0 to 32768 [ 961.266541][T23799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7877 (23799) [ 961.476976][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7897'. [ 962.073775][T23846] loop0: detected capacity change from 0 to 2048 [ 962.276078][T23846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 962.459826][ T5893] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 962.755438][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 962.840152][ T5893] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 962.902073][ T5893] usb 6-1: config 179 has no interface number 0 [ 962.957067][ T5893] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 963.048539][ T5893] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 963.098261][T23863] netlink: 'syz.4.7906': attribute type 2 has an invalid length. [ 963.150566][T23863] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7906'. [ 963.216390][ T5893] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 963.352227][ T5893] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 963.493884][ T5893] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 963.601886][ T5893] usb 6-1: config 179 interface 65 has no altsetting 0 [ 963.639327][ T5893] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 963.695517][T23872] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 963.754245][T23869] loop6: detected capacity change from 0 to 1024 [ 963.764114][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.869166][T23872] CIFS mount error: No usable UNC path provided in device string! [ 963.869166][T23872] [ 963.928364][ T5893] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input59 [ 963.987667][T23872] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 964.102339][ T5179] input input59: unable to receive magic message: -110 [ 964.346026][ T5179] input input59: unable to receive magic message: -32 [ 964.383111][ T5908] usb 6-1: USB disconnect, device number 110 [ 964.383193][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 964.383245][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 964.692172][ T5908] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 964.836389][T23884] loop4: detected capacity change from 0 to 64 [ 965.262878][ T30] audit: type=1800 audit(2000000083.069:142): pid=23884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7917" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 965.544245][T23894] loop5: detected capacity change from 0 to 64 [ 966.536896][T23914] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 966.675552][T23918] loop3: detected capacity change from 0 to 2048 [ 967.093821][ T6491] loop3: p1 < > p4 [ 967.143006][ T6491] loop3: p4 size 8388608 extends beyond EOD, truncated [ 967.286376][T23918] loop3: p1 < > p4 [ 967.429863][ T5893] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 967.485598][T23918] loop3: p4 size 8388608 extends beyond EOD, truncated [ 967.677257][ T5194] loop3: p1 < > p4 [ 967.689859][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 967.719019][ T5194] loop3: p4 size 8388608 extends beyond EOD, truncated [ 967.730457][T23938] tmpfs: Bad value for 'mpol' [ 967.767241][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 967.801765][ T5893] usb 5-1: string descriptor 0 read error: -22 [ 967.838836][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.895560][T23940] vivid-004: disconnect [ 967.926165][T23939] vivid-004: reconnect [ 967.931125][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.112966][ T5893] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 968.164477][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 968.229003][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 968.475553][T23946] loop0: detected capacity change from 0 to 2048 [ 968.551417][T23946] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 968.598077][ T5893] usb 5-1: USB disconnect, device number 104 [ 968.622656][T23946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 968.690127][ T7347] udevd[7347]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 968.747529][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 969.099829][ T1208] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 969.185735][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 969.199202][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.250259][ T7347] udevd[7347]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 969.323415][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 969.367313][ T1208] usb 6-1: config 0 has an invalid interface number: 114 but max is 0 [ 969.425678][ T1208] usb 6-1: config 0 has no interface number 0 [ 969.486461][ T1208] usb 6-1: config 0 interface 114 has no altsetting 0 [ 969.597199][ T1208] usb 6-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f2.69 [ 969.709465][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.826845][ T1208] usb 6-1: Product: syz [ 969.875874][ T1208] usb 6-1: Manufacturer: syz [ 969.929625][ T1208] usb 6-1: SerialNumber: syz [ 969.986170][ T1208] usb 6-1: config 0 descriptor?? [ 970.329051][ T970] usb 6-1: USB disconnect, device number 111 [ 970.966354][T23982] loop6: detected capacity change from 0 to 8 [ 971.043515][T23982] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 971.149763][T23982] cramfs: empty filesystem [ 971.188364][ T7347] udevd[7347]: incorrect cramfs checksum on /dev/loop6 [ 971.277068][T23984] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 971.383362][ T7347] udevd[7347]: incorrect cramfs checksum on /dev/loop6 [ 971.799073][ T30] audit: type=1326 audit(2000000089.599:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23994 comm="syz.6.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 971.967317][T23997] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 972.030143][ T30] audit: type=1326 audit(2000000089.639:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23994 comm="syz.6.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 972.080942][T23997] bridge4: entered promiscuous mode [ 972.135317][T23997] bridge4: entered allmulticast mode [ 972.227666][ T30] audit: type=1326 audit(2000000089.659:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23994 comm="syz.6.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 972.464752][ T30] audit: type=1326 audit(2000000089.659:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23994 comm="syz.6.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 972.688296][ T30] audit: type=1326 audit(2000000089.659:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23994 comm="syz.6.7969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 973.285274][T24019] netlink: 'syz.2.7980': attribute type 15 has an invalid length. [ 973.653645][T24024] loop6: detected capacity change from 0 to 512 [ 973.763162][T24028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7985'. [ 973.839348][T24024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 973.991705][T24024] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.010277][T24035] netlink: 248 bytes leftover after parsing attributes in process `syz.5.7987'. [ 974.274144][T24024] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 974.389972][T24024] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 974.479907][T24024] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.7983: Failed to acquire dquot type 0 [ 974.964043][T19883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 974.989906][T24050] netlink: 'syz.2.7994': attribute type 21 has an invalid length. [ 975.060639][T24050] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7994'. [ 975.530794][T24061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.700157][T24065] set match dimension is over the limit! [ 976.268283][T24078] loop5: detected capacity change from 0 to 8 [ 976.346945][T24078] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 976.487864][T24078] cramfs: Error -3 while decompressing! [ 976.497114][ T7347] udevd[7347]: incorrect cramfs checksum on /dev/loop5 [ 976.550076][T24078] cramfs: ffffffff9993e448(26)->ffff888048ff2000(4096) [ 976.660142][T24078] cramfs: Error -3 while decompressing! [ 976.712553][T24078] cramfs: ffffffff9993e462(26)->ffff888048ff3000(4096) [ 976.809484][T24078] cramfs: Error -3 while decompressing! [ 976.848955][T24078] cramfs: ffffffff9993e47c(16)->ffff888048d4c000(4096) [ 976.914946][T24078] cramfs: Error -3 while decompressing! [ 976.948456][T24086] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 976.990233][T24078] cramfs: ffffffff9993e448(26)->ffff888048ff2000(4096) [ 978.016676][T24088] loop6: detected capacity change from 0 to 8192 [ 978.569855][ T1208] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 978.595776][T24113] loop0: detected capacity change from 0 to 64 [ 978.814087][ T1208] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 978.930829][ T1208] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 979.056747][ T1208] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 979.159770][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.236319][T24109] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 979.305847][ T1208] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 979.740025][ T1208] usb 6-1: USB disconnect, device number 112 [ 980.459449][T24134] loop6: detected capacity change from 0 to 1024 [ 980.649280][ T30] audit: type=1326 audit(2000000098.449:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24136 comm="syz.2.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 980.741920][T24133] loop3: detected capacity change from 0 to 4096 [ 980.865023][T24133] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 980.979831][T24134] hfsplus: xattr search failed [ 980.994064][ T30] audit: type=1326 audit(2000000098.449:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24136 comm="syz.2.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 981.067920][T24145] loop5: detected capacity change from 0 to 1024 [ 981.194567][T24145] EXT4-fs: Ignoring removed oldalloc option [ 981.204753][ T30] audit: type=1326 audit(2000000098.449:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24136 comm="syz.2.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 981.296167][T24145] EXT4-fs: Ignoring removed bh option [ 981.444701][ T30] audit: type=1326 audit(2000000098.449:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24136 comm="syz.2.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 981.549809][ T30] audit: type=1326 audit(2000000098.449:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24136 comm="syz.2.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 981.658520][T24145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.804993][T24158] binder: 24154:24158 ioctl c018620c 200000000380 returned -22 [ 981.871409][T24145] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.503921][ T30] audit: type=1326 audit(2000000100.299:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.0.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d278e969 code=0x7ffc0000 [ 982.785552][ T30] audit: type=1326 audit(2000000100.299:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.0.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d278e969 code=0x7ffc0000 [ 982.826396][T24171] netlink: 'syz.5.8044': attribute type 10 has an invalid length. [ 982.908862][T24171] veth1_vlan: entered allmulticast mode [ 983.061673][T24171] team0: Device veth1_vlan failed to register rx_handler [ 983.070508][ T30] audit: type=1326 audit(2000000100.389:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.0.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f29d278e969 code=0x7ffc0000 [ 983.321326][ T30] audit: type=1326 audit(2000000100.389:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24164 comm="syz.0.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d278e969 code=0x7ffc0000 [ 984.164610][T24189] loop5: detected capacity change from 0 to 4096 [ 984.226172][T24189] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 984.399983][ T5908] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 984.458854][T24189] ntfs3(loop5): ino=19, mi_enum_attr [ 984.509843][T24189] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 984.672854][ T5908] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 984.687304][T24189] ntfs3(loop5): failed to convert "c46c" to macturkish [ 984.704502][ T5908] usb 3-1: config 0 has no interface number 0 [ 984.755049][T24189] ntfs3(loop5): ino=20, mi_enum_attr [ 984.789280][ T5908] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 6400, setting to 64 [ 984.877589][ T5908] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 985.010092][ T5908] usb 3-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 985.019201][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.152492][ T5908] usb 3-1: Product: syz [ 985.156722][ T5908] usb 3-1: Manufacturer: syz [ 985.218703][ T5908] usb 3-1: SerialNumber: syz [ 985.301849][ T5908] usb 3-1: config 0 descriptor?? [ 985.311568][T24194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.318851][T24194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.440447][T24211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8059'. [ 985.449487][T24211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8059'. [ 985.633385][T24213] netlink: 'syz.4.8060': attribute type 4 has an invalid length. [ 985.746126][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 985.812717][ T5908] usb 3-1: MIDIStreaming interface descriptor not found [ 986.055743][ T5908] usb 3-1: USB disconnect, device number 101 [ 986.185879][T24179] loop0: detected capacity change from 0 to 32768 [ 986.203440][T24219] loop5: detected capacity change from 0 to 128 [ 986.375733][T24219] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 986.440081][T24223] netlink: 'syz.4.8064': attribute type 15 has an invalid length. [ 986.522852][T24223] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8064'. [ 986.602388][T24219] ext4 filesystem being mounted at /1359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 987.022570][ T6083] udevd[6083]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.458949][ T5834] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 988.220821][T24250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8069'. [ 988.326850][T24245] loop3: detected capacity change from 0 to 2048 [ 988.446564][T24245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.558904][T24252] loop0: detected capacity change from 0 to 256 [ 988.756841][T24252] FAT-fs (loop0): Directory bread(block 64) failed [ 988.769588][T24254] vivid-000: ================= START STATUS ================= [ 988.825766][T24252] FAT-fs (loop0): Directory bread(block 65) failed [ 988.869891][T24254] vivid-000: Generate PTS: true [ 988.950192][T24252] FAT-fs (loop0): Directory bread(block 66) failed [ 988.962481][T24254] vivid-000: Generate SCR: true [ 988.998022][T24254] tpg source WxH: 720x576 (Y'CbCr) [ 989.025476][T24252] FAT-fs (loop0): Directory bread(block 67) failed [ 989.095745][T24254] tpg field: 4 [ 989.130508][T24252] FAT-fs (loop0): Directory bread(block 68) failed [ 989.137110][T24252] FAT-fs (loop0): Directory bread(block 69) failed [ 989.149906][T24254] tpg crop: (0,0)/64x64 [ 989.225451][T24254] tpg compose: (0,0)/16x16 [ 989.301026][T24254] tpg colorspace: 5 [ 989.324056][T24254] tpg transfer function: 0/2 [ 989.430298][T24252] FAT-fs (loop0): Directory bread(block 70) failed [ 989.450061][T24254] tpg Y'CbCr encoding: 7/1 [ 989.524262][T24265] loop3: detected capacity change from 0 to 512 [ 989.535239][T24252] FAT-fs (loop0): Directory bread(block 71) failed [ 989.560630][T24254] tpg quantization: 0/1 [ 989.564852][T24254] tpg RGB range: 0/2 [ 989.568760][T24254] vivid-000: ================== END STATUS ================== [ 989.598184][T24265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 989.601756][T24252] FAT-fs (loop0): Directory bread(block 72) failed [ 989.688205][T24252] FAT-fs (loop0): Directory bread(block 73) failed [ 989.753683][T24265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 989.846440][T24265] System zones: 1-12 [ 989.994005][T24265] EXT4-fs (loop3): 1 truncate cleaned up [ 990.041738][T24265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.565014][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.775869][T24297] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8096'. [ 992.297088][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.049824][ T5908] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 993.249996][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 993.280243][ T5908] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 993.358206][ T5908] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 993.460724][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.568023][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 993.675509][ T5908] usb 4-1: config 1 has no interface number 0 [ 993.738063][ T5908] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 993.829884][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.017306][ T5908] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 994.171881][ T5908] snd_usb_pod 4-1:1.1: set_interface failed [ 994.241273][ T5908] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 994.248634][ T5908] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 994.371253][ T5908] usb 4-1: USB disconnect, device number 104 [ 994.429773][ T1208] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 994.664632][ T1208] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 994.753942][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.796695][ T1208] usb 6-1: Product: syz [ 994.839464][ T1208] usb 6-1: Manufacturer: syz [ 994.884835][ T1208] usb 6-1: SerialNumber: syz [ 994.916337][ T1208] usb 6-1: config 0 descriptor?? [ 994.969211][ T1208] ch341 6-1:0.0: ch341-uart converter detected [ 995.224970][ T1208] usb 6-1: failed to receive control message: -71 [ 995.274404][ T1208] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 995.360228][ T1208] usb 6-1: USB disconnect, device number 113 [ 995.453109][ T1208] ch341 6-1:0.0: device disconnected [ 995.742162][T24353] loop3: detected capacity change from 0 to 4096 [ 995.819187][T24353] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 996.312024][T24353] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 996.319052][T24353] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 996.457735][T24353] ntfs3(loop3): Failed to load $UpCase (-22). [ 996.511163][T24353] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 996.545876][T24370] loop5: detected capacity change from 0 to 1764 [ 996.626566][T24353] ./file0: Can't lookup blockdev [ 996.809525][T24374] loop0: detected capacity change from 0 to 1024 [ 996.929290][T24370] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 996.984416][ T30] audit: type=1326 audit(2000000114.789:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.6.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 997.006800][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.228116][ T30] audit: type=1326 audit(2000000114.819:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.6.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 997.435031][T20058] hfsplus: b-tree write err: -5, ino 4 [ 997.475454][ T30] audit: type=1326 audit(2000000114.839:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.6.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 997.800100][ T30] audit: type=1326 audit(2000000114.839:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.6.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 997.822484][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.176360][ T30] audit: type=1326 audit(2000000114.839:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24375 comm="syz.6.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f2b8e969 code=0x7ffc0000 [ 998.320038][T24395] loop5: detected capacity change from 0 to 16 [ 998.457507][T24395] cramfs: Error -3 while decompressing! [ 998.519362][T24395] cramfs: ffffffff99942448(27)->ffff88804a498000(4096) [ 998.605369][T24395] cramfs: Error -3 while decompressing! [ 998.630474][T24395] cramfs: ffffffff99942463(16)->ffff888049de4000(4096) [ 998.666936][T24395] cramfs: Error -3 while decompressing! [ 998.693969][T24395] cramfs: ffffffff99942448(27)->ffff88804a498000(4096) [ 998.771993][ T30] audit: type=1800 audit(2000000116.579:162): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8139" name="file3" dev="loop5" ino=348 res=0 errno=0 [ 998.890186][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8147'. [ 999.254331][T24412] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 999.664834][T24421] loop4: detected capacity change from 0 to 256 [ 999.811183][T24421] exfat: Deprecated parameter 'utf8' [ 999.816616][T24421] exfat: Deprecated parameter 'utf8' [ 999.980520][T24421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1000.383547][T24426] loop5: detected capacity change from 0 to 4096 [ 1000.561984][T24426] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1000.618110][T24426] UDF-fs: Scanning with blocksize 512 failed [ 1000.770239][T24426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.891574][T24426] loop5: Can't mount, would change RO state [ 1001.046224][T24441] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1001.210014][T24441] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1001.217803][T24441] gretap2: entered promiscuous mode [ 1001.331375][T24441] gretap2: entered allmulticast mode [ 1001.374218][T24447] netlink: 'syz.2.8166': attribute type 3 has an invalid length. [ 1001.449878][T24447] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8166'. [ 1002.202307][T24457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8169'. [ 1002.303657][T24457] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1002.470282][T24464] ip6t_srh: unknown srh match flags 4000 [ 1003.734097][T24485] loop4: detected capacity change from 0 to 256 [ 1004.025591][T24491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8183'. [ 1004.727699][T24502] loop6: detected capacity change from 0 to 64 [ 1005.851014][T24518] loop6: detected capacity change from 0 to 256 [ 1006.283614][T24530] usb usb1: usbfs: process 24530 (syz.0.8201) did not claim interface 0 before use [ 1006.350968][T24532] loop2: detected capacity change from 0 to 128 [ 1007.328458][T24547] loop0: detected capacity change from 0 to 64 [ 1008.340741][ T5894] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1008.375028][T24526] loop3: detected capacity change from 0 to 32768 [ 1008.576772][ T5894] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1008.639880][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.743077][ T5894] usb 7-1: config 0 descriptor?? [ 1008.805523][ T5894] cp210x 7-1:0.0: cp210x converter detected [ 1008.905159][T24526] JBD2: Ignoring recovery information on journal [ 1009.020332][ T5894] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1009.236695][T24526] JBD2: journal reset failed [ 1009.254981][ T5894] usb 7-1: USB disconnect, device number 5 [ 1009.312053][T24526] (syz.3.8199,24526,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 1009.376105][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1009.407848][T24526] (syz.3.8199,24526,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 1009.474375][ T5894] cp210x 7-1:0.0: device disconnected [ 1010.658917][T24595] loop0: detected capacity change from 0 to 64 [ 1011.461984][T24612] ip_vti0: entered promiscuous mode [ 1012.502071][T24634] loop2: detected capacity change from 0 to 8 [ 1012.583096][T24638] netlink: 'syz.6.8251': attribute type 10 has an invalid length. [ 1012.665727][T24630] loop4: detected capacity change from 0 to 4096 [ 1012.697961][T24639] netlink: 'syz.3.8253': attribute type 1 has an invalid length. [ 1012.707377][T24638] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8251'. [ 1012.792217][T24630] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1013.194540][T24630] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1013.346701][T24630] ntfs3(loop4): ino=1e, mi_enum_attr [ 1013.399889][T24630] ntfs3(loop4): ino=1e, mi_enum_attr [ 1013.612888][T24650] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1014.670128][T24664] netlink: 'syz.3.8265': attribute type 23 has an invalid length. [ 1015.722538][T24678] loop4: detected capacity change from 0 to 1764 [ 1015.859982][T24682] netlink: 'syz.5.8272': attribute type 8 has an invalid length. [ 1017.245360][T24707] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8285'. [ 1018.240087][T24730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8293'. [ 1018.931212][T24743] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1019.330158][T24751] ieee802154 phy1 wpan1: encryption failed: -22 [ 1019.520307][ T30] audit: type=1326 audit(2000000137.319:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24754 comm="syz.4.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1019.542688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.759825][ T30] audit: type=1326 audit(2000000137.319:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24754 comm="syz.4.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1019.878132][ T30] audit: type=1326 audit(2000000137.399:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24754 comm="syz.4.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1020.082067][ T30] audit: type=1326 audit(2000000137.399:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24754 comm="syz.4.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1021.287930][T24783] loop5: detected capacity change from 0 to 2048 [ 1021.423837][T24783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.455027][T24791] loop3: detected capacity change from 0 to 256 [ 1021.532129][T24791] exfat: Deprecated parameter 'namecase' [ 1021.656272][T24791] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1022.676896][T24816] netlink: 'syz.2.8335': attribute type 3 has an invalid length. [ 1022.773422][T24820] loop3: detected capacity change from 0 to 16 [ 1022.790111][T24819] afs: Bad value for 'source' [ 1022.838745][T24820] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1023.503419][T24820] ./file1: Can't open blockdev [ 1023.587400][T24836] netlink: 'syz.4.8344': attribute type 10 has an invalid length. [ 1023.714841][T24836] macvlan1: entered allmulticast mode [ 1023.794287][T24836] veth1_vlan: entered allmulticast mode [ 1023.906359][T24836] team0: Port device macvlan1 added [ 1024.006664][T24842] netlink: 'syz.6.8347': attribute type 11 has an invalid length. [ 1024.240022][T24848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8350'. [ 1024.361564][T16602] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 1024.422591][T24844] loop5: detected capacity change from 0 to 4096 [ 1024.508759][T24844] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1024.958954][T24863] loop4: detected capacity change from 0 to 256 [ 1025.740115][T24874] netlink: 'syz.3.8364': attribute type 2 has an invalid length. [ 1025.749093][T24874] netlink: 'syz.3.8364': attribute type 1 has an invalid length. [ 1025.919869][ T30] audit: type=1326 audit(2000000143.709:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24875 comm="syz.2.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 1026.148846][ T30] audit: type=1326 audit(2000000143.719:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24875 comm="syz.2.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 1026.427126][ T30] audit: type=1326 audit(2000000143.769:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24875 comm="syz.2.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 1026.623439][ T30] audit: type=1326 audit(2000000143.769:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24875 comm="syz.2.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 1026.880100][ T30] audit: type=1326 audit(2000000143.769:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24875 comm="syz.2.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab52b8e969 code=0x7ffc0000 [ 1027.209919][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8374'. [ 1027.340062][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8374'. [ 1027.348987][T24900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1027.608363][T24906] loop0: detected capacity change from 0 to 256 [ 1027.962392][T24906] FAT-fs (loop0): Directory bread(block 64) failed [ 1028.027673][T24906] FAT-fs (loop0): Directory bread(block 65) failed [ 1028.106403][T24906] FAT-fs (loop0): Directory bread(block 66) failed [ 1028.189959][T24906] FAT-fs (loop0): Directory bread(block 67) failed [ 1028.275005][T24906] FAT-fs (loop0): Directory bread(block 68) failed [ 1028.364824][T24906] FAT-fs (loop0): Directory bread(block 69) failed [ 1028.372882][T16602] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1028.381982][T16602] Bluetooth: hci1: Injecting HCI hardware error event [ 1028.392183][T16602] Bluetooth: hci1: hardware error 0x00 [ 1028.484124][T24906] FAT-fs (loop0): Directory bread(block 70) failed [ 1028.558048][T24906] FAT-fs (loop0): Directory bread(block 71) failed [ 1028.699922][T24906] FAT-fs (loop0): Directory bread(block 72) failed [ 1028.749817][T24906] FAT-fs (loop0): Directory bread(block 73) failed [ 1029.497379][T24928] loop2: detected capacity change from 0 to 256 [ 1029.747226][T24928] FAT-fs (loop2): Directory bread(block 64) failed [ 1029.836242][T24928] FAT-fs (loop2): Directory bread(block 65) failed [ 1029.959557][T24928] FAT-fs (loop2): Directory bread(block 66) failed [ 1029.977962][T24932] netlink: 248 bytes leftover after parsing attributes in process `syz.5.8389'. [ 1030.019823][T24928] FAT-fs (loop2): Directory bread(block 67) failed [ 1030.026514][T24928] FAT-fs (loop2): Directory bread(block 68) failed [ 1030.152231][T24928] FAT-fs (loop2): Directory bread(block 69) failed [ 1030.202223][T24928] FAT-fs (loop2): Directory bread(block 70) failed [ 1030.255020][T24928] FAT-fs (loop2): Directory bread(block 71) failed [ 1030.326273][T24928] FAT-fs (loop2): Directory bread(block 72) failed [ 1030.398211][T24928] FAT-fs (loop2): Directory bread(block 73) failed [ 1030.457855][T16602] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1030.831815][T24944] loop0: detected capacity change from 0 to 1024 [ 1030.933399][T24944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1031.043432][T24944] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1031.216965][T24944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.650804][T24952] loop4: detected capacity change from 0 to 4096 [ 1031.727977][T24952] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1031.772060][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.098249][T24971] netlink: zone id is out of range [ 1032.144493][T24971] netlink: del zone limit has 8 unknown bytes [ 1032.318025][T24968] loop3: detected capacity change from 0 to 4096 [ 1032.491788][T24952] ntfs3(loop4): ino=1a, mi_enum_attr [ 1032.546116][T24968] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1032.559978][T24952] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1032.720549][T24952] ntfs3(loop4): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 1033.284393][T20058] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22. [ 1033.559974][T24989] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1033.614857][T24988] loop5: detected capacity change from 0 to 1024 [ 1037.397474][T25060] loop0: detected capacity change from 0 to 256 [ 1037.464225][T25060] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1037.491308][T25063] netlink: 'syz.4.8443': attribute type 1 has an invalid length. [ 1037.554921][T25060] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 1037.802341][T25066] loop6: detected capacity change from 0 to 8 [ 1038.068708][T25066] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 1038.623149][T25078] loop0: detected capacity change from 0 to 164 [ 1038.927638][T25073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1038.945631][T25073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1039.050935][T25073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1039.155202][T25073] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1039.661897][T25090] netlink: 'syz.2.8455': attribute type 2 has an invalid length. [ 1039.883001][T25092] loop6: detected capacity change from 0 to 2048 [ 1040.046518][T25092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1040.454972][T25103] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8460'. [ 1040.633609][T16602] Bluetooth: hci2: command 0x0406 tx timeout [ 1040.790202][ T30] audit: type=1326 audit(2000000158.559:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.5.8461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c68b8e969 code=0x0 [ 1040.812069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.962116][T25109] loop4: detected capacity change from 0 to 16 [ 1041.010159][T16602] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.093990][T16602] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.103415][T25109] erofs (device loop4): mounted with root inode @ nid 36. [ 1041.272943][T25109] erofs (device loop4): invalid logical cluster 0 at nid 89 [ 1041.372972][T25109] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 1041.465028][T25109] erofs (device loop4): invalid logical cluster 0 at nid 89 [ 1041.570411][T25109] erofs (device loop4): read error -95 @ 0 of nid 89 [ 1041.706984][ T30] audit: type=1800 audit(2000000159.499:173): pid=25109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8463" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 1041.726710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.184686][T16602] Bluetooth: hci4: command 0x0406 tx timeout [ 1043.855424][T25162] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1043.968891][T25162] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1044.655742][T25174] QAT: failed to copy from user cfg_data. [ 1045.359896][T16602] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 1045.851032][T25203] loop4: detected capacity change from 0 to 1024 [ 1045.906462][T25208] Cannot find add_set index 1026 as target [ 1045.914168][T25207] netlink: 'syz.2.8506': attribute type 1 has an invalid length. [ 1045.935946][T25203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1046.127679][T25203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.519895][T25217] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8509'. [ 1046.642212][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.017408][T25222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.825495][T25246] loop3: detected capacity change from 0 to 128 [ 1049.050568][T25249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8526'. [ 1050.125948][T25259] loop4: detected capacity change from 0 to 4096 [ 1050.160418][T25267] loop2: detected capacity change from 0 to 16 [ 1050.195940][T25259] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1050.236106][T25267] erofs (device loop2): mounted with root inode @ nid 36. [ 1050.318495][T25267] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1050.350379][ T5894] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1050.420040][T25267] erofs (device loop2): failed to decompress -59 in[63, 4033] out[1851] [ 1050.513334][T25267] erofs (device loop2): read error -117 @ 43 of nid 36 [ 1050.616117][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1050.660361][ T5894] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1050.759853][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.879357][ T5894] usb 6-1: config 0 has no interface number 0 [ 1050.946844][ T5894] usb 6-1: config 0 interface 244 has no altsetting 0 [ 1051.053784][ T5894] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1051.093388][ T30] audit: type=1326 audit(2000000168.889:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 1051.168669][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.235133][ T5894] usb 6-1: Product: syz [ 1051.300980][ T5894] usb 6-1: Manufacturer: syz [ 1051.343005][ T5894] usb 6-1: SerialNumber: syz [ 1051.349285][ T30] audit: type=1326 audit(2000000168.889:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 1051.489365][ T5894] usb 6-1: config 0 descriptor?? [ 1051.581387][ T30] audit: type=1326 audit(2000000168.949:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 1051.721624][ T5894] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 1051.827344][ T30] audit: type=1326 audit(2000000168.949:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 1051.853359][ T5894] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 1051.952278][ T5894] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 1052.045914][ T5894] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1052.090600][ T30] audit: type=1326 audit(2000000168.949:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25274 comm="syz.3.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd73af8e969 code=0x7ffc0000 [ 1052.209536][ T5894] usb 6-1: USB disconnect, device number 114 [ 1052.405103][T25288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8544'. [ 1053.050208][T25298] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1053.211409][T25302] binder: 25299:25302 ioctl c0306201 200000000100 returned -14 [ 1053.360513][T25298] bond2: entered promiscuous mode [ 1053.391637][T25298] bond2: entered allmulticast mode [ 1053.440403][T25298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1053.741651][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.902862][ T5908] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1053.959992][T25316] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8557'. [ 1054.140104][ T5908] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1054.148251][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.241583][ T5908] usb 7-1: config 0 has no interface number 0 [ 1054.259448][ T5908] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1054.274723][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.303180][ T5908] usb 7-1: Product: syz [ 1054.371093][ T5908] usb 7-1: Manufacturer: syz [ 1054.408508][ T5908] usb 7-1: SerialNumber: syz [ 1054.437530][ T5908] usb 7-1: config 0 descriptor?? [ 1054.677906][ T5908] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1054.718305][ T5908] usb 7-1: No valid video chain found. [ 1054.916992][ T5908] usb 7-1: USB disconnect, device number 6 [ 1055.971605][T25344] loop3: detected capacity change from 0 to 16 [ 1056.089010][T25344] erofs (device loop3): mounted with root inode @ nid 36. [ 1056.198276][T16602] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[9000] [ 1056.210849][T25344] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 1056.224523][T25344] erofs (device loop3): read error -117 @ 0 of nid 89 [ 1056.232812][ T30] audit: type=1800 audit(2000000174.039:179): pid=25344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8570" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 1056.613371][T25313] loop2: detected capacity change from 0 to 32768 [ 1057.279988][T25364] netlink: 'syz.2.8578': attribute type 6 has an invalid length. [ 1057.526704][T25369] loop4: detected capacity change from 0 to 1764 [ 1058.875253][T25395] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8589'. [ 1059.404810][T25402] loop3: detected capacity change from 0 to 256 [ 1059.500916][T25402] exfat: Deprecated parameter 'utf8' [ 1059.506282][T25402] exfat: Deprecated parameter 'utf8' [ 1059.601585][T25402] exfat: Deprecated parameter 'utf8' [ 1059.724498][T25411] loop6: detected capacity change from 0 to 2048 [ 1059.746648][T25402] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 1061.772866][T25453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8615'. [ 1063.050449][ T5908] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1063.232956][ T5908] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1063.284869][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.365179][ T5908] usb 4-1: Product: syz [ 1063.400018][ T5908] usb 4-1: Manufacturer: syz [ 1063.404688][ T5908] usb 4-1: SerialNumber: syz [ 1063.524699][ T5908] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1063.636799][ T5894] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1063.821130][ T1208] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1063.919925][ T5893] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1063.990234][ T5908] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1064.030561][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 1064.071995][ T1208] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1064.123070][ T1208] usb 5-1: config 0 has no interface number 0 [ 1064.131041][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 1064.170047][ T5893] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 1064.257874][ T24] usb 4-1: USB disconnect, device number 105 [ 1064.290797][ T1208] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1064.300187][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 1064.316428][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.347405][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1064.367451][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.395246][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1064.409978][ T1208] usb 5-1: Product: syz [ 1064.414179][ T1208] usb 5-1: Manufacturer: syz [ 1064.419059][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1064.454086][ T5893] usb 6-1: config 1 has no interface number 0 [ 1064.469778][ T1208] usb 5-1: SerialNumber: syz [ 1064.503601][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1064.527329][ T5893] usb 6-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.543299][ T1208] usb 5-1: config 0 descriptor?? [ 1064.617278][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1064.640182][ T5893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.696675][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.712141][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.777081][ T5894] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1064.870720][ T5908] usb 3-1: Product: syz [ 1064.874954][ T5908] usb 3-1: Manufacturer: syz [ 1064.881270][ T5893] usb 6-1: Product: syz [ 1064.885458][ T5893] usb 6-1: Manufacturer: syz [ 1064.926376][ T5894] ath9k_htc: Failed to initialize the device [ 1064.968643][ T5908] usb 3-1: SerialNumber: syz [ 1064.977131][ T5893] usb 6-1: SerialNumber: syz [ 1065.012932][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 1065.191093][ T5908] usb 3-1: config 0 descriptor?? [ 1065.237659][ T5893] cdc_wdm 6-1:1.128: skipping garbage [ 1065.304667][ T5893] cdc_wdm 6-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1065.381957][ T1208] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1065.485329][T25506] usb 6-1: USB disconnect, device number 115 [ 1065.536601][ T5908] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 1065.606823][ T5908] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 1065.633580][ T1208] usb 5-1: USB disconnect, device number 105 [ 1065.800678][ T5908] usb 3-1: USB disconnect, device number 102 [ 1066.231875][ T7723] udevd[7723]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.418844][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1067.498436][T25532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1068.258094][T25549] loop4: detected capacity change from 0 to 256 [ 1068.415123][T25541] loop0: detected capacity change from 0 to 8192 [ 1069.516838][T25559] loop0: detected capacity change from 0 to 4096 [ 1069.530372][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8668'. [ 1070.447136][T25546] loop5: detected capacity change from 0 to 32768 [ 1070.505859][T25547] loop3: detected capacity change from 0 to 32768 [ 1070.560740][T25546] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1070.641373][T25547] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1070.641373][T25547] [ 1070.677965][T25546] (syz.5.8659,25546,0):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0. [ 1070.721706][T25576] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8673'. [ 1070.779140][T25546] (syz.5.8659,25546,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop5 needs checking. [ 1070.791776][T25547] ERROR: (device loop3): remounting filesystem as read-only [ 1070.842061][T25547] ERROR: (device loop3): jfs_unlink: [ 1070.842061][T25547] [ 1070.904193][T25546] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1071.347577][ T5833] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1071.347577][ T5833] [ 1071.535286][ T5834] ocfs2: Unmounting device (7,5) on (node local) [ 1071.573038][ T5895] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1072.929618][T25603] loop5: detected capacity change from 0 to 2048 [ 1072.945647][T25605] loop2: detected capacity change from 0 to 512 [ 1073.147391][T25603] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1073.234836][T25605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.354369][T25612] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1073.397093][T25605] ext4 filesystem being mounted at /1403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.408040][T25613] usb usb8: usbfs: process 25613 (syz.0.8690) did not claim interface 0 before use [ 1073.647071][T25605] EXT4-fs error (device loop2): ext4_xattr_block_list:762: inode #15: comm syz.2.8687: corrupted xattr block 19: overlapping e_value [ 1073.823958][T25605] EXT4-fs (loop2): Remounting filesystem read-only [ 1074.271675][T25623] loop5: detected capacity change from 0 to 16 [ 1074.296884][T25585] loop6: detected capacity change from 0 to 32768 [ 1074.375645][T25623] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1074.387128][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.630214][T25625] dlm: no locking on control device [ 1075.885302][ T5894] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1075.918250][T25635] loop0: detected capacity change from 0 to 4096 [ 1075.997908][T25633] loop5: detected capacity change from 0 to 8192 [ 1076.027274][T25635] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1076.120582][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 1076.199814][ T5894] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1076.288553][ T5894] usb 5-1: config 0 has no interface number 0 [ 1076.378740][ T5894] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1076.509877][ T5894] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1076.684187][ T5894] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1076.705616][T25635] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1076.793472][T25635] ntfs3(loop0): ino=19, mi_enum_attr [ 1076.833841][T25649] loop2: detected capacity change from 0 to 2048 [ 1076.841099][ T5894] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1076.949890][ T5894] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1076.985724][T25635] ntfs3(loop0): failed to convert "c46c" to koi8-r [ 1077.052605][T25635] ntfs3(loop0): ino=20, mi_enum_attr [ 1077.098144][ T5894] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1077.151333][T25649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1077.206414][ T5894] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1077.329852][ T5894] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 4097, setting to 1024 [ 1077.478096][ T5894] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1077.580370][ T5894] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.660555][T25661] NILFS (nullb0): couldn't find nilfs on the device [ 1077.751596][ T5894] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1077.883899][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.965757][ T5894] usb 5-1: Product: syz [ 1078.028952][ T5894] usb 5-1: Manufacturer: syz [ 1078.102147][ T5894] usb 5-1: SerialNumber: syz [ 1078.182400][T25666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8715'. [ 1078.248308][ T5894] usb 5-1: config 0 descriptor?? [ 1078.293068][T25641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1078.303207][T25666] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357164673) [ 1078.361316][T25641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1078.407782][ T5894] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1078.474270][T25666] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1078.500379][ T5894] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1078.650690][ T5894] scsi host1: microtekX6 [ 1078.865861][ T5894] usb 5-1: USB disconnect, device number 106 [ 1080.112692][T25696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8729'. [ 1080.298714][T25697] loop5: detected capacity change from 0 to 2048 [ 1080.370235][T25697] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1080.604710][T25697] syz.5.8728: attempt to access beyond end of device [ 1080.604710][T25697] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1080.639901][T25704] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1080.813518][T25703] loop4: detected capacity change from 0 to 2048 [ 1080.863803][ T7347] udevd[7347]: incorrect nilfs2 checksum on /dev/loop5 [ 1080.902708][T25703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.451371][T25732] loop0: detected capacity change from 0 to 1024 [ 1082.914516][T25732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.076850][T25748] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØR3âëp(@Ož>ÆÀ [ 1083.120728][T25750] netdevsim netdevsim6 ªªªªª»: renamed from netdevsim0 [ 1083.222124][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.307102][T25753] loop3: detected capacity change from 0 to 512 [ 1083.337475][T25753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1083.393538][ T5908] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1083.472651][T25753] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.529108][T25753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.628201][ T5908] usb 3-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.722111][ T5908] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.817844][ T5908] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1083.845439][ T5894] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1083.920767][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1083.963734][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 1084.014872][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.025328][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.069102][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 1084.098735][ T5908] usb 3-1: Product: syz [ 1084.142539][ T5894] usb 7-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 1084.201201][ T5908] usb 3-1: Manufacturer: syz [ 1084.205862][ T5908] usb 3-1: SerialNumber: syz [ 1084.270866][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.350865][ T5908] usb 3-1: config 0 descriptor?? [ 1084.356905][ T5894] usb 7-1: Product: syz [ 1084.370468][ T5894] usb 7-1: Manufacturer: syz [ 1084.389799][ T5894] usb 7-1: SerialNumber: syz [ 1084.459607][ T5894] usb 7-1: config 0 descriptor?? [ 1084.551821][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 1084.592569][ T5908] usbtest 3-1:0.0: Linux user mode ISO test driver [ 1084.680845][ T5908] usbtest 3-1:0.0: high-speed {control iso-in} tests (+alt) [ 1084.894536][ T1208] usb 3-1: USB disconnect, device number 104 [ 1084.964614][ T5894] gspca_sonixj: reg_r err -71 [ 1085.019898][ T5894] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1085.141111][ T5894] usb 7-1: USB disconnect, device number 7 [ 1086.022763][T25795] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8772'. [ 1086.460509][T25806] netlink: 'syz.6.8777': attribute type 5 has an invalid length. [ 1086.486853][T25803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8775'. [ 1087.319785][ T30] audit: type=1326 audit(2000000205.099:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25821 comm="syz.4.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1087.525164][ T30] audit: type=1326 audit(2000000205.109:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25821 comm="syz.4.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1087.759885][ T30] audit: type=1326 audit(2000000205.109:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25821 comm="syz.4.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeed38e969 code=0x7ffc0000 [ 1088.401750][ T1208] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1088.665261][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 1088.727340][ T1208] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.783552][ T1208] usb 4-1: config 0 has no interface number 0 [ 1088.889958][ T1208] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1088.970057][ T1208] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 1089.052716][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.178398][ T1208] usb 4-1: Product: syz [ 1089.225412][ T1208] usb 4-1: Manufacturer: syz [ 1089.257505][ T1208] usb 4-1: SerialNumber: syz [ 1089.348950][ T1208] usb 4-1: config 0 descriptor?? [ 1089.694669][ T1208] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1089.863363][ T1208] usb 4-1: USB disconnect, device number 106 [ 1090.886332][T25873] loop3: detected capacity change from 0 to 764 [ 1091.109443][T25875] loop4: detected capacity change from 0 to 1764 [ 1094.931238][T25941] loop2: detected capacity change from 0 to 512 [ 1095.239932][T25941] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1095.325197][T25941] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1095.523282][T25941] EXT4-fs (loop2): 1 truncate cleaned up [ 1095.641671][T25941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.929561][T25941] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.8832: Logical block already allocated [ 1096.439228][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.142777][T25981] loop3: detected capacity change from 0 to 2048 [ 1097.229573][T25981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1097.255422][T25975] xt_CT: No such helper "snmp_trap" [ 1097.379041][ T5894] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1097.589775][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 1097.641881][ T5894] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1097.700520][ T5894] usb 7-1: config 2 has an invalid interface number: 120 but max is 0 [ 1097.766504][ T5894] usb 7-1: config 2 has no interface number 0 [ 1097.789051][T25993] loop5: detected capacity change from 0 to 22 [ 1097.848490][ T5894] usb 7-1: config 2 interface 120 has no altsetting 0 [ 1097.903180][T25993] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1097.935823][ T5894] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 1097.966272][T25993] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1097.986514][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.099928][ T5894] usb 7-1: Product: syz [ 1098.104156][ T5894] usb 7-1: Manufacturer: syz [ 1098.196535][ T5894] usb 7-1: SerialNumber: syz [ 1098.368310][T26000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8853'. [ 1098.569575][ T5894] i2c-tiny-usb 7-1:2.120: version 68.f3 found at bus 007 address 008 [ 1098.689406][ T5894] (null): failure setting delay to 10us [ 1098.784707][ T5894] i2c-tiny-usb 7-1:2.120: probe with driver i2c-tiny-usb failed with error -5 [ 1098.932160][ T5894] usb 7-1: USB disconnect, device number 8 [ 1099.235319][T26009] erofs (device nullb0): cannot find valid erofs superblock [ 1099.719577][T26016] loop3: detected capacity change from 0 to 2048 [ 1099.887166][T26016] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1100.031926][T26022] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1100.155641][T26025] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8865'. [ 1100.579424][T26023] loop6: detected capacity change from 0 to 4096 [ 1100.717337][T26023] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1101.018534][T26036] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1101.074434][T26023] ntfs3(loop6): ino=19, mi_enum_attr [ 1101.109960][T26023] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1101.565503][T26041] xt_connbytes: Forcing CT accounting to be enabled [ 1101.670421][T26041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1102.320231][ T1208] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1102.539782][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 1102.583693][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1102.714725][ T1208] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1102.792520][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.882002][ T1208] usb 5-1: Product: syz [ 1102.959899][ T1208] usb 5-1: Manufacturer: syz [ 1102.964569][ T1208] usb 5-1: SerialNumber: syz [ 1103.025120][ T1208] usb 5-1: config 0 descriptor?? [ 1103.051056][ T1208] hub 5-1:0.0: bad descriptor, ignoring hub [ 1103.057014][ T1208] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1103.069845][T26066] netlink: 'syz.2.8885': attribute type 11 has an invalid length. [ 1103.098064][T26067] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8887'. [ 1103.152182][T26066] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1103.175231][ T1208] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input61 [ 1103.184929][T26067] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8887'. [ 1103.225917][T26069] loop0: detected capacity change from 0 to 256 [ 1103.413206][T26073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1105.503917][T26107] netlink: 'syz.2.8904': attribute type 1 has an invalid length. [ 1105.609232][T26107] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1105.699871][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1106.095385][ T5908] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1106.329950][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 1106.380087][ T5908] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1106.422648][T26119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1106.483848][ T5908] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1106.542689][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.649964][ T5908] usb 6-1: Product: syz [ 1106.654181][ T5908] usb 6-1: Manufacturer: syz [ 1106.658785][ T5908] usb 6-1: SerialNumber: syz [ 1106.805488][ T5908] usb 6-1: config 0 descriptor?? [ 1106.863074][T26111] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1106.927315][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.045746][ T1208] usb 5-1: USB disconnect, device number 107 [ 1107.256116][ T5908] usb 6-1: USB disconnect, device number 116 [ 1107.524108][T26134] netlink: 'syz.0.8916': attribute type 2 has an invalid length. [ 1107.774232][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.605838][T26085] syz.3.8894 (26085): drop_caches: 2 [ 1110.350846][T26181] loop0: detected capacity change from 0 to 256 [ 1111.149175][T26202] cgroup: release_agent respecified [ 1111.885935][T26218] loop3: detected capacity change from 0 to 164 [ 1111.908816][T26216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 1111.909813][ T5908] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1112.259977][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 1112.307024][ T5908] usb 6-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1112.399753][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.505568][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25697, setting to 1024 [ 1112.581554][ T5908] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1112.675142][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.855690][ T5908] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1112.959968][ T5908] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1112.991758][ T5908] usb 6-1: Manufacturer: syz [ 1113.023892][ T5908] usb 6-1: config 0 descriptor?? [ 1113.673341][T26237] netlink: 'syz.4.8956': attribute type 8 has an invalid length. [ 1113.807740][ T5908] rc_core: IR keymap rc-hauppauge not found [ 1113.849795][ T5908] Registered IR keymap rc-empty [ 1113.900655][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1113.981556][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.064682][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1114.175042][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input62 [ 1114.355408][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.407827][T26207] loop6: detected capacity change from 0 to 32768 [ 1114.450007][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.509818][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.610074][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.692104][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.766721][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.850353][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.909790][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1114.991493][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1115.033847][ T5908] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1115.123591][ T5908] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1115.174591][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.249864][ T5908] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1115.364813][ T5908] usb 6-1: USB disconnect, device number 117 [ 1116.349782][ T5908] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1116.569913][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 1116.610302][ T5908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1116.672864][ T5908] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 1116.735058][ T5908] usb 6-1: config 7 has no interface number 0 [ 1116.799897][ T5908] usb 6-1: config 7 interface 187 has no altsetting 0 [ 1116.867967][ T5908] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1116.889878][ T5894] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1116.939438][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.001080][ T5908] usb 6-1: Product: syz [ 1117.029635][ T5908] usb 6-1: Manufacturer: syz [ 1117.058500][ T5908] usb 6-1: SerialNumber: syz [ 1117.083734][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 1117.138661][ T5894] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1117.178341][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.215255][ T5894] usb 4-1: Product: syz [ 1117.269909][ T5894] usb 4-1: Manufacturer: syz [ 1117.274587][ T5894] usb 4-1: SerialNumber: syz [ 1117.422582][ T5894] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1117.442412][ T5894] r8152-cfgselector 4-1: config 0 descriptor?? [ 1117.645227][ T5908] usb 6-1: Limiting number of CPorts to U8_MAX [ 1117.737101][ T5908] usb 6-1: Unknown endpoint type found, address 0x07 [ 1117.823353][ T5908] usb 6-1: Not enough endpoints found in device, aborting! [ 1117.939983][ T5908] usb 6-1: USB disconnect, device number 118 [ 1118.113721][ T1208] r8152-cfgselector 4-1: USB disconnect, device number 107 [ 1118.143860][T26258] loop4: detected capacity change from 0 to 32768 [ 1118.210486][T26258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8966 (26258) [ 1118.253308][T26286] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1118.325778][T26258] BTRFS error (device loop4): open_ctree failed: -4 [ 1119.718412][T26311] loop3: detected capacity change from 0 to 256 [ 1119.903067][T26311] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1120.036128][T26318] netlink: 'syz.5.8995': attribute type 1 has an invalid length. [ 1120.060791][T26311] exFAT-fs (loop3): valid_size(10) is greater than size(0) [ 1122.153925][T26354] loop0: detected capacity change from 0 to 512 [ 1122.395162][T26354] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1122.579842][T26354] EXT4-fs (loop0): Remounting filesystem read-only [ 1122.630065][T26354] EXT4-fs (loop0): 1 truncate cleaned up [ 1122.637618][T26354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.922942][T26372] netlink: 'syz.3.9019': attribute type 10 has an invalid length. [ 1122.951805][T26367] loop6: detected capacity change from 0 to 4096 [ 1122.975405][T26372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.029403][T26367] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1123.111889][T26372] bond0: (slave team0): Enslaving as an active interface with an up link [ 1123.374977][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.526154][T26377] loop2: detected capacity change from 0 to 256 [ 1123.697971][T26377] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1123.956017][T26383] loop4: detected capacity change from 0 to 2048 [ 1124.479991][T26389] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1124.734571][T26383] NILFS (loop4): failed to count free inodes: err=-34 [ 1125.733842][T26414] loop4: detected capacity change from 0 to 128 [ 1125.820335][T26415] loop2: detected capacity change from 0 to 16 [ 1125.893815][T26415] erofs (device loop2): mounted with root inode @ nid 36. [ 1125.953066][T26414] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1125.964150][T26415] syz.2.9039: attempt to access beyond end of device [ 1125.964150][T26415] loop2: rw=0, sector=14425508768, nr_sectors = 8 limit=16 [ 1126.101323][T26415] erofs (device loop2): read error -5 @ 123 of nid 36 [ 1126.155819][T26414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1127.747723][T26446] loop5: detected capacity change from 0 to 164 [ 1127.944739][T26446] syz.5.9053: attempt to access beyond end of device [ 1127.944739][T26446] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1128.016671][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9056'. [ 1128.080765][T26446] syz.5.9053: attempt to access beyond end of device [ 1128.080765][T26446] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1128.312353][ T30] audit: type=1800 audit(2000000246.089:183): pid=26446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9053" name="file0" dev="loop5" ino=1862 res=0 errno=0 [ 1129.618554][T26476] lo speed is unknown, defaulting to 1000 [ 1129.636211][T26475] loop6: detected capacity change from 0 to 1024 [ 1129.845317][T26475] hfsplus: extend alloc file! (16384,256,150995124) [ 1131.125878][T26498] netlink: 'syz.0.9074': attribute type 1 has an invalid length. [ 1131.227936][T26498] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9074'. [ 1131.374396][T26498] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1131.980315][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9079'. [ 1132.341479][T26516] loop3: detected capacity change from 0 to 8 [ 1132.527778][T26516] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1132.608006][T26516] SQUASHFS error: Failed to read block 0x4de: -5 [ 1132.703753][T26516] SQUASHFS error: Failed to read block 0x4de: -5 [ 1132.778740][T26516] SQUASHFS error: Failed to read block 0x4de: -5 [ 1132.848241][ T30] audit: type=1800 audit(2000000250.649:184): pid=26516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9081" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1133.082456][T26530] loop0: detected capacity change from 0 to 256 [ 1133.393640][T26530] FAT-fs (loop0): Directory bread(block 64) failed [ 1133.503231][T26530] FAT-fs (loop0): Directory bread(block 65) failed [ 1133.566196][T26530] FAT-fs (loop0): Directory bread(block 66) failed [ 1133.678796][T26530] FAT-fs (loop0): Directory bread(block 67) failed [ 1133.745526][T26530] FAT-fs (loop0): Directory bread(block 68) failed [ 1133.800061][T26537] loop3: detected capacity change from 0 to 512 [ 1133.808701][T26530] FAT-fs (loop0): Directory bread(block 69) failed [ 1133.863620][T26530] FAT-fs (loop0): Directory bread(block 70) failed [ 1133.873121][T26537] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1133.954713][T26530] FAT-fs (loop0): Directory bread(block 71) failed [ 1133.970416][T26540] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9091'. [ 1134.013682][T26537] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102] [ 1134.042880][T26530] FAT-fs (loop0): Directory bread(block 72) failed [ 1134.049489][T26530] FAT-fs (loop0): Directory bread(block 73) failed [ 1134.129204][T26537] System zones: 1-12 [ 1134.175331][T26537] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1134.252700][T26537] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9089: invalid indirect mapped block 12 (level 1) [ 1134.429176][T26537] EXT4-fs (loop3): Remounting filesystem read-only [ 1134.490196][T26537] EXT4-fs (loop3): 1 truncate cleaned up [ 1134.572055][T26537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1134.591995][T26548] deleting an unspecified loop device is not supported. [ 1135.270591][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1135.451207][T26552] loop2: detected capacity change from 0 to 4096 [ 1135.585288][T26552] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1135.691698][T26560] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9103'. [ 1137.405083][T26591] netlink: 560 bytes leftover after parsing attributes in process `syz.3.9115'. [ 1137.483213][T26583] loop6: detected capacity change from 0 to 4096 [ 1137.575735][T26583] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1137.826475][T26583] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1137.901052][T26583] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1138.074936][T26598] loop3: detected capacity change from 0 to 64 [ 1138.122880][T26583] [ 1138.125276][T26583] ====================================================== [ 1138.132301][T26583] WARNING: possible circular locking dependency detected [ 1138.139321][T26583] 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 Not tainted [ 1138.146431][T26583] ------------------------------------------------------ [ 1138.153462][T26583] syz.6.9110/26583 is trying to acquire lock: [ 1138.159541][T26583] ffff8880598de880 (&ni->file.run_lock#2){++++}-{4:4}, at: run_unpack_ex+0x7e5/0xba0 [ 1138.169081][T26583] [ 1138.169081][T26583] but task is already holding lock: [ 1138.176446][T26583] ffff88802f460270 (&wnd->rw_lock){++++}-{4:4}, at: run_unpack_ex+0x701/0xba0 [ 1138.185364][T26583] [ 1138.185364][T26583] which lock already depends on the new lock. [ 1138.185364][T26583] [ 1138.195774][T26583] [ 1138.195774][T26583] the existing dependency chain (in reverse order) is: [ 1138.204793][T26583] [ 1138.204793][T26583] -> #1 (&wnd->rw_lock){++++}-{4:4}: [ 1138.212301][T26583] lock_acquire+0x120/0x360 [ 1138.217361][T26583] down_write_nested+0x9d/0x200 [ 1138.222750][T26583] ntfs_look_for_free_space+0xd3/0x600 [ 1138.228756][T26583] attr_allocate_clusters+0x1c1/0x6d0 [ 1138.234673][T26583] attr_set_size+0x14a4/0x2c70 [ 1138.239986][T26583] ntfs_extend_mft+0x162/0x450 [ 1138.245290][T26583] ntfs_look_free_mft+0x5f8/0xd50 [ 1138.250857][T26583] ni_create_attr_list+0x8ff/0x13d0 [ 1138.256603][T26583] ni_ins_attr_ext+0x43e/0xb50 [ 1138.261905][T26583] ni_add_name+0x6df/0xc90 [ 1138.266862][T26583] ntfs_link_inode+0x132/0x180 [ 1138.272166][T26583] ntfs_link+0x118/0x280 [ 1138.276975][T26583] vfs_link+0x4ed/0x6e0 [ 1138.281665][T26583] do_linkat+0x272/0x560 [ 1138.286444][T26583] __x64_sys_link+0x82/0x90 [ 1138.291484][T26583] do_syscall_64+0xf6/0x210 [ 1138.296528][T26583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.302961][T26583] [ 1138.302961][T26583] -> #0 (&ni->file.run_lock#2){++++}-{4:4}: [ 1138.311083][T26583] validate_chain+0xb9b/0x2140 [ 1138.316378][T26583] __lock_acquire+0xaac/0xd20 [ 1138.321595][T26583] lock_acquire+0x120/0x360 [ 1138.326636][T26583] down_read+0x46/0x2e0 [ 1138.331330][T26583] run_unpack_ex+0x7e5/0xba0 [ 1138.336451][T26583] ntfs_iget5+0x232b/0x37c0 [ 1138.341489][T26583] dir_search_u+0x1df/0x2c0 [ 1138.346526][T26583] ntfs_lookup+0xfb/0x1f0 [ 1138.351405][T26583] lookup_one_qstr_excl_raw+0x118/0x280 [ 1138.357503][T26583] filename_create+0x225/0x470 [ 1138.362796][T26583] do_mknodat+0x184/0x4d0 [ 1138.367671][T26583] __x64_sys_mknod+0x8c/0xa0 [ 1138.372796][T26583] do_syscall_64+0xf6/0x210 [ 1138.377842][T26583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.384274][T26583] [ 1138.384274][T26583] other info that might help us debug this: [ 1138.384274][T26583] [ 1138.394511][T26583] Possible unsafe locking scenario: [ 1138.394511][T26583] [ 1138.401965][T26583] CPU0 CPU1 [ 1138.407331][T26583] ---- ---- [ 1138.412696][T26583] lock(&wnd->rw_lock); [ 1138.416960][T26583] lock(&ni->file.run_lock#2); [ 1138.424361][T26583] lock(&wnd->rw_lock); [ 1138.431143][T26583] rlock(&ni->file.run_lock#2); [ 1138.436119][T26583] [ 1138.436119][T26583] *** DEADLOCK *** [ 1138.436119][T26583] [ 1138.444270][T26583] 4 locks held by syz.6.9110/26583: [ 1138.449474][T26583] #0: ffff88802f462420 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1138.458763][T26583] #1: ffff8880598dc5b0 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470 [ 1138.469545][T26583] #2: ffff8880598dc318 (&ni->ni_lock#3/6){+.+.}-{4:4}, at: ntfs_lookup+0xee/0x1f0 [ 1138.478947][T26583] #3: ffff88802f460270 (&wnd->rw_lock){++++}-{4:4}, at: run_unpack_ex+0x701/0xba0 [ 1138.488311][T26583] [ 1138.488311][T26583] stack backtrace: [ 1138.494208][T26583] CPU: 0 UID: 0 PID: 26583 Comm: syz.6.9110 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 1138.494241][T26583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1138.494259][T26583] Call Trace: [ 1138.494269][T26583] [ 1138.494281][T26583] dump_stack_lvl+0x189/0x250 [ 1138.494326][T26583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.494364][T26583] ? __pfx__printk+0x10/0x10 [ 1138.494392][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.494423][T26583] ? print_lock_name+0xde/0x100 [ 1138.494473][T26583] print_circular_bug+0x2ee/0x310 [ 1138.494506][T26583] check_noncircular+0x134/0x160 [ 1138.494538][T26583] validate_chain+0xb9b/0x2140 [ 1138.494563][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.494594][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.494628][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.494668][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.494704][T26583] __lock_acquire+0xaac/0xd20 [ 1138.494746][T26583] ? run_unpack_ex+0x7e5/0xba0 [ 1138.494771][T26583] lock_acquire+0x120/0x360 [ 1138.494808][T26583] ? run_unpack_ex+0x7e5/0xba0 [ 1138.494838][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.494868][T26583] ? wnd_set_used_safe+0x2d4/0x320 [ 1138.494896][T26583] down_read+0x46/0x2e0 [ 1138.494930][T26583] ? run_unpack_ex+0x7e5/0xba0 [ 1138.494957][T26583] run_unpack_ex+0x7e5/0xba0 [ 1138.494984][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495024][T26583] ? __pfx_run_unpack_ex+0x10/0x10 [ 1138.495049][T26583] ? inode_set_ctime_to_ts+0x126/0x2f0 [ 1138.495076][T26583] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 1138.495101][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495134][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495170][T26583] ? mi_enum_attr+0x743/0x9f0 [ 1138.495195][T26583] ntfs_iget5+0x232b/0x37c0 [ 1138.495249][T26583] ? __pfx_ntfs_iget5+0x10/0x10 [ 1138.495276][T26583] ? __pfx_indx_find+0x10/0x10 [ 1138.495312][T26583] ? __kasan_kmalloc+0x93/0xb0 [ 1138.495344][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495380][T26583] dir_search_u+0x1df/0x2c0 [ 1138.495409][T26583] ? __pfx_dir_search_u+0x10/0x10 [ 1138.495435][T26583] ? __pfx_ntfs_nls_to_utf16+0x10/0x10 [ 1138.495461][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495493][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495524][T26583] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 1138.495558][T26583] ? ntfs_lookup+0x51/0x1f0 [ 1138.495599][T26583] ntfs_lookup+0xfb/0x1f0 [ 1138.495640][T26583] lookup_one_qstr_excl_raw+0x118/0x280 [ 1138.495685][T26583] filename_create+0x225/0x470 [ 1138.495716][T26583] ? __pfx_filename_create+0x10/0x10 [ 1138.495750][T26583] do_mknodat+0x184/0x4d0 [ 1138.495793][T26583] ? __pfx_do_mknodat+0x10/0x10 [ 1138.495835][T26583] ? getname_flags+0x1e5/0x540 [ 1138.495874][T26583] __x64_sys_mknod+0x8c/0xa0 [ 1138.495904][T26583] do_syscall_64+0xf6/0x210 [ 1138.495938][T26583] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.495969][T26583] ? exc_page_fault+0x91/0x110 [ 1138.496001][T26583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.496027][T26583] RIP: 0033:0x7f90f2b8e969 [ 1138.496049][T26583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.496072][T26583] RSP: 002b:00007f90f39ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1138.496099][T26583] RAX: ffffffffffffffda RBX: 00007f90f2db5fa0 RCX: 00007f90f2b8e969 [ 1138.496120][T26583] RDX: 000000000000070d RSI: 0000000000000000 RDI: 000020000003eb80 [ 1138.496137][T26583] RBP: 00007f90f2c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1138.496162][T26583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.496178][T26583] R13: 0000000000000000 R14: 00007f90f2db5fa0 R15: 00007fffb0b3c688 [ 1138.496208][T26583] [ 1138.862022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1139.044156][T26584] loop0: detected capacity change from 0 to 32768 [ 1139.057370][T26601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1139.342732][T26584] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1139.434090][T26584] XFS (loop0): Ending clean mount [ 1139.446477][T26584] XFS (loop0): Quotacheck needed: Please wait. [ 1139.473806][T26584] XFS (loop0): Quotacheck: Done. [ 1139.583986][ T5832] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791