last executing test programs: 12m36.058054443s ago: executing program 3 (id=17954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@allocspi={0x148, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x80, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d6, 0x33}, @in=@multicast1, {0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x6d3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffc}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@algo_auth={0x48, 0x1, {{'vmac64(aes)\x00'}}}, @extra_flags={0x8, 0x18, 0xe}]}, 0x148}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 12m35.941414559s ago: executing program 3 (id=17957): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x1c, '\x00', @data=0x7, 0x4}, {0x21, '\x00', @buffer={"f5afd87efbed0c831dd3fe7de8e6d7623ef47a44b0c02d426b799f77205767bd", 0x20}, 0x2}]}) 12m35.754442597s ago: executing program 3 (id=17961): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) 12m35.570406795s ago: executing program 3 (id=17966): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000004400)={[{@nodecompose}, {@uid}, {@force}, {@gid}, {@nls={'nls', 0x3d, 'cp874'}}, {@part={'part', 0x3d, 0x200006}}]}, 0x1, 0x6fc, &(0x7f0000000b40)="$eJzs3UtsHHcdB/DvrNcbbyq5btVHQEixGhFBA4mdpSRISASEUA4VROLSq0mcxoqTRraLkggRFygc4YRy6KEIhUNPiANSEQdEOSMhcc89EgduEQeMZnfG3vV7k9hO6Ocjzc5/5v/6zW9nZh+JtQE+tc6/ldHlFDl/4s2b5fb9e535+/c61+pykkNJGkmzt0pxPSk+Sc6lt+Qz5c5quGKred548PEHx+9+1OltNaul276xXb/aWLabYblaMplkpFoPqbnVeBc3Ge/OUEMXq3GXCTtWJw4O2soGy8N03/G6BZ5+d5KR0U32TySHq5ff8n1AqrtDY5/De+KGussBAADA02lkpwbPP8zD3Mz4/oQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz76xJEXvNwOLamnU5ckU1e//fy/VvlKrdbAh7+BLO9S/f3mfAgEAAAAAAACAIbR312x0rXj0YR7mZsbr7ZWi+2/+r3U3Xuo+Ppd3s5jZLORkbmYmS1nKQqaT0fG+MVs3Z5aWFqY39vx1yp4rKyt3qp6nk0xs6Hn6cY4bAAAAAAAAAD71fpLzGT/oIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF+RjPRW3eWlujyRRjPJWJJW2W45+XNdfpb95aADAAAAgL3XrtbjxX97hZWi+5n/le7n/rG8m+tZylyWMp/ZXOp+F9D71N/4x3Jn/v69zrVy2TjwN/81VBzdEZOM5L0tZp7qtnh5tcf5fCffz4lM5kIWMpcfZiZLmc1k2uVBZCZFJtq9by8m6jgH4x2phjo3EMqF9bEdXbd9pBtJO5cz143tZC626tEa3RZFjvTN9sdW0p+h8eS9MjvFNyq7zNGlvufrV9X3MpWV53c5xt6Y6B756GpGpsrcV9l4YfPc14Y8T9bPNJ3G6ndQL63NUm6un6nO+Q+Gyfnhal3m+ueDOX/ShvwqbX0mTqcxVte9MpjzG5+/++Jg5y/+868XrjSuX71yefHEHh7SnhqtC+sz0Umjug6TV7c/+6pMzJeZWN59JkbX7xh7jON4glpVNno3tt3dLb/dLc3ktb5T8J1cymzOZCrTOZupfC2n0ynPsNW8vjyQ12bn2mBOutdaY+P9rb1N8Me+0NfoFzs03l9lXl7oy2v/nW6iW1ftOffLTPVl6cXtz75HeRVofrYqlHP8dPUV52kwkInq3lxHV79AbZGJ36yUj4vz168uXJm50Vex4Urrc7xal5ft+4P35t8+kQN6ZOX5Ut5xm92tbk7a9fnSqt5vFGt1q/lqVf/i0uvX2FD38mrdRMYzl+9ueaW2qvdwG0fq1b26aV2nW3ekr27gXU7eyXz3Xcg6k/uSVAB27/Drh1vtB+2/tz9s/6x9pf3m2LcOnT30uVZG/9b808jvG79rfL14PR/mx+VnUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HEt3rp9dWZ+fnZhDwutIeYq29V70thxinvP7S6MTCTbtklRFVp7nY2noPDvsW2z0c4ezf6Hvid3kzatx56i2PvzuTxBn8iA9U9cdfesjGzVuP6Nub6qZt1r85GbWRzb6hk8tDZOJq7OzP9nZaBNO3Xj7X6AC/j/cGrp2o1Ti7duf3nu2szbs2/PXj999szZM52vTn/l1OW5+dmp3uNBRwnshcVbt0cOOgYAAAAAAAAAAABgONX//l/q+wuBDPXnH80d2rQWFjef+eh+HyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwjDr/VkaXU2R66uRUuX3/Xme+XOryWstmkkaS4kdJ8UlyLr0lE33DFVvN88aDjz84fvejztpYzbp9Y7t+u7NcLZlMMlKtd3Zok2E2jnexb7zlRwqvWD3CMmHH6sTBQftfAAAA//9vGe0p") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 12m35.340516156s ago: executing program 3 (id=17970): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000003580)=0xf2c17809, 0x4) 12m34.864345948s ago: executing program 3 (id=17978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000018000000850000007d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b40)="e3006a670004ec67838717bd86dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m34.471018136s ago: executing program 32 (id=17978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000018000000850000007d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b40)="e3006a670004ec67838717bd86dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m56.406233975s ago: executing program 1 (id=19425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) 10m56.258365801s ago: executing program 1 (id=19428): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) 10m56.148313106s ago: executing program 1 (id=19430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d4, 0x6c}, 0x0, @in6=@local, 0x8034ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x203c}, {{@in=@broadcast, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x2, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 10m55.950476146s ago: executing program 1 (id=19434): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 10m55.579654682s ago: executing program 1 (id=19436): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003480)={0x2, 0xe, 0x33, 0x2, 0x5, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_address={0x3, 0x17, 0x32, 0x80, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}}, 0x8800) 10m55.20245291s ago: executing program 1 (id=19440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) 10m54.855672385s ago: executing program 33 (id=19440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)) 3.966374865s ago: executing program 0 (id=29403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfff9e3}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.755607882s ago: executing program 0 (id=29406): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 3.458763481s ago: executing program 2 (id=29412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0), 0x7fff, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={r0}, 0x4) 2.177440342s ago: executing program 2 (id=29423): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002222000000952305e593b2938f8d1745fb096c070900be00a3e8fffffea7be0da1f65d33c2"], 0x0}, 0x0) 1.829794863s ago: executing program 0 (id=29435): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r0, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}}, 0x4004810) 1.678473218s ago: executing program 0 (id=29428): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 1.630107149s ago: executing program 0 (id=29429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) 1.548443661s ago: executing program 0 (id=29430): r0 = syz_usbip_server_init(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a858000) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) 1.212707852s ago: executing program 5 (id=29432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x68, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x288, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x24000050) 1.055851317s ago: executing program 5 (id=29433): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 1.055714637s ago: executing program 4 (id=29434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bind$netlink(r0, &(0x7f0000514ff4), 0xc) 856.267624ms ago: executing program 5 (id=29436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x5, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @empty}}}, 0x108) close(0x3) 689.320769ms ago: executing program 4 (id=29437): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x10) 688.929059ms ago: executing program 5 (id=29438): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 668.815279ms ago: executing program 4 (id=29439): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 541.378194ms ago: executing program 4 (id=29440): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000005c00128009000100766c616e000000004c0002800600010004000000340003800c0001e5fa62f24db30042000c000100ff010000050000000c000100400000000000001c0c00010020000000800000000600050088a800000400048008000500", @ANYRES32=r1], 0x84}, 0x1, 0x0, 0x0, 0xc038041}, 0x8040802) 362.494969ms ago: executing program 4 (id=29441): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 362.154809ms ago: executing program 5 (id=29442): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 324.25645ms ago: executing program 2 (id=29443): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x800, 0x1005f, 0x3}) 230.697833ms ago: executing program 2 (id=29444): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 118.482957ms ago: executing program 5 (id=29445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 118.195027ms ago: executing program 2 (id=29446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000e9070004000a010101080005"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) 1.01646ms ago: executing program 2 (id=29447): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0) 0s ago: executing program 4 (id=29448): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) kernel console output (not intermixed with test programs): , Product=0, SerialNumber=0 [ 2248.144802][ T8024] usb 1-1: config 0 descriptor?? [ 2248.360346][ T8024] qcserial 1-1:0.3: Qualcomm USB modem converter detected [ 2248.591784][ T8024] usb 1-1: USB disconnect, device number 5 [ 2248.620956][ T8024] qcserial 1-1:0.3: device disconnected [ 2248.829567][T21109] loop4: detected capacity change from 0 to 4096 [ 2248.868064][T21109] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 2249.718106][T21162] tc_dump_action: action bad kind [ 2250.310606][T21227] loop5: detected capacity change from 0 to 128 [ 2250.364267][T21227] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 2250.879708][T21250] netlink: 'syz.5.27652': attribute type 2 has an invalid length. [ 2250.898092][T21250] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.27652'. [ 2251.270301][T21234] loop4: detected capacity change from 0 to 32768 [ 2251.289162][T21263] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 2251.329230][T21234] ERROR: (device loop4): diAllocBit: iag inconsistent [ 2251.329230][T21234] [ 2251.392676][T21234] ERROR: (device loop4): remounting filesystem as read-only [ 2251.392767][T21234] ialloc: diAlloc returned -5! [ 2251.514466][T21270] gretap2: entered allmulticast mode [ 2251.899058][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27665'. [ 2251.911448][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27665'. [ 2252.083157][T21302] vlan0: left allmulticast mode [ 2252.083181][T21302] veth0_vlan: left allmulticast mode [ 2252.390616][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27675'. [ 2252.442527][T21312] loop5: detected capacity change from 0 to 4096 [ 2252.463618][T21312] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 2252.566475][T21312] ntfs3: loop5: failed to convert "c46c" to cp861 [ 2252.869322][T21333] loop5: detected capacity change from 0 to 4096 [ 2252.900996][T21345] netlink: 'syz.2.27683': attribute type 2 has an invalid length. [ 2252.929073][T21345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.27683'. [ 2252.956541][T21349] netlink: 'syz.0.27684': attribute type 1 has an invalid length. [ 2253.004549][T21349] netlink: 248 bytes leftover after parsing attributes in process `syz.0.27684'. [ 2254.118547][T21376] loop5: detected capacity change from 0 to 32768 [ 2254.175969][T21376] [ 2254.175969][T21376] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2254.175969][T21376] [ 2254.206271][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2254.223263][T21406] netlink: 156 bytes leftover after parsing attributes in process `syz.4.27702'. [ 2254.245200][T21376] jfs_create: dtInsert returned -EIO [ 2254.253242][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27702'. [ 2254.259781][T21376] ERROR: (device loop5): jfs_create: [ 2254.259781][T21376] [ 2254.283139][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27702'. [ 2254.345926][T22890] [ 2254.345926][T22890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2254.345926][T22890] [ 2254.367479][T22890] [ 2254.367479][T22890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2254.367479][T22890] [ 2254.419992][ T8] usb 1-1: config index 0 descriptor too short (expected 133, got 72) [ 2254.466313][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2254.475562][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.483574][ T8] usb 1-1: Product: syz [ 2254.515535][ T8] usb 1-1: Manufacturer: syz [ 2254.520196][ T8] usb 1-1: SerialNumber: syz [ 2254.540143][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2254.576916][ T9571] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2254.804307][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 2254.996887][ T23] usb 1-1: USB disconnect, device number 6 [ 2255.595641][T21476] loop5: detected capacity change from 0 to 2048 [ 2255.622942][ T9571] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2255.638723][ T9571] ath9k_htc: Failed to initialize the device [ 2255.645474][ T23] usb 1-1: ath9k_htc: USB layer deinitialized [ 2255.718401][T21476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2256.564821][T21540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2256.789681][T21556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.27749'. [ 2256.823133][T21556] gtp0: entered promiscuous mode [ 2256.840071][T21556] gtp0: entered allmulticast mode [ 2257.084485][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27756'. [ 2257.298290][T21588] 9pnet: Found fid 0 not clunked [ 2257.863313][T21577] loop0: detected capacity change from 0 to 32768 [ 2257.912965][T21577] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 2257.912965][T21577] [ 2257.925641][T21577] ERROR: (device loop0): remounting filesystem as read-only [ 2257.933067][T21577] xtLookup: xtSearch returned -5 [ 2258.650607][T21657] netlink: 180 bytes leftover after parsing attributes in process `syz.2.27785'. [ 2258.773100][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27786'. [ 2258.814543][T21664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27786'. [ 2259.343374][ T23] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2259.554684][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2259.576352][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2259.608933][ T23] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 2259.628919][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.656044][ T23] usb 3-1: Product: syz [ 2259.682775][ T23] usb 3-1: Manufacturer: syz [ 2259.689697][ T23] usb 3-1: SerialNumber: syz [ 2259.701021][ T23] usb 3-1: config 0 descriptor?? [ 2259.723490][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 2259.743801][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 2259.771900][ T23] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input124 [ 2260.029296][T21741] netlink: 'syz.5.27809': attribute type 17 has an invalid length. [ 2260.042786][T21700] loop0: detected capacity change from 0 to 32768 [ 2260.055789][T21741] netlink: 148 bytes leftover after parsing attributes in process `syz.5.27809'. [ 2260.056187][T21742] sctp: [Deprecated]: syz.4.27810 (pid 21742) Use of int in maxseg socket option. [ 2260.056187][T21742] Use struct sctp_assoc_value instead [ 2260.102948][T21700] JBD2: Ignoring recovery information on journal [ 2260.266816][T21700] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2260.295503][T21752] 9pnet: Found fid 0 not clunked [ 2260.313579][T21700] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 2260.362265][T21700] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2260.419467][T21700] OCFS2: File system is now read-only. [ 2260.425076][T21700] (syz.0.27799,21700,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 2260.605199][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 2260.931475][T21783] binder: 21780:21783 ioctl 40046210 0 returned -14 [ 2261.067866][T13275] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2261.107357][ T23] usb 3-1: USB disconnect, device number 18 [ 2261.249874][T13275] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.268666][T13275] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2261.289994][T13275] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2261.300026][T13275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.308962][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2261.324594][T13275] usb 6-1: Product: syz [ 2261.334541][T13275] usb 6-1: Manufacturer: syz [ 2261.349127][T13275] usb 6-1: SerialNumber: syz [ 2261.412359][T21815] loop4: detected capacity change from 0 to 512 [ 2261.524280][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 2261.538505][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.549132][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2261.584629][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2261.594153][T13275] usb 6-1: 0:2 : does not exist [ 2261.599088][T13275] usb 6-1: unit 3 not found! [ 2261.604549][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.615002][T13275] usb 6-1: unit 64 not found! [ 2261.626232][T13275] usb 6-1: 1:2 : does not exist [ 2261.633148][ T23] usb 3-1: Product: syz [ 2261.648766][ T23] usb 3-1: Manufacturer: syz [ 2261.653415][ T23] usb 3-1: SerialNumber: syz [ 2261.664749][T13275] snd-usb-audio: probe of 6-1:1.1 failed with error -16 [ 2261.715017][T13275] usb 6-1: USB disconnect, device number 37 [ 2261.805372][T21808] loop0: detected capacity change from 0 to 32768 [ 2261.859221][T21808] JBD2: Ignoring recovery information on journal [ 2261.897689][ T23] usb 3-1: 0:2 : does not exist [ 2261.918701][T21808] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2261.951917][ T23] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2261.997039][T21808] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 0 but claims that 2046 are free [ 2262.038857][T21808] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2262.060907][ T23] usb 3-1: USB disconnect, device number 19 [ 2262.067201][T21808] OCFS2: File system is now read-only. [ 2262.073294][T21808] (syz.0.27825,21808,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 2262.085302][T21808] (syz.0.27825,21808,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 2262.094935][T21808] (syz.0.27825,21808,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 2262.103820][T21808] (syz.0.27825,21808,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 2262.113857][T21808] (syz.0.27825,21808,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 2262.150430][T21808] (syz.0.27825,21808,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 2262.177739][T11280] udevd[11280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2262.185799][T21808] (syz.0.27825,21808,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 2262.328328][T21808] (syz.0.27825,21808,1):ocfs2_mknod:385 ERROR: status = -30 [ 2262.351207][T21808] (syz.0.27825,21808,1):ocfs2_mknod:502 ERROR: status = -30 [ 2262.375803][T21871] program syz.5.27832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2262.381858][T21808] (syz.0.27825,21808,1):ocfs2_create:676 ERROR: status = -30 [ 2262.403361][T21874] 9pnet: Found fid 0 not clunked [ 2262.545168][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 2262.690614][T21883] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2263.114470][T21911] loop5: detected capacity change from 0 to 256 [ 2263.147058][T21911] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2263.163018][T21911] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2263.234902][T21911] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2263.375208][T21926] netlink: 'syz.4.27849': attribute type 1 has an invalid length. [ 2263.384098][ T8024] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2263.570391][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27854'. [ 2263.581124][T21940] netlink: 'syz.5.27854': attribute type 1 has an invalid length. [ 2263.589232][T21940] netlink: 'syz.5.27854': attribute type 2 has an invalid length. [ 2263.597463][ T8024] usb 3-1: Using ep0 maxpacket: 8 [ 2263.603255][T21940] netlink: 120 bytes leftover after parsing attributes in process `syz.5.27854'. [ 2263.628249][ T8024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2263.638533][ T8024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2263.655717][ T8024] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2263.665628][ T8024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.696288][ T8024] usb 3-1: Product: syz [ 2263.710593][ T8024] usb 3-1: Manufacturer: syz [ 2263.723861][ T8024] usb 3-1: SerialNumber: syz [ 2263.761782][ T8024] usb 3-1: config 0 descriptor?? [ 2264.179836][T21967] CIFS: VFS: Malformed UNC in devname [ 2264.202572][ T23] usb 3-1: USB disconnect, device number 20 [ 2264.273908][T21937] loop4: detected capacity change from 0 to 32768 [ 2264.896494][ T8024] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2264.998414][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27873'. [ 2265.007709][T22015] netlink: 660 bytes leftover after parsing attributes in process `syz.5.27873'. [ 2265.097508][ T8024] usb 1-1: Using ep0 maxpacket: 32 [ 2265.107630][ T8024] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2265.124837][ T8024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.135770][ T8024] usb 1-1: Product: syz [ 2265.144343][ T8024] usb 1-1: Manufacturer: syz [ 2265.154355][ T8024] usb 1-1: SerialNumber: syz [ 2265.176631][ T8024] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2265.230414][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2265.298888][T22023] loop5: detected capacity change from 0 to 4096 [ 2265.324994][T22023] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2265.343084][T22023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2265.373470][T22023] EXT4-fs error (device loop5): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.5.27875: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2265.402547][T22023] EXT4-fs error (device loop5): ext4_get_first_dir_block:3606: inode #12: comm syz.5.27875: directory missing '..' [ 2265.438426][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 2265.467050][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.486702][T22890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2265.515362][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.563731][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2265.602743][ T8024] gspca_topro: reg_w err -71 [ 2265.616471][ T8] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2265.639666][ T8] usb 3-1: Product: syz [ 2265.643877][ T8] usb 3-1: Manufacturer: syz [ 2265.656434][ T8024] gspca_topro: Sensor soi763a [ 2265.682261][ T8024] usb 1-1: USB disconnect, device number 7 [ 2265.721848][ T8] hub 3-1:4.0: USB hub found [ 2265.932416][ T8] hub 3-1:4.0: 1 port detected [ 2266.106006][ C0] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured! [ 2266.125141][ T8] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 2266.141391][ T8] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 2266.195638][ T8] usb 3-1: USB disconnect, device number 21 [ 2266.647316][T22105] netlink: 'syz.4.27892': attribute type 75 has an invalid length. [ 2266.725550][T13275] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2266.906968][T13275] usb 6-1: Using ep0 maxpacket: 8 [ 2266.935012][T13275] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2266.943333][T13275] usb 6-1: config 179 has no interface number 0 [ 2266.971712][T13275] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2267.007582][T13275] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2267.028789][T13275] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2267.066077][T13275] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2267.078461][T13275] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2267.093151][T13275] usb 6-1: config 179 interface 65 has no altsetting 0 [ 2267.101121][T13275] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2267.125281][T13275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.165308][T13275] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input125 [ 2267.249637][ T5124] input input125: unable to receive magic message: -110 [ 2267.318322][ T5124] input input125: unable to receive magic message: -32 [ 2267.378056][T22148] tmpfs: Bad value for 'mpol' [ 2267.433241][T11280] input input125: unable to receive magic message: -32 [ 2267.504177][ T5124] input input125: unable to receive magic message: -32 [ 2267.563275][ T5124] input input125: unable to receive magic message: -32 [ 2267.591603][ T5124] input input125: unable to receive magic message: -32 [ 2267.680690][ T8024] usb 6-1: USB disconnect, device number 38 [ 2267.680713][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2267.726773][ T8024] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2268.030264][T13275] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2268.211048][T13275] usb 1-1: Using ep0 maxpacket: 16 [ 2268.223886][T13275] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2268.258659][T13275] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2268.304067][T13275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2268.319070][T13275] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2268.353031][T13275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.382225][T13275] usb 1-1: Product: syz [ 2268.392272][T13275] usb 1-1: Manufacturer: syz [ 2268.397397][T13275] usb 1-1: SerialNumber: syz [ 2268.414712][T13275] usb 1-1: config 0 descriptor?? [ 2268.765518][T22194] No such timeout policy "syz0" [ 2268.842149][T13275] usb 1-1: USB disconnect, device number 8 [ 2268.893346][T22182] loop5: detected capacity change from 0 to 32768 [ 2268.915734][T22182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.27913 (22182) [ 2268.961811][T22182] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2268.983900][T22182] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2269.020000][T22182] BTRFS info (device loop5): setting nodatasum [ 2269.040398][T22182] BTRFS info (device loop5): force zlib compression, level 3 [ 2269.047909][T22182] BTRFS info (device loop5): metadata ratio 1 [ 2269.108002][T22182] BTRFS info (device loop5): enabling ssd optimizations [ 2269.115006][T22182] BTRFS info (device loop5): allowing degraded mounts [ 2269.154930][T22182] BTRFS info (device loop5): using free space tree [ 2269.718396][T22890] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2270.301482][T22285] comedi comedi0: pcl724: I/O port conflict (0x7,4) [ 2271.030190][ T28] kauditd_printk_skb: 243 callbacks suppressed [ 2271.030205][ T28] audit: type=1400 audit(2314.929:4487): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 68 bytes leftover after parsing attributes in process `syz.5.27968'. [ 2271.586353][T22362] netlink: 'syz.0.27970': attribute type 1 has an invalid length. [ 2271.630887][T22355] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2271.639020][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27969'. [ 2271.768784][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27971'. [ 2272.037161][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27978'. [ 2272.052088][T22387] xt_TCPMSS: Only works on TCP SYN packets [ 2272.066746][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27978'. [ 2272.516944][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2272.520877][T22418] loop5: detected capacity change from 0 to 256 [ 2272.717644][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 2272.724956][ T8] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 2272.741443][ T8] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2272.754715][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.765950][ T8] usb 3-1: Product: syz [ 2272.770190][ T8] usb 3-1: Manufacturer: syz [ 2272.775503][ T8] usb 3-1: SerialNumber: syz [ 2272.803103][ T8] r8152-cfgselector 3-1: config 0 descriptor?? [ 2273.048171][T22446] loop5: detected capacity change from 0 to 1024 [ 2273.060493][ T8] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 2273.188336][T14026] hfsplus: b-tree write err: -5, ino 25 [ 2273.200561][T14026] hfsplus: b-tree write err: -5, ino 4 [ 2273.223760][T14026] hfsplus: b-tree write err: -5, ino 2 [ 2273.282412][ T8] usb 3-1: USB disconnect, device number 22 [ 2273.768358][ T28] audit: type=1326 audit(2317.806:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.4.28013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2273.838049][ T28] audit: type=1326 audit(2317.806:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.4.28013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2273.873118][ T28] audit: type=1326 audit(2317.837:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.4.28013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2273.873356][T22497] netlink: 44 bytes leftover after parsing attributes in process `syz.5.28015'. [ 2273.895768][ C0] vkms_vblank_simulate: vblank timer overrun [ 2273.904337][ T28] audit: type=1326 audit(2317.837:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.4.28013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2274.031784][ T28] audit: type=1326 audit(2317.837:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22490 comm="syz.4.28013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2274.053969][ C0] vkms_vblank_simulate: vblank timer overrun [ 2274.334413][T22519] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 2274.956349][T22516] loop5: detected capacity change from 0 to 32768 [ 2275.013632][T22547] delete_channel: no stack [ 2275.040950][ T28] audit: type=1800 audit(2319.139:4493): pid=22516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.28022" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 2275.441845][T22565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.28040'. [ 2275.485073][T22569] loop0: detected capacity change from 0 to 128 [ 2275.512947][T22569] EXT4-fs: inline encryption not supported [ 2275.542628][T22569] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2275.584569][T22569] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2275.726770][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2276.182928][T13275] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2276.379163][T13275] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2276.395026][T13275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.422806][T13275] usb 3-1: Product: syz [ 2276.426606][T22617] netlink: 'syz.5.28056': attribute type 5 has an invalid length. [ 2276.432170][T13275] usb 3-1: Manufacturer: syz [ 2276.449950][T13275] usb 3-1: SerialNumber: syz [ 2276.490485][T13275] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2276.510417][T30098] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2276.613973][T22594] loop4: detected capacity change from 0 to 32768 [ 2276.691682][T22594] JBD2: Ignoring recovery information on journal [ 2276.816414][T22594] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2276.955543][T13275] usb 3-1: USB disconnect, device number 23 [ 2277.050976][T22594] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 2277.093965][T22594] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2277.127543][T22594] OCFS2: File system is now read-only. [ 2277.135515][T22594] (syz.4.28048,22594,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 2277.205952][T22652] netlink: 'syz.0.28064': attribute type 3 has an invalid length. [ 2277.230986][ T28] audit: type=1400 audit(2321.438:4494): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22654 comm="syz.5.28063" [ 2277.320300][T16784] ocfs2: Unmounting device (7,4) on (node local) [ 2277.536697][T30098] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2277.558199][T30098] ath9k_htc: Failed to initialize the device [ 2277.575179][T13275] usb 3-1: ath9k_htc: USB layer deinitialized [ 2277.912312][T22692] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 2278.364210][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28084'. [ 2278.409951][T22682] loop4: detected capacity change from 0 to 32768 [ 2278.433120][T22682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.28065 (22682) [ 2278.491144][T22682] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2278.516495][T22682] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2278.548585][T22682] BTRFS info (device loop4): setting nodatasum [ 2278.564349][T22682] BTRFS info (device loop4): force zlib compression, level 3 [ 2278.586586][T22682] BTRFS info (device loop4): metadata ratio 1 [ 2278.592729][T22682] BTRFS info (device loop4): enabling ssd optimizations [ 2278.642019][T22682] BTRFS info (device loop4): allowing degraded mounts [ 2278.648862][T22682] BTRFS info (device loop4): using free space tree [ 2278.752745][ T28] audit: type=1326 audit(2323.034:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.2.28091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2278.813717][ T28] audit: type=1326 audit(2323.076:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.2.28091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2278.918194][ T28] audit: type=1326 audit(2323.086:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.2.28091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2279.006098][ T28] audit: type=1326 audit(2323.086:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.2.28091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2279.038611][ T28] audit: type=1326 audit(2323.086:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.2.28091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2279.186805][T16784] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2280.498590][T22832] netlink: 'syz.0.28118': attribute type 1 has an invalid length. [ 2280.523968][T22832] netlink: 224 bytes leftover after parsing attributes in process `syz.0.28118'. [ 2280.730383][T22849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28124'. [ 2280.912977][ T28] audit: type=1400 audit(2325.301:4500): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=22856 comm="syz.2.28127" [ 2281.189627][T22874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28133'. [ 2281.198990][T22874] netlink: 440 bytes leftover after parsing attributes in process `syz.2.28133'. [ 2281.304052][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28136'. [ 2281.454448][T22888] loop4: detected capacity change from 0 to 4096 [ 2281.496351][T22896] netlink: 'syz.5.28139': attribute type 10 has an invalid length. [ 2281.536688][T22898] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2281.583718][T22896] netlink: 40 bytes leftover after parsing attributes in process `syz.5.28139'. [ 2281.605013][T22896] batman_adv: batadv0: Adding interface: vlan1 [ 2281.610752][T22888] syz.4.28138: attempt to access beyond end of device [ 2281.610752][T22888] loop4: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 2281.611383][T22896] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2281.678007][T22888] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 2281.682122][T22896] batman_adv: batadv0: Interface activated: vlan1 [ 2282.797708][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28164'. [ 2282.975548][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28168'. [ 2283.032233][T22977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2283.039743][T22977] IPv6: NLM_F_CREATE should be set when creating new route [ 2283.047190][T22977] IPv6: NLM_F_CREATE should be set when creating new route [ 2283.141637][T22986] loop5: detected capacity change from 0 to 128 [ 2283.160361][T22986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2283.250226][T22986] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2283.387503][T22890] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2283.397697][T23001] loop0: detected capacity change from 0 to 64 [ 2283.633716][T23013] netlink: 256 bytes leftover after parsing attributes in process `syz.5.28176'. [ 2283.756778][T22983] loop4: detected capacity change from 0 to 32768 [ 2283.783259][T23020] netlink: 'syz.2.28180': attribute type 9 has an invalid length. [ 2283.811728][T23020] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.28180'. [ 2283.831927][T22983] (syz.4.28170,22983,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2283.875800][T22983] (syz.4.28170,22983,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2283.992307][T22983] JBD2: Ignoring recovery information on journal [ 2284.109434][T22983] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2284.212934][T23043] netlink: 'syz.5.28188': attribute type 27 has an invalid length. [ 2284.407986][T16784] ocfs2: Unmounting device (7,4) on (node local) [ 2284.753829][T23070] xt_TCPMSS: Only works on TCP SYN packets [ 2285.507499][T23121] loop0: detected capacity change from 0 to 512 [ 2285.523240][T23121] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2285.547138][T23121] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 2285.571316][T23121] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 2285.600292][T23121] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 2285.631721][T23121] System zones: 0-2, 18-18, 34-35 [ 2285.654702][T23121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2285.736367][T23134] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 2285.808494][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2285.869413][ C1] vkms_vblank_simulate: vblank timer overrun [ 2286.485093][T23171] : renamed from veth0_vlan [ 2286.729534][T23183] netlink: 'syz.2.28234': attribute type 8 has an invalid length. [ 2286.948114][T23182] loop5: detected capacity change from 0 to 8192 [ 2286.989634][T23182] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2287.014979][T23182] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 2287.025908][T23182] REISERFS (device loop5): using ordered data mode [ 2287.033192][T23182] reiserfs: using flush barriers [ 2287.045406][T23182] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2287.075349][T23182] REISERFS (device loop5): checking transaction log (loop5) [ 2287.092066][T23182] REISERFS (device loop5): Using r5 hash to sort names [ 2287.101525][T23182] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 2287.130340][T23204] loop0: detected capacity change from 0 to 16 [ 2287.177169][T23204] erofs: (device loop0): mounted with root inode @ nid 36. [ 2287.227780][T23204] syz.0.28240: attempt to access beyond end of device [ 2287.227780][T23204] loop0: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 2287.758573][T23234] netlink: 'syz.2.28249': attribute type 58 has an invalid length. [ 2287.890959][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28251'. [ 2287.949026][T23242] loop4: detected capacity change from 0 to 128 [ 2287.985273][T23242] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2288.046492][T23242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2288.162056][T23220] loop0: detected capacity change from 0 to 32768 [ 2288.200534][T23220] (syz.0.28243,23220,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2288.221000][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28255'. [ 2288.249266][T23220] (syz.0.28243,23220,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2288.310715][ T8] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2288.408860][T23220] JBD2: Ignoring recovery information on journal [ 2288.521970][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2288.552793][T23220] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2288.570287][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.607866][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2288.643980][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.677037][ T8] hub 6-1:4.0: USB hub found [ 2288.882086][ T8] hub 6-1:4.0: 9 ports detected [ 2288.887064][ T8] usb 6-1: selecting invalid altsetting 1 [ 2288.916188][ T8] hub 6-1:4.0: Using single TT (err -22) [ 2288.926311][ T8] hub 6-1:4.0: insufficient power available to use all downstream ports [ 2288.926512][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 2289.081030][ T8] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 2289.112997][ T8] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 2289.187421][ T8] usb 6-1: USB disconnect, device number 39 [ 2289.442588][T23321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.28271'. [ 2290.188695][T23365] xt_CONNSECMARK: invalid mode: 129 [ 2290.587423][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.28294'. [ 2290.596514][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.28294'. [ 2290.627677][T23389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.28294'. [ 2290.694001][T23397] netlink: 'syz.0.28297': attribute type 10 has an invalid length. [ 2290.722768][T23397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.28297'. [ 2291.150270][ T8] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2291.229296][T23426] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969) [ 2291.242573][T23426] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 2291.380633][ T8] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2291.389941][ T8] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 2291.401088][ T8] usb 5-1: Product: syz [ 2291.405860][ T8] usb 5-1: Manufacturer: syz [ 2291.421626][ T8] usb 5-1: SerialNumber: syz [ 2291.431731][ T8] usb 5-1: config 0 descriptor?? [ 2291.442343][ T8] ch341 5-1:0.0: ch341-uart converter detected [ 2291.860459][ T8] usb 5-1: failed to send control message: -71 [ 2291.876794][ T8] ch341-uart: probe of ttyUSB0 failed with error -71 [ 2291.900752][ T8] usb 5-1: USB disconnect, device number 47 [ 2291.916333][ T8] ch341 5-1:0.0: device disconnected [ 2292.016931][T23431] loop0: detected capacity change from 0 to 32768 [ 2292.427580][T23472] __vm_enough_memory: pid: 23472, comm: syz.0.28319, not enough memory for the allocation [ 2292.806101][ T28] audit: type=1326 audit(2337.783:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2292.842955][ T28] audit: type=1326 audit(2337.794:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2292.930482][ T28] audit: type=1326 audit(2337.804:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.026588][ T28] audit: type=1326 audit(2337.804:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.092412][ T28] audit: type=1326 audit(2337.804:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.139836][ T28] audit: type=1326 audit(2337.804:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.226824][ T28] audit: type=1326 audit(2337.804:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.249009][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.305451][ T28] audit: type=1326 audit(2337.804:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.327811][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.367724][ T28] audit: type=1326 audit(2337.804:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23491 comm="syz.5.28326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2293.390494][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.430754][ T28] audit: type=1326 audit(2338.277:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.4.28334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x0 [ 2293.452835][ C1] vkms_vblank_simulate: vblank timer overrun [ 2293.676524][T23536] netlink: 172 bytes leftover after parsing attributes in process `syz.0.28342'. [ 2293.711671][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28342'. [ 2293.759363][T23536] netlink: 172 bytes leftover after parsing attributes in process `syz.0.28342'. [ 2293.787081][T23536] netlink: 100 bytes leftover after parsing attributes in process `syz.0.28342'. [ 2293.803555][T23536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.28342'. [ 2294.033737][T23555] loop0: detected capacity change from 0 to 2048 [ 2294.068064][T23555] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 2294.094575][T23555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2294.361998][T23566] loop5: detected capacity change from 0 to 4096 [ 2294.394336][T23577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28356'. [ 2294.397790][T23566] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 2294.423822][T23577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28356'. [ 2295.061888][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28368'. [ 2295.302886][T23626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28373'. [ 2295.543876][T23643] (null): rxe_set_mtu: Set mtu to 1024 [ 2295.842324][T23659] xt_l2tp: unknown flags: 10 [ 2295.956966][T23664] loop5: detected capacity change from 0 to 16 [ 2295.967674][T23664] erofs: (device loop5): mounted with root inode @ nid 36. [ 2295.998779][T23664] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 2296.037618][T23664] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 2296.058291][T23664] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 2296.111332][T23643] infiniband syz2: set down [ 2296.121455][T23643] infiniband syz2: added bridge_slave_1 [ 2296.165435][T23675] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2296.310296][T23683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28391'. [ 2296.455997][T23643] RDS/IB: syz2: added [ 2296.486460][T23643] smc: adding ib device syz2 with port count 1 [ 2296.498389][T23643] smc: ib device syz2 port 1 has pnetid [ 2297.185955][ T8] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 2297.371349][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2297.391239][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 2297.414871][T23730] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 58728 - 0 [ 2297.427157][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2297.434398][T23730] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 58728 - 0 [ 2297.445129][T23730] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 58728 - 0 [ 2297.463470][ T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2297.473058][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.490649][T23730] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 58728 - 0 [ 2297.501064][ T8] usb 5-1: Product: syz [ 2297.511848][ T8] usb 5-1: Manufacturer: syz [ 2297.512444][T23730] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 49864 - 0 [ 2297.516583][ T8] usb 5-1: SerialNumber: syz [ 2297.540700][T23730] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 49864 - 0 [ 2297.549572][T23730] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 49864 - 0 [ 2297.562176][ T8] usb 5-1: config 0 descriptor?? [ 2297.573232][ T8] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2297.588714][T23730] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 49864 - 0 [ 2297.607955][T23730] geneve10: entered promiscuous mode [ 2297.613501][T23730] geneve10: entered allmulticast mode [ 2297.733958][T23726] loop5: detected capacity change from 0 to 32768 [ 2297.792413][ T8] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2297.819997][ T8] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 2298.092229][ T8] usb 5-1: USB disconnect, device number 48 [ 2298.266820][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28415'. [ 2298.276714][T23763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28415'. [ 2299.643565][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2299.817271][T23853] netlink: 'syz.4.28448': attribute type 15 has an invalid length. [ 2299.825320][T23853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28448'. [ 2300.303381][ T8024] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2300.494722][ T8024] usb 5-1: Using ep0 maxpacket: 8 [ 2300.506843][ T8024] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 2300.520118][ T8024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.546843][ T8024] usb 5-1: config 0 has no interface number 0 [ 2300.559428][ T8024] usb 5-1: config 0 interface 52 has no altsetting 0 [ 2300.591754][ T8024] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2300.617488][ T8024] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2300.645722][T23901] netlink: 'syz.5.28462': attribute type 10 has an invalid length. [ 2300.653198][ T8024] usb 5-1: Manufacturer: syz [ 2300.668190][ T8024] usb 5-1: config 0 descriptor?? [ 2300.685837][T23901] netlink: 40 bytes leftover after parsing attributes in process `syz.5.28462'. [ 2300.688870][ T8024] hub 5-1:0.52: bad descriptor, ignoring hub [ 2300.716404][ T8024] hub: probe of 5-1:0.52 failed with error -5 [ 2300.722844][T23901] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 2300.730101][T23901] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2300.738163][T23901] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2300.960657][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2301.141499][ T9569] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2301.151452][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 2301.165974][ T8] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2301.176147][ T8] usb 1-1: config 0 has no interface number 0 [ 2301.182793][ T8] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2301.194274][ T8] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2301.207119][ T8] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2301.232981][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.241639][ T8024] usb 5-1: USB disconnect, device number 49 [ 2301.251312][ T8] usb 1-1: Product: syz [ 2301.264661][ T8] usb 1-1: Manufacturer: syz [ 2301.271310][ T8] usb 1-1: SerialNumber: syz [ 2301.285647][ T8] usb 1-1: config 0 descriptor?? [ 2301.325018][ T9569] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2301.337634][ T9569] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2301.348422][ T9569] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2301.374428][ T9569] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2301.384806][ T9569] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2301.394457][ T9569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.408874][ T9569] usb 6-1: config 0 descriptor?? [ 2301.492910][ T8] radio-si470x 1-1:0.35: this is not a si470x device. [ 2301.547419][T23950] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 2301.655728][ T9569] hdpvr 6-1:0.0: firmware version 0x12 dated [ 2301.685244][ T8] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 2301.732933][ T8] usb 1-1: USB disconnect, device number 9 [ 2301.845019][ T9569] hdpvr 6-1:0.0: device init failed [ 2301.874425][ T9569] hdpvr: probe of 6-1:0.0 failed with error -12 [ 2301.892170][ T9569] usb 6-1: USB disconnect, device number 40 [ 2301.918755][T23973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28480'. [ 2302.059058][T23982] netlink: 'syz.4.28482': attribute type 1 has an invalid length. [ 2302.069497][T23982] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.28482'. [ 2302.079387][T23982] netlink: 'syz.4.28482': attribute type 1 has an invalid length. [ 2302.262805][T23992] netlink: 830 bytes leftover after parsing attributes in process `syz.2.28486'. [ 2302.434868][T24005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28490'. [ 2302.486930][T24005] netlink: ct family unspecified [ 2302.491954][T24005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2302.531044][T24010] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2302.592411][T24006] loop4: detected capacity change from 0 to 4096 [ 2302.733567][T24018] netlink: 'syz.2.28494': attribute type 1 has an invalid length. [ 2303.197493][T24051] openvswitch: netlink: Actions may not be safe on all matching packets [ 2303.809806][T24075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2303.837512][T24075] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2303.902333][T24075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2303.918033][T24075] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2303.987801][T24098] loop4: detected capacity change from 0 to 1764 [ 2304.024503][T24098] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2304.665907][ T8024] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2304.865755][ T8024] usb 1-1: Using ep0 maxpacket: 32 [ 2304.912746][ T8024] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2304.946065][ T8024] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2304.976603][ T8024] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2304.989953][ T23] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2305.006579][ T8024] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2305.034474][ T8024] usb 1-1: Product: syz [ 2305.046923][ T8024] usb 1-1: Manufacturer: syz [ 2305.073204][ T8024] hub 1-1:4.0: USB hub found [ 2305.199099][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 2305.230490][ T23] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 2305.250177][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.286278][ T23] usb 6-1: Product: syz [ 2305.286381][ T8024] hub 1-1:4.0: 5 ports detected [ 2305.295979][ T23] usb 6-1: Manufacturer: syz [ 2305.315469][ T23] usb 6-1: SerialNumber: syz [ 2305.320405][ T8024] hub 1-1:4.0: insufficient power available to use all downstream ports [ 2305.333034][ T23] usb 6-1: config 0 descriptor?? [ 2305.373429][ T23] gspca_main: spca508-2.14.0 probing 041e:4018 [ 2305.479985][ T8024] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 2305.504161][ T8024] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 2305.598915][ T8024] usb 1-1: USB disconnect, device number 10 [ 2305.732569][ T9161] Bluetooth: hci0: command tx timeout [ 2305.761709][ T23] gspca_spca508: reg_read err -71 [ 2305.767539][ T23] gspca_spca508: reg_read err -71 [ 2305.777345][ T23] gspca_spca508: reg_read err -71 [ 2305.790332][ T23] gspca_spca508: reg_read err -71 [ 2305.799295][ T23] gspca_spca508: reg write: error -71 [ 2305.809106][ T9161] Bluetooth: hci3: command 0x0406 tx timeout [ 2305.818764][ T23] spca508: probe of 6-1:0.0 failed with error -71 [ 2305.835446][ T23] usb 6-1: USB disconnect, device number 41 [ 2306.927306][T24209] loop4: detected capacity change from 0 to 32768 [ 2306.939570][T24249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28562'. [ 2307.310862][T24272] Cannot find del_set index 1536 as target [ 2307.398661][T24281] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 2307.714377][ T9161] Bluetooth: hci0: command tx timeout [ 2307.790509][ T9161] Bluetooth: hci3: command 0x0406 tx timeout [ 2308.526858][T24304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2308.527204][T24304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2308.828628][ T9571] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2309.041319][ T9571] usb 5-1: Using ep0 maxpacket: 16 [ 2309.070891][ T9571] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2309.088853][ T9571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.097528][T24385] veth1_to_bridge: entered allmulticast mode [ 2309.107118][ T9571] usb 5-1: Product: syz [ 2309.111314][ T9571] usb 5-1: Manufacturer: syz [ 2309.123755][ T9571] usb 5-1: SerialNumber: syz [ 2309.140945][ T9571] usb 5-1: config 0 descriptor?? [ 2309.146115][ T8024] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2309.167308][ T9571] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2309.182706][ T9571] usb 5-1: Detected FT-X [ 2309.364979][ T8024] usb 6-1: Using ep0 maxpacket: 8 [ 2309.382423][ T9571] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2309.399260][ T8024] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2309.410002][T24390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2309.416395][ T9571] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2309.424676][T24390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2309.430884][ T8024] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2309.441718][ T9571] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2309.454259][ T9571] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2309.462480][ T8024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2309.485841][ T8024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2309.511435][ T9571] usb 5-1: USB disconnect, device number 50 [ 2309.532200][ T9571] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2309.541968][ T8024] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2309.577283][ T9571] ftdi_sio 5-1:0.0: device disconnected [ 2309.583198][ T8024] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2309.606771][ T8024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.064835][ T23] usb 6-1: USB disconnect, device number 42 [ 2310.950605][T24497] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2311.219732][ T9161] Bluetooth: hci0: command tx timeout [ 2311.372431][ T9161] Bluetooth: hci3: command 0x0406 tx timeout [ 2311.403473][T24515] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 2311.531820][T24521] loop0: detected capacity change from 0 to 8 [ 2311.601828][T24521] SQUASHFS error: Failed to read block 0x6fc: -5 [ 2311.659292][T24521] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 2311.938095][T24548] loop5: detected capacity change from 0 to 256 [ 2312.322506][T24566] loop4: detected capacity change from 0 to 256 [ 2312.356552][T24566] exfat: Deprecated parameter 'utf8' [ 2312.361988][T24566] exfat: Deprecated parameter 'utf8' [ 2312.421210][T24566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 2312.421372][T24575] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2312.603577][T24581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.28658'. [ 2312.656162][T24581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.28658'. [ 2312.839223][T24597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.28664'. [ 2312.870580][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28664'. [ 2312.886096][T24597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28664'. [ 2313.166855][T24616] loop5: detected capacity change from 0 to 512 [ 2313.209347][T24616] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 2313.255855][T24616] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 2313.266639][T24616] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.28669: Corrupt directory, running e2fsck is recommended [ 2313.283158][T24616] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 2313.292761][T24616] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.28669: corrupted in-inode xattr: e_name out of bounds [ 2313.310665][T24616] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.28669: couldn't read orphan inode 15 (err -117) [ 2313.326446][T24616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2313.354463][T24616] EXT4-fs error (device loop5): ext4_xattr_set_entry:1670: inode #2: comm syz.5.28669: corrupted xattr entries [ 2313.406355][T22890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2313.567671][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28677'. [ 2314.234647][T24675] netlink: 'syz.5.28691': attribute type 27 has an invalid length. [ 2314.639257][ T8024] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2314.810963][ T8024] usb 6-1: Using ep0 maxpacket: 32 [ 2314.822165][ T8024] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 2314.839031][ T8024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.867791][ T8024] usb 6-1: config 0 has no interface number 0 [ 2314.886860][ T8024] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 2314.925901][ T8024] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2314.979460][ T8024] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 2314.991273][ T8024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.019572][ T8024] usb 6-1: Product: syz [ 2315.039107][ T8024] usb 6-1: Manufacturer: syz [ 2315.043788][ T8024] usb 6-1: SerialNumber: syz [ 2315.068842][ T8024] usb 6-1: config 0 descriptor?? [ 2315.075190][T24681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2315.094687][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28709'. [ 2315.118334][ T8024] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2315.451285][ T8024] usb 6-1: USB disconnect, device number 43 [ 2315.829975][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2316.039503][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 2316.058286][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2316.077771][ T8] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.133985][ T8] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2316.157539][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.173649][ T8] usb 3-1: Product: syz [ 2316.182683][ T8] usb 3-1: Manufacturer: syz [ 2316.187365][ T8] usb 3-1: SerialNumber: syz [ 2316.449645][ T8] usb 3-1: Invalid number of CPorts: 0 [ 2316.465945][ T8] es2_ap_driver: probe of 3-1:7.0 failed with error -22 [ 2316.681556][ T8] usb 3-1: USB disconnect, device number 24 [ 2316.765222][T24843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28739'. [ 2316.776887][T24843] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28739'. [ 2316.981820][T24854] loop4: detected capacity change from 0 to 128 [ 2317.009454][T24854] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2317.011185][ T9569] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2317.086649][T16784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2317.229963][ T9569] usb 1-1: Using ep0 maxpacket: 8 [ 2317.242551][ T9569] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2317.254888][ T9569] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2317.269141][ T9569] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2317.287669][ T9569] usb 1-1: Product: syz [ 2317.294419][ T9569] usb 1-1: Manufacturer: syz [ 2317.310591][ T9569] usb 1-1: SerialNumber: syz [ 2317.537810][ T9569] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2317.547295][ T9569] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2317.563620][ T9569] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2317.709946][T24891] loop4: detected capacity change from 0 to 1024 [ 2317.735853][ T9569] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 2317.751865][T24891] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 2317.772286][ T9569] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 2317.790010][ T9569] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2317.806761][T24891] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2317.807387][ T9569] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2317.840359][ T9569] usb 1-1: USB disconnect, device number 11 [ 2317.860950][ T9569] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2317.871901][T24891] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 2317.888234][ T9569] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2317.900124][ T9569] visor 1-1:1.0: device disconnected [ 2317.942839][T24891] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2317.981274][T24891] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.28752: Inode bitmap for bg 0 marked uninitialized [ 2318.039564][T24891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2318.164016][T24891] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.28752: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 2318.308390][T16784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2319.117075][T24991] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2319.443789][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28787'. [ 2319.573598][ T8024] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2319.773275][ T8024] usb 5-1: Using ep0 maxpacket: 32 [ 2319.780512][ T8024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2319.831435][ T8024] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 2319.854238][ T8024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.872456][ T8024] usb 5-1: Product: syz [ 2319.876674][ T8024] usb 5-1: Manufacturer: syz [ 2319.897668][ T8024] usb 5-1: SerialNumber: syz [ 2319.908822][ T8024] usb 5-1: config 0 descriptor?? [ 2320.124209][T25059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28802'. [ 2320.136033][ T8024] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro FD v12 fw v238.0.0 (2 channels) [ 2320.194913][T25062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.28804'. [ 2320.328408][ T8024] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 2320.348300][ T8024] peak_usb 5-1:0.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71) [ 2320.421734][ T8024] peak_usb: probe of 5-1:0.0 failed with error -71 [ 2320.435602][ T8024] usb 5-1: USB disconnect, device number 51 [ 2320.668739][ T9571] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 2320.688122][ T9569] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2320.869009][ T9569] usb 1-1: Using ep0 maxpacket: 16 [ 2320.872056][ T9571] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2320.883060][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2320.887362][ T9569] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2320.903555][ T9569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.912286][ T9569] usb 1-1: Product: syz [ 2320.912915][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2320.916755][ T9569] usb 1-1: Manufacturer: syz [ 2320.940527][ T9569] usb 1-1: SerialNumber: syz [ 2320.946234][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2320.955476][ T9569] r8152-cfgselector 1-1: config 0 descriptor?? [ 2320.989491][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2321.012044][ T9571] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2321.021633][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2321.049803][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2321.065119][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2321.088705][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2321.118767][ T9571] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2321.126797][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2321.147003][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2321.166865][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2321.191467][T25120] loop4: detected capacity change from 0 to 2048 [ 2321.198308][ T9571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2321.214930][ T9571] usb 3-1: string descriptor 0 read error: -22 [ 2321.225895][ T9571] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2321.239935][T25122] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2321.245003][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.303862][ T9571] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2321.313180][T25120] syz.4.28819: attempt to access beyond end of device [ 2321.313180][T25120] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 2321.336238][T25120] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 2321.345965][T25120] NILFS (loop4): error -5 truncating bmap (ino=16) [ 2321.395170][ T9569] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2321.419466][ T9569] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 2321.591388][ T9571] usb 3-1: USB disconnect, device number 25 [ 2322.269807][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28832'. [ 2322.667313][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28840'. [ 2322.922782][ T28] audit: type=1326 audit(2369.403:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2322.982403][ T28] audit: type=1326 audit(2369.403:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.053971][ T28] audit: type=1326 audit(2369.403:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.124824][ T28] audit: type=1326 audit(2369.403:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.201045][ T28] audit: type=1326 audit(2369.403:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.291520][ T28] audit: type=1326 audit(2369.403:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.304470][T25239] SET target dimension over the limit! [ 2323.326516][T25242] netlink: 'syz.5.28856': attribute type 12 has an invalid length. [ 2323.338218][ T28] audit: type=1326 audit(2369.403:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.361682][T25242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.28856'. [ 2323.391551][ T28] audit: type=1326 audit(2369.403:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.489104][ T28] audit: type=1326 audit(2369.403:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.4.28847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2323.547598][ T28] audit: type=1400 audit(2369.571:4520): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=25226 comm="syz.2.28849" [ 2323.601779][T25258] loop0: detected capacity change from 0 to 256 [ 2323.610257][T25258] exfat: Deprecated parameter 'utf8' [ 2323.615941][T25258] exfat: Deprecated parameter 'namecase' [ 2323.622176][T25258] exfat: Deprecated parameter 'namecase' [ 2323.676662][T25258] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 2323.793283][ T9569] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 2323.997629][ T9569] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 2324.009710][ T9569] usb 6-1: config 0 has no interface number 0 [ 2324.034092][ T9569] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2324.050311][ T9569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.068767][ T9569] usb 6-1: Product: syz [ 2324.074538][ T9569] usb 6-1: Manufacturer: syz [ 2324.086867][ T9569] usb 6-1: SerialNumber: syz [ 2324.117994][ T9569] usb 6-1: config 0 descriptor?? [ 2324.128665][ T9569] hub 6-1:0.132: bad descriptor, ignoring hub [ 2324.134898][ T9569] hub: probe of 6-1:0.132 failed with error -5 [ 2324.148452][ T9569] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input128 [ 2324.651108][ T9571] usb 6-1: USB disconnect, device number 44 [ 2324.725709][T25280] loop0: detected capacity change from 0 to 32768 [ 2324.781725][T25280] ERROR: (device loop0): diNewExt: no free extents [ 2324.781725][T25280] [ 2324.795545][T25280] ERROR: (device loop0): remounting filesystem as read-only [ 2324.825909][T25280] ialloc: diAlloc returned -5! [ 2324.833543][T25326] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 2325.740892][T25398] Cannot find del_set index 2 as target [ 2325.972826][T25405] qrtr: Invalid version 15 [ 2326.045280][T25370] loop0: detected capacity change from 0 to 32768 [ 2326.101526][T25370] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 2326.110262][T25370] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 2326.202063][T25370] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 2326.241845][ T8024] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 2326.249227][ T8024] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 2326.341367][ T8024] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms [ 2326.373658][ T8024] gfs2: fsid=syz:syz.0: jid=0: Done [ 2326.384797][T25370] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 2326.422543][ T9569] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2326.622862][ T9569] usb 6-1: Using ep0 maxpacket: 16 [ 2326.630010][ T9569] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2326.631713][ T8024] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2326.650246][ T9569] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2326.670192][ T9569] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2326.680303][ T9569] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2326.690443][ T9569] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2326.700642][ T9569] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2326.707307][ T9569] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2326.716539][ T9569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.725398][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.761013][ T9569] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 2326.908541][ T8024] usb 3-1: Using ep0 maxpacket: 16 [ 2326.924315][ T8024] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 2326.949598][ T8024] usb 3-1: config 254 has no interface number 0 [ 2326.972262][ T8024] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 2326.979959][ T9569] scsi host1: usb-storage 6-1:1.0 [ 2326.996082][ T8024] usb 3-1: config 254 interface 235 has no altsetting 0 [ 2327.029929][ T8024] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 2327.058203][ T8024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 2327.078132][ T8024] usb 3-1: Product: syz [ 2327.108271][ T8024] usb 3-1: Manufacturer: syz [ 2327.112923][ T8024] usb 3-1: SerialNumber: syz [ 2327.136031][T25427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2327.169482][ T9569] usb 6-1: USB disconnect, device number 45 [ 2327.350405][ T8024] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 2327.365434][ T8024] usbtest: probe of 3-1:254.235 failed with error -71 [ 2327.390867][ T8024] usb 3-1: USB disconnect, device number 26 [ 2327.404945][T25498] openvswitch: netlink: Actions may not be safe on all matching packets [ 2327.842215][T25530] netlink: 256 bytes leftover after parsing attributes in process `syz.5.28921'. [ 2327.881724][ T9569] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 2328.082340][ T9569] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2328.099810][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2328.120465][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2328.175201][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2328.192991][T25550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2328.197249][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2328.246614][ T9569] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2328.261572][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2328.277167][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2328.290084][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2328.320953][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2328.347874][ T9569] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2328.355435][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2328.393988][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2328.417007][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2328.447813][ T9569] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2328.480306][ T9569] usb 1-1: string descriptor 0 read error: -22 [ 2328.486642][ T9569] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2328.513009][ T9569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.547940][ T9569] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2328.749811][T25581] loop5: detected capacity change from 0 to 64 [ 2328.821789][T25581] Trying to free block not in datazone [ 2328.848292][T25581] Trying to free block not in datazone [ 2328.859818][ T9569] usb 1-1: USB disconnect, device number 13 [ 2328.912360][T25581] Trying to free block not in datazone [ 2329.256702][T25618] loop4: detected capacity change from 0 to 256 [ 2329.410244][T25625] usb usb8: usbfs: process 25625 (syz.2.28950) did not claim interface 0 before use [ 2330.292055][T25670] CIFS mount error: No usable UNC path provided in device string! [ 2330.292055][T25670] [ 2330.318998][T25670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2330.494297][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28968'. [ 2330.523483][T25676] netlink: 56 bytes leftover after parsing attributes in process `syz.4.28968'. [ 2330.527493][T25678] ieee802154 phy1 wpan1: encryption failed: -22 [ 2330.600936][T25648] loop5: detected capacity change from 0 to 32768 [ 2330.934963][T25698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28973'. [ 2331.719327][T25744] tmpfs: Bad value for 'mpol' [ 2332.198927][T25776] xt_hashlimit: overflow, try lower: 18446744073709551614/9 [ 2332.537578][T25798] x_tables: duplicate entry at hook 1 [ 2332.645956][T25795] loop0: detected capacity change from 0 to 4096 [ 2332.661985][ T28] audit: type=1326 audit(2379.628:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.2.29010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2332.697802][T25795] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 2332.734729][ T28] audit: type=1326 audit(2379.628:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.2.29010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2332.748348][T25795] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 2332.800496][ T28] audit: type=1326 audit(2379.639:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.2.29010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2332.829981][T25795] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 2332.886617][ T28] audit: type=1326 audit(2379.639:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.2.29010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2332.923893][T25795] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 2332.975265][ T28] audit: type=1326 audit(2379.639:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25801 comm="syz.2.29010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0559c799 code=0x7ffc0000 [ 2332.980514][T25795] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 2333.021679][T25795] ntfs: volume version 3.1. [ 2333.738275][T25855] netlink: 5 bytes leftover after parsing attributes in process `syz.4.29027'. [ 2333.776397][ C0] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured! [ 2333.801548][T25855] infiniband syz0: set active [ 2333.857001][T25855] infiniband syz0: set active [ 2333.880509][ T8024] lo speed is unknown, defaulting to 1000 [ 2333.919684][ T8] lo speed is unknown, defaulting to 1000 [ 2333.945746][ T8] lo speed is unknown, defaulting to 1000 [ 2334.147896][ T9571] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2334.179346][T25882] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2334.349824][ T9571] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 2334.376939][ T9571] usb 3-1: config 0 has no interface number 0 [ 2334.390881][T25888] loop4: detected capacity change from 0 to 764 [ 2334.425168][ T9571] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 2334.444903][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.456170][ T9571] usb 3-1: Product: syz [ 2334.460381][ T9571] usb 3-1: Manufacturer: syz [ 2334.472663][T25888] rock: directory entry would overflow storage [ 2334.480885][T25888] rock: sig=0x4654, size=5, remaining=4 [ 2334.488679][ T9571] usb 3-1: SerialNumber: syz [ 2334.504473][ T9571] usb 3-1: config 0 descriptor?? [ 2334.529064][ T9571] peak_usb: probe of 3-1:0.99 failed with error 99 [ 2334.723376][ T9571] usb 3-1: USB disconnect, device number 27 [ 2335.116337][T25931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2335.133934][T25931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2335.331505][T25946] loop4: detected capacity change from 0 to 164 [ 2335.424052][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2335.609483][ T23] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2335.624141][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.662968][ T23] usb 1-1: config 0 descriptor?? [ 2336.012027][T25948] loop5: detected capacity change from 0 to 32768 [ 2336.051098][T25948] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.29052 (25948) [ 2336.070912][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 2336.108683][T25948] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2336.131842][ T23] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 2336.148203][T25948] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2336.157557][T25948] BTRFS info (device loop5): force zlib compression, level 3 [ 2336.181766][ T23] [drm] Initialized udl on minor 2 [ 2336.189779][T25948] BTRFS info (device loop5): force clearing of disk cache [ 2336.197541][ T23] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2336.206131][T25948] BTRFS info (device loop5): setting nodatasum [ 2336.227499][ T23] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2336.234573][T25948] BTRFS info (device loop5): allowing degraded mounts [ 2336.241398][T25948] BTRFS info (device loop5): enabling disk space caching [ 2336.249178][ T9569] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2336.276910][ T9569] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2336.286591][ T23] usb 1-1: USB disconnect, device number 14 [ 2336.300581][T25948] BTRFS info (device loop5): disk space caching is enabled [ 2336.308296][ T9569] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2336.491243][T25948] BTRFS info (device loop5): auto enabling async discard [ 2336.513158][T25948] BTRFS info (device loop5): rebuilding free space tree [ 2336.549085][T25948] BTRFS info (device loop5): disabling free space tree [ 2336.567029][T25948] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2336.592105][T25948] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2336.831993][T26020] loop4: detected capacity change from 0 to 2048 [ 2336.871130][T22890] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2336.896044][T26020] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2336.961689][T26020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2337.472495][ T9569] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 2337.654941][ T9569] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.665842][T26063] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 2337.696999][ T9569] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2337.697062][ T9569] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2337.697082][ T9569] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2337.703096][ T9569] usb 6-1: string descriptor 0 read error: -22 [ 2337.703230][ T9569] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 2337.703252][ T9569] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 2337.722663][ T9569] usb 6-1: 0:2 : does not exist [ 2337.758949][ T9569] usb-storage 6-1:1.1: USB Mass Storage device detected [ 2338.129742][ T9569] us122l: couldn't allocate write buffer [ 2338.136014][ T9569] snd-usb-us122l: probe of 6-1:1.1 failed with error -22 [ 2338.187519][ T9569] usb 6-1: USB disconnect, device number 46 [ 2338.720412][T26122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29087'. [ 2339.219414][T26154] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 2339.469924][T26168] loop0: detected capacity change from 0 to 64 [ 2339.494362][T26171] xt_limit: Overflow, try lower: 0/0 [ 2339.553161][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 2339.553177][ T28] audit: type=1800 audit(2386.861:4535): pid=26168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29103" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 2340.341691][T26182] loop5: detected capacity change from 0 to 32768 [ 2340.394139][T26182] JBD2: Ignoring recovery information on journal [ 2340.492252][ T9571] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2340.532726][T26182] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2340.691807][ T9571] usb 5-1: Using ep0 maxpacket: 8 [ 2340.702126][ T9571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2340.732697][ T9571] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2340.752231][ T9571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.781278][ T9571] usb 5-1: Product: syz [ 2340.795701][ T9571] usb 5-1: Manufacturer: syz [ 2340.804464][T22890] ocfs2: Unmounting device (7,5) on (node local) [ 2340.811441][ T9571] usb 5-1: SerialNumber: syz [ 2340.835901][ T9571] usb 5-1: config 0 descriptor?? [ 2340.845785][ T9571] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 2340.957534][T26237] xt_recent: hitcount (4294967293) is larger than allowed maximum (255) [ 2341.047579][ T9571] usb 5-1: USB disconnect, device number 52 [ 2341.207561][T26251] loop5: detected capacity change from 0 to 256 [ 2341.319209][T26251] FAT-fs (loop5): Directory bread(block 64) failed [ 2341.325233][T26255] netlink: 'syz.2.29126': attribute type 29 has an invalid length. [ 2341.349244][T26251] FAT-fs (loop5): Directory bread(block 65) failed [ 2341.360707][T26251] FAT-fs (loop5): Directory bread(block 66) failed [ 2341.367294][T26251] FAT-fs (loop5): Directory bread(block 67) failed [ 2341.422762][T26251] FAT-fs (loop5): Directory bread(block 68) failed [ 2341.438679][T26251] FAT-fs (loop5): Directory bread(block 69) failed [ 2341.439690][T26258] netlink: 'syz.2.29128': attribute type 12 has an invalid length. [ 2341.445831][T26251] FAT-fs (loop5): Directory bread(block 70) failed [ 2341.445865][T26251] FAT-fs (loop5): Directory bread(block 71) failed [ 2341.445945][T26251] FAT-fs (loop5): Directory bread(block 72) failed [ 2341.486662][T26251] FAT-fs (loop5): Directory bread(block 73) failed [ 2342.168837][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29141'. [ 2342.386331][T26316] tmpfs: Bad value for 'nr_inodes' [ 2342.993633][T26352] loop4: detected capacity change from 0 to 4096 [ 2343.024905][T26352] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 2343.026475][ T9569] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2343.128782][T26352] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 2343.159692][T26352] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 2343.180624][T26352] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 2343.246606][ T9569] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.273763][ T9569] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2343.293145][ T2916] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 2343.302664][ T9569] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 2343.338073][ T9569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.357842][ T9569] usb 1-1: Product: syz [ 2343.362722][ T9569] usb 1-1: Manufacturer: syz [ 2343.367798][ T9569] usb 1-1: SerialNumber: syz [ 2343.611195][ T9569] usb 1-1: 0:1 : does not exist [ 2343.625852][ T9569] usb 1-1: unit 0 not found! [ 2343.671539][ T9569] usb 1-1: USB disconnect, device number 15 [ 2344.492807][T26432] netlink: 'syz.5.29180': attribute type 1 has an invalid length. [ 2344.527571][T26408] loop4: detected capacity change from 0 to 32768 [ 2345.167499][T26463] netlink: 'syz.5.29190': attribute type 21 has an invalid length. [ 2345.197907][T26463] netlink: 132 bytes leftover after parsing attributes in process `syz.5.29190'. [ 2345.510437][T26477] loop4: detected capacity change from 0 to 128 [ 2345.554095][T26477] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2345.691840][T16784] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2345.908159][T26462] loop0: detected capacity change from 0 to 32768 [ 2345.969626][T26462] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.29189 (26462) [ 2345.997609][T26462] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2346.048179][T26462] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 2346.097224][T26462] BTRFS info (device loop0): force zlib compression, level 3 [ 2346.123755][T26462] BTRFS info (device loop0): force clearing of disk cache [ 2346.169952][T26462] BTRFS info (device loop0): setting nodatasum [ 2346.176184][T26462] BTRFS info (device loop0): allowing degraded mounts [ 2346.190552][T26514] loop5: detected capacity change from 0 to 128 [ 2346.207487][T26462] BTRFS info (device loop0): enabling disk space caching [ 2346.214569][T26462] BTRFS info (device loop0): disk space caching is enabled [ 2346.218003][T26514] hpfs: bad mount options. [ 2346.398966][T26462] BTRFS info (device loop0): auto enabling async discard [ 2346.446086][T26462] BTRFS info (device loop0): rebuilding free space tree [ 2346.486496][T26462] BTRFS info (device loop0): disabling free space tree [ 2346.493996][T26462] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2346.504697][T26462] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2346.863730][ T5770] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2347.864504][ T28] audit: type=1326 audit(2395.585:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.0.29229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5d279c799 code=0x0 [ 2347.886181][ C0] vkms_vblank_simulate: vblank timer overrun [ 2347.913001][T26561] loop5: detected capacity change from 0 to 32768 [ 2347.971915][T26561] jfs_strtoUCS: char2uni returned -22. [ 2347.977437][T26561] charset = euc-jp, char = 0xd4 [ 2348.366929][ T8024] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2348.499891][T26632] loop5: detected capacity change from 0 to 256 [ 2348.550202][ T8024] usb 3-1: Using ep0 maxpacket: 16 [ 2348.575633][ T8024] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2348.600974][ T8024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.619008][ T8024] usb 3-1: Product: syz [ 2348.628188][ T28] audit: type=1326 audit(2396.394:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2348.630408][T26632] FAT-fs (loop5): Directory bread(block 64) failed [ 2348.653294][ T8024] usb 3-1: Manufacturer: syz [ 2348.669968][ T8024] usb 3-1: SerialNumber: syz [ 2348.694214][ T8024] usb 3-1: config 0 descriptor?? [ 2348.701110][ T28] audit: type=1326 audit(2396.425:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2348.708315][T26632] FAT-fs (loop5): Directory bread(block 65) failed [ 2348.735473][ T8024] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 2348.745907][T26632] FAT-fs (loop5): Directory bread(block 66) failed [ 2348.757680][T26632] FAT-fs (loop5): Directory bread(block 67) failed [ 2348.774211][ T28] audit: type=1326 audit(2396.425:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2348.803758][T26632] FAT-fs (loop5): Directory bread(block 68) failed [ 2348.846698][T26632] FAT-fs (loop5): Directory bread(block 69) failed [ 2348.893374][T26632] FAT-fs (loop5): Directory bread(block 70) failed [ 2348.900001][T26632] FAT-fs (loop5): Directory bread(block 71) failed [ 2348.936164][ T28] audit: type=1326 audit(2396.425:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2348.968819][T26632] FAT-fs (loop5): Directory bread(block 72) failed [ 2348.972797][T26649] loop0: detected capacity change from 0 to 4096 [ 2348.993698][T26649] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 2348.993793][T26632] FAT-fs (loop5): Directory bread(block 73) failed [ 2349.045159][ T28] audit: type=1326 audit(2396.425:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2349.049364][ T8024] usb 3-1: USB disconnect, device number 28 [ 2349.123237][T26649] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 2349.128340][ T28] audit: type=1326 audit(2396.425:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2349.129949][T26649] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 2349.152063][ C0] vkms_vblank_simulate: vblank timer overrun [ 2349.216013][ T28] audit: type=1326 audit(2396.425:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2349.298060][ T28] audit: type=1326 audit(2396.436:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2349.331817][T27515] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 2349.359823][ T28] audit: type=1326 audit(2396.436:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26636 comm="syz.4.29238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a659c799 code=0x7ffc0000 [ 2349.388665][ T5770] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 2349.398927][ T5770] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 2349.405996][ T5770] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 2349.441812][T23984] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 2349.463117][T26673] loop5: detected capacity change from 0 to 2048 [ 2349.518636][T26673] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=2362, location=2362 [ 2349.570402][T26673] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2349.603464][T26673] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 2349.668679][T26673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2349.779469][T26689] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2349.786037][T26689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2349.819230][T26689] vhci_hcd vhci_hcd.0: Device attached [ 2349.910353][T26690] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 2349.933690][T12588] vhci_hcd: stop threads [ 2349.938025][T12588] vhci_hcd: release socket [ 2349.963791][T12588] vhci_hcd: disconnect device [ 2350.017134][ T9571] vhci_hcd: vhci_device speed not set [ 2350.174254][T26713] netlink: 'syz.4.29254': attribute type 2 has an invalid length. [ 2350.206957][T26713] netlink: 'syz.4.29254': attribute type 2 has an invalid length. [ 2350.224793][T26713] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.29254'. [ 2350.691097][T26743] loop0: detected capacity change from 0 to 256 [ 2350.738330][T26743] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2351.345714][T26742] loop5: detected capacity change from 0 to 32768 [ 2351.353856][T26760] loop0: detected capacity change from 0 to 4096 [ 2351.421283][T26742] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2351.441291][T26760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2351.546211][T26760] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.29268: corrupted inode contents [ 2351.561101][T26760] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #15: comm syz.0.29268: mark_inode_dirty error [ 2351.573418][T26760] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.29268: corrupted inode contents [ 2351.588211][T26760] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.29268: mark_inode_dirty error [ 2351.610935][T26760] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.29268: corrupted inode contents [ 2351.623429][ T9571] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2351.633701][T26760] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.29268: mark_inode_dirty error [ 2351.660660][T26742] XFS (loop5): Ending clean mount [ 2351.660997][T26760] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.29268: corrupted inode contents [ 2351.699331][T26760] EXT4-fs error (device loop0): ext4_truncate:4294: inode #15: comm syz.0.29268: mark_inode_dirty error [ 2351.737886][T26760] EXT4-fs error (device loop0) in ext4_setattr:5663: Corrupt filesystem [ 2351.747409][T26780] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.29268: corrupted inode contents [ 2351.823922][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2351.827518][ T9571] usb 3-1: Using ep0 maxpacket: 8 [ 2351.848360][T26754] loop4: detected capacity change from 0 to 32768 [ 2351.861254][ T9571] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2351.876300][ T9571] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2351.888451][T26754] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.29266 (26754) [ 2351.922621][ T9571] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2351.932581][ T9571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.971416][T26754] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2352.002860][T26754] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 2352.029277][T22890] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2352.030346][T26754] BTRFS info (device loop4): enabling ssd optimizations [ 2352.087126][T26754] BTRFS info (device loop4): not using ssd optimizations [ 2352.104705][T26754] BTRFS info (device loop4): turning off barriers [ 2352.121305][T26754] BTRFS info (device loop4): using free space tree [ 2352.191185][ T9571] usb 3-1: USB disconnect, device number 29 [ 2352.321988][T26814] netlink: 296 bytes leftover after parsing attributes in process `syz.0.29272'. [ 2352.552105][T26754] BTRFS warning (device loop4): can't set the free_space_tree feature bit while mounted [ 2352.634426][T16784] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2353.256476][T26855] loop4: detected capacity change from 0 to 764 [ 2353.288821][T26859] netlink: 'syz.0.29282': attribute type 32 has an invalid length. [ 2353.313583][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29282'. [ 2353.352972][T26859] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 2353.360014][T26855] rock: directory entry would overflow storage [ 2353.397974][T26855] rock: sig=0x4f50, size=4, remaining=3 [ 2353.416378][T26855] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 2353.690993][T26905] loop5: detected capacity change from 0 to 512 [ 2353.773545][T26905] EXT4-fs (loop5): 1 truncate cleaned up [ 2353.791895][T26905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2353.845309][T22890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2353.908680][T26918] loop0: detected capacity change from 0 to 64 [ 2354.138972][T26930] loop5: detected capacity change from 0 to 1024 [ 2354.161965][T26934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.29294'. [ 2354.221716][T26930] hfsplus: bad catalog entry type [ 2354.357859][T14026] hfsplus: b-tree write err: -5, ino 25 [ 2354.370905][T14026] hfsplus: b-tree write err: -5, ino 4 [ 2354.384960][T14026] hfsplus: b-tree write err: -5, ino 2 [ 2354.537659][T26949] netlink: 35 bytes leftover after parsing attributes in process `syz.5.29298'. [ 2354.604195][T26952] ax25_connect(): syz.2.29299 uses autobind, please contact jreuter@yaina.de [ 2355.134934][T26982] loop4: detected capacity change from 0 to 512 [ 2355.183950][T26982] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.29309: invalid indirect mapped block 256 (level 2) [ 2355.245124][T26982] EXT4-fs (loop4): 2 truncates cleaned up [ 2355.256765][T30098] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2355.278739][T26982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2355.333699][T26982] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.29309: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 2355.351623][T26964] loop0: detected capacity change from 0 to 40427 [ 2355.387401][T26964] F2FS-fs (loop0): invalid crc value [ 2355.412087][T26964] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2355.464681][T30098] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.479638][T16784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2355.487376][T30098] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2355.498373][T26964] F2FS-fs (loop0): Start checkpoint disabled! [ 2355.543294][T30098] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2355.553914][T26964] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2355.581215][T30098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.631763][T26995] overlayfs: workdir and upperdir must be separate subtrees [ 2355.632183][T30098] usb 6-1: config 0 descriptor?? [ 2355.660618][T30098] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2355.675802][T30098] dvb-usb: bulk message failed: -22 (3/0) [ 2355.711310][T30098] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2355.725911][T30098] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2355.752168][T30098] usb 6-1: media controller created [ 2355.759167][T30098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2355.807913][T30098] dvb-usb: bulk message failed: -22 (6/0) [ 2355.822524][T30098] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2355.840038][T30098] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129 [ 2355.885823][T30098] dvb-usb: schedule remote query interval to 150 msecs. [ 2355.931764][T30098] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2355.990486][T30098] usb 6-1: USB disconnect, device number 47 [ 2356.052592][T30098] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2356.062618][T12588] kworker/u4:1: attempt to access beyond end of device [ 2356.062618][T12588] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 2356.120869][T12588] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2356.138399][T12588] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2356.146391][T12588] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2356.155618][T12588] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2356.164754][T12588] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2356.677421][T27056] program syz.5.29322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2356.783246][T27064] loop5: detected capacity change from 0 to 8 [ 2357.446364][T27106] loop5: detected capacity change from 0 to 512 [ 2357.447173][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2357.447185][ T28] audit: type=1326 audit(2405.632:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2357.464878][T27106] journal_path: Lookup failure for './file0' [ 2357.542720][T27106] EXT4-fs: error: could not find journal device path [ 2357.543412][ T28] audit: type=1326 audit(2405.632:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2357.592153][ T8024] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2357.656865][ T28] audit: type=1326 audit(2405.642:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe85839c799 code=0x7ffc0000 [ 2357.730706][ T28] audit: type=1326 audit(2405.642:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe85839c502 code=0x7ffc0000 [ 2357.780289][T27119] loop5: detected capacity change from 0 to 64 [ 2357.809760][ T8024] usb 5-1: Using ep0 maxpacket: 8 [ 2357.818205][ T28] audit: type=1326 audit(2405.642:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe85835cfce code=0x7ffc0000 [ 2357.843396][ T8024] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 2357.885290][ T8024] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2357.894385][ T8024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.907880][T27124] tipc: Started in network mode [ 2357.913528][T27124] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 2357.932813][ T8024] usb 5-1: Product: syz [ 2357.937151][ T28] audit: type=1326 audit(2405.642:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe85839c5c7 code=0x7ffc0000 [ 2357.937231][T27124] tipc: Enabled bearer , priority 12 [ 2357.959591][ T8024] usb 5-1: Manufacturer: syz [ 2358.011930][ T8024] usb 5-1: SerialNumber: syz [ 2358.020348][ T28] audit: type=1326 audit(2405.642:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe85835cfce code=0x7ffc0000 [ 2358.049287][ T8024] usb 5-1: config 0 descriptor?? [ 2358.094870][ T28] audit: type=1326 audit(2405.642:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe85839c42b code=0x7ffc0000 [ 2358.107332][ T8024] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2358.151193][ T8024] usb 5-1: setting power ON [ 2358.160910][ T28] audit: type=1326 audit(2405.663:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe85835cfce code=0x7ffc0000 [ 2358.165488][ T8024] dvb-usb: bulk message failed: -22 (2/0) [ 2358.220860][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2358.261214][T27130] sp0: Synchronizing with TNC [ 2358.262695][ T8024] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2358.295988][ T8024] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2358.314886][ T8024] usb 5-1: media controller created [ 2358.345499][ T28] audit: type=1326 audit(2405.663:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.5.29337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe85835cfce code=0x7ffc0000 [ 2358.355965][ T8024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2358.435459][ T8024] usb 5-1: selecting invalid altsetting 6 [ 2358.471608][ T8024] usb 5-1: digital interface selection failed (-22) [ 2358.488772][ T8024] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2358.510825][ T8024] usb 5-1: setting power OFF [ 2358.535185][ T8024] dvb-usb: bulk message failed: -22 (2/0) [ 2358.557795][ T8024] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2358.590127][ T8024] (NULL device *): no alternate interface [ 2358.685839][ T8024] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2358.691358][T27155] vlan2: entered promiscuous mode [ 2358.710990][ T8024] usb 5-1: USB disconnect, device number 53 [ 2358.738203][T27155] bridge0: entered promiscuous mode [ 2359.003658][T30098] tipc: Node number set to 15444650 [ 2359.040186][T27180] netlink: 80 bytes leftover after parsing attributes in process `syz.4.29352'. [ 2359.062399][T27180] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29352'. [ 2359.075354][T27183] Bluetooth: MGMT ver 1.22 [ 2359.235775][T27196] devpts: called with bogus options [ 2359.389821][T27202] loop5: detected capacity change from 0 to 1024 [ 2359.457500][ T8024] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2359.465472][T27202] hfsplus: bad catalog entry type [ 2359.592063][T27515] hfsplus: b-tree write err: -5, ino 25 [ 2359.597850][T27515] hfsplus: b-tree write err: -5, ino 4 [ 2359.613892][T27515] hfsplus: b-tree write err: -5, ino 2 [ 2359.680166][ T8024] usb 3-1: Using ep0 maxpacket: 32 [ 2359.687345][ T8024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2359.703042][ T8024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2359.733823][ T8024] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2359.742923][ T8024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.789160][ T8024] usb 3-1: config 0 descriptor?? [ 2359.812595][ T8024] hub 3-1:0.0: USB hub found [ 2360.011769][ T8024] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 2360.189784][T27246] loop5: detected capacity change from 0 to 1024 [ 2360.228826][ T8024] usbhid 3-1:0.0: can't add hid device: -71 [ 2360.257628][ T8024] usbhid: probe of 3-1:0.0 failed with error -71 [ 2360.315585][ T8024] usb 3-1: USB disconnect, device number 30 [ 2360.657017][T27241] loop4: detected capacity change from 0 to 32768 [ 2360.682989][T27241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.29370 (27241) [ 2360.734236][T27241] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2360.762784][T27241] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 2360.771644][T27241] BTRFS info (device loop4): enabling auto defrag [ 2360.818031][T27241] BTRFS info (device loop4): use no compression [ 2360.848248][T27241] BTRFS info (device loop4): max_inline at 4096 [ 2360.854549][T27241] BTRFS info (device loop4): using free space tree [ 2360.984661][T27241] BTRFS info (device loop4): enabling ssd optimizations [ 2361.004208][T27241] BTRFS info (device loop4): auto enabling async discard [ 2361.042487][T27308] loop0: detected capacity change from 0 to 1024 [ 2361.141518][T27308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2361.172386][ T9571] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2361.199243][T16784] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2361.283504][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2361.387485][ T9571] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2361.418670][ T9571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.451659][ T9571] usb 3-1: Product: syz [ 2361.458251][ T9571] usb 3-1: Manufacturer: syz [ 2361.466990][ T9571] usb 3-1: SerialNumber: syz [ 2361.481204][ T9571] usb 3-1: config 0 descriptor?? [ 2361.496684][ T9571] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2361.626164][T11279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop4 scanned by udevd (11279) [ 2361.952744][ T8024] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 2362.072800][ T9571] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 2362.083283][ T9571] sq905c: probe of 3-1:0.0 failed with error -71 [ 2362.098370][ T9571] usb 3-1: USB disconnect, device number 31 [ 2362.165534][ T8024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2362.180715][ T8024] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2362.200047][ T8024] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2362.227002][ T8024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.246873][ T8024] usb 5-1: config 0 descriptor?? [ 2362.260073][ T8024] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2362.281771][ T8024] dvb-usb: bulk message failed: -22 (3/0) [ 2362.307151][ T8024] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2362.334697][ T8024] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2362.343503][T27335] loop0: detected capacity change from 0 to 32768 [ 2362.359993][ T8024] usb 5-1: media controller created [ 2362.375187][ T8024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2362.390284][T27335] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2362.427561][ T8024] dvb-usb: bulk message failed: -22 (6/0) [ 2362.446972][ T8024] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2362.499682][ T8024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input130 [ 2362.549545][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 2362.574782][ T8024] dvb-usb: schedule remote query interval to 150 msecs. [ 2362.597446][ T8024] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2362.672811][ T8024] usb 5-1: USB disconnect, device number 54 [ 2362.803976][ T8024] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2362.824470][T27385] loop5: detected capacity change from 0 to 512 [ 2362.843846][T27385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2362.898843][T27385] EXT4-fs error (device loop5): ext4_orphan_get:1424: comm syz.5.29394: bad orphan inode 117440527 [ 2362.941871][T27385] EXT4-fs (loop5): Remounting filesystem read-only [ 2362.985436][T27385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2363.229997][T27401] loop0: detected capacity change from 0 to 512 [ 2363.237927][T22890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2363.328930][T27401] EXT4-fs (loop0): 1 truncate cleaned up [ 2363.365314][T27401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2363.693709][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2363.991016][T27403] loop4: detected capacity change from 0 to 32768 [ 2364.705934][T30098] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 2364.875832][T27469] loop4: detected capacity change from 0 to 256 [ 2364.897033][T27469] exfat: Deprecated parameter 'utf8' [ 2364.898206][T30098] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2364.911233][T27469] exfat: Deprecated parameter 'utf8' [ 2364.945404][T27469] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 2364.949421][T30098] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2364.996263][T30098] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2365.032704][T30098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2365.073892][T30098] usb 1-1: config 0 descriptor?? [ 2365.127708][T30098] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2365.139084][T30098] dvb-usb: bulk message failed: -22 (3/0) [ 2365.169503][T30098] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2365.194792][T27477] loop5: detected capacity change from 0 to 1024 [ 2365.209005][T30098] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2365.231278][T30098] usb 1-1: media controller created [ 2365.255889][T30098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2365.288168][T27477] hfsplus: bad catalog entry type [ 2365.304985][T30098] dvb-usb: bulk message failed: -22 (6/0) [ 2365.323794][T30098] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2365.375422][T30098] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input131 [ 2365.419352][T30098] dvb-usb: schedule remote query interval to 150 msecs. [ 2365.438897][T30098] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2365.441719][T14026] hfsplus: b-tree write err: -5, ino 25 [ 2365.478391][T30098] usb 1-1: USB disconnect, device number 16 [ 2365.482014][T14026] hfsplus: b-tree write err: -5, ino 4 [ 2365.511845][T14026] hfsplus: b-tree write err: -5, ino 2 [ 2365.546989][T30098] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2365.664830][T27517] loop4: detected capacity change from 0 to 512 [ 2365.743442][T27517] EXT4-fs (loop4): 1 truncate cleaned up [ 2365.763512][T27517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2365.851524][T16784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2366.125754][ T8024] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2366.246231][T27549] loop4: detected capacity change from 0 to 4096 [ 2366.276600][T27549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2366.325341][ T8024] usb 3-1: Using ep0 maxpacket: 16 [ 2366.332763][ T8024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2366.354563][ T8024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2366.386213][ T8024] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2366.424651][T27549] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.29427: corrupted inode contents [ 2366.455061][ T8024] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2366.475137][T27549] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #15: comm syz.4.29427: mark_inode_dirty error [ 2366.487891][ T8024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.508799][ T8024] usb 3-1: config 0 descriptor?? [ 2366.519424][T27549] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.29427: corrupted inode contents [ 2366.551466][T27549] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.29427: mark_inode_dirty error [ 2366.578221][T27549] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.29427: corrupted inode contents [ 2366.603292][T27568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2366.609851][T27568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2366.619872][T27568] vhci_hcd vhci_hcd.0: Device attached [ 2366.631239][T27549] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.29427: mark_inode_dirty error [ 2366.659607][T27549] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.29427: corrupted inode contents [ 2366.686072][T27549] EXT4-fs error (device loop4): ext4_truncate:4294: inode #15: comm syz.4.29427: mark_inode_dirty error [ 2366.728075][T27549] EXT4-fs error (device loop4) in ext4_setattr:5663: Corrupt filesystem [ 2366.742706][T27569] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 2366.754821][T27560] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.29427: corrupted inode contents [ 2366.761094][ T2916] vhci_hcd: stop threads [ 2366.780663][ T2916] vhci_hcd: release socket [ 2366.785765][ T2916] vhci_hcd: disconnect device [ 2366.810899][ T8] vhci_hcd: vhci_device speed not set [ 2366.900441][T16784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2366.924470][ T8024] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 2367.030561][ T8024] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2367.099984][ T8024] microsoft 0003:045E:07DA.0003: no inputs found [ 2367.136181][ T8024] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 2367.201778][ T8024] usb 3-1: USB disconnect, device number 32 [ 2367.309010][T27584] fido_id[27584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2367.478092][T27607] hsr0: entered promiscuous mode [ 2367.502396][T27607] macsec0: entered promiscuous mode [ 2367.571075][T27615] vlan2: entered promiscuous mode [ 2367.577205][T27615] gretap0: entered promiscuous mode [ 2367.682726][T27623] loop5: detected capacity change from 0 to 64 [ 2367.750738][T27624] loop4: detected capacity change from 0 to 2048 [ 2367.802474][T27624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2368.034778][ T2916] [ 2368.037152][ T2916] ====================================================== [ 2368.044173][ T2916] WARNING: possible circular locking dependency detected [ 2368.051289][ T2916] syzkaller #0 Not tainted [ 2368.055691][ T2916] ------------------------------------------------------ [ 2368.062726][ T2916] kworker/u4:8/2916 is trying to acquire lock: [ 2368.068861][ T2916] ffff88802fcf14c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 2368.078689][ T2916] [ 2368.078689][ T2916] but task is already holding lock: [ 2368.086140][ T2916] ffff88805f396bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 2368.096220][ T2916] [ 2368.096220][ T2916] which lock already depends on the new lock. [ 2368.096220][ T2916] [ 2368.106617][ T2916] [ 2368.106617][ T2916] the existing dependency chain (in reverse order) is: [ 2368.115609][ T2916] [ 2368.115609][ T2916] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 2368.124114][ T2916] percpu_down_read+0x44/0x1a0 [ 2368.129392][ T2916] ext4_writepages+0x1a4/0x350 [ 2368.134754][ T2916] do_writepages+0x3b3/0x630 [ 2368.139945][ T2916] __writeback_single_inode+0x153/0xec0 [ 2368.146087][ T2916] writeback_single_inode+0x21f/0x760 [ 2368.151968][ T2916] write_inode_now+0x183/0x210 [ 2368.157336][ T2916] iput+0x5ae/0x920 [ 2368.161653][ T2916] ext4_xattr_block_set+0x273f/0x32b0 [ 2368.167626][ T2916] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 2368.174126][ T2916] __ext4_expand_extra_isize+0x306/0x400 [ 2368.180271][ T2916] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 2368.186240][ T2916] ext4_evict_inode+0x7f3/0xea0 [ 2368.191664][ T2916] evict+0x4ca/0x8d0 [ 2368.196068][ T2916] ext4_orphan_cleanup+0xbec/0x1420 [ 2368.202030][ T2916] ext4_fill_super+0x5ed0/0x6790 [ 2368.207476][ T2916] get_tree_bdev+0x3f3/0x520 [ 2368.212743][ T2916] vfs_get_tree+0x8c/0x280 [ 2368.217663][ T2916] do_new_mount+0x24b/0xa40 [ 2368.222670][ T2916] __se_sys_mount+0x2e7/0x3d0 [ 2368.227851][ T2916] do_syscall_64+0x55/0xa0 [ 2368.232806][ T2916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2368.239223][ T2916] [ 2368.239223][ T2916] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 2368.246778][ T2916] __lock_acquire+0x2df1/0x7d40 [ 2368.252147][ T2916] lock_acquire+0x19e/0x420 [ 2368.257159][ T2916] down_write+0x97/0x200 [ 2368.261917][ T2916] ext4_destroy_inline_data+0x28/0xe0 [ 2368.267891][ T2916] ext4_do_writepages+0x4f0/0x3990 [ 2368.273515][ T2916] ext4_writepages+0x1dd/0x350 [ 2368.278886][ T2916] do_writepages+0x3b3/0x630 [ 2368.284090][ T2916] __writeback_single_inode+0x153/0xec0 [ 2368.290150][ T2916] writeback_sb_inodes+0x7cd/0xf50 [ 2368.295872][ T2916] wb_writeback+0x46a/0xbf0 [ 2368.301063][ T2916] wb_workfn+0x400/0xe60 [ 2368.305844][ T2916] process_scheduled_works+0xa5d/0x15d0 [ 2368.311900][ T2916] worker_thread+0xa55/0xfc0 [ 2368.316997][ T2916] kthread+0x2fa/0x390 [ 2368.321745][ T2916] ret_from_fork+0x48/0x80 [ 2368.326763][ T2916] ret_from_fork_asm+0x11/0x20 [ 2368.332130][ T2916] [ 2368.332130][ T2916] other info that might help us debug this: [ 2368.332130][ T2916] [ 2368.342430][ T2916] Possible unsafe locking scenario: [ 2368.342430][ T2916] [ 2368.349951][ T2916] CPU0 CPU1 [ 2368.355394][ T2916] ---- ---- [ 2368.360746][ T2916] rlock(&sbi->s_writepages_rwsem); [ 2368.366017][ T2916] lock(&ei->xattr_sem); [ 2368.372851][ T2916] lock(&sbi->s_writepages_rwsem); [ 2368.380555][ T2916] lock(&ei->xattr_sem); [ 2368.384878][ T2916] [ 2368.384878][ T2916] *** DEADLOCK *** [ 2368.384878][ T2916] [ 2368.393095][ T2916] 3 locks held by kworker/u4:8/2916: [ 2368.398543][ T2916] #0: ffff8880182ec938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2368.409928][ T2916] #1: ffffc9000bfa7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2368.422541][ T2916] #2: ffff88805f396bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 2368.433147][ T2916] [ 2368.433147][ T2916] stack backtrace: [ 2368.439018][ T2916] CPU: 0 PID: 2916 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 2368.446562][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2368.456623][ T2916] Workqueue: writeback wb_workfn (flush-7:4) [ 2368.462626][ T2916] Call Trace: [ 2368.465916][ T2916] [ 2368.468846][ T2916] dump_stack_lvl+0x18c/0x250 [ 2368.473522][ T2916] ? load_image+0x400/0x400 [ 2368.478025][ T2916] ? show_regs_print_info+0x20/0x20 [ 2368.483662][ T2916] ? print_circular_bug+0x12b/0x1a0 [ 2368.488853][ T2916] check_noncircular+0x2fc/0x400 [ 2368.493799][ T2916] ? print_deadlock_bug+0x5d0/0x5d0 [ 2368.499095][ T2916] ? lockdep_lock+0xf5/0x230 [ 2368.503688][ T2916] ? _find_first_zero_bit+0xd3/0x100 [ 2368.508984][ T2916] __lock_acquire+0x2df1/0x7d40 [ 2368.513932][ T2916] ? verify_lock_unused+0x140/0x140 [ 2368.519138][ T2916] ? verify_lock_unused+0x140/0x140 [ 2368.524494][ T2916] ? worker_thread+0xa55/0xfc0 [ 2368.529266][ T2916] ? stack_trace_save+0x100/0x100 [ 2368.534372][ T2916] ? verify_lock_unused+0x140/0x140 [ 2368.539571][ T2916] lock_acquire+0x19e/0x420 [ 2368.544089][ T2916] ? ext4_destroy_inline_data+0x28/0xe0 [ 2368.549659][ T2916] ? __might_sleep+0xe0/0xe0 [ 2368.554355][ T2916] ? read_lock_is_recursive+0x20/0x20 [ 2368.559733][ T2916] ? __might_sleep+0xe0/0xe0 [ 2368.564322][ T2916] ? register_lock_class+0xc4/0x8a0 [ 2368.569536][ T2916] down_write+0x97/0x200 [ 2368.573981][ T2916] ? ext4_destroy_inline_data+0x28/0xe0 [ 2368.579523][ T2916] ? down_read_killable+0x340/0x340 [ 2368.584799][ T2916] ? ext4_journal_check_start+0x178/0x250 [ 2368.590515][ T2916] ext4_destroy_inline_data+0x28/0xe0 [ 2368.595878][ T2916] ext4_do_writepages+0x4f0/0x3990 [ 2368.600993][ T2916] ? verify_lock_unused+0x140/0x140 [ 2368.606272][ T2916] ? mark_lock+0x94/0x320 [ 2368.610680][ T2916] ? mark_lock+0x94/0x320 [ 2368.614999][ T2916] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 2368.621864][ T2916] ? rcu_read_lock_any_held+0xb4/0x140 [ 2368.627612][ T2916] ? __lock_acquire+0x1347/0x7d40 [ 2368.632631][ T2916] ext4_writepages+0x1dd/0x350 [ 2368.637481][ T2916] ? ext4_read_folio+0x2f0/0x2f0 [ 2368.642417][ T2916] ? reacquire_held_locks+0x30e/0x5b0 [ 2368.648042][ T2916] ? writeback_sb_inodes+0x362/0xf50 [ 2368.653513][ T2916] ? ext4_read_folio+0x2f0/0x2f0 [ 2368.658450][ T2916] do_writepages+0x3b3/0x630 [ 2368.663134][ T2916] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 2368.669022][ T2916] ? writeback_sb_inodes+0x4b0/0xf50 [ 2368.674384][ T2916] ? __lock_acquire+0x7d40/0x7d40 [ 2368.679486][ T2916] ? do_raw_spin_lock+0x11f/0x2c0 [ 2368.684509][ T2916] __writeback_single_inode+0x153/0xec0 [ 2368.690069][ T2916] writeback_sb_inodes+0x7cd/0xf50 [ 2368.695171][ T2916] ? move_expired_inodes+0x321/0x730 [ 2368.700944][ T2916] ? queue_io+0x550/0x550 [ 2368.705300][ T2916] ? rcu_is_watching+0x15/0xb0 [ 2368.710277][ T2916] wb_writeback+0x46a/0xbf0 [ 2368.714895][ T2916] ? queue_io+0x3d1/0x550 [ 2368.719317][ T2916] ? percpu_ref_tryget+0x250/0x250 [ 2368.724711][ T2916] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2368.730889][ T2916] ? _raw_spin_unlock_irq+0x23/0x50 [ 2368.736294][ T2916] wb_workfn+0x400/0xe60 [ 2368.740541][ T2916] ? try_to_wake_up+0x70a/0x1190 [ 2368.745472][ T2916] ? inode_wait_for_writeback+0x230/0x230 [ 2368.751218][ T2916] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2368.757538][ T2916] ? read_lock_is_recursive+0x20/0x20 [ 2368.762991][ T2916] ? _raw_spin_unlock_irq+0x23/0x50 [ 2368.768180][ T2916] ? process_scheduled_works+0x96f/0x15d0 [ 2368.774073][ T2916] ? process_scheduled_works+0x96f/0x15d0 [ 2368.779780][ T2916] process_scheduled_works+0xa5d/0x15d0 [ 2368.785322][ T2916] ? worker_attach_to_pool+0x380/0x380 [ 2368.790773][ T2916] ? assign_work+0x3d2/0x5d0 [ 2368.795354][ T2916] worker_thread+0xa55/0xfc0 [ 2368.799973][ T2916] kthread+0x2fa/0x390 [ 2368.804034][ T2916] ? pr_cont_work+0x560/0x560 [ 2368.808698][ T2916] ? kthread_blkcg+0xd0/0xd0 [ 2368.813270][ T2916] ret_from_fork+0x48/0x80 [ 2368.817682][ T2916] ? kthread_blkcg+0xd0/0xd0 [ 2368.822261][ T2916] ret_from_fork_asm+0x11/0x20 [ 2368.827018][ T2916] [ 2368.844094][ T2916] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 2368.871672][ T2916] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2368.885548][ T2916] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2368.885548][ T2916] [ 2368.895930][ T2916] EXT4-fs (loop4): Total free blocks count 0 [ 2368.903142][ T2916] EXT4-fs (loop4): Free/Dirty block details [ 2368.912675][ T2916] EXT4-fs (loop4): free_blocks=4096 [ 2368.924102][ T2916] EXT4-fs (loop4): dirty_blocks=512 [ 2368.929715][ T2916] EXT4-fs (loop4): Block reservation details [ 2368.936684][ T2916] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 2368.947091][ T2916] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28