last executing test programs: 4m1.098234213s ago: executing program 0 (id=9880): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m59.073962791s ago: executing program 0 (id=9903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x345, 0x0, 0x9}, {0x29f, 0x0, 0x8}]}) 3m58.874353182s ago: executing program 0 (id=9904): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 3m58.650532115s ago: executing program 0 (id=9907): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0)={[{@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf}}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@minixdf}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 3m58.379374631s ago: executing program 0 (id=9909): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) 3m56.045244937s ago: executing program 0 (id=9931): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) 3m55.629725361s ago: executing program 32 (id=9931): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) 1.53835256s ago: executing program 3 (id=12962): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x70, 0x0, &(0x7f0000001040)) 1.441200726s ago: executing program 1 (id=12963): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.438416466s ago: executing program 4 (id=12964): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) 1.20166103s ago: executing program 4 (id=12967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) 1.20159613s ago: executing program 3 (id=12968): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1, 0x1, "05"}}) 1.156394863s ago: executing program 1 (id=12969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) 1.146523683s ago: executing program 2 (id=12970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4927}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 1.0218532s ago: executing program 3 (id=12971): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x8000000000000000, 0x6, 0x3, @scatter={0x0, 0x12, 0xfffffffffffffffd}, &(0x7f0000000240)="53b1caee61f2", 0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x0}) 884.744238ms ago: executing program 2 (id=12972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0xffff8000, 0x4) 883.899328ms ago: executing program 4 (id=12973): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000000)={0xfffe, 0x0, 0x100, 0x9, 0x0, 0x9, 0x1, 0x3, 0x40, 0x4, 0x40, 0x6, 0x0, 0x0, 0x0}) 802.539313ms ago: executing program 3 (id=12974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000090a010400000000000000000000000008000a400000000008000440ffffff000900010073797a3000000000080005400000001c090002"], 0xac}}, 0x0) 780.193644ms ago: executing program 1 (id=12975): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) 722.772548ms ago: executing program 2 (id=12976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x45f}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 618.383454ms ago: executing program 4 (id=12977): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ce, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op, @ioring_restriction_register_op={0x0, 0x21}], 0x2) 564.353857ms ago: executing program 1 (id=12978): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0xe3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x104}, 0x20) 504.41365ms ago: executing program 2 (id=12979): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x2, 0x1}, {0x60, 0x2}, @period={0x58, 0x96, 0x6, 0x1, 0x8001, {0x5, 0x10, 0x0, 0x5}, 0x0, 0x0}}) 500.4052ms ago: executing program 3 (id=12980): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdcedd9467f5cd2d6c4e8b3043614238ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESDEC=0x0], 0x11, 0x31b, &(0x7f0000000240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 365.840038ms ago: executing program 1 (id=12981): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 350.171059ms ago: executing program 4 (id=12982): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000340)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f\t\x00\x00\x00 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05\x06\x00\x00\x00\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdcGp\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') 252.554375ms ago: executing program 2 (id=12983): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) 28.655298ms ago: executing program 1 (id=12984): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) 27.933958ms ago: executing program 2 (id=12985): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0xfffffff9, 0x4) 14.744289ms ago: executing program 3 (id=12986): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f0000000040)={[{@uid}, {@codepage={'codepage', 0x3d, 'cp737'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x1, 0x31c, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 0s ago: executing program 4 (id=12987): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="140000000000060000071a80010061cc", 0x10) kernel console output (not intermixed with test programs): retap4 [ 1012.279699][T31015] FAT-fs (loop3): Directory bread(block 68) failed [ 1012.298446][T31021] ip6gretap4: entered allmulticast mode [ 1012.305635][T31015] FAT-fs (loop3): Directory bread(block 69) failed [ 1012.332376][T31015] FAT-fs (loop3): Directory bread(block 70) failed [ 1012.369066][T31015] FAT-fs (loop3): Directory bread(block 71) failed [ 1012.375801][T31015] FAT-fs (loop3): Directory bread(block 72) failed [ 1012.409869][T31015] FAT-fs (loop3): Directory bread(block 73) failed [ 1012.525901][T31004] REISERFS (device loop2): Using tea hash to sort names [ 1012.568687][T31004] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1012.619825][T31025] loop4: detected capacity change from 0 to 512 [ 1012.672379][T31025] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1012.738190][T31025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1012.781706][T31025] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.11396: bad orphan inode 131083 [ 1012.784220][T31024] loop1: detected capacity change from 0 to 4096 [ 1012.817418][T31024] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1012.863634][T31025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.022051][T27680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.254481][T31031] ipt_REJECT: ECHOREPLY no longer supported. [ 1013.423130][T31035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11399'. [ 1013.899469][T31057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11412'. [ 1013.967071][T31059] loop3: detected capacity change from 0 to 764 [ 1014.003985][T31059] rock: directory entry would overflow storage [ 1014.018071][T31059] rock: sig=0x4654, size=5, remaining=4 [ 1014.108193][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1014.140362][T31063] No source specified [ 1014.202727][T31065] loop3: detected capacity change from 0 to 512 [ 1014.242293][T31065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.292959][T31065] ext4 filesystem being mounted at /2847/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.324855][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.355321][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1014.399804][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.424380][ T9] usb 3-1: Product: syz [ 1014.440575][ T9] usb 3-1: Manufacturer: syz [ 1014.449216][ T9] usb 3-1: SerialNumber: syz [ 1014.470930][T31065] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.11416: corrupted xattr block 33: invalid checksum [ 1014.502559][ T9] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1014.538584][ T3378] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1014.573829][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.692523][T31076] C: renamed from lo (while UP) [ 1014.705275][T31076] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1014.738062][ T3378] usb 2-1: Using ep0 maxpacket: 16 [ 1014.749873][ T3378] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1014.781213][ T3378] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1014.816241][ T3378] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.836169][ T3378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.855969][ T3378] usb 2-1: Product: syz [ 1014.864421][ T3378] usb 2-1: Manufacturer: syz [ 1014.872905][ T3378] usb 2-1: SerialNumber: syz [ 1014.944879][ T9] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1015.010636][ T9] usb 3-1: USB disconnect, device number 51 [ 1015.082387][T31082] loop4: detected capacity change from 0 to 1764 [ 1015.132995][ T3378] usb 2-1: 0:2 : does not exist [ 1015.153109][ T3378] usb 2-1: unit 9 not found! [ 1015.184656][ T3378] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1015.217059][ T3378] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1015.251946][ T3378] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1015.276144][ T3378] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1015.341449][ T3378] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1015.373842][T31088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11427'. [ 1015.389272][ T3378] usb 2-1: USB disconnect, device number 53 [ 1015.403204][T31088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11427'. [ 1015.443477][T28465] udevd[28465]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1015.948490][T24357] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1016.023282][T31106] loop1: detected capacity change from 0 to 256 [ 1016.033808][T31108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11437'. [ 1016.045594][T31106] exfat: Deprecated parameter 'utf8' [ 1016.058701][T31106] exfat: Deprecated parameter 'namecase' [ 1016.126784][T31106] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xda15a085, utbl_chksum : 0xe619d30d) [ 1016.191687][T24357] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1016.213360][T24357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.241402][T24357] usb 5-1: Product: syz [ 1016.248207][T24357] usb 5-1: Manufacturer: syz [ 1016.252882][T24357] usb 5-1: SerialNumber: syz [ 1016.295340][T24357] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1016.323330][T24355] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1016.528293][ T3378] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1016.568329][ C0] usb 5-1: ath9k_htc: invalid pkt_len (fd7e) [ 1016.575241][T31101] loop3: detected capacity change from 0 to 32768 [ 1016.590403][T31101] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.11434 (31101) [ 1016.630343][T31101] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1016.644948][T31101] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1016.656824][T31101] BTRFS info (device loop3): force zlib compression, level 3 [ 1016.666121][T31101] BTRFS info (device loop3): force clearing of disk cache [ 1016.678373][T31101] BTRFS info (device loop3): setting nodatasum [ 1016.684754][T31101] BTRFS info (device loop3): allowing degraded mounts [ 1016.692653][T31101] BTRFS info (device loop3): enabling disk space caching [ 1016.705461][T31101] BTRFS info (device loop3): disk space caching is enabled [ 1016.715941][ T3378] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1016.729236][ T3378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.737631][ T3378] usb 3-1: Product: syz [ 1016.744808][ T3378] usb 3-1: Manufacturer: syz [ 1016.752692][ T3378] usb 3-1: SerialNumber: syz [ 1016.770519][T24353] usb 5-1: USB disconnect, device number 13 [ 1016.797059][ T3378] usb 3-1: config 0 descriptor?? [ 1016.838358][T31101] BTRFS info (device loop3): auto enabling async discard [ 1016.855250][T31101] BTRFS info (device loop3): rebuilding free space tree [ 1016.880060][T31101] BTRFS info (device loop3): disabling free space tree [ 1016.887265][T31101] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1016.903190][T31101] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1016.974434][T31101] BTRFS info (device loop3): balance: start -susage=8589935361,usage=769..2 [ 1016.989977][T31101] BTRFS info (device loop3): balance: ended with status: 0 [ 1017.048989][ T3378] mos7840 3-1:0.0: required endpoints missing [ 1017.056408][ T5772] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1017.303859][T24357] usb 3-1: USB disconnect, device number 52 [ 1017.403202][T24355] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1017.418153][T24355] ath9k_htc: Failed to initialize the device [ 1017.458772][T24353] usb 5-1: ath9k_htc: USB layer deinitialized [ 1017.546089][T31140] netlink: 'syz.3.11444': attribute type 6 has an invalid length. [ 1017.808948][T31142] loop1: detected capacity change from 0 to 4096 [ 1017.865882][T31146] netlink: 'syz.3.11447': attribute type 2 has an invalid length. [ 1017.902676][T31146] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.11447'. [ 1017.948070][T24353] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1018.128177][T24353] usb 5-1: Using ep0 maxpacket: 32 [ 1018.152369][T24353] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 1018.166141][T24353] usb 5-1: config 0 has no interface number 0 [ 1018.193962][T24353] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1018.218953][T24353] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1018.245515][T24353] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1018.245550][T24353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.245574][T24353] usb 5-1: Product: syz [ 1018.245591][T24353] usb 5-1: Manufacturer: syz [ 1018.245607][T24353] usb 5-1: SerialNumber: syz [ 1018.250799][T24353] usb 5-1: config 0 descriptor?? [ 1018.251903][T31138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1018.252103][T31138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1018.319354][T24353] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 16:80:df:96:9b:2e [ 1018.352834][T31154] netlink: 'syz.2.11452': attribute type 21 has an invalid length. [ 1018.352865][T31154] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1018.352923][T31154] netlink: 'syz.2.11452': attribute type 5 has an invalid length. [ 1018.352939][T31154] netlink: 'syz.2.11452': attribute type 6 has an invalid length. [ 1018.352954][T31154] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1018.425461][T31157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11453'. [ 1018.425488][T31157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11453'. [ 1019.143145][T31177] loop3: detected capacity change from 0 to 2048 [ 1019.178222][T31179] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1019.218686][T31177] devpts: called with bogus options [ 1019.441050][T31189] openvswitch: netlink: Actions may not be safe on all matching packets [ 1020.319374][T24353] usb 5-1: USB disconnect, device number 14 [ 1020.345176][T24353] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1020.459438][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1020.459454][ T28] audit: type=1326 audit(2000000922.645:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31216 comm="syz.2.11475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1020.553681][ T28] audit: type=1326 audit(2000000922.645:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31216 comm="syz.2.11475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1020.608105][ T28] audit: type=1326 audit(2000000922.685:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31216 comm="syz.2.11475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1020.713785][ T28] audit: type=1326 audit(2000000922.685:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31216 comm="syz.2.11475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1020.744489][T31220] loop3: detected capacity change from 0 to 4096 [ 1020.787155][T31220] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1020.794046][ T28] audit: type=1326 audit(2000000922.685:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31216 comm="syz.2.11475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1020.881811][T31225] loop1: detected capacity change from 0 to 1024 [ 1021.098517][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1022.717586][T31292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11505'. [ 1023.675884][T31329] xt_connbytes: Forcing CT accounting to be enabled [ 1023.698522][T31329] xt_bpf: check failed: parse error [ 1024.097102][T31347] loop1: detected capacity change from 0 to 128 [ 1024.173227][T31347] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1024.238449][T31347] ext4 filesystem being mounted at /2850/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.317455][T31347] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 1024.378225][T31357] netlink: 'syz.2.11534': attribute type 27 has an invalid length. [ 1024.471667][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1024.838216][T31371] netlink: 'syz.3.11542': attribute type 1 has an invalid length. [ 1024.858248][T24353] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1025.059877][T24353] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1025.076159][T24353] usb 3-1: config 0 has no interface number 0 [ 1025.108016][T24353] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1025.138409][T24353] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1025.198158][T24353] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1025.207304][T24353] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1025.232880][T24353] usb 3-1: Product: syz [ 1025.237279][T24353] usb 3-1: Manufacturer: syz [ 1025.243110][T24353] usb 3-1: SerialNumber: syz [ 1025.261297][T24353] usb 3-1: config 0 descriptor?? [ 1025.271094][T24353] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 1025.280169][T24353] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 1025.290626][T24353] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 1025.298450][T24357] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1025.310738][T24353] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1025.321734][T24353] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 1025.334077][T24353] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1025.345668][T24353] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 1025.356141][T24353] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1025.367606][T24353] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 1025.382512][T24353] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1025.493888][T24353] usb 3-1: USB disconnect, device number 53 [ 1025.503281][T24357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1025.518176][T31388] loop3: detected capacity change from 0 to 4096 [ 1025.527212][T24357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1025.547656][T24353] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1025.557320][T24357] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1025.557359][T24357] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1025.565831][T24357] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1025.600884][T31388] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1025.627117][T24357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.637725][T24357] usb 2-1: Product: syz [ 1025.642551][T24357] usb 2-1: Manufacturer: syz [ 1025.651926][T24357] usb 2-1: SerialNumber: syz [ 1025.667808][T24353] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1025.691174][T31388] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1025.706158][T24357] smsusb:smsusb_probe: board id=8, interface number 0 [ 1025.747709][T24353] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1025.785286][T24353] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1025.820143][T24353] keyspan 3-1:0.107: device disconnected [ 1025.948881][T24357] smsusb:smsusb_probe: Device initialized with return code -19 [ 1026.191644][T24357] usb 2-1: USB disconnect, device number 54 [ 1026.458205][T24353] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1026.648230][T24353] usb 3-1: Using ep0 maxpacket: 16 [ 1026.658448][T24353] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1026.668043][T24353] usb 3-1: config 1 has no interface number 0 [ 1026.674285][T24353] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1026.687133][T24353] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1026.698900][T24353] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1026.708606][T24353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.716684][T24353] usb 3-1: Product: syz [ 1026.722831][T24353] usb 3-1: Manufacturer: syz [ 1026.727501][T24353] usb 3-1: SerialNumber: syz [ 1026.753277][T31399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1026.852194][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 1027.030976][T24353] aqc111: probe of 3-1:1.105 failed with error -22 [ 1027.154636][T31430] netlink: 'syz.4.11569': attribute type 12 has an invalid length. [ 1027.174855][T31429] bridge0: port 4(syz_tun) entered blocking state [ 1027.185942][T31429] bridge0: port 4(syz_tun) entered disabled state [ 1027.211007][T31429] syz_tun: entered allmulticast mode [ 1027.235252][T31429] syz_tun: entered promiscuous mode [ 1027.243712][T31429] bridge0: port 4(syz_tun) entered blocking state [ 1027.251505][T31429] bridge0: port 4(syz_tun) entered forwarding state [ 1027.298645][T24353] usb 3-1: USB disconnect, device number 54 [ 1027.623520][T31445] netlink: 'syz.3.11576': attribute type 1 has an invalid length. [ 1027.682603][T31447] loop4: detected capacity change from 0 to 256 [ 1027.746684][T31447] FAT-fs (loop4): Directory bread(block 64) failed [ 1027.764926][T31447] FAT-fs (loop4): Directory bread(block 65) failed [ 1027.778827][T31447] FAT-fs (loop4): Directory bread(block 66) failed [ 1027.785474][T31447] FAT-fs (loop4): Directory bread(block 67) failed [ 1027.828196][T31447] FAT-fs (loop4): Directory bread(block 68) failed [ 1027.834841][T31447] FAT-fs (loop4): Directory bread(block 69) failed [ 1027.866348][T31447] FAT-fs (loop4): Directory bread(block 70) failed [ 1027.870556][ T9] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1027.882040][T31447] FAT-fs (loop4): Directory bread(block 71) failed [ 1027.903111][T31447] FAT-fs (loop4): Directory bread(block 72) failed [ 1027.921707][T31447] FAT-fs (loop4): Directory bread(block 73) failed [ 1028.080662][ T9] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1028.090295][ T9] usb 2-1: config 8 has no interface number 0 [ 1028.096580][ T9] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1028.111202][ T9] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1028.124280][ T9] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1028.132081][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1028.141705][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.170442][T31443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1028.343650][T31460] loop2: detected capacity change from 0 to 1024 [ 1028.415479][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1028.425374][T31460] hfsplus: failed to extend attributes file [ 1028.450645][ T9] ir_toy 2-1:8.177: required endpoints not found [ 1028.480751][ T9] usb 2-1: USB disconnect, device number 55 [ 1028.511720][ T28] audit: type=1326 audit(2000000930.695:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31462 comm="syz.4.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1028.572774][ T28] audit: type=1326 audit(2000000930.725:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31462 comm="syz.4.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1028.641497][ T28] audit: type=1326 audit(2000000930.735:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31462 comm="syz.4.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1028.711616][ T28] audit: type=1326 audit(2000000930.735:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31462 comm="syz.4.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1028.771491][ T28] audit: type=1326 audit(2000000930.735:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31462 comm="syz.4.11586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1029.514653][T31496] loop2: detected capacity change from 0 to 1024 [ 1029.648878][T31496] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1029.678022][T31496] hfsplus: xattr searching failed [ 1029.713428][T31496] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1029.721281][T31496] hfsplus: xattr searching failed [ 1029.735057][T31503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11608'. [ 1030.183379][T31517] loop3: detected capacity change from 0 to 1764 [ 1030.441528][T31528] loop3: detected capacity change from 0 to 64 [ 1030.530098][T31531] netlink: 'syz.1.11620': attribute type 1 has an invalid length. [ 1030.554553][T31531] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.11620'. [ 1030.735487][T31535] netlink: 'syz.1.11623': attribute type 10 has an invalid length. [ 1030.776948][T31538] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 1031.398577][T24353] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1031.537824][T31566] loop2: detected capacity change from 0 to 512 [ 1031.560235][T31566] EXT4-fs: Ignoring removed nobh option [ 1031.571334][T31567] loop1: detected capacity change from 0 to 1764 [ 1031.608298][T24353] usb 4-1: Using ep0 maxpacket: 32 [ 1031.615603][T24353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1031.625564][T31566] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1031.638097][T24353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1031.653202][T24353] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1031.663024][T24353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.671278][T24353] usb 4-1: Product: syz [ 1031.675496][T24353] usb 4-1: Manufacturer: syz [ 1031.680327][T24353] usb 4-1: SerialNumber: syz [ 1031.696560][T31566] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.11638: attempt to clear invalid blocks 1 len 1 [ 1031.720587][T24353] usb 4-1: config 0 descriptor?? [ 1031.744610][T24353] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input51 [ 1031.764906][T31566] EXT4-fs (loop2): Remounting filesystem read-only [ 1031.793918][T31566] EXT4-fs (loop2): 1 truncate cleaned up [ 1031.815997][T31566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.887408][T31574] netlink: 'syz.1.11641': attribute type 32 has an invalid length. [ 1032.041592][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.161837][T24353] usb 4-1: USB disconnect, device number 62 [ 1032.442736][T31587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1032.455751][T31587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.679073][T31594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11652'. [ 1032.728804][T31596] bond2: entered allmulticast mode [ 1032.952578][T31605] tmpfs: Bad value for 'mpol' [ 1033.156837][T31613] loop1: detected capacity change from 0 to 512 [ 1033.189057][T31613] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1033.208110][T31613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c09c, mo2=0002] [ 1033.216436][T31613] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1033.238665][T31613] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #13: comm syz.1.11660: iget: bad i_size value: 12154761577498 [ 1033.288133][T31613] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.11660: couldn't read orphan inode 13 (err -117) [ 1033.321297][T31613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1033.428717][T31613] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.11660: dx entry: limit 65535 != root limit 120 [ 1033.467029][T31613] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.11660: Corrupt directory, running e2fsck is recommended [ 1033.617057][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.695676][T31702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11704'. [ 1035.762290][T31704] tmpfs: Group quota block hardlimit too large. [ 1036.318059][T24353] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1036.462717][T31731] loop3: detected capacity change from 0 to 512 [ 1036.486776][T31733] loop4: detected capacity change from 0 to 256 [ 1036.508191][T24353] usb 3-1: Using ep0 maxpacket: 16 [ 1036.522746][T24353] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 1036.534651][T31731] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.11717: inode has both inline data and extents flags [ 1036.556393][T24353] usb 3-1: config 4 has no interface number 0 [ 1036.567421][T31733] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 1036.585892][T24353] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 1036.596810][T31731] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.11717: couldn't read orphan inode 15 (err -117) [ 1036.616104][T24353] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1036.640015][T31731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.657619][T24353] usb 3-1: config 4 interface 51 has no altsetting 0 [ 1036.688254][T24353] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1036.713072][T24353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.729397][T24353] usb 3-1: Product: syz [ 1036.733795][T24353] usb 3-1: Manufacturer: syz [ 1036.739555][T24353] usb 3-1: SerialNumber: syz [ 1036.756127][T31716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1036.764721][T31716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1036.817636][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.029225][T31716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1037.036696][T31716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1037.090074][T24353] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 02:91:59:27:99:09 [ 1037.263210][T31747] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1037.382949][T31751] Non-string source [ 1037.403699][T24353] usb 3-1: USB disconnect, device number 55 [ 1037.414287][T24353] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 1037.645821][T31758] loop1: detected capacity change from 0 to 2048 [ 1037.673723][T31760] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1037.736504][T31758] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1037.808305][T31758] Remounting filesystem read-only [ 1038.099909][T31775] netlink: 'syz.3.11733': attribute type 1 has an invalid length. [ 1038.437802][T31789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11738'. [ 1038.629126][T31792] netlink: 'syz.3.11741': attribute type 10 has an invalid length. [ 1038.652724][T31792] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11741'. [ 1038.688362][T31795] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1038.929162][ T28] audit: type=1326 audit(2000000941.115:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31802 comm="syz.3.11746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1038.992646][T31809] netlink: 'syz.4.11747': attribute type 10 has an invalid length. [ 1039.018540][T31809] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.11747'. [ 1039.028471][ T28] audit: type=1326 audit(2000000941.115:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31802 comm="syz.3.11746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1039.108071][ T28] audit: type=1326 audit(2000000941.115:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31802 comm="syz.3.11746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1039.207621][ T28] audit: type=1326 audit(2000000941.115:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31802 comm="syz.3.11746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1039.275947][ T28] audit: type=1326 audit(2000000941.115:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31802 comm="syz.3.11746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1039.444872][ T28] audit: type=1326 audit(2000000941.625:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31820 comm="syz.2.11761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1039.531179][ T28] audit: type=1326 audit(2000000941.625:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31820 comm="syz.2.11761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1039.585829][ T28] audit: type=1326 audit(2000000941.625:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31820 comm="syz.2.11761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1039.620672][T31827] loop3: detected capacity change from 0 to 512 [ 1039.691935][T31827] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.11755: inode has both inline data and extents flags [ 1039.696656][ T28] audit: type=1326 audit(2000000941.625:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31820 comm="syz.2.11761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1039.743489][T31827] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.11755: couldn't read orphan inode 15 (err -117) [ 1039.798292][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1039.817286][T31833] loop2: detected capacity change from 0 to 1024 [ 1039.827781][T31827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.865649][T31833] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1039.899070][ T28] audit: type=1326 audit(2000000941.655:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31820 comm="syz.2.11761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1040.005614][T31828] loop4: detected capacity change from 0 to 8192 [ 1040.038227][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1040.047862][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1040.071906][T31828] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1040.088042][ T9] usb 2-1: config 0 has no interface number 0 [ 1040.099514][T31828] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1040.110932][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1040.126726][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.135676][ T9] usb 2-1: Product: syz [ 1040.139991][ T9] usb 2-1: Manufacturer: syz [ 1040.144633][ T9] usb 2-1: SerialNumber: syz [ 1040.152780][ T9] usb 2-1: config 0 descriptor?? [ 1040.177368][T31828] REISERFS (device loop4): using ordered data mode [ 1040.205753][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.217947][T31828] reiserfs: using flush barriers [ 1040.244025][T31828] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1040.313992][T31828] REISERFS (device loop4): checking transaction log (loop4) [ 1040.402514][ T9] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1040.423734][ T9] usb 2-1: Failed to initialize entity for entity 6 [ 1040.451147][ T9] usb 2-1: Failed to register entities (-22). [ 1040.696339][T31828] REISERFS (device loop4): Using tea hash to sort names [ 1040.702509][T24363] usb 2-1: USB disconnect, device number 56 [ 1040.713733][T31828] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1041.056070][T31851] loop3: detected capacity change from 0 to 4096 [ 1041.360666][T31859] loop2: detected capacity change from 0 to 2048 [ 1041.446106][T31859] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1041.872690][T31875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11771'. [ 1041.905476][T31875] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1042.104163][T31885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1042.512095][T31899] loop2: detected capacity change from 0 to 1764 [ 1042.639547][T31903] No source specified [ 1042.850734][T31911] loop2: detected capacity change from 0 to 764 [ 1042.865894][T31911] rock: directory entry would overflow storage [ 1042.889975][T31911] rock: sig=0x4654, size=5, remaining=4 [ 1043.321008][T31923] loop3: detected capacity change from 0 to 512 [ 1043.404504][T31923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.458229][T31923] ext4 filesystem being mounted at /2959/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.561377][T31934] netlink: 'syz.1.11800': attribute type 10 has an invalid length. [ 1043.592469][T31923] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.11794: Failed to acquire dquot type 1 [ 1043.618040][T31934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11800'. [ 1043.656711][T31934] team0: Port device geneve0 added [ 1043.785131][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.828451][T31938] netlink: 'syz.2.11802': attribute type 1 has an invalid length. [ 1043.996202][T31943] netlink: 'syz.1.11804': attribute type 3 has an invalid length. [ 1044.010241][T31944] ieee802154 phy1 wpan1: encryption failed: -22 [ 1044.220294][T31927] loop4: detected capacity change from 0 to 32768 [ 1044.235777][T31927] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.11795 (31927) [ 1044.246286][T31948] loop3: detected capacity change from 0 to 2048 [ 1044.285317][T31927] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1044.303607][T31948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1044.322380][T31927] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1044.359120][T31927] BTRFS info (device loop4): force zlib compression, level 3 [ 1044.366817][T31927] BTRFS info (device loop4): force clearing of disk cache [ 1044.411641][T31927] BTRFS info (device loop4): setting nodatasum [ 1044.429859][T31927] BTRFS info (device loop4): allowing degraded mounts [ 1044.436776][T31927] BTRFS info (device loop4): enabling disk space caching [ 1044.458108][T31927] BTRFS info (device loop4): disk space caching is enabled [ 1044.564859][T31952] loop2: detected capacity change from 0 to 4096 [ 1044.668234][T31927] BTRFS info (device loop4): auto enabling async discard [ 1044.722160][T31927] BTRFS info (device loop4): rebuilding free space tree [ 1044.845451][T31927] BTRFS info (device loop4): disabling free space tree [ 1044.864597][T31927] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1044.887008][T31927] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1045.072257][T31975] netlink: 'syz.1.11811': attribute type 21 has an invalid length. [ 1045.101047][T31975] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11811'. [ 1045.121684][T31975] netlink: 'syz.1.11811': attribute type 5 has an invalid length. [ 1045.142872][T31975] netlink: 'syz.1.11811': attribute type 6 has an invalid length. [ 1045.164567][T31975] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11811'. [ 1045.197656][T31927] BTRFS info (device loop4): balance: start -susage=8589935361,usage=769..2 [ 1045.223737][T31927] BTRFS info (device loop4): balance: ended with status: 0 [ 1045.443964][T27680] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1045.650138][T31993] loop1: detected capacity change from 0 to 64 [ 1046.107175][T32002] bridge3: entered allmulticast mode [ 1046.487760][T32018] netlink: 'syz.4.11830': attribute type 2 has an invalid length. [ 1046.501364][T32018] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11830'. [ 1046.574159][T32020] netlink: 'syz.1.11832': attribute type 3 has an invalid length. [ 1046.587532][T32020] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11832'. [ 1046.735794][T32017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11833'. [ 1047.055237][T32030] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1047.172747][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1047.172766][ T28] audit: type=1326 audit(2000000949.355:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32033 comm="syz.4.11840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1047.241595][ T28] audit: type=1326 audit(2000000949.355:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32033 comm="syz.4.11840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1047.329293][ T28] audit: type=1326 audit(2000000949.395:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32033 comm="syz.4.11840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1047.408995][ T28] audit: type=1326 audit(2000000949.395:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32033 comm="syz.4.11840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1047.431497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1047.470333][T32044] netlink: 'syz.3.11844': attribute type 2 has an invalid length. [ 1047.496574][ T28] audit: type=1326 audit(2000000949.395:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32033 comm="syz.4.11840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d8b9bf79 code=0x7ffc0000 [ 1047.612860][T32046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11846'. [ 1048.085702][T32064] loop1: detected capacity change from 0 to 64 [ 1048.641863][T32074] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 1048.697771][T32060] loop4: detected capacity change from 0 to 32768 [ 1048.750661][T32060] (syz.4.11851,32060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1048.780956][T32060] (syz.4.11851,32060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1048.867348][T32060] (syz.4.11851,32060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1048.912443][T32058] loop2: detected capacity change from 0 to 32768 [ 1049.020705][T32060] JBD2: Ignoring recovery information on journal [ 1049.152247][T32085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11865'. [ 1049.217175][T32060] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1049.481830][T32060] (syz.4.11851,32060,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 1049.532919][T32060] (syz.4.11851,32060,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 1049.591687][T32060] (syz.4.11851,32060,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1049.627674][T32060] (syz.4.11851,32060,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1049.648457][T32060] Quota error (device loop4): find_next_id: Can't read quota tree block 5 [ 1049.667462][T32060] (syz.4.11851,32060,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 1049.877054][T27680] ocfs2: Unmounting device (7,4) on (node local) [ 1049.916686][T32106] loop1: detected capacity change from 0 to 512 [ 1050.118386][T32106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1050.139852][T32106] System zones: 0-2, 18-18, 34-34 [ 1050.164638][T32106] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.11876: bg 0: block 248: padding at end of block bitmap is not set [ 1050.282109][T32106] Quota error (device loop1): write_blk: dquota write failed [ 1050.294742][T32106] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1050.328264][T32106] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.11876: Failed to acquire dquot type 1 [ 1050.364325][T32106] EXT4-fs (loop1): 1 truncate cleaned up [ 1050.400716][T32106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.435509][T32106] ext4 filesystem being mounted at /2929/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.518856][T32106] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.11876: deleted inode referenced: 12 [ 1050.651915][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.937835][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11887'. [ 1050.949250][T32133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11887'. [ 1051.118091][T29684] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1051.273712][T32145] loop3: detected capacity change from 0 to 512 [ 1051.318430][T29684] usb 2-1: Using ep0 maxpacket: 8 [ 1051.322044][T32145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1051.332665][T29684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.343706][T32145] System zones: 0-2, 18-18, 34-34 [ 1051.354632][T32145] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.11894: bg 0: block 248: padding at end of block bitmap is not set [ 1051.370078][T32145] Quota error (device loop3): write_blk: dquota write failed [ 1051.377677][T32145] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1051.388098][T32145] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.11894: Failed to acquire dquot type 1 [ 1051.401270][T29684] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1051.411532][T32145] EXT4-fs (loop3): 1 truncate cleaned up [ 1051.419270][T32145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.432358][T32145] ext4 filesystem being mounted at /2991/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.453653][T29684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1051.476673][T32145] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.11894: deleted inode referenced: 12 [ 1051.498700][T29684] usb 2-1: SerialNumber: syz [ 1051.525845][T29684] usb 2-1: config 0 descriptor?? [ 1051.552193][T29684] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1051.587527][T29684] usb 2-1: Failed to create links for entity 255 [ 1051.594501][T29684] usb 2-1: Failed to register entities (-22). [ 1051.601266][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.662728][T32153] loop4: detected capacity change from 0 to 164 [ 1051.824750][T29684] usb 2-1: USB disconnect, device number 57 [ 1052.184307][T32170] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 1052.317035][T32175] loop4: detected capacity change from 0 to 512 [ 1052.430814][T32175] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1052.466954][T32175] System zones: 0-2, 18-18, 34-34 [ 1052.479477][T32184] qrtr: Invalid version 195 [ 1052.518305][T32175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.11906: bg 0: block 248: padding at end of block bitmap is not set [ 1052.558798][T32175] Quota error (device loop4): write_blk: dquota write failed [ 1052.608854][T32175] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1052.631593][T32175] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.11906: Failed to acquire dquot type 1 [ 1052.667141][T32175] EXT4-fs (loop4): 1 truncate cleaned up [ 1052.702816][T32175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.763624][T32175] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.863872][T32175] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.11906: deleted inode referenced: 12 [ 1052.886226][T32194] netlink: 'syz.1.11913': attribute type 27 has an invalid length. [ 1053.005232][T27680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.014990][T32196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11914'. [ 1053.037738][T32196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11914'. [ 1053.074174][T32198] loop2: detected capacity change from 0 to 64 [ 1053.148068][T32202] loop4: detected capacity change from 0 to 128 [ 1053.200295][T32202] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1053.241891][T32202] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.264909][T32202] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 1053.347626][T27680] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.500185][T32210] qrtr: Invalid version 195 [ 1053.971494][T32223] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 1054.253857][T32206] loop1: detected capacity change from 0 to 32768 [ 1054.282635][T32206] (syz.1.11917,32206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1054.336561][T32206] (syz.1.11917,32206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1054.442652][T32206] (syz.1.11917,32206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1054.487606][T32236] loop2: detected capacity change from 0 to 64 [ 1054.551219][T32206] JBD2: Ignoring recovery information on journal [ 1054.589398][T32236] Trying to free block not in datazone [ 1054.595084][T32236] minix_free_block (loop2:21): bit already cleared [ 1054.745914][T32206] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1054.755908][T32225] loop4: detected capacity change from 0 to 32768 [ 1055.066712][T32206] (syz.1.11917,32206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 1055.198061][T32206] (syz.1.11917,32206,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 1055.253174][T32206] (syz.1.11917,32206,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1055.288010][T32206] (syz.1.11917,32206,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1055.316490][T32206] Quota error (device loop1): find_next_id: Can't read quota tree block 5 [ 1055.341189][T32206] (syz.1.11917,32206,0):ocfs2_get_next_id:909 ERROR: status = -5 [ 1055.352533][T32254] loop4: detected capacity change from 0 to 512 [ 1055.448199][T32254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.485225][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.515068][T32254] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.663981][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1055.760877][T27680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.198401][ T5814] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1056.248138][ T5835] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1056.379564][T32283] loop1: detected capacity change from 0 to 1024 [ 1056.388711][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 1056.398808][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.421006][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1056.448139][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1056.468589][ T5835] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1056.477767][T32283] hfsplus: failed to extend attributes file [ 1056.494573][ T5814] usb 3-1: SerialNumber: syz [ 1056.499621][ T5835] usb 4-1: config 8 has no interface number 0 [ 1056.510931][ T5814] usb 3-1: config 0 descriptor?? [ 1056.526314][ T5835] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1056.540960][ T5835] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1056.545014][ T5814] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1056.563486][ T5835] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1056.570456][ T5835] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1056.581003][ T5814] usb 3-1: Failed to create links for entity 255 [ 1056.587472][ T5814] usb 3-1: Failed to register entities (-22). [ 1056.593885][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.630668][T32269] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1056.819684][ T5814] usb 3-1: USB disconnect, device number 56 [ 1056.884772][ T5835] usb 4-1: string descriptor 0 read error: -71 [ 1056.896669][ T5835] ir_toy 4-1:8.177: required endpoints not found [ 1056.941030][ T5835] usb 4-1: USB disconnect, device number 63 [ 1057.287145][T32301] loop4: detected capacity change from 0 to 4096 [ 1057.295967][T32301] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1057.373741][T32301] ntfs3: loop4: failed to convert "c46c" to cp866 [ 1057.478671][T32307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11966'. [ 1057.487846][T32307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11966'. [ 1057.690209][ T28] audit: type=1326 audit(2000000959.865:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.2.11970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1057.747180][T32312] loop4: detected capacity change from 0 to 1024 [ 1057.760239][ T28] audit: type=1326 audit(2000000959.865:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.2.11970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1057.782765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.823881][ T28] audit: type=1326 audit(2000000959.895:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.2.11970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1057.852719][ T28] audit: type=1326 audit(2000000959.895:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.2.11970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1057.876975][ T28] audit: type=1326 audit(2000000959.895:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32314 comm="syz.2.11970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1057.937266][T32317] netlink: 'syz.3.11971': attribute type 10 has an invalid length. [ 1057.994241][T32312] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1058.021967][T32312] hfsplus: xattr searching failed [ 1058.044967][T32312] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1058.078032][T32312] hfsplus: xattr searching failed [ 1058.174860][T32324] loop1: detected capacity change from 0 to 64 [ 1058.193526][T32325] loop3: detected capacity change from 0 to 512 [ 1058.239385][T32324] Trying to free block not in datazone [ 1058.251843][T32324] minix_free_block (loop1:21): bit already cleared [ 1058.313995][T32325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.364388][T32325] ext4 filesystem being mounted at /3013/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.476060][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.668205][T24361] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1058.739509][T32339] netlink: 'syz.1.11980': attribute type 5 has an invalid length. [ 1058.770612][T32339] ip6erspan1: entered promiscuous mode [ 1058.869791][T24361] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 1058.888658][T24361] usb 5-1: config 0 has no interface number 0 [ 1058.905486][T24361] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1058.926432][T24361] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1058.945205][T24361] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1058.965498][T24361] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1058.975462][T24361] usb 5-1: Product: syz [ 1058.987773][T24361] usb 5-1: Manufacturer: syz [ 1059.015397][T24361] usb 5-1: SerialNumber: syz [ 1059.024161][T24361] usb 5-1: config 0 descriptor?? [ 1059.036344][T24361] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 1059.052638][T24361] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 1059.063206][T24361] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 1059.108980][T24361] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1059.135750][T24361] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 1059.175632][T24361] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1059.211159][T24361] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 1059.231843][T24361] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1059.278617][T24361] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 1059.302506][T24361] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1059.355895][T24361] usb 5-1: USB disconnect, device number 15 [ 1059.388746][T24361] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1059.452457][T24361] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1059.498695][T24361] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1059.515053][T24361] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1059.532343][T24361] keyspan 5-1:0.107: device disconnected [ 1059.966293][T32372] bond4: entered allmulticast mode [ 1060.068667][T32379] tmpfs: Bad value for 'mpol' [ 1060.415310][T32392] sctp: [Deprecated]: syz.4.12006 (pid 32392) Use of int in max_burst socket option. [ 1060.415310][T32392] Use struct sctp_assoc_value instead [ 1060.579124][ T28] audit: type=1326 audit(2000000962.765:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32394 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1060.638249][ T28] audit: type=1326 audit(2000000962.765:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32394 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1060.689563][ T28] audit: type=1326 audit(2000000962.795:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32394 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1060.739521][ T28] audit: type=1326 audit(2000000962.795:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32394 comm="syz.3.12009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1061.133186][T32417] netlink: 'syz.1.12019': attribute type 3 has an invalid length. [ 1061.145476][T32412] loop2: detected capacity change from 0 to 1764 [ 1061.368487][T32423] netlink: 'syz.4.12021': attribute type 5 has an invalid length. [ 1061.413318][T32423] ip6erspan0: entered promiscuous mode [ 1061.472679][T32426] loop2: detected capacity change from 0 to 512 [ 1061.508308][T32426] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1061.548225][T32426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c09c, mo2=0002] [ 1061.562277][T32426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1061.569316][T32426] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #13: comm syz.2.12022: iget: bad i_size value: 12154761577498 [ 1061.588836][T32426] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.12022: couldn't read orphan inode 13 (err -117) [ 1061.647413][T32426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1061.778793][T32426] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.12022: dx entry: limit 65535 != root limit 120 [ 1061.806310][T32426] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.12022: Corrupt directory, running e2fsck is recommended [ 1061.809132][ T5814] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1061.915652][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.030807][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1062.058893][ T5814] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1062.088133][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1062.109363][ T5814] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1062.165269][ T5814] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1062.180130][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.215357][ T5814] usb 2-1: Product: syz [ 1062.219849][ T5814] usb 2-1: Manufacturer: syz [ 1062.224606][ T5814] usb 2-1: SerialNumber: syz [ 1062.255999][ T5814] usb 2-1: config 0 descriptor?? [ 1062.275004][ T5814] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1062.329458][T32452] usb usb4: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1062.575874][ T5814] ums-isd200: probe of 2-1:0.0 failed with error -22 [ 1062.772542][ T5814] usb 2-1: USB disconnect, device number 58 [ 1063.018566][T24361] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1063.228090][T24361] usb 5-1: Using ep0 maxpacket: 32 [ 1063.242288][T24361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1063.282181][T24361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1063.335123][T24361] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1063.355768][T24361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.380188][T32487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12051'. [ 1063.389298][T24361] usb 5-1: Product: syz [ 1063.389324][T24361] usb 5-1: Manufacturer: syz [ 1063.389340][T24361] usb 5-1: SerialNumber: syz [ 1063.397837][T24361] usb 5-1: config 0 descriptor?? [ 1063.431468][T24361] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input52 [ 1063.565176][T32491] netlink: 180 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1063.750515][ T5814] usb 5-1: USB disconnect, device number 16 [ 1064.145506][T32511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12064'. [ 1064.267483][T32514] loop3: detected capacity change from 0 to 256 [ 1064.433065][T32514] FAT-fs (loop3): Directory bread(block 64) failed [ 1064.472430][T32514] FAT-fs (loop3): Directory bread(block 65) failed [ 1064.507008][T32514] FAT-fs (loop3): Directory bread(block 66) failed [ 1064.532372][T32514] FAT-fs (loop3): Directory bread(block 67) failed [ 1064.553450][T32514] FAT-fs (loop3): Directory bread(block 68) failed [ 1064.578516][T32514] FAT-fs (loop3): Directory bread(block 69) failed [ 1064.585455][T32514] FAT-fs (loop3): Directory bread(block 70) failed [ 1064.627017][T32514] FAT-fs (loop3): Directory bread(block 71) failed [ 1064.648707][T32514] FAT-fs (loop3): Directory bread(block 72) failed [ 1064.655360][T32514] FAT-fs (loop3): Directory bread(block 73) failed [ 1064.785395][T32527] netlink: 344 bytes leftover after parsing attributes in process `syz.2.12073'. [ 1064.921929][T32532] loop4: detected capacity change from 0 to 256 [ 1064.989425][T32532] FAT-fs (loop4): Directory bread(block 64) failed [ 1065.006373][T32532] FAT-fs (loop4): Directory bread(block 65) failed [ 1065.039540][T32532] FAT-fs (loop4): Directory bread(block 66) failed [ 1065.046192][T32532] FAT-fs (loop4): Directory bread(block 67) failed [ 1065.077054][T32532] FAT-fs (loop4): Directory bread(block 68) failed [ 1065.094593][T32532] FAT-fs (loop4): Directory bread(block 69) failed [ 1065.122793][T32532] FAT-fs (loop4): Directory bread(block 70) failed [ 1065.152623][T32532] FAT-fs (loop4): Directory bread(block 71) failed [ 1065.174181][T32532] FAT-fs (loop4): Directory bread(block 72) failed [ 1065.197567][T32532] FAT-fs (loop4): Directory bread(block 73) failed [ 1065.333609][T32542] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12079'. [ 1065.343682][T32542] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1065.539266][ T28] audit: type=1326 audit(2000000967.725:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.2.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1065.614788][ T28] audit: type=1326 audit(2000000967.745:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.2.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1065.678579][ T28] audit: type=1326 audit(2000000967.785:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.2.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1065.762981][ T28] audit: type=1326 audit(2000000967.785:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.2.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1065.859598][ T28] audit: type=1326 audit(2000000967.785:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.2.12081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x7ffc0000 [ 1065.918424][T32554] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1065.938378][ T28] audit: type=1326 audit(2000000967.865:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.3.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1065.996490][ T28] audit: type=1326 audit(2000000967.865:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.3.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1066.051140][ T28] audit: type=1326 audit(2000000967.935:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.3.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1066.112146][T32562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12089'. [ 1066.121468][ T28] audit: type=1326 audit(2000000967.935:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.3.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1066.141485][T32561] loop1: detected capacity change from 0 to 512 [ 1066.201517][ T28] audit: type=1326 audit(2000000967.935:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32551 comm="syz.3.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1066.244705][T32561] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.12088: inode has both inline data and extents flags [ 1066.264509][T32561] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.12088: couldn't read orphan inode 15 (err -117) [ 1066.287402][T32561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.430107][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.514266][T32571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12092'. [ 1066.547128][T32571] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1066.851711][T32583] loop4: detected capacity change from 0 to 2048 [ 1066.937247][T32587] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.005925][T32583] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1067.028583][T32583] Remounting filesystem read-only [ 1067.088034][T29684] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1067.152828][T32591] netlink: 'syz.2.12110': attribute type 46 has an invalid length. [ 1067.169279][T32593] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1067.300355][T29684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.319372][T29684] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 1067.347789][T32599] loop2: detected capacity change from 0 to 512 [ 1067.357262][T29684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1067.392800][T29684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 1067.420684][T32599] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.12104: inode has both inline data and extents flags [ 1067.434854][T29684] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1067.449805][T29684] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1067.459267][T29684] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1067.467331][T29684] usb 4-1: Manufacturer: syz [ 1067.480446][T29684] usb 4-1: config 0 descriptor?? [ 1067.500023][T32599] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.12104: couldn't read orphan inode 15 (err -117) [ 1067.534168][T32595] loop1: detected capacity change from 0 to 8192 [ 1067.578487][T32595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1067.595638][T32599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.625891][T32595] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1067.672610][T32595] REISERFS (device loop1): using ordered data mode [ 1067.715679][T32595] reiserfs: using flush barriers [ 1067.762329][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.771594][T32595] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1067.788704][T32595] REISERFS (device loop1): checking transaction log (loop1) [ 1067.844090][T22581] usb 4-1: USB disconnect, device number 64 [ 1068.097252][T32595] REISERFS (device loop1): Using tea hash to sort names [ 1068.121002][T32595] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1068.724239][T32627] loop1: detected capacity change from 0 to 256 [ 1068.813591][T32627] FAT-fs (loop1): Directory bread(block 64) failed [ 1068.820581][T32627] FAT-fs (loop1): Directory bread(block 65) failed [ 1068.827301][T32627] FAT-fs (loop1): Directory bread(block 66) failed [ 1068.834760][T32627] FAT-fs (loop1): Directory bread(block 67) failed [ 1068.841493][T32631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12121'. [ 1068.857558][T32627] FAT-fs (loop1): Directory bread(block 68) failed [ 1068.865558][T32627] FAT-fs (loop1): Directory bread(block 69) failed [ 1068.905873][T32627] FAT-fs (loop1): Directory bread(block 70) failed [ 1068.936258][T32627] FAT-fs (loop1): Directory bread(block 71) failed [ 1068.968093][T32627] FAT-fs (loop1): Directory bread(block 72) failed [ 1068.998347][T32627] FAT-fs (loop1): Directory bread(block 73) failed [ 1069.029649][T32633] loop4: detected capacity change from 0 to 1764 [ 1069.060961][T32629] loop3: detected capacity change from 0 to 4096 [ 1069.101189][T32629] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1069.272001][T32629] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1069.867337][T32655] netlink: 'syz.1.12133': attribute type 10 has an invalid length. [ 1069.875597][T32655] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1070.034966][T32659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12135'. [ 1070.058736][T32659] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1070.343472][T32665] loop2: detected capacity change from 0 to 4096 [ 1070.361291][T32665] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1070.465241][T32665] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1070.538328][ T5835] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1070.626538][T32677] loop4: detected capacity change from 0 to 256 [ 1070.710473][T32677] FAT-fs (loop4): Directory bread(block 64) failed [ 1070.717198][T32677] FAT-fs (loop4): Directory bread(block 65) failed [ 1070.731687][ T5835] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1070.751785][T32677] FAT-fs (loop4): Directory bread(block 66) failed [ 1070.758371][ T5835] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1070.758402][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.758422][ T5835] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1070.758445][ T5835] usb 2-1: config 1 has no interface number 1 [ 1070.758492][ T5835] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1070.772350][ T5835] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1070.850410][T32677] FAT-fs (loop4): Directory bread(block 67) failed [ 1070.865721][T32677] FAT-fs (loop4): Directory bread(block 68) failed [ 1070.875059][T32677] FAT-fs (loop4): Directory bread(block 69) failed [ 1070.886281][T32677] FAT-fs (loop4): Directory bread(block 70) failed [ 1070.897083][T32677] FAT-fs (loop4): Directory bread(block 71) failed [ 1070.931155][T32677] FAT-fs (loop4): Directory bread(block 72) failed [ 1070.937843][T32677] FAT-fs (loop4): Directory bread(block 73) failed [ 1070.938052][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.938077][ T5835] usb 2-1: Product: syz [ 1070.938095][ T5835] usb 2-1: Manufacturer: syz [ 1070.938111][ T5835] usb 2-1: SerialNumber: syz [ 1071.230856][ T5835] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1071.258266][ T5835] usb 2-1: MIDIStreaming interface descriptor not found [ 1071.343210][ T5835] usb 2-1: USB disconnect, device number 59 [ 1071.457666][T27336] udevd[27336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.857516][T32700] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12155'. [ 1072.079837][T32705] loop4: detected capacity change from 0 to 512 [ 1072.258491][T32705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.272412][T32705] ext4 filesystem being mounted at /495/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.300538][T32705] __quota_error: 8 callbacks suppressed [ 1072.300559][T32705] Quota error (device loop4): write_blk: dquota write failed [ 1072.317326][T32705] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1072.328609][T32705] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1072.378464][T32705] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.12157: Failed to acquire dquot type 1 [ 1072.409872][ T28] audit: type=1800 audit(2000000974.595:942): pid=32705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12157" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1072.437066][T32715] loop1: detected capacity change from 0 to 512 [ 1072.557694][T27680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.581741][T32715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.665080][T32715] ext4 filesystem being mounted at /2987/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.829402][T32715] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.12161: corrupted xattr block 33: invalid checksum [ 1073.008629][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.665078][T32751] loop1: detected capacity change from 0 to 64 [ 1073.736558][T32751] hfs: request for non-existent node 1025 in B*Tree [ 1073.765657][T32751] hfs: request for non-existent node 1025 in B*Tree [ 1074.178516][T32761] nfs: Unknown parameter 'ntext' [ 1074.307643][T32740] loop2: detected capacity change from 0 to 32768 [ 1074.377357][T32740] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1074.586775][T32740] XFS (loop2): Ending clean mount [ 1074.792106][T24363] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1074.872468][T32754] loop4: detected capacity change from 0 to 32768 [ 1074.920057][T32754] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1074.940791][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1074.965380][ T322] tmpfs: Bad value for 'mpol' [ 1075.134675][T32754] XFS (loop4): Ending clean mount [ 1075.165183][T32754] XFS (loop4): Quotacheck needed: Please wait. [ 1075.228205][ T331] nfs: Unknown parameter 'ntext' [ 1075.296706][T32754] XFS (loop4): Quotacheck: Done. [ 1075.513533][T27680] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1076.127935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.598796][ T357] loop1: detected capacity change from 0 to 32768 [ 1076.687774][ T357] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1076.824076][ T357] XFS (loop1): Ending clean mount [ 1076.944439][ T357] XFS (loop1): Quotacheck needed: Please wait. [ 1077.117406][ T357] XFS (loop1): Quotacheck: Done. [ 1077.226136][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1077.853167][ T28] audit: type=1400 audit(2000000980.035:943): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=399 comm="syz.1.12217" [ 1078.254474][ T414] libceph: resolve '0.' (ret=-3): failed [ 1078.861278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.255423][ T452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1079.430957][ T460] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12251'. [ 1079.663287][ T468] netlink: 'syz.3.12254': attribute type 4 has an invalid length. [ 1079.698011][ T468] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.12254'. [ 1080.233825][ T491] libceph: resolve '0.' (ret=-3): failed [ 1081.121364][ T523] ieee802154 phy1 wpan1: encryption failed: -90 [ 1081.399543][ T533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.579906][ T541] loop2: detected capacity change from 0 to 8 [ 1081.944298][ T552] netlink: 'syz.4.12296': attribute type 3 has an invalid length. [ 1081.968214][ T553] loop2: detected capacity change from 0 to 256 [ 1081.975780][ T553] exfat: Deprecated parameter 'namecase' [ 1082.031689][ T553] exfat: Deprecated parameter 'namecase' [ 1082.150374][ T553] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1082.506960][ T567] loop1: detected capacity change from 0 to 8 [ 1082.850166][ T557] loop3: detected capacity change from 0 to 32768 [ 1082.868422][ T573] loop1: detected capacity change from 0 to 128 [ 1082.911325][ T572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12306'. [ 1082.930748][ T557] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1082.950296][ T573] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1082.998682][ T572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12306'. [ 1083.033781][ T573] ext4 filesystem being mounted at /3028/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.065908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1083.137824][ T573] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.12305: reserved inode found cleared - inode=2 [ 1083.223616][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1083.362831][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 1083.411291][ T580] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12309'. [ 1083.626329][ T565] loop2: detected capacity change from 0 to 32768 [ 1083.700654][ T565] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1083.758156][ T565] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1083.913690][ T565] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1084.124418][ T565] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1084.388885][T24363] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1084.493797][ T610] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 1084.578325][T24363] usb 2-1: Using ep0 maxpacket: 16 [ 1084.597339][T24363] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.669641][T24363] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1084.696504][T24363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.725788][T24363] usb 2-1: Product: syz [ 1084.748050][T24363] usb 2-1: Manufacturer: syz [ 1084.752752][T24363] usb 2-1: SerialNumber: syz [ 1084.770492][T24363] usb 2-1: config 0 descriptor?? [ 1084.793346][T24363] asix: probe of 2-1:0.0 failed with error -22 [ 1084.992300][ T622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12328'. [ 1085.010900][T24363] usb 2-1: USB disconnect, device number 60 [ 1085.028112][ T622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12328'. [ 1085.648754][ T644] loop1: detected capacity change from 0 to 128 [ 1085.671495][ T644] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1085.702641][ T644] ext4 filesystem being mounted at /3033/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.753008][ T644] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 1085.902539][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1086.616374][ T675] loop1: detected capacity change from 0 to 64 [ 1087.288057][T29684] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1087.470621][T29684] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1087.488012][T29684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1087.526694][T29684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1087.553547][T29684] usb 5-1: language id specifier not provided by device, defaulting to English [ 1087.594914][T29684] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1087.636403][T29684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.654039][T29684] usb 5-1: Manufacturer: ‰ [ 1087.664205][T29684] usb 5-1: SerialNumber: syz [ 1087.669323][ T711] netlink: 'syz.3.12369': attribute type 3 has an invalid length. [ 1087.689327][T29684] usb 5-1: config 0 descriptor?? [ 1087.709222][T29684] em28xx 5-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 1087.750118][T29684] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1088.001955][ T722] loop3: detected capacity change from 0 to 128 [ 1088.009261][T29684] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1088.018374][T29684] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1088.030293][T29684] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1088.047102][ T722] FAT-fs (loop3): Directory bread(block 414) failed [ 1088.067715][T29684] em28xx 5-1:0.0: No AC97 audio processor [ 1088.074700][ T722] FAT-fs (loop3): Directory bread(block 415) failed [ 1088.090393][ T722] FAT-fs (loop3): Directory bread(block 416) failed [ 1088.097108][ T722] FAT-fs (loop3): Directory bread(block 417) failed [ 1088.146301][T29684] usb 5-1: USB disconnect, device number 17 [ 1088.154262][ T722] FAT-fs (loop3): Directory bread(block 418) failed [ 1088.169150][ T722] FAT-fs (loop3): Directory bread(block 419) failed [ 1088.177028][T29684] em28xx 5-1:0.0: Disconnecting em28xx [ 1088.184674][ T722] FAT-fs (loop3): Directory bread(block 420) failed [ 1088.210419][ T722] FAT-fs (loop3): Directory bread(block 421) failed [ 1088.229695][ T722] FAT-fs (loop3): Directory bread(block 414) failed [ 1088.243726][ T722] FAT-fs (loop3): Directory bread(block 415) failed [ 1088.253184][ T722] syz.3.12375: attempt to access beyond end of device [ 1088.253184][ T722] loop3: rw=3, sector=478, nr_sectors = 2 limit=128 [ 1088.276848][T29684] em28xx 5-1:0.0: Freeing device [ 1088.327308][ T722] syz.3.12375: attempt to access beyond end of device [ 1088.327308][ T722] loop3: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 1088.637859][ T738] loop4: detected capacity change from 0 to 64 [ 1089.367618][ T759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12393'. [ 1089.596411][ T736] loop1: detected capacity change from 0 to 32768 [ 1089.732330][ T736] read_mapping_page failed! [ 1089.816667][ T773] netlink: 'syz.4.12399': attribute type 9 has an invalid length. [ 1089.841821][ T773] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.12399'. [ 1090.435934][ T789] loop3: detected capacity change from 0 to 512 [ 1090.526290][ T789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1090.530425][ T792] netlink: 372 bytes leftover after parsing attributes in process `syz.4.12409'. [ 1090.544104][ T789] System zones: 1-12 [ 1090.563287][ T789] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.12408: Directory hole found for htree index block 0 [ 1090.628253][ T789] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1090.637631][ T789] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.12408: Directory hole found for htree index block 0 [ 1090.676608][ T789] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1090.781381][ T789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.838274][ T789] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.12408: Directory hole found for htree index block 0 [ 1090.904236][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.032259][ T807] netlink: 'syz.1.12416': attribute type 7 has an invalid length. [ 1091.046666][ T807] netlink: 'syz.1.12416': attribute type 8 has an invalid length. [ 1091.288230][T24361] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1091.388255][ T813] netlink: 'syz.1.12418': attribute type 3 has an invalid length. [ 1091.498066][T24361] usb 3-1: Using ep0 maxpacket: 16 [ 1091.514344][T24361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.544216][T24361] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1091.565017][T24361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.578035][T24361] usb 3-1: Product: syz [ 1091.582289][T24361] usb 3-1: Manufacturer: syz [ 1091.586932][T24361] usb 3-1: SerialNumber: syz [ 1091.621121][T24361] usb 3-1: config 0 descriptor?? [ 1091.640448][T24361] asix: probe of 3-1:0.0 failed with error -22 [ 1091.756739][ T817] netlink: 372 bytes leftover after parsing attributes in process `syz.3.12420'. [ 1091.865669][T24363] usb 3-1: USB disconnect, device number 57 [ 1091.907460][ T803] loop4: detected capacity change from 0 to 32768 [ 1091.966660][ T803] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1091.979957][ T803] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1092.022980][ T803] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1092.193761][ T803] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1092.537057][ T834] loop1: detected capacity change from 0 to 512 [ 1092.583337][ T834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.652585][ T834] ext4 filesystem being mounted at /3058/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.907113][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.094502][ T854] overlayfs: missing 'lowerdir' [ 1093.498254][ T5835] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1093.702209][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1093.718498][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1093.740067][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.787835][ T873] loop4: detected capacity change from 0 to 4096 [ 1093.790500][ T5835] usb 2-1: language id specifier not provided by device, defaulting to English [ 1093.827142][ T5835] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1093.838420][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.846534][ T5835] usb 2-1: Manufacturer: ‰ [ 1093.855329][ T873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.868047][ T5835] usb 2-1: SerialNumber: syz [ 1093.873796][ T5835] usb 2-1: config 0 descriptor?? [ 1093.888821][ T5835] em28xx 2-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 1093.903623][ T5835] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1094.028927][T24361] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1094.048804][T27680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.058192][ T856] loop3: detected capacity change from 0 to 32768 [ 1094.088935][ T856] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1094.097251][ T856] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1094.134147][ T856] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1094.179235][ T5835] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1094.188373][ T5835] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1094.208260][ T5835] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1094.217970][ T5835] em28xx 2-1:0.0: No AC97 audio processor [ 1094.242640][ T5835] usb 2-1: USB disconnect, device number 61 [ 1094.270671][ T5835] em28xx 2-1:0.0: Disconnecting em28xx [ 1094.278814][T24361] usb 3-1: Using ep0 maxpacket: 32 [ 1094.283827][ T5835] em28xx 2-1:0.0: Freeing device [ 1094.289713][ T878] Cannot find add_set index 2 as target [ 1094.296867][T24361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.328819][T24361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.361170][T24361] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1094.370582][ T856] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1094.433831][T24361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.445619][T24361] usb 3-1: config 0 descriptor?? [ 1094.455946][T24361] hub 3-1:0.0: USB hub found [ 1094.660741][T24361] hub 3-1:0.0: 1 port detected [ 1094.872887][T24361] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1094.898065][T24361] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1094.925167][T24361] usbhid 3-1:0.0: can't add hid device: -71 [ 1094.937456][T24361] usbhid: probe of 3-1:0.0 failed with error -71 [ 1094.985460][T24361] usb 3-1: USB disconnect, device number 58 [ 1095.424589][ T882] loop4: detected capacity change from 0 to 32768 [ 1095.444781][ T882] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.12449 (882) [ 1095.463801][ T882] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1095.474309][ T882] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1095.485386][ T882] BTRFS info (device loop4): enabling ssd optimizations [ 1095.496942][ T882] BTRFS info (device loop4): not using ssd optimizations [ 1095.507237][ T882] BTRFS info (device loop4): turning off barriers [ 1095.542408][ T882] BTRFS info (device loop4): using free space tree [ 1095.743113][ T905] loop3: detected capacity change from 0 to 4096 [ 1095.881589][ T905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.126940][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.154777][T27680] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1096.794279][ T945] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1096.800907][ T945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1096.855254][ T945] vhci_hcd vhci_hcd.0: Device attached [ 1096.878480][ T952] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 1096.885116][ T952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1096.948215][ T952] vhci_hcd vhci_hcd.0: Device attached [ 1096.990940][ T953] vhci_hcd: connection closed [ 1096.991059][ T946] vhci_hcd: connection closed [ 1096.996646][ T1136] vhci_hcd: stop threads [ 1097.010160][ T1136] vhci_hcd: release socket [ 1097.038165][T24361] vhci_hcd: vhci_device speed not set [ 1097.047965][ T1136] vhci_hcd: disconnect device [ 1097.071510][ T1136] vhci_hcd: stop threads [ 1097.075865][ T1136] vhci_hcd: release socket [ 1097.097844][ T1136] vhci_hcd: disconnect device [ 1097.158169][T24361] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 1097.165927][T24361] usb 39-1: enqueue for inactive port 0 [ 1097.274432][T24361] vhci_hcd: vhci_device speed not set [ 1097.451963][ T932] loop1: detected capacity change from 0 to 32768 [ 1097.479674][ T964] loop4: detected capacity change from 0 to 512 [ 1097.479897][ T932] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1097.497369][ T932] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1097.583530][ T964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.619158][ T964] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.643770][ T932] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1097.751149][ T28] audit: type=1326 audit(2000000999.935:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.3.12472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1097.815417][T27680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.824417][ T28] audit: type=1326 audit(2000000999.935:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.3.12472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1097.824493][ T28] audit: type=1326 audit(2000000999.955:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.3.12472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1097.824540][ T28] audit: type=1326 audit(2000000999.955:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.3.12472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1097.824587][ T28] audit: type=1326 audit(2000000999.965:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=968 comm="syz.3.12472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf3079bf79 code=0x7ffc0000 [ 1098.012429][ T932] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1098.197422][ T973] loop4: detected capacity change from 0 to 256 [ 1098.309524][ T973] FAT-fs (loop4): Directory bread(block 64) failed [ 1098.316175][ T973] FAT-fs (loop4): Directory bread(block 65) failed [ 1098.348646][ T973] FAT-fs (loop4): Directory bread(block 66) failed [ 1098.357250][ T973] FAT-fs (loop4): Directory bread(block 67) failed [ 1098.414682][ T973] FAT-fs (loop4): Directory bread(block 68) failed [ 1098.438907][ T973] FAT-fs (loop4): Directory bread(block 69) failed [ 1098.476238][ T973] FAT-fs (loop4): Directory bread(block 70) failed [ 1098.490776][ T973] FAT-fs (loop4): Directory bread(block 71) failed [ 1098.524403][ T962] loop2: detected capacity change from 0 to 40427 [ 1098.531312][ T973] FAT-fs (loop4): Directory bread(block 72) failed [ 1098.553629][ T973] FAT-fs (loop4): Directory bread(block 73) failed [ 1098.571643][ T962] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 1098.599552][ T962] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1098.630299][ T979] ieee802154 phy1 wpan1: encryption failed: -22 [ 1098.692291][ T962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1098.918827][ T962] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1098.925968][ T962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1099.085978][ T962] syz.2.12469: attempt to access beyond end of device [ 1099.085978][ T962] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1099.101256][ T990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12481'. [ 1099.136140][ T990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12481'. [ 1099.158620][ T990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12481'. [ 1099.304156][ T5778] syz-executor: attempt to access beyond end of device [ 1099.304156][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1099.370392][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1099.818135][ T1012] loop1: detected capacity change from 0 to 128 [ 1100.055892][ T1018] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12494'. [ 1100.066605][ T1021] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12495'. [ 1100.076171][ T1021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12495'. [ 1100.098310][ T1018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12494'. [ 1100.124816][ T1021] tc_dump_action: action bad kind [ 1100.131757][ T1018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12494'. [ 1100.481725][ T1029] block device autoloading is deprecated and will be removed. [ 1100.892566][ T1053] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12506'. [ 1100.934207][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12506'. [ 1100.949739][ T1053] tc_dump_action: action bad kind [ 1101.388148][T24363] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1101.588011][T24363] usb 4-1: Using ep0 maxpacket: 32 [ 1101.609214][T24363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.640773][T24363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.652907][ T28] audit: type=1326 audit(2000001003.845:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.1.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9df9bf79 code=0x7ffc0000 [ 1101.688038][T24363] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1101.714882][T24363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.733577][ T28] audit: type=1326 audit(2000001003.845:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.1.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9df9bf79 code=0x7ffc0000 [ 1101.769840][T24363] usb 4-1: config 0 descriptor?? [ 1101.780696][T24363] hub 4-1:0.0: USB hub found [ 1101.798277][ T28] audit: type=1326 audit(2000001003.865:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.1.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f9e9df9bf79 code=0x7ffc0000 [ 1101.872932][ T28] audit: type=1326 audit(2000001003.865:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.1.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9df9bf79 code=0x7ffc0000 [ 1102.018132][T24363] hub 4-1:0.0: 1 port detected [ 1102.215075][T24363] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1102.223630][T24363] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1102.269565][T24363] usbhid 4-1:0.0: can't add hid device: -71 [ 1102.275690][T24363] usbhid: probe of 4-1:0.0 failed with error -71 [ 1102.349910][T24363] usb 4-1: USB disconnect, device number 65 [ 1102.715349][ T1115] loop4: detected capacity change from 0 to 512 [ 1102.759606][ T1115] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1102.832249][ T1115] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1103.331069][ T1135] loop4: detected capacity change from 0 to 2048 [ 1103.350834][ T1135] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1103.392949][ T1139] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1103.418465][ T5814] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1103.620246][ T5814] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1103.629632][ T5814] usb 2-1: config 0 has no interface number 0 [ 1103.635820][ T5814] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1103.656091][ T5814] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1103.673622][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.696410][ T5814] usb 2-1: Product: syz [ 1103.708074][ T5814] usb 2-1: Manufacturer: syz [ 1103.723583][ T5814] usb 2-1: SerialNumber: syz [ 1103.751508][ T5814] usb 2-1: config 0 descriptor?? [ 1103.885946][ T1153] netlink: 'syz.3.12554': attribute type 8 has an invalid length. [ 1103.979228][ T5814] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v184 fw v210.0.0 (2 channels) [ 1104.189888][ T5814] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1104.207020][ T5814] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1104.254271][ T1163] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1104.299630][ T5814] peak_usb: probe of 2-1:0.29 failed with error -71 [ 1104.335566][ T1165] __nla_validate_parse: 3 callbacks suppressed [ 1104.335588][ T1165] netlink: 45 bytes leftover after parsing attributes in process `syz.3.12561'. [ 1104.338437][ T5814] usb 2-1: USB disconnect, device number 62 [ 1104.545189][ T1172] loop3: detected capacity change from 0 to 256 [ 1104.584439][ T1172] FAT-fs (loop3): Directory bread(block 64) failed [ 1104.595077][ T1172] FAT-fs (loop3): Directory bread(block 65) failed [ 1104.607633][ T1172] FAT-fs (loop3): Directory bread(block 66) failed [ 1104.618795][ T1172] FAT-fs (loop3): Directory bread(block 67) failed [ 1104.625525][ T1172] FAT-fs (loop3): Directory bread(block 68) failed [ 1104.640343][ T1172] FAT-fs (loop3): Directory bread(block 69) failed [ 1104.647229][ T1172] FAT-fs (loop3): Directory bread(block 70) failed [ 1104.659516][ T1172] FAT-fs (loop3): Directory bread(block 71) failed [ 1104.666239][ T1172] FAT-fs (loop3): Directory bread(block 72) failed [ 1104.682652][ T1172] FAT-fs (loop3): Directory bread(block 73) failed [ 1104.784315][ T1176] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12564'. [ 1104.813062][ T1176] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12564'. [ 1104.901461][ T28] audit: type=1326 audit(2000001007.085:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1177 comm="syz.2.12565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b9619bf79 code=0x0 [ 1104.994992][ T1180] loop1: detected capacity change from 0 to 512 [ 1105.085402][ T1180] EXT4-fs: Ignoring removed bh option [ 1105.117318][ T1180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.150811][ T1180] ext4 filesystem being mounted at /3089/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1105.404029][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.442637][ T1193] loop3: detected capacity change from 0 to 4096 [ 1105.463906][ T1193] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1105.555370][ T1193] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1105.614445][ T1193] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1105.614445][ T1193] [ 1106.155249][ T1216] loop3: detected capacity change from 0 to 512 [ 1106.225463][ T1216] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1106.324897][ T1225] netlink: 45 bytes leftover after parsing attributes in process `syz.2.12587'. [ 1106.325191][ T1216] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1106.508230][T24361] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1106.648715][ T1234] netlink: 176 bytes leftover after parsing attributes in process `syz.4.12591'. [ 1106.720589][T24361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.748247][T24361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1106.770323][T24361] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1106.795068][T24361] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.805387][T24361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1106.819895][T24361] usb 2-1: SerialNumber: syz [ 1106.853609][ T1221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1106.878184][T24361] hub 2-1:1.0: bad descriptor, ignoring hub [ 1106.886769][T24361] hub: probe of 2-1:1.0 failed with error -5 [ 1106.911856][T24361] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1107.011261][ T1242] loop3: detected capacity change from 0 to 2048 [ 1107.038412][ T1242] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1107.111024][ T1245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1107.140519][T24361] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1107.219184][T24361] usb 2-1: USB disconnect, device number 63 [ 1107.261621][ T1247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12597'. [ 1107.477190][ T1253] netlink: 'syz.3.12598': attribute type 16 has an invalid length. [ 1107.487140][ T1253] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12598'. [ 1107.643181][ T1259] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1108.028080][T29684] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1108.225552][T29684] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1108.253872][T29684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.280283][T29684] usb 4-1: Product: syz [ 1108.284581][T29684] usb 4-1: Manufacturer: syz [ 1108.301859][T29684] usb 4-1: SerialNumber: syz [ 1108.325103][T29684] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1108.351358][T24363] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1108.812422][T29684] usb 4-1: USB disconnect, device number 66 [ 1109.192633][ T1314] loop4: detected capacity change from 0 to 2048 [ 1109.249707][ T1314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1109.278254][ T5814] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1109.407969][T24363] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1109.437598][T24363] ath9k_htc: Failed to initialize the device [ 1109.478199][T29684] usb 4-1: ath9k_htc: USB layer deinitialized [ 1109.494900][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 1109.510353][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1109.549221][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.570627][ T5814] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1109.603352][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1109.615480][ T1323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12630'. [ 1109.648155][ T5814] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1109.698055][ T5814] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1109.707225][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.757420][ T5814] usb 2-1: config 0 descriptor?? [ 1109.783992][ T1308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1109.801219][ T1327] netlink: 'syz.2.12633': attribute type 10 has an invalid length. [ 1109.829599][ T1327] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1109.920777][ T1333] netlink: 'syz.4.12635': attribute type 16 has an invalid length. [ 1109.929710][ T1333] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12635'. [ 1110.271871][ T1337] loop2: detected capacity change from 0 to 4096 [ 1110.307263][ T1337] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1110.319480][T24361] usb 2-1: USB disconnect, device number 64 [ 1110.327302][T23304] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1110.542320][ T1337] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1110.660959][ T1337] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1110.660959][ T1337] [ 1110.708230][ T5814] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1110.913931][ T5814] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1110.933606][ T5814] usb 5-1: config 0 has no interface number 0 [ 1110.952822][ T5814] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1110.981413][ T5814] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1111.008218][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.016326][ T5814] usb 5-1: Product: syz [ 1111.026428][ T5814] usb 5-1: Manufacturer: syz [ 1111.031500][ T5814] usb 5-1: SerialNumber: syz [ 1111.045643][ T5814] usb 5-1: config 0 descriptor?? [ 1111.118442][T24363] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1111.126903][ T1349] loop3: detected capacity change from 0 to 32768 [ 1111.167793][ T1349] ialloc: diAlloc returned -17! [ 1111.291985][ T5814] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v184 fw v210.0.0 (2 channels) [ 1111.312507][T24363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1111.328084][T29684] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1111.349994][T24363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1111.362036][T24363] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1111.378264][T24363] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.402231][T24363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.418470][T24363] usb 3-1: SerialNumber: syz [ 1111.436778][ T1351] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1111.456328][T24363] hub 3-1:1.0: bad descriptor, ignoring hub [ 1111.478110][T24363] hub: probe of 3-1:1.0 failed with error -5 [ 1111.484984][T24363] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1111.518040][ T5814] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1111.526608][ T5814] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1111.543275][T29684] usb 2-1: Using ep0 maxpacket: 8 [ 1111.560599][T29684] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1111.581031][T29684] usb 2-1: config 0 has no interface number 0 [ 1111.587493][T29684] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1111.623440][T29684] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1111.636156][T29684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.660840][ T5814] peak_usb: probe of 5-1:0.29 failed with error -71 [ 1111.688499][T29684] usb 2-1: Product: syz [ 1111.695527][T24363] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1111.708572][T29684] usb 2-1: Manufacturer: syz [ 1111.713268][T29684] usb 2-1: SerialNumber: syz [ 1111.719904][ T5814] usb 5-1: USB disconnect, device number 18 [ 1111.739208][T29684] usb 2-1: config 0 descriptor?? [ 1111.760285][T24363] usb 3-1: USB disconnect, device number 59 [ 1111.969425][T29684] i2c-cp2615: probe of 2-1:0.1 failed with error -22 [ 1112.209093][ T787] usb 2-1: USB disconnect, device number 65 [ 1113.529175][ T1411] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1113.627436][ T1417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12677'. [ 1114.287127][ T1443] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1114.650209][ T1456] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1114.758303][T24363] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1114.991417][T24363] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1115.001765][T24363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.013981][T24363] usb 5-1: Product: syz [ 1115.029126][T24363] usb 5-1: Manufacturer: syz [ 1115.036035][T24363] usb 5-1: SerialNumber: syz [ 1115.051152][T24363] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1115.072623][ T5814] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1115.299157][ T1475] loop3: detected capacity change from 0 to 64 [ 1115.373359][ T1475] syz.3.12705: attempt to access beyond end of device [ 1115.373359][ T1475] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1115.449207][ T1475] Buffer I/O error on dev loop3, logical block 512, async page read [ 1115.457565][ T1475] syz.3.12705: attempt to access beyond end of device [ 1115.457565][ T1475] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1115.475895][ T1475] Buffer I/O error on dev loop3, logical block 56576, async page read [ 1116.048034][ T787] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1116.198443][ T5814] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1116.218383][ T5814] ath9k_htc: Failed to initialize the device [ 1116.254402][ T787] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1116.296796][ T5814] usb 5-1: ath9k_htc: USB layer deinitialized [ 1116.298109][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.332413][ T787] usb 3-1: Product: syz [ 1116.336768][ T787] usb 3-1: Manufacturer: syz [ 1116.358169][ T787] usb 3-1: SerialNumber: syz [ 1116.412802][ T1503] loop1: detected capacity change from 0 to 1764 [ 1116.416411][ T787] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1116.447336][ T1503] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1116.472970][T22581] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.602877][ T5814] usb 5-1: USB disconnect, device number 19 [ 1116.936153][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.983103][ T787] usb 3-1: USB disconnect, device number 60 [ 1117.027448][ T1518] ip6gre4: entered promiscuous mode [ 1117.155465][ T1520] x_tables: duplicate entry at hook 1 [ 1117.300259][ T1524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12728'. [ 1117.559052][T22581] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1117.571834][ T1516] loop1: detected capacity change from 0 to 32768 [ 1117.588179][T22581] ath9k_htc: Failed to initialize the device [ 1117.595077][ T787] usb 3-1: ath9k_htc: USB layer deinitialized [ 1117.680821][ T1516] ialloc: diAlloc returned -17! [ 1118.026242][ T1545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12735'. [ 1118.503491][ T1560] netlink: 'syz.2.12746': attribute type 6 has an invalid length. [ 1119.240318][ T1587] ip6gre1: entered promiscuous mode [ 1119.442456][ T1589] loop3: detected capacity change from 0 to 4096 [ 1119.544196][ T1600] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1120.278033][T29684] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1120.458751][T29684] usb 2-1: Using ep0 maxpacket: 32 [ 1120.469353][T29684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1120.486870][T29684] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1120.505375][T29684] usb 2-1: config 7 has no interface number 0 [ 1120.528917][T29684] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1120.563394][T29684] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1120.589408][T29684] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1120.609692][T29684] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1120.628283][T29684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.655924][T29684] usb 2-1: Product: syz [ 1120.666198][T29684] usb 2-1: Manufacturer: syz [ 1120.672627][T29684] usb 2-1: SerialNumber: syz [ 1120.818288][ T1642] loop3: detected capacity change from 0 to 1024 [ 1120.958368][T29684] usb 2-1: Unknown endpoint type found, address 0x07 [ 1120.965188][T29684] usb 2-1: Not enough endpoints found in device, aborting! [ 1121.153320][T29684] usb 2-1: USB disconnect, device number 66 [ 1121.248247][ T1652] loop2: detected capacity change from 0 to 1764 [ 1121.274342][ T1652] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1121.347027][ T1654] netlink: 'syz.4.12791': attribute type 6 has an invalid length. [ 1121.872963][ T1672] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1122.022916][ T1676] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12802'. [ 1122.192975][ T1682] netlink: 'syz.1.12806': attribute type 21 has an invalid length. [ 1122.252871][ T1686] loop4: detected capacity change from 0 to 256 [ 1122.288757][ T1686] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 1122.656759][ T1695] loop2: detected capacity change from 0 to 1024 [ 1122.660071][ T1697] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1123.437244][ T1723] loop2: detected capacity change from 0 to 64 [ 1123.455191][ T1722] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1123.562165][ T1723] Trying to free block not in datazone [ 1123.607704][ T1723] Trying to free block not in datazone [ 1123.643416][ T1723] Trying to free block not in datazone [ 1123.678888][ T28] audit: type=1400 audit(2000001025.865:954): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=1729 comm="syz.3.12828" [ 1124.367979][ T28] audit: type=1400 audit(2000001026.535:955): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=1752 comm="syz.2.12841" [ 1124.514617][ T1759] loop3: detected capacity change from 0 to 1764 [ 1124.593142][ T1759] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1125.350460][ T1791] loop3: detected capacity change from 0 to 64 [ 1125.448546][ T1791] Trying to free block not in datazone [ 1125.454174][ T1791] Trying to free block not in datazone [ 1125.470911][ T1791] Trying to free block not in datazone [ 1125.488572][ T1793] netlink: 'syz.4.12861': attribute type 21 has an invalid length. [ 1125.780614][ T1800] loop3: detected capacity change from 0 to 1024 [ 1125.804186][ T1806] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1125.998635][ T1808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12868'. [ 1126.029510][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1126.040172][ T1808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12868'. [ 1126.957997][ T5814] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1127.151381][ T5814] usb 3-1: config 1 has an invalid interface number: 213 but max is 0 [ 1127.177981][ T5814] usb 3-1: config 1 has no interface number 0 [ 1127.198134][ T5814] usb 3-1: config 1 interface 213 has no altsetting 0 [ 1127.221531][ T5814] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=2a.7a [ 1127.254117][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.278124][ T5814] usb 3-1: Product: syz [ 1127.285789][ T5814] usb 3-1: Manufacturer: 濦턁닫鼮㴩횠茶瞤歜ง๡䳲敯𿌼 [ 1127.295610][ T5814] usb 3-1: SerialNumber: syz [ 1127.540300][ T5814] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1127.629424][ T5814] snd-usb-audio: probe of 3-1:1.213 failed with error -2 [ 1127.668301][ T5814] usb 3-1: USB disconnect, device number 61 [ 1127.726628][T28465] udevd[28465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.830563][ T1868] netlink: 'syz.3.12896': attribute type 2 has an invalid length. [ 1128.218191][ T5814] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1128.399656][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 1128.414427][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1128.418912][ T1882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12904'. [ 1128.440176][ T5814] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 1128.454409][ T1882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12904'. [ 1128.459302][ T5814] usb 5-1: config 7 has no interface number 0 [ 1128.478270][ T1882] vlan0: entered promiscuous mode [ 1128.487994][ T5814] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1128.509171][ T1866] loop1: detected capacity change from 0 to 32768 [ 1128.516126][ T5814] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1128.538164][ T1884] loop2: detected capacity change from 0 to 1024 [ 1128.551132][ T5814] usb 5-1: config 7 interface 187 has no altsetting 0 [ 1128.574320][ T5814] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1128.604738][ T1866] find_entry called with index >= next_index [ 1128.612147][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.627489][ T1866] find_entry called with index >= next_index [ 1128.634942][ T5814] usb 5-1: Product: syz [ 1128.647562][ T5814] usb 5-1: Manufacturer: syz [ 1128.654552][ T1866] find_entry called with index >= next_index [ 1128.662914][ T5814] usb 5-1: SerialNumber: syz [ 1128.672864][ T1866] find_entry called with index >= next_index [ 1128.690084][ T1866] find_entry called with index >= next_index [ 1128.823149][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1128.956837][ T5814] usb 5-1: Unknown endpoint type found, address 0x07 [ 1128.975557][ T5814] usb 5-1: Not enough endpoints found in device, aborting! [ 1128.995661][ T1888] SET target dimension over the limit! [ 1129.225665][ T787] usb 5-1: USB disconnect, device number 20 [ 1130.006900][ T1917] loop1: detected capacity change from 0 to 4096 [ 1130.080964][ T1917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.347424][ T1936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12928'. [ 1130.384948][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.411267][ T1936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12928'. [ 1130.644962][ T1942] netlink: 'syz.2.12932': attribute type 1 has an invalid length. [ 1130.653178][ T1942] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1131.188227][ T1960] loop4: detected capacity change from 0 to 64 [ 1131.529065][ T1970] SET target dimension over the limit! [ 1131.755758][ T1978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12950'. [ 1131.765145][ T1978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12950'. [ 1131.913814][ T1984] netlink: 'syz.3.12952': attribute type 46 has an invalid length. [ 1131.962898][ T1984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12952'. [ 1132.627675][ T2008] Timeout policy `syz1' can only be used by L3 protocol number 35078 [ 1132.872973][ T2017] netlink: 'syz.4.12967': attribute type 46 has an invalid length. [ 1132.918179][ T2017] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12967'. [ 1133.258972][ T2028] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12974'. [ 1133.583232][ T2040] loop3: detected capacity change from 0 to 64 [ 1133.622907][ T2040] hfs: unable to locate alternate MDB [ 1133.678946][ T2040] hfs: continuing without an alternate MDB [ 1133.714484][ T2044] netlink: 'syz.1.12981': attribute type 3 has an invalid length. [ 1133.717743][ T2043] autofs4:pid:2043:autofs_fill_super: called with bogus options [ 1133.733803][ T2044] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.12981'. [ 1133.939729][ T3503] [ 1133.942147][ T3503] ====================================================== [ 1133.949237][ T3503] WARNING: possible circular locking dependency detected [ 1133.956302][ T3503] syzkaller #0 Not tainted [ 1133.960757][ T3503] ------------------------------------------------------ [ 1133.967814][ T3503] kworker/u4:10/3503 is trying to acquire lock: [ 1133.974093][ T3503] ffff8880267e5578 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 1133.984970][ T3503] [ 1133.984970][ T3503] but task is already holding lock: [ 1133.992468][ T3503] ffff88805f0d40b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1134.002150][ T3503] [ 1134.002150][ T3503] which lock already depends on the new lock. [ 1134.002150][ T3503] [ 1134.012598][ T3503] [ 1134.012598][ T3503] the existing dependency chain (in reverse order) is: [ 1134.021657][ T3503] [ 1134.021657][ T3503] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1134.030249][ T3503] __mutex_lock+0x136/0xcc0 [ 1134.035565][ T3503] hfs_find_init+0x17e/0x1f0 [ 1134.040737][ T3503] hfs_extend_file+0x361/0x1380 [ 1134.046236][ T3503] hfs_bmap_reserve+0x107/0x430 [ 1134.051663][ T3503] hfs_cat_create+0x1fe/0x6b0 [ 1134.056915][ T3503] hfs_mkdir+0x6c/0xe0 [ 1134.061549][ T3503] vfs_mkdir+0x296/0x440 [ 1134.067481][ T3503] do_mkdirat+0x1dc/0x450 [ 1134.072390][ T3503] __x64_sys_mkdirat+0x89/0xa0 [ 1134.077722][ T3503] do_syscall_64+0x55/0xa0 [ 1134.082728][ T3503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.089193][ T3503] [ 1134.089193][ T3503] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1134.098481][ T3503] __lock_acquire+0x2df1/0x7d40 [ 1134.103919][ T3503] lock_acquire+0x19e/0x420 [ 1134.108996][ T3503] __mutex_lock+0x136/0xcc0 [ 1134.114096][ T3503] hfs_extend_file+0xff/0x1380 [ 1134.119456][ T3503] hfs_bmap_reserve+0x107/0x430 [ 1134.124889][ T3503] __hfs_ext_write_extent+0x1fa/0x470 [ 1134.130838][ T3503] hfs_ext_write_extent+0x17f/0x210 [ 1134.136617][ T3503] hfs_write_inode+0xdc/0x880 [ 1134.142051][ T3503] __writeback_single_inode+0x705/0xec0 [ 1134.148186][ T3503] writeback_sb_inodes+0x7cd/0xf50 [ 1134.153873][ T3503] wb_writeback+0x46a/0xbf0 [ 1134.158941][ T3503] wb_workfn+0x400/0xe60 [ 1134.163761][ T3503] process_scheduled_works+0xa5d/0x15d0 [ 1134.169872][ T3503] worker_thread+0xa55/0xfc0 [ 1134.175199][ T3503] kthread+0x2fa/0x390 [ 1134.179817][ T3503] ret_from_fork+0x48/0x80 [ 1134.184824][ T3503] ret_from_fork_asm+0x11/0x20 [ 1134.190251][ T3503] [ 1134.190251][ T3503] other info that might help us debug this: [ 1134.190251][ T3503] [ 1134.200510][ T3503] Possible unsafe locking scenario: [ 1134.200510][ T3503] [ 1134.207986][ T3503] CPU0 CPU1 [ 1134.213393][ T3503] ---- ---- [ 1134.218783][ T3503] lock(&tree->tree_lock#2/1); [ 1134.223686][ T3503] lock(&HFS_I(tree->inode)->extents_lock); [ 1134.232227][ T3503] lock(&tree->tree_lock#2/1); [ 1134.239677][ T3503] lock(&HFS_I(tree->inode)->extents_lock); [ 1134.245712][ T3503] [ 1134.245712][ T3503] *** DEADLOCK *** [ 1134.245712][ T3503] [ 1134.253981][ T3503] 3 locks held by kworker/u4:10/3503: [ 1134.259377][ T3503] #0: ffff88801a67e938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1134.270666][ T3503] #1: ffffc9000cd87d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1134.283192][ T3503] #2: ffff88805f0d40b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1134.293472][ T3503] [ 1134.293472][ T3503] stack backtrace: [ 1134.299385][ T3503] CPU: 0 PID: 3503 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1134.307045][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1134.317142][ T3503] Workqueue: writeback wb_workfn (flush-7:3) [ 1134.323183][ T3503] Call Trace: [ 1134.326508][ T3503] [ 1134.329466][ T3503] dump_stack_lvl+0x18c/0x250 [ 1134.334189][ T3503] ? load_image+0x400/0x400 [ 1134.338733][ T3503] ? show_regs_print_info+0x20/0x20 [ 1134.343974][ T3503] ? print_circular_bug+0x12b/0x1a0 [ 1134.349225][ T3503] check_noncircular+0x2fc/0x400 [ 1134.354213][ T3503] ? look_up_lock_class+0x75/0x140 [ 1134.359395][ T3503] ? print_deadlock_bug+0x5d0/0x5d0 [ 1134.364690][ T3503] ? lockdep_lock+0xf5/0x230 [ 1134.369326][ T3503] ? _find_first_zero_bit+0xd3/0x100 [ 1134.374678][ T3503] __lock_acquire+0x2df1/0x7d40 [ 1134.379576][ T3503] ? arch_stack_walk+0x16e/0x190 [ 1134.384547][ T3503] ? ret_from_fork_asm+0x11/0x20 [ 1134.389523][ T3503] ? verify_lock_unused+0x140/0x140 [ 1134.394759][ T3503] ? stack_trace_save+0xaa/0x100 [ 1134.399734][ T3503] ? stack_trace_snprint+0xf0/0xf0 [ 1134.404901][ T3503] ? check_noncircular+0x18a/0x400 [ 1134.410060][ T3503] ? print_deadlock_bug+0x5d0/0x5d0 [ 1134.415287][ T3503] lock_acquire+0x19e/0x420 [ 1134.419822][ T3503] ? hfs_extend_file+0xff/0x1380 [ 1134.424817][ T3503] ? __might_sleep+0xe0/0xe0 [ 1134.429444][ T3503] ? read_lock_is_recursive+0x20/0x20 [ 1134.434863][ T3503] __mutex_lock+0x136/0xcc0 [ 1134.439430][ T3503] ? hfs_extend_file+0xff/0x1380 [ 1134.444409][ T3503] ? verify_lock_unused+0x140/0x140 [ 1134.449642][ T3503] ? hfs_extend_file+0xff/0x1380 [ 1134.454621][ T3503] ? mutex_lock_nested+0x20/0x20 [ 1134.459765][ T3503] hfs_extend_file+0xff/0x1380 [ 1134.464691][ T3503] ? hfs_ext_write_extent+0x152/0x210 [ 1134.470122][ T3503] ? hfs_write_inode+0xdc/0x880 [ 1134.475116][ T3503] ? hfs_get_block+0xc50/0xc50 [ 1134.479919][ T3503] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1134.486104][ T3503] ? rcu_is_watching+0x15/0xb0 [ 1134.491068][ T3503] ? trace_contention_end+0x39/0xe0 [ 1134.496296][ T3503] ? __asan_memset+0x22/0x40 [ 1134.500913][ T3503] ? hfs_brec_find+0x19b/0x500 [ 1134.505773][ T3503] ? hfs_find_init+0x17e/0x1f0 [ 1134.510645][ T3503] hfs_bmap_reserve+0x107/0x430 [ 1134.515546][ T3503] __hfs_ext_write_extent+0x1fa/0x470 [ 1134.520986][ T3503] hfs_ext_write_extent+0x17f/0x210 [ 1134.526251][ T3503] ? verify_lock_unused+0x140/0x140 [ 1134.531502][ T3503] ? hfs_ext_find_block+0x190/0x190 [ 1134.536744][ T3503] ? blk_start_plug+0x51/0x1a0 [ 1134.541542][ T3503] hfs_write_inode+0xdc/0x880 [ 1134.546253][ T3503] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1134.551661][ T3503] ? __writeback_single_inode+0x48d/0xec0 [ 1134.557435][ T3503] ? __lock_acquire+0x7d40/0x7d40 [ 1134.562525][ T3503] ? do_raw_spin_lock+0x11f/0x2c0 [ 1134.567660][ T3503] ? __rwlock_init+0x150/0x150 [ 1134.572479][ T3503] __writeback_single_inode+0x705/0xec0 [ 1134.578081][ T3503] writeback_sb_inodes+0x7cd/0xf50 [ 1134.583259][ T3503] ? queue_io+0x550/0x550 [ 1134.587644][ T3503] ? rcu_is_watching+0x15/0xb0 [ 1134.592467][ T3503] wb_writeback+0x46a/0xbf0 [ 1134.597022][ T3503] ? queue_io+0x311/0x550 [ 1134.601406][ T3503] ? percpu_ref_tryget+0x250/0x250 [ 1134.606752][ T3503] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1134.612779][ T3503] ? _raw_spin_unlock_irq+0x23/0x50 [ 1134.618038][ T3503] wb_workfn+0x400/0xe60 [ 1134.622347][ T3503] ? inode_wait_for_writeback+0x230/0x230 [ 1134.628133][ T3503] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1134.634164][ T3503] ? read_lock_is_recursive+0x20/0x20 [ 1134.639594][ T3503] ? _raw_spin_unlock_irq+0x23/0x50 [ 1134.644855][ T3503] ? process_scheduled_works+0x96f/0x15d0 [ 1134.650617][ T3503] ? process_scheduled_works+0x96f/0x15d0 [ 1134.656641][ T3503] process_scheduled_works+0xa5d/0x15d0 [ 1134.662800][ T3503] ? assign_work+0x430/0x430 [ 1134.667431][ T3503] ? assign_work+0x3d0/0x430 [ 1134.672056][ T3503] worker_thread+0xa55/0xfc0 [ 1134.676701][ T3503] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1134.682636][ T3503] ? _raw_spin_unlock+0x40/0x40 [ 1134.687568][ T3503] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1134.693519][ T3503] kthread+0x2fa/0x390 [ 1134.697632][ T3503] ? pr_cont_work+0x560/0x560 [ 1134.702353][ T3503] ? kthread_blkcg+0xd0/0xd0 [ 1134.706983][ T3503] ret_from_fork+0x48/0x80 [ 1134.711451][ T3503] ? kthread_blkcg+0xd0/0xd0 [ 1134.716082][ T3503] ret_from_fork_asm+0x11/0x20 [ 1134.720936][ T3503] [ 1134.802796][ T2053] loop3: detected capacity change from 0 to 64 [ 1134.817701][ T2054] tipc: Trying to set illegal importance in message