last executing test programs: 3.097608062s ago: executing program 1 (id=5423): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2800) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000140)) 2.88089133s ago: executing program 1 (id=5412): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000500)={0xa, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x3147504d}) 2.845317734s ago: executing program 3 (id=5413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6802000000050104000000000000000005000005540201000100000005000000079108000500000073797a3000000000000000000000000000000000000000000000f5ab73cf568567b45522e3d2d9ecde654628afe6ea7d2f05a1b7a4a74027140e75ba71a50793"], 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x20004080) 2.473939815s ago: executing program 3 (id=5415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3d, 0x107, 0xfffffffd, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x8010) 2.472582786s ago: executing program 1 (id=5416): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) 2.37078284s ago: executing program 3 (id=5417): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x402}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.342428121s ago: executing program 4 (id=5418): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) 2.16178402s ago: executing program 3 (id=5420): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x80, 0x6, 0x4, 0x0, 0x1, "0000006ca0a31c00", '\x00\x00\a\x00', "03004010", "0021ffff", ["2683be63f2af0900e40100b6", "ef5896d0ff00585b38d000", "0edd42006b35018f74d34ac5"]}) 2.146315389s ago: executing program 1 (id=5422): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 1.897298004s ago: executing program 1 (id=5426): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@discard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.873729593s ago: executing program 3 (id=5427): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x808812, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5ff2, &(0x7f000000a4c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) 1.799623355s ago: executing program 0 (id=5428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 1.792692836s ago: executing program 5 (id=5429): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @loopback}, {0x4, 0x0, @private=0xa0100ff}, {0x2, 0x4e24, @broadcast}, 0x61, 0x0, 0x0, 0xfdffffffffffffff, 0x3, &(0x7f0000000280)='veth1_to_bridge\x00', 0x8, 0x0, 0xfffe}) 1.431692555s ago: executing program 5 (id=5431): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2a, 0x107, 0xfffffffd, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.402014969s ago: executing program 0 (id=5432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x2, 0x0, 0x7, 0x1}) 1.227864645s ago: executing program 4 (id=5434): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x8004b709, 0x0) 1.170061219s ago: executing program 5 (id=5435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000001b0000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.051843122s ago: executing program 0 (id=5436): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)) 1.040981841s ago: executing program 2 (id=5437): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0xf5) 1.006063175s ago: executing program 4 (id=5438): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) 819.278311ms ago: executing program 5 (id=5439): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000f40)={0x8, @raw_data="0f0edee150f9a286cb7d5d270a934aae7e70bae39197556d863bd0490725c06c6542f7a138dd601927736646da1d484311a1122b855e15680df23448c46d07cfb71b3324800b9268e85fbd48134b1a872b157d16b7c8183ca988fcfc135122ca729b14a8b4cbcc5e67ffcec20cedc452b65ee82aa39a210f097d7f18d9b9d701b2b0ed3200019e062965ee4710f26dc445d1422acae62079eef4e20a3e4b22bc67d0e5e7ac51dd2a9733069d7f05e6dfd6d5e4cc1708b225c179714cad9248946193bcddfe23e036"}) 817.691143ms ago: executing program 4 (id=5440): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000240)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@utf8no}, {@fat=@uid}, {@numtail}, {@fat=@errors_continue}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_win95}, {@shortname_mixed}]}, 0x1, 0x29f, &(0x7f0000000b00)="$eJzs3U9rK1UUAPAzzaRJdJEsXInwBnThxsern6BFniAWBCULdaEPmwfShActBKpi7MpP4Matn8eNuHLnB1Dc2YU4MpnJP52kRNqm6O+36eHce+aemTv9s8ntxy+NTk+enT+9/OLnaLeT2DuMw7hKohd7MfNV1Prx1/o8AHDPXeV5/JaXWmXqYnVGc01lunfrzQEAt2L59/+GaT/17rAnAOB2vff+B28fHR8/fjfL2hGjr8f9JMqv5fjR0/g0hjGIR9GNPyLyuTJ+863jx5FmhV68MpqM+0Xl6KPvq+sf/RIxrT+IbvTq6w+y0lL9ZNxvxnPV+ofDGLzzXXTjhfr61xf1V3lVH/39ePXlpf4fRjd++CSexTBOovxbZ1b/5UGWvZF/8/vnHxbZoj6ZjPutOFl5UnnjrvcGAAAAAAAAAAAAAAAAAAAAAID/rofZXG/1/J3Zwf8bxjecDzRZOp/nUZZleVLOX9Sn8WIa6S7vHQAAAAAAAAAAAAAAAAAAAO6L84vPTp8Mh4OzGw1mH+uvGYo/VzOtiFhznfT6tR5s22E0qtaGScR299WM1rTy+smNLZ9Yp+hncJakMc00t2ysNkjmmc7y0IMo1yoynTJYymy3xLf/3Lh2TIPZ23X6JFm3ubOgXfeSXBtUp0lseFB5zevXWHvB/b9nOtUC08xr7ZWhDY3tP/+v9ivvrhkq7rM5f5jVUKd+cvNmv5fv5ucPAAAAAAAAAAAAAAAAAACwsPjQb83g5Q4aAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAdWPz//y2CSVW8bk7eKII0qsyObxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/gb8CAAD//zgCZe4=") creat(&(0x7f0000005880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141) 758.17025ms ago: executing program 2 (id=5441): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) 713.130616ms ago: executing program 2 (id=5442): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x2000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 691.829943ms ago: executing program 0 (id=5443): r0 = semget$private(0x0, 0x4, 0x8) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000005c0)=[0x8000]) 669.582779ms ago: executing program 3 (id=5444): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4e, 0x2, 0x2, "bc57499c007105252e000355000000cc00"}) 591.276781ms ago: executing program 2 (id=5445): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 510.170909ms ago: executing program 5 (id=5446): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x7ffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 488.706851ms ago: executing program 0 (id=5447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) 451.073628ms ago: executing program 1 (id=5448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) fgetxattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0) 443.679806ms ago: executing program 4 (id=5449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x80) 276.607162ms ago: executing program 2 (id=5450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 226.12084ms ago: executing program 5 (id=5451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000002c0)={0x6c, 0x0, 0x0, 0x2}, 0x8) 207.588238ms ago: executing program 0 (id=5452): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x22202, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000100)={0x0, 0x30000, 0x80, 0xfffffffb, 0x4, 0x2, 0x10, 0x5, 0x40, 0x3, 0x100, 0x9, 0x0, 0x0, 0x0}) 18.048234ms ago: executing program 2 (id=5453): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 0s ago: executing program 4 (id=5454): unshare(0x40400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) kernel console output (not intermixed with test programs): 4571] BTRFS warning (device loop1 state ES): devid 1 uuid ffe96fa6-2f75-4027-b49d-9003f3eadbc4 is missing [ 482.691686][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.733063][ T5825] usb 3-1: Product: syz [ 482.737372][ T5825] usb 3-1: Manufacturer: syz [ 482.753210][T14571] BTRFS warning (device loop1 state ES): devid 1 uuid ffe96fa6-2f75-4027-b481-0003f3eadbc4 is missing [ 482.781494][ T5825] usb 3-1: SerialNumber: syz [ 482.829736][T14571] BTRFS warning (device loop1 state ES): couldn't read tree root [ 482.938853][T14571] BTRFS error (device loop1 state ES): open_ctree failed: -5 [ 483.075893][ T5825] uvcvideo 3-1:5.29: Found UVC 0.00 device syz (05ac:8501) [ 483.105084][ T5825] uvcvideo 3-1:5.29: No valid video chain found. [ 483.158307][ T5825] usb 3-1: USB disconnect, device number 95 [ 484.017436][T14607] set_capacity_and_notify: 8 callbacks suppressed [ 484.017460][T14607] loop0: detected capacity change from 0 to 32768 [ 484.126525][T14607] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 484.204414][T14607] XFS (loop0): Log size 516 blocks too small, minimum size is 636 blocks [ 484.288733][T14607] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 484.301130][T14610] loop1: detected capacity change from 0 to 32768 [ 484.430697][T14612] loop2: detected capacity change from 0 to 32768 [ 484.476234][T14607] XFS (loop0): log mount failed [ 484.484033][T14612] loop2: p9 p11 p16 [ 484.494949][T14610] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 484.619754][T14610] XFS (loop1): Ending clean mount [ 484.952368][ T5881] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 485.479536][ T6245] udevd[6245]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 485.496974][ T6195] udevd[6195]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 485.501339][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 485.606256][ T6195] udevd[6195]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 485.621004][ T6245] udevd[6245]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 485.647806][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 485.695407][T14631] loop0: detected capacity change from 0 to 256 [ 485.744814][T14631] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 485.832676][T14631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.059051][T14633] loop1: detected capacity change from 0 to 4096 [ 486.097015][T14633] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 486.623613][T14652] loop1: detected capacity change from 0 to 512 [ 486.647470][T14653] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 486.674371][T14653] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 486.715893][T14652] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 486.723402][T14652] UDF-fs: Scanning with blocksize 512 failed [ 486.811483][T14652] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 486.819836][T14652] UDF-fs: Scanning with blocksize 1024 failed [ 486.883391][T14652] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 486.904315][T14652] UDF-fs: Scanning with blocksize 2048 failed [ 486.930266][T14652] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 486.964006][T14652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.990454][T14659] netlink: 'syz.5.3766': attribute type 5 has an invalid length. [ 487.141634][T14629] loop2: detected capacity change from 0 to 65536 [ 487.251925][T14629] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 487.334733][T14670] loop4: detected capacity change from 0 to 1024 [ 487.337124][T14672] loop5: detected capacity change from 0 to 128 [ 487.373502][T14676] syz.1.3771 uses obsolete (PF_INET,SOCK_PACKET) [ 487.502125][T14645] loop3: detected capacity change from 0 to 32768 [ 487.781604][ T12] hfsplus: b-tree write err: -5, ino 25 [ 487.826501][ T12] hfsplus: b-tree write err: -5, ino 4 [ 487.880398][ T12] hfsplus: b-tree write err: -5, ino 2 [ 487.888863][T14686] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.367295][T14696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.962489][T14715] EXT4-fs: Ignoring removed orlov option [ 489.005361][T14706] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 489.022494][T14715] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 489.043745][T14706] UDF-fs: Scanning with blocksize 512 failed [ 489.070229][T14715] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 489.097448][T14706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.135388][T14715] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 489.181684][T14715] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 489.181684][T14715] [ 489.193265][T14715] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 489.204943][T14715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.231581][T14715] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.3791: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 489.257387][T14715] EXT4-fs (loop1): Remounting filesystem read-only [ 489.459540][ T5881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.338249][T14755] IPv6: Can't replace route, no match found [ 490.551983][T14725] set_capacity_and_notify: 4 callbacks suppressed [ 490.552010][T14725] loop2: detected capacity change from 0 to 32768 [ 490.627802][T14725] (syz.2.3796,14725,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 490.688478][T14725] (syz.2.3796,14725,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 491.038516][T14774] loop4: detected capacity change from 0 to 512 [ 491.093249][T14774] EXT4-fs: Ignoring removed nobh option [ 491.131358][T14774] EXT4-fs (loop4): Test dummy encryption mode enabled [ 491.152139][T14780] netlink: 'syz.5.3822': attribute type 2 has an invalid length. [ 491.208686][T14774] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 1: comm syz.4.3819: invalid block [ 491.307984][T14774] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 491.308526][T14774] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3819: couldn't read orphan inode 11 (err -117) [ 491.317788][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 491.317818][ C1] EXT4-fs (loop4): initial error at time 1772413273: __ext4_iget:5378: inode 11: block 1 [ 491.317867][ C1] EXT4-fs (loop4): last error at time 1772413273: __ext4_iget:5378: inode 11: block 1 [ 491.438051][T14784] rtc_cmos 00:00: Alarms can be up to one day in the future [ 491.517673][T14774] loop4: lost filesystem error report for type 5 error -117 [ 491.520076][T14774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.822906][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.940795][T14777] loop2: detected capacity change from 0 to 32768 [ 492.020907][T14777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3820 (14777) [ 492.089152][T14803] loop4: detected capacity change from 0 to 256 [ 492.124182][T14777] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 492.166861][T14777] BTRFS info (device loop2): using sha256 checksum algorithm [ 492.179234][T14803] FAT-fs (loop4): Directory bread(block 64) failed [ 492.207290][T14735] loop3: detected capacity change from 0 to 65536 [ 492.218041][T14803] FAT-fs (loop4): Directory bread(block 65) failed [ 492.276142][T14803] FAT-fs (loop4): Directory bread(block 66) failed [ 492.337177][T14735] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 492.342186][T14803] FAT-fs (loop4): Directory bread(block 67) failed [ 492.391356][T14803] FAT-fs (loop4): Directory bread(block 68) failed [ 492.412847][T14803] FAT-fs (loop4): Directory bread(block 69) failed [ 492.439950][T14803] FAT-fs (loop4): Directory bread(block 70) failed [ 492.485219][T14803] FAT-fs (loop4): Directory bread(block 71) failed [ 492.494424][T14803] FAT-fs (loop4): Directory bread(block 72) failed [ 492.499919][T14815] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.501751][T14803] FAT-fs (loop4): Directory bread(block 73) failed [ 492.540093][T14815] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.628829][T14777] BTRFS info (device loop2): enabling ssd optimizations [ 492.635830][T14777] BTRFS info (device loop2): turning on async discard [ 492.738017][T14777] BTRFS info (device loop2): enabling free space tree [ 492.767669][ T31] audit: type=1800 audit(1772413274.957:15): pid=14803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3828" name="bus" dev="loop4" ino=1048652 res=0 errno=0 [ 492.979070][ T1205] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 493.027298][ T5882] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.237012][ T1205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.253162][ T1205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 493.302566][ T1205] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 493.312499][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.361591][ T1205] usb 2-1: Product: syz [ 493.374623][ T1205] usb 2-1: Manufacturer: syz [ 493.379446][ T1205] usb 2-1: SerialNumber: syz [ 493.397840][T14849] loop3: detected capacity change from 0 to 128 [ 493.436868][ T1205] usb 2-1: config 0 descriptor?? [ 493.478480][T14854] netlink: 'syz.4.3847': attribute type 21 has an invalid length. [ 493.479374][ T1205] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 493.505682][T14854] IPv6: NLM_F_CREATE should be specified when creating new route [ 493.540557][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 493.551270][T14849] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 493.581854][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 493.620630][T14849] FAT-fs (loop3): Filesystem has been set read-only [ 493.633059][ T1205] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 493.673928][ T1205] usb 2-1: media controller created [ 493.726632][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 493.861962][ T5895] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 494.095733][ T1205] DVB: Unable to find symbol tda10046_attach() [ 494.110220][ T1205] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 494.155748][ T1205] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 494.216242][T14860] loop4: detected capacity change from 0 to 8192 [ 494.355552][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 494.380882][T14840] loop5: detected capacity change from 0 to 32768 [ 494.424635][ T1205] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 494.479296][ T1205] usb 2-1: USB disconnect, device number 96 [ 494.536718][T14840] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 494.700235][T14840] XFS (loop5): Ending clean mount [ 494.880803][ T5897] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 494.944517][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3862'. [ 495.239368][T14902] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3863'. [ 495.269838][T14903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'. [ 495.404962][T14910] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3870'. [ 495.466685][T14913] comedi comedi0: multiq3: I/O port conflict (0x3,16) [ 495.791494][T14918] loop0: detected capacity change from 0 to 2048 [ 495.877233][T14918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.012577][T14925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.041138][ T5825] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 496.049758][T14923] loop1: detected capacity change from 0 to 4096 [ 496.120714][T14923] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 496.133540][T14927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.190504][T14923] ntfs3(loop1): ino=1a, mi_enum_attr [ 496.207057][T14923] ntfs3(loop1): ino=1a, mi_enum_attr [ 496.219681][ T5825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.235522][T14923] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 496.262051][ T5825] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.313212][T14923] ntfs3(loop1): ino=5, "/" indx_read_ra [ 496.319257][ T5825] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.319293][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.319319][ T5825] usb 4-1: Product: syz [ 496.319338][ T5825] usb 4-1: Manufacturer: syz [ 496.319357][ T5825] usb 4-1: SerialNumber: syz [ 496.337986][ T5825] cdc_ncm 4-1:1.0: skipping garbage [ 496.403041][T14898] loop2: detected capacity change from 0 to 32768 [ 496.427814][ T5825] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 496.446817][ T5825] cdc_ncm 4-1:1.0: bind() failure [ 496.466041][T14933] kernel read not supported for file / »°7:ä´ (pid: 14933 comm: syz.4.3881) [ 496.499976][ T5825] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 496.521469][ T31] audit: type=1800 audit(1772413278.466:16): pid=14933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3881" name=2001BBB0373AE4B4 dev="mqueue" ino=33536 res=0 errno=0 [ 496.532221][ T5825] cdc_ncm 4-1:1.1: bind() failure [ 496.555102][T14898] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 496.635177][ T5825] usb 4-1: USB disconnect, device number 98 [ 496.676939][T14898] XFS (loop2): Ending clean mount [ 496.763596][T14898] XFS (loop2): Quotacheck needed: Please wait. [ 496.798086][T14946] netlink: 'syz.0.3885': attribute type 3 has an invalid length. [ 496.827517][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3885'. [ 496.869668][T14898] XFS (loop2): Quotacheck: Done. [ 497.078820][ T5882] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 497.098081][T14953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3886'. [ 497.125416][T14953] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3886'. [ 497.160975][T14953] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3886'. [ 497.176145][T14953] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 497.622892][T14961] bridge1: entered promiscuous mode [ 497.639617][T14931] loop5: detected capacity change from 0 to 32768 [ 497.698661][T14931] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 497.895151][T14931] XFS (loop5): Ending clean mount [ 497.935541][T14931] XFS (loop5): Quotacheck needed: Please wait. [ 498.051566][T14931] XFS (loop5): Quotacheck: Done. [ 498.079135][T14931] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 498.195523][ T5942] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 498.437927][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 498.454797][ T5942] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 498.506573][ T5942] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 498.537526][ T5942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 498.583799][ T5942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 8306, setting to 1024 [ 498.644878][ T5942] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.694800][ T5942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 498.715062][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.741075][ T5942] usb 4-1: Product: syz [ 498.745538][ T5942] usb 4-1: Manufacturer: syz [ 498.761509][ T5942] usb 4-1: SerialNumber: syz [ 498.808280][T14987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 498.821132][ T5942] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 498.849884][ T5942] usbtest 4-1:1.0: Linux user mode ISO test driver [ 498.867766][ T5942] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 499.074082][ T5942] usb 4-1: USB disconnect, device number 99 [ 499.392612][T15034] comedi comedi3: comedi_config --init_data is deprecated [ 499.464792][T15030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.162117][T15067] tmpfs: Bad value for 'mpol' [ 500.326606][T15073] netlink: 'syz.1.3939': attribute type 2 has an invalid length. [ 500.354077][ T31] audit: type=1326 audit(1772413282.049:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.415079][T15073] : entered promiscuous mode [ 500.454462][ T31] audit: type=1326 audit(1772413282.049:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.547059][ T31] audit: type=1326 audit(1772413282.049:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.627310][ T31] audit: type=1326 audit(1772413282.049:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.721656][ T31] audit: type=1326 audit(1772413282.086:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.816994][ T31] audit: type=1326 audit(1772413282.086:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.857087][ T31] audit: type=1326 audit(1772413282.086:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.904427][ T31] audit: type=1326 audit(1772413282.086:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 500.985371][ T31] audit: type=1326 audit(1772413282.086:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcaa7b9c629 code=0x7ffc0000 [ 501.019917][T15096] loop2: detected capacity change from 0 to 1024 [ 501.096858][ T31] audit: type=1326 audit(1772413282.750:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.3.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e099c629 code=0x7ffc0000 [ 501.173941][T15096] hfsplus: b-tree write err: -5, ino 2 [ 501.404082][ T37] hfsplus: b-tree write err: -5, ino 25 [ 501.433805][ T37] hfsplus: b-tree write err: -5, ino 4 [ 501.460599][ T37] hfsplus: b-tree write err: -5, ino 2 [ 501.478599][ T37] hfsplus: b-tree write err: -5, ino 26 [ 501.689103][T15122] loop2: detected capacity change from 0 to 256 [ 501.852756][T15122] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.910235][T15122] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 501.956603][T15122] FAT-fs (loop2): Filesystem has been set read-only [ 501.996419][T15122] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 502.093171][T15122] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 502.351724][T15146] openvswitch: netlink: Key type 326 is out of range max 32 [ 502.484063][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.490878][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.552611][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.556056][T15157] loop5: detected capacity change from 0 to 256 [ 502.643623][T15153] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 502.657222][T15158] vti0: entered promiscuous mode [ 502.662291][T15158] vti0: entered allmulticast mode [ 502.737907][T15153] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 502.954120][T15169] xt_limit: Overflow, try lower: 268435456/134217728 [ 502.965231][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.016791][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.043756][T15173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.047003][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.135830][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.150527][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.166409][T15179] loop3: detected capacity change from 0 to 128 [ 503.207780][T15153] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.522939][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.529720][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.616603][T15192] No such timeout policy "syz1" [ 503.634490][T15190] netlink: zone id is out of range [ 503.669263][T15190] netlink: zone id is out of range [ 503.674514][T15190] netlink: zone id is out of range [ 503.678194][T15194] loop1: detected capacity change from 0 to 2048 [ 503.729105][T15194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.744303][T15190] netlink: zone id is out of range [ 503.749572][T15190] netlink: zone id is out of range [ 503.762665][T15200] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 503.846264][T15190] netlink: zone id is out of range [ 503.880229][T15190] netlink: zone id is out of range [ 503.901423][T15190] netlink: zone id is out of range [ 503.937028][T15202] loop2: detected capacity change from 0 to 128 [ 504.014838][T15202] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 504.103356][T15202] ext4 filesystem being mounted at /667/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.370108][ T5882] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.660426][T15232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 504.880085][T15234] loop1: detected capacity change from 0 to 4096 [ 505.034665][T15248] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.102770][T15234] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 505.121383][T15249] loop0: detected capacity change from 0 to 1024 [ 505.171951][T15234] Remounting filesystem read-only [ 505.329227][T15252] netlink: 'syz.4.4022': attribute type 5 has an invalid length. [ 505.393031][T15205] loop5: detected capacity change from 0 to 32768 [ 505.464509][T15205] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 505.634402][T15266] __nla_validate_parse: 3 callbacks suppressed [ 505.634428][T15266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4027'. [ 505.660797][T15205] XFS (loop5): Ending clean mount [ 505.687181][T15205] XFS (loop5): Quotacheck needed: Please wait. [ 505.720899][T15266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4027'. [ 505.831965][T15205] XFS (loop5): Quotacheck: Done. [ 505.960446][ T5897] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 506.041484][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 506.235326][T15286] loop4: detected capacity change from 0 to 1024 [ 506.243589][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 506.273524][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.326783][ T10] usb 4-1: config 0 descriptor?? [ 506.364264][T15286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.441201][T15297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4040'. [ 506.678866][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.814580][ T10] ath6kl: Failed to read usb control message: -71 [ 506.819321][T15305] CIFS mount error: No usable UNC path provided in device string! [ 506.819321][T15305] [ 506.843143][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 506.850393][ T10] ath6kl: Unable to recv target info: -71 [ 506.901112][ T10] ath6kl: Failed to init ath6kl core: -71 [ 506.907402][T15305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.919576][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4044'. [ 506.930512][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 506.986332][ T10] usb 4-1: USB disconnect, device number 100 [ 506.988017][T15311] loop1: detected capacity change from 0 to 24 [ 507.076442][T15311] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 507.112605][T15311] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 507.186702][T15315] loop2: detected capacity change from 0 to 2048 [ 507.277662][T15323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 507.344154][T15317] bond1: entered allmulticast mode [ 507.350453][T15317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.572158][T15331] capability: warning: `syz.5.4055' uses 32-bit capabilities (legacy support in use) [ 507.948423][T15348] loop4: detected capacity change from 0 to 512 [ 508.071845][T15348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.122552][T15348] ext4 filesystem being mounted at /698/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.381290][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.445305][T15364] loop0: detected capacity change from 0 to 4096 [ 508.445599][T15367] bond1: entered allmulticast mode [ 508.513657][T15367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.801418][T15375] xt_hashlimit: size too large, truncated to 1048576 [ 508.821276][T15375] xt_hashlimit: max too large, truncated to 1048576 [ 508.836624][T15380] loop3: detected capacity change from 0 to 128 [ 510.018181][ T10] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 510.250221][ T10] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 510.274287][ T10] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 510.307444][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 510.334169][ T10] usb 6-1: config 0 has no interface number 0 [ 510.362508][ T10] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 510.424216][ T10] usb 6-1: config 0 interface 104 has no altsetting 1 [ 510.448823][ T10] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 510.480191][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.510824][ T10] usb 6-1: Product: syz [ 510.536953][ T10] usb 6-1: Manufacturer: syz [ 510.547646][ T10] usb 6-1: SerialNumber: syz [ 510.578431][ T10] usb 6-1: config 0 descriptor?? [ 510.628137][ T10] asix 6-1:0.104: probe with driver asix failed with error -22 [ 510.754379][T15455] loop1: detected capacity change from 0 to 1024 [ 510.842646][T15455] hfsplus: keylen 65060 too large [ 510.848464][ T1205] usb 6-1: USB disconnect, device number 91 [ 510.947234][T15464] netlink: 'syz.0.4115': attribute type 1 has an invalid length. [ 510.989207][T15464] netlink: 'syz.0.4115': attribute type 2 has an invalid length. [ 511.177041][T15468] loop1: detected capacity change from 0 to 1024 [ 512.202018][T15507] loop5: detected capacity change from 0 to 4096 [ 512.226653][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4139'. [ 512.240497][T15507] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 512.403742][T15507] ntfs3(loop5): ino=19, mi_enum_attr [ 512.532369][T15507] ntfs3(loop5): failed to convert "c46c" to cp852 [ 512.555718][T15507] ntfs3(loop5): ino=20, mi_enum_attr [ 512.592552][T15528] loop1: detected capacity change from 0 to 64 [ 512.620516][T15527] loop2: detected capacity change from 0 to 512 [ 512.704316][T15527] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4146: invalid indirect mapped block 256 (level 2) [ 512.796692][T15527] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 512.796938][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 512.812974][ C1] EXT4-fs (loop2): initial error at time 1772413293: ext4_free_branches:1023: inode 11 [ 512.822706][ C1] EXT4-fs (loop2): last error at time 1772413293: ext4_free_branches:1023: inode 11 [ 512.845867][T15527] EXT4-fs (loop2): 2 truncates cleaned up [ 512.883797][T15527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.065534][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 513.089224][T15542] warning: `syz.3.4153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 513.114755][ T5882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.258566][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.268287][T15541] bond2: Removing last arp target with arp_interval on [ 513.275380][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.299873][ T10] usb 1-1: config 0 descriptor?? [ 513.314827][ T10] cp210x 1-1:0.0: cp210x converter detected [ 513.321984][T15541] bond2: option min_links: invalid value (18446744071562067973) [ 513.329690][T15541] bond2: option min_links: allowed values 0 - 2147483647 [ 513.383832][T15541] bond2 (unregistering): Released all slaves [ 513.419580][T15551] loop2: detected capacity change from 0 to 512 [ 513.445636][T15555] netlink: 'syz.3.4158': attribute type 32 has an invalid length. [ 513.455960][T15551] EXT4-fs: Ignoring removed oldalloc option [ 513.544383][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 513.626289][T15551] __quota_error: 16 callbacks suppressed [ 513.626314][T15551] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 513.695186][T15551] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 513.748803][T15551] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.4155: Failed to acquire dquot type 1 [ 513.768178][ T5825] usb 1-1: USB disconnect, device number 95 [ 513.802810][T15551] loop2: lost filesystem error report for type 5 error -117 [ 513.812504][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 513.826830][ C0] EXT4-fs (loop2): last error at time 1772413294: ext4_acquire_dquot:7001 [ 513.851366][T15551] EXT4-fs (loop2): 1 truncate cleaned up [ 513.864349][T15565] net_ratelimit: 350 callbacks suppressed [ 513.864371][T15565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.892705][T15551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.944531][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 513.952649][T15551] ext4 filesystem being mounted at /700/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.001677][ T5825] cp210x 1-1:0.0: device disconnected [ 514.002005][T15551] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 514.069330][T15551] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 514.090421][T15551] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.4155: Failed to acquire dquot type 1 [ 514.276081][ T5882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.760019][T15587] loop1: detected capacity change from 0 to 4096 [ 514.787967][T15587] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 514.876061][T15597] loop3: detected capacity change from 0 to 1024 [ 514.962588][T15587] ntfs3(loop1): ino=19, mi_enum_attr [ 515.001707][T15602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.045591][T15587] ntfs3(loop1): failed to convert "c46c" to macgreek [ 515.086822][ T2983] hfsplus: b-tree write err: -5, ino 25 [ 515.087735][T15587] ntfs3(loop1): ino=20, mi_enum_attr [ 515.127860][ T2983] hfsplus: b-tree write err: -5, ino 4 [ 515.149715][ T2983] hfsplus: b-tree write err: -5, ino 2 [ 515.632158][T15616] loop4: detected capacity change from 0 to 64 [ 515.742325][T15620] /dev/nullb0: Can't open blockdev [ 515.779348][ T5990] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 515.985255][ T5990] usb 2-1: Using ep0 maxpacket: 16 [ 515.993076][ T29] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 516.011625][ T5990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.044159][ T5990] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 516.061790][T15630] fuse: Bad value for 'fd' [ 516.073857][T15630] tmpfs: Unknown parameter 'group_id' [ 516.077051][ T5990] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 516.119954][ T5990] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.144135][T15596] loop2: detected capacity change from 0 to 32768 [ 516.156978][T15596] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4178 (15596) [ 516.173710][ T5990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 516.181373][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 516.196499][ T29] usb 5-1: config 7 has an invalid interface number: 143 but max is 1 [ 516.205862][ T5990] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 516.215239][ T29] usb 5-1: config 7 has an invalid interface number: 217 but max is 1 [ 516.228271][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.241969][ T29] usb 5-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config [ 516.275429][ T5990] usb 2-1: Product: syz [ 516.279814][ T5990] usb 2-1: Manufacturer: syz [ 516.295572][T15596] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 516.307607][ T29] usb 5-1: config 7 has no interface number 0 [ 516.316108][ T5990] usb 2-1: SerialNumber: syz [ 516.331683][ T29] usb 5-1: config 7 has no interface number 1 [ 516.343927][T15596] BTRFS info (device loop2): using sha256 checksum algorithm [ 516.348584][T15634] erspan1: entered allmulticast mode [ 516.352708][ T5990] usb 2-1: config 0 descriptor?? [ 516.368005][ T29] usb 5-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 516.399250][ T29] usb 5-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 516.424356][ T29] usb 5-1: config 7 interface 143 has no altsetting 0 [ 516.438649][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 516.452543][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.474146][ T29] usb 5-1: Product: syz [ 516.478404][ T29] usb 5-1: Manufacturer: syz [ 516.493027][ T29] usb 5-1: SerialNumber: syz [ 516.564197][T15596] BTRFS info (device loop2): turning off barriers [ 516.603677][T15596] BTRFS info (device loop2): enabling free space tree [ 516.748738][ T29] qmi_wwan 5-1:7.143: probe with driver qmi_wwan failed with error -22 [ 516.808284][ T5882] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 516.838077][ T29] usb 5-1: Could not set interface, error -71 [ 516.900792][ T5825] usb 2-1: USB disconnect, device number 97 [ 516.907829][ T29] usb 5-1: USB disconnect, device number 92 [ 517.659230][T15681] loop4: detected capacity change from 0 to 1024 [ 517.691677][T15682] bond1: option miimon: invalid value (18446744073709551614) [ 517.753458][T15681] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 517.812736][T15682] bond1: option miimon: allowed values 0 - 2147483647 [ 517.831807][T15681] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 517.900585][T15682] bond1 (unregistering): Released all slaves [ 517.909181][T15681] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.968834][T15681] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.4211: unexpected bad inode w/o EXT4_IGET_BAD [ 518.040925][T15681] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 518.041288][T15681] EXT4-fs (loop4): no journal found [ 518.050459][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 518.050488][ C0] EXT4-fs (loop4): initial error at time 1772413298: ext4_get_journal_inode:5863: inode 5 [ 518.050527][ C0] EXT4-fs (loop4): last error at time 1772413298: ext4_get_journal_inode:5863: inode 5 [ 518.173786][T15681] EXT4-fs (loop4): can't get journal size [ 518.222366][T15681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.458797][T15681] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.4211: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 518.540091][T15705] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 518.716688][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.061442][ T5825] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 519.308795][ T5825] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 519.344722][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.364065][ T5825] usb 6-1: Product: syz [ 519.369424][ T5825] usb 6-1: Manufacturer: syz [ 519.403086][ T5825] usb 6-1: SerialNumber: syz [ 519.436343][ T5825] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 519.554845][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 519.590500][T15751] loop2: detected capacity change from 0 to 128 [ 519.969839][T15759] overlay: Unknown parameter '²´Ú «8ú%¢ØÌ ^”Û’ ²Þ_ éwÝê¿Ö`Ê%åMóŽö•Úhc7ª?>Õá¹ù' [ 520.062698][T15764] process 'syz.2.4250' launched './file0' with NULL argv: empty string added [ 520.429177][T15768] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 520.435733][T15768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 520.556592][T15768] vhci_hcd vhci_hcd.0: Device attached [ 520.604138][T15769] vhci_hcd: connection closed [ 520.630448][ T12] vhci_hcd vhci_hcd.2: stop threads [ 520.700480][ T12] vhci_hcd vhci_hcd.2: release socket [ 520.727252][T15776] loop4: detected capacity change from 0 to 256 [ 520.749275][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 520.844037][T15776] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 521.017483][T15778] tipc: Trying to set illegal importance in message [ 521.052522][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 521.066449][ T5969] usb 6-1: USB disconnect, device number 92 [ 521.079578][ T10] ath9k_htc: Failed to initialize the device [ 521.122187][ T5969] usb 6-1: ath9k_htc: USB layer deinitialized [ 521.192006][T15749] loop1: detected capacity change from 0 to 32768 [ 521.226412][T15749] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4245 (15749) [ 521.337564][T15749] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 521.380468][T15749] BTRFS info (device loop1): using sha256 checksum algorithm [ 521.752544][T15749] BTRFS info (device loop1): turning off barriers [ 521.793244][T15749] BTRFS info (device loop1): enabling free space tree [ 522.001882][T15822] netlink: 'syz.0.4272': attribute type 1 has an invalid length. [ 522.021862][T15822] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4272'. [ 522.030867][T15822] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4272'. [ 522.092517][T15822] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4272'. [ 522.156465][ T5881] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 522.431488][T15838] loop0: detected capacity change from 0 to 2048 [ 522.474712][T15838] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 522.517525][T15842] loop3: detected capacity change from 0 to 256 [ 522.550444][T15838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.664913][T15844] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4285'. [ 522.701866][T15842] FAT-fs (loop3): Directory bread(block 64) failed [ 522.764123][T15842] FAT-fs (loop3): Directory bread(block 65) failed [ 522.780965][T15842] FAT-fs (loop3): Directory bread(block 66) failed [ 522.787518][T15842] FAT-fs (loop3): Directory bread(block 67) failed [ 522.855776][T15842] FAT-fs (loop3): Directory bread(block 68) failed [ 522.895349][T15842] FAT-fs (loop3): Directory bread(block 69) failed [ 522.935506][T15842] FAT-fs (loop3): Directory bread(block 70) failed [ 522.966402][T15842] FAT-fs (loop3): Directory bread(block 71) failed [ 522.994015][T15842] FAT-fs (loop3): Directory bread(block 72) failed [ 523.037319][T15842] FAT-fs (loop3): Directory bread(block 73) failed [ 523.571026][T15876] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4300'. [ 523.578836][T15872] loop0: detected capacity change from 0 to 1024 [ 523.617233][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4300'. [ 523.628422][T15872] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 523.673188][T15872] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 523.753136][T15872] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 523.786119][T15872] EXT4-fs (loop0): orphan cleanup on readonly fs [ 523.839133][T15872] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.4298: Inode bitmap for bg 0 marked uninitialized [ 523.905914][T15872] loop0: lost filesystem error report for type 5 error -117 [ 523.908341][T15872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.970533][T15872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.249197][T15894] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4307'. [ 524.259358][T15874] loop2: detected capacity change from 0 to 32768 [ 524.319115][T15874] (syz.2.4299,15874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 524.343874][T15897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.388142][T15900] loop3: detected capacity change from 0 to 512 [ 524.418507][T15874] (syz.2.4299,15874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 524.452679][T15900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.561805][T15874] JBD2: Ignoring recovery information on journal [ 524.589382][T15900] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4310: iget: bad extended attribute block 262144 [ 524.649995][T15900] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.650998][T15900] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4310: couldn't read orphan inode 15 (err -117) [ 524.660248][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 524.660274][ C0] EXT4-fs (loop3): initial error at time 1772413304: ext4_orphan_get:1391: inode 15 [ 524.660317][ C0] EXT4-fs (loop3): last error at time 1772413304: ext4_orphan_get:1391: inode 15 [ 524.769042][T15900] loop3: lost filesystem error report for type 5 error -117 [ 524.805617][T15900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.842025][T15874] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 524.869297][T15913] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4315'. [ 524.949963][T15900] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.4310: deleted inode referenced: 15 [ 525.135907][ T5895] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.284133][ T5882] ocfs2: Unmounting device (7,2) on (node local) [ 525.539631][T15907] loop5: detected capacity change from 0 to 32768 [ 525.604747][T15907] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.810223][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 525.876464][T15950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4327'. [ 525.985054][T15953] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 526.041092][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 526.053683][T15907] XFS (loop5): Ending clean mount [ 526.061729][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 526.128433][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.156562][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 526.215383][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 526.240698][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.259196][ T10] usb 2-1: Product: syz [ 526.263433][ T10] usb 2-1: Manufacturer: syz [ 526.276949][ T10] usb 2-1: SerialNumber: syz [ 526.284819][ T10] usb 2-1: config 0 descriptor?? [ 526.298253][ T5897] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 526.418403][ T10] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 526.556068][ T10] usb 2-1: USB disconnect, device number 98 [ 526.864679][T15978] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4343'. [ 526.875899][T15974] bond1: entered allmulticast mode [ 526.932798][T15978] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 527.343288][T15972] loop2: detected capacity change from 0 to 32768 [ 527.373946][T15972] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4340 (15972) [ 527.522954][T15972] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 527.573541][T15972] BTRFS info (device loop2): using sha256 checksum algorithm [ 527.651475][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4354'. [ 527.682659][T16009] libceph: resolve 'c' (ret=-3): failed [ 527.704491][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4354'. [ 527.751435][T16006] netlink: 4260 bytes leftover after parsing attributes in process `syz.4.4354'. [ 527.854806][T15972] BTRFS info (device loop2): rebuilding free space tree [ 527.939807][T15972] BTRFS info (device loop2): disabling free space tree [ 527.965602][T15972] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 527.975322][T15972] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 528.075552][T15972] BTRFS info (device loop2): enabling ssd optimizations [ 528.104328][T15972] BTRFS info (device loop2): turning on async discard [ 528.111433][T15972] BTRFS info (device loop2): force clearing of disk cache [ 528.157635][T15972] BTRFS info (device loop2): enabling auto defrag [ 528.164124][T15972] BTRFS info (device loop2): max_inline set to 4096 [ 528.229161][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4363'. [ 528.299947][T15972] BTRFS info (device loop2 state M): max_inline set to 4096 [ 528.439540][ T5882] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 528.991386][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4377'. [ 529.190241][T16068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4378'. [ 529.902873][T16094] loop4: detected capacity change from 0 to 764 [ 529.976538][T16094] rock: directory entry would overflow storage [ 529.982755][T16094] rock: sig=0x4654, size=5, remaining=4 [ 530.186992][T16100] loop3: detected capacity change from 0 to 128 [ 530.249830][T16100] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 530.330381][T16104] m1Ie5nè‹: entered promiscuous mode [ 530.336661][T16100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 530.404384][T16061] loop0: detected capacity change from 0 to 32768 [ 530.515916][T16061] add_index: next_index = 0. Resetting! [ 531.054389][ T29] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 531.127651][T16126] bond2: option mode: invalid value (22) [ 531.162633][T16126] bond2 (unregistering): Released all slaves [ 531.236019][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 531.242192][ T29] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 531.266453][ T29] usb 3-1: config index 0 descriptor too short (expected 40584, got 9) [ 531.269386][T16137] loop0: detected capacity change from 0 to 2048 [ 531.287795][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.333964][T16137] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 531.340612][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 531.386467][ T31] audit: type=1326 audit(1772413311.087:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.4.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019159c629 code=0x7ffc0000 [ 531.401601][ T29] usb 3-1: config index 1 descriptor too short (expected 40584, got 9) [ 531.447100][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.456677][T16145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.487395][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 531.503882][ T31] audit: type=1326 audit(1772413311.115:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.4.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019159c629 code=0x7ffc0000 [ 531.564282][ T29] usb 3-1: config index 2 descriptor too short (expected 40584, got 9) [ 531.601982][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.621462][ T31] audit: type=1326 audit(1772413311.124:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.4.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f019159c629 code=0x7ffc0000 [ 531.654979][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 531.711539][ T29] usb 3-1: config index 3 descriptor too short (expected 40584, got 9) [ 531.721964][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.735783][ T31] audit: type=1326 audit(1772413311.283:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.4.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019159c629 code=0x7ffc0000 [ 531.779837][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 531.804114][ T29] usb 3-1: config index 4 descriptor too short (expected 40584, got 9) [ 531.812530][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.824126][ T31] audit: type=1326 audit(1772413311.283:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.4.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019159c629 code=0x7ffc0000 [ 531.866712][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 531.899610][ T29] usb 3-1: config index 5 descriptor too short (expected 40584, got 9) [ 531.908663][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.932970][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 531.955232][ T29] usb 3-1: config index 6 descriptor too short (expected 40584, got 9) [ 531.965286][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 531.987425][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 532.015418][T16157] loop1: detected capacity change from 0 to 1024 [ 532.024479][ T29] usb 3-1: config index 7 descriptor too short (expected 40584, got 9) [ 532.033871][ T29] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 532.054343][ T29] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 532.081055][ T29] usb 3-1: string descriptor 0 read error: -71 [ 532.087955][ T29] usb 3-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 532.141156][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 532.205389][ T29] usb 3-1: can't set config #9, error -71 [ 532.278756][ T29] usb 3-1: USB disconnect, device number 96 [ 532.318269][T16163] bond1: Removing last arp target with arp_interval on [ 532.325261][T16163] bond1: option min_links: invalid value (18446744071562067973) [ 532.365219][T16163] bond1: option min_links: allowed values 0 - 2147483647 [ 532.413969][T16163] bond1 (unregistering): Released all slaves [ 532.544993][T16172] loop1: detected capacity change from 0 to 4096 [ 532.561864][ T5990] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 532.620413][T16174] loop0: detected capacity change from 0 to 256 [ 532.691155][T16174] exfat: Deprecated parameter 'utf8' [ 532.701755][T16172] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 532.731090][T16174] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 532.743133][T16172] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 532.775347][ T5990] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 532.802396][ T5990] usb 5-1: config 0 has no interface number 0 [ 532.820862][ T5990] usb 5-1: config 0 interface 63 has no altsetting 0 [ 532.854419][ T5990] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=81.a9 [ 532.872384][T16174] fuse: Bad value for 'fd' [ 532.891471][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.912839][ T5990] usb 5-1: Product: syz [ 532.927158][ T5990] usb 5-1: Manufacturer: syz [ 532.931922][ T5990] usb 5-1: SerialNumber: syz [ 532.984204][ T5990] usb 5-1: config 0 descriptor?? [ 533.003277][ T37] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 533.030383][ T5881] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 533.070510][ T5881] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 533.103208][ T5881] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 533.144982][ T38] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 533.279611][ T5990] redrat3 5-1:0.63: Couldn't find all endpoints [ 533.319963][ T5990] usb 5-1: USB disconnect, device number 93 [ 533.376856][T16191] loop1: detected capacity change from 0 to 1024 [ 533.432733][T16191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.596002][T16191] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.4436: reserved inode found cleared - inode=2 [ 533.797208][T16210] loop3: detected capacity change from 0 to 256 [ 533.824347][ T31] audit: type=1326 audit(1772413313.370:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 533.911246][ T31] audit: type=1326 audit(1772413313.388:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 533.974690][T16210] FAT-fs (loop3): Directory bread(block 64) failed [ 534.002024][ T5881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.014564][T16210] FAT-fs (loop3): Directory bread(block 65) failed [ 534.022602][ T31] audit: type=1326 audit(1772413313.398:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 534.065282][T16210] FAT-fs (loop3): Directory bread(block 66) failed [ 534.081506][T16210] FAT-fs (loop3): Directory bread(block 67) failed [ 534.106348][ T31] audit: type=1326 audit(1772413313.398:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 534.128392][T16210] FAT-fs (loop3): Directory bread(block 68) failed [ 534.169404][T16210] FAT-fs (loop3): Directory bread(block 69) failed [ 534.185666][T16210] FAT-fs (loop3): Directory bread(block 70) failed [ 534.213524][ T31] audit: type=1326 audit(1772413313.398:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.0.4447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 534.235989][T16210] FAT-fs (loop3): Directory bread(block 71) failed [ 534.236130][T16210] FAT-fs (loop3): Directory bread(block 72) failed [ 534.287856][T16223] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 534.301020][T16210] FAT-fs (loop3): Directory bread(block 73) failed [ 534.614081][T16235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 535.173196][ T5969] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 535.397075][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 535.429098][ T5969] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 535.454045][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.487630][ T5969] usb 5-1: Product: syz [ 535.502056][ T5969] usb 5-1: Manufacturer: syz [ 535.506830][ T5969] usb 5-1: SerialNumber: syz [ 535.537600][ T5969] usb 5-1: config 0 descriptor?? [ 535.579804][ T5969] gspca_main: sq930x-2.14.0 probing 2770:930c [ 536.001125][T16276] loop5: detected capacity change from 0 to 64 [ 536.104450][T16280] loop0: detected capacity change from 0 to 64 [ 536.149187][ T5969] gspca_sq930x: ucbus_write failed -71 [ 536.423578][ T5969] gspca_sq930x: Sensor ov9630 not yet treated [ 536.433310][T16288] loop2: detected capacity change from 0 to 128 [ 536.462306][ T5969] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 536.517152][ T5969] usb 5-1: USB disconnect, device number 94 [ 536.541938][T16260] loop1: detected capacity change from 0 to 32768 [ 536.963394][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4490'. [ 537.288599][T16307] ip6gre1: entered allmulticast mode [ 537.661138][T16314] loop5: detected capacity change from 0 to 4096 [ 537.684650][T16318] loop2: detected capacity change from 0 to 2048 [ 537.693046][T16314] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 537.726574][T16318] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 537.770450][T16314] ntfs3(loop5): ino=19, mi_enum_attr [ 537.793826][T16314] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 537.816441][T16321] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.845132][T16314] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 537.912053][T16324] loop1: detected capacity change from 0 to 512 [ 538.036143][T16324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.060090][T16324] ext4 filesystem being mounted at /714/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.159758][T16324] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.4501: corrupted xattr block 33: invalid ea_ino [ 538.403235][T16333] loop5: detected capacity change from 0 to 128 [ 538.508315][ T5881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.623353][T16309] loop4: detected capacity change from 0 to 32768 [ 538.733705][T16309] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 538.743986][T16344] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 538.988872][T16309] XFS (loop4): Ending clean mount [ 539.250229][ T5890] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 539.428684][T16366] netlink: 'syz.4.4513': attribute type 25 has an invalid length. [ 539.466743][T16366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4513'. [ 539.572785][T16347] loop5: detected capacity change from 0 to 32768 [ 539.621252][T16347] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4508 (16347) [ 539.798106][T16347] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 539.873206][T16347] BTRFS info (device loop5): using sha256 checksum algorithm [ 540.091274][T16347] BTRFS info (device loop5): enabling ssd optimizations [ 540.120965][T16347] BTRFS info (device loop5): turning on async discard [ 540.127809][T16347] BTRFS info (device loop5): enabling free space tree [ 540.424460][ T5897] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 541.080579][T16370] loop0: detected capacity change from 0 to 32768 [ 541.237983][T16425] bond2: option tlb_dynamic_lb: invalid value (255) [ 541.308315][T16425] bond2 (unregistering): Released all slaves [ 541.874774][T16450] loop3: detected capacity change from 0 to 512 [ 541.920223][T16450] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 541.921308][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 541.921326][ T31] audit: type=1326 audit(1772413320.938:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16451 comm="syz.5.4552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff831b9c629 code=0x0 [ 542.004619][T16450] EXT4-fs (loop3): 1 truncate cleaned up [ 542.005066][T16459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.020535][T16457] loop4: detected capacity change from 0 to 512 [ 542.054817][T16457] EXT4-fs (loop4): orphan cleanup on readonly fs [ 542.109402][T16450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.110286][T16457] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 542.184447][T16450] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4551: bg 0: block 4: invalid block bitmap [ 542.267209][T16457] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 542.285774][T16457] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.4555: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 542.318483][T16457] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 542.319693][T16457] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4555: couldn't read orphan inode 13 (err -117) [ 542.328967][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 542.328997][ C0] EXT4-fs (loop4): last error at time 1772413321: ext4_ext_check_inode:521: inode 13 [ 542.421535][T16457] loop4: lost filesystem error report for type 5 error -117 [ 542.438095][T16457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.568233][ T5895] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.630401][T16472] xt_TCPMSS: Only works on TCP SYN packets [ 542.714867][T16474] loop5: detected capacity change from 0 to 1024 [ 542.740869][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.870536][T16476] bridge1: entered promiscuous mode [ 542.875783][T16476] bridge1: entered allmulticast mode [ 542.974365][T16484] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 543.061639][T16484] erofs (device loop4): mounted with root inode @ nid 36. [ 543.150631][T16484] syz.4.4563: attempt to access beyond end of device [ 543.150631][T16484] loop4: rw=0, sector=301994239, nr_sectors = 1 limit=16 [ 543.217195][T16484] erofs (device loop4): read error -5 @ 0 of nid 36 [ 543.479255][T16502] netlink: 'syz.1.4573': attribute type 8 has an invalid length. [ 544.047166][T16523] set_capacity_and_notify: 1 callbacks suppressed [ 544.047196][T16523] loop0: detected capacity change from 0 to 512 [ 544.055564][T16529] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 544.078142][T16523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.110977][T16523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 544.111091][T16523] System zones: 0-2, 18-18, 34-34 [ 544.111411][T16523] EXT4-fs (loop0): orphan cleanup on readonly fs [ 544.120430][T16529] overlayfs: missing 'lowerdir' [ 544.122971][T16523] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4585: bg 0: block 248: padding at end of block bitmap is not set [ 544.123089][T16523] loop0: lost filesystem error report for type 5 error -117 [ 544.125562][T16523] Quota error (device loop0): write_blk: dquota write failed [ 544.125661][T16523] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 544.125716][T16523] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4585: Failed to acquire dquot type 1 [ 544.125743][T16523] loop0: lost filesystem error report for type 5 error -117 [ 544.127213][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 544.127236][ C1] EXT4-fs (loop0): last error at time 1772413322: ext4_acquire_dquot:7001 [ 544.127393][T16523] EXT4-fs (loop0): 1 truncate cleaned up [ 544.134844][T16523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.238487][T16523] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 544.241032][T16523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 544.260092][T16523] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 544.260291][T16523] ext4 filesystem being remounted at /776/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.330424][ T5990] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 544.390269][ T5884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.551597][T16546] : renamed from bond_slave_0 (while UP) [ 544.553415][ T5990] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 544.553447][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.553471][ T5990] usb 5-1: Product: syz [ 544.553490][ T5990] usb 5-1: Manufacturer: syz [ 544.553509][ T5990] usb 5-1: SerialNumber: syz [ 544.573744][ T5990] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 544.611957][ T5990] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 545.107225][T16563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4604'. [ 545.107267][T16563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4604'. [ 545.107288][T16563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4604'. [ 545.544036][T16568] binder: 16567:16568 ioctl 400c620e 200000000140 returned -22 [ 546.283909][T16576] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4610'. [ 546.331358][T16553] loop3: detected capacity change from 0 to 32768 [ 546.350815][T16576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.419936][T16553] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4599 (16553) [ 546.516233][ T29] usb 5-1: USB disconnect, device number 95 [ 546.530748][ T5990] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 546.543140][ T5990] ath9k_htc: Failed to initialize the device [ 546.550768][ T29] usb 5-1: ath9k_htc: USB layer deinitialized [ 546.646671][T16553] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.685648][T16553] BTRFS info (device loop3): using sha256 checksum algorithm [ 546.902083][T16553] BTRFS info (device loop3): enabling ssd optimizations [ 546.977273][T16553] BTRFS info (device loop3): turning on async discard [ 547.005768][T16553] BTRFS info (device loop3): enabling free space tree [ 547.056150][ T5990] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 547.229836][ T5895] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 547.282705][ T5990] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 547.303711][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4623'. [ 547.312798][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.344796][ T5990] usb 5-1: Product: syz [ 547.349122][ T5990] usb 5-1: Manufacturer: syz [ 547.409270][ T5990] usb 5-1: SerialNumber: syz [ 547.448634][ T5990] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 547.561517][ T5990] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 548.066222][T16637] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 548.658869][T16646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4637'. [ 548.669608][ T6035] usb 5-1: USB disconnect, device number 96 [ 548.723767][T16648] loop2: detected capacity change from 0 to 512 [ 548.749799][T16648] EXT4-fs: Ignoring removed orlov option [ 548.755512][T16648] EXT4-fs: Ignoring removed i_version option [ 548.777523][ T5990] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 548.798874][ T5990] ath9k_htc: Failed to initialize the device [ 548.809254][T16648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.829392][ T6035] usb 5-1: ath9k_htc: USB layer deinitialized [ 548.880538][T16648] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 548.911377][T16648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 548.980664][T16648] EXT4-fs (loop2): orphan cleanup on readonly fs [ 548.987120][T16648] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 548.996636][T16648] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 549.087112][T16648] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 549.120877][T16648] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4638: bg 0: block 40: padding at end of block bitmap is not set [ 549.166743][T16648] loop2: lost filesystem error report for type 5 error -117 [ 549.168581][T16648] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 549.175974][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 549.176000][ C1] EXT4-fs (loop2): initial error at time 1772413327: ext4_validate_block_bitmap:441 [ 549.176031][ C1] EXT4-fs (loop2): last error at time 1772413327: ext4_validate_block_bitmap:441 [ 549.241215][T16667] netlink: 'syz.5.4647': attribute type 1 has an invalid length. [ 549.288477][T16667] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4647'. [ 549.343104][T16669] netlink: 'syz.1.4648': attribute type 8 has an invalid length. [ 549.354736][T16648] loop2: lost filesystem error report for type 5 error -117 [ 549.357924][T16648] EXT4-fs (loop2): 1 truncate cleaned up [ 549.394047][T16648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 549.454403][T16675] loop0: detected capacity change from 0 to 256 [ 549.583252][T16674] loop4: detected capacity change from 0 to 1024 [ 549.607812][T16674] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.661806][T16674] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 549.696691][T16674] EXT4-fs (loop4): Test dummy encryption mode enabled [ 549.779588][T16674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.802019][ T5882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.931547][T16674] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.938138][T16674] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 550.005798][T16674] EXT4-fs: Cannot change quota options when quota turned on [ 550.128665][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.474077][T16709] loop1: detected capacity change from 0 to 8 [ 550.521516][T16709] SQUASHFS error: Failed to read block 0x2d7: -5 [ 550.566434][T16709] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 550.679077][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4670'. [ 551.075426][T16729] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4677'. [ 551.246731][ T5961] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 551.332530][T16705] loop2: detected capacity change from 0 to 32768 [ 551.355186][T16705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4664 (16705) [ 551.403462][T16705] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.423492][T16705] BTRFS info (device loop2): using sha256 checksum algorithm [ 551.474350][T16737] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 551.488198][T16717] loop4: detected capacity change from 0 to 32768 [ 551.499200][T16737] bond2 (unregistering): Released all slaves [ 551.504621][ T5961] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 551.552313][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.566434][T16717] read_mapping_page failed! [ 551.570271][T16751] loop3: detected capacity change from 0 to 256 [ 551.579240][T16717] jfs_create: dtInsert returned -EIO [ 551.585190][T16751] exfat: Deprecated parameter 'utf8' [ 551.586723][T16717] ERROR: (device loop4): jfs_create: [ 551.586723][T16717] [ 551.590665][ T5961] usb 6-1: Product: syz [ 551.590689][ T5961] usb 6-1: Manufacturer: syz [ 551.590708][ T5961] usb 6-1: SerialNumber: syz [ 551.598720][T16751] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 551.629710][T16717] ERROR: (device loop4): remounting filesystem as read-only [ 551.656566][ T5961] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.732230][ T5825] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 551.757716][T16705] BTRFS info (device loop2): enabling ssd optimizations [ 551.812959][T16705] BTRFS info (device loop2): turning on async discard [ 551.841320][T16705] BTRFS info (device loop2): enabling free space tree [ 552.013963][T16705] BTRFS warning (device loop2): can't clear the compat:1 feature bit while mounted [ 552.240583][ T5882] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 552.256959][ T1205] usb 6-1: USB disconnect, device number 93 [ 552.820357][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4695'. [ 552.956929][ T5825] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 553.003447][ T5825] ath9k_htc: Failed to initialize the device [ 553.032603][ T1205] usb 6-1: ath9k_htc: USB layer deinitialized [ 553.354790][T16802] xt_bpf: check failed: parse error [ 553.501784][ T1205] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 553.697276][ T1205] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 553.715569][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.761348][ T1205] usb 2-1: config 0 descriptor?? [ 553.793122][ T1205] cp210x 2-1:0.0: cp210x converter detected [ 553.848823][T16816] netlink: 'syz.4.4711': attribute type 17 has an invalid length. [ 553.866577][T16816] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4711'. [ 554.010091][ T1205] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 554.035774][ T1205] cp210x 2-1:0.0: querying part number failed [ 554.048309][ T1205] usb 2-1: cp210x converter now attached to ttyUSB0 [ 554.231356][ T6035] usb 2-1: USB disconnect, device number 99 [ 554.270816][ T6035] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 554.301607][ T6035] cp210x 2-1:0.0: device disconnected [ 554.562541][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4723'. [ 554.701106][ T5825] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 554.775589][T16850] lo: entered promiscuous mode [ 554.780497][T16850] lo: entered allmulticast mode [ 554.822925][T16850] netlink: 'syz.0.4727': attribute type 2 has an invalid length. [ 554.865997][T16850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.881935][T16856] kAFS: unable to lookup cell '\/' [ 554.911975][ T5825] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 554.953997][ T5825] usb 5-1: config 0 has no interface number 0 [ 554.988024][ T5825] usb 5-1: config 0 interface 96 has no altsetting 0 [ 555.042236][ T5825] usb 5-1: New USB device found, idVendor=1385, idProduct=5f03, bcdDevice=5d.62 [ 555.063842][T16854] bond1: entered promiscuous mode [ 555.070855][T16854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.079592][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.123724][T16861] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4733'. [ 555.123940][ T5825] usb 5-1: Product: syz [ 555.152880][ T5825] usb 5-1: Manufacturer: syz [ 555.181952][ T5825] usb 5-1: SerialNumber: syz [ 555.209379][ T5825] usb 5-1: config 0 descriptor?? [ 555.235831][ T5825] usb 5-1: Could not find all expected endpoints [ 555.552214][ T5969] usb 5-1: USB disconnect, device number 97 [ 555.874423][T16897] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4751'. [ 555.890580][T16896] wg1: entered promiscuous mode [ 555.933984][T16896] wg1: entered allmulticast mode [ 556.714878][T16881] loop1: detected capacity change from 0 to 32768 [ 556.871109][T16926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4766'. [ 557.030603][T16881] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 557.030603][T16881] [ 557.089232][T16881] ERROR: (device loop1): remounting filesystem as read-only [ 557.259924][T16934] netlink: 'syz.4.4770': attribute type 2 has an invalid length. [ 557.294195][T16934] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 557.340279][T16934] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 557.975524][T16924] loop2: detected capacity change from 0 to 32768 [ 558.047993][T16924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4765 (16924) [ 558.125117][T16924] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 558.165968][T16924] BTRFS info (device loop2): using sha256 checksum algorithm [ 558.366548][T16924] BTRFS info (device loop2): enabling ssd optimizations [ 558.366583][T16924] BTRFS info (device loop2): turning on async discard [ 558.366604][T16924] BTRFS info (device loop2): enabling free space tree [ 558.577265][ T5882] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 559.269630][T17012] Illegal XDP return value 4294967274 on prog (id 334) dev N/A, expect packet loss! [ 559.368059][T17016] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 559.412324][T17016] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 559.551925][T16985] loop1: detected capacity change from 0 to 32768 [ 559.606794][T16985] (syz.1.4789,16985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 559.665174][T16985] (syz.1.4789,16985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 559.762077][T16985] JBD2: Ignoring recovery information on journal [ 559.997856][T16985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 560.497526][ T5881] ocfs2: Unmounting device (7,1) on (node local) [ 560.599601][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4818'. [ 560.608505][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4818'. [ 560.671283][T17029] loop4: detected capacity change from 0 to 32768 [ 560.729949][T17029] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4809 (17029) [ 560.835171][T17029] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 560.866947][T17029] BTRFS info (device loop4): using sha256 checksum algorithm [ 561.019076][T17029] BTRFS info (device loop4): enabling ssd optimizations [ 561.026189][T17029] BTRFS info (device loop4): turning on async discard [ 561.069883][T17029] BTRFS info (device loop4): enabling free space tree [ 561.162856][T17079] loop0: detected capacity change from 0 to 256 [ 561.278912][ T5890] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 561.600937][T17094] Cannot find set identified by id 3 to match [ 561.904893][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 561.925237][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4840'. [ 561.953775][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 562.107073][T17113] program syz.1.4843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.181571][ T5961] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 562.182340][T17113] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 562.517671][ T5961] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 562.533007][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.553083][ T5961] usb 4-1: Product: syz [ 562.564138][ T5961] usb 4-1: Manufacturer: syz [ 562.573417][ T5961] usb 4-1: SerialNumber: syz [ 562.674675][ T5961] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 562.693684][ T5969] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 562.796859][T17135] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 562.819697][T17137] loop4: detected capacity change from 0 to 512 [ 562.833844][T17135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.919923][T17137] EXT4-fs (loop4): Test dummy encryption mode enabled [ 562.946009][T17137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 563.029312][T17137] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4855: bad orphan inode 131083 [ 563.078810][T17137] loop4: lost filesystem error report for type 5 error -117 [ 563.079321][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 563.093131][ C0] EXT4-fs (loop4): initial error at time 1772413340: ext4_orphan_get:1417 [ 563.101884][ C0] EXT4-fs (loop4): last error at time 1772413340: ext4_orphan_get:1417 [ 563.160423][T17137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.309101][T17137] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 563.782917][ T5890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.846370][T17121] loop0: detected capacity change from 0 to 32768 [ 563.914025][T17121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4846 (17121) [ 564.070632][T17157] binder: 17156:17157 ioctl c00c6211 0 returned -14 [ 564.240284][ T5961] usb 4-1: USB disconnect, device number 101 [ 564.253879][ T5969] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 564.265180][T17160] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4866'. [ 564.274654][ T5969] ath9k_htc: Failed to initialize the device [ 564.281517][ T5961] usb 4-1: ath9k_htc: USB layer deinitialized [ 564.290494][T17121] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.351621][T17121] BTRFS info (device loop0): using sha256 checksum algorithm [ 564.353295][T17161] netlink: 'syz.1.4868': attribute type 11 has an invalid length. [ 564.395175][T17160] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4866'. [ 564.683094][T17184] loop4: detected capacity change from 0 to 8 [ 564.702695][T17184] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 564.710902][T17121] BTRFS info (device loop0): enabling ssd optimizations [ 564.736210][T17184] cramfs: Error -3 while decompressing! [ 564.755038][T17184] cramfs: ffffffff9a3a9bf8(16)->ffff8880879cb000(4096) [ 564.762070][T17121] BTRFS info (device loop0): turning on async discard [ 564.762100][T17121] BTRFS info (device loop0): enabling free space tree [ 564.788060][T17184] cramfs: Error -3 while decompressing! [ 564.820816][T17184] cramfs: ffffffff9a3a9bf8(16)->ffff8880879cb000(4096) [ 564.860633][ T5852] udevd[5852]: incorrect cramfs checksum on /dev/loop4 [ 564.875112][ T31] audit: type=1800 audit(1772413342.389:64): pid=17184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4872" name="file0" dev="loop4" ino=244 res=0 errno=0 [ 564.961037][ T5884] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.125699][T17202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.377791][ T5961] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 565.509065][T17211] loop2: detected capacity change from 0 to 128 [ 565.613689][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 565.677239][ T5961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.703257][ T5961] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 565.734888][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.774062][ T5961] usb 6-1: Product: syz [ 565.779386][ T5961] usb 6-1: Manufacturer: syz [ 565.794634][T17215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.805120][ T5961] usb 6-1: SerialNumber: syz [ 565.829571][ T5961] usb 6-1: config 0 descriptor?? [ 566.068990][ T5961] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 566.115232][ T5961] imon 6-1:0.0: unable to initialize intf0, err -19 [ 566.154456][ T5961] imon:imon_probe: failed to initialize context! [ 566.175601][ T5961] imon 6-1:0.0: unable to register, err -19 [ 566.223250][ T5961] usb 6-1: USB disconnect, device number 94 [ 566.237837][T17196] loop3: detected capacity change from 0 to 32768 [ 566.348201][T17196] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 566.348201][T17196] [ 566.429244][T17196] ialloc: diAlloc returned -5! [ 566.554397][T17208] loop0: detected capacity change from 0 to 32768 [ 566.701984][T17208] JBD2: Ignoring recovery information on journal [ 566.886035][T17208] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 567.067923][T17249] netlink: 'syz.5.4902': attribute type 12 has an invalid length. [ 567.272138][ T5884] ocfs2: Unmounting device (7,0) on (node local) [ 567.493633][T17262] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 567.519070][T17262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 568.164955][T17284] xt_TPROXY: Can be used only with -p tcp or -p udp [ 568.268038][T17251] loop2: detected capacity change from 0 to 32768 [ 568.298624][T17289] xt_TPROXY: Can be used only with -p tcp or -p udp [ 568.484919][T17295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4924'. [ 568.649134][T17301] netlink: 'syz.0.4928': attribute type 5 has an invalid length. [ 568.656935][T17301] netlink: 'syz.0.4928': attribute type 5 has an invalid length. [ 569.000312][T17311] loop4: detected capacity change from 0 to 1764 [ 569.204831][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.211200][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.363437][T17323] raw_sendmsg: syz.1.4938 forgot to set AF_INET. Fix it! [ 569.443092][T17299] loop5: detected capacity change from 0 to 32768 [ 569.497632][T17299] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.715795][T17340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.727091][T17339] openvswitch: netlink: IPv4 tun info is not correct [ 569.763849][T17299] XFS (loop5): Ending clean mount [ 569.995497][ T5897] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 570.262629][ T1205] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 570.284521][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 570.473502][ T1205] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 570.493639][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.519755][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 570.530104][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.545688][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 570.564175][ T1205] usb 1-1: config 0 descriptor?? [ 570.600751][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.602459][ T1205] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 570.635848][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.661449][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 570.692732][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 570.720469][ T10] usb 3-1: Product: syz [ 570.735221][ T10] usb 3-1: Manufacturer: syz [ 570.769673][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 570.796584][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 570.826364][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 570.853868][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 570.921680][T17378] ip6erspan0: entered allmulticast mode [ 570.991550][T17380] netlink: 'syz.4.4961': attribute type 6 has an invalid length. [ 571.007850][ T1205] gspca_stv06xx: I2C: Read error writing address: -71 [ 571.042238][T17349] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 571.064754][ T1205] usb 1-1: USB disconnect, device number 96 [ 571.089843][ T5825] usb 3-1: USB disconnect, device number 97 [ 571.239615][T17389] x_tables: ip_tables: osf match: only valid for protocol 6 [ 571.429991][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4969'. [ 571.542694][T17398] openvswitch: netlink: IP tunnel dst address not specified [ 571.637443][T17402] delete_channel: no stack [ 572.087867][ T5825] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 572.186989][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4982'. [ 572.326581][ T5825] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 572.341252][ T5825] usb 6-1: config 1 has no interface number 0 [ 572.357878][ T5825] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 572.386223][ T5825] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 572.425417][ T5825] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.453582][T17429] loop1: detected capacity change from 0 to 2048 [ 572.485299][ T5825] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 572.506964][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.519318][T17429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.542207][ T5825] usb 6-1: Product: syz [ 572.546415][ T5825] usb 6-1: Manufacturer: syz [ 572.571542][ T5825] usb 6-1: SerialNumber: syz [ 572.599818][T17405] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.799250][T17443] loop4: detected capacity change from 0 to 64 [ 572.846388][T17405] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 573.009532][T17452] SET target dimension over the limit! [ 573.111566][ T5825] usb 6-1: Incompatible driver and firmware versions [ 573.118167][T17456] IPVS: set_ctl: invalid protocol: 92 172.20.20.20:20001 [ 573.160120][T17455] loop4: detected capacity change from 0 to 1024 [ 573.184293][ T5825] usb 6-1: USB disconnect, device number 95 [ 573.242060][T17455] hfsplus: hfsplus: Invalid key length: 30819 [ 573.460324][T17467] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5003'. [ 573.479256][T17465] loop0: detected capacity change from 0 to 2048 [ 573.640206][T17465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.964008][ T5884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.434969][T17496] loop3: detected capacity change from 0 to 256 [ 574.491598][T17499] No such timeout policy "syz1" [ 574.541415][T17496] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.139682][T17484] loop1: detected capacity change from 0 to 40427 [ 575.189726][T17484] F2FS-fs (loop1): build fault injection rate: 174 [ 575.248196][T17484] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 575.310409][T17484] F2FS-fs (loop1): invalid crc value [ 575.465140][T17533] dvmrp0: entered allmulticast mode [ 575.670502][T17542] loop3: detected capacity change from 0 to 512 [ 575.722525][T17484] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 575.738581][T17542] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 575.760819][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5039'. [ 575.797263][T17484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 576.818566][T17577] loop3: detected capacity change from 0 to 4096 [ 576.890677][T17577] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 576.994502][T17587] loop2: detected capacity change from 0 to 1024 [ 577.032774][T17589] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 577.062672][T17587] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 577.081655][T17577] ntfs3(loop3): Failed to load $Extend (-22). [ 577.102689][T17577] ntfs3(loop3): Failed to initialize $Extend. [ 577.129413][T17587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8040e019, mo2=0000] [ 577.260514][T17587] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.5060: lblock 2 mapped to illegal pblock 2 (length 1) [ 577.347469][T17587] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.349516][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 577.365088][ C1] EXT4-fs (loop2): initial error at time 1772413354: ext4_map_blocks:776: inode 3: block 2 [ 577.375183][ C1] EXT4-fs (loop2): last error at time 1772413354: ext4_map_blocks:776: inode 3: block 2 [ 577.399361][T17587] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 577.418702][T17587] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.5060: lblock 0 mapped to illegal pblock 48 (length 1) [ 577.445829][T17587] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.455515][T17587] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 577.529576][T17587] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5060: Failed to acquire dquot type 0 [ 577.596948][ T31] audit: type=1400 audit(1772413354.308:65): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17611 comm="syz.1.5071" [ 577.606107][T17587] loop2: lost filesystem error report for type 5 error -117 [ 577.746448][T17587] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 577.766543][ T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 577.774850][T17587] loop2: lost filesystem error report for type 5 error -117 [ 577.776608][T17587] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.5060: mark_inode_dirty error [ 577.861104][T17587] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 577.861457][T17587] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 577.886154][T17617] loop4: detected capacity change from 0 to 764 [ 577.900900][T17587] EXT4-fs (loop2): 1 orphan inode deleted [ 577.909620][T17587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.923250][ T12] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 577.952232][T17617] /dev/loop4: Can't open blockdev [ 577.969654][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 577.989139][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 578.003720][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 578.024570][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 578.036750][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.072041][ T10] usb 6-1: config 0 descriptor?? [ 578.082289][ T12] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm kworker/u8:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 578.139901][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 578.180338][ T12] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 578.210901][ T12] EXT4-fs error (device loop2): ext4_write_dquot:6981: comm kworker/u8:0: Failed to commit dquot type 0 [ 578.249617][ T12] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 578.261506][ T5882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.261785][ T5882] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 578.261850][ T5882] loop2: lost filesystem error report for type 5 error -117 [ 578.268877][ T5882] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 578.268905][ T5882] loop2: lost filesystem error report for type 5 error -117 [ 578.269199][ T5882] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 578.269230][ T5882] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 578.316169][ T6035] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 578.516207][ T6035] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 578.516247][ T6035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.523753][ T6035] usb 2-1: config 0 descriptor?? [ 578.570184][ T10] gspca_sunplus: reg_w_riv err -71 [ 578.570277][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 578.572365][ T10] usb 6-1: USB disconnect, device number 96 [ 578.948801][T17649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.963501][ T6035] usb 2-1: Cannot set MAC address [ 578.969012][ T6035] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 579.001561][ T6035] usb 2-1: USB disconnect, device number 100 [ 579.326664][T17664] netlink: 'syz.4.5096': attribute type 10 has an invalid length. [ 579.777343][T17685] netlink: 'syz.5.5107': attribute type 4 has an invalid length. [ 579.791533][T17681] loop0: detected capacity change from 0 to 1024 [ 579.877208][T17681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.912374][T17681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.948310][T17681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 580.010841][T17681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.178064][T17698] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 580.212119][T17698] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 580.306441][T17698] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 580.359709][ T5884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.261642][T17693] loop1: detected capacity change from 0 to 32768 [ 581.302923][T17693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5110 (17693) [ 581.384816][T17693] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 581.443097][T17693] BTRFS info (device loop1): using sha256 checksum algorithm [ 581.634047][T17693] BTRFS info (device loop1): enabling ssd optimizations [ 581.662173][T17693] BTRFS info (device loop1): turning on async discard [ 581.699187][T17693] BTRFS info (device loop1): enabling free space tree [ 582.013868][ T5881] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.061045][T17762] loop3: detected capacity change from 0 to 1024 [ 582.073017][T17762] EXT4-fs: Ignoring removed oldalloc option [ 582.154240][T17762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 582.225969][T17762] ext4 filesystem being mounted at /848/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.319894][T17767] bond2: option ad_select: invalid value (6) [ 582.375052][T17762] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.5137: directory missing '..' [ 582.412780][T17767] bond2 (unregistering): Released all slaves [ 582.467571][T17783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5146'. [ 582.591352][ T5895] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 582.819414][ T31] audit: type=1400 audit(1772413359.201:66): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=17790 comm="syz.4.5151" [ 582.930657][ T31] audit: type=1326 audit(1772413359.313:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 583.033042][ T31] audit: type=1326 audit(1772413359.313:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 583.136482][ T31] audit: type=1326 audit(1772413359.350:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 583.159587][ T5961] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 583.258788][ T31] audit: type=1326 audit(1772413359.350:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 583.266514][T17807] overlayfs: cannot append lower layer [ 583.373465][ T31] audit: type=1326 audit(1772413359.350:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.0.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c629 code=0x7ffc0000 [ 583.409566][ T5961] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.442751][ T5961] usb 2-1: config 0 has no interface number 0 [ 583.462699][ T5961] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 583.507502][ T5961] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 583.527988][ T5961] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.537228][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.577724][ T5961] usb 2-1: config 0 descriptor?? [ 583.601199][T17796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 583.658368][ T5961] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 583.687142][T17822] loop4: detected capacity change from 0 to 256 [ 583.940641][ T1205] usb 2-1: USB disconnect, device number 101 [ 584.154076][ T5961] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 584.342635][T17848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.344888][ T5961] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 584.423461][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.455831][ T5961] usb 1-1: Product: syz [ 584.463298][ T5961] usb 1-1: Manufacturer: syz [ 584.478784][ T5961] usb 1-1: SerialNumber: syz [ 584.503933][ T5961] usb 1-1: config 0 descriptor?? [ 584.548022][T17855] netlink: 'syz.2.5182': attribute type 1 has an invalid length. [ 584.758301][T17861] dlm: no locking on control device [ 584.790825][ T5961] usb-storage 1-1:0.0: USB Mass Storage device detected [ 584.956154][T17875] loop1: detected capacity change from 0 to 16 [ 585.014247][T17875] erofs (device loop1): mounted with root inode @ nid 36. [ 585.089178][ T5961] usb 1-1: USB disconnect, device number 97 [ 585.646561][T17899] loop2: detected capacity change from 0 to 512 [ 585.728179][T17899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.810721][T17899] ext4 filesystem being mounted at /872/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.858848][T17899] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 585.905399][T17899] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 585.970735][T17899] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5203: Failed to acquire dquot type 0 [ 586.175629][ T5882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.328729][T17924] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5215'. [ 586.539848][T17892] loop4: detected capacity change from 0 to 32768 [ 586.620401][ T31] audit: type=1800 audit(1772413362.756:72): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5199" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 586.662869][ T5961] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 586.741584][T17940] netlink: 'syz.2.5222': attribute type 64 has an invalid length. [ 586.854485][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 586.900563][ T5961] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 586.934157][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.004070][ T5961] usb 6-1: config 0 descriptor?? [ 587.018293][ T5961] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 587.397658][ T31] audit: type=1326 audit(1772413363.476:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17959 comm="syz.3.5232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e099c629 code=0x7ffc0000 [ 587.460312][ T5961] gspca_sonixj: reg_r err -71 [ 587.476616][ T5961] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 587.521210][ T5961] usb 6-1: USB disconnect, device number 97 [ 587.610701][T17965] loop0: detected capacity change from 0 to 2048 [ 587.646995][T17965] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 587.698158][T17970] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.756928][T17965] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 587.862538][T17965] Remounting filesystem read-only [ 587.960916][T17949] loop2: detected capacity change from 0 to 32768 [ 587.995522][T17949] (syz.2.5227,17949,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 588.061080][T17949] (syz.2.5227,17949,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 588.215363][T17949] JBD2: Ignoring recovery information on journal [ 588.309130][T17949] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 588.567207][T17993] vlan0: entered promiscuous mode [ 588.708432][ T5882] ocfs2: Unmounting device (7,2) on (node local) [ 588.761516][ T1205] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 588.950748][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.005271][ T1205] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 589.033057][ T1205] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 589.069266][T18010] loop4: detected capacity change from 0 to 16 [ 589.071968][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.104426][ T1205] usb 1-1: config 0 descriptor?? [ 589.140364][T18010] erofs (device loop4): mounted with root inode @ nid 36. [ 589.191745][T17986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 589.235373][T17986] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 589.289484][T17986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 589.295432][T17986] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 589.300010][T18017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.359076][T17986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 589.367134][ T1205] Bluetooth: Can't get state to change to load ram patch err [ 589.405421][T17986] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 589.413489][ T1205] Bluetooth: Loading patch file failed [ 589.432331][ T1205] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 589.440114][T17986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.440169][T17986] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 589.449884][T17986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 589.500031][T17986] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 589.580303][T17986] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 589.587291][T17986] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 589.648184][ T1205] usb 1-1: USB disconnect, device number 98 [ 589.851641][T18030] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 589.882937][T18030] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 590.412317][ T5990] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 590.589946][T18064] netlink: 'syz.1.5272': attribute type 1 has an invalid length. [ 590.679610][ T5990] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 590.704410][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.732375][ T5990] usb 6-1: Product: syz [ 590.739096][ T5990] usb 6-1: Manufacturer: syz [ 590.763660][ T5990] usb 6-1: SerialNumber: syz [ 590.797847][ T5990] usb 6-1: config 0 descriptor?? [ 590.881978][T18078] loop0: detected capacity change from 0 to 164 [ 591.042204][ T5990] usb 6-1: ignoring: not an USB2CAN converter [ 591.271673][ T1205] usb 6-1: USB disconnect, device number 98 [ 591.749184][T18104] loop2: detected capacity change from 0 to 2048 [ 591.801511][T18104] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 591.833684][T18111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5291'. [ 591.854639][ T5852] udevd[5852]: incorrect nilfs2 checksum on /dev/loop2 [ 591.875253][T18111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5291'. [ 591.908338][T18113] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.132381][T18069] loop3: detected capacity change from 0 to 32768 [ 592.170161][T18113] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 592.225437][T18113] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 592.258815][T18069] find_entry called with index = 0 [ 592.305618][T18113] Remounting filesystem read-only [ 592.312376][T18069] read_mapping_page failed! [ 592.330383][ T5882] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 592.343518][T18069] ERROR: (device loop3): txCommit: [ 592.343518][T18069] [ 592.790930][T18144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.505567][T18176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5317'. [ 593.544314][T18176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5317'. [ 594.026597][ T1205] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 594.139823][T18201] loop2: detected capacity change from 0 to 8 [ 594.166648][T18201] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 594.193468][T18205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5329'. [ 594.236957][ T5852] udevd[5852]: incorrect cramfs checksum on /dev/loop2 [ 594.244367][ T1205] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 594.253756][ T1205] usb 2-1: config 1 has no interface number 1 [ 594.292099][ T1205] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 594.332851][ T5852] udevd[5852]: incorrect cramfs checksum on /dev/loop2 [ 594.352482][ T1205] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 594.389058][ T1205] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.426441][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.444571][T18209] netlink: 'syz.5.5330': attribute type 1 has an invalid length. [ 594.470486][ T1205] usb 2-1: Product: syz [ 594.491109][ T1205] usb 2-1: Manufacturer: syz [ 594.506610][ T1205] usb 2-1: SerialNumber: syz [ 594.555504][T18214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.767756][ T1205] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 594.819221][ T1205] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 595.002982][ T1205] usb 2-1: USB disconnect, device number 102 [ 595.113900][T18236] netlink: 'syz.4.5341': attribute type 21 has an invalid length. [ 595.168799][T18236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5341'. [ 595.176497][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.821565][T18257] loop0: detected capacity change from 0 to 4096 [ 595.849848][T18257] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 595.955885][T18257] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 595.984644][T18257] ntfs3(loop0): ino=19, mi_enum_attr [ 596.088018][T18257] ntfs3(loop0): failed to convert "c46c" to macgaelic [ 596.116407][T18270] loop1: detected capacity change from 0 to 4096 [ 596.145965][T18257] ntfs3(loop0): ino=20, mi_enum_attr [ 596.174497][T18270] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 596.345337][T18270] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 596.580489][T18295] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 597.083908][T18316] loop5: detected capacity change from 0 to 2048 [ 597.117626][T18316] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 597.193250][T18328] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.217489][T18327] netlink: 'syz.2.5379': attribute type 21 has an invalid length. [ 597.240797][T18326] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5378'. [ 597.288416][T18327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5379'. [ 598.632673][T18388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 598.663478][T18379] loop5: detected capacity change from 0 to 4096 [ 598.712988][T18379] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 598.904866][T18379] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 598.952656][T18379] ntfs3(loop5): Failed to load $Extend (-22). [ 598.985685][T18379] ntfs3(loop5): Failed to initialize $Extend. [ 599.134470][ T1205] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 599.224417][T18363] loop4: detected capacity change from 0 to 32768 [ 599.277403][T18363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5394 (18363) [ 599.358872][ T1205] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 599.358908][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.422457][T18363] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 599.422499][T18363] BTRFS info (device loop4): using sha256 checksum algorithm [ 599.431519][ T1205] usb 3-1: config 0 descriptor?? [ 599.473988][ T1205] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 599.613754][T18363] BTRFS info (device loop4): enabling ssd optimizations [ 599.631743][T18363] BTRFS info (device loop4): turning on async discard [ 599.639455][T18363] BTRFS info (device loop4): enabling free space tree [ 599.847401][ T5890] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 599.889998][ T1205] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 599.910493][ T1205] pac7311 3-1:0.0: probe with driver pac7311 failed with error -71 [ 599.949318][ T1205] usb 3-1: USB disconnect, device number 98 [ 600.220945][T18446] Cannot find del_set index 2 as target [ 600.395046][T18450] loop1: detected capacity change from 0 to 1024 [ 600.449819][T18450] EXT4-fs: inline encryption not supported [ 600.455688][T18450] EXT4-fs: Ignoring removed i_version option [ 600.478438][T18450] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 600.609462][T18450] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.5426: lblock 2 mapped to illegal pblock 2 (length 1) [ 600.716460][T18450] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 600.717303][T18450] __quota_error: 9 callbacks suppressed [ 600.717321][T18450] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 600.732062][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 600.732092][ C0] EXT4-fs (loop1): initial error at time 1772413375: ext4_map_blocks:776: inode 3: block 2 [ 600.732142][ C0] EXT4-fs (loop1): last error at time 1772413375: ext4_map_blocks:776: inode 3: block 2 [ 600.848310][T18464] nbd: must specify at least one socket [ 600.875785][T18450] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.5426: lblock 0 mapped to illegal pblock 48 (length 1) [ 600.911781][T18450] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 600.912120][T18450] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 600.994505][T18450] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.5426: Failed to acquire dquot type 0 [ 601.034256][T18450] loop1: lost filesystem error report for type 5 error -117 [ 601.034614][T18450] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 601.036876][T18452] loop3: detected capacity change from 0 to 32768 [ 601.079936][T18450] loop1: lost filesystem error report for type 5 error -117 [ 601.084716][T18450] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.5426: mark_inode_dirty error [ 601.151358][T18450] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 601.151958][T18450] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 601.223053][T18450] EXT4-fs (loop1): 1 orphan inode deleted [ 601.262546][T18452] ea_get: invalid extended attribute [ 601.268074][T18452] ffff888078b7b0f8: 04 00 00 00 .... [ 601.284759][T18450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.295261][ T13] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.328842][ T13] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 601.329157][ T13] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 601.465131][ T13] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 601.487612][T18450] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz.1.5426: Invalid inode table block 1 in block_group 0 [ 601.549554][T18484] loop4: detected capacity change from 0 to 256 [ 601.598671][T18450] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 601.756890][ T5881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.778312][ T37] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.850593][ T37] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 601.853676][ T37] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 601.919068][ T37] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 601.995326][ T37] loop1: lost filesystem error report for type 5 error -117 [ 601.996408][ T5881] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 602.073867][ T5881] loop1: lost filesystem error report for type 5 error -117 [ 602.075072][ T5881] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 602.106074][ T5881] loop1: lost filesystem error report for type 5 error -117 [ 602.119280][ T5881] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 602.171739][ T5881] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 602.204945][ T38] [ 602.216361][ T38] ====================================================== [ 602.223372][ T38] WARNING: possible circular locking dependency detected [ 602.230382][ T38] syzkaller #0 Not tainted [ 602.234811][ T38] ------------------------------------------------------ [ 602.242084][ T38] kworker/u8:3/38 is trying to acquire lock: [ 602.248199][ T38] ffff88803400e950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 602.257981][ T38] [ 602.257981][ T38] but task is already holding lock: [ 602.265338][ T38] ffff8880366dab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 602.275383][ T38] [ 602.275383][ T38] which lock already depends on the new lock. [ 602.275383][ T38] [ 602.285870][ T38] [ 602.285870][ T38] the existing dependency chain (in reverse order) is: [ 602.295049][ T38] [ 602.295049][ T38] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 602.303489][ T38] percpu_down_read_internal+0x48/0x1c0 [ 602.309574][ T38] ext4_writepages+0x205/0x3b0 [ 602.314948][ T38] do_writepages+0x32e/0x550 [ 602.320145][ T38] __writeback_single_inode+0x133/0x11a0 [ 602.326300][ T38] writeback_single_inode+0x4ac/0xdc0 [ 602.332189][ T38] write_inode_now+0x1c2/0x290 [ 602.337559][ T38] iput+0x8c1/0xe80 [ 602.341896][ T38] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 602.347799][ T38] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 602.354298][ T38] __ext4_expand_extra_isize+0x30d/0x400 [ 602.360541][ T38] __ext4_mark_inode_dirty+0x45c/0x730 [ 602.366696][ T38] ext4_evict_inode+0x7a1/0xeb0 [ 602.372074][ T38] evict+0x61e/0xb10 [ 602.376488][ T38] ext4_orphan_cleanup+0xc38/0x1470 [ 602.382305][ T38] ext4_fill_super+0x59ff/0x6320 [ 602.387776][ T38] get_tree_bdev_flags+0x431/0x4f0 [ 602.393404][ T38] vfs_get_tree+0x92/0x2a0 [ 602.398428][ T38] do_new_mount+0x341/0xd30 [ 602.403628][ T38] __se_sys_mount+0x31d/0x420 [ 602.408830][ T38] do_syscall_64+0x14d/0xf80 [ 602.413946][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.420447][ T38] [ 602.420447][ T38] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 602.428011][ T38] down_read+0x47/0x2e0 [ 602.432683][ T38] ext4_setattr+0x888/0x1c60 [ 602.437786][ T38] notify_change+0xc1a/0xf40 [ 602.442980][ T38] chown_common+0x466/0x6b0 [ 602.448008][ T38] do_fchownat+0x14c/0x250 [ 602.452946][ T38] __x64_sys_chown+0x82/0xa0 [ 602.458055][ T38] do_syscall_64+0x14d/0xf80 [ 602.463173][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.469588][ T38] [ 602.469588][ T38] -> #0 (jbd2_handle){++++}-{0:0}: [ 602.476897][ T38] __lock_acquire+0x15a5/0x2cf0 [ 602.482285][ T38] lock_acquire+0xf0/0x2e0 [ 602.487226][ T38] wait_transaction_locked+0x1c2/0x280 [ 602.493205][ T38] start_this_handle+0x7dc/0x2290 [ 602.498744][ T38] jbd2__journal_start+0x2c0/0x5b0 [ 602.504371][ T38] __ext4_journal_start_sb+0x203/0x620 [ 602.510346][ T38] ext4_do_writepages+0xf94/0x46e0 [ 602.515983][ T38] ext4_writepages+0x241/0x3b0 [ 602.521296][ T38] do_writepages+0x32e/0x550 [ 602.526416][ T38] __writeback_single_inode+0x133/0x11a0 [ 602.532593][ T38] writeback_sb_inodes+0x944/0x19a0 [ 602.538349][ T38] __writeback_inodes_wb+0x111/0x240 [ 602.544350][ T38] wb_writeback+0x46a/0xb70 [ 602.549376][ T38] wb_workfn+0xb4c/0xf50 [ 602.554144][ T38] process_scheduled_works+0xb02/0x1830 [ 602.560261][ T38] worker_thread+0xa50/0xfc0 [ 602.565429][ T38] kthread+0x388/0x470 [ 602.570394][ T38] ret_from_fork+0x51e/0xb90 [ 602.575506][ T38] ret_from_fork_asm+0x1a/0x30 [ 602.580797][ T38] [ 602.580797][ T38] other info that might help us debug this: [ 602.580797][ T38] [ 602.591015][ T38] Chain exists of: [ 602.591015][ T38] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 602.591015][ T38] [ 602.604765][ T38] Possible unsafe locking scenario: [ 602.604765][ T38] [ 602.612300][ T38] CPU0 CPU1 [ 602.617652][ T38] ---- ---- [ 602.623011][ T38] rlock(&sbi->s_writepages_rwsem); [ 602.628290][ T38] lock(&ei->xattr_sem); [ 602.635223][ T38] lock(&sbi->s_writepages_rwsem); [ 602.642959][ T38] lock(jbd2_handle); [ 602.647021][ T38] [ 602.647021][ T38] *** DEADLOCK *** [ 602.647021][ T38] [ 602.655148][ T38] 4 locks held by kworker/u8:3/38: [ 602.660275][ T38] #0: ffff88801fa8a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 602.671688][ T38] #1: ffffc90000ae7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 602.684158][ T38] #2: ffff8880366dc0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 602.694832][ T38] #3: ffff8880366dab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 602.705312][ T38] [ 602.705312][ T38] stack backtrace: [ 602.711192][ T38] CPU: 0 UID: 0 PID: 38 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 602.711218][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.711235][ T38] Workqueue: writeback wb_workfn (flush-8:0) [ 602.711266][ T38] Call Trace: [ 602.711277][ T38] [ 602.711286][ T38] dump_stack_lvl+0xe8/0x150 [ 602.711320][ T38] print_circular_bug+0x2e1/0x300 [ 602.711360][ T38] check_noncircular+0x12e/0x150 [ 602.711397][ T38] __lock_acquire+0x15a5/0x2cf0 [ 602.711430][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.711457][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.711480][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.711510][ T38] lock_acquire+0xf0/0x2e0 [ 602.711537][ T38] ? wait_transaction_locked+0x1a9/0x280 [ 602.711568][ T38] ? wait_transaction_locked+0x1a9/0x280 [ 602.711595][ T38] wait_transaction_locked+0x1c2/0x280 [ 602.711620][ T38] ? wait_transaction_locked+0x1a9/0x280 [ 602.711648][ T38] ? __pfx_wait_transaction_locked+0x10/0x10 [ 602.711674][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 602.711697][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.711724][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 602.711751][ T38] start_this_handle+0x7dc/0x2290 [ 602.711780][ T38] ? process_scheduled_works+0xb02/0x1830 [ 602.711816][ T38] ? __pfx_start_this_handle+0x10/0x10 [ 602.711848][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.711873][ T38] ? rcu_is_watching+0x15/0xb0 [ 602.711903][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.711928][ T38] ? trace_kmem_cache_alloc+0x29/0xf0 [ 602.711960][ T38] ? jbd2__journal_start+0x1db/0x5b0 [ 602.711980][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712003][ T38] ? kmem_cache_alloc_noprof+0x307/0x650 [ 602.712037][ T38] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 602.712073][ T38] jbd2__journal_start+0x2c0/0x5b0 [ 602.712098][ T38] __ext4_journal_start_sb+0x203/0x620 [ 602.712127][ T38] ext4_do_writepages+0xf94/0x46e0 [ 602.712179][ T38] ? __pfx_ext4_do_writepages+0x10/0x10 [ 602.712215][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712244][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712272][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712300][ T38] ext4_writepages+0x241/0x3b0 [ 602.712329][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 602.712365][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712390][ T38] ? do_raw_spin_unlock+0xf5/0x210 [ 602.712416][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712441][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 602.712469][ T38] do_writepages+0x32e/0x550 [ 602.712502][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712527][ T38] ? reacquire_held_locks+0x104/0x190 [ 602.712558][ T38] ? writeback_sb_inodes+0x43d/0x19a0 [ 602.712589][ T38] __writeback_single_inode+0x133/0x11a0 [ 602.712617][ T38] ? do_raw_spin_unlock+0xf5/0x210 [ 602.712641][ T38] writeback_sb_inodes+0x944/0x19a0 [ 602.712680][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 602.712725][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 602.712747][ T38] ? __pfx_move_expired_inodes+0x10/0x10 [ 602.712776][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.712803][ T38] __writeback_inodes_wb+0x111/0x240 [ 602.712835][ T38] wb_writeback+0x46a/0xb70 [ 602.712863][ T38] ? queue_io+0x221/0x4a0 [ 602.712892][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 602.712917][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.712946][ T38] wb_workfn+0xb4c/0xf50 [ 602.712976][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 602.712996][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713022][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713050][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713075][ T38] ? do_raw_spin_unlock+0xf5/0x210 [ 602.713101][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713128][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713154][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713187][ T38] ? process_scheduled_works+0xa25/0x1830 [ 602.713214][ T38] ? process_scheduled_works+0xa25/0x1830 [ 602.713243][ T38] process_scheduled_works+0xb02/0x1830 [ 602.713285][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 602.713316][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713341][ T38] ? assign_work+0x3d5/0x5e0 [ 602.713370][ T38] worker_thread+0xa50/0xfc0 [ 602.713400][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713433][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713463][ T38] kthread+0x388/0x470 [ 602.713484][ T38] ? __pfx_worker_thread+0x10/0x10 [ 602.713511][ T38] ? __pfx_kthread+0x10/0x10 [ 602.713532][ T38] ret_from_fork+0x51e/0xb90 [ 602.713562][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 602.713589][ T38] ? srso_alias_return_thunk+0x5/0xfbef5 [ 602.713614][ T38] ? __switch_to+0xc7d/0x1450 [ 602.713640][ T38] ? __pfx_kthread+0x10/0x10 [ 602.713661][ T38] ret_from_fork_asm+0x1a/0x30 [ 602.713702][ T38] [ 603.549135][ T5825] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 603.711232][ T5825] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 603.719537][ T5825] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 603.728565][ T5825] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 603.738869][ T5825] usb 3-1: config 220 has no interface number 2 [ 603.745272][ T5825] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 603.758567][ T5825] usb 3-1: config 220 interface 0 has no altsetting 0 [ 603.765485][ T5825] usb 3-1: config 220 interface 76 has no altsetting 0 [ 603.772360][ T5825] usb 3-1: config 220 interface 1 has no altsetting 0 [ 603.781410][ T5825] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 603.790662][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.798775][ T5825] usb 3-1: Product: syz [ 603.802938][ T5825] usb 3-1: Manufacturer: syz [ 603.807589][ T5825] usb 3-1: SerialNumber: syz [ 604.038389][ T5825] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 604.045865][ T5825] uvcvideo 3-1:220.0: No valid video chain found. [ 604.052440][ T5825] usb 3-1: selecting invalid altsetting 0 [ 604.063140][ T5825] usb 3-1: selecting invalid altsetting 0 [ 604.068880][ T5825] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 604.081719][ T5825] usb 3-1: USB disconnect, device number 99