last executing test programs: 3.16670299s ago: executing program 1 (id=2981): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) 3.039334063s ago: executing program 1 (id=2983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f616463617336af1e4deaf374"], 0x38}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 2.86893592s ago: executing program 1 (id=2986): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7000000}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x2, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.836799244s ago: executing program 0 (id=2987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x3, 0x4) 2.711285426s ago: executing program 1 (id=2989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000006000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x38, 0xe, 0x0, &(0x7f0000000240)="00000000000800005bdfa092873f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.596498998s ago: executing program 0 (id=2991): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/24, 0x18) getdents64(r0, 0x0, 0x36) 2.468311211s ago: executing program 0 (id=2993): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0x8001, 0x1f, 0x4, 0x0, 0xd, 0x5, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x401, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xa, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x36, 0x8, 0x4, 0xc]}) 2.114888247s ago: executing program 0 (id=2998): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000190c0)="95a302ae2f62", 0x0, 0x5, 0x0, 0x0, 0x0}) 1.98088377s ago: executing program 0 (id=3000): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x200b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1001, &(0x7f0000000780)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.895625098s ago: executing program 3 (id=3001): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x1ff, 0x4) 1.716337337s ago: executing program 1 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.692362289s ago: executing program 3 (id=3004): io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.346758214s ago: executing program 2 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) 1.218835317s ago: executing program 2 (id=3008): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 932.478296ms ago: executing program 2 (id=3009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 696.922949ms ago: executing program 3 (id=3010): sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250a0000005c0009800800020001000000080001000008000008000100070000000800010000080000080001000600000008000200ffffff7f0800020004000000080001007f0000bf0e978fc9ca88e40008000100911f000008"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) 666.729103ms ago: executing program 1 (id=3011): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 504.425429ms ago: executing program 3 (id=3012): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) 429.600877ms ago: executing program 2 (id=3013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041000}, 0x20) 365.514213ms ago: executing program 3 (id=3014): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a) 251.470825ms ago: executing program 2 (id=3015): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) 132.452207ms ago: executing program 3 (id=3016): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000480), 0x3, 0x44f, &(0x7f0000004500)="$eJzs3MtvG0UYAPBv10nfJaEqjz6AQEFEPJImLaUHLiCQOICEBIdyDElalboNaoJEqwoKQuWIKnFHHJH4CzjBBQEnJK5wR5Uq1EsL4mC09m5iO3Yap3YN8e8nbTKzO9bM592xZ3ayCWBgjWU/kohdEfFbRIzUso0Fxmq/bt24NPvXjUuzSVQqb/6ZVMvdvHFptihavG5nkRmKSD9N4kCLehcvXDwzUy7Pn8/zk0tn35tcvHDx2dNnZ07Nn5o/N338+NEjU88fm36uK3Fmcd3c/+HCwX2vvn319dkTV9/56ZukiL8pji4ZW+vgE5VKl6vrr9116WSojw2hI6VaN43hav8fiVKsnLyReOWTvjYO6KlKpVK5v/3hyxVgE0ui3y0A+qP4os/mv8VWjAtaDxh6MQrpn+sv1iZAWdy38q12ZCjSvMxw0/y2m8Yi4sTlv7/MtujNfQgAgAbfZeOfZ1aP/yLSqL8vdE++hjIaEfdGxJ6IOBYReyPivohq2Qci4sEO629eJFk9/kmvbSiwdcrGfy/ka1uN479i9BejpTy3uxr/cHLydHn+cP6ejMfw1iw/tUYd37/86+ftjtWP/7Itq78YC+btuDa0tfE1czNLM3cSc73rH0fsH2oVf7K8EpBExL6I2L/BOk4/9fXBdsduH39r1bekC+tMla8inqyd/8vRFH8hWXt9cnJblOcPTxZXxWo//3LljXb1bzT+bsnO/46W1/9y/KNJ/XrtYud1XPn9s7Zzmo1e/1uStxr2fTCztHR+KmJL8lqt0fX7p5vKTa+Uz+IfP9S6/++JlXfiQERkF/FDEfFwRDySt/3RiHgsIg6tEf+PLz3+bsOO8V0dxN9bWfxzHZ3/lcSWaN7TOlE688O3DZWORgfxZ+f/aDU1nu9Zz+ffetq1sasZAAAA/n/SiNgVSTqxnE7TiYna3/DvjR1peWFx6emTC++fm6s9IzAaw2lxp2uk7n7oVD6tL/LTTfkj+X3jL0rbq/mJ2YXyXL+DhwG3s03/z/xR6nfrgJ7zvBYMLv0fBpf+D4NL/4fB1aL/b1+965+mRwaBzaDV9/9HfWgHcPc19f91LPuZMcBmoTfD4NL/YXDp/zCQFrfH7R+Sl5BYlYj0P9GM3ie2rfPfXGyyxBofGuld/IACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Q/8GAAD//8pI8yg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x6) 14.946679ms ago: executing program 2 (id=3017): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0}) 0s ago: executing program 0 (id=3018): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c00000000000000000000000c0036"], 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): .1502': attribute type 2 has an invalid length. [ 202.844228][ T9302] loop3: detected capacity change from 0 to 4096 [ 202.852328][ T9309] netlink: 'syz.0.1502': attribute type 8 has an invalid length. [ 202.873191][ T9309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1502'. [ 202.995859][ T9302] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 203.077588][ T9313] loop2: detected capacity change from 0 to 1024 [ 203.541698][ T9331] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.872395][ T9344] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 203.874807][ T9345] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.891210][ T9344] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 204.395198][ T9336] loop0: detected capacity change from 0 to 32768 [ 204.407528][ T9336] XFS (loop0): invalid log iosize: 0 [not 12-30] [ 204.541378][ T9339] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 204.648044][ T5832] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.845394][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 204.877894][ T5832] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 204.903765][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.931670][ T5832] usb 4-1: Product: syz [ 204.947869][ T5832] usb 4-1: Manufacturer: syz [ 204.952542][ T5832] usb 4-1: SerialNumber: syz [ 204.972205][ T5832] usb 4-1: config 0 descriptor?? [ 205.003600][ T5832] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 205.213221][ T28] audit: type=1326 audit(1768148767.460:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 205.269219][ T28] audit: type=1326 audit(1768148767.490:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 205.339398][ T28] audit: type=1326 audit(1768148767.510:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 205.408749][ T5832] gspca_stk1135: reg_w 0x0 err -71 [ 205.419844][ T28] audit: type=1326 audit(1768148767.510:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 205.443150][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.463811][ T5832] gspca_stk1135: Sensor write failed [ 205.490186][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.508631][ T5832] gspca_stk1135: Sensor write failed [ 205.514090][ T28] audit: type=1326 audit(1768148767.510:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 205.545322][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.561912][ T5832] gspca_stk1135: Sensor read failed [ 205.571878][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.595235][ T5832] gspca_stk1135: Sensor read failed [ 205.614164][ T5832] gspca_stk1135: Detected sensor type unknown (0x0) [ 205.631613][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.645393][ T5832] gspca_stk1135: Sensor read failed [ 205.655479][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.661853][ T5832] gspca_stk1135: Sensor read failed [ 205.694054][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.705016][ T9361] loop1: detected capacity change from 0 to 32768 [ 205.705403][ T5832] gspca_stk1135: Sensor write failed [ 205.712746][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.743459][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 205.760325][ T5832] gspca_stk1135: Sensor write failed [ 205.773117][ T5832] stk1135: probe of 4-1:0.0 failed with error -71 [ 205.799103][ T9361] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 205.817708][ T5832] usb 4-1: USB disconnect, device number 8 [ 205.861114][ T9361] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.917602][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.946704][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.984219][ T27] usb 1-1: config 1 interface 1 has no altsetting 1 [ 206.016754][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.025453][ T9361] XFS (loop1): Ending clean mount [ 206.047621][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.060873][ T9361] XFS (loop1): Quotacheck needed: Please wait. [ 206.073171][ T27] usb 1-1: Product: syz [ 206.081171][ T27] usb 1-1: Manufacturer: syz [ 206.102371][ T27] usb 1-1: SerialNumber: syz [ 206.136313][ T27] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 206.157531][ T27] cdc_ncm 1-1:1.0: bind() failure [ 206.169138][ T9361] XFS (loop1): Quotacheck: Done. [ 206.170130][ T27] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 206.182405][ T27] cdc_ncm 1-1:1.1: bind() failure [ 206.333378][ T5764] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.360371][ T9398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1541'. [ 206.382452][ T23] usb 1-1: USB disconnect, device number 10 [ 206.748109][ T9402] netlink: 'syz.3.1544': attribute type 5 has an invalid length. [ 207.041146][ T9396] loop2: detected capacity change from 0 to 32768 [ 207.123582][ T9396] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 207.123582][ T9396] [ 207.178808][ T9396] ERROR: (device loop2): remounting filesystem as read-only [ 207.225788][ T9396] ERROR: (device loop2): jfs_unlink: [ 207.225788][ T9396] [ 207.358806][ T5766] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 207.358806][ T5766] [ 207.687266][ T9430] Illegal XDP return value 4294967274 on prog (id 70) dev N/A, expect packet loss! [ 208.052551][ T9444] loop1: detected capacity change from 0 to 16 [ 208.063622][ T9444] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.072993][ T9443] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 208.125248][ T9443] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1564'. [ 208.160525][ T9443] NCSI netlink: No device for ifindex 0 [ 208.526561][ T9460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.419440][ T9471] loop2: detected capacity change from 0 to 32768 [ 209.442115][ T9471] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 209.660070][ T5757] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 209.927421][ T9506] vivid-000: ================= START STATUS ================= [ 209.967186][ T9506] vivid-000: RDS Tx I/O Mode: Controls [ 209.973898][ T9506] vivid-000: RDS Program ID: 32904 [ 209.991453][ T9506] vivid-000: RDS Program Type: 3 [ 210.006722][ T9506] vivid-000: RDS PS Name: VIVID-TX [ 210.027112][ T9506] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 210.065345][ T9506] vivid-000: RDS Stereo: true [ 210.084908][ T9506] vivid-000: RDS Artificial Head: false [ 210.092893][ T9488] loop0: detected capacity change from 0 to 32768 [ 210.102286][ T9506] vivid-000: RDS Compressed: false [ 210.126402][ T9506] vivid-000: RDS Dynamic PTY: false [ 210.137937][ T9506] vivid-000: RDS Traffic Announcement: false [ 210.155014][ T9506] vivid-000: RDS Traffic Program: true [ 210.180634][ T9506] vivid-000: RDS Music: true [ 210.183908][ T9488] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 210.188498][ T9506] vivid-000: ================== END STATUS ================== [ 210.388781][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 210.411217][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 210.456331][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 210.480561][ T9518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.795741][ T9535] loop0: detected capacity change from 0 to 1024 [ 210.845521][ T9535] hfsplus: catalog name length corrupted [ 211.089018][ T9542] netlink: 800 bytes leftover after parsing attributes in process `syz.0.1611'. [ 211.143819][ T9542] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.1611'. [ 211.231279][ T9550] loop3: detected capacity change from 0 to 256 [ 211.311871][ T9550] FAT-fs (loop3): Directory bread(block 64) failed [ 211.353087][ T9550] FAT-fs (loop3): Directory bread(block 65) failed [ 211.399153][ T9550] FAT-fs (loop3): Directory bread(block 66) failed [ 211.425344][ T9550] FAT-fs (loop3): Directory bread(block 67) failed [ 211.455428][ T9550] FAT-fs (loop3): Directory bread(block 68) failed [ 211.462191][ T9550] FAT-fs (loop3): Directory bread(block 69) failed [ 211.475314][ T9550] FAT-fs (loop3): Directory bread(block 70) failed [ 211.485720][ T9550] FAT-fs (loop3): Directory bread(block 71) failed [ 211.492384][ T9550] FAT-fs (loop3): Directory bread(block 72) failed [ 211.515381][ T9550] FAT-fs (loop3): Directory bread(block 73) failed [ 211.588971][ T9561] loop0: detected capacity change from 0 to 128 [ 211.630807][ T9561] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 211.752101][ T9564] loop2: detected capacity change from 0 to 256 [ 212.105784][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 212.310690][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 212.324199][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.346185][ T9] usb 2-1: Product: syz [ 212.350499][ T9] usb 2-1: Manufacturer: syz [ 212.363654][ T9] usb 2-1: SerialNumber: syz [ 212.394328][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.424906][ T5869] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.806315][ T9599] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 212.904684][ T1189] usb 2-1: USB disconnect, device number 8 [ 213.004257][ T9608] loop0: detected capacity change from 0 to 8 [ 213.034050][ T9608] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 213.091538][ T9609] block device autoloading is deprecated and will be removed. [ 213.465540][ T5869] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 213.473389][ T5869] ath9k_htc: Failed to initialize the device [ 213.506005][ T1189] usb 2-1: ath9k_htc: USB layer deinitialized [ 213.812126][ T9607] loop3: detected capacity change from 0 to 32768 [ 213.874444][ T9607] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.012734][ T9607] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 214.105130][ T9607] XFS (loop3): Starting recovery (logdev: internal) [ 214.154816][ T9642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.192992][ T9607] XFS (loop3): Ending recovery (logdev: internal) [ 214.295502][ T9616] loop2: detected capacity change from 0 to 32768 [ 214.363644][ T9616] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.473049][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.571260][ T9616] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 214.618400][ T9616] XFS (loop2): Starting recovery (logdev: internal) [ 214.701089][ T9616] XFS (loop2): Ending recovery (logdev: internal) [ 214.962895][ T9616] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 215.108645][ T5766] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.390259][ T9658] loop0: detected capacity change from 0 to 40427 [ 215.435883][ T9658] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 215.443672][ T9658] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.525163][ T9658] F2FS-fs (loop0): invalid crc value [ 215.570320][ T9658] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.728675][ T9658] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 215.749573][ T9658] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.096805][ T9690] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 216.522826][ T9679] loop1: detected capacity change from 0 to 32768 [ 216.616792][ T9679] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.853367][ T9679] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 216.934950][ T9679] XFS (loop1): Starting recovery (logdev: internal) [ 216.991657][ T9679] XFS (loop1): Ending recovery (logdev: internal) [ 217.019939][ T9724] binder: 9722:9724 ioctl 400c620e ffffffffffffffff returned -14 [ 217.324604][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.440023][ T28] audit: type=1326 audit(1768148780.690:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 218.495293][ T28] audit: type=1326 audit(1768148780.720:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 218.566890][ T28] audit: type=1326 audit(1768148780.720:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 218.635285][ T28] audit: type=1326 audit(1768148780.720:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 218.672887][ T28] audit: type=1326 audit(1768148780.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.2.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 218.906531][ T9753] loop0: detected capacity change from 0 to 32768 [ 218.951637][ T9753] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 218.997094][ T9762] loop1: detected capacity change from 0 to 32768 [ 219.014431][ T9762] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.029649][ T9762] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 219.058863][ T9762] BTRFS info (device loop1): using free space tree [ 219.159180][ T9793] mmap: syz.0.1716 (9793): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 219.296980][ T5757] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5757) [ 219.303534][ T9762] BTRFS info (device loop1): enabling ssd optimizations [ 219.335302][ T9762] BTRFS info (device loop1): auto enabling async discard [ 219.372660][ T9803] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 219.444113][ T9803] netlink: 'syz.3.1717': attribute type 2 has an invalid length. [ 219.545607][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.092275][ T9825] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 220.611672][ T9841] loop0: detected capacity change from 0 to 512 [ 220.658688][ T9841] EXT4-fs: Ignoring removed bh option [ 220.689571][ T9841] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1737: Invalid inode bitmap blk 4 in block_group 0 [ 220.737341][ T9841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.842518][ T9841] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 220.888210][ T9841] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1737: Invalid inode bitmap blk 4 in block_group 0 [ 221.007078][ T9841] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 221.064521][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.510662][ T9921] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 222.858363][ T9938] loop1: detected capacity change from 0 to 256 [ 222.962221][ T9938] FAT-fs (loop1): Directory bread(block 64) failed [ 222.986070][ T9938] FAT-fs (loop1): Directory bread(block 65) failed [ 223.013268][ T9938] FAT-fs (loop1): Directory bread(block 66) failed [ 223.030363][ T9938] FAT-fs (loop1): Directory bread(block 67) failed [ 223.045976][ T9938] FAT-fs (loop1): Directory bread(block 68) failed [ 223.063531][ T9938] FAT-fs (loop1): Directory bread(block 69) failed [ 223.070822][ T9938] FAT-fs (loop1): Directory bread(block 70) failed [ 223.077801][ T9938] FAT-fs (loop1): Directory bread(block 71) failed [ 223.084512][ T9938] FAT-fs (loop1): Directory bread(block 72) failed [ 223.091577][ T9938] FAT-fs (loop1): Directory bread(block 73) failed [ 223.115425][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.206826][ T9946] gtp0: entered promiscuous mode [ 223.211796][ T9946] gtp0: entered allmulticast mode [ 223.317662][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 223.331630][ T787] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 223.339877][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.362566][ T23] pwc: Logitech/Cisco VT Camera webcam detected. [ 223.444098][ T9950] loop1: detected capacity change from 0 to 4096 [ 223.491383][ T9950] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 223.511045][ T9950] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 223.540495][ T787] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.550392][ T9950] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 223.571987][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.592073][ T787] usb 3-1: Product: syz [ 223.596613][ T787] usb 3-1: Manufacturer: syz [ 223.601274][ T787] usb 3-1: SerialNumber: syz [ 223.608369][ T9950] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 223.645922][ T787] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.657694][ T9950] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 223.690056][ T27] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.720245][ T9950] ntfs: volume version 3.1. [ 223.731016][ T9950] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 223.765901][ T9950] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 223.797689][ T23] pwc: send_video_command error -71 [ 223.805872][ T9950] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 223.815505][ T23] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 223.843783][ T9950] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 223.858705][ T23] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 223.878033][ T23] usb 1-1: USB disconnect, device number 11 [ 223.889110][ T9950] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 224.140708][ T1189] usb 3-1: USB disconnect, device number 13 [ 224.438469][ T9968] loop3: detected capacity change from 0 to 4096 [ 224.446254][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.480091][ T9968] ntfs: volume version 3.1. [ 224.640671][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 224.658527][ T23] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 224.695556][ T23] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 224.725382][ T23] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 224.743346][ T23] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 224.765971][ T27] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 224.787148][ T27] ath9k_htc: Failed to initialize the device [ 224.793251][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 224.814381][ T23] usb 2-1: config 0 has no interface number 0 [ 224.814398][ T1189] usb 3-1: ath9k_htc: USB layer deinitialized [ 224.821851][ T23] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 224.862406][ T23] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 224.883376][ T23] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.930944][ T23] usb 2-1: too many endpoints for config 0 interface 125 altsetting 48: 120, using maximum allowed: 30 [ 224.988877][ T23] usb 2-1: config 0 interface 125 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 225.045611][ T23] usb 2-1: config 0 interface 125 has no altsetting 0 [ 225.065400][ T23] usb 2-1: config 0 interface 125 has no altsetting 1 [ 225.086293][ T23] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 225.116419][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.124461][ T23] usb 2-1: Product: syz [ 225.139855][ T23] usb 2-1: Manufacturer: syz [ 225.155283][ T23] usb 2-1: SerialNumber: syz [ 225.176683][ T23] usb 2-1: config 0 descriptor?? [ 225.601697][ T23] usb 2-1: USB disconnect, device number 9 [ 226.290732][T10032] vlan0: left promiscuous mode [ 226.347461][T10034] netlink: 'syz.2.1830': attribute type 3 has an invalid length. [ 226.382791][T10034] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1830'. [ 226.467326][T10038] loop3: detected capacity change from 0 to 22 [ 226.489289][T10038] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 226.553399][T10038] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 226.630257][T10038] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 226.822234][T10046] loop1: detected capacity change from 0 to 512 [ 226.859489][T10048] loop3: detected capacity change from 0 to 256 [ 226.892057][T10024] loop0: detected capacity change from 0 to 32768 [ 226.902702][T10046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.916160][T10046] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.004869][T10048] FAT-fs (loop3): Directory bread(block 64) failed [ 227.021683][T10048] FAT-fs (loop3): Directory bread(block 65) failed [ 227.040777][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.079918][T10048] FAT-fs (loop3): Directory bread(block 66) failed [ 227.119231][T10048] FAT-fs (loop3): Directory bread(block 67) failed [ 227.158831][T10048] FAT-fs (loop3): Directory bread(block 68) failed [ 227.171991][T10048] FAT-fs (loop3): Directory bread(block 69) failed [ 227.192711][T10048] FAT-fs (loop3): Directory bread(block 70) failed [ 227.217679][T10048] FAT-fs (loop3): Directory bread(block 71) failed [ 227.224346][T10048] FAT-fs (loop3): Directory bread(block 72) failed [ 227.258082][T10048] FAT-fs (loop3): Directory bread(block 73) failed [ 228.069734][T10055] loop2: detected capacity change from 0 to 32768 [ 228.135687][T10055] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.145454][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.238341][T10084] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1849'. [ 228.335449][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 228.364334][ T23] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 228.382975][T10086] netlink: 'syz.3.1850': attribute type 2 has an invalid length. [ 228.385506][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.405727][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 228.419752][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.430408][T10055] XFS (loop2): Ending clean mount [ 228.449960][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.468305][T10055] XFS (loop2): Quotacheck needed: Please wait. [ 228.499299][ T23] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 228.510716][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.526621][T10055] XFS (loop2): Quotacheck: Done. [ 228.572750][ T23] usb 1-1: config 0 descriptor?? [ 228.609952][ T23] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 228.656144][ T5122] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.671972][T10068] loop1: detected capacity change from 0 to 32768 [ 228.708410][ T5122] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.742443][ T5122] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.757732][T10068] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.833390][ T5862] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.846396][ T5122] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.869016][ T5122] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.872024][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.900249][ T5122] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.922275][T10070] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 228.942734][ T9985] usb 1-1: USB disconnect, device number 12 [ 229.047423][T10068] XFS (loop1): Ending clean mount [ 229.096855][T10068] XFS (loop1): Quotacheck needed: Please wait. [ 229.163555][T10068] XFS (loop1): Quotacheck: Done. [ 229.241743][T10100] loop3: detected capacity change from 0 to 4096 [ 229.360058][T10100] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 229.383604][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.423418][T10100] ntfs3: loop3: Failed to load $Extend (-22). [ 229.443356][T10100] ntfs3: loop3: Failed to initialize $Extend. [ 229.742760][T10108] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 229.770026][T10108] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1858'. [ 230.075325][ T9985] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 230.162493][T10122] netlink: 'syz.3.1864': attribute type 5 has an invalid length. [ 230.267755][ T9985] usb 3-1: not running at top speed; connect to a high speed hub [ 230.291325][ T9985] usb 3-1: config 1 has an invalid interface number: 78 but max is 0 [ 230.312309][ T9985] usb 3-1: config 1 has no interface number 0 [ 230.326342][ T9985] usb 3-1: config 1 interface 78 has no altsetting 0 [ 230.356634][ T9985] usb 3-1: string descriptor 0 read error: -22 [ 230.363007][ T9985] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 230.389801][ T9985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.415054][ T9985] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 230.430437][ T9985] usb 3-1: selecting invalid altsetting 0 [ 230.451169][T10130] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1867'. [ 230.589298][T10132] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 230.605914][T10132] netlink: 'syz.0.1869': attribute type 3 has an invalid length. [ 230.613735][T10132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1869'. [ 230.693813][ T9985] usb 3-1: USB disconnect, device number 14 [ 230.709662][ T2321] pvrusb2: control-write URB failure, status=-71 [ 230.736140][ T2321] pvrusb2: Device being rendered inoperable [ 230.765285][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 230.815881][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 230.894874][T10144] loop0: detected capacity change from 0 to 16 [ 230.919338][T10144] erofs: (device loop0): mounted with root inode @ nid 36. [ 230.952331][T10144] erofs: (device loop0): z_erofs_read_folio: read error -22 @ 43 of nid 36 [ 231.013069][T10148] ubi8: attaching mtd0 [ 231.023264][T10148] ubi8: scanning is finished [ 231.028217][T10148] ubi8: empty MTD device detected [ 231.033446][T10148] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 231.122578][T10148] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 231.147053][T10152] loop1: detected capacity change from 0 to 256 [ 231.194226][T10152] FAT-fs (loop1): Directory bread(block 64) failed [ 231.222285][T10152] FAT-fs (loop1): Directory bread(block 65) failed [ 231.245452][T10152] FAT-fs (loop1): Directory bread(block 66) failed [ 231.276985][T10152] FAT-fs (loop1): Directory bread(block 67) failed [ 231.283688][T10152] FAT-fs (loop1): Directory bread(block 68) failed [ 231.339203][T10152] FAT-fs (loop1): Directory bread(block 69) failed [ 231.346144][T10152] FAT-fs (loop1): Directory bread(block 70) failed [ 231.352699][T10152] FAT-fs (loop1): Directory bread(block 71) failed [ 231.379451][T10152] FAT-fs (loop1): Directory bread(block 72) failed [ 231.399710][T10152] FAT-fs (loop1): Directory bread(block 73) failed [ 231.651691][ T9985] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.738984][T10166] block device autoloading is deprecated and will be removed. [ 231.876283][ T9985] usb 3-1: Using ep0 maxpacket: 32 [ 231.889010][ T9985] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.899569][ T9985] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 0 [ 231.935460][ T9985] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid maxpacket 1600, setting to 1024 [ 231.965237][ T9985] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024 [ 231.985251][ T9985] usb 3-1: config 1 interface 0 has no altsetting 0 [ 232.018901][ T9985] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.039546][ T9985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.053630][ T9985] usb 3-1: Product: syz [ 232.070099][ T9985] usb 3-1: Manufacturer: syz [ 232.074759][ T9985] usb 3-1: SerialNumber: syz [ 232.101384][T10156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.201802][T10180] loop3: detected capacity change from 0 to 164 [ 232.351637][ T9985] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 232.393248][ T9985] usb 3-1: USB disconnect, device number 15 [ 232.573706][T10188] binder: 10187:10188 ioctl 40046210 0 returned -14 [ 233.213723][T10214] loop0: detected capacity change from 0 to 512 [ 233.242233][T10214] EXT4-fs: Ignoring removed orlov option [ 233.294027][T10214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.332804][T10214] EXT4-fs (loop0): orphan cleanup on readonly fs [ 233.362018][T10214] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1910: bg 0: block 248: padding at end of block bitmap is not set [ 233.397461][T10214] __quota_error: 11 callbacks suppressed [ 233.397475][T10214] Quota error (device loop0): write_blk: dquota write failed [ 233.413695][T10214] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 233.423925][T10214] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1910: Failed to acquire dquot type 1 [ 233.442582][T10214] EXT4-fs (loop0): 1 truncate cleaned up [ 233.458594][T10214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.505996][T10214] EXT4-fs: Ignoring removed orlov option [ 233.533221][T10214] EXT4-fs: can't change dax mount option while remounting [ 233.611966][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.982763][T10212] loop3: detected capacity change from 0 to 32768 [ 234.007988][T10212] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 234.076082][T10212] XFS (loop3): Ending clean mount [ 234.084439][T10212] XFS (loop3): Quotacheck needed: Please wait. [ 234.191073][T10212] XFS (loop3): Quotacheck: Done. [ 234.235380][ T5869] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 234.261108][T10247] loop1: detected capacity change from 0 to 1764 [ 234.353325][ T5767] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 234.371038][T10248] loop2: detected capacity change from 0 to 4096 [ 234.383119][T10248] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 234.454475][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 234.491300][ T5869] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 234.510838][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.533748][ T5869] usb 1-1: Product: syz [ 234.563511][ T5869] usb 1-1: Manufacturer: syz [ 234.575975][T10248] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 234.595399][ T5869] usb 1-1: SerialNumber: syz [ 234.612413][ T5869] r8152-cfgselector 1-1: config 0 descriptor?? [ 235.015398][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.100678][ T5869] r8152-cfgselector 1-1: Unknown version 0x0000 [ 235.116085][ T5869] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 235.234279][ T8] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 235.258348][ T8] usb 2-1: config 0 has no interface number 0 [ 235.264599][ T8] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.298432][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 235.310106][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.318518][ T8] usb 2-1: Product: syz [ 235.322832][ T8] usb 2-1: Manufacturer: syz [ 235.327916][ T8] usb 2-1: SerialNumber: syz [ 235.340916][ T8] usb 2-1: config 0 descriptor?? [ 235.366345][ T8] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 235.752932][T10266] loop2: detected capacity change from 0 to 32768 [ 235.763842][T10266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1927 (10266) [ 235.829166][T10266] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 235.834757][ T8] usb 2-1: USB disconnect, device number 10 [ 235.875773][T10266] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 235.897406][ T8] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 235.904739][T10266] BTRFS info (device loop2): setting nodatacow, compression disabled [ 235.934113][T10266] BTRFS info (device loop2): force clearing of disk cache [ 235.950619][T10266] BTRFS info (device loop2): enabling ssd optimizations [ 235.961181][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 235.970744][T10266] BTRFS info (device loop2): using spread ssd allocation scheme [ 235.985309][T10266] BTRFS info (device loop2): turning off barriers [ 236.001188][T10266] BTRFS info (device loop2): disabling free space tree [ 236.028869][T10266] BTRFS info (device loop2): not using ssd optimizations [ 236.042607][T10266] BTRFS info (device loop2): not using spread ssd allocation scheme [ 236.180253][T10266] BTRFS info (device loop2): rebuilding free space tree [ 236.244354][T10266] BTRFS info (device loop2): disabling free space tree [ 236.272895][T10266] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 236.305111][T10266] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 236.668871][T10314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.879414][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.560004][T10316] loop1: detected capacity change from 0 to 32768 [ 237.658439][T10316] ea_get: invalid extended attribute [ 237.684668][T10316] ffff88805f092830: 04 00 00 00 .... [ 237.717931][T10315] loop0: detected capacity change from 0 to 32768 [ 237.775296][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 237.804349][T10315] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.004559][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 238.079971][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.094016][T10315] XFS (loop0): Ending clean mount [ 238.101950][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.117959][T10315] XFS (loop0): Quotacheck needed: Please wait. [ 238.134596][ T8] usb 3-1: Product: syz [ 238.143780][ T8] usb 3-1: Manufacturer: syz [ 238.159619][ T8] usb 3-1: SerialNumber: syz [ 238.189269][ T8] usb 3-1: config 0 descriptor?? [ 238.221798][T10315] XFS (loop0): Quotacheck: Done. [ 238.282389][ T8] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 238.371695][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.414955][T10349] loop1: detected capacity change from 0 to 4096 [ 238.430447][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.442713][T10349] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 238.530376][ T8] usb 3-1: USB disconnect, device number 16 [ 238.554924][T10349] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 238.965070][T10363] xt_l2tp: v2 doesn't support IP mode [ 239.154895][T10366] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1964'. [ 239.170090][T10366] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1964'. [ 239.194242][T10366] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1964'. [ 239.249247][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'. [ 239.274228][T10371] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1967'. [ 239.557661][ T28] audit: type=1400 audit(1768148801.810:40): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=10380 comm="syz.1.1972" [ 239.801466][T10367] loop3: detected capacity change from 0 to 32768 [ 241.125583][ T5819] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 241.168049][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2002'. [ 241.264543][T10448] loop3: detected capacity change from 0 to 512 [ 241.287083][T10448] EXT4-fs: Ignoring removed orlov option [ 241.293982][T10448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.326906][ T5819] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.336064][T10448] EXT4-fs (loop3): orphan cleanup on readonly fs [ 241.366156][ T5819] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.374933][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.417767][T10448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2004: bg 0: block 248: padding at end of block bitmap is not set [ 241.481431][ T5819] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.481788][T10448] Quota error (device loop3): write_blk: dquota write failed [ 241.511502][ T5819] usb 3-1: config 1 has no interface number 1 [ 241.519544][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 241.534636][T10448] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 241.545844][T10448] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.2004: Failed to acquire dquot type 1 [ 241.565594][ T5819] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.584894][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.593205][ T5819] usb 3-1: Product: syz [ 241.599701][T10448] EXT4-fs (loop3): 1 truncate cleaned up [ 241.609381][ T5819] usb 3-1: Manufacturer: syz [ 241.615547][T10448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.629303][ T5819] usb 3-1: SerialNumber: syz [ 241.717278][T10448] EXT4-fs: Ignoring removed orlov option [ 241.723290][T10448] EXT4-fs: can't change dax mount option while remounting [ 241.807966][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.894865][ T5819] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 241.916448][ T5819] usb 3-1: MIDIStreaming interface descriptor not found [ 242.009473][ T5819] usb 3-1: USB disconnect, device number 17 [ 242.084707][ T6586] udevd[6586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.191789][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 242.257265][T10451] loop1: detected capacity change from 0 to 32768 [ 242.303966][T10451] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.402944][T10470] loop0: detected capacity change from 0 to 4096 [ 242.515936][T10470] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 242.599278][T10451] XFS (loop1): Ending clean mount [ 242.614887][T10451] XFS (loop1): Quotacheck needed: Please wait. [ 242.720310][T10451] XFS (loop1): Quotacheck: Done. [ 242.867318][T10484] loop2: detected capacity change from 0 to 512 [ 242.884606][T10484] EXT4-fs: Ignoring removed orlov option [ 242.943567][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.966671][T10484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.028132][T10484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 243.059900][T10484] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2017: bg 0: block 248: padding at end of block bitmap is not set [ 243.081366][T10484] Quota error (device loop2): write_blk: dquota write failed [ 243.081455][T10484] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 243.081491][T10484] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.2017: Failed to acquire dquot type 1 [ 243.082669][T10484] EXT4-fs (loop2): 1 truncate cleaned up [ 243.084439][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.105396][T10484] EXT4-fs: Ignoring removed orlov option [ 243.105523][T10484] EXT4-fs: can't change dax mount option while remounting [ 243.196181][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.708807][T10505] syz.3.2025 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 243.827095][T10510] loop2: detected capacity change from 0 to 64 [ 243.930173][T10510] syz.2.2028: attempt to access beyond end of device [ 243.930173][T10510] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 243.985304][T10510] Buffer I/O error on dev loop2, logical block 1295, async page read [ 244.015000][T10510] syz.2.2028: attempt to access beyond end of device [ 244.015000][T10510] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 244.032237][T10512] loop3: detected capacity change from 0 to 4096 [ 244.038262][T10510] Buffer I/O error on dev loop2, logical block 1295, async page read [ 244.052862][ T28] audit: type=1800 audit(1768148806.310:41): pid=10510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2028" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 244.082687][T10512] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 244.175532][T10512] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 244.674152][T10524] loop2: detected capacity change from 0 to 8192 [ 244.752733][T10524] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.823942][T10539] netlink: 'syz.3.2043': attribute type 11 has an invalid length. [ 244.830565][T10524] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 244.898780][T10541] program syz.0.2041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.909120][ T28] audit: type=1326 audit(1768148807.160:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 244.931950][T10524] REISERFS (device loop2): using ordered data mode [ 244.957471][T10524] reiserfs: using flush barriers [ 245.005340][ T28] audit: type=1326 audit(1768148807.160:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 245.032241][T10524] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.080194][T10524] REISERFS (device loop2): checking transaction log (loop2) [ 245.115301][ T28] audit: type=1326 audit(1768148807.190:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 245.154714][T10524] REISERFS (device loop2): Using r5 hash to sort names [ 245.188852][T10524] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 245.225436][ T28] audit: type=1326 audit(1768148807.190:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 245.330274][ T28] audit: type=1326 audit(1768148807.190:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.3.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 245.478181][T10555] loop0: detected capacity change from 0 to 256 [ 245.550540][T10555] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 245.977607][T10571] loop1: detected capacity change from 0 to 1024 [ 246.056856][T10571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.132184][T10571] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.272953][T10571] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2058: bg 0: block 112: padding at end of block bitmap is not set [ 246.298297][T10576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 246.322279][T10571] EXT4-fs (loop1): Remounting filesystem read-only [ 246.371727][T10576] EXT4-fs (loop1): Remounting filesystem read-only [ 246.438415][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.477710][T10592] xt_CONNSECMARK: invalid mode: 66 [ 246.807080][T10606] loop0: detected capacity change from 0 to 8 [ 247.385555][ T28] audit: type=1326 audit(1768148809.630:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc499b8f749 code=0x7ffc0000 [ 247.418752][ T28] audit: type=1326 audit(1768148809.630:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc499b8f749 code=0x7ffc0000 [ 247.514705][ T28] audit: type=1326 audit(1768148809.630:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fc499b8f749 code=0x7ffc0000 [ 247.584968][T10628] loop0: detected capacity change from 0 to 4096 [ 247.591441][ T28] audit: type=1326 audit(1768148809.630:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc499b8f749 code=0x7ffc0000 [ 247.640287][ T28] audit: type=1326 audit(1768148809.630:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc499b8f749 code=0x7ffc0000 [ 247.687041][T10638] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.707386][T10633] loop2: detected capacity change from 0 to 2048 [ 247.814314][T10628] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 247.849217][T10633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.873301][T10628] Remounting filesystem read-only [ 248.644152][T10661] loop1: detected capacity change from 0 to 4096 [ 248.671361][T10661] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 248.704660][T10661] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 248.741794][T10661] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 248.992573][T10673] kAFS: unable to lookup cell '' [ 249.397828][T10665] loop3: detected capacity change from 0 to 32768 [ 249.433110][T10665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2102 (10665) [ 249.479394][T10665] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.508986][T10665] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 249.512194][T10691] netlink: 'syz.2.2115': attribute type 32 has an invalid length. [ 249.530884][T10665] BTRFS info (device loop3): turning on flush-on-commit [ 249.541527][T10665] BTRFS info (device loop3): enabling disk space caching [ 249.554653][T10665] BTRFS info (device loop3): disabling tree log [ 249.563182][T10665] BTRFS info (device loop3): enabling ssd optimizations [ 249.613308][T10665] BTRFS info (device loop3): enabling auto defrag [ 249.626382][T10665] BTRFS info (device loop3): force clearing of disk cache [ 249.652424][T10665] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 249.675344][T10665] BTRFS info (device loop3): use zstd compression, level 3 [ 249.701629][T10695] loop1: detected capacity change from 0 to 764 [ 249.708837][T10665] BTRFS info (device loop3): turning off barriers [ 249.721208][T10665] BTRFS info (device loop3): max_inline at 0 [ 249.730733][T10665] BTRFS info (device loop3): disk space caching is enabled [ 249.742275][T10695] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 250.000298][T10665] BTRFS info (device loop3): auto enabling async discard [ 250.062666][T10665] BTRFS info (device loop3): rebuilding free space tree [ 250.126705][T10665] BTRFS info (device loop3): disabling free space tree [ 250.152771][T10665] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 250.187627][T10665] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 250.246920][T10665] BTRFS info (device loop3): checking UUID tree [ 250.314283][T10723] loop0: detected capacity change from 0 to 4096 [ 250.384071][T10723] EXT4-fs (loop0): Test dummy encryption mode enabled [ 250.414621][T10723] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 250.437460][T10731] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2126'. [ 250.487112][T10723] System zones: 0-5 [ 250.558014][T10723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.611304][T10665] BTRFS info (device loop3: state M): force clearing of disk cache [ 250.645612][T10665] BTRFS info (device loop3: state M): max_inline at 0 [ 250.729744][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.795528][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.855371][ T5819] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.079727][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 251.106968][ T5819] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 251.116320][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.142840][ T5819] usb 2-1: Product: syz [ 251.155377][ T5819] usb 2-1: Manufacturer: syz [ 251.170255][ T5819] usb 2-1: SerialNumber: syz [ 251.211857][ T5819] usb 2-1: config 0 descriptor?? [ 251.228419][ T5819] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 251.266497][ T5819] usb 2-1: Detected FT4233HP [ 251.287377][T10747] loop0: detected capacity change from 0 to 2048 [ 251.352740][T10747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.635135][ T5819] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 251.664603][ T5819] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.725376][ T5819] usb 2-1: USB disconnect, device number 11 [ 251.749234][ T5819] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 251.782862][ T5819] ftdi_sio 2-1:0.0: device disconnected [ 252.522951][T10761] loop3: detected capacity change from 0 to 32768 [ 252.571004][T10761] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 252.602670][T10763] loop2: detected capacity change from 0 to 32768 [ 252.618343][T10763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2139 (10763) [ 252.639485][T10763] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.651231][T10763] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 252.660907][T10763] BTRFS info (device loop2): turning on flush-on-commit [ 252.668609][T10763] BTRFS info (device loop2): enabling disk space caching [ 252.676677][T10763] BTRFS info (device loop2): disabling tree log [ 252.683087][T10763] BTRFS info (device loop2): enabling ssd optimizations [ 252.691240][T10763] BTRFS info (device loop2): enabling auto defrag [ 252.706841][T10763] BTRFS info (device loop2): force clearing of disk cache [ 252.714756][T10763] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 252.752323][T10763] BTRFS info (device loop2): use zstd compression, level 3 [ 252.779302][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 252.788741][T10763] BTRFS info (device loop2): turning off barriers [ 252.801803][T10761] XFS (loop3): Ending clean mount [ 252.810353][T10763] BTRFS info (device loop2): max_inline at 0 [ 252.823530][T10761] XFS (loop3): Quotacheck needed: Please wait. [ 252.830620][T10763] BTRFS info (device loop2): disk space caching is enabled [ 252.910046][T10761] XFS (loop3): Quotacheck: Done. [ 253.071450][T10763] BTRFS info (device loop2): auto enabling async discard [ 253.101176][T10763] BTRFS info (device loop2): rebuilding free space tree [ 253.146092][T10763] BTRFS info (device loop2): disabling free space tree [ 253.176855][T10763] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 253.207340][T10763] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 253.257581][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.258312][T10763] BTRFS info (device loop2): checking UUID tree [ 253.514389][T10811] loop0: detected capacity change from 0 to 8192 [ 253.524395][T10763] BTRFS info (device loop2: state M): force clearing of disk cache [ 253.561939][T10763] BTRFS info (device loop2: state M): max_inline at 0 [ 253.589981][T10811] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 253.622709][T10811] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 253.640789][T10811] REISERFS (device loop0): using ordered data mode [ 253.647602][T10811] reiserfs: using flush barriers [ 253.724277][T10811] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.803125][T10811] REISERFS (device loop0): checking transaction log (loop0) [ 253.854663][T10811] REISERFS (device loop0): Using r5 hash to sort names [ 253.865782][T10811] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 253.896553][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.055961][ T5780] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.469473][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.610523][T10834] loop3: detected capacity change from 0 to 4096 [ 254.707464][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 254.730630][ T8] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 254.746392][T10834] ntfs: volume version 3.1. [ 254.752661][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.765880][ T8] usb 3-1: Product: syz [ 254.804154][ T8] usb 3-1: Manufacturer: syz [ 254.812097][ T8] usb 3-1: SerialNumber: syz [ 254.837340][ T8] usb 3-1: config 0 descriptor?? [ 255.104380][ T8] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 255.125627][ T8] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 255.210068][T10851] loop0: detected capacity change from 0 to 4096 [ 255.238844][T10851] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 255.274707][T10851] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 255.324167][ T5819] usb 3-1: USB disconnect, device number 18 [ 255.363117][T10851] ntfs3: loop0: ino=0, attr_set_size [ 255.397994][T10857] x_tables: duplicate entry at hook 3 [ 255.552815][T10861] loop3: detected capacity change from 0 to 164 [ 255.710717][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.717421][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.036627][T10878] loop3: detected capacity change from 0 to 64 [ 256.344656][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 256.425062][T10885] loop2: detected capacity change from 0 to 4096 [ 256.454407][T10885] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 256.767737][T10898] loop0: detected capacity change from 0 to 164 [ 256.917782][T10904] netlink: 'syz.1.2205': attribute type 64 has an invalid length. [ 256.954808][T10904] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2205'. [ 256.970037][T10906] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2197'. [ 257.313586][T10919] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 257.333633][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2203'. [ 257.351912][T10919] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 257.360503][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2203'. [ 257.640133][T10932] loop3: detected capacity change from 0 to 512 [ 257.736609][T10932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.849238][T10932] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 257.997751][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.358533][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2223'. [ 258.677195][T10971] bond0: option ad_select: unable to set because the bond device is up [ 258.823487][T10957] loop1: detected capacity change from 0 to 32768 [ 258.855897][T10977] xt_TCPMSS: Only works on TCP SYN packets [ 258.873424][T10957] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 258.923367][T10957] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 258.969045][T10957] (syz.1.2220,10957,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 258.999391][T10957] (syz.1.2220,10957,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 259.063382][T10957] (syz.1.2220,10957,0):ocfs2_mknod:298 ERROR: status = -2 [ 259.113048][T10957] (syz.1.2220,10957,0):ocfs2_mknod:502 ERROR: status = -2 [ 259.149106][T10957] (syz.1.2220,10957,0):ocfs2_create:676 ERROR: status = -2 [ 259.225165][T10983] loop2: detected capacity change from 0 to 4096 [ 259.283772][T10983] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 259.370421][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 259.453303][T10993] loop0: detected capacity change from 0 to 2048 [ 259.559759][T10993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.599465][T10993] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.655857][T10993] fscrypt (loop0, inode 14): Error -61 getting encryption context [ 259.786868][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.849736][T11005] autofs4:pid:11005:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375) [ 259.894888][T11005] autofs4:pid:11005:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 260.113318][T11014] netlink: 'syz.1.2246': attribute type 9 has an invalid length. [ 260.139077][T11014] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2246'. [ 260.259319][T11020] tmpfs: Bad value for 'mpol' [ 260.315377][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.517228][ T23] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 260.528114][ T23] usb 3-1: config 0 has no interface number 0 [ 260.534254][ T23] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 260.544454][ T23] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.558192][ T23] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 260.567424][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.582438][ T23] usb 3-1: Product: syz [ 260.588833][ T23] usb 3-1: Manufacturer: syz [ 260.593585][ T23] usb 3-1: SerialNumber: syz [ 260.604839][ T23] usb 3-1: config 0 descriptor?? [ 260.614235][T11011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.630426][ T23] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 260.649728][T11035] loop1: detected capacity change from 0 to 1024 [ 260.655610][ T5866] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 260.683073][ T23] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 260.696569][T11035] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 260.725406][ T5819] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 260.855360][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 260.863127][ T5866] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 260.882286][ T5866] usb 1-1: config 0 has no interface number 0 [ 260.898862][ T5866] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 260.912982][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.921778][ T5866] usb 1-1: Product: syz [ 260.926399][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 260.931814][ T5866] usb 1-1: Manufacturer: syz [ 260.937724][ T5866] usb 1-1: SerialNumber: syz [ 260.943571][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.959468][ T5819] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 260.970267][ T5866] usb 1-1: config 0 descriptor?? [ 260.976631][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.989566][ T5866] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 260.998618][ T5819] usb 4-1: Product: syz [ 261.005635][ T5819] usb 4-1: Manufacturer: syz [ 261.015647][ T5866] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 261.022780][ T5819] usb 4-1: SerialNumber: syz [ 261.044579][ T5819] usb 4-1: config 0 descriptor?? [ 261.065081][ T5819] usb 4-1: bad CDC descriptors [ 261.071540][ T5819] usb 4-1: unsupported MDLM descriptors [ 261.125116][ T5819] usb 3-1: USB disconnect, device number 19 [ 261.157659][ T5819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 261.176337][ T5819] cyberjack 3-1:0.69: device disconnected [ 261.211423][ T5866] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 261.292871][ T5861] usb 4-1: USB disconnect, device number 9 [ 261.413203][ T5866] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 261.436902][ T5866] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 261.458422][ T5866] usb 1-1: USB disconnect, device number 14 [ 261.475821][ T5866] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 261.831997][T11060] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.995686][ T5861] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 262.132774][T11072] Cannot find del_set index 6 as target [ 262.190354][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.216709][ T5861] usb 2-1: not running at top speed; connect to a high speed hub [ 262.244536][ T5861] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 262.263279][ T5861] usb 2-1: config 1 has no interface number 0 [ 262.273446][ T5861] usb 2-1: config 1 interface 138 has no altsetting 0 [ 262.293698][ T5861] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 262.303684][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.323885][ T5861] usb 2-1: Product: syz [ 262.328539][ T5861] usb 2-1: Manufacturer: syz [ 262.334934][ T5861] usb 2-1: SerialNumber: syz [ 262.509266][T11080] loop3: detected capacity change from 0 to 4096 [ 262.541688][T11080] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 262.589835][ T5861] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 262.671574][T11080] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 262.705705][ T5861] usb 2-1: USB disconnect, device number 12 [ 262.802943][T11080] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 262.862837][T11080] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 262.914361][ T6586] udevd[6586]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.175053][T11099] netlink: 'syz.2.2284': attribute type 27 has an invalid length. [ 263.312561][T11105] netlink: 'syz.3.2286': attribute type 8 has an invalid length. [ 263.320817][T11104] loop0: detected capacity change from 0 to 1764 [ 263.382420][T11104] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 264.280957][T11143] loop3: detected capacity change from 0 to 256 [ 264.352260][T11143] exfat: Deprecated parameter 'utf8' [ 264.368699][T11143] exfat: Deprecated parameter 'namecase' [ 264.374502][T11143] exfat: Deprecated parameter 'namecase' [ 264.389300][T11143] exfat: Deprecated parameter 'utf8' [ 264.410419][T11143] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 264.485424][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 264.573330][T11151] ieee802154 phy0 wpan0: encryption failed: -90 [ 264.608885][T11153] sctp: [Deprecated]: syz.3.2310 (pid 11153) Use of int in max_burst socket option. [ 264.608885][T11153] Use struct sctp_assoc_value instead [ 264.639644][T11155] loop0: detected capacity change from 0 to 256 [ 264.684336][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 264.715387][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 264.723692][ T8] usb 3-1: config 179 has no interface number 0 [ 264.736295][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 264.765248][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 264.808090][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 264.840385][ T8] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 264.872257][ T8] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 264.945411][ T8] usb 3-1: config 179 interface 65 has no altsetting 0 [ 264.952371][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 264.991562][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.070798][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 265.278795][ T9985] usb 3-1: USB disconnect, device number 20 [ 265.284806][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 265.331506][ T9985] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 265.515529][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 265.715351][T11187] vlan0: entered promiscuous mode [ 265.720563][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 265.743683][ T8] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 265.769950][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.785669][ T8] usb 2-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 265.798076][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.829400][ T8] usb 2-1: 0:2 : does not exist [ 266.074751][ T9985] usb 2-1: USB disconnect, device number 13 [ 266.362327][T11201] openvswitch: netlink: IP tunnel dst address not specified [ 266.787509][T11216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2341'. [ 266.839761][T11216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2341'. [ 267.069361][T11227] loop2: detected capacity change from 0 to 256 [ 267.939991][T11257] netlink: 'syz.1.2362': attribute type 3 has an invalid length. [ 267.976062][T11257] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 267.983858][T11257] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2362'. [ 268.020638][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 268.044275][T11261] netlink: 660 bytes leftover after parsing attributes in process `syz.3.2364'. [ 268.205494][T11267] netlink: 'syz.1.2367': attribute type 21 has an invalid length. [ 268.504304][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 268.998969][T11298] loop0: detected capacity change from 0 to 4096 [ 269.589309][T11320] loop3: detected capacity change from 0 to 4096 [ 269.607972][T11320] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 269.761611][T11320] ntfs3: loop3: failed to convert "c46c" to cp437 [ 269.977656][T11335] netlink: 'syz.1.2401': attribute type 64 has an invalid length. [ 270.022863][T11335] netlink: 'syz.1.2401': attribute type 4 has an invalid length. [ 270.048527][T11335] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2401'. [ 270.323674][T11349] loop1: detected capacity change from 0 to 1024 [ 270.424861][T11349] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 270.765304][ T5861] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 270.965311][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 270.978115][ T5861] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.995010][ T5861] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.019198][ T5861] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 271.035238][ T5861] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 271.050537][ T5861] usb 1-1: Product: syz [ 271.065050][ T5861] usb 1-1: Manufacturer: syz [ 271.105924][ T5861] hub 1-1:4.0: USB hub found [ 271.125777][ T5866] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 271.321467][ T5861] hub 1-1:4.0: 1 port detected [ 271.332989][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.353587][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.372574][ T5866] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 271.382287][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2426'. [ 271.397189][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.405489][T11389] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2426'. [ 271.414418][T11389] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2426'. [ 271.426924][ T5866] usb 2-1: config 0 descriptor?? [ 271.511424][ T5861] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 271.530930][ T5861] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 271.615377][ T5861] usb 1-1: USB disconnect, device number 15 [ 271.653454][ T5866] usb 2-1: string descriptor 0 read error: -71 [ 271.670831][ T5866] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 271.698972][ T5866] usb 2-1: USB disconnect, device number 14 [ 271.915702][T11406] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2435'. [ 272.472196][T11426] loop3: detected capacity change from 0 to 64 [ 273.035714][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2450'. [ 273.138205][T11440] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 273.239557][T11424] loop0: detected capacity change from 0 to 32768 [ 273.246914][T11444] loop3: detected capacity change from 0 to 512 [ 273.266896][T11424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2443 (11424) [ 273.305643][T11424] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.325835][T11424] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 273.353353][T11424] BTRFS info (device loop0): force clearing of disk cache [ 273.375245][T11424] BTRFS info (device loop0): enabling auto defrag [ 273.381723][T11424] BTRFS info (device loop0): enabling ssd optimizations [ 273.435398][T11424] BTRFS info (device loop0): max_inline at 0 [ 273.441442][T11424] BTRFS info (device loop0): enabling disk space caching [ 273.457792][T11424] BTRFS info (device loop0): disk space caching is enabled [ 273.653630][T11424] BTRFS info (device loop0): rebuilding free space tree [ 273.721434][T11424] BTRFS info (device loop0): disabling free space tree [ 273.753843][T11424] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.785332][T11424] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.041132][ T5765] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.185399][ T5832] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 274.202561][ T5757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (5757) [ 274.305318][ T5869] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.357911][T11478] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 274.422515][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 274.444579][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.505877][ T5832] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 274.514976][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.524347][ T5869] usb 4-1: too many configurations: 37, using maximum allowed: 8 [ 274.561302][ T5832] usb 3-1: Product: syz [ 274.579045][ T5832] usb 3-1: Manufacturer: syz [ 274.584106][ T5869] usb 4-1: string descriptor 0 read error: -71 [ 274.601212][ T5869] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.622815][ T5832] usb 3-1: SerialNumber: syz [ 274.632279][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.645042][ T5832] usb 3-1: config 0 descriptor?? [ 274.672508][ T5832] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 274.681221][ T5869] usb 4-1: can't set config #1, error -71 [ 274.697644][ T5832] gspca_stv06xx: st6422 sensor detected [ 274.706525][ T5869] usb 4-1: USB disconnect, device number 10 [ 274.763617][T11464] loop1: detected capacity change from 0 to 32768 [ 274.832835][T11464] loop1: p1 p2 p3 < p5 p6 > [ 274.838488][T11464] loop1: p1 size 242222080 extends beyond EOD, truncated [ 274.868323][T11464] loop1: p2 start 4294967295 is beyond EOD, truncated [ 275.245019][ T5832] STV06xx: probe of 3-1:0.0 failed with error -71 [ 275.268218][ T5832] usb 3-1: USB disconnect, device number 21 [ 276.276728][T11504] loop3: detected capacity change from 0 to 1024 [ 276.313759][T11504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.356495][T11504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.378202][T11504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.430232][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.580660][T11509] nvme_fabrics: missing parameter 'transport=%s' [ 276.615408][T11509] nvme_fabrics: missing parameter 'nqn=%s' [ 277.219251][ T28] audit: type=1326 audit(1768148839.460:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 277.241627][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.285259][ T28] audit: type=1326 audit(1768148839.460:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 277.307537][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.345339][ T5832] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 277.395845][ T28] audit: type=1326 audit(1768148839.470:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 277.451824][ T28] audit: type=1326 audit(1768148839.470:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 277.474084][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.532427][ T28] audit: type=1326 audit(1768148839.470:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x7ffc0000 [ 277.552855][T11534] loop3: detected capacity change from 0 to 1024 [ 277.554842][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.583915][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 277.634157][ T5832] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 277.645350][ T5832] usb 3-1: config 254 has no interface number 0 [ 277.651673][ T5832] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 277.756325][ T5832] usb 3-1: config 254 interface 235 has no altsetting 0 [ 277.770592][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 277.783641][ T59] hfsplus: b-tree write err: -5, ino 4 [ 277.790214][T11492] loop0: detected capacity change from 0 to 32768 [ 277.790701][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 277.858432][ T5832] usb 3-1: Product: syz [ 277.873020][ T5832] usb 3-1: Manufacturer: syz [ 277.879261][ T5832] usb 3-1: SerialNumber: syz [ 277.898864][T11526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.992733][T11492] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.159107][T11554] ip6t_rpfilter: unknown options [ 278.165558][ T5832] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 278.182560][ T5832] usbtest: probe of 3-1:254.235 failed with error -71 [ 278.235768][ T5832] usb 3-1: USB disconnect, device number 22 [ 278.323701][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'. [ 278.441480][T11492] XFS (loop0): Ending clean mount [ 278.487277][T11492] XFS (loop0): Quotacheck needed: Please wait. [ 278.663886][T11492] XFS (loop0): Quotacheck: Done. [ 278.709910][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 279.008749][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.070364][T11572] loop2: detected capacity change from 0 to 128 [ 279.149123][T11572] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 279.185395][T11572] FAT-fs (loop2): Filesystem has been set read-only [ 279.333701][ T5766] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 280.078491][T11601] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 280.087903][T11599] loop0: detected capacity change from 0 to 16 [ 280.153235][T11599] erofs: (device loop0): mounted with root inode @ nid 36. [ 280.201195][T11599] syz.0.2502: attempt to access beyond end of device [ 280.201195][T11599] loop0: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 280.201293][T11599] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 280.335714][T11609] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 280.369938][T11609] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2520'. [ 280.391435][T11609] batman_adv: batadv0: Removing interface: team0 [ 280.415569][T11608] loop2: detected capacity change from 0 to 4096 [ 280.434662][T11609] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 280.470667][T11608] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 281.411943][T11637] loop1: detected capacity change from 0 to 256 [ 281.846168][T11624] loop3: detected capacity change from 0 to 32768 [ 281.872152][T11624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2528 (11624) [ 281.933030][T11624] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.964452][T11624] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 281.998114][T11624] BTRFS info (device loop3): turning on sync discard [ 282.019553][T11624] BTRFS info (device loop3): disabling free space tree [ 282.047069][T11624] BTRFS info (device loop3): setting nodatasum [ 282.055444][T11624] BTRFS info (device loop3): turning on async discard [ 282.088335][T11624] BTRFS info (device loop3): turning off barriers [ 282.094900][T11624] BTRFS info (device loop3): disabling tree log [ 282.132769][T11624] BTRFS info (device loop3): enabling ssd optimizations [ 282.161525][T11624] BTRFS info (device loop3): force clearing of disk cache [ 282.187220][T11624] BTRFS info (device loop3): enabling auto defrag [ 282.195409][T11624] BTRFS info (device loop3): force zlib compression, level 3 [ 282.218883][T11624] BTRFS info (device loop3): max_inline at 4096 [ 282.462740][T11624] BTRFS info (device loop3): rebuilding free space tree [ 282.565731][T11624] BTRFS info (device loop3): disabling free space tree [ 282.572725][T11624] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.628091][T11624] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.960488][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.112319][T11692] loop0: detected capacity change from 0 to 512 [ 283.548870][T11692] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2554: bg 0: block 248: padding at end of block bitmap is not set [ 283.594255][T11692] Quota error (device loop0): write_blk: dquota write failed [ 283.645392][T11692] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 283.712509][T11692] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2554: Failed to acquire dquot type 1 [ 283.827385][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 283.866677][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 283.870021][T11692] EXT4-fs (loop0): 1 truncate cleaned up [ 283.941683][T11709] ip6tnl2: entered promiscuous mode [ 283.976343][T11692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.002175][T11709] ip6tnl2: entered allmulticast mode [ 284.020583][T11713] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 284.065539][T11692] ext4 filesystem being mounted at /612/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.157651][T11694] loop1: detected capacity change from 0 to 32768 [ 284.182759][T11694] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2555 (11694) [ 284.266300][T11694] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 284.278852][T11692] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 284.296116][T11692] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074 [ 284.307833][T11694] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 284.318881][T11692] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2554: Failed to acquire dquot type 1 [ 284.332273][T11694] BTRFS info (device loop1): force zlib compression, level 3 [ 284.369129][T11694] BTRFS info (device loop1): turning on flush-on-commit [ 284.416212][T11694] BTRFS info (device loop1): max_inline at 0 [ 284.422351][T11694] BTRFS info (device loop1): using free space tree [ 284.433802][T11719] loop2: detected capacity change from 0 to 512 [ 284.471745][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.492937][T11719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.510045][T11719] ext4 filesystem being mounted at /601/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.629247][T11694] BTRFS info (device loop1): enabling ssd optimizations [ 284.655145][T11694] BTRFS info (device loop1): auto enabling async discard [ 284.792819][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.832969][ T28] audit: type=1400 audit(1768148847.060:57): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=11742 comm="syz.3.2568" [ 284.856483][ T5764] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 285.413693][T11753] loop3: detected capacity change from 0 to 4096 [ 285.462262][T11753] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 285.591829][T11753] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 286.021650][T11764] loop0: detected capacity change from 0 to 8192 [ 286.057848][T11764] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 286.081755][T11764] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 286.121879][T11764] REISERFS (device loop0): using ordered data mode [ 286.143505][T11764] reiserfs: using flush barriers [ 286.160874][T11748] loop2: detected capacity change from 0 to 32768 [ 286.172465][T11748] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 286.184822][T11764] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.202074][T11764] REISERFS (device loop0): checking transaction log (loop0) [ 286.509550][T11764] REISERFS (device loop0): Using tea hash to sort names [ 286.518269][T11764] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 286.704078][T11782] loop1: detected capacity change from 0 to 512 [ 286.757860][T11782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.825853][T11782] ext4 filesystem being mounted at /631/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.960874][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.201898][T11787] loop2: detected capacity change from 0 to 4096 [ 287.370561][T11787] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 287.592016][T11783] loop3: detected capacity change from 0 to 32768 [ 287.649630][T11783] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 287.649630][T11783] [ 287.687855][T11783] ERROR: (device loop3): remounting filesystem as read-only [ 287.703381][T11783] ialloc: diAlloc returned -5! [ 288.161737][T11794] loop0: detected capacity change from 0 to 32768 [ 288.202346][T11794] (syz.0.2592,11794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 288.261427][T11794] (syz.0.2592,11794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 288.373381][T11794] JBD2: Ignoring recovery information on journal [ 288.453714][T11794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 288.939827][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 289.618004][ T28] audit: type=1326 audit(1768148851.870:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1398f749 code=0x7ffc0000 [ 289.685245][ T28] audit: type=1326 audit(1768148851.870:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1398f749 code=0x7ffc0000 [ 289.760356][ T28] audit: type=1326 audit(1768148851.870:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdb1398f749 code=0x7ffc0000 [ 289.794313][T11838] loop3: detected capacity change from 0 to 32768 [ 289.834755][ T28] audit: type=1326 audit(1768148851.870:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11857 comm="syz.0.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1398f749 code=0x7ffc0000 [ 290.338150][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2627'. [ 290.353536][T11879] loop0: detected capacity change from 0 to 512 [ 290.391517][T11879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 290.409928][T11879] System zones: 1-12 [ 290.438558][T11879] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2628: invalid indirect mapped block 8 (level 2) [ 290.457679][T11880] loop3: detected capacity change from 0 to 4096 [ 290.476480][T11879] EXT4-fs (loop0): Remounting filesystem read-only [ 290.513545][T11879] EXT4-fs (loop0): 1 truncate cleaned up [ 290.534661][T11886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.553997][T11887] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.561321][T11879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.579491][T11887] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 290.625539][T11889] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2632'. [ 290.752349][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.872444][T11893] loop1: detected capacity change from 0 to 128 [ 290.906335][T11893] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 290.969909][T11893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 291.022644][T11893] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 291.034623][T11900] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 291.083410][T11900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2637'. [ 291.107985][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.118061][T11900] bridge0: port 3(dummy0) entered blocking state [ 291.124647][T11900] bridge0: port 3(dummy0) entered disabled state [ 291.158436][T11900] dummy0: entered allmulticast mode [ 291.167278][T11900] dummy0: entered promiscuous mode [ 291.201481][T11900] bridge0: port 3(dummy0) entered blocking state [ 291.208180][T11900] bridge0: port 3(dummy0) entered forwarding state [ 291.781668][T11902] loop3: detected capacity change from 0 to 32768 [ 291.934208][T11921] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 291.993106][T11921] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 292.550973][T11942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2650'. [ 292.966124][ T5819] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 293.159390][ T5819] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 293.194550][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.221006][ T5819] usb 4-1: config 0 descriptor?? [ 293.241215][ T5819] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 293.651102][ T5819] gp8psk: usb out operation failed. [ 293.668296][ T5819] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 293.690232][ T5819] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 293.740340][ T5819] usb 4-1: USB disconnect, device number 11 [ 293.983369][T11962] loop0: detected capacity change from 0 to 32768 [ 294.007782][T11974] netlink: 'syz.1.2675': attribute type 10 has an invalid length. [ 294.022094][T11974] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.030734][T11974] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.095826][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.103068][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.110669][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.117882][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.140737][T11974] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 294.892545][T11997] loop3: detected capacity change from 0 to 4096 [ 294.929580][T11997] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 295.575748][T11987] loop1: detected capacity change from 0 to 32768 [ 295.639320][T11987] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.662400][T12028] loop3: detected capacity change from 0 to 1024 [ 295.682652][T12026] netlink: 'syz.0.2697': attribute type 3 has an invalid length. [ 295.908504][T12035] loop2: detected capacity change from 0 to 1024 [ 295.918641][T11987] XFS (loop1): Ending clean mount [ 296.158328][ T34] hfsplus: b-tree write err: -5, ino 4 [ 296.237746][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.757822][T12055] loop1: detected capacity change from 0 to 64 [ 296.855505][T12055] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 296.872972][T12057] overlay: Unknown parameter '\' [ 297.060084][ T28] audit: type=1326 audit(1768148859.310:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 297.102547][ T28] audit: type=1326 audit(1768148859.340:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 297.206522][ T28] audit: type=1326 audit(1768148859.340:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 297.228714][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.303036][ T28] audit: type=1326 audit(1768148859.340:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f638f749 code=0x7ffc0000 [ 297.328508][T12067] netlink: 'syz.2.2716': attribute type 3 has an invalid length. [ 297.365060][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2716'. [ 297.374431][T12041] loop0: detected capacity change from 0 to 32768 [ 297.461637][T12041] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.615401][T12041] XFS (loop0): Ending clean mount [ 297.682461][T12083] loop2: detected capacity change from 0 to 512 [ 297.706356][T12041] XFS (loop0): Quotacheck needed: Please wait. [ 297.777962][T12083] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.790311][T12041] XFS (loop0): Quotacheck: Done. [ 297.855813][T12083] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 297.903075][T12083] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2719: bg 0: block 248: padding at end of block bitmap is not set [ 297.917808][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.958713][T12083] Quota error (device loop2): write_blk: dquota write failed [ 297.967482][T12083] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 298.015572][T12083] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.2719: Failed to acquire dquot type 1 [ 298.065383][ T5866] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 298.076920][T12083] EXT4-fs (loop2): 1 truncate cleaned up [ 298.096879][T12083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 298.134067][T12078] loop1: detected capacity change from 0 to 32768 [ 298.175586][T12078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2717 (12078) [ 298.248823][T12078] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.275590][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 298.280996][T12078] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 298.295426][ T5866] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 298.303526][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 298.303544][ T5866] usb 4-1: config 0 has no interface number 0 [ 298.326491][T12078] BTRFS info (device loop1): turning on sync discard [ 298.334318][ T4868] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 298.343480][T12078] BTRFS info (device loop1): disabling free space tree [ 298.343503][T12078] BTRFS info (device loop1): setting nodatasum [ 298.343521][T12078] BTRFS info (device loop1): turning on async discard [ 298.343537][T12078] BTRFS info (device loop1): turning off barriers [ 298.343555][T12078] BTRFS info (device loop1): disabling tree log [ 298.343576][T12078] BTRFS info (device loop1): enabling ssd optimizations [ 298.343595][T12078] BTRFS info (device loop1): force clearing of disk cache [ 298.343611][T12078] BTRFS info (device loop1): enabling auto defrag [ 298.343631][T12078] BTRFS info (device loop1): force zlib compression, level 3 [ 298.343686][T12078] BTRFS info (device loop1): max_inline at 4096 [ 298.391159][ T4868] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:9: Failed to release dquot type 1 [ 298.449255][ T5866] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 298.466231][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.480424][ T5866] usb 4-1: Product: syz [ 298.484634][ T5866] usb 4-1: Manufacturer: syz [ 298.498681][ T5866] usb 4-1: SerialNumber: syz [ 298.513938][ T5866] usb 4-1: config 0 descriptor?? [ 298.736773][T12078] BTRFS info (device loop1): rebuilding free space tree [ 298.762858][T12078] BTRFS info (device loop1): disabling free space tree [ 298.784589][ T5866] radio-si470x 4-1:0.35: this is not a si470x device. [ 298.786563][T12078] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.820972][T12078] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 298.967489][ T5866] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 298.999351][ T5866] usb 4-1: USB disconnect, device number 12 [ 299.183676][ T5764] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.964634][T12143] kcapi: manufacturer command 52776558133248 unknown. [ 300.092482][T12149] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 300.378706][T12161] loop1: detected capacity change from 0 to 764 [ 300.593133][T12170] loop1: detected capacity change from 0 to 16 [ 300.604147][T12170] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 300.642331][ T5757] udevd[5757]: incorrect cramfs checksum on /dev/loop1 [ 300.741464][ T5757] udevd[5757]: incorrect cramfs checksum on /dev/loop1 [ 300.777247][T12176] loop0: detected capacity change from 0 to 256 [ 300.844781][T12176] FAT-fs (loop0): Directory bread(block 64) failed [ 300.874397][T12176] FAT-fs (loop0): Directory bread(block 65) failed [ 300.885495][T12176] FAT-fs (loop0): Directory bread(block 66) failed [ 300.892441][T12176] FAT-fs (loop0): Directory bread(block 67) failed [ 300.932314][T12176] FAT-fs (loop0): Directory bread(block 68) failed [ 300.995425][T12176] FAT-fs (loop0): Directory bread(block 69) failed [ 301.002092][T12176] FAT-fs (loop0): Directory bread(block 70) failed [ 301.031740][T12176] FAT-fs (loop0): Directory bread(block 71) failed [ 301.049520][T12176] FAT-fs (loop0): Directory bread(block 72) failed [ 301.080030][T12176] FAT-fs (loop0): Directory bread(block 73) failed [ 301.291523][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 301.322846][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 301.389729][T12195] loop1: detected capacity change from 0 to 764 [ 301.732119][T12206] bridge6: entered promiscuous mode [ 301.745360][T12206] bridge6: entered allmulticast mode [ 302.150886][T12224] loop2: detected capacity change from 0 to 256 [ 302.182764][T12224] exfat: Deprecated parameter 'utf8' [ 302.220965][T12224] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 302.485028][T12235] binder: 12234:12235 ioctl c00c620f 0 returned -14 [ 302.850614][T12253] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2794'. [ 303.033089][T12259] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2797'. [ 303.883755][T12294] netlink: 'syz.2.2814': attribute type 3 has an invalid length. [ 303.909903][T12290] futex_wake_op: syz.1.2811 tries to shift op by -1; fix this program [ 304.117119][T12303] sit0: entered promiscuous mode [ 304.133615][T12304] loop0: detected capacity change from 0 to 1024 [ 304.168857][T12304] EXT4-fs: Ignoring removed orlov option [ 304.174589][T12304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.181568][T12303] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 304.217550][T12303] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2817'. [ 304.261775][T12304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.517801][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.926619][T12332] cgroup: none used incorrectly [ 305.328886][T12347] loop0: detected capacity change from 0 to 1764 [ 305.341527][T12348] loop2: detected capacity change from 0 to 1024 [ 305.447374][T12347] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 305.510459][ T4868] hfsplus: b-tree write err: -5, ino 4 [ 305.808985][T12363] loop0: detected capacity change from 0 to 2048 [ 305.816934][T12367] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 305.826099][T12367] @0Ù: renamed from bond_slave_1 (while UP) [ 305.917145][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.990985][T12363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.042496][T12363] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.2843: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 306.135230][T12363] EXT4-fs (loop0): Remounting filesystem read-only [ 306.230643][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.536506][T12387] rdma_op ffff8880268be9f0 conn xmit_rdma 0000000000000000 [ 306.985008][T12403] loop3: detected capacity change from 0 to 16 [ 307.014039][T12403] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 307.034743][T12403] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 307.173192][T12405] loop1: detected capacity change from 0 to 256 [ 307.196300][T12405] exfat: Deprecated parameter 'namecase' [ 307.209961][T12405] exfat: Deprecated parameter 'utf8' [ 307.258981][T12407] loop2: detected capacity change from 0 to 512 [ 307.286606][T12407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.298225][T12405] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 307.321990][T12407] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 307.377339][T12403] erofs: DAX unsupported by block device. Turning off DAX. [ 307.385071][T12403] erofs: (device loop3): mounted with root inode @ nid 36. [ 307.393703][T12407] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 307.440919][ T5082] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[9000] [ 307.486377][T12407] EXT4-fs (loop2): Remounting filesystem read-only [ 307.503421][T12407] EXT4-fs (loop2): 1 truncate cleaned up [ 307.510736][T12403] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[8192] [ 307.547274][T12407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.565515][ T28] audit: type=1800 audit(1768148869.820:66): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2863" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 307.585083][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.735661][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.125061][T12399] loop0: detected capacity change from 0 to 40427 [ 308.146838][T12399] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 308.175789][T12399] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 308.195553][T12399] F2FS-fs (loop0): Image doesn't support compression [ 308.235224][T12399] F2FS-fs (loop0): invalid crc value [ 308.250753][T12399] F2FS-fs (loop0): Found nat_bits in checkpoint [ 308.404531][T12399] F2FS-fs (loop0): Start checkpoint disabled! [ 308.423892][T12429] netlink: 'syz.1.2874': attribute type 21 has an invalid length. [ 308.434801][T12399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 308.717736][ T4868] kworker/u4:9: attempt to access beyond end of device [ 308.717736][ T4868] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 308.764887][ T4868] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 308.804364][ T4868] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 309.038254][T12451] sp0: Synchronizing with TNC [ 309.058808][T12448] [U] è [ 309.229995][T12455] netlink: 'syz.2.2886': attribute type 6 has an invalid length. [ 309.255409][ T9985] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 309.447068][ T9985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.476221][ T9985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.517243][ T9985] usb 2-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 309.543321][ T9985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.566542][ T9985] usb 2-1: config 0 descriptor?? [ 309.764607][T12473] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 309.886768][T12477] loop0: detected capacity change from 0 to 1764 [ 310.022942][ T9985] wacom 0003:056A:0323.0001: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 310.076688][ T9985] wacom 0003:056A:0323.0001: hidraw0: USB HID v0.08 Device [HID 056a:0323] on usb-dummy_hcd.1-1/input0 [ 310.104954][ T9985] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0323.0001/input/input20 [ 310.163616][T12484] loop0: detected capacity change from 0 to 256 [ 310.184677][T12484] exfat: Deprecated parameter 'utf8' [ 310.211117][T12484] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 310.238862][ T9985] usb 2-1: USB disconnect, device number 15 [ 310.313836][T12482] fido_id[12482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 310.523909][T12490] loop2: detected capacity change from 0 to 256 [ 310.546635][T12490] exfat: Deprecated parameter 'namecase' [ 310.577523][T12490] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 310.824686][T12496] loop3: detected capacity change from 0 to 64 [ 311.053913][T12504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2910'. [ 311.119723][T12507] loop2: detected capacity change from 0 to 64 [ 311.163745][T12507] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 311.503718][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 311.614175][ T28] audit: type=1326 audit(1768148873.850:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="syz.3.2918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49fe38f749 code=0x0 [ 312.033071][T12540] loop1: detected capacity change from 0 to 1024 [ 312.077895][T12542] loop2: detected capacity change from 0 to 256 [ 312.093422][T12542] exfat: Deprecated parameter 'utf8' [ 312.101908][T12540] hfsplus: bad catalog entry type [ 312.121658][T12542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 312.200383][ T1320] hfsplus: b-tree write err: -5, ino 4 [ 312.402537][T12552] loop2: detected capacity change from 0 to 256 [ 312.412174][T12552] exfat: Deprecated parameter 'utf8' [ 312.421722][T12552] exfat: Deprecated parameter 'namecase' [ 312.438046][T12552] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 312.903919][T12546] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.904158][T12546] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 312.927663][T12546] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.927813][T12546] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.940717][T12546] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.225491][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 313.292691][T12571] loop2: detected capacity change from 0 to 512 [ 313.311670][T12572] loop0: detected capacity change from 0 to 8 [ 313.311994][T12569] loop3: detected capacity change from 0 to 256 [ 313.336648][T12571] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 313.344924][T12571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 313.360358][T12569] exfat: Deprecated parameter 'utf8' [ 313.403288][T12569] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 313.455598][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 313.462320][T12572] SQUASHFS error: Failed to read block 0x1ec: -5 [ 313.466073][ T8] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 313.478049][ T8] usb 2-1: config 0 has no interface number 0 [ 313.484231][ T8] usb 2-1: config 0 interface 184 has no altsetting 0 [ 313.491450][T12572] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 313.499233][T12571] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 313.505140][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 313.541036][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.548862][T12571] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 313.570071][ T8] usb 2-1: Product: syz [ 313.574330][ T8] usb 2-1: Manufacturer: syz [ 313.582343][T12571] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.2940: Failed to acquire dquot type 1 [ 313.600381][T12571] EXT4-fs (loop2): Remounting filesystem read-only [ 313.604044][ T8] usb 2-1: SerialNumber: syz [ 313.611115][T12571] EXT4-fs (loop2): 1 truncate cleaned up [ 313.630152][ T8] usb 2-1: config 0 descriptor?? [ 313.658793][ T8] smsc75xx v1.0.0 [ 313.666255][T12571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.829003][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.270895][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 314.286072][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 314.335962][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 314.373523][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 314.398666][ T8] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 314.422040][ T8] usb 2-1: USB disconnect, device number 16 [ 314.428613][T12577] loop0: detected capacity change from 0 to 32768 [ 314.455729][T12577] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2942 (12577) [ 314.503192][T12577] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 314.526531][T12577] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 314.565998][T12577] BTRFS info (device loop0): force clearing of disk cache [ 314.573844][T12577] BTRFS info (device loop0): enabling ssd optimizations [ 314.586012][T12577] BTRFS info (device loop0): using spread ssd allocation scheme [ 314.593801][T12577] BTRFS info (device loop0): turning off barriers [ 314.645229][T12577] BTRFS info (device loop0): disabling free space tree [ 314.652253][T12577] BTRFS info (device loop0): not using ssd optimizations [ 314.705369][T12577] BTRFS info (device loop0): not using spread ssd allocation scheme [ 314.803326][T12577] BTRFS info (device loop0): rebuilding free space tree [ 314.861689][T12577] BTRFS info (device loop0): disabling free space tree [ 314.911112][T12577] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 314.955322][T12577] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 314.985246][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 315.058531][T12585] loop2: detected capacity change from 0 to 32768 [ 315.103284][T12585] (syz.2.2946,12585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.137881][T12585] (syz.2.2946,12585,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.162914][T12587] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.212463][T12585] JBD2: Ignoring recovery information on journal [ 315.315633][T12585] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 315.371838][ T5765] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.539928][T12587] XFS (loop3): Ending clean mount [ 315.571712][T12587] XFS (loop3): Quotacheck needed: Please wait. [ 315.723798][T12619] SQUASHFS error: Failed to read block 0x1ec: -5 [ 315.734855][T12587] XFS (loop3): Quotacheck: Done. [ 315.764962][T12619] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 315.911196][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 315.945257][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.345514][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 316.652664][T12638] set_capacity_and_notify: 2 callbacks suppressed [ 316.652680][T12638] loop3: detected capacity change from 0 to 512 [ 316.686491][T12638] EXT4-fs: Ignoring removed oldalloc option [ 316.706126][T12638] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.763719][T12646] loop0: detected capacity change from 0 to 64 [ 316.771218][T12638] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2961: Parent and EA inode have the same ino 15 [ 316.797242][T12638] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2961: Parent and EA inode have the same ino 15 [ 316.820753][T12638] EXT4-fs (loop3): 1 orphan inode deleted [ 316.876560][T12638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.935318][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 316.982788][T12638] EXT4-fs error (device loop3): ext4_rename:3859: inode #15: comm syz.3.2961: target of rename is already freed [ 317.046188][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.065319][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 317.117304][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.134168][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.144688][ T8] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 317.157449][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165685][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.171619][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.187356][ T8] usb 3-1: config 0 descriptor?? [ 317.250246][T12651] tipc: Started in network mode [ 317.255832][T12651] tipc: Node identity , cluster identity 4711 [ 317.262013][T12651] tipc: Failed to set node id, please configure manually [ 317.269319][T12651] tipc: Enabling of bearer rejected, failed to enable media [ 317.297920][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2965'. [ 317.334096][T12642] loop1: detected capacity change from 0 to 32768 [ 317.352455][T12642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2960 (12642) [ 317.394141][T12642] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.429674][T12642] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 317.439563][T12642] BTRFS info (device loop1): setting nodatacow, compression disabled [ 317.448706][T12642] BTRFS info (device loop1): enabling auto defrag [ 317.459811][T12642] BTRFS info (device loop1): max_inline at 0 [ 317.499785][T12642] BTRFS info (device loop1): using free space tree [ 317.600829][T12671] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 317.654614][ T8] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 317.662051][T12642] BTRFS info (device loop1): auto enabling async discard [ 317.847161][ T8] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 317.866017][ T5764] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.906856][ T8] usb 3-1: USB disconnect, device number 23 [ 318.170778][T12689] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 318.216126][T12690] vivid-000: disconnect [ 318.342853][T12693] loop3: detected capacity change from 0 to 1024 [ 318.362485][T12693] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.413069][T12693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.442240][T12693] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.508567][T12693] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2977: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 318.587351][T12693] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2977: couldn't read orphan inode 11 (err -117) [ 318.607969][T12693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.676810][T12693] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.2977: Invalid block bitmap block 0 in block_group 0 [ 318.714219][T12693] Quota error (device loop3): write_blk: dquota write failed [ 318.726115][T12693] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 318.737862][T12693] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.2977: Failed to acquire dquot type 0 [ 318.807211][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.943030][T12686] vivid-000: reconnect [ 320.820095][T12761] loop2: detected capacity change from 0 to 1024 [ 321.165423][ T4868] hfsplus: b-tree write err: -5, ino 4 [ 321.852257][T12777] loop3: detected capacity change from 0 to 512 [ 321.875766][T12777] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.918291][T12777] EXT4-fs (loop3): 1 truncate cleaned up [ 321.930460][T12777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.020490][T12767] loop1: detected capacity change from 0 to 32768 [ 322.104522][T12777] EXT4-fs warning (device loop3): ext4_group_extend:1868: can't shrink FS - resize aborted [ 322.132736][T12767] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 322.236226][T12767] [ 322.238667][T12767] ====================================================== [ 322.245735][T12767] WARNING: possible circular locking dependency detected [ 322.252798][T12767] syzkaller #0 Not tainted [ 322.257225][T12767] ------------------------------------------------------ [ 322.264255][T12767] syz.1.3011/12767 is trying to acquire lock: [ 322.270335][T12767] ffff88805f35c2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 322.283594][T12767] [ 322.283594][T12767] but task is already holding lock: [ 322.290974][T12767] ffff88805f35dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 322.300576][T12767] [ 322.300576][T12767] which lock already depends on the new lock. [ 322.300576][T12767] [ 322.310999][T12767] [ 322.310999][T12767] the existing dependency chain (in reverse order) is: [ 322.320022][T12767] [ 322.320022][T12767] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 322.327876][T12767] down_read+0x46/0x2e0 [ 322.332631][T12767] ocfs2_init_acl+0x2fa/0x720 [ 322.337851][T12767] ocfs2_mknod+0x12e5/0x20f0 [ 322.342974][T12767] ocfs2_create+0x196/0x410 [ 322.348012][T12767] path_openat+0x1277/0x3190 [ 322.353143][T12767] do_filp_open+0x1c5/0x3d0 [ 322.358185][T12767] do_sys_openat2+0x12c/0x1c0 [ 322.363396][T12767] __x64_sys_creat+0x90/0xb0 [ 322.368535][T12767] do_syscall_64+0x55/0xb0 [ 322.373497][T12767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.379925][T12767] [ 322.379925][T12767] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 322.388461][T12767] down_read+0x46/0x2e0 [ 322.393152][T12767] ocfs2_start_trans+0x36a/0x6c0 [ 322.398630][T12767] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 322.404890][T12767] ocfs2_dismount_volume+0x1e2/0x890 [ 322.410719][T12767] generic_shutdown_super+0x134/0x2b0 [ 322.416641][T12767] kill_block_super+0x44/0x90 [ 322.421851][T12767] deactivate_locked_super+0x97/0x100 [ 322.427779][T12767] cleanup_mnt+0x429/0x4c0 [ 322.432735][T12767] task_work_run+0x1ce/0x250 [ 322.437860][T12767] exit_to_user_mode_loop+0xe6/0x110 [ 322.443685][T12767] exit_to_user_mode_prepare+0xf6/0x180 [ 322.449779][T12767] syscall_exit_to_user_mode+0x1a/0x50 [ 322.455812][T12767] do_syscall_64+0x61/0xb0 [ 322.460768][T12767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.467195][T12767] [ 322.467195][T12767] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 322.474680][T12767] ocfs2_start_trans+0x26b/0x6c0 [ 322.480178][T12767] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 322.486427][T12767] ocfs2_dismount_volume+0x1e2/0x890 [ 322.492241][T12767] generic_shutdown_super+0x134/0x2b0 [ 322.498156][T12767] kill_block_super+0x44/0x90 [ 322.503368][T12767] deactivate_locked_super+0x97/0x100 [ 322.509283][T12767] cleanup_mnt+0x429/0x4c0 [ 322.514334][T12767] task_work_run+0x1ce/0x250 [ 322.519462][T12767] exit_to_user_mode_loop+0xe6/0x110 [ 322.525294][T12767] exit_to_user_mode_prepare+0xf6/0x180 [ 322.531371][T12767] syscall_exit_to_user_mode+0x1a/0x50 [ 322.537394][T12767] do_syscall_64+0x61/0xb0 [ 322.542337][T12767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.548768][T12767] [ 322.548768][T12767] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 322.559303][T12767] down_write+0x97/0x1f0 [ 322.564082][T12767] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 322.570515][T12767] ocfs2_reserve_clusters_with_limit+0x2fc/0xba0 [ 322.577386][T12767] ocfs2_reserve_suballoc_bits+0x6eb/0x4360 [ 322.583813][T12767] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 322.590688][T12767] ocfs2_extend_dir+0xc60/0x4760 [ 322.596166][T12767] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 322.602847][T12767] ocfs2_symlink+0xb38/0x2550 [ 322.608063][T12767] vfs_symlink+0x138/0x2b0 [ 322.613018][T12767] do_symlinkat+0x1b2/0x3f0 [ 322.618056][T12767] __x64_sys_symlink+0x7e/0x90 [ 322.623354][T12767] do_syscall_64+0x55/0xb0 [ 322.628310][T12767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.634742][T12767] [ 322.634742][T12767] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 322.645290][T12767] __lock_acquire+0x2ddb/0x7c80 [ 322.650686][T12767] lock_acquire+0x197/0x410 [ 322.655727][T12767] down_write+0x97/0x1f0 [ 322.660510][T12767] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 322.666963][T12767] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 322.673839][T12767] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 322.680041][T12767] ocfs2_xattr_set+0xb6d/0x11f0 [ 322.685430][T12767] __vfs_setxattr+0x431/0x470 [ 322.690651][T12767] __vfs_setxattr_noperm+0x12d/0x5e0 [ 322.696485][T12767] vfs_setxattr+0x16c/0x2f0 [ 322.701519][T12767] __se_sys_fsetxattr+0x426/0x4b0 [ 322.707094][T12767] do_syscall_64+0x55/0xb0 [ 322.712047][T12767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.718566][T12767] [ 322.718566][T12767] other info that might help us debug this: [ 322.718566][T12767] [ 322.728814][T12767] Chain exists of: [ 322.728814][T12767] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 322.728814][T12767] [ 322.745926][T12767] Possible unsafe locking scenario: [ 322.745926][T12767] [ 322.753390][T12767] CPU0 CPU1 [ 322.758761][T12767] ---- ---- [ 322.764138][T12767] lock(&oi->ip_xattr_sem); [ 322.768749][T12767] lock(&journal->j_trans_barrier); [ 322.776571][T12767] lock(&oi->ip_xattr_sem); [ 322.783699][T12767] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 322.791006][T12767] [ 322.791006][T12767] *** DEADLOCK *** [ 322.791006][T12767] [ 322.799246][T12767] 3 locks held by syz.1.3011/12767: [ 322.804466][T12767] #0: ffff888023a84418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 [ 322.814251][T12767] #1: ffff88805f35df58 (&type->i_mutex_dir_key#19){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0 [ 322.824549][T12767] #2: ffff88805f35dc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 322.834501][T12767] [ 322.834501][T12767] stack backtrace: [ 322.840400][T12767] CPU: 1 PID: 12767 Comm: syz.1.3011 Not tainted syzkaller #0 [ 322.847870][T12767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.857952][T12767] Call Trace: [ 322.861248][T12767] [ 322.864196][T12767] dump_stack_lvl+0x16c/0x230 [ 322.868927][T12767] ? load_image+0x3b0/0x3b0 [ 322.873473][T12767] ? show_regs_print_info+0x20/0x20 [ 322.878714][T12767] ? print_circular_bug+0x12b/0x1a0 [ 322.883936][T12767] check_noncircular+0x2bd/0x3c0 [ 322.888903][T12767] ? look_up_lock_class+0x75/0x140 [ 322.895106][T12767] ? print_deadlock_bug+0x5d0/0x5d0 [ 322.900337][T12767] ? lockdep_lock+0xe0/0x220 [ 322.904947][T12767] ? _find_first_zero_bit+0xd3/0x100 [ 322.910265][T12767] __lock_acquire+0x2ddb/0x7c80 [ 322.915137][T12767] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 322.921127][T12767] ? __lock_acquire+0x7c80/0x7c80 [ 322.926155][T12767] ? verify_lock_unused+0x140/0x140 [ 322.931378][T12767] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 322.937016][T12767] ? do_raw_spin_lock+0x121/0x2c0 [ 322.942048][T12767] ? mutex_unlock+0x10/0x10 [ 322.946563][T12767] lock_acquire+0x197/0x410 [ 322.951076][T12767] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 322.957160][T12767] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 322.963158][T12767] ? __might_sleep+0xe0/0xe0 [ 322.967787][T12767] ? read_lock_is_recursive+0x20/0x20 [ 322.973179][T12767] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 322.979339][T12767] ? check_noncircular+0x175/0x3c0 [ 322.984472][T12767] ? verify_lock_unused+0x140/0x140 [ 322.989687][T12767] down_write+0x97/0x1f0 [ 322.993946][T12767] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 323.000035][T12767] ? down_read_killable+0x340/0x340 [ 323.005252][T12767] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 323.011161][T12767] ? mark_lock+0x94/0x320 [ 323.015506][T12767] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 323.021514][T12767] ? lock_chain_count+0x20/0x20 [ 323.026385][T12767] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 323.032295][T12767] ? ocfs2_block_group_search+0x470/0x470 [ 323.038048][T12767] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 323.043963][T12767] ? _raw_spin_unlock+0x40/0x40 [ 323.048837][T12767] ? stack_trace_save+0x9c/0xe0 [ 323.053699][T12767] ? stack_trace_snprint+0xf0/0xf0 [ 323.058824][T12767] ? __stack_depot_save+0x560/0x630 [ 323.064038][T12767] ? kasan_set_track+0x5f/0x70 [ 323.068822][T12767] ? kasan_set_track+0x4e/0x70 [ 323.073601][T12767] ? __kasan_kmalloc+0x8f/0xa0 [ 323.078377][T12767] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 323.084995][T12767] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 323.090822][T12767] ? ocfs2_xattr_set+0xb6d/0x11f0 [ 323.095862][T12767] ? __vfs_setxattr+0x431/0x470 [ 323.100726][T12767] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 323.106195][T12767] ? vfs_setxattr+0x16c/0x2f0 [ 323.110883][T12767] ? __se_sys_fsetxattr+0x426/0x4b0 [ 323.116099][T12767] ? do_syscall_64+0x55/0xb0 [ 323.120700][T12767] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.126830][T12767] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 323.133204][T12767] ? ocfs2_init_steal_slots+0x160/0x160 [ 323.138800][T12767] ? ocfs2_xattr_block_set+0x2b40/0x2b40 [ 323.144466][T12767] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 323.150119][T12767] ? ocfs2_xattr_set+0xb33/0x11f0 [ 323.155176][T12767] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 323.161273][T12767] ? ocfs2_truncate_log_needs_flush+0x135/0x2e0 [ 323.167575][T12767] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 323.173501][T12767] ? down_write+0x162/0x1f0 [ 323.178025][T12767] ? down_read_killable+0x340/0x340 [ 323.183243][T12767] ? up_write+0x1c3/0x410 [ 323.187603][T12767] ocfs2_xattr_set+0xb6d/0x11f0 [ 323.192488][T12767] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 323.198227][T12767] ? __lock_acquire+0x1334/0x7c80 [ 323.203364][T12767] ? verify_lock_unused+0x140/0x140 [ 323.208607][T12767] ? aa_get_newest_label+0xf8/0x5c0 [ 323.213829][T12767] ? end_current_label_crit_section+0x170/0x170 [ 323.220095][T12767] ? posix_xattr_acl+0x93/0xb0 [ 323.224920][T12767] ? evm_protect_xattr+0x36d/0x7a0 [ 323.230054][T12767] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 323.235548][T12767] __vfs_setxattr+0x431/0x470 [ 323.240335][T12767] __vfs_setxattr_noperm+0x12d/0x5e0 [ 323.245654][T12767] vfs_setxattr+0x16c/0x2f0 [ 323.250205][T12767] ? xattr_permission+0x470/0x470 [ 323.255252][T12767] ? __se_sys_fsetxattr+0x3d4/0x4b0 [ 323.260481][T12767] __se_sys_fsetxattr+0x426/0x4b0 [ 323.265550][T12767] ? __x64_sys_fsetxattr+0xc0/0xc0 [ 323.270703][T12767] ? lockdep_hardirqs_on+0x98/0x150 [ 323.275927][T12767] ? __x64_sys_fsetxattr+0x20/0xc0 [ 323.281067][T12767] do_syscall_64+0x55/0xb0 [ 323.285511][T12767] ? clear_bhb_loop+0x40/0x90 [ 323.290220][T12767] ? clear_bhb_loop+0x40/0x90 [ 323.294925][T12767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.300845][T12767] RIP: 0033:0x7fc499b8f749 [ 323.305281][T12767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.324912][T12767] RSP: 002b:00007fc497df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 323.333345][T12767] RAX: ffffffffffffffda RBX: 00007fc499de5fa0 RCX: 00007fc499b8f749 [ 323.341334][T12767] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 323.349324][T12767] RBP: 00007fc499c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 323.357310][T12767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.365298][T12767] R13: 00007fc499de6038 R14: 00007fc499de5fa0 R15: 00007fff616d43a8 [ 323.373292][T12767] [ 323.416888][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.578651][T12781] loop2: detected capacity change from 0 to 40427 [ 323.593684][T12781] F2FS-fs (loop2): invalid crc value [ 323.601272][T12781] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.617036][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 323.701747][T12781] F2FS-fs (loop2): Start checkpoint disabled! [ 323.726592][T12781] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6