last executing test programs: 2m28.036373252s ago: executing program 1 (id=2301): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)) 2m27.951624159s ago: executing program 1 (id=2305): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000022c0)='./file0\x00', 0x3a0c050, &(0x7f0000000140)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlateno}, {@fat=@showexec}, {@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@rodir}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) 2m27.675259241s ago: executing program 1 (id=2308): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 2m27.43078282s ago: executing program 1 (id=2320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xac14141d}}) 2m27.350562847s ago: executing program 1 (id=2323): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m26.43521782s ago: executing program 1 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000f1ff0000034800070000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2m11.417209078s ago: executing program 32 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000f1ff0000034800070000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) 5.423114844s ago: executing program 4 (id=5563): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) 5.166231804s ago: executing program 4 (id=5564): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@datacow}, {@nodatacow}, {@datasum}, {@compress_force}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000013c0)={0xa, 0x2, {0x4, @struct={0xffffffff}, 0x0, 0xb, 0x40, 0x2da, 0x2, 0x2, 0x28, @usage=0x1000, 0xf, 0x7, [0x2, 0xfffffffffffffff7, 0x5, 0x200, 0x2, 0x5]}, {0x7, @usage=0x6, 0x0, 0x7fffffff, 0x0, 0x4, 0x24, 0x1, 0x14, @struct={0xfffffff7, 0x9}, 0x101, 0xfffffffd, [0x8, 0x5, 0x0, 0x3, 0x428d4148, 0xdc7c174]}, {0x5, @struct={0x4e7, 0x101}, 0x0, 0xfffffffffffffffe, 0x4, 0x1, 0xc, 0xffffffffffffffff, 0x800, @usage=0x400000000002d3, 0x8001, 0x200, [0x5, 0x8, 0x3, 0xff, 0x267defa2]}, {0x9, 0x9, 0x6c5d}}) 3.084781782s ago: executing program 4 (id=5591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) 2.441339383s ago: executing program 4 (id=5599): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.197451023s ago: executing program 5 (id=5606): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000480), &(0x7f0000000000)=0x80) 2.144677108s ago: executing program 3 (id=5608): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000160000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.093077111s ago: executing program 5 (id=5610): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x300) 1.98344802s ago: executing program 3 (id=5612): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x40842, 0x0) sendfile(r0, r0, 0x0, 0x4) 1.975595341s ago: executing program 5 (id=5613): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)={0x2, 0x10, 0xb, 0x0, 0xf, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x6, {0x6, 0x6c, 0xc, 0xfa, 0x0, 0x7, 0x0, @in6=@loopback, @in6=@empty}}, @sadb_address={0x5, 0x17, 0x33, 0x20, 0x0, @in6={0xa, 0x4e20, 0xfdf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}]}, 0x78}}, 0x8044) 1.871686429s ago: executing program 3 (id=5617): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x12, 0x0, 0x1000101, "ffefffffff7f0000201b14700c1e0ac74f000000001600000000000900"}) 1.805554165s ago: executing program 5 (id=5620): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x810084, &(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x1, 0x686, &(0x7f00000001c0)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.719166862s ago: executing program 3 (id=5621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 1.664940516s ago: executing program 5 (id=5623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 1.663882986s ago: executing program 3 (id=5624): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000000c0)={[{@bsdgroups}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x85, 0x0) 1.48798348s ago: executing program 5 (id=5626): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508"], 0x0) 620.44689ms ago: executing program 2 (id=5641): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x40}, 0x20000000) 584.563763ms ago: executing program 2 (id=5642): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 572.751004ms ago: executing program 0 (id=5643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@empty}, @in=@multicast1, {@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0xffffff7f00000000}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x8}}, 0x128}}, 0x300000000000000) 465.011043ms ago: executing program 2 (id=5644): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000040000000000a000000060001001f"], 0x1c}}, 0x0) 448.439194ms ago: executing program 0 (id=5645): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x6, {0xa, 0x0, 0x0, @local}}, 0x24) 390.007139ms ago: executing program 0 (id=5646): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 389.491999ms ago: executing program 2 (id=5647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="00000000d36c66ecc053c543da2e2e", @ANYRES32=r0], 0x48) 337.051213ms ago: executing program 0 (id=5648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b80000001900010025bd7000fcdbdf25ac1414bb000000000000000000000000ffffffff0000000000000000000000004e2400064e2000080200200006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9e0000000000000000000000000000000f020000000000000900000000da2dacfaa312b4fa6e1146ab0b5cb37400000009000000000000000900000000000000859e00000000000001000000000000009f000000000000000900000000000000060000000000000005"], 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 293.156636ms ago: executing program 2 (id=5649): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 194.147474ms ago: executing program 0 (id=5650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x28, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 192.373964ms ago: executing program 3 (id=5651): syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) 99.844162ms ago: executing program 4 (id=5652): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000000200)) 56.297395ms ago: executing program 2 (id=5653): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') pread64(r0, &(0x7f0000002180)=""/215, 0xd7, 0x9) 277.08µs ago: executing program 0 (id=5654): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x5, 0x7fff8040}]}) getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) 0s ago: executing program 4 (id=5655): syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYBLOB="88e2e648f70ad5763a343daf39cab3defb775f0676ec4d60c40257885dc815dc40799b832d5db4fea2b9894d58853c8d2812e959ef6d35f305144c1452069473802c4df7db59920ba4dd1e8c77b467c36b2e4e5eee8dc00f81923ca96c9f6d3abda7166fbcead960aee4f4a132d01f373ebd52d7e5610ff6e55180d1dd609fabc9a27c57623b2c11427b1c9e5845b18375004721e60307c9", @ANYRES32, @ANYBLOB="46403d5b0cd8d68d426a04b4787195ff7424a82544a22122bc0b10c80fba4c6d01267249f7c3a8ab208fa40142d5c00129ab0566d8b7a6e018744040a9323940df302191d4504c3c2904a667afaa6c07685f08ddb695d817be317e3fd0452ce21ae973", @ANYRES16, @ANYRESHEX, @ANYRES16], 0x6, 0x1a7, &(0x7f0000000a80)="$eJzsVc2OEkEQ/npoZtB44MxVInhQZgYlvoGcPPkAEhiROPgzQ6IQEscTN1+DxKfw4Dt4MPGCBw67B/a4yaY33V3M9uyV8LNJfwl8X1VXV1V3OjXv0s+pB+BqM++jCgWGB/jLGDiABtO+V57mC1dzh+w11xyQ/yfxf+J0Onvfi+MoUcLdingHIah07tk54+kL8e3gRZPbHmR7Llo9/j3vQ/zQzxWn0s8xhRAcByxK7wpJ+vK7g3M1y/5s5n0p3gAQQgjpG+gfM2NKAH7rmLL01ThQQ4WVIPIYrqYl0ADQmow/tdLp7Mlo3BtGw+hDGLY7/jPffx623o7iyNf/zCjh0MuQ/BiAHGz3jHVZ9x8N2Psoghnt0zoz98r5u850QPNhca9j7DVz6Ly/8hw0aCGv4jUeoQLgS8YMb11l41BH64KhREbAjT51zYpaeNr/GA8WYGDbbUvwPEewQjk3QtNov8i2LS6I68Rd4iXxithjxW8SVxnOyGpmN4d2HeBrbzJJAsDVKpRhWlUz8+Jk1Uu3eLi6BwsLCwsLCwuLO4LrAAAA//84vlwW") open(&(0x7f0000000800)='./file1\x00', 0x101000, 0x20) kernel console output (not intermixed with test programs): 2: ntfs_evict_inode r=5 failed, -22. [ 224.490160][T11981] REISERFS (device loop0): Using tea hash to sort names [ 224.541594][T12018] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3469'. [ 224.542379][T11981] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 224.551346][T12015] usb usb8: usbfs: process 12015 (syz.5.3480) did not claim interface 0 before use [ 224.608433][ T6661] usb 4-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 224.618587][T12020] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 224.632178][ T6661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 224.638680][T12018] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 224.694573][ T6661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 224.747254][ T6661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 224.807255][ T6661] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.866819][ T6661] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.886502][ T6661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.917471][ T6661] usb 4-1: config 0 descriptor?? [ 225.036455][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3478'. [ 225.109741][T12033] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3478'. [ 225.139253][ T6661] rc_core: IR keymap rc-hauppauge not found [ 225.157487][ T6661] Registered IR keymap rc-empty [ 225.179605][T12041] loop4: detected capacity change from 0 to 256 [ 225.215033][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.278283][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.319623][ T6661] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 225.334076][T12049] netlink: 'syz.2.3486': attribute type 2 has an invalid length. [ 225.353182][ T6661] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 225.401607][T12041] FAT-fs (loop4): Directory bread(block 64) failed [ 225.418354][T12041] FAT-fs (loop4): Directory bread(block 65) failed [ 225.425357][T12041] FAT-fs (loop4): Directory bread(block 66) failed [ 225.465298][T12041] FAT-fs (loop4): Directory bread(block 67) failed [ 225.468326][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.498780][T12041] FAT-fs (loop4): Directory bread(block 68) failed [ 225.537078][T12051] loop5: detected capacity change from 0 to 8192 [ 225.538270][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.550630][T12041] FAT-fs (loop4): Directory bread(block 69) failed [ 225.557368][T12041] FAT-fs (loop4): Directory bread(block 70) failed [ 225.567085][T12056] device bond1 entered promiscuous mode [ 225.578809][T12056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.581026][T12041] FAT-fs (loop4): Directory bread(block 71) failed [ 225.597701][T12041] FAT-fs (loop4): Directory bread(block 72) failed [ 225.606629][T12041] FAT-fs (loop4): Directory bread(block 73) failed [ 225.613591][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.653366][T12051] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 225.668202][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.668694][T12051] REISERFS (device loop5): using ordered data mode [ 225.718215][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.727443][T12051] reiserfs: using flush barriers [ 225.755417][T12051] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.760644][T12064] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3490'. [ 225.772204][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.772660][T12051] REISERFS (device loop5): checking transaction log (loop5) [ 225.806526][T12064] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 225.818165][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.868360][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.918217][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.968231][ T6661] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 225.999343][ T6661] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 226.045753][ T6661] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.054364][T12051] REISERFS (device loop5): Using tea hash to sort names [ 226.078580][T12051] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 226.108265][ T6661] usb 4-1: USB disconnect, device number 19 [ 226.441175][T12091] device ip6gretap1 entered promiscuous mode [ 226.609155][T12101] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3502'. [ 226.696830][T12108] usb usb8: usbfs: process 12108 (syz.4.3514) did not claim interface 0 before use [ 226.702842][T12109] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.854832][T12119] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 226.931422][T12125] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 226.983903][T12113] loop2: detected capacity change from 0 to 8192 [ 227.066798][T12113] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 227.072948][T12138] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.099114][T12113] REISERFS (device loop2): using ordered data mode [ 227.106214][T12113] reiserfs: using flush barriers [ 227.117466][T12113] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.134861][T12113] REISERFS (device loop2): checking transaction log (loop2) [ 227.176500][T12142] SET target dimension over the limit! [ 227.192502][T12144] binder: BC_ACQUIRE_RESULT not supported [ 227.198381][T12144] binder: 12143:12144 ioctl c0306201 200000000580 returned -22 [ 227.232167][T12146] __nla_validate_parse: 2 callbacks suppressed [ 227.232182][T12146] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3533'. [ 227.259867][ T7723] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.381134][T12113] REISERFS (device loop2): Using tea hash to sort names [ 227.401794][T12113] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 227.508324][ T7723] usb 1-1: Using ep0 maxpacket: 16 [ 227.819875][ T7723] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 227.853185][ T7723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.861483][T12177] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3545'. [ 227.892641][ T7723] usb 1-1: Product: syz [ 227.910705][ T7723] usb 1-1: Manufacturer: syz [ 227.922970][ T7723] usb 1-1: SerialNumber: syz [ 227.969743][ T7723] r8152-cfgselector 1-1: config 0 descriptor?? [ 228.102366][ T26] audit: type=1326 audit(1755784195.654:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1c2cebe9 code=0x7ffc0000 [ 228.185751][ T26] audit: type=1326 audit(1755784195.664:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a1c2cebe9 code=0x7ffc0000 [ 228.288144][ T7723] r8152-cfgselector 1-1: Unknown version 0x0000 [ 228.302221][ T26] audit: type=1326 audit(1755784195.664:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1c2cebe9 code=0x7ffc0000 [ 228.385558][ T26] audit: type=1326 audit(1755784195.664:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1c2cebe9 code=0x7ffc0000 [ 228.498391][ T7723] r8152-cfgselector 1-1: Unknown version 0x0000 [ 228.505051][ T7723] r8152-cfgselector 1-1: bad CDC descriptors [ 228.548452][ T7723] r8152-cfgselector 1-1: Unknown version 0x0000 [ 228.573135][ T7723] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 228.693374][T12237] device vlan0 entered promiscuous mode [ 228.770249][ T7719] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 229.159645][ T7719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.170001][ T7723] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 229.190228][ T7719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.400627][ T7719] usb 3-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 229.411519][ T7719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.428566][ T7719] usb 3-1: Product: syz [ 229.441862][ T7719] usb 3-1: Manufacturer: syz [ 229.446563][ T7719] usb 3-1: SerialNumber: syz [ 229.451464][ T7723] usb 6-1: Using ep0 maxpacket: 16 [ 229.537329][ T7719] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 229.545365][ T7719] cdc_mbim 3-1:1.0: bind() failure [ 229.593435][ T7723] usb 6-1: config 64 has an invalid interface number: 176 but max is 0 [ 229.606206][ T7723] usb 6-1: config 64 has no interface number 0 [ 229.618565][ T7723] usb 6-1: config 64 interface 176 has no altsetting 0 [ 229.750249][ T6661] usb 3-1: USB disconnect, device number 22 [ 229.814388][ T7723] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 229.823928][ T7723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.838729][ T7723] usb 6-1: Product: syz [ 229.842909][ T7723] usb 6-1: Manufacturer: syz [ 229.847503][ T7723] usb 6-1: SerialNumber: syz [ 229.972690][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 230.143506][T12306] xt_CT: No such helper "snmp_trap" [ 230.232224][ T7723] usb 6-1: USB disconnect, device number 5 [ 230.715999][T12340] loop3: detected capacity change from 0 to 1024 [ 230.753450][T12338] xt_CT: No such helper "snmp_trap" [ 230.822862][T12349] overlayfs: missing 'lowerdir' [ 230.855784][T12347] loop5: detected capacity change from 0 to 2048 [ 231.035044][T12347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.047415][T12362] overlayfs: unrecognized mount option "\" or missing value [ 231.111560][T12347] smb3: Bad value for 'uid' [ 231.281307][T12372] loop3: detected capacity change from 0 to 1024 [ 231.405117][T12379] netlink: 'syz.5.3634': attribute type 3 has an invalid length. [ 231.447950][T12379] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3634'. [ 231.600804][T12395] loop4: detected capacity change from 0 to 64 [ 231.636882][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3648'. [ 231.807101][T12411] xt_CT: No such helper "pptp" [ 232.068554][T12438] IPv6: sit1: Disabled Multicast RS [ 232.134251][T12445] loop5: detected capacity change from 0 to 16 [ 232.191889][T12445] erofs: (device loop5): mounted with root inode @ nid 36. [ 232.205608][T12449] loop4: detected capacity change from 0 to 1024 [ 232.381564][T12465] loop3: detected capacity change from 0 to 256 [ 232.531058][T12473] loop4: detected capacity change from 0 to 2048 [ 232.595249][T12473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.614810][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3683'. [ 232.620638][T12479] loop0: detected capacity change from 0 to 512 [ 232.632088][T12473] smb3: Bad value for 'uid' [ 232.713432][T12479] EXT4-fs (loop0): inline encryption not supported [ 232.747791][T12489] loop5: detected capacity change from 0 to 64 [ 232.764320][T12479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 232.813233][T12479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.879412][T12479] EXT4-fs (loop0): 1 truncate cleaned up [ 232.885099][T12479] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 233.014306][T12494] loop4: detected capacity change from 0 to 8192 [ 233.088509][ T6658] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 233.114822][T12494] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 233.154146][T12494] REISERFS (device loop4): using ordered data mode [ 233.160980][T12494] reiserfs: using flush barriers [ 233.170772][T12494] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.228636][T12494] REISERFS (device loop4): checking transaction log (loop4) [ 233.265571][T12494] REISERFS (device loop4): Using r5 hash to sort names [ 233.318700][T12494] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 233.407889][T12494] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 233.440110][T12519] loop2: detected capacity change from 0 to 16 [ 233.458341][ T6658] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.487781][T12519] erofs: (device loop2): mounted with root inode @ nid 36. [ 233.506407][ T6658] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.602521][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 233.716079][T12521] loop5: detected capacity change from 0 to 4096 [ 233.718575][ T6658] usb 4-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 233.752689][T12521] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 233.789258][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.835892][T12527] loop2: detected capacity change from 0 to 1024 [ 233.848169][ T6658] usb 4-1: Product: syz [ 233.858642][ T6658] usb 4-1: Manufacturer: syz [ 233.879029][ T6658] usb 4-1: SerialNumber: syz [ 233.959689][ T6658] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 233.972469][T12533] IPv6: sit1: Disabled Multicast RS [ 233.977956][ T6658] cdc_mbim 4-1:1.0: bind() failure [ 234.217472][ T7723] usb 4-1: USB disconnect, device number 20 [ 234.246746][T12542] UBIFS error (pid: 12542): cannot open "./file0", error -22 [ 234.311381][T12545] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3723'. [ 234.385803][T12547] netlink: 'syz.2.3715': attribute type 3 has an invalid length. [ 234.401722][T12549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3716'. [ 234.458199][T12549] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 234.458263][T12547] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3715'. [ 234.656088][T12561] loop5: detected capacity change from 0 to 16 [ 234.684462][T12563] usb usb8: usbfs: process 12563 (syz.0.3724) did not claim interface 0 before use [ 234.689907][T12565] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3725'. [ 234.720644][T12561] erofs: (device loop5): mounted with root inode @ nid 36. [ 234.753506][T12565] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 235.148287][T12591] usb usb8: usbfs: process 12591 (syz.3.3736) did not claim interface 0 before use [ 235.177922][T12594] loop4: detected capacity change from 0 to 16 [ 235.242629][T12594] erofs: (device loop4): mounted with root inode @ nid 36. [ 235.271246][T12594] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.388021][T12594] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -21 in[56, 4040] out[1851] [ 235.447420][T12594] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 235.456337][T12615] dlm: dev_write: no op 0 0 [ 235.474832][T12613] loop2: detected capacity change from 0 to 2048 [ 235.574623][T12609] loop5: detected capacity change from 0 to 8192 [ 235.588502][T12622] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·FGr‚¥òqðςû~QV7¶·"qHá—Éd0ú†øˆ¹ (pid: 12622 comm: syz.0.3753) [ 235.618933][T12626] loop4: detected capacity change from 0 to 256 [ 235.626219][T12613] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.637060][ T26] audit: type=1800 audit(1755784203.184:22): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3753" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B90E0E dev="mqueue" ino=58907 res=0 errno=0 [ 235.695655][T12609] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 235.718411][T12609] REISERFS (device loop5): using ordered data mode [ 235.724480][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3755'. [ 235.734486][T12633] netlink: 'syz.3.3755': attribute type 1 has an invalid length. [ 235.745219][T12609] reiserfs: using flush barriers [ 235.811325][T12609] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.972955][T12609] REISERFS (device loop5): checking transaction log (loop5) [ 236.017176][T12609] REISERFS (device loop5): Using r5 hash to sort names [ 236.038844][T12609] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 236.106585][T12609] REISERFS warning (device loop5): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 236.149769][ T7719] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 236.237028][T12651] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 236.280076][T12651] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3776'. [ 236.448277][ T7719] usb 3-1: Using ep0 maxpacket: 16 [ 236.598800][ T7719] usb 3-1: config 64 has an invalid interface number: 176 but max is 0 [ 236.627462][ T7719] usb 3-1: config 64 has no interface number 0 [ 236.657869][ T7719] usb 3-1: config 64 interface 176 has no altsetting 0 [ 236.858314][ T7719] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 236.879726][ T7719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.892554][T12685] loop5: detected capacity change from 0 to 256 [ 236.918087][ T7719] usb 3-1: Product: syz [ 236.924146][ T7719] usb 3-1: Manufacturer: syz [ 236.933047][ T7719] usb 3-1: SerialNumber: syz [ 236.944580][T12687] loop0: detected capacity change from 0 to 2048 [ 236.992794][T12679] loop3: detected capacity change from 0 to 8192 [ 236.995136][T12685] FAT-fs (loop5): Directory bread(block 64) failed [ 237.058191][T12685] FAT-fs (loop5): Directory bread(block 65) failed [ 237.060245][T12655] loop4: detected capacity change from 0 to 32768 [ 237.078695][T12679] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 237.089833][T12679] REISERFS (device loop3): using ordered data mode [ 237.095906][T12685] FAT-fs (loop5): Directory bread(block 66) failed [ 237.097915][T12679] reiserfs: using flush barriers [ 237.107051][T12687] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.122243][T12679] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.146452][T12685] FAT-fs (loop5): Directory bread(block 67) failed [ 237.154076][T12685] FAT-fs (loop5): Directory bread(block 68) failed [ 237.160710][T12685] FAT-fs (loop5): Directory bread(block 69) failed [ 237.172377][T12685] FAT-fs (loop5): Directory bread(block 70) failed [ 237.176403][T12655] ERROR: (device loop4): diNewExt: no free extents [ 237.176403][T12655] [ 237.210337][T12679] REISERFS (device loop3): checking transaction log (loop3) [ 237.218253][T12685] FAT-fs (loop5): Directory bread(block 71) failed [ 237.219445][T12655] ERROR: (device loop4): remounting filesystem as read-only [ 237.224956][T12685] FAT-fs (loop5): Directory bread(block 72) failed [ 237.240332][T12679] REISERFS (device loop3): Using r5 hash to sort names [ 237.241476][T12685] FAT-fs (loop5): Directory bread(block 73) failed [ 237.268318][T12655] ialloc: diAlloc returned -5! [ 237.278582][T12679] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 237.317970][ T7719] usb 3-1: USB disconnect, device number 23 [ 237.392955][T12679] REISERFS warning (device loop3): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 237.831458][T12710] loop5: detected capacity change from 0 to 64 [ 237.865732][ T150] block nbd2: Attempted send on invalid socket [ 237.872194][ T150] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.890123][T12709] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 2, size 4096) [ 237.963523][ T1092] block nbd2: Attempted send on invalid socket [ 237.969991][ T1092] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.978172][ T4253] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 237.988597][T12709] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 16, size 4096) [ 237.988619][T12709] REISERFS warning (device nbd2): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd2 [ 238.212412][T12721] loop0: detected capacity change from 0 to 8192 [ 238.278177][ T4253] usb 5-1: Using ep0 maxpacket: 32 [ 238.302297][T12721] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 238.381960][T12721] REISERFS (device loop0): using ordered data mode [ 238.389126][T12721] reiserfs: using flush barriers [ 238.395226][T12718] loop3: detected capacity change from 0 to 32768 [ 238.395229][T12721] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.395537][T12721] REISERFS (device loop0): checking transaction log (loop0) [ 238.425532][ T4253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.448824][ T4253] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.466162][T12721] REISERFS (device loop0): Using r5 hash to sort names [ 238.484398][T12721] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 238.496489][T12718] ERROR: (device loop3): diNewExt: no free extents [ 238.496489][T12718] [ 238.511826][T12721] REISERFS warning (device loop0): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 238.521790][T12734] netlink: 'syz.5.3805': attribute type 8 has an invalid length. [ 238.555058][T12718] ERROR: (device loop3): remounting filesystem as read-only [ 238.582187][T12718] ialloc: diAlloc returned -5! [ 238.698247][ T4253] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 238.707321][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.749366][ T4253] usb 5-1: Product: syz [ 238.756596][ T4253] usb 5-1: Manufacturer: syz [ 238.784124][ T4253] usb 5-1: SerialNumber: syz [ 238.799314][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3810'. [ 238.819531][ T4253] usb 5-1: config 0 descriptor?? [ 238.859340][ T4253] qmi_wwan 5-1:0.0: bogus CDC Union: master=101, slave=0 [ 238.874978][ T4253] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 238.955576][ T150] block nbd5: Attempted send on invalid socket [ 238.961937][ T150] blk_update_request: I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.973311][T12750] REISERFS warning (device nbd5): sh-2006 read_super_block: bread failed (dev nbd5, block 2, size 4096) [ 238.995126][ T1092] block nbd5: Attempted send on invalid socket [ 239.001608][ T1092] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.002108][T12755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3816'. [ 239.019021][T12750] REISERFS warning (device nbd5): sh-2006 read_super_block: bread failed (dev nbd5, block 16, size 4096) [ 239.064058][ T4253] usb 5-1: USB disconnect, device number 23 [ 239.086097][T12750] REISERFS warning (device nbd5): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd5 [ 239.334181][T12771] loop3: detected capacity change from 0 to 256 [ 239.388621][T12775] netlink: 'syz.0.3834': attribute type 8 has an invalid length. [ 239.451544][T12771] FAT-fs (loop3): Directory bread(block 64) failed [ 239.468320][T12771] FAT-fs (loop3): Directory bread(block 65) failed [ 239.478174][T12771] FAT-fs (loop3): Directory bread(block 66) failed [ 239.505918][T12771] FAT-fs (loop3): Directory bread(block 67) failed [ 239.521323][T12771] FAT-fs (loop3): Directory bread(block 68) failed [ 239.535302][T12771] FAT-fs (loop3): Directory bread(block 69) failed [ 239.551123][T12771] FAT-fs (loop3): Directory bread(block 70) failed [ 239.557696][T12771] FAT-fs (loop3): Directory bread(block 71) failed [ 239.558626][ T4253] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 239.602645][T12771] FAT-fs (loop3): Directory bread(block 72) failed [ 239.627001][T12771] FAT-fs (loop3): Directory bread(block 73) failed [ 239.757068][ T1092] block nbd0: Attempted send on invalid socket [ 239.763987][ T1092] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.778886][T12790] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 239.817208][ T1092] block nbd0: Attempted send on invalid socket [ 239.824118][ T1092] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 239.835812][T12790] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 239.874107][T12793] x_tables: unsorted underflow at hook 2 [ 239.884223][T12790] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 240.177381][T12805] loop0: detected capacity change from 0 to 64 [ 240.249606][T12805] hfs: filesystem is marked locked, mounting read-only. [ 240.258262][T12807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3840'. [ 240.292623][T12805] hfs: filesystem is marked locked, leaving read-only. [ 240.328407][ T4253] usb 6-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 240.348655][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.360795][ T4253] usb 6-1: Product: syz [ 240.364985][ T4253] usb 6-1: Manufacturer: syz [ 240.370867][ T4253] usb 6-1: SerialNumber: syz [ 240.395115][ T4253] usb 6-1: config 0 descriptor?? [ 240.444502][ T4253] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 240.608701][T12829] cgroup: Unexpected value for 'cpuset_v2_mode' [ 240.648308][ T3545] bcm5974 6-1:0.0: could not read from device [ 240.678548][ T4253] usb 6-1: USB disconnect, device number 6 [ 240.684484][ T3545] bcm5974 6-1:0.0: could not read from device [ 240.891018][T12852] ip6t_rpfilter: unknown options [ 240.975709][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 240.995059][T12859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3866'. [ 241.005652][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 241.017206][T12859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3866'. [ 241.027291][T12859] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3866'. [ 241.221264][T12874] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 241.411335][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3882'. [ 241.443189][ T26] audit: type=1400 audit(1755784208.994:23): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12892 comm="syz.3.3883" [ 241.448195][T12890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3882'. [ 242.310992][ T7723] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 242.409058][T12957] loop0: detected capacity change from 0 to 2048 [ 242.440858][T12963] binder: BC_ATTEMPT_ACQUIRE not supported [ 242.446788][T12963] binder: 12962:12963 ioctl c0306201 200000000340 returned -22 [ 242.494066][T12965] xt_policy: too many policy elements [ 242.518398][T12966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.608135][ T7723] usb 6-1: Using ep0 maxpacket: 16 [ 242.675176][T12972] loop2: detected capacity change from 0 to 16 [ 242.746153][ T7723] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 242.764386][T12972] erofs: (device loop2): mounted with root inode @ nid 36. [ 242.786358][ T7723] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.816722][ T7723] usb 6-1: config 0 has no interface number 0 [ 242.844750][T12976] loop0: detected capacity change from 0 to 128 [ 242.897925][T12935] loop3: detected capacity change from 0 to 32768 [ 243.051766][T12978] loop4: detected capacity change from 0 to 4096 [ 243.069051][ T7723] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 243.089049][ T7723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.096861][T12935] XFS (loop3): Mounting V5 Filesystem [ 243.097763][ T7723] usb 6-1: Product: syz [ 243.120630][ T7723] usb 6-1: Manufacturer: syz [ 243.124429][T12978] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 243.125437][ T7723] usb 6-1: SerialNumber: syz [ 243.131146][ T7723] usb 6-1: config 0 descriptor?? [ 243.210019][ T7723] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 243.228372][ T7723] usb 6-1: No valid video chain found. [ 243.377056][T12935] XFS (loop3): Ending clean mount [ 243.483177][T12978] kAFS: unable to lookup cell 'sy0' [ 243.485717][ T6658] usb 6-1: USB disconnect, device number 7 [ 243.567137][ T4192] XFS (loop3): Unmounting Filesystem [ 243.812349][T13025] netlink: 'syz.2.3945': attribute type 16 has an invalid length. [ 243.957787][T13032] loop2: detected capacity change from 0 to 256 [ 244.070428][T13032] FAT-fs (loop2): Directory bread(block 64) failed [ 244.099424][T13032] FAT-fs (loop2): Directory bread(block 65) failed [ 244.125728][T13032] FAT-fs (loop2): Directory bread(block 66) failed [ 244.154246][T13032] FAT-fs (loop2): Directory bread(block 67) failed [ 244.176870][T13032] FAT-fs (loop2): Directory bread(block 68) failed [ 244.209406][T13032] FAT-fs (loop2): Directory bread(block 69) failed [ 244.223601][T13032] FAT-fs (loop2): Directory bread(block 70) failed [ 244.232821][T13032] FAT-fs (loop2): Directory bread(block 71) failed [ 244.254769][T13032] FAT-fs (loop2): Directory bread(block 72) failed [ 244.274373][T13032] FAT-fs (loop2): Directory bread(block 73) failed [ 244.286560][T13058] __nla_validate_parse: 5 callbacks suppressed [ 244.286575][T13058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3954'. [ 244.315885][T13058] netlink: 'syz.3.3954': attribute type 1 has an invalid length. [ 244.367462][T13065] netlink: 'syz.5.3956': attribute type 3 has an invalid length. [ 244.393974][T13065] netlink: 'syz.5.3956': attribute type 1 has an invalid length. [ 244.461324][ T6661] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 244.517372][T13078] loop3: detected capacity change from 0 to 64 [ 244.562732][T13073] loop5: detected capacity change from 0 to 4096 [ 244.583570][T13073] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 244.659561][T13073] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 244.718300][ T6661] usb 5-1: Using ep0 maxpacket: 32 [ 244.751261][T13083] loop0: detected capacity change from 0 to 4096 [ 244.849288][ T6661] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 244.857317][ T6661] usb 5-1: config 0 has no interface number 0 [ 244.878198][T13100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.939501][T13083] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=129, name_len=6 [ 244.992333][T13083] Remounting filesystem read-only [ 245.073390][ T6661] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 245.082450][T13117] cgroup: Name too long [ 245.097189][ T6661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.106253][ T6661] usb 5-1: Product: syz [ 245.116149][ T6658] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 245.126258][ T6661] usb 5-1: Manufacturer: syz [ 245.137349][ T6661] usb 5-1: SerialNumber: syz [ 245.176161][T13122] loop5: detected capacity change from 0 to 512 [ 245.186174][ T6661] usb 5-1: config 0 descriptor?? [ 245.270604][ T6661] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 245.298499][T13122] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3974: error while reading EA inode 32 err=-116 [ 245.327925][T13122] EXT4-fs (loop5): 1 orphan inode deleted [ 245.334418][T13122] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.546591][T13158] netlink: 'syz.5.3981': attribute type 2 has an invalid length. [ 245.554684][T13158] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3981'. [ 245.598370][ T4244] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.630023][T13164] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present [ 245.648654][ T6658] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 245.660812][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.669901][ T6658] usb 4-1: Product: syz [ 245.674245][ T6658] usb 4-1: Manufacturer: syz [ 245.680043][ T6658] usb 4-1: SerialNumber: syz [ 245.691438][ T6658] usb 4-1: config 0 descriptor?? [ 245.698295][T11670] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 245.698388][ T6661] gspca_topro: reg_w err -71 [ 245.721400][ T26] audit: type=1326 audit(1755784213.274:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.5.3984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc438e70be9 code=0x0 [ 245.735878][ T6658] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 245.750119][ T6661] gspca_topro: Sensor soi763a [ 245.764377][ T6661] usb 5-1: USB disconnect, device number 24 [ 245.848761][ T4244] usb 3-1: Using ep0 maxpacket: 8 [ 245.988387][T11670] usb 1-1: Using ep0 maxpacket: 16 [ 245.993831][ T4244] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.008286][ T4244] usb 3-1: config 179 has no interface number 0 [ 246.014591][ T4244] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 246.035012][ T4244] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 246.056006][ T4244] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 246.057397][T13196] binder: 13195:13196 ioctl c00c6211 200000001940 returned -22 [ 246.068449][ T4244] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 246.093968][ T4244] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.109935][ T4244] usb 3-1: config 179 interface 65 has no altsetting 0 [ 246.117317][ T4244] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 246.135252][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.158556][ T6658] gspca_sunplus: reg_w_riv err -71 [ 246.163754][ T6658] sunplus: probe of 4-1:0.0 failed with error -71 [ 246.164072][T11670] usb 1-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 246.192176][T11670] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.194039][ T6658] usb 4-1: USB disconnect, device number 21 [ 246.210378][ T4244] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 246.328538][T11670] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 246.377920][T11670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.418095][T11670] usb 1-1: SerialNumber: syz [ 246.500782][T11670] usb 1-1: 0:2 : does not exist [ 246.611954][T11670] usb 3-1: USB disconnect, device number 24 [ 246.636364][T11670] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 246.688781][T13260] device netdevsim0 entered promiscuous mode [ 246.694933][T13260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 246.713630][ T7719] usb 1-1: USB disconnect, device number 18 [ 246.827474][T13286] loop5: detected capacity change from 0 to 128 [ 246.884052][T13286] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 247.014688][T10183] sysv_free_block: flc_count > flc_size [ 247.036068][T10183] sysv_free_block: flc_count > flc_size [ 247.049828][T10183] sysv_free_block: flc_count > flc_size [ 247.062141][T10183] sysv_free_block: flc_count > flc_size [ 247.095536][T10183] sysv_free_block: flc_count > flc_size [ 247.113072][T10183] sysv_free_block: flc_count > flc_size [ 247.127944][T10183] sysv_free_block: flc_count > flc_size [ 247.176430][T10183] sysv_free_block: flc_count > flc_size [ 247.183042][T10183] sysv_free_block: flc_count > flc_size [ 247.206078][T10183] sysv_free_block: flc_count > flc_size [ 247.217274][T10183] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 247.290249][T13309] loop2: detected capacity change from 0 to 4096 [ 247.517555][T13309] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 247.597756][T13309] EXT4-fs (loop2): mount failed [ 247.818215][T11670] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 248.069730][T11670] usb 1-1: Using ep0 maxpacket: 8 [ 248.248407][T11670] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.288164][T13400] netlink: 'syz.3.4042': attribute type 10 has an invalid length. [ 248.313005][T13400] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4042'. [ 248.348351][T11670] usb 1-1: config 9 has an invalid interface number: 224 but max is 0 [ 248.360033][T13400] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 248.372627][T11670] usb 1-1: config 9 has an invalid descriptor of length 5, skipping remainder of the config [ 248.387405][T11670] usb 1-1: config 9 has no interface number 0 [ 248.399649][T11670] usb 1-1: config 9 interface 224 altsetting 37 has an invalid endpoint descriptor of length 5, skipping [ 248.429726][T11670] usb 1-1: config 9 interface 224 has no altsetting 0 [ 248.474653][T13417] netlink: 'syz.2.4046': attribute type 1 has an invalid length. [ 248.485718][T13416] netlink: 'syz.4.4048': attribute type 3 has an invalid length. [ 248.541044][T13417] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4046'. [ 248.628748][T11670] usb 1-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=44.13 [ 248.637875][T11670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.686146][T11670] usb 1-1: Product: syz [ 248.697261][T11670] usb 1-1: Manufacturer: syz [ 248.705071][T11670] usb 1-1: SerialNumber: syz [ 248.844656][T13449] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4057'. [ 249.079505][T11670] usb 1-1: bad CDC descriptors [ 249.099151][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4065'. [ 249.103087][T11670] usb 1-1: bad CDC descriptors [ 249.153610][T11670] usb 1-1: USB disconnect, device number 19 [ 249.244414][T13483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4067'. [ 249.273323][T13487] cgroup: noprefix used incorrectly [ 249.412885][T13495] loop2: detected capacity change from 0 to 512 [ 249.419479][T13426] loop4: detected capacity change from 0 to 40427 [ 249.513715][T13426] F2FS-fs (loop4): invalid crc value [ 249.550459][T13426] F2FS-fs (loop4): Found nat_bits in checkpoint [ 249.589282][T13495] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 249.629219][T13495] ext4 filesystem being mounted at /784/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.712862][T13426] F2FS-fs (loop4): Start checkpoint disabled! [ 249.743816][T13495] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.4071: invalid size [ 249.882035][T13426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 249.954371][T13542] loop3: detected capacity change from 0 to 64 [ 250.044981][T13548] loop2: detected capacity change from 0 to 1024 [ 250.059048][T13542] attempt to access beyond end of device [ 250.059048][T13542] loop3: rw=0, want=130, limit=64 [ 250.125777][T13542] Trying to free block not in datazone [ 250.143597][T13542] Trying to free block not in datazone [ 250.146172][T13548] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 250.146172][T13548] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 250.146172][T13548] [ 250.159097][T13542] Trying to free block not in datazone [ 250.210625][T13548] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 250.228640][T13542] Trying to free block not in datazone [ 250.234147][T13542] Trying to free block not in datazone [ 250.277448][T13542] Trying to free block not in datazone [ 250.290615][T13548] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,noacl,max_batch_time=0x00000000000002f1,lazytime,jqfmt=vfsold,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 250.294628][T13542] minix_free_block (loop3:6): bit already cleared [ 250.673701][T13584] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4096'. [ 250.749946][T13555] loop5: detected capacity change from 0 to 32768 [ 250.847913][T13555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.4087 (13555) [ 250.920754][T13555] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 250.936467][T13609] netlink: 'syz.0.4111': attribute type 3 has an invalid length. [ 250.951072][T13555] BTRFS info (device loop5): using free space tree [ 250.964158][T13609] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.4111'. [ 250.985356][T13555] BTRFS info (device loop5): has skinny extents [ 251.126700][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4105'. [ 251.374416][T13555] BTRFS info (device loop5): enabling ssd optimizations [ 251.499069][T13668] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4114'. [ 251.564449][T13668] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 251.586089][T13668] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.588872][T13665] loop3: detected capacity change from 0 to 4096 [ 251.845277][T13665] EXT4-fs warning (device loop3): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 251.952236][T13665] EXT4-fs (loop3): mount failed [ 252.129525][T13665] loop3: detected capacity change from 0 to 1024 [ 252.241540][T13665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.373309][T13725] loop0: detected capacity change from 0 to 1024 [ 252.393388][T13725] EXT4-fs (loop0): Ignoring removed nobh option [ 252.405696][T13725] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.4130: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 252.457495][T13735] loop2: detected capacity change from 0 to 2048 [ 252.515499][T13725] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.4130: couldn't read orphan inode 11 (err -117) [ 252.558087][T13725] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 252.591575][T13744] netlink: 'syz.5.4135': attribute type 5 has an invalid length. [ 252.606585][T13744] device ip6erspan0 entered promiscuous mode [ 252.653493][T13735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.696830][T13735] UDF-fs: unknown compression code (9) [ 253.282700][T13798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4148'. [ 253.341820][T13803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4150'. [ 253.365314][T13803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4150'. [ 253.578790][T13830] loop3: detected capacity change from 0 to 256 [ 253.888217][T13855] loop4: detected capacity change from 0 to 64 [ 254.408439][T13883] loop0: detected capacity change from 0 to 4096 [ 254.487518][T13891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4179'. [ 254.537005][T13883] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 254.560631][T13891] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4179'. [ 254.571577][T13883] EXT4-fs (loop0): mount failed [ 254.910894][T13864] loop5: detected capacity change from 0 to 40427 [ 254.986914][T13864] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 255.000769][T13864] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 255.083598][T13864] F2FS-fs (loop5): Found nat_bits in checkpoint [ 255.159712][ T7718] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 255.302146][T13864] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 255.338145][T13864] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 255.387874][T13864] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 255.416279][T13963] loop0: detected capacity change from 0 to 4096 [ 255.438385][ T7718] usb 4-1: Using ep0 maxpacket: 16 [ 255.451525][T13975] cgroup: Unexpected value for 'cpuset_v2_mode' [ 255.548024][T13963] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 255.611461][ T7718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.641964][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648331][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.718333][ T7718] usb 4-1: config 255 has an invalid interface number: 190 but max is 1 [ 255.727801][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4209'. [ 255.752206][ T7718] usb 4-1: config 255 has an invalid interface number: 137 but max is 1 [ 255.788166][ T7718] usb 4-1: config 255 has no interface number 0 [ 255.791750][T13994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4209'. [ 255.815794][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4209'. [ 255.824225][ T7718] usb 4-1: config 255 has no interface number 1 [ 255.847036][ T7718] usb 4-1: config 255 interface 190 has no altsetting 0 [ 255.865203][T13994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4209'. [ 255.887251][ T7718] usb 4-1: config 255 interface 137 has no altsetting 0 [ 255.928138][T13994] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4209'. [ 256.060302][T14017] netlink: 'syz.4.4214': attribute type 3 has an invalid length. [ 256.118565][ T7718] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 256.129399][T14017] netlink: 'syz.4.4214': attribute type 3 has an invalid length. [ 256.158922][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.167048][ T7718] usb 4-1: Product: syz [ 256.198331][ T7718] usb 4-1: Manufacturer: syz [ 256.205480][T14030] netlink: 'syz.0.4220': attribute type 1 has an invalid length. [ 256.222103][ T7718] usb 4-1: SerialNumber: syz [ 256.258152][T14030] netlink: 'syz.0.4220': attribute type 2 has an invalid length. [ 256.299713][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4220'. [ 256.382889][T14041] loop5: detected capacity change from 0 to 4096 [ 256.434977][T14041] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 256.474503][T14041] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 256.538941][T14041] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 256.582151][T14041] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 256.647642][ T7718] usb 4-1: USB disconnect, device number 22 [ 256.658238][T14041] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 256.740877][T14041] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 256.798924][T14041] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 256.854896][T14041] ntfs: (device loop5): check_mft_mirror(): Failed to read $MFTMirr. [ 256.875757][T14041] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 256.921294][T14041] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.984110][T14041] ntfs: volume version 3.1. [ 257.217202][T14117] loop2: detected capacity change from 0 to 2048 [ 257.308002][T14136] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.428354][ T6658] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.601221][T14168] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 257.855475][T14193] loop5: detected capacity change from 0 to 64 [ 257.904135][T14177] loop4: detected capacity change from 0 to 4096 [ 257.964983][ T6658] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 257.985605][T14177] ntfs3: loop4: ino=3, Correct links count -> 2. [ 258.010358][ T6658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.011008][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4269'. [ 258.030019][ T6658] usb 1-1: Product: syz [ 258.036605][ T6658] usb 1-1: Manufacturer: syz [ 258.042173][ T6658] usb 1-1: SerialNumber: syz [ 258.050790][ T6658] usb 1-1: config 0 descriptor?? [ 258.059090][ T6661] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 258.096319][T14198] loop2: detected capacity change from 0 to 4096 [ 258.098427][ T6658] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 258.120031][T14177] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 258.177203][T14198] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 258.308293][ T3545] bcm5974 1-1:0.0: could not read from device [ 258.308338][ T6661] usb 4-1: Using ep0 maxpacket: 32 [ 258.323593][ T6658] usb 1-1: USB disconnect, device number 20 [ 258.348122][ T3545] bcm5974 1-1:0.0: could not read from device [ 258.360731][T14198] kAFS: unable to lookup cell 'sy0' [ 258.406217][T14222] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4272'. [ 258.435025][T14222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4272'. [ 258.456625][T14222] batman_adv: Cannot find parent device [ 258.458497][ T6661] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.469317][T14222] device gretap1 entered promiscuous mode [ 258.508185][ T6661] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.527080][T14240] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4275'. [ 258.589776][T14240] netlink: 'syz.5.4275': attribute type 1 has an invalid length. [ 258.718492][ T6661] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 258.742322][ T6661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.794509][ T6661] usb 4-1: Product: syz [ 258.806650][ T6661] usb 4-1: Manufacturer: syz [ 258.814472][ T6661] usb 4-1: SerialNumber: syz [ 258.835234][ T6661] usb 4-1: config 0 descriptor?? [ 258.854621][T14259] loop5: detected capacity change from 0 to 4096 [ 258.910727][T14270] cgroup: Name too long [ 258.935912][ T6661] qmi_wwan 4-1:0.0: bogus CDC Union: master=101, slave=0 [ 258.948240][T14259] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 258.969448][ T6661] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 259.137689][T14274] loop4: detected capacity change from 0 to 4096 [ 259.187701][ T7718] usb 4-1: USB disconnect, device number 23 [ 259.311973][T14303] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.358537][T14274] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=129, name_len=6 [ 259.455645][T14274] Remounting filesystem read-only [ 259.657680][T14322] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 259.946604][T14336] loop2: detected capacity change from 0 to 4096 [ 260.043142][T14336] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 260.085467][T14293] loop5: detected capacity change from 0 to 32768 [ 260.102841][T14354] netlink: 'syz.3.4308': attribute type 10 has an invalid length. [ 260.126607][T14336] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 260.358360][T14293] XFS (loop5): Mounting V5 Filesystem [ 260.359473][T14340] loop0: detected capacity change from 0 to 32768 [ 260.418327][T14354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.478252][T14354] team0: Port device bond0 added [ 260.705812][T14293] XFS (loop5): Ending clean mount [ 260.895633][T10183] XFS (loop5): Unmounting Filesystem [ 260.970331][T14405] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4321'. [ 261.158938][T14415] loop2: detected capacity change from 0 to 164 [ 261.205219][T14377] loop0: detected capacity change from 0 to 32768 [ 261.523758][T14377] XFS (loop0): Mounting V5 Filesystem [ 261.652671][T14454] netlink: 'syz.3.4331': attribute type 3 has an invalid length. [ 261.757056][T14377] XFS (loop0): Ending clean mount [ 261.788367][T14454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4331'. [ 261.968294][ T4181] XFS (loop0): Unmounting Filesystem [ 262.072100][T14462] loop5: detected capacity change from 0 to 4096 [ 262.200258][T14462] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 262.280630][T14462] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 262.722000][T14452] loop2: detected capacity change from 0 to 32768 [ 262.737008][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 262.737023][ T26] audit: type=1400 audit(1755784230.284:26): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=14515 comm="syz.5.4352" [ 262.910235][T14452] XFS (loop2): Mounting V5 Filesystem [ 263.071944][T14452] XFS (loop2): Ending clean mount [ 263.190441][ T4187] XFS (loop2): Unmounting Filesystem [ 263.219366][T14563] loop5: detected capacity change from 0 to 1024 [ 263.382318][ T3105] hfsplus: b-tree write err: -5, ino 4 [ 263.599675][T14580] loop4: detected capacity change from 0 to 4096 [ 263.625034][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4373'. [ 263.674855][T14580] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 264.009333][T14612] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 264.155020][T14620] loop0: detected capacity change from 0 to 1024 [ 264.170863][T14623] xt_bpf: check failed: parse error [ 264.213780][T14557] loop3: detected capacity change from 0 to 32768 [ 264.294122][T14557] JFS: metapage_get_blocks failed [ 264.333637][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4384'. [ 264.340201][T14557] ERROR: (device loop3): release_metapage: write_one_page() failed [ 264.340201][T14557] [ 264.366264][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4384'. [ 264.426915][T14557] ERROR: (device loop3): remounting filesystem as read-only [ 264.428783][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4384'. [ 264.573439][ T276] blkno = 8ed2c, nblocks = 1 [ 264.586377][ T276] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 264.586377][ T276] [ 264.666170][T14660] netlink: 'syz.2.4394': attribute type 1 has an invalid length. [ 264.692495][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4394'. [ 264.835328][T14681] netlink: 'syz.2.4400': attribute type 1 has an invalid length. [ 264.869616][T14681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4400'. [ 265.068235][ T6653] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 265.144571][T14710] loop2: detected capacity change from 0 to 8 [ 265.213861][T14710] cramfs: empty filesystem [ 265.240514][ T4320] udevd[4320]: incorrect cramfs checksum on /dev/loop2 [ 265.327789][T14727] netlink: 'syz.4.4412': attribute type 28 has an invalid length. [ 265.412038][T14734] device geneve4 entered promiscuous mode [ 265.445061][ T6653] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.465451][ T6653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.501189][ T6653] usb 1-1: config 0 descriptor?? [ 265.541601][T14747] xt_ecn: cannot match TCP bits for non-tcp packets [ 265.559341][ T6653] cp210x 1-1:0.0: cp210x converter detected [ 265.910360][T14777] netlink: 'syz.4.4427': attribute type 21 has an invalid length. [ 265.948125][T14777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4427'. [ 265.988158][T14777] netlink: 'syz.4.4427': attribute type 5 has an invalid length. [ 265.998256][ T6653] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 266.018272][ T6653] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 266.031058][T14777] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4427'. [ 266.040435][ T6653] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 266.068867][ T6653] usb 1-1: cp210x converter now attached to ttyUSB0 [ 266.108647][ T6653] usb 1-1: USB disconnect, device number 21 [ 266.144951][ T6653] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.160708][T14788] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4428'. [ 266.177309][ T6653] cp210x 1-1:0.0: device disconnected [ 266.407144][T14757] loop5: detected capacity change from 0 to 40427 [ 266.453761][T14775] loop3: detected capacity change from 0 to 32768 [ 266.465478][T14757] F2FS-fs (loop5): build fault injection attr: rate: 4, type: 0x1ffff [ 266.494897][T14757] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 266.512472][T14806] x_tables: unsorted underflow at hook 1 [ 266.524849][T14757] F2FS-fs (loop5): invalid crc value [ 266.535593][T14757] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440 [ 266.557047][T14757] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 266.573897][T14775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4426 (14775) [ 266.632276][T14757] F2FS-fs (loop5): Found nat_bits in checkpoint [ 266.669732][T14775] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 266.691266][T14775] BTRFS info (device loop3): using free space tree [ 266.718382][T14775] BTRFS info (device loop3): has skinny extents [ 266.764418][T14820] cgroup: Invalid name [ 266.777382][T14757] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 266.901860][T14757] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 266.981184][T14757] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440 [ 267.061746][T14757] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.080412][T14775] BTRFS info (device loop3): enabling ssd optimizations [ 267.126436][T14757] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd6/0x560 [ 267.138879][T14867] fuse: Invalid rootmode [ 267.246532][T10183] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x66/0x1b0 [ 267.279980][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4453'. [ 267.458117][ T4320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4320) [ 268.002577][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4451'. [ 268.059019][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4451'. [ 268.093541][T14929] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4451'. [ 268.251598][T14959] loop4: detected capacity change from 0 to 256 [ 268.361082][T14959] FAT-fs (loop4): Directory bread(block 64) failed [ 268.385672][T14959] FAT-fs (loop4): Directory bread(block 65) failed [ 268.406995][T14959] FAT-fs (loop4): Directory bread(block 66) failed [ 268.437923][T14959] FAT-fs (loop4): Directory bread(block 67) failed [ 268.475106][T14959] FAT-fs (loop4): Directory bread(block 68) failed [ 268.496510][T14959] FAT-fs (loop4): Directory bread(block 69) failed [ 268.512905][T14959] FAT-fs (loop4): Directory bread(block 70) failed [ 268.550813][T14959] FAT-fs (loop4): Directory bread(block 71) failed [ 268.576147][T14959] FAT-fs (loop4): Directory bread(block 72) failed [ 268.604505][T14959] FAT-fs (loop4): Directory bread(block 73) failed [ 268.630309][T14997] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 268.718811][T14959] attempt to access beyond end of device [ 268.718811][T14959] loop4: rw=0, want=1196, limit=256 [ 268.752289][T15011] loop0: detected capacity change from 0 to 16 [ 268.789304][T15015] loop3: detected capacity change from 0 to 1024 [ 268.852774][T15015] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 268.852774][T15015] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 268.852774][T15015] [ 268.889838][T15011] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.909226][T15011] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 268.968202][T15015] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 269.033165][T15015] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,noacl,max_batch_time=0x00000000000002f1,lazytime,jqfmt=vfsold,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 269.128700][T15058] kAFS: No cell specified [ 269.471986][T15083] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 269.651692][T15083] CIFS mount error: No usable UNC path provided in device string! [ 269.651692][T15083] [ 269.673652][T15083] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 269.944829][T15116] loop4: detected capacity change from 0 to 1024 [ 270.020347][T15123] loop3: detected capacity change from 0 to 256 [ 270.100730][T15069] loop5: detected capacity change from 0 to 32768 [ 270.401265][T15069] XFS: ikeep mount option is deprecated. [ 270.411482][T15116] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 270.411482][T15116] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 270.411482][T15116] [ 270.468161][T15116] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 270.508540][T15069] XFS (loop5): Mounting V5 Filesystem [ 270.529175][T15116] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,noacl,max_batch_time=0x00000000000002f1,lazytime,jqfmt=vfsold,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 270.624594][T15069] XFS (loop5): Ending clean mount [ 270.641610][T15069] XFS (loop5): Quotacheck needed: Please wait. [ 270.664703][T15149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4527'. [ 270.731278][T15069] XFS (loop5): Quotacheck: Done. [ 270.840727][T10183] XFS (loop5): Unmounting Filesystem [ 271.038176][ T4253] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 271.230855][T15199] loop0: detected capacity change from 0 to 164 [ 271.298385][ T4253] usb 4-1: Using ep0 maxpacket: 16 [ 271.321029][T15199] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 271.403596][T15199] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 271.418372][ T4253] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.459663][ T4253] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.488453][T15199] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 271.658548][ T4253] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.684080][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.731042][ T26] audit: type=1326 audit(1755784239.284:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bc741be9 code=0x7ffc0000 [ 271.737148][ T4253] usb 4-1: Product: syz [ 271.813976][ T4253] usb 4-1: Manufacturer: syz [ 271.828259][ T26] audit: type=1326 audit(1755784239.284:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f51bc741be9 code=0x7ffc0000 [ 271.877046][ T4253] usb 4-1: SerialNumber: syz [ 271.946241][ T26] audit: type=1326 audit(1755784239.284:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15242 comm="syz.0.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bc741be9 code=0x7ffc0000 [ 272.208317][ T4253] usb 4-1: 0:2 : does not exist [ 272.248401][ T4253] usb 4-1: USB disconnect, device number 24 [ 272.410704][T15311] loop4: detected capacity change from 0 to 128 [ 272.504881][T15319] loop5: detected capacity change from 0 to 1024 [ 272.512413][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.557747][T15324] futex_wake_op: syz.2.4575 tries to shift op by 36; fix this program [ 272.579383][T15319] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 272.579383][T15319] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 272.579383][T15319] [ 272.625092][T15319] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 272.698843][T15319] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,noacl,max_batch_time=0x00000000000002f1,lazytime,jqfmt=vfsold,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 273.044249][T15369] loop3: detected capacity change from 0 to 128 [ 273.124396][T15367] loop2: detected capacity change from 0 to 4096 [ 273.155562][T15369] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 273.232675][ T4192] sysv_free_block: flc_count > flc_size [ 273.248181][ T4192] sysv_free_block: flc_count > flc_size [ 273.253892][ T4192] sysv_free_block: flc_count > flc_size [ 273.273658][T15367] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 273.276829][ T4192] sysv_free_block: flc_count > flc_size [ 273.325894][ T4192] sysv_free_block: flc_count > flc_size [ 273.332131][ T4253] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 273.352375][ T4192] sysv_free_block: flc_count > flc_size [ 273.359483][T15402] dlm: non-version read from control device 36 [ 273.376097][T15367] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 273.386138][ T4192] sysv_free_block: flc_count > flc_size [ 273.418378][ T4192] sysv_free_block: flc_count > flc_size [ 273.423979][ T4192] sysv_free_block: flc_count > flc_size [ 273.450161][ T4192] sysv_free_block: flc_count > flc_size [ 273.456179][ T4192] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 273.472740][T15367] ntfs3: loop2: Failed to load $Extend. [ 273.677221][T15421] loop3: detected capacity change from 0 to 128 [ 273.685808][T15422] xt_cluster: node mask cannot exceed total number of nodes [ 273.698330][ T4253] usb 6-1: config 0 has an invalid interface number: 74 but max is 0 [ 273.706476][ T4253] usb 6-1: config 0 has no interface number 0 [ 273.728171][ T4253] usb 6-1: config 0 interface 74 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 273.773351][ T4253] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 273.790134][ T4253] usb 6-1: config 0 interface 74 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.832543][T15421] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 273.876536][T15421] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.932120][T15438] loop4: detected capacity change from 0 to 4096 [ 273.965655][T15438] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 273.966313][T15421] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.4605: checksumming directory block 0 [ 273.978325][ T4253] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 274.000517][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.009637][ T4253] usb 6-1: Product: syz [ 274.013827][ T4253] usb 6-1: Manufacturer: syz [ 274.028231][ T4253] usb 6-1: SerialNumber: syz [ 274.047997][ T4253] usb 6-1: config 0 descriptor?? [ 274.108544][T15438] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 274.126873][T15438] ntfs3: loop4: Failed to load $Extend. [ 274.523514][T15430] loop2: detected capacity change from 0 to 32768 [ 274.559633][T15430] XFS: ikeep mount option is deprecated. [ 274.610857][ T7720] usb 6-1: USB disconnect, device number 8 [ 274.617894][ T7720] f81534a_ctrl 6-1:0.74: failed to set register 0x116: -19 [ 274.664600][ T7720] f81534a_ctrl 6-1:0.74: failed to enable ports: -19 [ 274.764917][T15430] XFS (loop2): Mounting V5 Filesystem [ 275.008890][T15430] XFS (loop2): Ending clean mount [ 275.016237][T15430] XFS (loop2): Quotacheck needed: Please wait. [ 275.051959][T15541] netlink: 'syz.4.4634': attribute type 1 has an invalid length. [ 275.059900][T15541] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4634'. [ 275.114118][T15546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4635'. [ 275.134934][T15546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4635'. [ 275.219240][T15430] XFS (loop2): Quotacheck: Done. [ 275.320435][T15565] loop3: detected capacity change from 0 to 128 [ 275.352074][ T4187] XFS (loop2): Unmounting Filesystem [ 275.465542][T15565] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.490272][T15582] netlink: 'syz.5.4646': attribute type 1 has an invalid length. [ 275.499183][T15582] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4646'. [ 275.518301][T15565] ext4 filesystem being mounted at /891/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.926914][T15626] netlink: 'syz.5.4659': attribute type 1 has an invalid length. [ 276.266799][T15654] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 276.301729][T15660] loop4: detected capacity change from 0 to 256 [ 276.426371][T15660] FAT-fs (loop4): Directory bread(block 64) failed [ 276.457176][T15660] FAT-fs (loop4): Directory bread(block 65) failed [ 276.495894][T15660] FAT-fs (loop4): Directory bread(block 66) failed [ 276.513220][T15660] FAT-fs (loop4): Directory bread(block 67) failed [ 276.523052][T15686] netlink: 'syz.5.4681': attribute type 4 has an invalid length. [ 276.532042][T15660] FAT-fs (loop4): Directory bread(block 68) failed [ 276.541673][T15660] FAT-fs (loop4): Directory bread(block 69) failed [ 276.578337][T15660] FAT-fs (loop4): Directory bread(block 70) failed [ 276.584957][T15660] FAT-fs (loop4): Directory bread(block 71) failed [ 276.627262][T15660] FAT-fs (loop4): Directory bread(block 72) failed [ 276.676310][T15660] FAT-fs (loop4): Directory bread(block 73) failed [ 277.031431][T15718] overlayfs: missing 'lowerdir' [ 277.415308][T15693] loop2: detected capacity change from 0 to 32768 [ 277.456953][T15693] __jfs_setxattr: xattr_size = 82, new_size = 12061 [ 277.851897][T15778] netlink: 'syz.4.4708': attribute type 1 has an invalid length. [ 277.898300][T15778] netlink: 'syz.4.4708': attribute type 2 has an invalid length. [ 278.261876][T15825] netlink: 'syz.5.4724': attribute type 6 has an invalid length. [ 278.294497][T15829] SET target dimension over the limit! [ 278.613600][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4741'. [ 278.630887][T15856] loop5: detected capacity change from 0 to 4096 [ 278.672600][T15856] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 278.718919][ T6658] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 278.978211][ T6658] usb 1-1: Using ep0 maxpacket: 8 [ 279.098440][ T6658] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.121239][ T6658] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.142293][ T6658] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.308604][ T6658] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.317861][ T6658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.369515][ T6658] usb 1-1: Product: syz [ 279.391834][ T6658] usb 1-1: Manufacturer: syz [ 279.413220][ T6658] usb 1-1: SerialNumber: syz [ 279.499389][ T6658] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 279.506863][ T6658] cdc_ncm 1-1:1.0: bind() failure [ 279.708433][ T6658] cdc_mbim 1-1:1.1: CDC Union missing and no IAD found [ 279.715406][ T6658] cdc_mbim 1-1:1.1: bind() failure [ 279.908008][T16014] loop2: detected capacity change from 0 to 4096 [ 279.913711][ T1092] block nbd3: Attempted send on invalid socket [ 279.921510][ T1092] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.947212][T16018] vxfs: unable to read disk superblock at 1 [ 279.954403][ T6658] usb 1-1: USB disconnect, device number 22 [ 279.963379][ T1092] block nbd3: Attempted send on invalid socket [ 279.970143][ T1092] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.981932][T16018] vxfs: unable to read disk superblock at 8 [ 279.984427][T16021] loop4: detected capacity change from 0 to 1764 [ 279.987946][T16018] vxfs: can't find superblock. [ 280.008186][ T7725] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 280.017338][T16014] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 280.111058][T16033] loop3: detected capacity change from 0 to 4096 [ 280.152691][T16014] ntfs3: loop2: failed to convert "c46c" to cp950 [ 280.153268][T16021] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 280.196398][T16033] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 280.221141][T16033] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 280.254642][T16033] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 280.276919][T16033] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 280.341260][T16043] loop4: detected capacity change from 0 to 8 [ 280.418495][ T7725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 280.434749][T16033] ntfs: volume version 3.1. [ 280.436139][T16043] SQUASHFS error: zlib decompression failed, data probably corrupt [ 280.455518][T16043] SQUASHFS error: Failed to read block 0x4e8: -5 [ 280.457471][ T7725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 280.485023][T16043] SQUASHFS error: zlib decompression failed, data probably corrupt [ 280.512893][T16043] SQUASHFS error: Failed to read block 0x4e9: -5 [ 280.518613][ T7725] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 280.571607][ T26] audit: type=1800 audit(1755784248.124:30): pid=16043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4779" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 280.573912][ T7725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.591927][T16033] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 280.633633][T16033] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 280.711868][ T7725] usb 6-1: config 0 descriptor?? [ 281.011115][T16097] ERROR: device name not specified. [ 281.111014][ T6653] usb 6-1: USB disconnect, device number 9 [ 281.122072][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4798'. [ 281.155151][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4799'. [ 281.261684][T16123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4801'. [ 281.264759][T16129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4802'. [ 281.285454][T16123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4801'. [ 281.298414][T16129] netlink: 'syz.3.4802': attribute type 1 has an invalid length. [ 281.424264][T16138] overlayfs: missing 'lowerdir' [ 281.540950][T16150] loop0: detected capacity change from 0 to 2048 [ 281.558430][ T7720] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 281.598107][T16150] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 281.679025][T16160] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.681406][T16150] attempt to access beyond end of device [ 281.681406][T16150] loop0: rw=524288, want=33554432, limit=2048 [ 281.838202][ T7720] usb 5-1: Using ep0 maxpacket: 32 [ 281.875152][T16169] loop2: detected capacity change from 0 to 4096 [ 281.951675][T16150] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 281.968686][ T7720] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 281.982417][ T7720] usb 5-1: config 0 has no interface number 0 [ 282.006626][T16150] Remounting filesystem read-only [ 282.022004][T16150] NILFS (loop0): error -5 truncating bmap (ino=16) [ 282.057797][T16169] ntfs: (device loop2): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 282.101026][T16169] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 282.119397][ T4181] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 282.209667][ T7720] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 282.216541][T16197] overlayfs: workdir and upperdir must be separate subtrees [ 282.238121][ T7720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.246191][ T7720] usb 5-1: Product: syz [ 282.271439][T16169] ntfs: volume version 3.1. [ 282.295572][T16169] ntfs: (device loop2): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 282.308942][ T7720] usb 5-1: Manufacturer: syz [ 282.318434][ T7720] usb 5-1: SerialNumber: syz [ 282.336332][ T7720] usb 5-1: config 0 descriptor?? [ 282.517800][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4832'. [ 282.663950][T16238] comedi comedi0: pcmmio: I/O port conflict (0xee,32) [ 282.718183][ T7725] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 282.828576][ T7720] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 282.838012][ T7720] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 282.883444][T16266] loop2: detected capacity change from 0 to 256 [ 282.898492][ T7720] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 282.953155][T16266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 282.976213][ T7720] usb 5-1: USB disconnect, device number 25 [ 282.998517][ T7725] usb 4-1: Using ep0 maxpacket: 32 [ 283.076184][T16285] netlink: 'syz.5.4846': attribute type 5 has an invalid length. [ 283.122268][T16290] SET target dimension over the limit! [ 283.184962][ T6658] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 283.552057][T16301] loop5: detected capacity change from 0 to 32768 [ 283.568498][ T6658] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 283.572063][T16301] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.4850 (16301) [ 283.583737][ T6658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.648188][ T4253] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 283.656680][ T6658] usb 1-1: config 0 descriptor?? [ 283.668348][T16301] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 283.690163][T16301] BTRFS info (device loop5): force zlib compression, level 3 [ 283.697931][T16301] BTRFS info (device loop5): force clearing of disk cache [ 283.709447][ T6658] cp210x 1-1:0.0: cp210x converter detected [ 283.713694][T16301] BTRFS info (device loop5): setting nodatasum [ 283.735646][T16301] BTRFS info (device loop5): doing ref verification [ 283.757801][T16301] BTRFS info (device loop5): allowing degraded mounts [ 283.766473][T16301] BTRFS info (device loop5): using free space tree [ 283.773490][T16301] BTRFS info (device loop5): has skinny extents [ 283.838270][ T7725] usb 4-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 283.848865][ T7725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.862080][ T7725] usb 4-1: config 0 descriptor?? [ 283.900508][ T7725] cdc_acm 4-1:0.0: Zero length descriptor references [ 283.921864][ T7725] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 283.971972][T16301] BTRFS info (device loop5): enabling ssd optimizations [ 283.985666][T16301] BTRFS info (device loop5): clearing free space tree [ 283.995479][T16301] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.008281][ T4253] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 284.008356][T16301] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 284.016378][ T4253] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.016396][ T4253] usb 3-1: config 0 has no interface number 0 [ 284.016428][ T4253] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 284.055046][ T4253] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 284.069284][ T4253] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.082399][ T4253] usb 3-1: config 0 interface 52 has no altsetting 0 [ 284.119478][T16301] BTRFS info (device loop5): creating free space tree [ 284.130670][ T7725] usb 4-1: USB disconnect, device number 25 [ 284.134915][T16301] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.152197][T16301] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 284.163438][ T6658] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 284.189008][ T6658] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 284.208906][ T6658] usb 1-1: cp210x converter now attached to ttyUSB0 [ 284.248443][ T4253] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 284.275359][ T6658] usb 1-1: USB disconnect, device number 23 [ 284.281373][T16388] loop4: detected capacity change from 0 to 256 [ 284.285759][T16388] exfat: Deprecated parameter 'debug' [ 284.289029][ T4253] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 284.322342][ T6658] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 284.352118][T16388] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa6c8c8ab, utbl_chksum : 0xe619d30d) [ 284.356302][ T4253] usb 3-1: Product: syz [ 284.370063][ T6658] cp210x 1-1:0.0: device disconnected [ 284.375027][T16388] exFAT-fs (loop4): error, invalid access to FAT bad cluster (entry 0x00000005) [ 284.391479][ T4253] usb 3-1: Manufacturer: syz [ 284.395048][T16388] exFAT-fs (loop4): failed to initialize root inode [ 284.402706][ T4253] usb 3-1: SerialNumber: syz [ 284.404622][ T4253] usb 3-1: config 0 descriptor?? [ 284.679221][ T4253] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 284.770641][ T4253] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 285.025055][ T4244] usb 3-1: USB disconnect, device number 25 [ 285.256649][T16462] loop3: detected capacity change from 0 to 256 [ 285.425096][T16473] loop3: detected capacity change from 0 to 256 [ 285.474312][T16473] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.530605][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4893'. [ 285.744149][T16506] loop3: detected capacity change from 0 to 4096 [ 285.842674][T16506] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 286.021557][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 286.021573][ T26] audit: type=1800 audit(1755784253.574:31): pid=16509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.4896" name="/" dev="sockfs" ino=66067 res=0 errno=0 [ 286.073321][T16527] loop5: detected capacity change from 0 to 2364 [ 286.360635][T16553] ptrace attach of "./syz-executor exec"[10183] was attempted by ""[16553] [ 286.467265][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4911'. [ 286.507393][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4911'. [ 286.510408][T16485] loop4: detected capacity change from 0 to 32768 [ 286.631466][T16485] __jfs_setxattr: xattr_size = 82, new_size = 12061 [ 287.095409][T16634] loop0: detected capacity change from 0 to 64 [ 287.119268][T16635] netlink: 'syz.4.4932': attribute type 1 has an invalid length. [ 287.339727][T16651] loop5: detected capacity change from 0 to 2048 [ 287.397457][T16662] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 287.418462][ T4253] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 287.468104][T16667] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.510948][T16669] device gtp0 entered promiscuous mode [ 287.541982][T16594] loop2: detected capacity change from 0 to 32768 [ 287.558019][T16651] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '..' [ 287.630655][T16651] Remounting filesystem read-only [ 287.639996][T16594] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 287.639996][T16594] [ 287.709851][T16594] ERROR: (device loop2): remounting filesystem as read-only [ 287.768015][T16594] jfs_lookup: dtSearch returned -5 [ 287.824348][ T4253] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 287.838405][ T4253] usb 4-1: config 0 has no interface number 0 [ 287.875134][ T4253] usb 4-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 287.985139][T16701] loop0: detected capacity change from 0 to 256 [ 288.088373][ T4253] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 288.125235][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.166755][ T4253] usb 4-1: Product: syz [ 288.188184][ T4253] usb 4-1: Manufacturer: syz [ 288.192826][ T4253] usb 4-1: SerialNumber: syz [ 288.229076][ T4253] usb 4-1: config 0 descriptor?? [ 288.258509][T16638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 288.498548][ T4253] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 288.507079][ T4253] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.90/input/input30 [ 288.645087][T16762] Invalid ELF header magic: != ELF [ 288.733233][ T7725] usb 4-1: USB disconnect, device number 26 [ 288.738222][ C1] powermate: config urb returned -71 [ 288.744652][ C1] powermate: usb_submit_urb(config) failed [ 288.744775][ C1] powermate 4-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 288.897419][T16794] loop0: detected capacity change from 0 to 1024 [ 289.008336][ T5300] hfsplus: b-tree write err: -5, ino 4 [ 289.118961][T16818] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4979'. [ 289.181981][T16818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.236337][T16818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.294235][T16818] bond0 (unregistering): Released all slaves [ 289.521102][T16881] cgroup: No subsys list or none specified [ 289.722650][T16890] loop0: detected capacity change from 0 to 2048 [ 289.822134][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'. [ 289.859721][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4999'. [ 290.049509][T16930] loop2: detected capacity change from 0 to 16 [ 290.078225][ T6653] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 290.135643][T16930] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.219557][T16854] loop5: detected capacity change from 0 to 32768 [ 290.372413][T16961] loop2: detected capacity change from 0 to 256 [ 290.425499][T16854] XFS (loop5): Mounting V5 Filesystem [ 290.436978][T16961] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 290.438609][ T6653] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 290.458210][ T6653] usb 1-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 290.486402][ T6653] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.558247][ T6653] usb 1-1: config 1 has no interface number 0 [ 290.564371][ T6653] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 290.581682][ T6653] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 290.610647][T16854] XFS (loop5): Ending clean mount [ 290.717204][T16854] XFS (loop5): Quotacheck needed: Please wait. [ 290.728669][T16988] mip6: mip6_rthdr_init_state: spi is not 0: 1 [ 290.758612][ T6653] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.783397][T16995] netlink: 'syz.4.5020': attribute type 12 has an invalid length. [ 290.799273][ T6653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.821631][ T6653] usb 1-1: Product: syz [ 290.826347][T16995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5020'. [ 290.841830][ T6653] usb 1-1: Manufacturer: syz [ 290.846646][ T6653] usb 1-1: SerialNumber: syz [ 290.852871][T16854] XFS (loop5): Quotacheck: Done. [ 290.963055][ T6653] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 290.982336][ T6653] cdc_ncm 1-1:1.1: bind() failure [ 291.022905][T10183] XFS (loop5): Unmounting Filesystem [ 291.030975][T17013] usb usb1: usbfs: process 17013 (syz.2.5024) did not claim interface 0 before use [ 291.252865][ T6661] usb 1-1: USB disconnect, device number 24 [ 291.740837][T17088] netlink: 'syz.3.5045': attribute type 21 has an invalid length. [ 291.778000][T17088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5045'. [ 291.988372][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5053'. [ 292.235682][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5065'. [ 292.289761][T17153] tmpfs: Bad value for 'mpol' [ 292.957474][T17217] netlink: 'syz.0.5089': attribute type 30 has an invalid length. [ 293.103323][T17230] loop2: detected capacity change from 0 to 256 [ 293.124108][T17231] device batadv0 entered promiscuous mode [ 293.224805][T17230] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 293.290908][T17241] loop4: detected capacity change from 0 to 256 [ 293.544101][T17245] loop0: detected capacity change from 0 to 4096 [ 293.588721][T17245] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 293.591780][T17263] loop2: detected capacity change from 0 to 256 [ 293.710006][T17263] FAT-fs (loop2): Directory bread(block 64) failed [ 293.748856][T17245] ntfs3: loop0: failed to convert "c46c" to maccenteuro [ 293.756379][T17263] FAT-fs (loop2): Directory bread(block 65) failed [ 293.780911][T17263] FAT-fs (loop2): Directory bread(block 66) failed [ 293.803672][T17263] FAT-fs (loop2): Directory bread(block 67) failed [ 293.849064][T17263] FAT-fs (loop2): Directory bread(block 68) failed [ 293.871003][T17263] FAT-fs (loop2): Directory bread(block 69) failed [ 293.894667][T17263] FAT-fs (loop2): Directory bread(block 70) failed [ 293.919575][T17263] FAT-fs (loop2): Directory bread(block 71) failed [ 293.941899][T17289] loop5: detected capacity change from 0 to 64 [ 293.957089][T17263] FAT-fs (loop2): Directory bread(block 72) failed [ 293.976648][T17263] FAT-fs (loop2): Directory bread(block 73) failed [ 294.017232][T17292] loop4: detected capacity change from 0 to 256 [ 294.092315][T17302] overlayfs: conflicting options: nfs_export=on,index=off [ 294.116630][T17289] Trying to free block not in datazone [ 294.122602][ T4253] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 294.307868][T17312] loop2: detected capacity change from 0 to 8 [ 294.314525][T17306] loop0: detected capacity change from 0 to 1764 [ 294.410019][ T4253] usb 4-1: Using ep0 maxpacket: 32 [ 294.506123][T17306] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 294.528485][ T4253] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.582873][T17330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5121'. [ 294.624729][T17328] loop2: detected capacity change from 0 to 1024 [ 294.628407][T17330] openvswitch: netlink: EtherType 0 is less than min 600 [ 294.731362][ T4253] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 294.752717][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.788302][ T4253] usb 4-1: Product: syz [ 294.792578][ T4253] usb 4-1: Manufacturer: syz [ 294.837834][ T4253] usb 4-1: SerialNumber: syz [ 294.879740][ T4253] usb 4-1: config 0 descriptor?? [ 294.922401][ T4253] usb 4-1: bad CDC descriptors [ 294.971071][ T4253] usb 4-1: unsupported MDLM descriptors [ 294.987703][T17367] kAFS: unparsable volume name [ 295.132931][ T4253] usb 4-1: USB disconnect, device number 27 [ 295.204525][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 295.261818][T17377] loop5: detected capacity change from 0 to 4096 [ 295.339875][T17377] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 295.409460][T17377] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 295.435627][T17377] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 295.452901][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 295.478730][T17377] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 295.535192][T17377] ntfs: volume version 3.1. [ 295.557424][T17377] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 295.592583][T17377] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 295.628993][T17377] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 295.668606][T17377] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 295.685181][T17377] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 295.760763][T17377] ntfs: (device loop5): load_and_init_quota(): Failed to load $Quota/$Q index. [ 295.991528][T17454] netlink: 'syz.5.5156': attribute type 22 has an invalid length. [ 296.037584][T17454] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 296.264554][T17486] nfs4: Bad value for 'source' [ 296.431783][T17501] loop3: detected capacity change from 0 to 8 [ 296.477616][T17501] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.498107][ T4253] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 296.542096][T17501] SQUASHFS error: Failed to read block 0x91: -5 [ 296.572333][T17501] SQUASHFS error: Unable to read metadata cache entry [8f] [ 296.609761][T17501] SQUASHFS error: Unable to read inode 0x11f [ 296.748265][ T4253] usb 5-1: Using ep0 maxpacket: 16 [ 296.862727][T17542] xt_connbytes: Forcing CT accounting to be enabled [ 296.869805][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 7 [ 296.894023][T17542] set match dimension is over the limit! [ 296.900210][ T4253] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 296.945408][T17551] loop2: detected capacity change from 0 to 164 [ 296.991072][T17551] rock: directory entry would overflow storage [ 297.008223][T17551] rock: sig=0x66, size=4, remaining=3 [ 297.041459][T17551] rock: directory entry would overflow storage [ 297.068203][T17551] rock: sig=0x66, size=4, remaining=3 [ 297.108482][ T4253] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 297.166075][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.205758][ T4253] usb 5-1: Product: syz [ 297.210147][T17575] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 297.231516][T17559] loop3: detected capacity change from 0 to 4096 [ 297.249336][ T4253] usb 5-1: Manufacturer: syz [ 297.253985][ T4253] usb 5-1: SerialNumber: syz [ 297.278806][ T4253] usb 5-1: config 0 descriptor?? [ 297.292750][T17559] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 297.368641][ T4253] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 297.453782][T17598] usb usb8: usbfs: process 17598 (syz.2.5203) did not claim interface 0 before use [ 297.495689][T17559] ntfs3: loop3: failed to convert "c46c" to cp437 [ 297.502760][T17593] loop5: detected capacity change from 0 to 2048 [ 297.583799][T17593] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,data_err=ignore,max_batch_time=0x0000000000000009,sysvgroups,,errors=continue. Quota mode: none. [ 297.586743][ T4244] usb 5-1: USB disconnect, device number 26 [ 297.607403][ T3105] usb 5-1: Failed to submit usb control message: -71 [ 297.620821][T17593] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.644987][ T3105] usb 5-1: unable to send the bmi data to the device: -71 [ 297.700701][ T3105] usb 5-1: unable to get target info from device [ 297.707387][ T3105] usb 5-1: could not get target info (-71) [ 297.778755][ T3105] usb 5-1: could not probe fw (-71) [ 298.037554][T17653] xt_l2tp: v2 doesn't support IP mode [ 298.224946][T17656] loop3: detected capacity change from 0 to 4096 [ 298.246326][T17673] loop0: detected capacity change from 0 to 256 [ 298.304031][T17656] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 298.407292][T17673] FAT-fs (loop0): Directory bread(block 64) failed [ 298.448404][T17673] FAT-fs (loop0): Directory bread(block 65) failed [ 298.488329][T17673] FAT-fs (loop0): Directory bread(block 66) failed [ 298.505972][T17673] FAT-fs (loop0): Directory bread(block 67) failed [ 298.549077][T17673] FAT-fs (loop0): Directory bread(block 68) failed [ 298.555826][T17673] FAT-fs (loop0): Directory bread(block 69) failed [ 298.618748][T17673] FAT-fs (loop0): Directory bread(block 70) failed [ 298.625360][T17673] FAT-fs (loop0): Directory bread(block 71) failed [ 298.655810][T17673] FAT-fs (loop0): Directory bread(block 72) failed [ 298.695749][T17673] FAT-fs (loop0): Directory bread(block 73) failed [ 298.746615][T17713] loop5: detected capacity change from 0 to 16 [ 298.750401][T17711] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5235'. [ 298.822928][T17713] erofs: (device loop5): mounted with root inode @ nid 36. [ 298.864304][T17713] attempt to access beyond end of device [ 298.864304][T17713] loop5: rw=524288, want=32, limit=16 [ 298.893077][T17722] netlink: 'syz.4.5239': attribute type 1 has an invalid length. [ 298.916229][T17722] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5239'. [ 298.936560][T17713] attempt to access beyond end of device [ 298.936560][T17713] loop5: rw=0, want=24, limit=16 [ 299.057852][T17741] sctp: [Deprecated]: syz.4.5243 (pid 17741) Use of int in max_burst socket option. [ 299.057852][T17741] Use struct sctp_assoc_value instead [ 299.528420][ T4253] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 299.590357][T17799] loop0: detected capacity change from 0 to 128 [ 299.768145][ T4253] usb 3-1: Using ep0 maxpacket: 8 [ 299.771756][T17818] loop5: detected capacity change from 0 to 256 [ 299.810127][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5269'. [ 299.841345][T17818] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 299.888480][ T4253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.890945][T17833] netlink: 'syz.0.5274': attribute type 30 has an invalid length. [ 299.907386][ T4253] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 299.992138][T17842] tmpfs: Bad value for 'mpol' [ 300.118470][ T4253] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 300.132911][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.168482][ T4253] usb 3-1: Product: syz [ 300.178788][ T4253] usb 3-1: Manufacturer: syz [ 300.184700][ T4253] usb 3-1: SerialNumber: syz [ 300.215220][ T4253] usb 3-1: config 0 descriptor?? [ 300.707694][ T4253] usb 3-1: USB disconnect, device number 26 [ 300.753505][T17906] loop5: detected capacity change from 0 to 1764 [ 301.054041][T17955] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 301.098347][ T6661] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 301.144176][T17964] netlink: 'syz.5.5313': attribute type 3 has an invalid length. [ 301.178372][T17964] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5313'. [ 301.296199][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5319'. [ 301.326968][T17983] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5321'. [ 301.348346][ T6661] usb 1-1: Using ep0 maxpacket: 32 [ 301.468637][ T6661] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 301.504403][ T6661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.532925][ T6661] usb 1-1: config 0 descriptor?? [ 301.589450][ T6661] rndis_host: probe of 1-1:0.0 failed with error -22 [ 301.624901][T18016] xt_bpf: check failed: parse error [ 301.836102][ T6661] usb 1-1: USB disconnect, device number 25 [ 302.185630][T18095] loop3: detected capacity change from 0 to 1024 [ 302.563276][T18125] netlink: 448 bytes leftover after parsing attributes in process `syz.5.5354'. [ 302.693334][T18139] loop0: detected capacity change from 0 to 64 [ 302.769970][ T6661] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 302.792574][T18139] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 303.018299][ T6661] usb 3-1: Using ep0 maxpacket: 32 [ 303.048330][ T7719] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 303.076810][T18179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.118992][T18184] loop4: detected capacity change from 0 to 256 [ 303.127651][T18185] loop3: detected capacity change from 0 to 136 [ 303.213094][T18185] Attempt to read inode for relocated directory [ 303.282461][T18197] netlink: 'syz.4.5375': attribute type 1 has an invalid length. [ 303.298328][ T6661] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 303.326168][ T7719] usb 6-1: Using ep0 maxpacket: 8 [ 303.331564][ T6661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.350490][T18197] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5375'. [ 303.351721][ T6661] usb 3-1: Product: syz [ 303.369375][ T6661] usb 3-1: Manufacturer: syz [ 303.374087][ T6661] usb 3-1: SerialNumber: syz [ 303.430072][ T6661] empeg 3-1:1.0: empeg converter detected [ 303.548472][ T4253] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 303.649732][ T6661] usb 3-1: empeg converter now attached to ttyUSB0 [ 303.671225][ T7719] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 303.689166][ T7719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.710733][ T7719] usb 6-1: Product: syz [ 303.715291][ T7719] usb 6-1: Manufacturer: syz [ 303.728594][ T7719] usb 6-1: SerialNumber: syz [ 303.736349][ T7719] usb 6-1: config 0 descriptor?? [ 303.764269][T18246] lo speed is unknown, defaulting to 1000 [ 303.775973][T18246] lo speed is unknown, defaulting to 1000 [ 303.793404][T18246] lo speed is unknown, defaulting to 1000 [ 303.798357][ T4253] usb 1-1: Using ep0 maxpacket: 16 [ 303.857809][T18254] netlink: 'syz.3.5390': attribute type 1 has an invalid length. [ 303.902125][ T1324] usb 3-1: USB disconnect, device number 27 [ 303.914697][T18258] loop3: detected capacity change from 0 to 47 [ 303.935964][ T1324] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 303.954995][ T1324] empeg 3-1:1.0: device disconnected [ 303.958640][ T4253] usb 1-1: unable to get BOS descriptor or descriptor too short [ 304.021192][ T4244] lo speed is unknown, defaulting to 1000 [ 304.021162][T18246] infiniband syz2: set down [ 304.034677][T18246] infiniband syz2: added lo [ 304.080392][ T4253] usb 1-1: config 1 has an invalid interface number: 160 but max is 0 [ 304.096321][ T4253] usb 1-1: config 1 has no interface number 0 [ 304.106591][ T4253] usb 1-1: config 1 interface 160 has no altsetting 0 [ 304.129123][T18246] RDS/IB: syz2: added [ 304.154225][T18246] smc: adding ib device syz2 with port count 1 [ 304.168202][ T7719] usb 6-1: USB disconnect, device number 10 [ 304.199978][T18246] smc: ib device syz2 port 1 has pnetid [ 304.207405][ T6658] lo speed is unknown, defaulting to 1000 [ 304.216467][T18246] lo speed is unknown, defaulting to 1000 [ 304.269697][ T4253] usb 1-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 304.304634][ T4253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.330910][ T4253] usb 1-1: Product: syz [ 304.335412][ T4253] usb 1-1: Manufacturer: syz [ 304.340363][ T4253] usb 1-1: SerialNumber: syz [ 304.382104][T18246] lo speed is unknown, defaulting to 1000 [ 304.450287][T18246] lo speed is unknown, defaulting to 1000 [ 304.708379][ T4253] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 304.716011][ T4253] visor 1-1:1.160: Handspring Visor / Palm OS converter detected [ 304.755377][ T4253] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 304.807802][ T4253] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 304.856536][ T4253] usb 1-1: USB disconnect, device number 26 [ 304.903902][ T4253] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 304.959142][ T4253] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 304.959645][T18246] lo speed is unknown, defaulting to 1000 [ 305.019751][ T4253] visor 1-1:1.160: device disconnected [ 305.184693][T18376] loop5: detected capacity change from 0 to 256 [ 305.425154][T18246] lo speed is unknown, defaulting to 1000 [ 305.625610][T18414] loop0: detected capacity change from 0 to 256 [ 305.717287][T18414] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 305.769425][T18414] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 305.920895][T18246] lo speed is unknown, defaulting to 1000 [ 306.042551][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5437'. [ 306.206986][T18463] syz.0.5442 uses obsolete (PF_INET,SOCK_PACKET) [ 306.478348][ T4253] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 306.557434][T18496] No such timeout policy "syz0" [ 306.654650][T18507] printk: syz.4.5456 (18507): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 306.655372][ T1092] block nbd0: Attempted send on invalid socket [ 306.673285][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.825152][T18513] loop3: detected capacity change from 0 to 2048 [ 306.847484][ T4253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 306.870464][ T4253] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 306.907808][ T4253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 306.917818][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 306.917832][ T26] audit: type=1400 audit(1755784274.454:33): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18526 comm="syz.4.5464" [ 306.962647][ T4253] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 306.986120][T18513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.037784][T18513] Invalid option length (0) for dns_resolver key [ 307.161125][T18544] netlink: 'syz.4.5469': attribute type 1 has an invalid length. [ 307.168582][ T4253] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 307.196657][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.225390][ T4253] usb 6-1: Product: syz [ 307.255762][ T4253] usb 6-1: Manufacturer: syz [ 307.276012][ T4253] usb 6-1: SerialNumber: syz [ 307.302560][ T4253] usb 6-1: config 0 descriptor?? [ 307.355447][ T4253] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 307.621453][ T4253] ums-isd200: probe of 6-1:0.0 failed with error -22 [ 307.633082][T18595] loop4: detected capacity change from 0 to 512 [ 307.707610][T18598] loop0: detected capacity change from 0 to 4096 [ 307.714008][T18604] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5487'. [ 307.723643][T18604] 0ªX¹¦À: renamed from caif0 [ 307.732079][T18595] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.754824][T18604] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 307.783297][T18598] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 307.798663][ T4253] usb 6-1: USB disconnect, device number 11 [ 307.848379][ T7719] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 307.910496][T18598] ntfs3: loop0: failed to convert "c46c" to macgaelic [ 307.994181][T18595] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 308.018833][T18595] FAT-fs (loop4): Filesystem has been set read-only [ 308.108293][ T7719] usb 4-1: Using ep0 maxpacket: 8 [ 308.260917][ T7719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.277039][T18637] netlink: 'syz.2.5494': attribute type 21 has an invalid length. [ 308.280274][ T7719] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 308.308272][T18637] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5494'. [ 308.319659][ T7719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.366127][ T7719] usb 4-1: config 0 descriptor?? [ 308.506016][T18653] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 308.665626][T18667] loop5: detected capacity change from 0 to 8 [ 308.667333][ T4253] usb 4-1: USB disconnect, device number 28 [ 308.702049][ T4320] udevd[4320]: incorrect cramfs checksum on /dev/loop5 [ 308.709906][T18667] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 308.785070][T18667] cramfs: bad data blocksize 4294950552 [ 308.803627][ T4320] udevd[4320]: incorrect cramfs checksum on /dev/loop5 [ 308.808350][T18667] cramfs: bad data blocksize 4294950552 [ 308.824377][ T26] audit: type=1800 audit(1755784276.374:34): pid=18667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5502" name="file2" dev="loop5" ino=16732 res=0 errno=0 [ 308.918244][ T7719] Bluetooth: hci5: command 0x0406 tx timeout [ 309.063166][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5510'. [ 309.245510][T18715] netlink: 'syz.2.5517': attribute type 11 has an invalid length. [ 309.291817][T18720] loop3: detected capacity change from 0 to 8 [ 309.360717][T18731] netlink: 612 bytes leftover after parsing attributes in process `syz.2.5522'. [ 309.435816][T18720] SQUASHFS error: lzo decompression failed, data probably corrupt [ 309.491670][T18720] SQUASHFS error: Failed to read block 0x1dd: -5 [ 309.518894][T18720] SQUASHFS error: Unable to read metadata cache entry [1db] [ 309.537256][T18720] SQUASHFS error: Unable to read inode 0xa7 [ 309.543513][T18747] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 309.802332][T18751] loop2: detected capacity change from 0 to 4096 [ 309.835730][T18771] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5534'. [ 309.837097][T18769] loop4: detected capacity change from 0 to 128 [ 309.854123][T18774] netlink: 'syz.0.5535': attribute type 2 has an invalid length. [ 309.926909][T18780] ipt_ECN: cannot use operation on non-tcp rule [ 309.935679][T18769] sysv_free_block: flc_count > flc_size [ 309.952757][T18751] ntfs: volume version 3.1. [ 309.970644][T18769] sysv_free_block: flc_count > flc_size [ 309.976430][T18769] sysv_free_block: flc_count > flc_size [ 310.049505][T18769] sysv_free_block: flc_count > flc_size [ 310.098498][T18769] sysv_free_block: flc_count > flc_size [ 310.104180][T18769] sysv_free_block: flc_count > flc_size [ 310.128266][T18769] sysv_free_block: flc_count > flc_size [ 310.134145][T18769] sysv_free_block: flc_count > flc_size [ 310.140163][T18769] sysv_free_block: flc_count > flc_size [ 310.146246][T18769] sysv_free_block: flc_count > flc_size [ 310.191934][T18794] loop5: detected capacity change from 0 to 1024 [ 310.215158][T18800] loop3: detected capacity change from 0 to 64 [ 310.254714][T18769] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 310.300743][T18800] Trying to free block not in datazone [ 310.341664][T18800] Trying to free block not in datazone [ 310.381526][T18800] Trying to free block not in datazone [ 310.387652][T18800] Trying to free block not in datazone [ 310.438359][T18800] minix_free_block (loop3:6): bit already cleared [ 310.455284][T18800] Trying to free block not in datazone [ 310.488702][T18800] Trying to free block not in datazone [ 310.842681][T18836] loop4: detected capacity change from 0 to 1024 [ 310.927249][T18836] hfsplus: bad catalog entry type [ 311.184540][T18805] loop0: detected capacity change from 0 to 32768 [ 311.223916][T18805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5544 (18805) [ 311.316009][T18809] loop2: detected capacity change from 0 to 32768 [ 311.324693][T18805] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 311.348777][T18805] BTRFS info (device loop0): using free space tree [ 311.373240][T18805] BTRFS info (device loop0): has skinny extents [ 311.444698][T18826] loop3: detected capacity change from 0 to 32768 [ 311.572204][T18809] XFS (loop2): Mounting V5 Filesystem [ 311.681311][T18826] XFS (loop3): Mounting V5 Filesystem [ 311.754986][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5563'. [ 311.835632][T18809] XFS (loop2): Ending clean mount [ 311.849855][T18809] XFS (loop2): Quotacheck needed: Please wait. [ 311.859590][T18805] BTRFS info (device loop0): enabling ssd optimizations [ 311.917330][T18826] XFS (loop3): Ending clean mount [ 311.926028][T18805] BTRFS warning (device loop0): get dev_stats failed, device not found [ 311.959770][T18809] XFS (loop2): Quotacheck: Done. [ 311.971318][ T6661] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 312.006900][T18826] XFS (loop3): Quotacheck needed: Please wait. [ 312.154259][T18826] XFS (loop3): Quotacheck: Done. [ 312.373005][ T6661] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 312.393381][ T6661] usb 6-1: config 0 has no interface number 1 [ 312.413401][ T6661] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 312.423602][ T6661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.445924][ T6661] usb 6-1: config 0 descriptor?? [ 312.466089][T18925] loop4: detected capacity change from 0 to 32768 [ 312.493172][ T6661] usb 6-1: MIDIStreaming interface descriptor not found [ 312.501027][ T4187] XFS (loop2): Unmounting Filesystem [ 312.507814][ T4192] XFS (loop3): Unmounting Filesystem [ 312.522405][T18925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5564 (18925) [ 312.561062][ T6661] gspca_main: spca561-2.14.0 probing abcd:cdee [ 312.630639][T18925] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 312.693399][T18949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.728305][T18925] BTRFS info (device loop4): setting nodatacow, compression disabled [ 312.736678][T18925] BTRFS info (device loop4): setting datasum, datacow enabled [ 312.762889][ T6661] spca561: probe of 6-1:0.0 failed with error -22 [ 312.792260][T18925] BTRFS info (device loop4): force zlib compression, level 3 [ 312.794440][ T6661] usb 6-1: USB disconnect, device number 12 [ 312.819857][T18925] BTRFS info (device loop4): using free space tree [ 312.826575][T18925] BTRFS info (device loop4): has skinny extents [ 312.952990][T18995] loop0: detected capacity change from 0 to 8 [ 313.140857][T11517] udevd[11517]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.311339][T18925] BTRFS info (device loop4): enabling ssd optimizations [ 313.510282][T19052] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.5575'. [ 313.538131][T19052] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 313.630045][T18925] BTRFS info (device loop4): balance: start -f -s [ 313.651541][T18925] BTRFS info (device loop4): balance: ended with status: 0 [ 313.785214][T19096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5583'. [ 314.217393][T19145] loop3: detected capacity change from 0 to 1764 [ 314.344707][T19154] loop5: detected capacity change from 0 to 512 [ 314.427667][T19154] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 314.626519][T19154] EXT4-fs (loop5): 1 truncate cleaned up [ 314.633132][T19154] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 315.048851][T19205] netlink: 'syz.3.5608': attribute type 4 has an invalid length. [ 315.078357][ T6659] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 315.365383][T19241] loop5: detected capacity change from 0 to 1024 [ 315.380876][T19240] 9pnet: p9_fd_create_tcp (19240): problem connecting socket to 127.0.0.1 [ 315.423514][T19247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.430827][T19247] IPv6: NLM_F_CREATE should be set when creating new route [ 315.438213][T19247] IPv6: NLM_F_CREATE should be set when creating new route [ 315.448352][ T6659] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 315.456540][ T6659] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.531613][ T6659] usb 5-1: config 0 has no interface number 0 [ 315.536696][T19253] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.537941][ T6659] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 315.628166][ T6659] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.828443][ T6659] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 315.833652][T19275] loop2: detected capacity change from 0 to 1764 [ 315.845112][ T6659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.858265][ T6659] usb 5-1: Product: syz [ 315.862467][ T6659] usb 5-1: Manufacturer: syz [ 315.878802][ T6659] usb 5-1: SerialNumber: syz [ 315.933858][ T6659] usb 5-1: config 0 descriptor?? [ 316.028303][ T1108] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 316.076470][T19288] loop0: detected capacity change from 0 to 8 [ 316.089866][T19249] loop3: detected capacity change from 0 to 32768 [ 316.193486][T19288] SQUASHFS error: Failed to read block 0x1ec: -5 [ 316.231101][T19249] XFS (loop3): Mounting V5 Filesystem [ 316.240954][T19288] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 316.268199][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 316.388510][ T1108] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 316.397028][ T1108] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 316.438346][ T6659] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 316.467142][ T1108] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 316.477315][T19326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5640'. [ 316.487640][T19326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5640'. [ 316.493563][ T6659] usb 5-1: USB disconnect, device number 27 [ 316.512567][ T1108] usb 6-1: config 0 has no interface number 0 [ 316.562471][ T1108] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 316.580151][ T1108] usb 6-1: config 0 interface 104 has no altsetting 1 [ 316.639115][T19249] XFS (loop3): Ending clean mount [ 316.651667][T19249] XFS (loop3): Quotacheck needed: Please wait. [ 316.749533][ T1108] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 316.774805][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.783359][T19249] XFS (loop3): Quotacheck: Done. [ 316.805061][ T1108] usb 6-1: Product: syz [ 316.815210][ T1108] usb 6-1: Manufacturer: syz [ 316.860856][T19249] loop3: Can't mount, would change RO state [ 316.880603][ T1108] usb 6-1: SerialNumber: syz [ 316.888104][T19359] netlink: 'syz.2.5649': attribute type 10 has an invalid length. [ 316.899393][T19359] device hsr0 entered promiscuous mode [ 316.906380][ T1108] usb 6-1: config 0 descriptor?? [ 316.924729][T19359] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.967698][ T4192] XFS (loop3): Unmounting Filesystem [ 316.975812][T19359] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 316.987092][T19359] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 317.002376][T19359] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 317.095181][ T27] INFO: task syz-executor:4185 blocked for more than 143 seconds. [ 317.095652][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111578][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.114126][ T27] Not tainted 5.15.189-syzkaller #0 [ 317.140543][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.150106][ T27] task:syz-executor state:D stack:21184 pid: 4185 ppid: 1 flags:0x00004004 [ 317.160289][ T27] Call Trace: [ 317.163695][ T27] [ 317.166869][ T27] __schedule+0x11b8/0x43b0 [ 317.168338][ T1108] asix 6-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 317.172506][ T27] ? verify_lock_unused+0x140/0x140 [ 317.188572][T19373] loop4: detected capacity change from 0 to 8 [ 317.199611][ T27] ? release_firmware_map_entry+0x190/0x190 [ 317.208633][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 317.215213][ T27] ? lock_chain_count+0x20/0x20 [ 317.215432][ T1108] asix: probe of 6-1:0.104 failed with error -71 [ 317.221817][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 317.243756][ T27] schedule+0x11b/0x1e0 [ 317.247980][ T27] io_schedule+0x7c/0xd0 [ 317.252489][ T27] wait_on_page_bit_common+0x815/0xe00 [ 317.257987][ T27] ? wait_on_page_bit+0x50/0x50 [ 317.264831][ T27] ? rcu_lock_release+0x20/0x20 [ 317.267790][ T1108] usb 6-1: USB disconnect, device number 13 [ 317.276102][ T27] truncate_inode_pages_range+0x97f/0xef0 [ 317.282209][ T27] ? invalidate_inode_page+0x360/0x360 [ 317.288531][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 317.294733][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 317.300878][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 317.306235][ T27] evict+0x498/0x870 [ 317.310241][ T27] ? proc_nr_inodes+0x320/0x320 [ 317.315331][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 317.320767][ T27] evict_inodes+0x604/0x690 [ 317.325278][ T27] ? __dentry_kill+0x530/0x650 [ 317.331129][ T27] ? clear_inode+0x150/0x150 [ 317.335728][ T27] ? sync_filesystem+0x103/0x220 [ 317.340840][ T27] generic_shutdown_super+0x93/0x300 [ 317.346281][ T27] kill_block_super+0x7c/0xe0 [ 317.351021][ T27] deactivate_locked_super+0x93/0xf0 [ 317.356399][ T27] cleanup_mnt+0x418/0x4d0 [ 317.360963][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 317.366197][ T27] task_work_run+0x125/0x1a0 [ 317.371031][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 317.376425][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 317.382213][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 317.387695][ T27] do_syscall_64+0x58/0xa0 [ 317.392282][ T27] ? clear_bhb_loop+0x30/0x80 [ 317.396991][ T27] ? clear_bhb_loop+0x30/0x80 [ 317.401868][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.407851][ T27] RIP: 0033:0x7f7834243f17 [ 317.412325][ T27] RSP: 002b:00007ffeb89b4a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 317.421446][ T27] RAX: 0000000000000000 RBX: 00007f78342c5c05 RCX: 00007f7834243f17 [ 317.429604][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb89b4b10 [ 317.437849][ T27] RBP: 00007ffeb89b4b10 R08: 0000000000000000 R09: 0000000000000000 [ 317.446949][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb89b5ba0 [ 317.455017][ T27] R13: 00007f78342c5c05 R14: 0000000000029a7f R15: 00007ffeb89b5be0 [ 317.463283][ T27] [ 317.466508][ T27] [ 317.466508][ T27] Showing all locks held in the system: [ 317.478268][ T27] 1 lock held by khungtaskd/27: [ 317.483213][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 317.492993][ T27] 4 locks held by kworker/1:2/1108: [ 317.498483][ T27] 1 lock held by udevd/3560: [ 317.503293][ T27] 2 locks held by getty/3945: [ 317.511819][ T27] #0: ffff88802c154098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 317.533296][T19373] SQUASHFS error: Failed to read block 0x738: -5 [ 317.539827][T19373] SQUASHFS error: Unable to read metadata cache entry [736] [ 317.547547][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 317.584890][ T27] 1 lock held by syz-executor/4185: [ 317.596060][ T27] #0: ffff8880625000e0 (&type->s_umount_key#74){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 317.609280][ T27] 2 locks held by syz-executor/4192: [ 317.614696][ T27] #0: ffff8880208c00e0 (&type->s_umount_key#64){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 317.625832][ T27] #1: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 317.636909][ T27] 2 locks held by kworker/0:6/4244: [ 317.649989][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 317.667947][ T27] #1: ffffc9000318fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 317.681414][ T27] 3 locks held by kworker/1:14/6661: [ 317.686774][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 317.697224][ T27] #1: ffffc90003d6fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 317.709876][ T27] #2: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 317.735516][ T27] [ 317.738092][ T27] ============================================= [ 317.738092][ T27] [ 317.767851][ T27] NMI backtrace for cpu 1 [ 317.772291][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 317.780382][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.790629][ T27] Call Trace: [ 317.793960][ T27] [ 317.796903][ T27] dump_stack_lvl+0x168/0x230 [ 317.801599][ T27] ? show_regs_print_info+0x20/0x20 [ 317.806817][ T27] ? load_image+0x3b0/0x3b0 [ 317.811335][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 317.816721][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 317.821852][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 317.826803][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 317.832971][ T27] ? _printk+0xcc/0x110 [ 317.837135][ T27] ? load_image+0x3b0/0x3b0 [ 317.841642][ T27] ? load_image+0x3b0/0x3b0 [ 317.846176][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 317.852248][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 317.858232][ T27] watchdog+0xe0f/0xe50 [ 317.862404][ T27] kthread+0x436/0x520 [ 317.866570][ T27] ? hungtask_pm_notify+0x40/0x40 [ 317.871616][ T27] ? kthread_blkcg+0xd0/0xd0 [ 317.876371][ T27] ret_from_fork+0x1f/0x30 [ 317.880902][ T27] [ 317.883962][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.891088][ T27] Sending NMI from CPU 1 to CPUs 0: [ 317.896402][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 317.913089][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 317.920133][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 317.928287][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.938862][ T27] Call Trace: [ 317.942148][ T27] [ 317.945134][ T27] dump_stack_lvl+0x168/0x230 [ 317.949996][ T27] ? show_regs_print_info+0x20/0x20 [ 317.955190][ T27] ? load_image+0x3b0/0x3b0 [ 317.959776][ T27] panic+0x2c9/0x7f0 [ 317.963683][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 317.969351][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 317.973894][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 317.979585][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 317.985732][ T27] watchdog+0xe4e/0xe50 [ 317.989885][ T27] kthread+0x436/0x520 [ 317.993952][ T27] ? hungtask_pm_notify+0x40/0x40 [ 317.999048][ T27] ? kthread_blkcg+0xd0/0xd0 [ 318.003625][ T27] ret_from_fork+0x1f/0x30 [ 318.008052][ T27] [ 318.011411][ T27] Kernel Offset: disabled [ 318.016101][ T27] Rebooting in 86400 seconds..