last executing test programs: 3.851120642s ago: executing program 3 (id=7283): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0xfffffffffffffffb, {0x2, 0xff, 0x4}, 0xff}, 0x1d) 3.469187228s ago: executing program 3 (id=7288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 3.126722119s ago: executing program 3 (id=7292): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000440)={0x3, &(0x7f0000000300)=[{0x4, '\x00', @buffer={"adf61cd8e0db16916cc82082f2ae2b1f746590c9c36a119e8ea2944d8d4a00", 0x20}, 0x7fffffff}, {0x20, '\x00', @buffer={"5b5482ecaaedf732e5942dfb632cef39baa4a3db601af5d7e7773ad0af1fa64d", 0x20}, 0xfffffffa}, {0x2e, '\x00', @buffer={"b2572f3a2d72ed4d82ebf3097332d7d35c2904a071065fb75b5e91cf8566a037", 0x20}, 0xb1}]}) 2.809991679s ago: executing program 3 (id=7296): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x20, 0x27, 0x7, "be9301e176d474"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.404501361s ago: executing program 0 (id=7303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0xfc, 0x11, 0x0, 0x5, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) 2.133467594s ago: executing program 0 (id=7307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 2.09877871s ago: executing program 1 (id=7309): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x0, 'macvtap0\x00', {0x3}, 0xfff}) 2.086443562s ago: executing program 2 (id=7321): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0xfffe, 0x0, 0x5, 0x0, 0x230d}, 0xc) 1.597085549s ago: executing program 0 (id=7311): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001640)={0xfc, {"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", 0x4e1}}, 0x109e) 1.596967135s ago: executing program 1 (id=7312): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) sendfile(r0, r0, 0x0, 0x6) 1.590869738s ago: executing program 2 (id=7313): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x20000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x80000001) 1.590202871s ago: executing program 4 (id=7314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x4}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.552035222s ago: executing program 5 (id=7315): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r0, 0x0) 1.3428067s ago: executing program 4 (id=7316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb01}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 1.331941636s ago: executing program 2 (id=7317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) 1.322191659s ago: executing program 5 (id=7318): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000180)={0x0, @win={{0x2, 0x9}, 0x3238ce0c56ad99f6, 0x0, &(0x7f0000000080), 0x0, 0x0}}) 1.320050576s ago: executing program 1 (id=7319): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000300)=0x2000000, 0x12) 1.159259891s ago: executing program 0 (id=7320): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) 1.116432817s ago: executing program 5 (id=7322): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 1.042423502s ago: executing program 4 (id=7323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1d, 0x1e}}) 962.108194ms ago: executing program 1 (id=7324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000080)="d3de4871", &(0x7f0000000d40)=""/4096}, 0x20) 961.520265ms ago: executing program 2 (id=7325): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x3, 0x0, @val=@iter={0x0}}, 0x20) 853.331949ms ago: executing program 5 (id=7326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 749.020322ms ago: executing program 0 (id=7327): personality(0x500006) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) 741.385077ms ago: executing program 4 (id=7328): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) 698.919354ms ago: executing program 3 (id=7329): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x0, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 698.175079ms ago: executing program 1 (id=7330): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 686.284398ms ago: executing program 2 (id=7331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 521.125992ms ago: executing program 4 (id=7332): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 465.027573ms ago: executing program 0 (id=7333): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) 434.85578ms ago: executing program 2 (id=7334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) 380.389745ms ago: executing program 3 (id=7335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x8000000) 161.302222ms ago: executing program 4 (id=7336): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 115.691226ms ago: executing program 1 (id=7337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10001}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 109.920513ms ago: executing program 5 (id=7338): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) 0s ago: executing program 5 (id=7339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a0479", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): -1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 927.881890][ T24] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 928.125473][T20408] loop3: detected capacity change from 0 to 164 [ 928.143347][ T5771] usb 1-1: USB disconnect, device number 73 [ 928.148054][T20380] loop4: detected capacity change from 0 to 32768 [ 928.204095][T20380] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 928.338647][T20380] XFS (loop4): Ending clean mount [ 928.480211][ T5638] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 928.651793][T20355] loop2: detected capacity change from 0 to 65536 [ 928.685404][T20422] netlink: 'syz.5.6037': attribute type 2 has an invalid length. [ 928.734014][T20422] netlink: 'syz.5.6037': attribute type 1 has an invalid length. [ 928.769908][T20355] XFS (loop2): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 928.772351][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6037'. [ 928.890759][T20355] XFS (loop2): Ending clean mount [ 929.070113][T20436] loop0: detected capacity change from 0 to 256 [ 929.147715][ T5645] XFS (loop2): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 929.161915][T20440] loop3: detected capacity change from 0 to 512 [ 929.249148][T20440] EXT4-fs: Ignoring removed bh option [ 929.306387][T20440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 929.422669][T20440] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 929.517403][T20440] EXT4-fs (loop3): 1 truncate cleaned up [ 929.575068][T20446] hfs: unable to load iocharset "I#hIars8Ύ wѷ}+[S_. ,s$nFBlbSR,.R]^kRL/J}&o9b6\wm$xCdeOjocڅ`1҆m#CX^ݾO;;󣫭Xp!+ƇK=A a2HKA rp" [ 929.625684][T20440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.977666][ T5644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.092256][T20456] loop0: detected capacity change from 0 to 2048 [ 930.121728][T20456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 930.374915][T20467] netlink: 'syz.5.6055': attribute type 1 has an invalid length. [ 930.535758][T20472] loop3: detected capacity change from 0 to 256 [ 930.627162][T20472] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 931.106813][T13082] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 931.311807][T13082] usb 2-1: Using ep0 maxpacket: 16 [ 931.339599][T13082] usb 2-1: unable to get BOS descriptor or descriptor too short [ 931.382992][T13082] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 931.420907][T13082] usb 2-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 931.459171][T13082] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0 [ 931.482391][T13082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.497409][T20509] loop2: detected capacity change from 0 to 64 [ 931.510995][T13082] usb 2-1: Product: syz [ 931.523653][T13082] usb 2-1: Manufacturer: syz [ 931.539224][T13082] usb 2-1: SerialNumber: syz [ 931.587552][ T5883] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 931.810243][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 931.838906][ T5883] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 931.849799][T20515] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6077'. [ 931.899595][ T5883] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 931.935464][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.972489][ T5883] usb 1-1: Product: syz [ 931.986625][ T5883] usb 1-1: Manufacturer: syz [ 932.000520][ T5883] usb 1-1: SerialNumber: syz [ 932.013989][T20519] overlayfs: missing 'lowerdir' [ 932.050899][ T5883] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 932.079805][ T5883] imon 1-1:155.0: unable to initialize intf0, err -19 [ 932.113063][ T24] apple-mfi-fastcharge 2-1: USB disconnect, device number 82 [ 932.123191][ T5883] imon:imon_probe: failed to initialize context! [ 932.143262][ T5883] imon 1-1:155.0: unable to register, err -19 [ 932.334770][ T29] usb 1-1: USB disconnect, device number 74 [ 932.542491][T20535] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 932.891243][T13082] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 933.074585][T13082] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 933.084828][T13082] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.096121][T13082] usb 4-1: config 0 has no interface number 0 [ 933.102267][T13082] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 933.117925][T13082] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 933.129580][T13082] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 933.142183][T13082] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 933.159685][T13082] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 933.174118][T13082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.187164][T13082] usb 4-1: Product: syz [ 933.192617][T13082] usb 4-1: Manufacturer: syz [ 933.193660][T20549] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 933.208159][T13082] usb 4-1: SerialNumber: syz [ 933.223933][T20555] netlink: 'syz.2.6097': attribute type 1 has an invalid length. [ 933.233247][T20549] bond1: entered promiscuous mode [ 933.252124][T20527] loop4: detected capacity change from 0 to 32768 [ 933.254789][T13082] usb 4-1: config 0 descriptor?? [ 933.285599][T20549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 933.296252][T20527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6083 (20527) [ 933.309308][T13082] symbolserial 4-1:0.175: symbol converter detected [ 933.315423][T13082] usb 4-1: symbol converter now attached to ttyUSB0 [ 933.423082][T20527] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 933.460248][T20527] BTRFS info (device loop4): using sha256 checksum algorithm [ 933.601770][ T24] usb 4-1: USB disconnect, device number 65 [ 933.666043][T20527] BTRFS info (device loop4): enabling ssd optimizations [ 933.691017][T20527] BTRFS info (device loop4): turning on async discard [ 933.714448][T20527] BTRFS info (device loop4): enabling free space tree [ 933.715089][ T24] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 933.800716][ T24] symbolserial 4-1:0.175: device disconnected [ 934.050539][ T5638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 934.478630][T20598] CIFS: VFS: UNC: missing share name [ 934.507120][T20598] CIFS: VFS: Malformed UNC in devname [ 934.813032][ T10] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 935.015301][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 935.041755][ T10] usb 4-1: config 0 has no interface number 0 [ 935.067721][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.114429][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 935.155404][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 935.177513][T20622] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 935.205128][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 935.253885][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 935.305933][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 935.349158][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 935.378241][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.380670][T20625] loop5: detected capacity change from 0 to 256 [ 935.411172][ T10] usb 4-1: config 0 descriptor?? [ 935.428623][T20602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 935.454379][T20602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 935.510950][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 935.874628][T20638] loop2: detected capacity change from 0 to 1024 [ 935.908267][T20638] EXT4-fs: Ignoring removed orlov option [ 935.923396][ T5771] usb 4-1: USB disconnect, device number 66 [ 935.951013][T20643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 935.959663][ T5771] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 935.986476][T20638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.065931][T20649] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 936.197950][T20638] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.6130: bit already cleared for inode 13 [ 936.435872][T20660] loop5: detected capacity change from 0 to 8 [ 936.505212][ T5645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.780063][T20669] netlink: 'syz.2.6142': attribute type 1 has an invalid length. [ 936.805290][T20670] loop0: detected capacity change from 0 to 512 [ 936.833850][T20669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6142'. [ 936.869513][T20670] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 936.921393][T20670] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 936.929910][T20670] EXT4-fs (loop0): orphan cleanup on readonly fs [ 936.936458][T20670] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 936.947607][T20670] EXT4-fs warning (device loop0): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 936.962514][T20670] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 936.996342][T20670] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.6145: bg 0: block 40: padding at end of block bitmap is not set [ 937.034032][T20670] loop0: lost filesystem error report for type 5 error -117 [ 937.035837][ C0] EXT4-fs (loop0): initial error at time 2000524850: ext4_validate_block_bitmap:440 [ 937.052672][ C0] EXT4-fs (loop0): last error at time 2000524850: ext4_validate_block_bitmap:440 [ 937.103294][T20670] EXT4-fs (loop0): Remounting filesystem read-only [ 937.116373][T20677] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6148'. [ 937.143780][T20670] EXT4-fs (loop0): 1 truncate cleaned up [ 937.167240][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6148'. [ 937.199686][T20670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 937.435498][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.696437][T20697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6158'. [ 938.064900][T20708] Cannot find add_set index 0 as target [ 938.386367][T20719] sctp: [Deprecated]: syz.2.6168 (pid 20719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 938.386367][T20719] Use struct sctp_sack_info instead [ 938.941097][T20737] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6178'. [ 939.032783][T20737] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6178'. [ 939.084554][T20737] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6178'. [ 939.172181][T20704] loop3: detected capacity change from 0 to 32768 [ 939.277879][T20743] loop2: detected capacity change from 0 to 4096 [ 939.297614][T20704] ea_get: invalid extended attribute [ 939.377664][T20750] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 939.510522][T20756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6187'. [ 939.708196][ T29] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 939.752985][T20758] loop0: detected capacity change from 0 to 1024 [ 939.945649][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 939.973690][ T29] usb 6-1: config 11 has an invalid interface number: 95 but max is 0 [ 940.008013][ T29] usb 6-1: config 11 has no interface number 0 [ 940.047083][ T29] usb 6-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 940.122257][ T29] usb 6-1: config 11 interface 95 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 940.158600][ T29] usb 6-1: config 11 interface 95 altsetting 64 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 940.196300][ T29] usb 6-1: config 11 interface 95 has no altsetting 0 [ 940.224482][ T29] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 940.252997][ T29] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 940.286783][ T29] usb 6-1: Manufacturer: syz [ 940.319339][T20752] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 940.420696][T20778] loop4: detected capacity change from 0 to 16 [ 940.494381][T20780] loop0: detected capacity change from 0 to 512 [ 940.505269][T20778] erofs (device loop4): mounted with root inode @ nid 36. [ 940.560945][T20778] syz.4.6198: attempt to access beyond end of device [ 940.560945][T20778] loop4: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 940.579985][T20782] loop2: detected capacity change from 0 to 256 [ 940.600235][ T29] usbtouchscreen 6-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 940.617131][T20782] exfat: Deprecated parameter 'namecase' [ 940.618413][T20780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.636260][T20782] exfat: Deprecated parameter 'namecase' [ 940.637802][T20778] syz.4.6198: attempt to access beyond end of device [ 940.637802][T20778] loop4: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 940.654898][ T29] usb 6-1: USB disconnect, device number 50 [ 940.663642][T20780] ext4 filesystem being mounted at /1056/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.719890][T20782] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 940.759168][T20780] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 940.871982][ T5883] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 940.902006][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.061194][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 941.087854][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.122703][ T5883] usb 4-1: Product: syz [ 941.135595][ T5883] usb 4-1: Manufacturer: syz [ 941.152514][ T5883] usb 4-1: SerialNumber: syz [ 941.243741][ T5883] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 941.326599][T19028] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 941.826357][ T5771] usb 4-1: USB disconnect, device number 67 [ 942.691300][T19028] usb 4-1: Service connection timeout for: 256 [ 942.739200][T19028] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 942.787892][T19028] ath9k_htc: Failed to initialize the device [ 942.838930][ T5771] usb 4-1: ath9k_htc: USB layer deinitialized [ 943.213805][T20863] loop4: detected capacity change from 0 to 2048 [ 943.244573][T20863] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 943.323283][T20863] syz.4.6237: attempt to access beyond end of device [ 943.323283][T20863] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 943.337850][T20866] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 943.504803][T20863] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 943.548244][T20863] Remounting filesystem read-only [ 943.988144][T20842] loop0: detected capacity change from 0 to 32768 [ 944.061243][T20842] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 944.134180][T20890] loop1: detected capacity change from 0 to 256 [ 944.222725][T20894] loop2: detected capacity change from 0 to 512 [ 944.305729][T20890] FAT-fs (loop1): Directory bread(block 64) failed [ 944.336003][T20894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.356580][T20842] XFS (loop0): Ending clean mount [ 944.370957][T20890] FAT-fs (loop1): Directory bread(block 65) failed [ 944.433438][T20890] FAT-fs (loop1): Directory bread(block 66) failed [ 944.462941][T20890] FAT-fs (loop1): Directory bread(block 67) failed [ 944.484595][T20882] ntfs3(loop3): ino=19, mi_enum_attr [ 944.515546][T20882] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 944.533059][T20890] FAT-fs (loop1): Directory bread(block 68) failed [ 944.581621][T20890] FAT-fs (loop1): Directory bread(block 69) failed [ 944.624504][ T5635] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 944.649938][T20890] FAT-fs (loop1): Directory bread(block 70) failed [ 944.686395][T20890] FAT-fs (loop1): Directory bread(block 71) failed [ 944.743035][T20890] FAT-fs (loop1): Directory bread(block 72) failed [ 944.745051][ T5645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.752425][T20890] FAT-fs (loop1): Directory bread(block 73) failed [ 944.928119][T20844] set_capacity_and_notify: 1 callbacks suppressed [ 944.928145][T20844] loop5: detected capacity change from 0 to 65536 [ 945.052996][T20844] XFS (loop5): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 945.393432][T20844] XFS (loop5): Ending clean mount [ 945.851443][ T5639] XFS (loop5): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 946.421834][T20939] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 946.814087][T20954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6274'. [ 947.126463][T20966] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6279'. [ 947.211850][T20968] vivid-002: ================= START STATUS ================= [ 947.230482][T20968] vivid-002: Radio HW Seek Mode: Bounded [ 947.243924][T20968] vivid-002: Radio Programmable HW Seek: false [ 947.250289][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 947.261444][T20968] vivid-002: RDS Rx I/O Mode: Block I/O [ 947.274221][T20968] vivid-002: Generate RBDS Instead of RDS: false [ 947.282053][T20968] vivid-002: RDS Reception: true [ 947.287260][T20968] vivid-002: RDS Program Type: 0 inactive [ 947.301975][T20968] vivid-002: RDS PS Name: inactive [ 947.308965][T20968] vivid-002: RDS Radio Text: inactive [ 947.323600][T20968] vivid-002: RDS Traffic Announcement: false inactive [ 947.345741][T20968] vivid-002: RDS Traffic Program: false inactive [ 947.346871][ T5771] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 947.364545][T20968] vivid-002: RDS Music: false inactive [ 947.382404][T20968] vivid-002: ================== END STATUS ================== [ 947.409630][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 947.435221][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 947.458831][ T10] usb 5-1: config 8 has an invalid interface number: 61 but max is 2 [ 947.480946][ T10] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 947.504473][ T10] usb 5-1: config 8 has no interface number 0 [ 947.521456][ T10] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 947.544814][ T10] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.556532][ T5771] usb 4-1: Using ep0 maxpacket: 32 [ 947.577722][ T5771] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 947.590478][ T10] usb 5-1: config 8 interface 61 has no altsetting 0 [ 947.602445][ T5771] usb 4-1: config 0 has no interface number 0 [ 947.618041][ T10] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 947.638540][ T5771] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 947.650460][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.665565][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.677244][ T10] usb 5-1: Product: syz [ 947.683867][ T5771] usb 4-1: Product: syz [ 947.688617][ T10] usb 5-1: Manufacturer: syz [ 947.693296][ T5771] usb 4-1: Manufacturer: syz [ 947.699964][ T10] usb 5-1: SerialNumber: syz [ 947.704670][ T5771] usb 4-1: SerialNumber: syz [ 947.735963][ T5771] usb 4-1: config 0 descriptor?? [ 947.750112][ T5771] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 947.761471][T13082] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 947.782818][ T5771] usb 4-1: selecting invalid altsetting 1 [ 947.791170][ T5771] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 947.828640][ T5771] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 947.845433][ T5771] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 947.886029][ T5771] usb 4-1: media controller created [ 947.950320][T13082] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 947.982848][T13082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.993752][ T10] bfusb 5-1:8.61: probe with driver bfusb failed with error -5 [ 948.016667][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.025232][T13082] usb 6-1: Product: syz [ 948.033442][T13082] usb 6-1: Manufacturer: syz [ 948.044049][ T10] usb 5-1: USB disconnect, device number 56 [ 948.057601][T13082] usb 6-1: SerialNumber: syz [ 948.109092][T20990] loop0: detected capacity change from 0 to 16 [ 948.113273][T13082] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 948.161918][T13368] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 948.208168][T20990] erofs (device loop0): mounted with root inode @ nid 36. [ 948.325309][T20990] syz.0.6290: attempt to access beyond end of device [ 948.325309][T20990] loop0: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 948.347629][T20990] syz.0.6290: attempt to access beyond end of device [ 948.347629][T20990] loop0: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 948.349208][T20992] loop1: detected capacity change from 0 to 128 [ 948.402931][T20992] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 948.436263][T20992] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 948.487189][ T5771] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 948.608376][ T36] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 948.714032][ T29] usb 6-1: USB disconnect, device number 51 [ 948.770322][ T5771] usb 4-1: USB disconnect, device number 68 [ 949.117027][T20987] loop2: detected capacity change from 0 to 32768 [ 949.142644][T20987] [ 949.142644][T20987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 949.142644][T20987] [ 949.238753][T20987] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 949.238753][T20987] [ 949.297380][T20987] xtLookup: xtSearch returned -5 [ 949.476917][ T12] [ 949.476917][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 949.476917][ T12] [ 949.523931][ T12] [ 949.523931][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 949.523931][ T12] [ 949.553750][ T5645] [ 949.553750][ T5645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 949.553750][ T5645] [ 949.587721][ T117] [ 949.587721][ T117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 949.587721][ T117] [ 949.612798][T13368] usb 6-1: Service connection timeout for: 256 [ 949.654354][T13368] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 949.662273][ T5645] [ 949.662273][ T5645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 949.662273][ T5645] [ 949.716266][T13368] ath9k_htc: Failed to initialize the device [ 949.749061][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 950.121902][ T5883] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 950.156072][T20996] loop1: detected capacity change from 0 to 32768 [ 950.220550][T20996] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 950.348412][ T5883] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 950.363291][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.392501][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 950.422228][ T5883] usb 4-1: config 1 has no interface number 0 [ 950.434191][ T5883] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 950.445140][ T5883] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 950.461277][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 950.474583][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.490460][ T5883] usb 4-1: Product: syz [ 950.514463][ T5883] usb 4-1: Manufacturer: syz [ 950.525093][ T5883] usb 4-1: SerialNumber: syz [ 950.582313][T20996] XFS (loop1): Ending clean mount [ 950.618227][T20996] XFS (loop1): Quotacheck needed: Please wait. [ 950.797192][T20996] XFS (loop1): Quotacheck: Done. [ 951.010639][ T5646] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 951.157657][ T5883] usb 4-1: USB disconnect, device number 69 [ 951.239077][ T30] audit: type=1800 audit(2000525120.068:17): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.6316" name="/newroot/1021/file0" dev="tmpfs" ino=5391 res=0 errno=0 [ 951.762323][T21070] loop4: detected capacity change from 0 to 256 [ 951.809434][T21070] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x614dc512, utbl_chksum : 0xe619d30d) [ 951.939329][T21070] exFAT-fs (loop4): valid_size(9000) is greater than size(0) [ 952.236678][T21078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6328'. [ 952.274047][T21078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6328'. [ 952.475468][T21082] loop1: detected capacity change from 0 to 512 [ 952.509948][T21082] EXT4-fs: Ignoring removed bh option [ 952.536047][T21082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 952.572574][T21082] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 952.610504][T21068] loop2: detected capacity change from 0 to 32768 [ 952.621999][T21082] EXT4-fs (loop1): 1 truncate cleaned up [ 952.666480][T21082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.814303][ T5646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.847083][T21085] loop3: detected capacity change from 0 to 4096 [ 953.010966][T21092] openvswitch: netlink: Missing key (keys=40, expected=80) [ 953.027800][T21085] ntfs3(loop3): ino=19, mi_enum_attr [ 953.115475][T21094] loop1: detected capacity change from 0 to 512 [ 953.185310][T21098] loop2: detected capacity change from 0 to 128 [ 953.227889][T21094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.297483][T21098] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 953.302400][T21094] ext4 filesystem being mounted at /1068/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.338628][T21094] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 953.379043][T21098] ext4 filesystem being mounted at /1023/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 953.482352][T21098] EXT4-fs warning (device loop2): verify_group_input:136: Cannot add at group 54285 (only 1 groups) [ 953.645590][ T5646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.763977][ T5645] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 954.185508][T21064] loop0: detected capacity change from 0 to 65536 [ 954.252677][T21064] XFS (loop0): Mounting V5 Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 954.284679][T13368] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 954.305923][T21117] loop5: detected capacity change from 0 to 8192 [ 954.390068][T21117] loop5: p2 p3 [ 954.432563][T21117] loop5: p3 start 117440512 is beyond EOD, truncated [ 954.481651][T13368] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 954.494470][T21064] XFS (loop0): Ending clean mount [ 954.500484][T13368] usb 3-1: config 0 has no interface number 0 [ 954.511092][T13368] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 954.527037][T13368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.546641][T13368] usb 3-1: Product: syz [ 954.564259][T13368] usb 3-1: Manufacturer: syz [ 954.589244][T13368] usb 3-1: SerialNumber: syz [ 954.619232][T13368] usb 3-1: config 0 descriptor?? [ 954.819528][T21138] netlink: 2056 bytes leftover after parsing attributes in process `syz.5.6350'. [ 954.820717][ T5635] XFS (loop0): Unmounting Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 954.846521][T21135] loop4: detected capacity change from 0 to 512 [ 954.897926][T13368] uvcvideo 3-1:0.64: Found Unit with invalid ID 0 [ 954.918741][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 954.924697][T13368] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 954.925085][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 954.957627][T21135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.976808][T13368] uvcvideo 3-1:0.64: Entity type for entity Output 65535 was not initialized! [ 954.999366][T13368] uvcvideo 3-1:0.64: Failed to create links for entity 65535 [ 955.034285][T13368] uvcvideo 3-1:0.64: Failed to register entities (-22). [ 955.057885][T13368] usb 3-1: USB disconnect, device number 79 [ 955.318992][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 955.396190][T21145] Driver unsupported XDP return value 0 on prog (id 389) dev N/A, expect packet loss! [ 955.822598][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.154372][T21161] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 956.176971][T21164] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6362'. [ 956.285078][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 956.476418][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 956.496551][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 956.546527][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 956.577316][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.607098][ T24] usb 3-1: Product: syz [ 956.622109][ T24] usb 3-1: Manufacturer: syz [ 956.634739][ T24] usb 3-1: SerialNumber: syz [ 956.693917][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 956.730544][ T24] imon 3-1:155.0: unable to initialize intf0, err -19 [ 956.758690][ T24] imon:imon_probe: failed to initialize context! [ 956.780548][ T24] imon 3-1:155.0: unable to register, err -19 [ 956.827561][T21183] loop5: detected capacity change from 0 to 512 [ 956.875448][T21185] erofs (device loop4): mounted with root inode @ nid 36. [ 956.917530][T21183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.037541][ T24] usb 3-1: USB disconnect, device number 80 [ 957.311602][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6377'. [ 957.343496][T21197] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6377'. [ 957.343655][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.443791][T21199] set_capacity_and_notify: 1 callbacks suppressed [ 957.443818][T21199] loop4: detected capacity change from 0 to 64 [ 957.553293][T21201] netlink: 'syz.5.6378': attribute type 12 has an invalid length. [ 957.597574][T21170] loop0: detected capacity change from 0 to 32768 [ 957.665514][T21170] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 957.959117][T21215] loop3: detected capacity change from 0 to 64 [ 957.993496][T21170] XFS (loop0): Ending clean mount [ 958.022498][T21170] XFS (loop0): Quotacheck needed: Please wait. [ 958.222674][T21170] XFS (loop0): Quotacheck: Done. [ 958.303618][T13368] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 958.508805][T13368] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 958.544878][ T5635] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 958.558956][T13368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.583462][T13368] usb 5-1: Product: syz [ 958.587795][T13368] usb 5-1: Manufacturer: syz [ 958.598720][T13368] usb 5-1: SerialNumber: syz [ 958.643431][T13368] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 958.671098][T21233] loop1: detected capacity change from 0 to 2048 [ 958.747229][T13082] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 958.780058][T21233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 959.310524][T19028] usb 5-1: USB disconnect, device number 57 [ 959.381927][T21241] loop1: detected capacity change from 0 to 1024 [ 959.451638][T21217] loop5: detected capacity change from 0 to 32768 [ 959.495141][T21217] [ 959.495141][T21217] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 959.495141][T21217] [ 959.566999][T21217] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 959.566999][T21217] [ 959.626507][T21217] xtLookup: xtSearch returned -5 [ 959.688151][T21249] loop2: detected capacity change from 0 to 256 [ 959.754221][T21249] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 959.870286][ T12] [ 959.870286][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 959.870286][ T12] [ 959.920417][ T12] [ 959.920417][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 959.920417][ T12] [ 959.986104][T21251] loop0: detected capacity change from 0 to 4096 [ 960.003245][ T116] [ 960.003245][ T116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 960.003245][ T116] [ 960.049854][ T5639] [ 960.049854][ T5639] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 960.049854][ T5639] [ 960.087655][ T5639] [ 960.087655][ T5639] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 960.087655][ T5639] [ 960.148020][T21251] ntfs3(loop0): ino=19, mi_enum_attr [ 960.189920][T21251] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 960.209704][T13082] usb 5-1: Service connection timeout for: 256 [ 960.232052][T13082] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 960.276593][T13082] ath9k_htc: Failed to initialize the device [ 960.318697][T19028] usb 5-1: ath9k_htc: USB layer deinitialized [ 960.617689][T21266] xt_connbytes: Forcing CT accounting to be enabled [ 960.670325][T21267] loop4: detected capacity change from 0 to 2048 [ 960.725107][T21267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 960.760591][T21271] nbd: illegal input index -1156311892 [ 961.464375][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 961.535341][T21299] loop5: detected capacity change from 0 to 16 [ 961.583282][T21299] erofs (device loop5): mounted with root inode @ nid 36. [ 961.692643][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 961.715524][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.747535][ T24] usb 1-1: Product: syz [ 961.766650][ T24] usb 1-1: Manufacturer: syz [ 961.797069][ T24] usb 1-1: SerialNumber: syz [ 961.855141][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 961.897663][T19028] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 963.327722][ T24] usb 1-1: USB disconnect, device number 75 [ 963.376376][T19028] usb 1-1: Service connection timeout for: 256 [ 963.399602][T19028] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 963.430165][T19028] ath9k_htc: Failed to initialize the device [ 963.440977][T21302] set_capacity_and_notify: 1 callbacks suppressed [ 963.441000][T21302] loop3: detected capacity change from 0 to 32768 [ 963.447067][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 963.579811][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6438'. [ 963.639492][T21332] netlink: 15 bytes leftover after parsing attributes in process `syz.2.6438'. [ 963.642183][T21302] jfs_rename did not expect dtDelete to return rc = -2 [ 963.700361][T21302] ERROR: (device loop3): txAbort: [ 963.700361][T21302] [ 963.765773][T21302] ERROR: (device loop3): remounting filesystem as read-only [ 963.927318][T21337] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 964.058569][T21316] loop4: detected capacity change from 0 to 32768 [ 964.070101][T21342] loop3: detected capacity change from 0 to 8 [ 964.296356][T21347] loop1: detected capacity change from 0 to 512 [ 964.359975][T21347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.408044][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6449'. [ 964.753203][ T5646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.762874][T21365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6454'. [ 964.894604][ T24] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 965.089101][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 965.114944][T21373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6458'. [ 965.132746][ T24] usb 6-1: config 0 has no interface number 0 [ 965.179221][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 965.190613][T21373] netlink: 15 bytes leftover after parsing attributes in process `syz.0.6458'. [ 965.215559][T21375] xt_connbytes: Forcing CT accounting to be enabled [ 965.256843][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 965.311159][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 965.349063][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 965.383157][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 965.422593][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 965.457206][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 965.511496][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.562152][ T24] usb 6-1: config 0 descriptor?? [ 965.582171][T21359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 965.618569][T21359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 965.666425][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 965.967906][T19028] usb 6-1: USB disconnect, device number 52 [ 965.975980][T21363] loop3: detected capacity change from 0 to 32768 [ 966.012639][T19028] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 966.024321][T21363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6453 (21363) [ 966.049082][T21387] loop2: detected capacity change from 0 to 4096 [ 966.130104][T21363] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 966.157478][T21387] ntfs3(loop2): ino=19, mi_enum_attr [ 966.182762][T21363] BTRFS info (device loop3): using sha256 checksum algorithm [ 966.397994][T21363] BTRFS info (device loop3): enabling ssd optimizations [ 966.460632][T21363] BTRFS info (device loop3): turning on async discard [ 966.483807][T21363] BTRFS info (device loop3): enabling free space tree [ 966.872095][ T5644] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.229745][T21424] netlink: 'syz.0.6476': attribute type 21 has an invalid length. [ 967.266707][T21381] loop1: detected capacity change from 0 to 32768 [ 967.288618][T21424] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6476'. [ 967.581348][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6479'. [ 967.639082][T21432] netlink: 15 bytes leftover after parsing attributes in process `syz.5.6479'. [ 967.736704][T21436] overlayfs: conflicting options: userxattr,metacopy=on [ 968.635527][ T50] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 968.661953][T21458] loop1: detected capacity change from 0 to 128 [ 968.697315][T21458] vfat: Unknown parameter '' [ 968.897217][T21470] netlink: 'syz.5.6500': attribute type 11 has an invalid length. [ 968.926735][T21470] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6500'. [ 969.047566][T21475] xt_TCPMSS: Only works on TCP SYN packets [ 969.051592][T21477] openvswitch: netlink: IP tunnel dst address not specified [ 969.080117][T21478] netlink: 'syz.1.6504': attribute type 11 has an invalid length. [ 969.130493][T21478] netlink: 'syz.1.6504': attribute type 5 has an invalid length. [ 969.188338][T21478] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.6504'. [ 969.328506][T21482] warning: `syz.5.6506' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 969.788630][T13368] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 969.879461][T21502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6516'. [ 969.987109][T13368] usb 1-1: Using ep0 maxpacket: 16 [ 970.012352][T13368] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 970.058111][T13368] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 970.096429][T21510] xt_TCPMSS: Only works on TCP SYN packets [ 970.096958][T13368] usb 1-1: config 0 has no interface number 0 [ 970.154942][T13368] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 970.198969][T13368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.230373][T13368] usb 1-1: Product: syz [ 970.249821][T13368] usb 1-1: Manufacturer: syz [ 970.257708][T13368] usb 1-1: SerialNumber: syz [ 970.277409][T21514] geneve2: entered promiscuous mode [ 970.286896][T13368] usb 1-1: config 0 descriptor?? [ 970.294569][T21514] geneve2: entered allmulticast mode [ 970.325262][T13368] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 970.356698][T13368] uvcvideo 1-1:0.105: No valid video chain found. [ 970.605706][T19028] usb 1-1: USB disconnect, device number 76 [ 970.622326][T21522] xt_l2tp: wrong L2TP version: 0 [ 970.661842][T21518] loop1: detected capacity change from 0 to 4096 [ 970.741038][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6528'. [ 970.755046][T21518] ntfs3(loop1): ino=19, mi_enum_attr [ 970.766186][T21528] netlink: 15 bytes leftover after parsing attributes in process `syz.3.6528'. [ 971.387364][T19028] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 971.514600][ T29] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 971.578357][T19028] usb 2-1: Using ep0 maxpacket: 32 [ 971.590776][T19028] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.612977][T19028] usb 2-1: config 0 has no interface number 0 [ 971.634684][T19028] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 971.653111][T19028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.670301][T19028] usb 2-1: Product: syz [ 971.686320][T19028] usb 2-1: Manufacturer: syz [ 971.694438][T19028] usb 2-1: SerialNumber: syz [ 971.708571][ T29] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 971.741005][ T29] usb 5-1: config 0 has no interface number 0 [ 971.753087][T19028] usb 2-1: config 0 descriptor?? [ 971.780377][ T29] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 971.796062][T19028] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 971.815778][ T29] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 971.821932][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.836749][T19028] usb 2-1: selecting invalid altsetting 1 [ 971.851148][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.855149][T19028] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 971.860656][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.877506][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.886475][ T29] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 971.898305][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.907443][T21556] loop3: detected capacity change from 0 to 128 [ 971.919000][ T29] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 971.934576][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.935601][T19028] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 971.967100][ T29] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 971.981197][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 971.988854][T19028] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 972.002477][ T29] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 972.028588][T19028] usb 2-1: media controller created [ 972.040041][T21553] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 972.042580][ T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 972.077974][T21560] openvswitch: netlink: Missing key (keys=40, expected=100) [ 972.094495][T19028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 972.102957][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.134252][T13368] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 972.136779][ T29] usb 5-1: config 0 descriptor?? [ 972.181697][T21538] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 972.206967][T21538] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 972.245112][ T29] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 972.275567][T21562] loop3: detected capacity change from 0 to 1024 [ 972.299471][T21562] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 972.324110][T13368] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 972.355048][T13368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.390033][T13368] usb 3-1: Product: syz [ 972.403654][T13368] usb 3-1: Manufacturer: syz [ 972.426000][T13368] usb 3-1: SerialNumber: syz [ 972.447633][T19028] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 972.491341][T13368] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 972.528827][T13082] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 972.626868][ T29] usb 5-1: USB disconnect, device number 58 [ 972.712765][ T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 972.756515][T19028] usb 2-1: USB disconnect, device number 83 [ 972.934751][ T50] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 972.943537][ T50] Bluetooth: hci5: Injecting HCI hardware error event [ 972.957540][ T50] Bluetooth: hci5: hardware error 0x00 [ 973.054653][T19028] usb 3-1: USB disconnect, device number 81 [ 973.137757][T21580] loop3: detected capacity change from 0 to 512 [ 973.152098][T21580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 973.178961][T21580] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 973.206566][T21580] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 973.237970][T21580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.386158][T21580] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 973.498314][T21592] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 973.598106][ T5644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.639726][T21597] validate_nla: 46 callbacks suppressed [ 973.639752][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.675551][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.703001][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.731494][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.762282][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.795085][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.837371][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.854908][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.882833][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.920159][T21597] netlink: 'syz.5.6560': attribute type 3 has an invalid length. [ 973.960013][T13082] usb 3-1: Service connection timeout for: 256 [ 973.973300][T13082] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 974.012560][T13082] ath9k_htc: Failed to initialize the device [ 974.052603][T19028] usb 3-1: ath9k_htc: USB layer deinitialized [ 974.755262][T21633] bridge0: port 3(veth1) entered blocking state [ 974.792913][T21633] bridge0: port 3(veth1) entered disabled state [ 974.818845][T21633] veth1: entered allmulticast mode [ 974.840502][T21633] veth1: entered promiscuous mode [ 974.861769][T21633] bridge0: port 3(veth1) entered blocking state [ 974.868933][T21633] bridge0: port 3(veth1) entered forwarding state [ 974.930230][T21640] loop2: detected capacity change from 0 to 1024 [ 974.976581][T21640] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 975.158962][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 975.288522][T21653] xt_addrtype: ipv6 does not support BROADCAST matching [ 975.828133][T21669] loop5: detected capacity change from 0 to 1024 [ 975.887718][T21669] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 975.924720][T21669] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 976.107825][T21669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 976.132587][T21681] loop4: detected capacity change from 0 to 256 [ 976.141090][T21681] exfat: Deprecated parameter 'namecase' [ 976.146916][T21681] exfat: Deprecated parameter 'namecase' [ 976.155732][T21681] exfat: Deprecated parameter 'namecase' [ 976.197785][T21681] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 976.441761][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.634541][T21690] IPv6: NLM_F_CREATE should be specified when creating new route [ 976.683705][T21692] geneve2: entered promiscuous mode [ 976.696904][T21692] geneve2: entered allmulticast mode [ 977.219940][T21667] loop3: detected capacity change from 0 to 32768 [ 977.222447][T21708] loop2: detected capacity change from 0 to 512 [ 977.263984][T13082] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 977.274997][T21667] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 977.306017][T21708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.308473][ T30] audit: type=1326 audit(2000525144.487:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.320047][T21708] ext4 filesystem being mounted at /1068/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 977.448617][ T30] audit: type=1326 audit(2000525144.543:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.475164][T13082] usb 6-1: Using ep0 maxpacket: 8 [ 977.505432][ T30] audit: type=1326 audit(2000525144.543:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.508827][T21667] XFS (loop3): Ending clean mount [ 977.560268][T13082] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.572687][T13082] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 977.585013][T13082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 977.657475][T13082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 977.658284][ T30] audit: type=1326 audit(2000525144.543:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.677369][T13082] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 977.706792][ T30] audit: type=1326 audit(2000525144.543:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.733325][ T30] audit: type=1326 audit(2000525144.543:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.793112][ T5645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.810483][T13082] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 977.814181][ T30] audit: type=1326 audit(2000525144.543:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.841931][T13082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 977.848355][ T30] audit: type=1326 audit(2000525144.543:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.869060][ T5771] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 977.898422][T13082] usb 6-1: Product: syz [ 977.908256][ T30] audit: type=1326 audit(2000525144.543:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.933643][ T30] audit: type=1326 audit(2000525144.543:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21710 comm="syz.0.6615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x50000 [ 977.948207][T13082] usb 6-1: Manufacturer: syz [ 977.992457][T13082] usb 6-1: SerialNumber: syz [ 978.015656][ T5644] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 978.038501][T13082] usb 6-1: config 0 descriptor?? [ 978.107479][ T5771] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 978.129338][ T5771] usb 2-1: config 0 has no interface number 0 [ 978.137044][ T5771] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 978.151761][ T5771] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 978.163320][ T5771] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 978.194055][ T5771] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 978.259034][ T5771] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 978.298249][T13082] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 978.316047][ T5771] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 978.330459][T13082] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 978.369085][ T5771] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 978.401207][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.462614][ T5771] usb 2-1: config 0 descriptor?? [ 978.511076][T21724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 978.518540][T13082] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 978.541934][T13082] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 978.541991][T21724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 978.575140][T13082] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 978.632088][T13082] usb 6-1: USB disconnect, device number 53 [ 978.658788][ T5771] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 978.782196][T21738] loop0: detected capacity change from 0 to 4096 [ 978.815455][T21738] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 978.957618][T21738] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 979.019204][T13368] usb 2-1: USB disconnect, device number 84 [ 979.054259][T13368] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 979.090366][T21738] ntfs3(loop0): ino=1b, mi_enum_attr [ 979.117472][T21738] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 979.352409][T21753] loop2: detected capacity change from 0 to 256 [ 979.403608][T21753] exfat: Deprecated parameter 'namecase' [ 979.425333][T21757] bridge0: port 3(veth1) entered blocking state [ 979.433395][T21753] exfat: Deprecated parameter 'namecase' [ 979.454796][T21757] bridge0: port 3(veth1) entered disabled state [ 979.463352][T21753] exfat: Deprecated parameter 'namecase' [ 979.479926][T21757] veth1: entered allmulticast mode [ 979.498326][T21753] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 979.515813][T21757] veth1: entered promiscuous mode [ 979.539326][T21757] bridge0: port 3(veth1) entered blocking state [ 979.547221][T21757] bridge0: port 3(veth1) entered forwarding state [ 979.849212][T21764] validate_nla: 45 callbacks suppressed [ 979.849240][T21764] netlink: 'syz.3.6636': attribute type 21 has an invalid length. [ 979.904219][T21764] IPv6: NLM_F_CREATE should be specified when creating new route [ 980.007673][T21771] loop4: detected capacity change from 0 to 1024 [ 980.036566][T21771] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 980.063478][T21771] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 980.507602][T21771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 980.729772][T21797] loop0: detected capacity change from 0 to 256 [ 980.759862][T21798] loop1: detected capacity change from 0 to 512 [ 980.775696][T21797] exfat: Deprecated parameter 'namecase' [ 980.808443][T21797] exfat: Deprecated parameter 'namecase' [ 980.817671][T21798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.838090][T21797] exfat: Deprecated parameter 'namecase' [ 980.846789][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.872933][T21798] ext4 filesystem being mounted at /1120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 980.939500][T21797] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 981.062758][ T29] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 981.087772][ T5646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.283342][ T29] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 981.314239][ T29] usb 3-1: config 0 has no interface number 0 [ 981.347642][ T29] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.405430][ T29] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 981.458494][ T29] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 981.521669][ T29] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 981.539504][T21816] geneve2: entered promiscuous mode [ 981.542013][ T29] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 981.566445][T21816] geneve2: entered allmulticast mode [ 981.607139][ T29] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 981.625323][T21818] netlink: 'syz.3.6660': attribute type 10 has an invalid length. [ 981.663088][ T29] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 981.681238][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6662'. [ 981.707527][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.721270][T21823] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6662'. [ 981.769522][ T29] usb 3-1: config 0 descriptor?? [ 981.786447][T21800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 981.800091][T21800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 981.845570][ T29] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 981.883462][T21826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.182333][ T29] usb 3-1: USB disconnect, device number 82 [ 982.225769][ T29] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 982.520081][T21850] comedi comedi0: Minor 47 could not be opened [ 982.620427][T21852] loop0: detected capacity change from 0 to 164 [ 982.649424][T21852] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 982.698810][T21852] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 982.745471][T21855] geneve3: entered promiscuous mode [ 982.751915][T21852] Symlink component flag not implemented [ 982.761725][T21855] geneve3: entered allmulticast mode [ 982.768698][T21852] Symlink component flag not implemented [ 982.775916][T21852] Symlink component flag not implemented (7) [ 982.790491][T21852] Symlink component flag not implemented (116) [ 983.044231][T21860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6683'. [ 983.398746][T21878] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 983.557075][T21880] loop3: detected capacity change from 0 to 64 [ 983.641925][T21880] Trying to free block not in datazone [ 984.121524][ T5771] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 984.322386][ T5771] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 984.357557][ T5771] usb 1-1: config 0 has no interface number 0 [ 984.370747][ T5771] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 984.420505][ T5771] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 984.465742][ T5771] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 984.520100][ T5771] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 984.565596][ T5771] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 984.601933][ T5771] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 984.646129][ T5771] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 984.703664][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.740922][ T5771] usb 1-1: config 0 descriptor?? [ 984.755868][T21889] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 984.765111][T21889] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 984.824657][ T5771] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 985.003709][T13368] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 985.123146][T13082] usb 1-1: USB disconnect, device number 77 [ 985.148193][T13082] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 985.180190][T21934] loop1: detected capacity change from 0 to 256 [ 985.191231][T13368] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 985.208832][T13368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.227280][T13368] usb 6-1: Product: syz [ 985.231789][ T5771] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 985.246633][T13368] usb 6-1: Manufacturer: syz [ 985.268191][T13368] usb 6-1: SerialNumber: syz [ 985.291209][T21934] FAT-fs (loop1): Directory bread(block 64) failed [ 985.310798][T13368] usb 6-1: config 0 descriptor?? [ 985.321330][T21934] FAT-fs (loop1): Directory bread(block 65) failed [ 985.347462][T21934] FAT-fs (loop1): Directory bread(block 66) failed [ 985.356498][T13368] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 985.364879][T21934] FAT-fs (loop1): Directory bread(block 67) failed [ 985.376828][T21934] FAT-fs (loop1): Directory bread(block 68) failed [ 985.387555][T13368] dvb-usb: bulk message failed: -22 (4/0) [ 985.401467][T21934] FAT-fs (loop1): Directory bread(block 69) failed [ 985.408075][T21938] geneve2: entered promiscuous mode [ 985.408359][T13368] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 985.413914][T21938] geneve2: entered allmulticast mode [ 985.429328][ T5771] usb 5-1: Using ep0 maxpacket: 32 [ 985.434671][T21934] FAT-fs (loop1): Directory bread(block 70) failed [ 985.442879][T21934] FAT-fs (loop1): Directory bread(block 71) failed [ 985.449540][T21934] FAT-fs (loop1): Directory bread(block 72) failed [ 985.458893][T21934] FAT-fs (loop1): Directory bread(block 73) failed [ 985.465667][ T5771] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 985.487381][ T5771] usb 5-1: config 0 has no interface number 0 [ 985.496340][T13368] dvb-usb: bulk message failed: -22 (5/0) [ 985.504346][T13368] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 985.517018][ T5771] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 985.526289][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.547475][T13368] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 985.565667][ T5771] usb 5-1: Product: syz [ 985.573306][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 985.573328][ T30] audit: type=1800 audit(2000525152.221:78): pid=21934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6715" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 985.576938][ T5771] usb 5-1: Manufacturer: syz [ 985.613378][T13368] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 985.631247][T13368] usb 6-1: USB disconnect, device number 54 [ 985.644505][ T5771] usb 5-1: SerialNumber: syz [ 985.670756][ T5771] usb 5-1: config 0 descriptor?? [ 985.701941][ T5771] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 985.750431][ T5771] usb 5-1: selecting invalid altsetting 1 [ 985.778861][ T5771] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 985.866135][ T5771] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 985.909874][ T5771] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 985.910301][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6721'. [ 985.937033][ T5771] usb 5-1: media controller created [ 985.959207][T21944] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6721'. [ 986.037863][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.328798][ T5771] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 986.517615][ T5771] usb 5-1: USB disconnect, device number 59 [ 986.878687][T21974] loop1: detected capacity change from 0 to 256 [ 987.358726][T21985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6744'. [ 987.405878][T21985] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6744'. [ 987.502717][T21991] netlink: 'syz.1.6747': attribute type 1 has an invalid length. [ 987.523862][T21991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6747'. [ 987.746741][T21997] loop0: detected capacity change from 0 to 1024 [ 987.787273][T21997] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 987.835545][T21997] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 987.931472][T21999] loop1: detected capacity change from 0 to 4096 [ 987.975063][T21999] EXT4-fs: Ignoring removed bh option [ 987.993542][T21973] loop2: detected capacity change from 0 to 32768 [ 988.001391][T22006] loop5: detected capacity change from 0 to 1764 [ 988.013537][T21973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6739 (21973) [ 988.035860][T22005] Cannot find add_set index 0 as target [ 988.040701][T21973] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 988.068983][T22006] process 'syz.5.6753' launched './file0' with NULL argv: empty string added [ 988.085174][T21999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.115552][T21973] BTRFS info (device loop2): using sha256 checksum algorithm [ 988.329798][T21997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 988.379814][T21973] BTRFS info (device loop2): enabling ssd optimizations [ 988.419077][T21973] BTRFS info (device loop2): turning on async discard [ 988.449017][T21973] BTRFS info (device loop2): enabling free space tree [ 988.595217][ T5646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.768980][ T5645] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 988.820847][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.958568][ T5792] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 989.170424][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 989.209640][ T5792] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 989.250304][ T5792] usb 6-1: config 0 has no interface number 0 [ 989.278950][ T5792] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 989.315596][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.345760][ T5792] usb 6-1: Product: syz [ 989.366932][ T5792] usb 6-1: Manufacturer: syz [ 989.397585][ T5792] usb 6-1: SerialNumber: syz [ 989.435024][ T5792] usb 6-1: config 0 descriptor?? [ 989.482907][T22051] netlink: 'syz.2.6767': attribute type 1 has an invalid length. [ 989.483935][ T5792] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 989.522256][T22051] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.6767'. [ 989.556403][ T5792] usb 6-1: selecting invalid altsetting 1 [ 989.582839][ T5792] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 989.622518][ T5792] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 989.682300][ T5792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 989.722189][ T5792] usb 6-1: media controller created [ 989.813822][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 990.084905][T22070] loop1: detected capacity change from 0 to 1024 [ 990.123087][T22070] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 990.162279][ T5792] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 990.165647][T22067] bond1: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 990.201167][T22070] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 990.296975][T22067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.299536][ T5792] usb 6-1: USB disconnect, device number 55 [ 990.602894][T22070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 990.634694][ T5771] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 990.701378][T22083] loop3: detected capacity change from 0 to 4096 [ 990.770216][T22083] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 990.802595][ T5646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.815848][ T5771] usb 3-1: Using ep0 maxpacket: 16 [ 990.831856][ T5771] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 990.868293][ T5771] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.907056][T22083] ntfs3(loop3): Failed to load $Extend (-22). [ 990.917213][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 990.964603][T22083] ntfs3(loop3): Failed to initialize $Extend. [ 990.983011][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 991.030032][ T5771] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 991.064453][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.101386][ T5771] usb 3-1: Product: syz [ 991.119420][ T5771] usb 3-1: Manufacturer: syz [ 991.146171][ T5771] usb 3-1: SerialNumber: syz [ 991.183001][ T5771] usb 3-1: config 0 descriptor?? [ 991.207080][T22077] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 991.383803][T22097] loop5: detected capacity change from 0 to 4096 [ 991.432800][T22097] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 991.558220][T22097] ntfs3(loop5): Failed to load $Extend (-22). [ 991.588219][ T5771] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 991.597199][T22097] ntfs3(loop5): Failed to initialize $Extend. [ 991.642471][ T5771] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 991.706053][ T5771] usb 3-1: USB disconnect, device number 83 [ 992.141654][T22113] geneve2: entered promiscuous mode [ 992.169458][T22113] geneve2: entered allmulticast mode [ 992.216745][T22121] loop0: detected capacity change from 0 to 64 [ 992.495256][T22125] bridge1: entered allmulticast mode [ 992.916554][T22138] loop2: detected capacity change from 0 to 1764 [ 993.293554][T22148] loop2: detected capacity change from 0 to 16 [ 993.328421][T22149] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 993.355724][T22148] erofs (device loop2): mounted with root inode @ nid 36. [ 993.416644][T22148] erofs (device loop2): xattr_isize 12 of nid 86 is not supported yet [ 993.634920][T22157] loop3: detected capacity change from 0 to 1024 [ 993.719320][T22157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.886172][T22168] loop4: detected capacity change from 0 to 256 [ 993.945561][T22157] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.6820: missing EA_INODE flag [ 994.020795][T22168] FAT-fs (loop4): Directory bread(block 64) failed [ 994.046092][T22157] EXT4-fs (loop3): Remounting filesystem read-only [ 994.058534][T22168] FAT-fs (loop4): Directory bread(block 65) failed [ 994.077436][T22168] FAT-fs (loop4): Directory bread(block 66) failed [ 994.104837][T22168] FAT-fs (loop4): Directory bread(block 67) failed [ 994.127336][T22135] loop0: detected capacity change from 0 to 32768 [ 994.134149][T22168] FAT-fs (loop4): Directory bread(block 68) failed [ 994.156787][T22168] FAT-fs (loop4): Directory bread(block 69) failed [ 994.168082][T22168] FAT-fs (loop4): Directory bread(block 70) failed [ 994.176318][T22168] FAT-fs (loop4): Directory bread(block 71) failed [ 994.199035][T22168] FAT-fs (loop4): Directory bread(block 72) failed [ 994.200860][T22135] ERROR: (device loop0): diAllocAG: numfree > numinos [ 994.200860][T22135] [ 994.217039][T22168] FAT-fs (loop4): Directory bread(block 73) failed [ 994.218999][ T5644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.295488][T22135] ERROR: (device loop0): remounting filesystem as read-only [ 994.333720][T22135] ialloc: diAlloc returned -5! [ 994.559884][T22180] loop3: detected capacity change from 0 to 1764 [ 994.656353][T22184] loop2: detected capacity change from 0 to 256 [ 994.684415][T22184] exfat: Deprecated parameter 'namecase' [ 994.769967][T22184] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xa3a8d5f0, utbl_chksum : 0xe619d30d) [ 995.079990][T22192] loop3: detected capacity change from 0 to 64 [ 995.239735][T22199] xt_TCPMSS: Only works on TCP SYN packets [ 995.653975][T22210] loop2: detected capacity change from 0 to 1024 [ 996.503221][T22224] geneve2: entered promiscuous mode [ 996.510947][T22224] geneve2: entered allmulticast mode [ 996.555436][T22206] loop1: detected capacity change from 0 to 32768 [ 996.621849][T22206] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 996.791131][T22206] XFS (loop1): Ending clean mount [ 996.961939][T22249] loop3: detected capacity change from 0 to 512 [ 997.021820][T22252] loop2: detected capacity change from 0 to 4096 [ 997.063201][T22252] EXT4-fs: Ignoring removed bh option [ 997.103814][T22249] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.6857: bg 0: block 4: invalid block bitmap [ 997.185692][T22249] loop3: lost filesystem error report for type 5 error -117 [ 997.185999][T22249] EXT4-fs (loop3): Remounting filesystem read-only [ 997.193647][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 997.193680][ C1] EXT4-fs (loop3): initial error at time 2000525163: ext4_validate_block_bitmap:431 [ 997.193725][ C1] EXT4-fs (loop3): last error at time 2000525163: ext4_validate_block_bitmap:431 [ 997.230414][T22252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.282394][T22249] EXT4-fs (loop3): 1 truncate cleaned up [ 997.295652][ T5646] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 997.322194][T22249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.442532][ T5644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.546269][ T5645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.760129][T22271] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6871'. [ 997.834778][T22271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.133467][T22275] bond1: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 998.173977][T22275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.345125][T22282] geneve2: entered promiscuous mode [ 998.370886][T22282] geneve2: entered allmulticast mode [ 998.404758][T22288] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6876'. [ 998.717027][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 998.890053][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 998.903797][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 998.935832][ T24] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 998.969494][ T24] usb 5-1: config 1 has no interface number 0 [ 998.989732][ T24] usb 5-1: config 1 interface 151 has no altsetting 0 [ 999.011364][ T24] usb 5-1: string descriptor 0 read error: -22 [ 999.022964][ T24] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 999.042983][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.051396][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6887'. [ 999.109744][T22306] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 999.124122][ T24] gspca_main: pac7311-2.14.0 probing 093a:260e [ 999.193526][T22306] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6887'. [ 999.402444][T22314] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 999.527802][T22292] loop3: detected capacity change from 0 to 32768 [ 999.545575][ T24] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 999.570620][ T24] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 999.605458][T22292] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 999.605458][T22292] [ 999.639749][ T24] usb 5-1: USB disconnect, device number 60 [ 999.686829][T22292] ERROR: (device loop3): remounting filesystem as read-only [ 999.724635][T22292] ialloc: diAlloc returned -5! [ 1000.326361][T22342] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1000.420697][T22344] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1000.654199][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6905'. [ 1000.691149][T22347] loop1: detected capacity change from 0 to 1024 [ 1000.698443][T22349] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1000.744371][T22349] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6905'. [ 1001.004740][T22357] loop2: detected capacity change from 0 to 1024 [ 1001.059427][T22357] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1001.071381][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6913'. [ 1001.147848][T22363] loop1: detected capacity change from 0 to 256 [ 1001.163153][T22357] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.6912: Invalid block bitmap block 0 in block_group 0 [ 1001.203009][T22357] loop2: lost filesystem error report for type 5 error -117 [ 1001.205452][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1001.219308][ C1] EXT4-fs (loop2): initial error at time 2000525166: ext4_read_block_bitmap_nowait:482 [ 1001.229011][ C1] EXT4-fs (loop2): last error at time 2000525166: ext4_read_block_bitmap_nowait:482 [ 1001.243841][T22357] Quota error (device loop2): write_blk: dquota write failed [ 1001.255007][T22357] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1001.265701][T22357] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.6912: Failed to acquire dquot type 0 [ 1001.277024][T22357] loop2: lost filesystem error report for type 5 error -117 [ 1001.294984][T22357] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.6912: Freeing blocks not in datazone - block = 0, count = 4096 [ 1001.324753][T22357] loop2: lost filesystem error report for type 5 error -117 [ 1001.367590][T22357] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm syz.2.6912: Invalid inode bitmap blk 0 in block_group 0 [ 1001.400010][T22357] loop2: lost filesystem error report for type 5 error -117 [ 1001.402221][T22357] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 1001.418351][ T42] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 1001.427278][T22363] FAT-fs (loop1): Directory bread(block 64) failed [ 1001.427322][T22363] FAT-fs (loop1): Directory bread(block 65) failed [ 1001.427427][T22363] FAT-fs (loop1): Directory bread(block 66) failed [ 1001.427465][T22363] FAT-fs (loop1): Directory bread(block 67) failed [ 1001.427563][T22363] FAT-fs (loop1): Directory bread(block 68) failed [ 1001.427602][T22363] FAT-fs (loop1): Directory bread(block 69) failed [ 1001.427703][T22363] FAT-fs (loop1): Directory bread(block 70) failed [ 1001.427742][T22363] FAT-fs (loop1): Directory bread(block 71) failed [ 1001.427851][T22363] FAT-fs (loop1): Directory bread(block 72) failed [ 1001.489606][T22357] loop2: lost filesystem error report for type 5 error -117 [ 1001.492175][T22357] EXT4-fs (loop2): 1 orphan inode deleted [ 1001.512446][ T42] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:3: Failed to release dquot type 0 [ 1001.559701][ T42] loop2: lost filesystem error report for type 5 error -117 [ 1001.562053][T22357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.596562][T22363] FAT-fs (loop1): Directory bread(block 73) failed [ 1001.605754][T22372] loop4: detected capacity change from 0 to 2048 [ 1001.663374][T22374] netlink: 'syz.5.6919': attribute type 4 has an invalid length. [ 1001.672657][T22372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.748674][T22340] loop3: detected capacity change from 0 to 32768 [ 1001.759766][ T5645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.789169][T22340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6901 (22340) [ 1001.860937][T22340] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1001.901629][T22340] BTRFS info (device loop3): using sha256 checksum algorithm [ 1001.947872][T22376] netlink: 'syz.5.6921': attribute type 1 has an invalid length. [ 1001.978147][T22376] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6921'. [ 1001.999484][T22385] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1002.095707][T22340] BTRFS info (device loop3): enabling ssd optimizations [ 1002.128098][T22340] BTRFS info (device loop3): turning on async discard [ 1002.154023][T22340] BTRFS info (device loop3): enabling free space tree [ 1002.288520][T22369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1002.390570][ T5644] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1002.683031][T22406] loop0: detected capacity change from 0 to 1024 [ 1003.492860][T22433] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6952'. [ 1003.534146][T22433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.779524][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1003.811803][T19028] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1004.011394][T19028] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1004.041990][T19028] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.086944][T19028] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1004.124094][T19028] usb 5-1: config 1 has no interface number 1 [ 1004.142899][T19028] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1004.171823][T19028] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.205029][T19028] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.243916][T19028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.274152][T19028] usb 5-1: Product: syz [ 1004.285385][T19028] usb 5-1: Manufacturer: syz [ 1004.300725][T19028] usb 5-1: SerialNumber: syz [ 1004.584858][T19028] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1004.590131][T22426] loop0: detected capacity change from 0 to 32768 [ 1004.606940][T19028] usb 5-1: MIDIStreaming interface descriptor not found [ 1004.653640][T22426] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1004.700335][T22462] netlink: 'syz.2.6950': attribute type 1 has an invalid length. [ 1004.709413][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1004.747330][T22462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6950'. [ 1004.810489][T22426] XFS (loop0): Ending clean mount [ 1004.878811][T19028] usb 5-1: USB disconnect, device number 61 [ 1004.879095][T22426] XFS (loop0): Quotacheck needed: Please wait. [ 1004.903523][ T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.947536][ T24] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1005.022346][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.068343][ T24] usb 4-1: Product: syz [ 1005.090055][ T24] usb 4-1: Manufacturer: syz [ 1005.102422][ T24] usb 4-1: SerialNumber: syz [ 1005.114149][T22426] XFS (loop0): Quotacheck: Done. [ 1005.174951][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.357696][ T5635] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1005.415881][ T24] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1005.422496][ T24] command write [95] error -22 [ 1005.437005][ T24] usb 4-1: USB disconnect, device number 70 [ 1005.725031][T22477] loop5: detected capacity change from 0 to 4096 [ 1005.768700][T22477] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1005.945019][T22477] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1006.015254][T22477] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1006.076370][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6963'. [ 1006.240358][T22494] loop3: detected capacity change from 0 to 64 [ 1006.341929][T22496] loop0: detected capacity change from 0 to 164 [ 1006.777364][T22504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6971'. [ 1007.259398][T22519] loop0: detected capacity change from 0 to 64 [ 1007.455364][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1007.531396][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6979'. [ 1007.621569][T22529] netlink: zone id is out of range [ 1007.638507][T22529] netlink: zone id is out of range [ 1007.655849][T22529] netlink: zone id is out of range [ 1007.663209][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1007.675152][T22529] netlink: zone id is out of range [ 1007.695246][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1007.717299][T22529] netlink: get zone limit has 8 unknown bytes [ 1007.731167][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.750124][ T24] usb 2-1: Product: syz [ 1007.758124][ T24] usb 2-1: Manufacturer: syz [ 1007.773604][ T24] usb 2-1: SerialNumber: syz [ 1007.786485][ T24] usb 2-1: config 0 descriptor?? [ 1007.834899][ T24] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1008.295573][ T24] gspca_spca508: reg_read err -71 [ 1008.298663][ T24] gspca_spca508: reg_read err -71 [ 1008.299567][ T24] gspca_spca508: reg_read err -71 [ 1008.299963][ T24] gspca_spca508: reg_read err -71 [ 1008.300340][ T24] gspca_spca508: reg write: error -71 [ 1008.300440][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1008.325199][ T24] usb 2-1: USB disconnect, device number 85 [ 1008.437454][T22522] loop5: detected capacity change from 0 to 32768 [ 1008.500286][T22522] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1008.569274][T22522] XFS (loop5): Ending clean mount [ 1008.738404][T22561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.761323][ T5639] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1009.114297][T22565] loop2: detected capacity change from 0 to 1024 [ 1009.539515][T22577] netlink: 'syz.5.6995': attribute type 10 has an invalid length. [ 1009.731939][T22581] loop1: detected capacity change from 0 to 16 [ 1009.756470][T22577] macvlan1: entered promiscuous mode [ 1009.787483][T22577] macvlan1: entered allmulticast mode [ 1009.795328][T22581] erofs (device loop1): mounted with root inode @ nid 36. [ 1009.866912][T22577] veth1_vlan: entered allmulticast mode [ 1009.913923][T22577] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1009.935568][T22581] syz.1.7005: attempt to access beyond end of device [ 1009.935568][T22581] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1010.061777][T22581] erofs (device loop1): bogus lookback distance 0 @ lcn 8 of nid 89 [ 1010.094450][T22581] erofs (device loop1): readahead error at folio 8 @ nid 89 [ 1010.125607][T22581] syz.1.7005: attempt to access beyond end of device [ 1010.125607][T22581] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1010.169334][T22581] syz.1.7005: attempt to access beyond end of device [ 1010.169334][T22581] loop1: rw=524288, sector=32, nr_sectors = 24 limit=16 [ 1010.206370][T22589] netlink: 'syz.3.7008': attribute type 1 has an invalid length. [ 1010.243611][T22589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1010.307647][T22581] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1010.313172][T22571] loop4: detected capacity change from 0 to 32768 [ 1010.329242][T22581] erofs (device loop1): read error -117 @ 1 of nid 89 [ 1010.340053][T22581] syz.1.7005 (22581) used greatest stack depth: 20024 bytes left [ 1010.343582][ T30] audit: type=1800 audit(2000525175.413:79): pid=22581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7005" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1010.417399][T22571] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1010.557751][T22571] XFS (loop4): Ending clean mount [ 1010.922269][ T5638] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1011.170019][T22591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1011.418432][T22627] /dev/nullb0: Can't open blockdev [ 1011.716257][T22636] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.755972][T22636] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1011.796269][T22636] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.810982][T22640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7026'. [ 1011.837680][T22636] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1011.959763][T22647] netlink: 'syz.0.7029': attribute type 1 has an invalid length. [ 1011.994200][T22647] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1012.284373][T22653] loop3: detected capacity change from 0 to 1764 [ 1012.390024][ T30] audit: type=1326 audit(2000525177.332:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22659 comm="syz.0.7034" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x7ffc0000 [ 1012.489582][ T30] audit: type=1326 audit(2000525177.332:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22659 comm="syz.0.7034" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x7ffc0000 [ 1012.516557][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1012.607951][T22664] loop5: detected capacity change from 0 to 256 [ 1012.656233][ T30] audit: type=1326 audit(2000525177.370:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22659 comm="syz.0.7034" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f0b7d19ce59 code=0x7ffc0000 [ 1012.775940][ T30] audit: type=1326 audit(2000525177.370:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22659 comm="syz.0.7034" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x7ffc0000 [ 1012.835104][T22664] FAT-fs (loop5): Directory bread(block 64) failed [ 1012.876228][T22664] FAT-fs (loop5): Directory bread(block 65) failed [ 1012.902187][T22664] FAT-fs (loop5): Directory bread(block 66) failed [ 1012.915778][ T30] audit: type=1326 audit(2000525177.370:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22659 comm="syz.0.7034" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d19ce59 code=0x7ffc0000 [ 1012.968465][T22664] FAT-fs (loop5): Directory bread(block 67) failed [ 1012.989494][T22664] FAT-fs (loop5): Directory bread(block 68) failed [ 1013.012893][T22664] FAT-fs (loop5): Directory bread(block 69) failed [ 1013.050486][T22664] FAT-fs (loop5): Directory bread(block 70) failed [ 1013.059151][T22664] FAT-fs (loop5): Directory bread(block 71) failed [ 1013.081460][T22664] FAT-fs (loop5): Directory bread(block 72) failed [ 1013.120077][T22664] FAT-fs (loop5): Directory bread(block 73) failed [ 1013.397025][T22685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.493420][T22651] loop1: detected capacity change from 0 to 32768 [ 1013.519595][T22651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7032 (22651) [ 1013.574737][T22651] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1013.626099][T22651] BTRFS info (device loop1): using sha256 checksum algorithm [ 1013.627469][T22668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1013.882579][T22651] BTRFS info (device loop1): enabling ssd optimizations [ 1013.963364][T22651] BTRFS info (device loop1): turning on async discard [ 1014.013731][T22651] BTRFS info (device loop1): enabling free space tree [ 1014.288369][ T5646] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1014.978837][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1015.017647][T22733] loop0: detected capacity change from 0 to 1024 [ 1015.754265][T22745] loop2: detected capacity change from 0 to 4096 [ 1015.801762][T22745] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1015.976221][T22745] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1016.007733][T22745] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1016.678218][T22780] loop4: detected capacity change from 0 to 64 [ 1016.917151][T22784] netlink: 'syz.0.7075': attribute type 10 has an invalid length. [ 1016.949432][T22784] macvlan1: entered promiscuous mode [ 1016.949468][T22784] macvlan1: entered allmulticast mode [ 1016.966109][T22784] veth1_vlan: entered allmulticast mode [ 1016.975558][T22784] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1017.054509][T22788] loop2: detected capacity change from 0 to 256 [ 1017.212199][T22788] FAT-fs (loop2): Directory bread(block 64) failed [ 1017.212248][T22788] FAT-fs (loop2): Directory bread(block 65) failed [ 1017.212354][T22788] FAT-fs (loop2): Directory bread(block 66) failed [ 1017.212394][T22788] FAT-fs (loop2): Directory bread(block 67) failed [ 1017.212499][T22788] FAT-fs (loop2): Directory bread(block 68) failed [ 1017.212537][T22788] FAT-fs (loop2): Directory bread(block 69) failed [ 1017.212647][T22788] FAT-fs (loop2): Directory bread(block 70) failed [ 1017.212686][T22788] FAT-fs (loop2): Directory bread(block 71) failed [ 1017.212791][T22788] FAT-fs (loop2): Directory bread(block 72) failed [ 1017.212839][T22788] FAT-fs (loop2): Directory bread(block 73) failed [ 1017.512515][ T30] audit: type=1326 audit(2000525182.135:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.5.7085" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f536dd9ce59 code=0x0 [ 1017.599939][ T5771] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1017.650328][T22800] loop1: detected capacity change from 0 to 4096 [ 1017.690887][T22800] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1017.759768][T22800] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1017.767942][ T5771] usb 1-1: Using ep0 maxpacket: 8 [ 1017.790947][ T5771] usb 1-1: config 162 has an invalid interface number: 218 but max is 1 [ 1017.826250][T22800] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1017.833272][ T5771] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.875210][ T5771] usb 1-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 1017.904786][ T5771] usb 1-1: config 162 has no interface number 0 [ 1017.929474][ T5771] usb 1-1: config 162 interface 218 has no altsetting 0 [ 1017.965630][ T5771] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 1018.006814][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.038257][ T5771] usb 1-1: Product: syz [ 1018.056207][ T5771] usb 1-1: Manufacturer: syz [ 1018.080328][ T5771] usb 1-1: SerialNumber: syz [ 1018.230294][T22816] loop1: detected capacity change from 0 to 64 [ 1018.369739][ T5792] usb 1-1: USB disconnect, device number 78 [ 1018.592411][T22824] loop1: detected capacity change from 0 to 1764 [ 1018.779205][ T5646] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1018.835015][ T5646] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1018.935327][T22832] loop3: detected capacity change from 0 to 256 [ 1019.043197][T22832] FAT-fs (loop3): Directory bread(block 64) failed [ 1019.079640][T22832] FAT-fs (loop3): Directory bread(block 65) failed [ 1019.114751][T22832] FAT-fs (loop3): Directory bread(block 66) failed [ 1019.155156][T22832] FAT-fs (loop3): Directory bread(block 67) failed [ 1019.194632][T22832] FAT-fs (loop3): Directory bread(block 68) failed [ 1019.229575][T22832] FAT-fs (loop3): Directory bread(block 69) failed [ 1019.273036][T22832] FAT-fs (loop3): Directory bread(block 70) failed [ 1019.312953][T22832] FAT-fs (loop3): Directory bread(block 71) failed [ 1019.337180][T22832] FAT-fs (loop3): Directory bread(block 72) failed [ 1019.353889][T22832] FAT-fs (loop3): Directory bread(block 73) failed [ 1019.581976][T22820] loop4: detected capacity change from 0 to 32768 [ 1019.609914][T22820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7095 (22820) [ 1019.667089][T22820] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1019.708505][T22820] BTRFS info (device loop4): using sha256 checksum algorithm [ 1019.838483][T22820] BTRFS info (device loop4): enabling ssd optimizations [ 1019.859194][T22820] BTRFS info (device loop4): turning on async discard [ 1019.875064][T22820] BTRFS info (device loop4): enabling free space tree [ 1020.063156][T22872] xt_l2tp: invalid flags combination: c [ 1020.082679][ T5638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1020.154013][ T5792] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1020.346598][ T5792] usb 6-1: Using ep0 maxpacket: 16 [ 1020.377662][ T5792] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1020.415627][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.438038][ T5792] usb 6-1: Product: syz [ 1020.447174][ T5792] usb 6-1: Manufacturer: syz [ 1020.466574][ T5792] usb 6-1: SerialNumber: syz [ 1020.521581][ T5792] usb 6-1: config 0 descriptor?? [ 1020.542966][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1020.566137][ T5792] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1020.747667][T22843] loop1: detected capacity change from 0 to 32768 [ 1020.796684][ T5792] pwc: Warning: more than 1 configuration available. [ 1020.811245][ T5792] pwc: Failed to set LED on/off time (-71) [ 1020.823972][T22843] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1020.834297][ T5792] pwc: send_video_command error -71 [ 1020.845156][ T5792] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1020.864813][ T5792] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1020.905863][ T5792] usb 6-1: USB disconnect, device number 56 [ 1020.963409][T22897] comedi comedi2: unsupported base address 0x104 [ 1021.002064][T22843] XFS (loop1): Ending clean mount [ 1021.348026][ T5646] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1021.394987][T22907] loop4: detected capacity change from 0 to 16 [ 1021.473417][T22907] erofs (device loop4): mounted with root inode @ nid 36. [ 1021.642161][T22907] syz.4.7127: attempt to access beyond end of device [ 1021.642161][T22907] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1021.669346][T22913] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1021.712666][T22911] loop0: detected capacity change from 0 to 1764 [ 1021.723005][T22913] overlayfs: missing 'lowerdir' [ 1021.799296][T22907] erofs (device loop4): bogus lookback distance 0 @ lcn 8 of nid 89 [ 1021.833393][T22907] erofs (device loop4): readahead error at folio 8 @ nid 89 [ 1021.858964][T22907] syz.4.7127: attempt to access beyond end of device [ 1021.858964][T22907] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1021.923884][T22907] syz.4.7127: attempt to access beyond end of device [ 1021.923884][T22907] loop4: rw=524288, sector=32, nr_sectors = 24 limit=16 [ 1021.973659][T22907] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1022.037028][T22907] erofs (device loop4): read error -117 @ 1 of nid 89 [ 1022.070647][ T30] audit: type=1800 audit(2000525186.405:86): pid=22907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7127" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1022.324655][T22927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7138'. [ 1023.512628][T22924] loop5: detected capacity change from 0 to 32768 [ 1023.606589][T22924] ERROR: (device loop5): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 1023.606589][T22924] [ 1023.650484][T22924] ERROR: (device loop5): remounting filesystem as read-only [ 1023.679351][T22924] ERROR: (device loop5): txAbort: [ 1023.679351][T22924] [ 1023.846161][ T5639] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 1023.846161][ T5639] [ 1023.935436][T22935] loop0: detected capacity change from 0 to 32768 [ 1024.028790][T22935] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1024.124153][T22935] XFS (loop0): Ending clean mount [ 1024.179052][T13368] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1024.355164][T13368] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1024.396733][T13368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.406019][T13368] usb 4-1: Product: syz [ 1024.406442][ T5635] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1024.410251][T13368] usb 4-1: Manufacturer: syz [ 1024.438852][T13368] usb 4-1: SerialNumber: syz [ 1024.470836][T22988] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1024.485709][T13368] usb 4-1: config 0 descriptor?? [ 1024.530775][T13368] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now attached [ 1024.818684][T22955] loop4: detected capacity change from 0 to 32768 [ 1024.833123][ T24] usb 4-1: USB disconnect, device number 71 [ 1024.918733][ T24] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now disconnected [ 1024.922919][T22955] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1025.083660][T22955] XFS (loop4): Ending clean mount [ 1025.131075][T22955] XFS (loop4): Quotacheck needed: Please wait. [ 1025.363089][T22955] XFS (loop4): Quotacheck: Done. [ 1025.472819][T23014] netlink: 'syz.0.7165': attribute type 1 has an invalid length. [ 1025.653032][ T5638] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1025.769031][T23022] netlink: 'syz.2.7179': attribute type 10 has an invalid length. [ 1025.805011][T23022] macvlan1: entered promiscuous mode [ 1025.817960][T23022] macvlan1: entered allmulticast mode [ 1025.868566][T23022] veth1_vlan: entered allmulticast mode [ 1025.928358][T23022] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1026.423470][T23041] netlink: 'syz.0.7186': attribute type 32 has an invalid length. [ 1027.048497][T23066] netlink: 'syz.1.7198': attribute type 10 has an invalid length. [ 1027.098828][T23066] macvlan1: entered promiscuous mode [ 1027.106270][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1027.114345][T23062] loop0: detected capacity change from 0 to 4096 [ 1027.123661][T23066] macvlan1: entered allmulticast mode [ 1027.130830][T23062] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1027.155719][T23066] veth1_vlan: entered allmulticast mode [ 1027.190415][T23066] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 1027.266104][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1027.298758][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1027.323871][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1027.359754][ T24] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1027.364937][ T30] audit: type=1326 audit(2000525191.358:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1027.379166][ T24] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.434830][ T24] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1027.476259][ T24] usb 6-1: config 128 has no interface number 0 [ 1027.488737][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1027.510770][ T24] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1027.527871][ T30] audit: type=1326 audit(2000525191.405:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1027.546487][ T24] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1027.553713][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.587097][ T30] audit: type=1326 audit(2000525191.414:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1027.620207][ T24] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1027.621717][ T30] audit: type=1326 audit(2000525191.414:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1027.656141][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1027.658749][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1027.684317][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.697346][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1027.714360][ T10] usb 5-1: Product: syz [ 1027.728968][ T10] usb 5-1: Manufacturer: syz [ 1027.729743][ T24] usb 6-1: Product: syz [ 1027.752122][ T10] usb 5-1: SerialNumber: syz [ 1027.758435][ T24] usb 6-1: Manufacturer: syz [ 1027.773587][ T24] usb 6-1: SerialNumber: syz [ 1027.773840][ T10] usb 5-1: config 0 descriptor?? [ 1027.793969][ T30] audit: type=1326 audit(2000525191.414:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1027.795711][T23078] netlink: 'syz.2.7204': attribute type 32 has an invalid length. [ 1027.831576][ T5771] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1027.845337][ T10] usb 5-1: selecting invalid altsetting 0 [ 1027.892068][ T30] audit: type=1326 audit(2000525191.414:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1027.978469][ T30] audit: type=1326 audit(2000525191.414:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1028.021232][ T5771] usb 4-1: Using ep0 maxpacket: 32 [ 1028.054280][ T5771] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1028.084715][ T5771] usb 4-1: config 0 has no interface number 0 [ 1028.124774][ T5771] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1028.131321][ T30] audit: type=1326 audit(2000525191.414:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23071 comm="syz.2.7201" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c6cb9ce59 code=0x7ffc0000 [ 1028.167502][ T5771] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1028.228974][ T5771] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1028.284104][ T5771] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1028.322524][ T24] usb 6-1: USB disconnect, device number 57 [ 1028.339066][ T5771] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1028.351730][T19028] usb 5-1: USB disconnect, device number 62 [ 1028.397863][ T5771] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1028.428810][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1028.436442][ T5771] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1028.484405][T23086] loop0: detected capacity change from 0 to 256 [ 1028.531520][ T5771] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1028.557138][ T5771] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.580548][T23088] tc_dump_action: action bad kind [ 1028.600814][ T5771] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1028.611528][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.625994][ T5771] usb 4-1: Product: syz [ 1028.634874][ T5771] usb 4-1: Manufacturer: syz [ 1028.648391][T23075] loop1: detected capacity change from 0 to 32768 [ 1028.656734][ T5771] usb 4-1: SerialNumber: syz [ 1028.694796][T23075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7203 (23075) [ 1028.694899][ T5771] usb 4-1: config 0 descriptor?? [ 1028.743553][T23076] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1028.769029][ T5771] usb 4-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1028.795023][T23075] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1028.798933][T23090] netlink: 'syz.0.7209': attribute type 13 has an invalid length. [ 1028.814350][ T5771] usb 4-1: couldn't find an output bulk endpoint. Bailing out. [ 1028.830247][T23075] BTRFS info (device loop1): using sha256 checksum algorithm [ 1028.881146][T23092] IPv6: sit1: Disabled Multicast RS [ 1028.929781][T23092] sit1: entered allmulticast mode [ 1028.967609][T23075] BTRFS info (device loop1): enabling ssd optimizations [ 1028.999297][T23075] BTRFS info (device loop1): turning on async discard [ 1029.047123][T23075] BTRFS info (device loop1): enabling free space tree [ 1029.159637][T13082] usb 4-1: USB disconnect, device number 72 [ 1029.288217][ T5646] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1030.294220][T23140] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1030.330899][T23140] overlayfs: missing 'lowerdir' [ 1030.350838][T23144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7229'. [ 1030.473333][T23146] bond2 (unregistering): Released all slaves [ 1030.803525][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1031.004075][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1031.023044][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1031.055309][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.085781][ T10] usb 6-1: Product: syz [ 1031.113644][ T10] usb 6-1: Manufacturer: syz [ 1031.132796][ T10] usb 6-1: SerialNumber: syz [ 1031.160905][ T10] usb 6-1: config 0 descriptor?? [ 1031.212871][ T10] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1031.428343][ T10] gspca_sn9c2028: read1 error -71 [ 1031.451696][ T10] gspca_sn9c2028: read1 error -71 [ 1031.478686][ T10] gspca_sn9c2028: read1 error -71 [ 1031.498879][ T10] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1031.500891][T23183] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1031.560109][ T10] usb 6-1: USB disconnect, device number 58 [ 1031.596470][T23183] overlayfs: missing 'lowerdir' [ 1032.362436][T23205] loop2: detected capacity change from 0 to 512 [ 1032.385209][T23205] EXT4-fs: Ignoring removed mblk_io_submit option [ 1032.431095][T23205] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1032.480333][T23205] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.639484][T23211] IPv6: sit1: Disabled Multicast RS [ 1032.656532][T23211] sit1: entered allmulticast mode [ 1032.795564][ T5645] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1033.083248][T23186] loop3: detected capacity change from 0 to 32768 [ 1033.126359][T23186] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1033.163089][T23186] JBD2: Ignoring recovery information on journal [ 1033.323970][T23186] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1033.373414][T23199] loop0: detected capacity change from 0 to 32768 [ 1033.422200][T23199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7256 (23199) [ 1033.489262][T23199] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1033.543698][T23199] BTRFS info (device loop0): using sha256 checksum algorithm [ 1033.658333][T23207] loop5: detected capacity change from 0 to 32768 [ 1033.684566][T23207] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1033.756620][T23199] BTRFS info (device loop0): enabling ssd optimizations [ 1033.833539][T23199] BTRFS info (device loop0): turning on async discard [ 1033.847102][T23250] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1033.887449][T23199] BTRFS info (device loop0): enabling free space tree [ 1033.892176][T23207] XFS (loop5): Ending clean mount [ 1033.926321][T23250] overlayfs: missing 'lowerdir' [ 1033.969931][T23207] XFS (loop5): Quotacheck needed: Please wait. [ 1034.154992][ T5644] ocfs2: Unmounting device (7,3) on (node local) [ 1034.256988][ T5635] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1034.352887][T23207] XFS (loop5): Quotacheck: Done. [ 1034.666288][ T5639] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1034.739475][T23257] loop1: detected capacity change from 0 to 4096 [ 1034.798059][T23257] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1034.875667][T23265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7275'. [ 1034.930140][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7275'. [ 1035.496395][ T30] audit: type=1800 audit(2000525198.970:95): pid=23257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7271" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 1035.788248][T23285] loop5: detected capacity change from 0 to 128 [ 1035.955616][T23281] loop4: detected capacity change from 0 to 4096 [ 1035.994729][T23281] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 1036.161845][T23293] IPv6: sit1: Disabled Multicast RS [ 1036.193264][T23293] sit1: entered allmulticast mode [ 1036.986177][T13082] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1037.178147][T13082] usb 4-1: Using ep0 maxpacket: 8 [ 1037.205281][T13082] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1037.259377][T13082] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1037.311180][T13082] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1037.345363][T13082] usb 4-1: Product: syz [ 1037.358144][T13082] usb 4-1: Manufacturer: syz [ 1037.374069][T13082] usb 4-1: SerialNumber: syz [ 1037.546990][T23337] bond2 (unregistering): Released all slaves [ 1037.625235][T23341] IPv6: sit1: Disabled Multicast RS [ 1037.633081][T23341] sit1: entered allmulticast mode [ 1037.661934][T13082] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1037.676737][T13082] usb 4-1: Handspring Visor / Palm OS: port 225, is for Debugger use [ 1037.688069][T13082] usb 4-1: Handspring Visor / Palm OS: port 212, is for unknown use [ 1037.696358][T13082] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1037.827548][T23343] openvswitch: netlink: Unknown nsh attribute 0 [ 1037.880944][T13082] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1037.881035][T13082] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1037.902078][T13082] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1037.935633][T13082] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1037.946475][T13082] usb 4-1: USB disconnect, device number 73 [ 1038.011051][T13082] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1038.041330][T13082] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1038.076931][T13082] visor 4-1:1.0: device disconnected [ 1038.703531][T23371] bond2 (unregistering): Released all slaves [ 1038.809366][T23380] loop1: detected capacity change from 0 to 64 [ 1038.888670][T23380] hfs: unable to locate alternate MDB [ 1038.908522][T23380] hfs: continuing without an alternate MDB [ 1039.037465][ T30] audit: type=1800 audit(2000525202.275:96): pid=23380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7330" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 1039.075100][T23386] loop0: detected capacity change from 0 to 512 [ 1039.127065][T23386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1039.184894][T23386] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1039.212468][T23386] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1039.238410][ C0] EXT4-fs (loop0): initial error at time 2000525202: ext4_mb_generate_buddy:1314 [ 1039.247578][ C0] EXT4-fs (loop0): last error at time 2000525202: ext4_mb_generate_buddy:1314 [ 1039.274616][ T1035] [ 1039.276950][ T1035] ====================================================== [ 1039.283960][ T1035] WARNING: possible circular locking dependency detected [ 1039.290974][ T1035] syzkaller #0 Not tainted [ 1039.295388][ T1035] ------------------------------------------------------ [ 1039.302405][ T1035] kworker/u8:7/1035 is trying to acquire lock: [ 1039.308554][ T1035] ffff8880530664f0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1039.319327][ T1035] [ 1039.319327][ T1035] but task is already holding lock: [ 1039.326684][ T1035] ffff888053c9e0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1039.336070][ T1035] [ 1039.336070][ T1035] which lock already depends on the new lock. [ 1039.336070][ T1035] [ 1039.346471][ T1035] [ 1039.346471][ T1035] the existing dependency chain (in reverse order) is: [ 1039.355483][ T1035] [ 1039.355483][ T1035] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1039.363439][ T1035] __mutex_lock+0x1a4/0x1b10 [ 1039.368586][ T1035] hfs_find_init+0x273/0x330 [ 1039.373716][ T1035] hfs_ext_read_extent+0x19d/0x9d0 [ 1039.379380][ T1035] hfs_get_block+0x576/0x830 [ 1039.384530][ T1035] block_read_full_folio+0x36c/0x8e0 [ 1039.390369][ T1035] filemap_read_folio+0xfc/0x3b0 [ 1039.395844][ T1035] do_read_cache_folio+0x2d7/0x6b0 [ 1039.401500][ T1035] read_cache_page+0x5b/0x1b0 [ 1039.406724][ T1035] __hfs_bnode_create+0x718/0x9a0 [ 1039.412290][ T1035] hfs_bnode_find+0x2d5/0xd30 [ 1039.417513][ T1035] hfs_brec_find+0x39d/0x620 [ 1039.422645][ T1035] hfs_brec_read+0x26/0x120 [ 1039.427692][ T1035] hfs_cat_find_brec+0xdc/0x2a0 [ 1039.433097][ T1035] hfs_fill_super+0x58d/0x7e0 [ 1039.438312][ T1035] get_tree_bdev_flags+0x38c/0x620 [ 1039.443976][ T1035] vfs_get_tree+0x92/0x320 [ 1039.447223][T23402] : renamed from virt_wifi0 [ 1039.448945][ T1035] path_mount+0x7d0/0x23d0 [ 1039.458615][ T1035] __x64_sys_mount+0x293/0x310 [ 1039.463930][ T1035] do_syscall_64+0x115/0x870 [ 1039.469073][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.475501][ T1035] [ 1039.475501][ T1035] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1039.484738][ T1035] __lock_acquire+0x14b8/0x2630 [ 1039.490132][ T1035] lock_acquire+0x1b1/0x370 [ 1039.491843][T23386] EXT4-fs error (device loop0): ext4_clear_blocks:874: inode #13: comm syz.0.7333: attempt to clear invalid blocks 2 len 1 [ 1039.495170][ T1035] __mutex_lock+0x1a4/0x1b10 [ 1039.513014][ T1035] hfs_extend_file+0xa6/0xcf0 [ 1039.518249][ T1035] hfs_bmap_reserve+0x2ab/0x3a0 [ 1039.523642][ T1035] __hfs_ext_write_extent+0x3c4/0x510 [ 1039.529556][ T1035] hfs_ext_write_extent+0x1b7/0x200 [ 1039.535303][ T1035] hfs_write_inode+0xce/0xab0 [ 1039.540501][ T1035] __writeback_single_inode+0xcd4/0x1350 [ 1039.546677][ T1035] writeback_sb_inodes+0x766/0x1c60 [ 1039.552413][ T1035] wb_writeback+0x1bf/0xb90 [ 1039.557467][ T1035] wb_workfn+0x14f/0xc00 [ 1039.562274][ T1035] process_one_work+0xa0e/0x1980 [ 1039.567748][ T1035] worker_thread+0x5ef/0xe50 [ 1039.572864][ T1035] kthread+0x370/0x450 [ 1039.577457][ T1035] ret_from_fork+0x72b/0xd50 [ 1039.582571][ T1035] ret_from_fork_asm+0x1a/0x30 [ 1039.587870][ T1035] [ 1039.587870][ T1035] other info that might help us debug this: [ 1039.587870][ T1035] [ 1039.598084][ T1035] Possible unsafe locking scenario: [ 1039.598084][ T1035] [ 1039.605520][ T1035] CPU0 CPU1 [ 1039.610874][ T1035] ---- ---- [ 1039.616225][ T1035] lock(&tree->tree_lock/1); [ 1039.620917][ T1035] lock(&HFS_I(tree->inode)->extents_lock); [ 1039.629422][ T1035] lock(&tree->tree_lock/1); [ 1039.636635][ T1035] lock(&HFS_I(tree->inode)->extents_lock); [ 1039.642628][ T1035] [ 1039.642628][ T1035] *** DEADLOCK *** [ 1039.642628][ T1035] [ 1039.650760][ T1035] 3 locks held by kworker/u8:7/1035: [ 1039.656036][ T1035] #0: ffff8880206f8140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1039.666817][ T1035] #1: ffffc90004fa7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1039.678691][ T1035] #2: ffff888053c9e0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1039.688494][ T1035] [ 1039.688494][ T1035] stack backtrace: [ 1039.694373][ T1035] CPU: 0 UID: 0 PID: 1035 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1039.694412][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.694437][ T1035] Workqueue: writeback wb_workfn (flush-7:1) [ 1039.694496][ T1035] Call Trace: [ 1039.694508][ T1035] [ 1039.694520][ T1035] dump_stack_lvl+0x100/0x190 [ 1039.694554][ T1035] print_circular_bug.cold+0x178/0x1c7 [ 1039.694610][ T1035] check_noncircular+0x146/0x160 [ 1039.694643][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.694691][ T1035] __lock_acquire+0x14b8/0x2630 [ 1039.694733][ T1035] ? __pfx_stack_trace_save+0x10/0x10 [ 1039.694790][ T1035] lock_acquire+0x1b1/0x370 [ 1039.694826][ T1035] ? hfs_extend_file+0xa6/0xcf0 [ 1039.694879][ T1035] ? __pfx___might_resched+0x10/0x10 [ 1039.694922][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.694962][ T1035] ? add_lock_to_list+0x99/0x110 [ 1039.695016][ T1035] __mutex_lock+0x1a4/0x1b10 [ 1039.695067][ T1035] ? hfs_extend_file+0xa6/0xcf0 [ 1039.695117][ T1035] ? hfs_extend_file+0xa6/0xcf0 [ 1039.695169][ T1035] ? hfs_write_inode+0xce/0xab0 [ 1039.695198][ T1035] ? __writeback_single_inode+0xcd4/0x1350 [ 1039.695251][ T1035] ? __pfx___mutex_lock+0x10/0x10 [ 1039.695302][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.695347][ T1035] ? lock_acquire+0x1b1/0x370 [ 1039.695387][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to send rpc fd=3 want=600 sent=0 n=-1 (errno 32: Broken pipe) [ 1039.695427][ T1035] ? trace_contention_end+0x122/0x170 [ 1039.695468][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.695513][ T1035] ? hfs_extend_file+0xa6/0xcf0 [ 1039.695562][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.695602][ T1035] hfs_extend_file+0xa6/0xcf0 [ 1039.695654][ T1035] ? __pfx_hfs_extend_file+0x10/0x10 [ 1039.695705][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.695752][ T1035] hfs_bmap_reserve+0x2ab/0x3a0 [ 1039.695804][ T1035] __hfs_ext_write_extent+0x3c4/0x510 [ 1039.695855][ T1035] ? hfs_find_init+0x273/0x330 [ 1039.695892][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.695936][ T1035] hfs_ext_write_extent+0x1b7/0x200 [ 1039.695988][ T1035] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1039.696044][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696084][ T1035] ? __mpage_writepages+0x1a8/0x210 [ 1039.696117][ T1035] ? __pfx___mpage_writepages+0x10/0x10 [ 1039.696151][ T1035] hfs_write_inode+0xce/0xab0 [ 1039.696183][ T1035] ? __pfx_hfs_write_inode+0x10/0x10 [ 1039.696214][ T1035] ? __lock_acquire+0x4a5/0x2630 [ 1039.696262][ T1035] ? __writeback_single_inode+0x454/0x1350 [ 1039.696318][ T1035] ? __writeback_single_inode+0x454/0x1350 [ 1039.696369][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696415][ T1035] __writeback_single_inode+0xcd4/0x1350 [ 1039.696472][ T1035] ? __pfx___writeback_single_inode+0x10/0x10 [ 1039.696524][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696565][ T1035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1039.696609][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696653][ T1035] writeback_sb_inodes+0x766/0x1c60 [ 1039.696716][ T1035] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1039.696768][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696836][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696877][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1039.696922][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.696962][ T1035] ? queue_io+0x287/0x540 [ 1039.697006][ T1035] wb_writeback+0x1bf/0xb90 [ 1039.697062][ T1035] ? __pfx_wb_writeback+0x10/0x10 [ 1039.697118][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697159][ T1035] ? mark_held_locks+0x40/0x70 [ 1039.697194][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 1039.697239][ T1035] wb_workfn+0x14f/0xc00 [ 1039.697291][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697337][ T1035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1039.697388][ T1035] ? __pfx_wb_workfn+0x10/0x10 [ 1039.697445][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697489][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697531][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697571][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1039.697616][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697660][ T1035] process_one_work+0xa0e/0x1980 [ 1039.697707][ T1035] ? __pfx_process_one_work+0x10/0x10 [ 1039.697745][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697792][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.697836][ T1035] worker_thread+0x5ef/0xe50 [ 1039.697879][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 1039.697918][ T1035] ? kthread+0x13a/0x450 [ 1039.697950][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 1039.697987][ T1035] kthread+0x370/0x450 [ 1039.698020][ T1035] ? __pfx_kthread+0x10/0x10 [ 1039.698055][ T1035] ret_from_fork+0x72b/0xd50 [ 1039.698094][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 1039.698132][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1039.698172][ T1035] ? __switch_to+0x800/0x1100 [ 1039.698217][ T1035] ? __switch_to_asm+0x39/0x70 [ 1039.698260][ T1035] ? __pfx_kthread+0x10/0x10 [ 1039.698296][ T1035] ret_from_fork_asm+0x1a/0x30 [ 1039.698354][ T1035] [ 1039.720735][T23386] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1040.185291][ T1035] hfs: new node 0 already hashed? [ 1040.200033][ T1035] ------------[ cut here ]------------ [ 1040.205494][ T1035] 1 [ 1040.205509][ T1035] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:7/1035 [ 1040.211412][T23386] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.7333: invalid indirect mapped block 1819239214 (level 0) [ 1040.217944][ T1035] Modules linked in: [ 1040.235723][ T1035] CPU: 1 UID: 0 PID: 1035 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1040.245274][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1040.255613][ T1035] Workqueue: writeback wb_workfn (flush-7:1) [ 1040.261658][ T1035] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1040.267610][ T1035] Code: a5 b4 63 0a e9 b7 59 d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 b4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 b9 5c d1 01 e8 52 23 e1 00 e8 9d 4d 4d 00 e9 15 5f d1 [ 1040.287288][ T1035] RSP: 0018:ffffc90004fa7020 EFLAGS: 00010282 [ 1040.294215][ T1035] RAX: 000000000000001f RBX: ffff88802a365d00 RCX: 0000000000000000 [ 1040.303626][ T1035] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff520009f4df5 [ 1040.311644][ T1035] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1040.319654][ T1035] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1040.327658][ T1035] R13: ffff888053c9e000 R14: ffff888053c9e0d8 R15: 0000000000000000 [ 1040.335652][ T1035] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 1040.344636][ T1035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1040.351321][ T1035] CR2: 00007ffaf44e1bd0 CR3: 000000004a7ad000 CR4: 0000000000350ef0 [ 1040.359320][ T1035] Call Trace: [ 1040.362627][ T1035] [ 1040.365558][ T1035] ? _raw_spin_unlock+0x28/0x50 [ 1040.370462][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.376123][ T1035] ? hfs_bnode_put+0x208/0x480 [ 1040.380959][ T1035] hfs_bmap_alloc+0x5a7/0x6b0 [ 1040.385675][ T1035] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1040.390912][ T1035] ? __asan_memcpy+0x3c/0x60 [ 1040.395552][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.401217][ T1035] ? hfs_bnode_read.part.0+0x298/0x330 [ 1040.407557][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.413819][ T1035] ? folio_mark_accessed+0xf3/0x1040 [ 1040.419145][ T1035] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1040.424955][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1040.429770][ T1035] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1040.436239][ T1035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1040.441472][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.447156][ T1035] ? _raw_spin_unlock+0x28/0x50 [ 1040.452034][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.455740][T23386] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1040.457722][ T1035] ? hfs_bnode_put+0x208/0x480 [ 1040.463982][T23386] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.7333: invalid indirect mapped block 1819239214 (level 1) [ 1040.466885][ T1035] hfs_brec_insert+0x8ba/0xc20 [ 1040.490307][ T1035] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1040.495622][ T1035] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1040.500709][ T1035] __hfs_ext_write_extent+0x3ef/0x510 [ 1040.506120][ T1035] ? hfs_find_init+0x273/0x330 [ 1040.510945][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.518013][ T1035] hfs_ext_write_extent+0x1b7/0x200 [ 1040.523140][T23386] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1040.523312][ T1035] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1040.523773][T23386] EXT4-fs (loop0): 1 truncate cleaned up [ 1040.532493][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.549451][ T1035] ? __mpage_writepages+0x1a8/0x210 [ 1040.554696][ T1035] ? __pfx___mpage_writepages+0x10/0x10 [ 1040.560293][ T1035] hfs_write_inode+0xce/0xab0 [ 1040.565036][ T1035] ? __pfx_hfs_write_inode+0x10/0x10 [ 1040.570341][ T1035] ? __lock_acquire+0x4a5/0x2630 [ 1040.575353][ T1035] ? __writeback_single_inode+0x454/0x1350 [ 1040.581198][ T1035] ? __writeback_single_inode+0x454/0x1350 [ 1040.587091][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.592756][ T1035] __writeback_single_inode+0xcd4/0x1350 [ 1040.598474][ T1035] ? __pfx___writeback_single_inode+0x10/0x10 [ 1040.604580][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.610308][ T1035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1040.615592][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.622143][ T1035] writeback_sb_inodes+0x766/0x1c60 [ 1040.628176][ T1035] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1040.633856][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.639593][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.644341][T23386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1040.645248][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1040.662367][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.668022][ T1035] ? queue_io+0x287/0x540 [ 1040.672417][ T1035] wb_writeback+0x1bf/0xb90 [ 1040.676964][ T1035] ? __pfx_wb_writeback+0x10/0x10 [ 1040.682058][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.687723][ T1035] ? mark_held_locks+0x40/0x70 [ 1040.692573][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 1040.697798][ T1035] wb_workfn+0x14f/0xc00 [ 1040.702117][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.707791][ T1035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1040.713675][ T1035] ? __pfx_wb_workfn+0x10/0x10 [ 1040.718483][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.724172][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.730646][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.736975][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1040.741791][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.747499][ T1035] process_one_work+0xa0e/0x1980 [ 1040.752473][ T1035] ? __pfx_process_one_work+0x10/0x10 [ 1040.757896][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.763561][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.769248][ T1035] worker_thread+0x5ef/0xe50 [ 1040.773866][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 1040.779078][ T1035] ? kthread+0x13a/0x450 [ 1040.783337][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 1040.788503][ T1035] kthread+0x370/0x450 [ 1040.792594][ T1035] ? __pfx_kthread+0x10/0x10 [ 1040.797210][ T1035] ret_from_fork+0x72b/0xd50 [ 1040.801853][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 1040.806986][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.812698][ T1035] ? __switch_to+0x800/0x1100 [ 1040.817424][ T1035] ? __switch_to_asm+0x39/0x70 [ 1040.822237][ T1035] ? __pfx_kthread+0x10/0x10 [ 1040.826845][ T1035] ret_from_fork_asm+0x1a/0x30 [ 1040.831668][ T1035] [ 1040.834694][ T1035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1040.841978][ T1035] CPU: 1 UID: 0 PID: 1035 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1040.851456][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1040.861521][ T1035] Workqueue: writeback wb_workfn (flush-7:1) [ 1040.867551][ T1035] Call Trace: [ 1040.870825][ T1035] [ 1040.873749][ T1035] dump_stack_lvl+0x100/0x190 [ 1040.878436][ T1035] vpanic+0x552/0x970 [ 1040.882423][ T1035] ? __pfx_vpanic+0x10/0x10 [ 1040.886929][ T1035] ? lock_release+0x245/0x310 [ 1040.891624][ T1035] panic+0xd1/0xe0 [ 1040.895349][ T1035] ? __pfx_panic+0x10/0x10 [ 1040.899777][ T1035] ? check_panic_on_warn+0x1f/0x90 [ 1040.904898][ T1035] check_panic_on_warn.cold+0x19/0x34 [ 1040.910279][ T1035] ? hfs_bnode_create.cold+0x41/0x49 [ 1040.915579][ T1035] __warn.cold+0x191/0x328 [ 1040.920004][ T1035] __report_bug+0x296/0x3d0 [ 1040.924527][ T1035] ? hfs_bnode_create.cold+0x41/0x49 [ 1040.929827][ T1035] ? __pfx___report_bug+0x10/0x10 [ 1040.934870][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.940512][ T1035] ? preempt_schedule_thunk+0x16/0x30 [ 1040.945908][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.951554][ T1035] ? preempt_count_add+0x76/0x150 [ 1040.956596][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.962243][ T1035] ? __wake_up_klogd+0xe2/0x140 [ 1040.967113][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.972759][ T1035] ? vprintk_emit+0x1c9/0x6b0 [ 1040.977463][ T1035] ? __pfx_vprintk_emit+0x10/0x10 [ 1040.982509][ T1035] ? hfs_bnode_create.cold+0x41/0x49 [ 1040.987805][ T1035] report_bug+0xb2/0x220 [ 1040.992069][ T1035] ? hfs_bnode_create.cold+0x41/0x49 [ 1040.997367][ T1035] handle_bug+0x16a/0x2a0 [ 1041.001700][ T1035] exc_invalid_op+0x17/0x50 [ 1041.006208][ T1035] asm_exc_invalid_op+0x1a/0x20 [ 1041.011064][ T1035] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1041.016970][ T1035] Code: a5 b4 63 0a e9 b7 59 d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 b4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 b9 5c d1 01 e8 52 23 e1 00 e8 9d 4d 4d 00 e9 15 5f d1 [ 1041.036583][ T1035] RSP: 0018:ffffc90004fa7020 EFLAGS: 00010282 [ 1041.042653][ T1035] RAX: 000000000000001f RBX: ffff88802a365d00 RCX: 0000000000000000 [ 1041.050623][ T1035] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff520009f4df5 [ 1041.058592][ T1035] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1041.066562][ T1035] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1041.074531][ T1035] R13: ffff888053c9e000 R14: ffff888053c9e0d8 R15: 0000000000000000 [ 1041.082508][ T1035] ? vprintk_emit+0x1c9/0x6b0 [ 1041.087213][ T1035] ? _raw_spin_unlock+0x28/0x50 [ 1041.092077][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.097722][ T1035] ? hfs_bnode_put+0x208/0x480 [ 1041.102505][ T1035] hfs_bmap_alloc+0x5a7/0x6b0 [ 1041.107204][ T1035] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1041.112421][ T1035] ? __asan_memcpy+0x3c/0x60 [ 1041.117023][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.122666][ T1035] ? hfs_bnode_read.part.0+0x298/0x330 [ 1041.128138][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.133782][ T1035] ? folio_mark_accessed+0xf3/0x1040 [ 1041.139092][ T1035] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1041.144865][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1041.149649][ T1035] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1041.155995][ T1035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1041.161216][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.166861][ T1035] ? _raw_spin_unlock+0x28/0x50 [ 1041.171727][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.177372][ T1035] ? hfs_bnode_put+0x208/0x480 [ 1041.182155][ T1035] hfs_brec_insert+0x8ba/0xc20 [ 1041.186944][ T1035] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1041.192246][ T1035] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1041.197296][ T1035] __hfs_ext_write_extent+0x3ef/0x510 [ 1041.202692][ T1035] ? hfs_find_init+0x273/0x330 [ 1041.207463][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.213114][ T1035] hfs_ext_write_extent+0x1b7/0x200 [ 1041.218336][ T1035] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1041.224084][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.229729][ T1035] ? __mpage_writepages+0x1a8/0x210 [ 1041.234935][ T1035] ? __pfx___mpage_writepages+0x10/0x10 [ 1041.240497][ T1035] hfs_write_inode+0xce/0xab0 [ 1041.245184][ T1035] ? __pfx_hfs_write_inode+0x10/0x10 [ 1041.250473][ T1035] ? __lock_acquire+0x4a5/0x2630 [ 1041.255434][ T1035] ? __writeback_single_inode+0x454/0x1350 [ 1041.261272][ T1035] ? __writeback_single_inode+0x454/0x1350 [ 1041.267102][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.272753][ T1035] __writeback_single_inode+0xcd4/0x1350 [ 1041.278419][ T1035] ? __pfx___writeback_single_inode+0x10/0x10 [ 1041.284511][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.290158][ T1035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1041.295377][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.301024][ T1035] writeback_sb_inodes+0x766/0x1c60 [ 1041.306257][ T1035] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1041.311914][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.317586][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.323231][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1041.328013][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.333657][ T1035] ? queue_io+0x287/0x540 [ 1041.338007][ T1035] wb_writeback+0x1bf/0xb90 [ 1041.342540][ T1035] ? __pfx_wb_writeback+0x10/0x10 [ 1041.347595][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.353241][ T1035] ? mark_held_locks+0x40/0x70 [ 1041.358014][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 1041.363229][ T1035] wb_workfn+0x14f/0xc00 [ 1041.367500][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.373146][ T1035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1041.378971][ T1035] ? __pfx_wb_workfn+0x10/0x10 [ 1041.383761][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.389412][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.395060][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.400722][ T1035] ? rcu_is_watching+0x12/0xc0 [ 1041.405507][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.411160][ T1035] process_one_work+0xa0e/0x1980 [ 1041.416119][ T1035] ? __pfx_process_one_work+0x10/0x10 [ 1041.421500][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.427158][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.432814][ T1035] worker_thread+0x5ef/0xe50 [ 1041.437425][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 1041.442546][ T1035] ? kthread+0x13a/0x450 [ 1041.446794][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 1041.451917][ T1035] kthread+0x370/0x450 [ 1041.455998][ T1035] ? __pfx_kthread+0x10/0x10 [ 1041.460596][ T1035] ret_from_fork+0x72b/0xd50 [ 1041.465196][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.470319][ T1035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.475966][ T1035] ? __switch_to+0x800/0x1100 [ 1041.480658][ T1035] ? __switch_to_asm+0x39/0x70 [ 1041.485437][ T1035] ? __pfx_kthread+0x10/0x10 [ 1041.490035][ T1035] ret_from_fork_asm+0x1a/0x30 [ 1041.494829][ T1035] [ 1041.498059][ T1035] Kernel Offset: disabled [ 1041.502371][ T1035] Rebooting in 86400 seconds..