last executing test programs: 3.804659746s ago: executing program 2 (id=2212): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x89e5, 0x0) 3.571364507s ago: executing program 2 (id=2215): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@clear_cache}, {@ssd_spread}, {@space_cache}, {@discard_sync}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@space_cache}, {@nodatacow}, {@noflushoncommit}, {@user_subvol_rm}, {@barrier}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='btrfs\x00', 0x0, 0x0) 1.943775125s ago: executing program 4 (id=2238): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], 0x0, &(0x7f0000002240), 0x0) 1.85553896s ago: executing program 1 (id=2239): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) setregid(0xffffffffffffffff, 0x0) 1.713664805s ago: executing program 4 (id=2240): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000340)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.660555635s ago: executing program 2 (id=2241): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, '\x00', 0x1}, 0x18) 1.578454965s ago: executing program 1 (id=2242): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4) 1.577171594s ago: executing program 0 (id=2243): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 1.433801348s ago: executing program 4 (id=2244): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) 1.415947194s ago: executing program 1 (id=2245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x43, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 1.349608544s ago: executing program 0 (id=2246): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) 1.343062686s ago: executing program 3 (id=2247): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000002280)=0x3) 1.239110066s ago: executing program 4 (id=2248): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3e0, 0x0, 0x110, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x18}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x430) 1.166988603s ago: executing program 1 (id=2249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002abd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040080000140012800c0001006d6163766c616a0004000280140035006d6163766c616e30"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.05597082s ago: executing program 0 (id=2250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @broadcast}, 0x22, 0x0, 0x0, 0x0, 0xf102, 0x0, 0xfffffffffffffff9, 0x94d900000000000, 0x8}) 1.002228207s ago: executing program 3 (id=2251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f00000001c0)=0x5d) 875.275553ms ago: executing program 4 (id=2252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 815.922468ms ago: executing program 2 (id=2253): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "73f708f5d0874e34af1e56680aae316e08715fed57aa9447103bf6d45f607452", "ffd8b61907b32667575d40c7660d8cfb55ff311fcb0a0d1ada6af68c686dcf00", "81f20500000000fdf7007b03000800000000000e1700493b00", "4203e526ab0aef0472ffb67772e3f4ceeafb5380bac65d7a50a8d3a1d0838f8d", "ecf26e4390eb9cc3c3e6065be63288c782a90e860d20410e509816a45ca3aea9", "d59b3c64066d621fde8480ad", 0x7fffffff, 0x8, 0xb4bc, 0x8, 0xd}}) 812.766347ms ago: executing program 3 (id=2254): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1, 0x0, 0x1000000}) 796.092442ms ago: executing program 0 (id=2255): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000440)) 790.495479ms ago: executing program 1 (id=2256): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) llistxattr(0x0, 0x0, 0x0) 644.72683ms ago: executing program 1 (id=2257): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@grpjquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45b, &(0x7f0000000840)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 635.958848ms ago: executing program 4 (id=2258): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x200800, &(0x7f0000000040), 0x4, 0x96c1, &(0x7f0000009680)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 608.563076ms ago: executing program 2 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 608.030803ms ago: executing program 3 (id=2260): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) getuid() 583.838823ms ago: executing program 0 (id=2261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x49b2b26753be10f5}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 448.304835ms ago: executing program 3 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 132.997427ms ago: executing program 0 (id=2263): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 45.253063ms ago: executing program 2 (id=2264): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") mkdir(&(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14) 0s ago: executing program 3 (id=2265): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$msr(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): as an invalid bInterval 0, changing to 7 [ 168.534408][ T8144] : entered promiscuous mode [ 168.540124][ T5904] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 168.570058][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.610527][ T5904] usb 5-1: Product: syz [ 168.624172][ T5904] usb 5-1: Manufacturer: syz [ 168.644678][ T8143] FAT-fs (loop3): Directory bread(block 64) failed [ 168.654782][ T5904] usb 5-1: SerialNumber: syz [ 168.681623][ T8143] FAT-fs (loop3): Directory bread(block 65) failed [ 168.694975][ T5904] usb 5-1: config 0 descriptor?? [ 168.729160][ T5904] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 168.744132][ T8143] FAT-fs (loop3): Directory bread(block 66) failed [ 168.771569][ T8143] FAT-fs (loop3): Directory bread(block 67) failed [ 168.795972][ T5904] em28xx 5-1:0.132: Video interface 132 found: isoc [ 168.814106][ T8143] FAT-fs (loop3): Directory bread(block 68) failed [ 168.831113][ T8143] FAT-fs (loop3): Directory bread(block 69) failed [ 168.857273][ T8143] FAT-fs (loop3): Directory bread(block 70) failed [ 168.899095][ T8156] loop0: detected capacity change from 0 to 128 [ 168.914078][ T8143] FAT-fs (loop3): Directory bread(block 71) failed [ 168.944098][ T8143] FAT-fs (loop3): Directory bread(block 72) failed [ 168.951257][ T8143] FAT-fs (loop3): Directory bread(block 73) failed [ 168.994146][ T5904] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 169.099511][ T5904] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 169.110125][ T8158] loop2: detected capacity change from 0 to 256 [ 169.154477][ T5904] em28xx 5-1:0.132: board has no eeprom [ 169.201683][ T8158] FAT-fs (loop2): Directory bread(block 64) failed [ 169.236715][ T8158] FAT-fs (loop2): Directory bread(block 65) failed [ 169.244673][ T8162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.261464][ T5904] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 169.268524][ T8158] FAT-fs (loop2): Directory bread(block 66) failed [ 169.289944][ T5904] em28xx 5-1:0.132: analog set to isoc mode. [ 169.296522][ T8158] FAT-fs (loop2): Directory bread(block 67) failed [ 169.322448][ T8158] FAT-fs (loop2): Directory bread(block 68) failed [ 169.330230][ T1217] em28xx 5-1:0.132: Registering V4L2 extension [ 169.340399][ T8158] FAT-fs (loop2): Directory bread(block 69) failed [ 169.385014][ T5904] usb 5-1: USB disconnect, device number 7 [ 169.393022][ T5904] em28xx 5-1:0.132: Disconnecting em28xx [ 169.414496][ T8158] FAT-fs (loop2): Directory bread(block 70) failed [ 169.443976][ T8158] FAT-fs (loop2): Directory bread(block 71) failed [ 169.451738][ T8158] FAT-fs (loop2): Directory bread(block 72) failed [ 169.542862][ T42] kernel write not supported for file /input/mice (pid: 42 comm: kworker/1:1) [ 169.550703][ T8158] FAT-fs (loop2): Directory bread(block 73) failed [ 169.672048][ T8170] loop0: detected capacity change from 0 to 512 [ 169.730972][ T8170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.787469][ T8170] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.820541][ T1217] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 169.831016][ T1217] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 169.839512][ T1217] em28xx 5-1:0.132: No AC97 audio processor [ 169.854502][ T1217] usb 5-1: Decoder not found [ 169.859310][ T1217] em28xx 5-1:0.132: failed to create media graph [ 169.892038][ T1217] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 169.968582][ T1217] em28xx 5-1:0.132: Remote control support is not available for this card. [ 170.007687][ T5904] em28xx 5-1:0.132: Closing input extension [ 170.076672][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.107243][ T5904] em28xx 5-1:0.132: Freeing device [ 170.181192][ T8147] loop1: detected capacity change from 0 to 40427 [ 170.191068][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.951'. [ 170.224839][ T8181] netlink: 88 bytes leftover after parsing attributes in process `syz.4.951'. [ 170.266630][ T8147] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 170.303211][ T8147] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 170.354056][ T8147] F2FS-fs (loop1): invalid crc value [ 170.749161][ T8147] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 170.800625][ T8201] loop4: detected capacity change from 0 to 4096 [ 170.829818][ T8201] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 170.845443][ T8147] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 170.873971][ T8147] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.236745][ T8220] nfs: Deprecated parameter 'nointr' [ 171.704056][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.917764][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 171.949227][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.978022][ T9] usb 5-1: config 0 has no interface number 0 [ 172.020366][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 172.046102][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.074370][ T9] usb 5-1: Product: syz [ 172.078913][ T9] usb 5-1: Manufacturer: syz [ 172.087586][ T9] usb 5-1: SerialNumber: syz [ 172.133723][ T9] usb 5-1: config 0 descriptor?? [ 172.177780][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 172.231081][ T9] usb 5-1: selecting invalid altsetting 1 [ 172.261471][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 172.290411][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.336395][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 172.360238][ T9] usb 5-1: media controller created [ 172.383112][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.421632][ T8259] loop2: detected capacity change from 0 to 512 [ 172.500110][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 172.514130][ T8259] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.542893][ T9] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 172.582277][ T8259] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 172.648555][ T8259] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 172.680381][ T8259] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 172.712710][ T8259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.730339][ T8268] loop1: detected capacity change from 0 to 256 [ 172.739428][ T8268] exfat: Deprecated parameter 'namecase' [ 172.796871][ T8259] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 172.825843][ T8268] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 172.842298][ T8237] loop3: detected capacity change from 0 to 32768 [ 172.887524][ T8237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.971 (8237) [ 172.914418][ T9] DVB: Unable to find symbol mxl5005s_attach() [ 172.964144][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 172.972679][ T8237] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.038332][ T8237] BTRFS info (device loop3): using sha256 checksum algorithm [ 173.103451][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.193307][ T9] usb 5-1: USB disconnect, device number 8 [ 173.303687][ T8237] BTRFS info (device loop3): enabling ssd optimizations [ 173.354635][ T8237] BTRFS info (device loop3): turning on async discard [ 173.362421][ T8237] BTRFS info (device loop3): enabling free space tree [ 173.640752][ T8305] loop1: detected capacity change from 0 to 64 [ 173.665561][ T5841] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.714002][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.864706][ C1] sd 0:0:1:0: [sda] tag#6447 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 173.875662][ C1] sd 0:0:1:0: [sda] tag#6447 CDB: Read(6) 08 00 00 00 03 44 [ 173.904056][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 173.930117][ T5904] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 173.953986][ T5904] usb 3-1: config 0 has no interface number 0 [ 173.988970][ T5904] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 174.009433][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.036783][ T5904] usb 3-1: Product: syz [ 174.073996][ T5904] usb 3-1: Manufacturer: syz [ 174.079206][ T5904] usb 3-1: SerialNumber: syz [ 174.109913][ T5904] usb 3-1: config 0 descriptor?? [ 174.138074][ T5904] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 174.183131][ T5904] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 174.334337][ T1217] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.348784][ T5904] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 174.494474][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 174.536543][ T1217] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 174.536578][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.536621][ T1217] usb 4-1: Product: syz [ 174.536636][ T1217] usb 4-1: Manufacturer: syz [ 174.536651][ T1217] usb 4-1: SerialNumber: syz [ 174.540133][ T1217] usb 4-1: config 0 descriptor?? [ 174.554095][ T5904] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 174.589527][ T5904] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 174.600588][ T1217] as10x_usb: device has been detected [ 174.601556][ T1217] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 174.615329][ T5904] usb 3-1: USB disconnect, device number 5 [ 174.717016][ T1217] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 174.755194][ T8316] random: crng reseeded on system resumption [ 174.771986][ T1217] as10x_usb: error during firmware upload part1 [ 174.772063][ T1217] Registered device Sky IT Digital Key (green led) [ 174.872015][ T5904] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 174.893534][ T3396] usb 4-1: USB disconnect, device number 6 [ 174.968048][ T3396] Unregistered device Sky IT Digital Key (green led) [ 175.007593][ T3396] as10x_usb: device has been disconnected [ 175.083469][ T8339] loop0: detected capacity change from 0 to 256 [ 175.115390][ T8339] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabee868b, utbl_chksum : 0xe619d30d) [ 175.570351][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'. [ 175.634590][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1013'. [ 175.843419][ T8364] bond2: entered allmulticast mode [ 175.851340][ T8364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.153599][ T29] audit: type=1326 audit(1772023659.024:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.253808][ T29] audit: type=1326 audit(1772023659.024:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.345664][ T29] audit: type=1326 audit(1772023659.064:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.454043][ T29] audit: type=1326 audit(1772023659.064:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.544841][ T29] audit: type=1326 audit(1772023659.064:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.637328][ T29] audit: type=1326 audit(1772023659.514:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.649439][ T5904] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 176.755893][ T29] audit: type=1326 audit(1772023659.544:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.830760][ T29] audit: type=1326 audit(1772023659.554:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.855468][ T5904] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 176.891056][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.900016][ T29] audit: type=1326 audit(1772023659.554:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 176.927574][ T5904] usb 1-1: Product: syz [ 176.932549][ T5904] usb 1-1: Manufacturer: syz [ 176.938416][ T5904] usb 1-1: SerialNumber: syz [ 176.951964][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.961033][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.982422][ T5904] usb 1-1: config 0 descriptor?? [ 177.021926][ T29] audit: type=1326 audit(1772023659.554:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.1.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 177.414368][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'. [ 177.432638][ T5904] usb 1-1: f81604_write: reg: 105 data: b8 failed: -EPROTO [ 177.476586][ T5904] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 177.501099][ T8426] loop1: detected capacity change from 0 to 16 [ 177.507167][ T5904] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 177.546889][ T8426] erofs (device loop1): mounted with root inode @ nid 36. [ 177.574224][ T5904] usb 1-1: USB disconnect, device number 4 [ 178.057784][ T8444] loop1: detected capacity change from 0 to 512 [ 178.245239][ T8444] FAT-fs (loop1): FAT read failed (blocknr 128) [ 178.631885][ T8465] loop3: detected capacity change from 0 to 4096 [ 178.706023][ T8475] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1072'. [ 178.762504][ T8477] loop4: detected capacity change from 0 to 64 [ 179.132626][ T8489] overlay: Unknown parameter 'smackfstransmute' [ 179.213507][ T8491] netlink: 'syz.0.1081': attribute type 32 has an invalid length. [ 179.442714][ T8503] loop4: detected capacity change from 0 to 512 [ 179.574827][ T8503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 179.615298][ T8503] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.663793][ T8515] netlink: 752 bytes leftover after parsing attributes in process `syz.2.1090'. [ 179.745787][ T8503] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1086: Failed to acquire dquot type 0 [ 179.966045][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 180.080453][ T8530] No source specified [ 180.091146][ T8534] loop3: detected capacity change from 0 to 64 [ 180.140674][ T8534] hfs: unable to locate alternate MDB [ 180.166696][ T8534] hfs: continuing without an alternate MDB [ 180.311993][ T8540] netlink: zone id is out of range [ 180.433780][ T8544] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 180.822318][ T8561] loop0: detected capacity change from 0 to 8 [ 180.871699][ T8561] SQUASHFS error: Unable to read directory block [629:26] [ 180.883051][ T8565] loop3: detected capacity change from 0 to 1024 [ 180.968178][ T8565] hfsplus: invalid extent max_key_len 0 [ 180.994546][ T8565] hfsplus: failed to load extents file [ 181.184097][ T8577] netlink: 'syz.4.1121': attribute type 3 has an invalid length. [ 181.234070][ T8577] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 181.242176][ T8577] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 181.295255][ T3396] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.324027][ T8577] NCSI netlink: No device for ifindex 0 [ 181.463969][ T3396] usb 4-1: Using ep0 maxpacket: 16 [ 181.479919][ T3396] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 181.495950][ T3396] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 181.520780][ T3396] usb 4-1: config 8 has an invalid descriptor of length 156, skipping remainder of the config [ 181.545140][ T3396] usb 4-1: config 8 has no interface number 0 [ 181.552022][ T3396] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 181.574104][ T8587] loop4: detected capacity change from 0 to 512 [ 181.596421][ T3396] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 181.621744][ T3396] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.645002][ T3396] usb 4-1: config 8 interface 223 has no altsetting 0 [ 181.658179][ T3396] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 181.674737][ T3396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.683678][ T3396] usb 4-1: Product: syz [ 181.738214][ T3396] usb 4-1: Manufacturer: syz [ 181.743515][ T3396] usb 4-1: SerialNumber: syz [ 181.774244][ T8565] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.948177][ T8598] 9pnet_fd: Insufficient options for proto=fd [ 182.024624][ T3396] usb 4-1: USB disconnect, device number 7 [ 182.258686][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1136'. [ 182.473765][ T8615] loop4: detected capacity change from 0 to 256 [ 182.628850][ T8601] loop1: detected capacity change from 0 to 32768 [ 182.753768][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.034473][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1146'. [ 183.161865][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 183.572172][ T8653] autofs: Bad value for 'fd' [ 183.715663][ T8657] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 183.822382][ T8661] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 183.998433][ T8672] loop3: detected capacity change from 0 to 256 [ 184.014500][ T8663] loop1: detected capacity change from 0 to 4096 [ 184.028726][ T8672] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 184.048694][ T8669] bond1: option all_slaves_active: invalid value (20) [ 184.065824][ T8669] bond1 (unregistering): Released all slaves [ 184.091802][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1168'. [ 184.102139][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1168'. [ 184.133996][ T5896] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 184.206927][ T8663] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 184.284390][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 184.304506][ T5896] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 184.313616][ T8676] netlink: 'syz.0.1169': attribute type 11 has an invalid length. [ 184.328379][ T8663] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 184.368992][ T5896] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 184.388587][ T8676] netlink: 'syz.0.1169': attribute type 23 has an invalid length. [ 184.398065][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.415817][ T5896] usb 5-1: Product: syz [ 184.421183][ T8676] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1169'. [ 184.432358][ T5896] usb 5-1: Manufacturer: syz [ 184.437397][ T5896] usb 5-1: SerialNumber: syz [ 184.448896][ T5896] usb 5-1: config 0 descriptor?? [ 184.457454][ T5824] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 184.501432][ T8678] netlink: 'syz.3.1170': attribute type 1 has an invalid length. [ 184.540763][ T8678] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1170'. [ 184.700372][ T5896] usb 5-1: USB disconnect, device number 9 [ 185.359616][ T8707] netlink: 'syz.0.1184': attribute type 11 has an invalid length. [ 185.372961][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 185.372980][ T29] audit: type=1326 audit(1772023668.244:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 185.404352][ T8707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1184'. [ 185.449095][ T8690] loop2: detected capacity change from 0 to 32768 [ 185.473993][ T29] audit: type=1326 audit(1772023668.284:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 185.510630][ T8690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1175 (8690) [ 185.551055][ T29] audit: type=1326 audit(1772023668.304:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 185.588232][ T8690] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.624157][ T8690] BTRFS info (device loop2): using sha256 checksum algorithm [ 185.654668][ T29] audit: type=1326 audit(1772023668.304:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 185.826428][ T8690] BTRFS info (device loop2): enabling ssd optimizations [ 185.841238][ T8690] BTRFS info (device loop2): turning on async discard [ 185.850254][ T8690] BTRFS info (device loop2): enabling free space tree [ 185.919595][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.995011][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.184226][ T10] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 186.203969][ T10] usb 5-1: config 0 has no interface number 0 [ 186.223962][ T10] usb 5-1: config 0 interface 175 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 186.274143][ T10] usb 5-1: config 0 interface 175 has no altsetting 0 [ 186.306647][ T10] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 186.338208][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.358029][ T10] usb 5-1: Product: syz [ 186.370054][ T10] usb 5-1: Manufacturer: syz [ 186.399431][ T10] usb 5-1: SerialNumber: syz [ 186.466517][ T10] usb 5-1: config 0 descriptor?? [ 186.704609][ T10] hub 5-1:0.175: bad descriptor, ignoring hub [ 186.711431][ T10] hub 5-1:0.175: probe with driver hub failed with error -5 [ 186.737968][ T8752] loop3: detected capacity change from 0 to 512 [ 186.753755][ T10] usbsevseg 5-1:0.175: USB 7 Segment device now attached [ 186.771305][ T8754] loop0: detected capacity change from 0 to 256 [ 186.828167][ T10] usb 5-1: USB disconnect, device number 10 [ 186.839225][ T8754] exfat: Deprecated parameter 'utf8' [ 186.856073][ T8752] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 186.874899][ T8754] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 186.884266][ T10] usbsevseg 5-1:0.175: USB 7 Segment now disconnected [ 186.926365][ T8752] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.955686][ T8754] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 186.979435][ T8752] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1199: bad orphan inode 15 [ 187.057084][ T8752] loop3: lost filesystem error report for type 5 error -117 [ 187.063942][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 187.070582][ T8742] loop2: detected capacity change from 0 to 32768 [ 187.072265][ C1] EXT4-fs (loop3): initial error at time 1772023669: ext4_orphan_get:1417 [ 187.096132][ C1] EXT4-fs (loop3): last error at time 1772023669: ext4_orphan_get:1417 [ 187.106730][ T8752] ext4_test_bit(bit=14, block=18) = 1 [ 187.141933][ T8752] is_bad_inode(inode)=0 [ 187.148713][ T8752] NEXT_ORPHAN(inode)=1023 [ 187.153475][ T8752] max_ino=32 [ 187.154506][ T8742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1192 (8742) [ 187.212525][ T8752] i_nlink=0 [ 187.236894][ T8742] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.268933][ T8742] BTRFS info (device loop2): using sha256 checksum algorithm [ 187.284225][ T8752] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2970: inode #15: comm syz.3.1199: corrupted xattr block 19: e_value size too large [ 187.334783][ T8752] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.360536][ T8752] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 187.430021][ T8752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 187.514820][ T8742] BTRFS info (device loop2): enabling ssd optimizations [ 187.553675][ T8742] BTRFS info (device loop2): turning on async discard [ 187.614414][ T8742] BTRFS info (device loop2): enabling free space tree [ 187.662760][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 187.760042][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 187.777056][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.010024][ T8783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.088279][ T8792] loop3: detected capacity change from 0 to 1024 [ 188.151507][ T8792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.280307][ T8792] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.1212: reserved inode found cleared - inode=1 [ 188.392858][ T8792] EXT4-fs (loop3): Remounting filesystem read-only [ 188.523297][ T8808] tc_dump_action: action bad kind [ 188.533313][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.568049][ T8775] loop1: detected capacity change from 0 to 32768 [ 188.631290][ T5964] loop1: p1 p3 < p5 p6 > [ 188.657775][ T5964] loop1: partition table partially beyond EOD, truncated [ 188.752086][ T8775] loop1: p1 p3 < p5 p6 > [ 188.757435][ T8775] loop1: partition table partially beyond EOD, truncated [ 188.778216][ T8811] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1217'. [ 188.799577][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 188.865053][ T8811] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1217'. [ 188.898789][ T8811] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1217'. [ 188.941664][ T8811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1217'. [ 189.195825][ T8823] loop2: detected capacity change from 0 to 1024 [ 189.392585][ T8830] netlink: 'syz.4.1227': attribute type 10 has an invalid length. [ 189.445620][ T8830] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1227'. [ 190.039213][ T8836] bridge0: left promiscuous mode [ 190.069457][ T8842] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 190.202834][ T8847] netlink: 'syz.3.1234': attribute type 2 has an invalid length. [ 190.236506][ T8847] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1234'. [ 190.329604][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 190.349526][ T6226] udevd[6226]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 190.368346][ T6056] udevd[6056]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 190.385798][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 190.423635][ T8855] loop2: detected capacity change from 0 to 256 [ 190.527689][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 190.549230][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 190.565091][ T6226] udevd[6226]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 190.578764][ T8855] FAT-fs (loop2): Directory bread(block 64) failed [ 190.589501][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 190.621267][ T8855] FAT-fs (loop2): Directory bread(block 65) failed [ 190.663839][ T8855] FAT-fs (loop2): Directory bread(block 66) failed [ 190.671976][ T8855] FAT-fs (loop2): Directory bread(block 67) failed [ 190.724469][ T8855] FAT-fs (loop2): Directory bread(block 68) failed [ 190.764954][ T8855] FAT-fs (loop2): Directory bread(block 69) failed [ 190.772375][ T8855] FAT-fs (loop2): Directory bread(block 70) failed [ 190.831597][ T8855] FAT-fs (loop2): Directory bread(block 71) failed [ 190.845922][ T8855] FAT-fs (loop2): Directory bread(block 72) failed [ 190.873537][ T8855] FAT-fs (loop2): Directory bread(block 73) failed [ 190.897577][ T8871] loop0: detected capacity change from 0 to 512 [ 190.983314][ T8871] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1242: invalid indirect mapped block 4294967295 (level 1) [ 191.077454][ T8871] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 191.081937][ T8871] EXT4-fs (loop0): Remounting filesystem read-only [ 191.092131][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 191.092152][ C1] EXT4-fs (loop0): initial error at time 1772023673: ext4_free_branches:1023: inode 11 [ 191.092185][ C1] EXT4-fs (loop0): last error at time 1772023673: ext4_free_branches:1023: inode 11 [ 191.162451][ T8871] EXT4-fs (loop0): 2 truncates cleaned up [ 191.170560][ T8871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.408873][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.588981][ T8891] nbd: must specify an index to disconnect [ 191.873728][ T8905] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 191.907386][ T8905] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1254'. [ 192.194027][ T8875] loop3: detected capacity change from 0 to 32768 [ 192.340571][ T8875] JBD2: Ignoring recovery information on journal [ 192.546100][ T8875] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.875810][ T5841] ocfs2: Unmounting device (7,3) on (node local) [ 193.607217][ T8920] loop1: detected capacity change from 0 to 32768 [ 193.683538][ T8920] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.823129][ T8941] loop2: detected capacity change from 0 to 32768 [ 193.835520][ T8941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1266 (8941) [ 193.870509][ T8920] XFS (loop1): Ending clean mount [ 193.965667][ T8941] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.064062][ T8941] BTRFS info (device loop2): using sha256 checksum algorithm [ 194.153632][ T5824] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.317100][ T8995] capability: warning: `syz.3.1284' uses 32-bit capabilities (legacy support in use) [ 194.357357][ T8941] BTRFS info (device loop2): enabling ssd optimizations [ 194.378571][ T8941] BTRFS info (device loop2): turning on async discard [ 194.424496][ T8941] BTRFS info (device loop2): enabling free space tree [ 194.730946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.738756][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.828752][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.971665][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 195.304411][ T9022] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1293'. [ 195.394852][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 195.462744][ T9024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1294'. [ 195.492550][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 195.544558][ T9024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1294'. [ 195.574181][ T9024] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1294'. [ 195.654107][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 195.729390][ T9003] loop3: detected capacity change from 0 to 32768 [ 195.810293][ T9003] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.844780][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 195.894463][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.925659][ T10] usb 1-1: config 0 descriptor?? [ 195.945694][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 195.953825][ T9015] loop4: detected capacity change from 0 to 32768 [ 195.999195][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1299'. [ 196.080120][ T9015] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.229472][ T9055] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 196.255053][ T9003] XFS (loop3): Ending clean mount [ 196.262794][ T9015] XFS (loop4): Ending clean mount [ 196.295917][ T9055] netlink: 'syz.1.1302': attribute type 3 has an invalid length. [ 196.335451][ T9015] XFS (loop4): Quotacheck needed: Please wait. [ 196.359662][ T9055] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1302'. [ 196.377590][ T10] gp8psk: usb in 137 operation failed. [ 196.412192][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 196.430245][ T9015] XFS (loop4): Quotacheck: Done. [ 196.450151][ T5841] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.495593][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 196.518040][ T9059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1305'. [ 196.557310][ T10] usb 1-1: USB disconnect, device number 5 [ 196.652045][ T5826] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.749120][ T9063] loop1: detected capacity change from 0 to 512 [ 196.763561][ T9063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.777960][ T9064] loop2: detected capacity change from 0 to 1024 [ 196.796139][ T9064] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 196.850999][ T9063] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 196.881298][ T9063] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 196.966113][ T9063] EXT4-fs (loop1): 1 truncate cleaned up [ 197.013857][ T9063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.087762][ T9063] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.136481][ T9072] loop3: detected capacity change from 0 to 64 [ 198.317172][ T9112] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 198.633849][ T9122] [U] [ 198.637903][ T9122] [U] [ 198.640954][ T9122] [U] [ 198.644074][ T9122] [U] [ 198.672847][ T9078] syz.1.1314 (9078): drop_caches: 2 [ 198.726315][ T9122] [U] [ 198.729853][ T9122] [U] [ 198.732793][ T9122] [U] [ 198.735890][ T9122] [U] [ 198.816297][ T9122] [U] [ 198.819454][ T9122] [U] [ 198.822651][ T9122] [U] [ 198.853242][ T9121] [U] [ 199.329755][ T9117] loop3: detected capacity change from 0 to 32768 [ 199.407122][ T9117] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.496251][ T9117] XFS (loop3): Ending clean mount [ 199.516725][ T9163] loop1: detected capacity change from 0 to 16 [ 199.539016][ T9163] erofs (device loop1): mounted with root inode @ nid 36. [ 199.547419][ T9117] XFS (loop3): Quotacheck needed: Please wait. [ 199.644895][ T9163] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 199.725303][ T9117] XFS (loop3): Quotacheck: Done. [ 199.734254][ T9163] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 199.781107][ T5837] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 0 size 4096 => 7464 [ 199.808277][ T9163] erofs (device loop1): bogus lookback distance 1 @ lcn 0 of nid 89 [ 199.844564][ T9163] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 0 size 4096 => 2560 [ 199.884087][ T9163] erofs (device loop1): read error -117 @ 0 of nid 89 [ 199.902336][ T9174] loop4: detected capacity change from 0 to 256 [ 199.941743][ T29] audit: type=1800 audit(1772023682.814:50): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1349" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 199.987625][ T5841] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.270461][ T9180] __nla_validate_parse: 2 callbacks suppressed [ 200.270482][ T9180] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1360'. [ 201.454127][ T9220] usb usb7: usbfs: process 9220 (syz.4.1378) did not claim interface 0 before use [ 201.602960][ T9194] loop0: detected capacity change from 0 to 32768 [ 201.694495][ T9194] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 201.728368][ T9194] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.740367][ T9206] loop3: detected capacity change from 0 to 32768 [ 201.785832][ T9206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1370 (9206) [ 201.842677][ T9206] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.844398][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 201.898032][ T9239] loop1: detected capacity change from 0 to 1024 [ 201.922509][ T9206] BTRFS info (device loop3): using sha256 checksum algorithm [ 201.968879][ T9194] XFS (loop0): Ending clean mount [ 201.969833][ T9239] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 202.009137][ T9239] hfsplus: xattr searching failed [ 202.027550][ T10] usb 3-1: config index 0 descriptor too short (expected 133, got 72) [ 202.040488][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 202.053064][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.094440][ T9239] syz.1.1384: attempt to access beyond end of device [ 202.094440][ T9239] loop1: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 202.117007][ T10] usb 3-1: Product: syz [ 202.121969][ T10] usb 3-1: Manufacturer: syz [ 202.128212][ T10] usb 3-1: SerialNumber: syz [ 202.128793][ T9239] Buffer I/O error on dev loop1, logical block 458752, async page read [ 202.163714][ T9206] BTRFS info (device loop3): enabling ssd optimizations [ 202.174911][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 202.195644][ T9206] BTRFS info (device loop3): turning on async discard [ 202.203359][ T9206] BTRFS info (device loop3): enabling free space tree [ 202.212882][ T5836] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.219673][ T3396] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 202.235900][ T9239] hfsplus: unable to mark blocks free: error -5 [ 202.264137][ T9239] hfsplus: can't free extent: start 131, count 1 [ 202.477145][ T5841] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.523146][ C0] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 202.786449][ T9261] loop4: detected capacity change from 0 to 2048 [ 202.879108][ T9] usb 3-1: USB disconnect, device number 6 [ 202.926161][ T9261] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.064298][ T9265] loop1: detected capacity change from 0 to 4096 [ 203.091775][ T9265] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 203.215972][ T9265] ntfs3(loop1): ino=19, mi_enum_attr [ 203.310172][ T9265] ntfs3(loop1): failed to convert "c46c" to koi8-u [ 203.354254][ T9265] ntfs3(loop1): ino=20, mi_enum_attr [ 203.366053][ T3396] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 203.410253][ T3396] ath9k_htc: Failed to initialize the device [ 203.436424][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 203.565990][ T5926] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.755346][ T5926] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 203.774021][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.814806][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.869590][ T5926] usb 5-1: config 1 has no interface number 0 [ 203.896159][ T5926] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 203.931304][ T5926] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 203.972036][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.983130][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.999889][ T5926] usb 5-1: Product: syz [ 204.014297][ T9294] openvswitch: netlink: IP tunnel dst address not specified [ 204.027873][ T5926] usb 5-1: Manufacturer: syz [ 204.033491][ T5926] usb 5-1: SerialNumber: syz [ 204.276136][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1407'. [ 204.417628][ T9312] loop1: detected capacity change from 0 to 256 [ 204.481691][ T9309] xt_connbytes: Forcing CT accounting to be enabled [ 204.492947][ T9309] xt_NFQUEUE: number of total queues is 0 [ 204.519798][ T5926] usb 5-1: USB disconnect, device number 11 [ 204.565696][ T9315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1413'. [ 204.599930][ T9312] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 204.719565][ T9319] netlink: 'syz.3.1415': attribute type 5 has an invalid length. [ 204.883082][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 204.964189][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 204.995756][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 205.016652][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 205.026878][ T9325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.169827][ T9335] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 205.226300][ T9339] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 205.504092][ T9350] loop4: detected capacity change from 0 to 64 [ 205.747650][ T9362] vlan0: entered promiscuous mode [ 205.963168][ T9373] loop0: detected capacity change from 0 to 16 [ 205.985748][ T9373] erofs (device loop0): mounted with root inode @ nid 36. [ 206.472324][ T9389] loop0: detected capacity change from 0 to 1024 [ 206.509002][ T9389] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 206.619569][ T9389] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 206.992617][ T9365] loop4: detected capacity change from 0 to 40427 [ 207.044834][ T9365] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 207.077380][ T9365] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 207.136367][ T9365] F2FS-fs (loop4): invalid crc value [ 207.361798][ T9425] loop1: detected capacity change from 0 to 8 [ 207.379533][ T9426] No such timeout policy "syz1" [ 207.396818][ T9425] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 207.465928][ T5964] udevd[5964]: incorrect cramfs checksum on /dev/loop1 [ 207.466059][ T9365] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.486190][ T9425] cramfs: Error -3 while decompressing! [ 207.492547][ T9425] cramfs: ffffffff9a3b7b08(1306)->ffff88806b1a2000(4096) [ 207.541722][ T9425] cramfs: bad data blocksize 3221485966 [ 207.559296][ T9365] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 207.572360][ T9425] cramfs: Error -3 while decompressing! [ 207.584259][ T9365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 207.602531][ T9425] cramfs: ffffffff9a3b7b08(1306)->ffff88806b1a2000(4096) [ 207.619887][ T5964] udevd[5964]: incorrect cramfs checksum on /dev/loop1 [ 207.644127][ T29] audit: type=1800 audit(1772023690.514:51): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1466" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 207.876400][ T9442] loop3: detected capacity change from 0 to 512 [ 207.890216][ T9442] EXT4-fs: Ignoring removed orlov option [ 207.980114][ T9442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.004715][ T9442] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.185769][ T9454] netlink: 'syz.2.1479': attribute type 5 has an invalid length. [ 208.309334][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.568025][ T9464] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1485'. [ 208.619263][ T9464] bond_slave_0: left promiscuous mode [ 208.644748][ T9464] bond_slave_1: left promiscuous mode [ 208.674387][ T9468] loop4: detected capacity change from 0 to 64 [ 208.692569][ T9464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.804155][ T9464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.844963][ T9464] bond0 (unregistering): Released all slaves [ 208.917512][ T9466] pim6reg: entered allmulticast mode [ 209.107653][ T9476] syz.3.1490 uses old SIOCAX25GETINFO [ 209.165761][ T9480] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 209.168455][ T9478] geneve2: entered promiscuous mode [ 209.183436][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'. [ 209.350780][ T9458] loop0: detected capacity change from 0 to 40427 [ 209.386044][ T9458] F2FS-fs: heap/no_heap options were deprecated [ 209.395233][ T9458] F2FS-fs (loop0): build fault injection rate: 19 [ 209.402758][ T9458] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 209.444349][ T9458] F2FS-fs (loop0): invalid crc value [ 209.507713][ T9458] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 209.684946][ T9500] loop1: detected capacity change from 0 to 128 [ 209.735108][ T9500] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.797218][ T9458] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 209.810084][ T9500] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.907470][ T9500] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.932844][ T9458] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 209.978052][ T9500] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.024003][ T9458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 210.059511][ T9511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1505'. [ 210.097265][ T5824] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.518626][ T9501] loop2: detected capacity change from 0 to 32768 [ 210.586577][ T9501] ERROR: (device loop2): dbAllocAG: Corrupt dmapctl page [ 210.586577][ T9501] [ 210.644354][ T9501] ERROR: (device loop2): remounting filesystem as read-only [ 210.652296][ T9501] jfs_mkdir: dtInsert returned -EIO [ 210.702006][ T9501] ERROR: (device loop2): jfs_mkdir: [ 210.702006][ T9501] [ 210.862429][ T9531] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 211.004334][ T9535] [U] ^R [ 211.544063][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.666039][ T9533] loop1: detected capacity change from 0 to 32768 [ 211.687184][ T9533] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1517 (9533) [ 211.698099][ T9533] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 211.698140][ T9533] BTRFS info (device loop1): using crc32c checksum algorithm [ 211.698176][ T9533] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 211.714901][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 211.719665][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.721890][ T5926] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 211.721923][ T5926] usb 1-1: config 7 has no interface number 0 [ 211.721966][ T5926] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.721991][ T5926] usb 1-1: config 7 interface 187 has no altsetting 0 [ 211.729235][ T5926] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 211.729269][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.729292][ T5926] usb 1-1: Product: syz [ 211.729309][ T5926] usb 1-1: Manufacturer: syz [ 211.729327][ T5926] usb 1-1: SerialNumber: syz [ 211.804434][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 211.880763][ T9533] BTRFS info (device loop1): rebuilding free space tree [ 211.899683][ T9533] BTRFS info (device loop1): disabling free space tree [ 211.899756][ T9533] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 211.899796][ T9533] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.940483][ T9533] BTRFS info (device loop1): enabling ssd optimizations [ 211.940518][ T9533] BTRFS info (device loop1): turning on async discard [ 211.940540][ T9533] BTRFS info (device loop1): enabling disk space caching [ 211.940560][ T9533] BTRFS info (device loop1): force clearing of disk cache [ 211.940582][ T9533] BTRFS info (device loop1): use zstd compression, level 3 [ 211.966132][ T9] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 211.966167][ T9] usb 3-1: config 0 has no interface number 0 [ 211.966211][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 211.966236][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.969072][ T9] usb 3-1: config 0 descriptor?? [ 211.970463][ T5926] usb 1-1: Unknown endpoint type found, address 0x07 [ 211.970488][ T5926] usb 1-1: Unknown endpoint type found, address 0x03 [ 211.970507][ T5926] usb 1-1: Not enough endpoints found in device, aborting! [ 212.006556][ T9] ttusbir 3-1:0.83: cannot find expected altsetting [ 212.172269][ T5926] usb 1-1: USB disconnect, device number 6 [ 212.237171][ T5904] usb 3-1: USB disconnect, device number 7 [ 212.298038][ T5824] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 213.271468][ T9613] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 214.443563][ T9653] loop3: detected capacity change from 0 to 1024 [ 214.469966][ T9653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.512655][ T9653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.554677][ T9653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.577344][ T9653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.769514][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.798613][ T9648] loop1: detected capacity change from 0 to 32768 [ 214.833450][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 214.848136][ T9648] JBD2: Ignoring recovery information on journal [ 214.874064][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.948466][ T9648] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 215.068124][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 215.077064][ T5926] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 215.077098][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.077120][ T5926] usb 3-1: config 0 has no interface number 0 [ 215.077161][ T5926] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 215.077191][ T5926] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 215.077223][ T5926] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 215.077250][ T5926] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26624, setting to 1024 [ 215.077279][ T5926] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 215.077304][ T5926] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.077349][ T5926] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 215.077376][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.086732][ T5926] usb 3-1: config 0 descriptor?? [ 215.087814][ T9661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.106253][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.232868][ T9679] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1578'. [ 215.339455][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 215.371675][ T5926] usb 3-1: USB disconnect, device number 8 [ 216.109808][ T9694] loop1: detected capacity change from 0 to 256 [ 216.167822][ T9694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 216.265296][ T9697] bond0: (slave erspan0): Opening slave failed [ 216.329650][ T29] audit: type=1400 audit(1772023699.204:52): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=9700 comm="syz.3.1588" [ 216.503444][ T9681] loop0: detected capacity change from 0 to 32768 [ 216.513529][ T9681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1580 (9681) [ 216.544193][ T9681] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.564573][ T9681] BTRFS info (device loop0): using sha256 checksum algorithm [ 216.642547][ T9681] BTRFS info (device loop0): enabling ssd optimizations [ 216.679601][ T9727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1594'. [ 216.692455][ T9681] BTRFS info (device loop0): turning on async discard [ 216.748050][ T9681] BTRFS info (device loop0): enabling free space tree [ 216.833979][ T3396] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 216.870299][ T5836] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.008999][ T3396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.042239][ T3396] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.090647][ T3396] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.110920][ T9735] loop1: detected capacity change from 0 to 1764 [ 217.139274][ T3396] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.171368][ T3396] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.181994][ T3396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.235758][ T3396] hub 3-1:1.0: bad descriptor, ignoring hub [ 217.242777][ T3396] hub 3-1:1.0: probe with driver hub failed with error -5 [ 217.289061][ T3396] cdc_wdm 3-1:1.0: skipping garbage [ 217.290672][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 217.296236][ T5926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.303144][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 217.319478][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 217.327839][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 217.328176][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 217.377027][ T3396] cdc_wdm 3-1:1.0: skipping garbage [ 217.429270][ T3396] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 217.455369][ T3396] cdc_wdm 3-1:1.0: Unknown control protocol [ 217.554151][ T3396] usb 3-1: USB disconnect, device number 9 [ 217.603660][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 217.632603][ T5926] usb 5-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 217.675149][ T5926] usb 5-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 217.697517][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.712281][ T5926] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 217.723706][ T5926] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 217.737706][ T5926] usb 5-1: Product: syz [ 217.742567][ T5926] usb 5-1: Manufacturer: syz [ 217.748889][ T5926] usb 5-1: SerialNumber: syz [ 217.769910][ T5926] usb 5-1: config 0 descriptor?? [ 217.969495][ T9738] loop3: detected capacity change from 0 to 32768 [ 218.012055][ T5926] usb 5-1: selecting invalid altsetting 1 [ 218.157535][ T5926] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 218.186630][ T5926] usb 5-1: USB disconnect, device number 12 [ 218.210570][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.328902][ T9746] loop1: detected capacity change from 0 to 32768 [ 218.384624][ T9746] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.612106][ T9746] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 218.664832][ T9746] XFS (loop1): Unmount and run xfs_repair [ 218.671071][ T9746] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 218.703752][ T9764] loop0: detected capacity change from 0 to 512 [ 218.726600][ T9746] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 218.749548][ T9768] netlink: 'syz.4.1610': attribute type 4 has an invalid length. [ 218.754081][ T29] audit: type=1326 audit(1772023701.624:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 218.794573][ T9764] EXT4-fs (loop0): orphan cleanup on readonly fs [ 218.798800][ T9746] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 218.826733][ T9746] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 218.837310][ T29] audit: type=1326 audit(1772023701.624:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 218.858052][ T9764] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 218.861879][ T9746] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 218.879259][ T9746] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 218.889664][ T29] audit: type=1326 audit(1772023701.624:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 218.894580][ T9746] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 218.926470][ T29] audit: type=1326 audit(1772023701.664:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 218.953642][ T29] audit: type=1326 audit(1772023701.664:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 218.980880][ T9764] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 219.003908][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 219.011016][ C0] EXT4-fs (loop0): initial error at time 1772023701: ext4_mb_generate_buddy:1315 [ 219.020972][ C0] EXT4-fs (loop0): last error at time 1772023701: ext4_mb_generate_buddy:1315 [ 219.052859][ T9746] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.073182][ T9746] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.092056][ T9746] XFS (loop1): metadata I/O error in "xfs_read_agf+0x289/0x5f0" at daddr 0x1 len 1 error 74 [ 219.106927][ T29] audit: type=1326 audit(1772023701.664:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 219.164684][ T9746] loop1: lost filesystem error report for type 5 error -117 [ 219.164723][ T9746] XFS (loop1): Error -117 reserving per-AG metadata reserve pool. [ 219.196842][ T9764] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1608: attempt to clear invalid blocks 2 len 1 [ 219.219793][ T29] audit: type=1326 audit(1772023701.664:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 219.245452][ T9746] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:559). Shutting down filesystem. [ 219.265638][ T9764] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 219.270315][ T9764] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1608: invalid indirect mapped block 1819239214 (level 0) [ 219.270376][ T9746] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 219.305704][ T29] audit: type=1326 audit(1772023701.664:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.2.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7542b9c629 code=0x7ffc0000 [ 219.324315][ T9764] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 219.330738][ T9746] loop1: lost filesystem error report for type 5 error -108 [ 219.346109][ T9746] XFS (loop1): Ending clean mount [ 219.360944][ T9746] XFS (loop1): Failed to initialize disk quotas, err -5. [ 219.381107][ T9764] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1608: invalid indirect mapped block 1819239214 (level 1) [ 219.467434][ T9764] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 219.468234][ T9764] EXT4-fs (loop0): 1 truncate cleaned up [ 219.556707][ T9764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.597333][ T5824] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.612779][ T9764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.673100][ T9785] loop4: detected capacity change from 0 to 512 [ 219.726136][ T9785] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.795441][ T9785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 219.860687][ T9785] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1617: bad orphan inode 13 [ 219.943412][ T9785] loop4: lost filesystem error report for type 5 error -117 [ 219.943949][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 219.958996][ C1] EXT4-fs (loop4): last error at time 1772023702: ext4_orphan_get:1417 [ 219.968135][ T9785] ext4_test_bit(bit=12, block=18) = 1 [ 219.973629][ T9785] is_bad_inode(inode)=0 [ 220.020485][ T9785] NEXT_ORPHAN(inode)=0 [ 220.030619][ T9785] max_ino=32 [ 220.056697][ T9785] i_nlink=1 [ 220.062175][ T9785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 220.112605][ T9792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1620'. [ 220.153222][ T9785] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.1617: deleted inode referenced: 12 [ 220.377030][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 220.470933][ T9779] loop2: detected capacity change from 0 to 32768 [ 220.494278][ T9779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1614 (9779) [ 220.568930][ T9779] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.636528][ T9779] BTRFS info (device loop2): using sha256 checksum algorithm [ 220.820518][ T9779] BTRFS info (device loop2): enabling ssd optimizations [ 220.847231][ T9779] BTRFS info (device loop2): turning on async discard [ 220.887584][ T9779] BTRFS info (device loop2): enabling free space tree [ 221.097087][ T5833] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.594561][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 221.679691][ T9858] loop0: detected capacity change from 0 to 1024 [ 221.704633][ T9861] loop3: detected capacity change from 0 to 256 [ 222.291572][ T9883] tmpfs: Bad value for 'mpol' [ 222.304110][ T797] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 222.324369][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.401671][ T9885] loop4: detected capacity change from 0 to 512 [ 222.432907][ T9885] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.473720][ T9885] FAT-fs (loop4): FAT read failed (blocknr 1568) [ 222.494089][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 222.502567][ T5904] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 222.542840][ T797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.552108][ T5904] usb 2-1: config 220 has an invalid descriptor of length 251, skipping remainder of the config [ 222.577669][ T797] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 222.605135][ T5904] usb 2-1: config 220 has no interface number 2 [ 222.613989][ T797] usb 1-1: config 0 has no interface number 0 [ 222.637338][ T5904] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.654808][ T797] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 222.689272][ T797] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 222.704120][ T5904] usb 2-1: config 220 interface 0 has no altsetting 0 [ 222.730973][ T5904] usb 2-1: config 220 interface 76 has no altsetting 0 [ 222.748855][ T797] usb 1-1: config 0 interface 88 has no altsetting 0 [ 222.767337][ T5904] usb 2-1: config 220 interface 1 has no altsetting 0 [ 222.777972][ T797] usb 1-1: language id specifier not provided by device, defaulting to English [ 222.805697][ T5904] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.831625][ T797] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 222.851512][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.860695][ T797] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 222.869239][ T5904] usb 2-1: Product: syz [ 222.874455][ T5904] usb 2-1: Manufacturer: syz [ 222.879538][ T5904] usb 2-1: SerialNumber: syz [ 222.888134][ T797] usb 1-1: Product: syz [ 222.892519][ T797] usb 1-1: SerialNumber: syz [ 222.905648][ T797] usb 1-1: config 0 descriptor?? [ 222.994772][ T9899] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 223.135032][ T9866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.161983][ T5904] usb 2-1: selecting invalid altsetting 0 [ 223.184105][ T5904] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 223.202224][ T5904] uvcvideo 2-1:220.0: No valid video chain found. [ 223.239332][ T5904] usb 2-1: selecting invalid altsetting 0 [ 223.251443][ T797] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input12 [ 223.284321][ T5904] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 223.344316][ T5904] usb 2-1: USB disconnect, device number 6 [ 223.354708][ T797] usb 1-1: USB disconnect, device number 7 [ 223.597899][ T9912] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 223.608750][ T9913] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1671'. [ 223.667997][ T9913] gretap0: entered promiscuous mode [ 223.685318][ T9913] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 223.704111][ T9913] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1671'. [ 223.757874][ T9895] loop4: detected capacity change from 0 to 32768 [ 223.826338][ T9920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1673'. [ 223.880419][ T9895] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.915334][ T9925] loop3: detected capacity change from 0 to 512 [ 223.938564][ T9925] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 223.965464][ T9925] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.020863][ T9925] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 224.057803][ T9925] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 224.154151][ T9925] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1674: Failed to acquire dquot type 1 [ 224.168301][ T9895] XFS (loop4): Ending clean mount [ 224.214111][ T9925] loop3: lost filesystem error report for type 5 error -5 [ 224.217569][ T9925] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1674: bg 0: block 40: padding at end of block bitmap is not set [ 224.225473][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 224.225499][ C0] EXT4-fs (loop3): initial error at time 1772023707: ext4_acquire_dquot:7001 [ 224.225526][ C0] EXT4-fs (loop3): last error at time 1772023707: ext4_acquire_dquot:7001 [ 224.282777][ T9925] loop3: lost filesystem error report for type 5 error -117 [ 224.283337][ T9925] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 224.304374][ T9925] loop3: lost filesystem error report for type 5 error -117 [ 224.309842][ T9925] EXT4-fs (loop3): 1 truncate cleaned up [ 224.357280][ T5826] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.445874][ T9925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.585222][ T9925] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1674: bad symlink. [ 224.623548][ T9942] loop0: detected capacity change from 0 to 64 [ 224.756147][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.803299][ T9933] loop1: detected capacity change from 0 to 32768 [ 224.865056][ T9933] (syz.1.1677,9933,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.893662][ T9933] (syz.1.1677,9933,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.035311][ T9933] JBD2: Ignoring recovery information on journal [ 225.099826][ T9936] loop2: detected capacity change from 0 to 32768 [ 225.123648][ T9948] ip6tnl2: entered promiscuous mode [ 225.183961][ T9948] ip6tnl2: entered allmulticast mode [ 225.215380][ T9933] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 225.262946][ T9936] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 225.262946][ T9936] [ 225.322392][ T13] ocfs2: Finishing quota recovery on device (7,1) for slot 0 [ 225.346534][ T9936] ERROR: (device loop2): remounting filesystem as read-only [ 225.387135][ T9936] ERROR: (device loop2): jfs_rename: [ 225.387135][ T9936] [ 225.526862][ T5833] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt [ 225.526862][ T5833] [ 225.632158][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 225.819010][ T9963] loop2: detected capacity change from 0 to 8 [ 225.874251][ T9963] SQUASHFS error: Failed to read block 0x6e6: -5 [ 225.881463][ T9963] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 225.939160][ T9963] SQUASHFS error: Unable to read directory block [631:26] [ 226.685048][ T9993] ubi0: attaching mtd0 [ 226.689780][ T9993] ubi0 error: ubi_attach_mtd_dev: bad VID header (4) or data offsets (68) [ 227.052035][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 227.091623][T10011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1714'. [ 227.194286][ T29] audit: type=1400 audit(1772023710.054:61): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10014 comm="syz.1.1717" [ 227.619691][ T29] audit: type=1326 audit(1772023710.494:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.1.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 227.674322][ T29] audit: type=1326 audit(1772023710.494:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.1.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 227.804674][ T29] audit: type=1326 audit(1772023710.554:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.1.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 227.889798][ T29] audit: type=1326 audit(1772023710.554:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.1.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 227.967669][ T29] audit: type=1326 audit(1772023710.554:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.1.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85b9c629 code=0x7ffc0000 [ 228.264104][ T29] audit: type=1326 audit(1772023711.134:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d639c629 code=0x7ffc0000 [ 228.279930][T10019] loop2: detected capacity change from 0 to 32768 [ 228.343142][ T29] audit: type=1326 audit(1772023711.204:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7d639c629 code=0x7ffc0000 [ 228.766962][T10075] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.1745'. [ 228.903176][T10080] capability: warning: `syz.1.1749' uses deprecated v2 capabilities in a way that may be insecure [ 229.256755][T10088] loop1: detected capacity change from 0 to 4096 [ 229.278995][T10088] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 229.363323][T10088] ntfs3(loop1): ino=19, mi_enum_attr [ 229.392283][T10088] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 229.452337][T10088] ntfs3(loop1): failed to convert "c46c" to cp865 [ 229.464922][T10088] ntfs3(loop1): ino=20, mi_enum_attr [ 229.654228][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.680528][T10065] loop0: detected capacity change from 0 to 40427 [ 229.719718][T10065] F2FS-fs: heap/no_heap options were deprecated [ 229.745385][T10105] loop1: detected capacity change from 0 to 1024 [ 229.763112][T10065] F2FS-fs (loop0): build fault injection rate: 19 [ 229.781286][T10065] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 229.818540][T10065] F2FS-fs (loop0): invalid crc value [ 229.834356][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 229.847595][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.891542][ T5904] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 229.932166][ T5904] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 229.949732][T10065] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 229.953670][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.004529][ T5904] usb 5-1: Product: syz [ 230.024006][ T5904] usb 5-1: Manufacturer: syz [ 230.029259][ T5904] usb 5-1: SerialNumber: syz [ 230.209930][T10065] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 230.294861][ T5904] usb 5-1: Limiting number of CPorts to U8_MAX [ 230.302013][T10065] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 230.324698][ T5904] usb 5-1: Not enough endpoints found in device, aborting! [ 230.353410][T10065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 230.701420][ T5904] usb 5-1: USB disconnect, device number 13 [ 231.294090][ T797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 231.467067][ T797] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 231.484008][ T797] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 231.514255][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.522092][ T797] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 231.535052][ T797] usb 3-1: config 220 has no interface number 2 [ 231.542205][ T797] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 231.571960][ T797] usb 3-1: config 220 interface 0 has no altsetting 0 [ 231.581524][ T797] usb 3-1: config 220 interface 76 has no altsetting 0 [ 231.590008][ T797] usb 3-1: config 220 interface 1 has no altsetting 0 [ 231.600795][ T797] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 231.612519][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.622629][ T797] usb 3-1: Product: syz [ 231.629177][ T797] usb 3-1: Manufacturer: syz [ 231.634222][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 231.642885][ T797] usb 3-1: SerialNumber: syz [ 231.687682][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 231.703508][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 231.720195][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 231.731367][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 231.742257][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 231.753170][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.770192][ T5904] usb 1-1: config 0 descriptor?? [ 231.811120][ T5926] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 231.830337][ T5926] usb 4-1: config 0 has no interface number 0 [ 231.842801][ T5926] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=5f.35 [ 231.858775][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.867731][ T5926] usb 4-1: Product: syz [ 231.872136][ T5926] usb 4-1: Manufacturer: syz [ 231.882333][ T5926] usb 4-1: SerialNumber: syz [ 231.890093][ T797] usb 3-1: selecting invalid altsetting 0 [ 231.905501][ T797] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 231.925478][ T5926] usb 4-1: config 0 descriptor?? [ 231.934009][ T797] uvcvideo 3-1:220.0: No valid video chain found. [ 231.957121][ T5926] usb-storage 4-1:0.111: USB Mass Storage device detected [ 231.971022][ T797] usb 3-1: selecting invalid altsetting 0 [ 231.987508][ T5926] usb-storage 4-1:0.111: device ignored [ 231.999874][ T797] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 232.009585][ T5904] hdpvr 1-1:0.0: firmware version 0x15 dated Š–¸&S¶3;¨“Ãx&X^„œ wÒÎ–Š g/ƒ µn#»† [ 232.054199][ T797] usb 3-1: USB disconnect, device number 10 [ 232.143235][ T5896] usb 4-1: USB disconnect, device number 8 [ 232.180785][T10142] loop4: detected capacity change from 0 to 32768 [ 232.196043][T10142] (syz.4.1778,10142,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.224553][T10142] (syz.4.1778,10142,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.252693][ T5904] hdpvr 1-1:0.0: device init failed [ 232.272592][ T5904] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 232.291981][T10142] JBD2: Ignoring recovery information on journal [ 232.308343][ T5904] usb 1-1: USB disconnect, device number 8 [ 232.378802][T10142] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 232.555802][ T5826] ocfs2: Unmounting device (7,4) on (node local) [ 232.637015][T10162] loop1: detected capacity change from 0 to 512 [ 232.662659][T10166] loop2: detected capacity change from 0 to 512 [ 232.684860][T10162] EXT4-fs: Ignoring removed nobh option [ 232.695436][T10166] EXT4-fs: Ignoring removed oldalloc option [ 232.712000][T10166] EXT4-fs: Ignoring removed bh option [ 232.748157][T10162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.790704][T10162] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.835189][T10166] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 232.907529][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.937178][T10166] EXT4-fs (loop2): 1 truncate cleaned up [ 232.980759][T10166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.318311][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.474837][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 233.575443][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 234.001878][T10222] 9p: Unknown access argument : -22 [ 234.114176][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.253836][T10231] loop3: detected capacity change from 0 to 4096 [ 234.271323][T10231] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 234.304232][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 234.314071][ T5926] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.329029][T10231] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 234.341916][T10231] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 234.350776][ T10] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 234.360961][T10234] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 234.364051][ T10] usb 3-1: config 0 has no interface number 0 [ 234.390806][T10234] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1818'. [ 234.396466][ T10] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 234.417270][T10231] ntfs3(loop3): ino=1e, mi_enum_attr [ 234.426976][T10231] ntfs3(loop3): ino=1e, mi_enum_attr [ 234.435060][ T10] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 234.442014][T10234] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 234.454219][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.470358][T10231] ntfs3(loop3): ino=1e, mi_enum_attr [ 234.494197][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 234.516966][ T5926] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 234.531299][ T10] usb 3-1: Product: syz [ 234.532285][ T13] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 234.543475][ T5841] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 234.548587][ T5926] usb 1-1: config 0 has no interface number 0 [ 234.558041][ T10] usb 3-1: Manufacturer: syz [ 234.560994][ T5841] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 234.583219][ T10] usb 3-1: SerialNumber: syz [ 234.587288][ T5841] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 234.588655][ T5926] usb 1-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 234.616564][ T10] usb 3-1: config 0 descriptor?? [ 234.639581][T10216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.660471][ T5926] usb 1-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 234.700780][ T5926] usb 1-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 234.739100][ T5926] usb 1-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 234.764283][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.770364][T10236] loop4: detected capacity change from 0 to 128 [ 234.773064][ T5926] usb 1-1: Product: syz [ 234.773085][ T5926] usb 1-1: Manufacturer: syz [ 234.802610][T10236] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 234.814039][ T5926] usb 1-1: SerialNumber: syz [ 234.841519][T10236] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 234.849735][ T5926] usb 1-1: config 0 descriptor?? [ 234.875024][T10236] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 234.904826][T10216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.948664][T10227] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.958023][T10228] loop1: detected capacity change from 0 to 32768 [ 234.974203][T10227] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.985961][ T5926] usb-storage 1-1:0.216: USB Mass Storage device detected [ 235.063149][T10228] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.070966][ T5826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.103277][ T5926] scsi host1: usb-storage 1-1:0.216 [ 235.144518][ T10] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 235.234695][ T10] asix 3-1:0.191: probe with driver asix failed with error -71 [ 235.287747][ T5904] usb 1-1: USB disconnect, device number 9 [ 235.303175][T10228] XFS (loop1): Ending clean mount [ 235.320559][ T10] usb 3-1: USB disconnect, device number 11 [ 235.362139][T10228] XFS (loop1): Quotacheck needed: Please wait. [ 235.447560][T10228] XFS (loop1): Quotacheck: Done. [ 235.561830][ T5824] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.063698][T10270] loop2: detected capacity change from 0 to 4096 [ 236.096551][T10270] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 236.138351][T10272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.189517][T10270] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 236.499050][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 236.517776][T10292] netlink: 'syz.0.1842': attribute type 6 has an invalid length. [ 236.545956][T10292] netlink: 'syz.0.1842': attribute type 7 has an invalid length. [ 236.561699][T10294] loop4: detected capacity change from 0 to 512 [ 236.591645][T10292] netlink: 'syz.0.1842': attribute type 8 has an invalid length. [ 236.613835][T10294] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 236.631657][T10294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 236.654399][T10292] netlink: 'syz.0.1842': attribute type 15 has an invalid length. [ 236.675260][T10294] EXT4-fs (loop4): orphan cleanup on readonly fs [ 236.714202][T10294] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.1839: iget: bad i_size value: 12154761577498 [ 236.805183][T10294] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 236.808955][T10294] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1839: couldn't read orphan inode 13 (err -117) [ 236.822376][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 236.822408][ C1] EXT4-fs (loop4): initial error at time 1772023719: ext4_orphan_get:1391: inode 13 [ 236.822449][ C1] EXT4-fs (loop4): last error at time 1772023719: ext4_orphan_get:1391: inode 13 [ 236.906678][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1846'. [ 236.982256][T10294] loop4: lost filesystem error report for type 5 error -117 [ 237.030445][T10294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.115831][T10294] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.1839: dx entry: limit 65535 != root limit 120 [ 237.173597][T10294] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1839: Corrupt directory, running e2fsck is recommended [ 237.293590][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.305500][T10317] loop0: detected capacity change from 0 to 4096 [ 237.320071][T10322] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 237.774453][T10336] loop2: detected capacity change from 0 to 64 [ 238.183405][T10321] loop1: detected capacity change from 0 to 32768 [ 238.252487][T10321] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1853 (10321) [ 238.379900][T10321] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 238.413626][T10321] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 238.435269][T10321] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 238.600099][T10321] BTRFS info (device loop1): rebuilding free space tree [ 238.635925][T10321] BTRFS info (device loop1): disabling free space tree [ 238.644550][T10321] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.657998][T10321] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.729541][T10321] BTRFS info (device loop1): allowing degraded mounts [ 238.773191][T10321] BTRFS info (device loop1): enabling ssd optimizations [ 238.811849][T10321] BTRFS info (device loop1): turning on async discard [ 238.825410][T10372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'. [ 238.843478][T10321] BTRFS info (device loop1): enabling disk space caching [ 238.860444][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 238.868794][T10321] BTRFS info (device loop1): force clearing of disk cache [ 238.902430][T10321] BTRFS info (device loop1): use zlib compression, level 3 [ 238.904166][T10371] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1869'. [ 239.025957][T10321] BTRFS info (device loop1): balance: start -f -susage=0..2,drange=11..18446744073709551614,limit=67076096..0 [ 239.049051][T10321] BTRFS info (device loop1): balance: ended with status: 0 [ 239.184082][ T5824] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 240.137728][T10385] loop2: detected capacity change from 0 to 32768 [ 240.190572][T10411] libceph: resolve '0.' (ret=-3): failed [ 240.204389][T10385] JBD2: Ignoring recovery information on journal [ 240.357702][T10385] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 240.573986][ T797] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 240.622508][ T5833] ocfs2: Unmounting device (7,2) on (node local) [ 240.808447][ T797] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 240.817686][ T797] usb 1-1: config 0 has no interface number 0 [ 240.838883][ T797] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 240.859801][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.884116][ T797] usb 1-1: Product: syz [ 240.888580][ T797] usb 1-1: Manufacturer: syz [ 240.924025][ T797] usb 1-1: SerialNumber: syz [ 240.946339][ T797] usb 1-1: config 0 descriptor?? [ 240.976191][ T797] ftdi_sio 1-1:0.9: FTDI USB Serial Device converter detected [ 241.015710][ T797] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 241.204765][ T5926] usb 1-1: USB disconnect, device number 10 [ 241.238641][ T5926] ftdi_sio 1-1:0.9: device disconnected [ 241.350873][T10448] delete_channel: no stack [ 241.425973][T10452] netlink: 'syz.1.1909': attribute type 23 has an invalid length. [ 241.466360][T10426] loop4: detected capacity change from 0 to 32768 [ 241.514101][T10454] loop3: detected capacity change from 0 to 1024 [ 241.538265][T10426] JBD2: Ignoring recovery information on journal [ 241.635251][T10426] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 241.714925][T10454] hfsplus: b-tree write err: -5, ino 2 [ 241.810645][T10460] loop1: detected capacity change from 0 to 8192 [ 241.899899][ T49] hfsplus: b-tree write err: -5, ino 25 [ 241.941413][ T49] hfsplus: b-tree write err: -5, ino 4 [ 241.964715][ T49] hfsplus: b-tree write err: -5, ino 2 [ 241.992445][ T49] hfsplus: b-tree write err: -5, ino 26 [ 242.066814][T10460] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 242.128652][T10460] FAT-fs (loop1): Filesystem has been set read-only [ 242.204523][T10460] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 242.230226][ T5826] ocfs2: Unmounting device (7,4) on (node local) [ 242.244108][T10460] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 242.884600][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 243.054090][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 243.082094][ T5896] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.112255][ T5896] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.136872][T10502] netlink: 'syz.4.1933': attribute type 32 has an invalid length. [ 243.155683][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 243.179987][ T5896] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 243.214441][T10504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.217595][ T5896] usb 4-1: Product: syz [ 243.235399][ T5896] usb 4-1: Manufacturer: syz [ 243.264641][ T5896] hub 4-1:4.0: USB hub found [ 243.474369][ T5896] hub 4-1:4.0: 2 ports detected [ 243.476794][ T3396] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.607612][ T5838] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 243.618971][ T5838] Bluetooth: hci4: Injecting HCI hardware error event [ 243.630761][ T5837] Bluetooth: hci4: hardware error 0x00 [ 243.661933][ T3396] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 243.672399][ T5896] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 243.686272][ T5896] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 243.715716][ T3396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.734773][ T3396] usb 2-1: Product: syz [ 243.761523][ T3396] usb 2-1: Manufacturer: syz [ 243.780512][ T5896] usb 4-1: USB disconnect, device number 9 [ 243.794117][ T3396] usb 2-1: SerialNumber: syz [ 243.894964][ T3396] usb 2-1: config 0 descriptor?? [ 244.132176][ T3396] hso 2-1:0.0: Failed to find BULK IN ep [ 244.152552][ T3396] usb-storage 2-1:0.0: USB Mass Storage device detected [ 244.191103][T10542] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 244.209923][T10542] netlink: 'syz.2.1953': attribute type 3 has an invalid length. [ 244.233352][T10542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1953'. [ 244.362958][ T5896] usb 2-1: USB disconnect, device number 7 [ 244.699996][T10560] Scaler: ================= START STATUS ================= [ 244.713747][T10560] Scaler: ================== END STATUS ================== [ 244.843754][T10566] loop4: detected capacity change from 0 to 256 [ 244.862085][T10566] exfat: Deprecated parameter 'utf8' [ 244.878596][T10570] xfrm0: entered promiscuous mode [ 244.888989][T10568] xt_TCPMSS: Only works on TCP SYN packets [ 244.894503][T10566] exfat: Deprecated parameter 'namecase' [ 244.920626][T10566] exfat: Deprecated parameter 'namecase' [ 244.949004][T10566] exfat: Deprecated parameter 'utf8' [ 244.955953][T10570] xfrm0: entered allmulticast mode [ 244.982214][T10566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 245.003206][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 245.003225][ T29] audit: type=1326 audit(1772023727.874:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.2.1967" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7542b9c629 code=0x0 [ 245.038328][T10566] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 245.128615][ T29] audit: type=1800 audit(1772023727.954:72): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1965" name="file2" dev="loop4" ino=1048634 res=0 errno=0 [ 245.341717][T10584] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 245.360677][T10584] openvswitch: netlink: EtherType 0 is less than min 600 [ 245.466350][T10586] loop2: detected capacity change from 0 to 8 [ 245.527381][T10586] SQUASHFS error: Failed to read block 0x1ec: -5 [ 245.551556][T10586] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 245.684186][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 245.750472][T10603] netlink: 'syz.1.1982': attribute type 10 has an invalid length. [ 245.815841][T10603] macvlan0: entered promiscuous mode [ 245.822276][T10603] macvlan0: entered allmulticast mode [ 245.904188][T10603] veth1_vlan: entered allmulticast mode [ 245.936931][T10603] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 246.116514][T10610] loop2: detected capacity change from 0 to 4096 [ 246.215752][T10612] loop0: detected capacity change from 0 to 4096 [ 246.254672][T10612] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 246.258154][T10610] ntfs3(loop2): ino=5, "/" indx_read_ra [ 246.303266][T10610] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 246.486693][T10612] ntfs3(loop0): ino=19, mi_enum_attr [ 246.492884][T10612] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 246.580641][T10626] loop4: detected capacity change from 0 to 1024 [ 246.664228][T10612] ntfs3(loop0): failed to convert "c46c" to cp1251 [ 246.706040][T10612] ntfs3(loop0): ino=20, mi_enum_attr [ 246.983973][ T3396] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 247.064476][T10642] loop4: detected capacity change from 0 to 764 [ 247.097178][T10642] rock: directory entry would overflow storage [ 247.111249][T10642] rock: sig=0x5245, size=8, remaining=5 [ 247.135117][T10644] loop0: detected capacity change from 0 to 256 [ 247.142606][T10644] exfat: Deprecated parameter 'utf8' [ 247.158866][ T3396] usb 3-1: Using ep0 maxpacket: 16 [ 247.175617][ T3396] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 247.194991][T10644] exfat: Deprecated parameter 'utf8' [ 247.201752][ T3396] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.245355][T10644] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 247.259816][ T3396] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 247.288847][ T3396] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 247.329372][ T3396] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 247.364986][ T3396] usb 3-1: config 1 interface 0 has no altsetting 0 [ 247.404052][ T3396] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 247.444022][ T3396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.470558][ T3396] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 247.625558][T10635] loop3: detected capacity change from 0 to 32768 [ 247.704643][T10635] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 247.704643][T10635] [ 247.718276][ T3396] scsi host1: usb-storage 3-1:1.0 [ 247.771707][T10635] ERROR: (device loop3): remounting filesystem as read-only [ 247.809306][T10635] ialloc: diAlloc returned -5! [ 247.882701][T10661] loop4: detected capacity change from 0 to 64 [ 247.930714][ T3396] usb 3-1: USB disconnect, device number 12 [ 248.049418][ T29] audit: type=1800 audit(1772023730.924:73): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2010" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 248.296171][T10674] syz.1.2016 (10674): /proc/10672/oom_adj is deprecated, please use /proc/10672/oom_score_adj instead. [ 248.832296][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 248.997699][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'. [ 249.207686][T10717] netlink: 'syz.2.2038': attribute type 2 has an invalid length. [ 249.216285][T10717] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2038'. [ 249.742371][T10744] loop1: detected capacity change from 0 to 1024 [ 249.794042][ T5896] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 249.801231][T10744] hfsplus: invalid extended attribute record [ 249.815121][T10744] hfsplus: b-tree write err: -5, ino 2 [ 249.881689][ T177] hfsplus: b-tree write err: -5, ino 25 [ 249.890493][ T177] hfsplus: b-tree write err: -5, ino 4 [ 249.901889][ T177] hfsplus: b-tree write err: -5, ino 2 [ 249.958339][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.974001][ T42] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 250.012027][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.014684][T10751] netlink: 'syz.1.2054': attribute type 49 has an invalid length. [ 250.048613][ T5896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.065629][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.083920][ T5896] usb 3-1: Product: syz [ 250.094047][ T5896] usb 3-1: Manufacturer: syz [ 250.103957][ T5896] usb 3-1: SerialNumber: syz [ 250.177111][ T42] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 250.186048][ T42] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 250.205197][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 250.225992][ T42] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 250.254141][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 250.284030][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 250.320583][ T42] usb 1-1: string descriptor 0 read error: -22 [ 250.338338][ T42] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 250.363422][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.393739][ T42] usb 1-1: config 0 descriptor?? [ 250.403796][T10747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 250.417101][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 250.423588][ T42] hub 1-1:0.0: probe with driver hub failed with error -5 [ 250.474723][T10741] loop4: detected capacity change from 0 to 32768 [ 250.491904][ T42] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 250.504354][T10741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2049 (10741) [ 250.534470][ T5896] usb 3-1: skipping empty audio interface (v1) [ 250.549458][T10741] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.586445][T10741] BTRFS info (device loop4): using sha256 checksum algorithm [ 250.615604][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 250.739173][ T5904] usb 1-1: USB disconnect, device number 11 [ 250.739214][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 250.842873][T10741] BTRFS info (device loop4): enabling ssd optimizations [ 250.857683][T10741] BTRFS info (device loop4): turning on async discard [ 250.876592][T10741] BTRFS info (device loop4): enabling free space tree [ 250.889559][ T5896] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 250.959212][ T5896] usb 3-1: USB disconnect, device number 13 [ 251.035095][ T6226] udevd[6226]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.118226][ T5826] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.360362][T10753] loop3: detected capacity change from 0 to 40427 [ 251.390251][T10753] F2FS-fs (loop3): build fault injection rate: 690 [ 251.404898][T10753] F2FS-fs (loop3): invalid crc value [ 251.421469][T10788] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2062'. [ 251.478387][T10788] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2062'. [ 251.534917][T10791] loop0: detected capacity change from 0 to 1024 [ 251.619888][T10795] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.843316][T10753] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.956317][T10753] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.364602][T10817] loop4: detected capacity change from 0 to 1024 [ 252.539235][ T13] hfsplus: b-tree write err: -5, ino 25 [ 252.559149][ T13] hfsplus: b-tree write err: -5, ino 4 [ 252.579995][T10823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.583525][ T13] hfsplus: b-tree write err: -5, ino 2 [ 253.727456][T10833] loop1: detected capacity change from 0 to 32768 [ 253.744940][T10868] loop4: detected capacity change from 0 to 164 [ 253.762350][T10833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2087 (10833) [ 253.791934][T10868] Symlink component flag not implemented [ 253.807528][T10868] Symlink component flag not implemented (7) [ 253.832954][T10833] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.889122][T10833] BTRFS info (device loop1): using sha256 checksum algorithm [ 254.001655][T10883] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 254.015359][T10883] overlayfs: missing 'lowerdir' [ 254.096102][T10870] loop3: detected capacity change from 0 to 4096 [ 254.148913][T10870] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 254.197472][T10833] BTRFS info (device loop1): enabling ssd optimizations [ 254.213093][T10894] loop4: detected capacity change from 0 to 512 [ 254.234012][T10833] BTRFS info (device loop1): turning on async discard [ 254.257159][T10833] BTRFS info (device loop1): enabling free space tree [ 254.376113][T10894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.452697][T10894] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.502798][ T5824] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.550206][T10902] loop0: detected capacity change from 0 to 256 [ 254.566039][T10904] proc: Bad value for 'gid' [ 254.580226][T10894] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.2108: corrupted inode contents [ 254.631078][T10894] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.2108: mark_inode_dirty error [ 254.672998][T10894] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.2108: corrupted inode contents [ 254.733497][T10902] FAT-fs (loop0): Directory bread(block 64) failed [ 254.774019][T10902] FAT-fs (loop0): Directory bread(block 65) failed [ 254.782775][T10902] FAT-fs (loop0): Directory bread(block 66) failed [ 254.844139][T10902] FAT-fs (loop0): Directory bread(block 67) failed [ 254.860888][T10902] FAT-fs (loop0): Directory bread(block 68) failed [ 254.906782][T10902] FAT-fs (loop0): Directory bread(block 69) failed [ 254.926415][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.954053][T10902] FAT-fs (loop0): Directory bread(block 70) failed [ 254.961278][T10909] mmap: syz.2.2115 (10909): VmData 37466112 exceed data ulimit 2840. Update limits or use boot option ignore_rlimit_data. [ 254.991984][T10902] FAT-fs (loop0): Directory bread(block 71) failed [ 255.010379][T10902] FAT-fs (loop0): Directory bread(block 72) failed [ 255.044294][T10902] FAT-fs (loop0): Directory bread(block 73) failed [ 255.414994][T10916] loop3: detected capacity change from 0 to 4096 [ 255.467111][T10928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.474158][T10916] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 255.626057][T10916] ntfs3(loop3): ino=18, mi_enum_attr [ 255.659269][T10916] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 255.754862][T10916] ntfs3(loop3): ino=0, attr_set_size_ex [ 255.960461][T10937] loop3: detected capacity change from 0 to 256 [ 255.987906][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.995813][T10922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.004742][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.012493][T10922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.076759][T10922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.177871][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.185573][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.487122][T10947] loop2: detected capacity change from 0 to 4096 [ 256.509055][T10947] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 256.619159][T10947] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 256.643194][T10947] ntfs3(loop2): ino=19, mi_enum_attr [ 256.660047][T10958] loop1: detected capacity change from 0 to 1024 [ 256.671494][T10960] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 256.739311][T10947] ntfs3(loop2): failed to convert "c46c" to iso8859-7 [ 256.765864][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2139'. [ 256.793158][T10962] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 256.793804][T10947] ntfs3(loop2): ino=20, mi_enum_attr [ 256.914272][ T29] audit: type=1326 audit(1772023739.784:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 256.968135][ T761] hfsplus: b-tree write err: -5, ino 25 [ 256.980810][ T761] hfsplus: b-tree write err: -5, ino 4 [ 257.011631][ T29] audit: type=1326 audit(1772023739.784:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.037633][ T761] hfsplus: b-tree write err: -5, ino 2 [ 257.046361][T10969] loop4: detected capacity change from 0 to 16 [ 257.054548][ T761] hfsplus: b-tree write err: -5, ino 23 [ 257.071655][T10969] erofs (device loop4): mounted with root inode @ nid 36. [ 257.100591][T10969] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 257.120420][ T29] audit: type=1326 audit(1772023739.784:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.148297][T10969] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 257.164179][T10969] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 257.182339][T10969] erofs (device loop4): read error -117 @ 0 of nid 89 [ 257.198485][ T29] audit: type=1326 audit(1772023739.784:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.269391][T10973] usb usb7: usbfs: process 10973 (syz.0.2146) did not claim interface 0 before use [ 257.285822][ T29] audit: type=1326 audit(1772023739.784:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.322051][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 257.395020][ T29] audit: type=1326 audit(1772023739.784:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.429689][ T29] audit: type=1326 audit(1772023739.784:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.479118][ T29] audit: type=1326 audit(1772023739.784:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.506674][ T29] audit: type=1326 audit(1772023739.784:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.534440][ T29] audit: type=1326 audit(1772023739.784:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x50000 [ 257.564515][T10975] bridge1: entered allmulticast mode [ 257.627162][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2147'. [ 257.852437][T10986] loop4: detected capacity change from 0 to 1024 [ 257.866520][T10987] loop1: detected capacity change from 0 to 1024 [ 257.909589][T10986] hfsplus: bad catalog file entry [ 258.426651][T11005] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 258.474489][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2162'. [ 258.563066][T11011] loop0: detected capacity change from 0 to 128 [ 259.124344][T11031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2173'. [ 259.782375][T11054] loop1: detected capacity change from 0 to 8 [ 259.838905][T11054] SQUASHFS error: Unable to read inode 0x87 [ 259.883686][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 259.900002][T11058] netlink: 'syz.2.2185': attribute type 29 has an invalid length. [ 259.940835][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 260.448829][T11079] loop2: detected capacity change from 0 to 512 [ 260.482862][T11081] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2197'. [ 260.518022][T11079] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 260.587403][T11079] EXT4-fs (loop2): orphan cleanup on readonly fs [ 260.617541][T11079] EXT4-fs (loop2): 1 truncate cleaned up [ 260.733372][T11079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.811344][T11089] loop4: detected capacity change from 0 to 4096 [ 260.824578][T11079] overlay: filesystem on ./file0 is read-only [ 260.885494][T11089] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 260.915360][T11097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2205'. [ 260.952449][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.036448][T11089] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 261.054465][ T5926] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 261.087820][T11089] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 261.236964][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 261.272023][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.312883][ T5926] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 261.354147][ T5926] usb 2-1: config 1 has no interface number 1 [ 261.360826][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 261.403565][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 61, changing to 7 [ 261.477283][ T5926] usb 2-1: string descriptor 0 read error: -22 [ 261.504172][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.544044][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.611551][ T5926] usb 2-1: 2:1 : sample bitwidth 64 in over sample bytes 5 [ 261.626965][T11084] loop3: detected capacity change from 0 to 32768 [ 261.634255][ T5926] usb 2-1: 2:1 : unsupported sample bitwidth 64 in 5 bytes [ 261.757688][T11084] jfs_strtoUCS: char2uni returned -22. [ 261.790798][T11084] charset = cp936, char = 0xc5 [ 261.809882][T11113] bond4 (unregistering): Released all slaves [ 262.100501][ T5926] usb 2-1: USB disconnect, device number 8 [ 262.691138][T11118] loop2: detected capacity change from 0 to 32768 [ 262.724738][T11118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2215 (11118) [ 262.798318][T11118] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.827315][T11147] netlink: 'syz.4.2228': attribute type 21 has an invalid length. [ 262.858632][T11118] BTRFS info (device loop2): using crc32c checksum algorithm [ 262.885470][T11118] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 263.134657][T11118] BTRFS info (device loop2): rebuilding free space tree [ 263.190888][T11118] BTRFS info (device loop2): disabling free space tree [ 263.198663][T11118] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.210058][T11118] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.242546][T11118] BTRFS info (device loop2): setting nodatasum [ 263.254262][T11118] BTRFS info (device loop2): setting nodatacow [ 263.261370][T11118] BTRFS info (device loop2): enabling ssd optimizations [ 263.279623][T11118] BTRFS info (device loop2): using spread ssd allocation scheme [ 263.288596][T11118] BTRFS info (device loop2): turning on sync discard [ 263.324040][T11118] BTRFS info (device loop2): enabling disk space caching [ 263.332222][T11118] BTRFS info (device loop2): force clearing of disk cache [ 263.429133][T11179] loop3: detected capacity change from 0 to 2048 [ 263.545413][T11183] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.621885][T11179] NILFS (loop3): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 263.666631][T11179] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 263.752075][T11179] Remounting filesystem read-only [ 263.772298][T11179] NILFS (loop3): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 263.801384][T11179] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 263.831342][T11179] NILFS (loop3): error -5 truncating bmap (ino=16) [ 263.854815][ T5833] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.995279][ T5841] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 264.265066][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2249'. [ 264.795811][T11222] loop1: detected capacity change from 0 to 512 [ 264.813168][ T29] kauditd_printk_skb: 1871 callbacks suppressed [ 264.813189][ T29] audit: type=1326 audit(1772023747.684:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 264.873515][T11222] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 264.876964][T11229] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2259'. [ 264.918856][T11222] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2257: attempt to clear invalid blocks 2 len 1 [ 264.942717][T11222] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 264.943904][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 264.960862][ C0] EXT4-fs (loop1): initial error at time 1772023747: ext4_clear_blocks:876: inode 13 [ 264.971592][ C0] EXT4-fs (loop1): last error at time 1772023747: ext4_clear_blocks:876: inode 13 [ 264.995356][T11222] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 265.026026][ T29] audit: type=1326 audit(1772023747.684:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 265.039432][T11222] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2257: invalid indirect mapped block 1819239214 (level 0) [ 265.050471][ T29] audit: type=1326 audit(1772023747.724:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 265.050523][ T29] audit: type=1326 audit(1772023747.724:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 265.121655][ T29] audit: type=1326 audit(1772023747.724:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165499c629 code=0x7ffc0000 [ 265.146059][T11222] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 265.148743][T11222] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2257: invalid indirect mapped block 1819239214 (level 1) [ 265.174430][T11222] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 265.214568][T11222] EXT4-fs (loop1): 1 truncate cleaned up [ 265.246217][T11222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.351056][T11238] loop2: detected capacity change from 0 to 64 [ 265.396118][T11238] [ 265.398718][T11238] ====================================================== [ 265.406447][T11238] WARNING: possible circular locking dependency detected [ 265.413604][T11238] syzkaller #0 Not tainted [ 265.418209][T11238] ------------------------------------------------------ [ 265.425766][T11238] syz.2.2264/11238 is trying to acquire lock: [ 265.432204][T11238] ffff8880332b80b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 265.442266][T11238] [ 265.442266][T11238] but task is already holding lock: [ 265.450460][T11238] ffff888051fac1f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 265.461851][T11238] [ 265.461851][T11238] which lock already depends on the new lock. [ 265.461851][T11238] [ 265.473062][T11238] [ 265.473062][T11238] the existing dependency chain (in reverse order) is: [ 265.482942][T11238] [ 265.482942][T11238] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 265.492693][T11238] __mutex_lock+0x19f/0x1300 [ 265.498477][T11238] hfs_extend_file+0xf2/0x15e0 [ 265.504437][T11238] hfs_bmap_reserve+0x107/0x430 [ 265.510728][T11238] __hfs_ext_write_extent+0x1fa/0x470 [ 265.516781][T11238] hfs_ext_write_extent+0x17e/0x210 [ 265.523069][T11238] hfs_write_inode+0x117/0x960 [ 265.528930][T11238] __writeback_single_inode+0x75a/0x11a0 [ 265.535660][T11238] writeback_sb_inodes+0x992/0x1a20 [ 265.541530][T11238] wb_writeback+0x456/0xb70 [ 265.546863][T11238] wb_workfn+0x414/0xf50 [ 265.551846][T11238] process_one_work+0x949/0x1650 [ 265.557360][T11238] worker_thread+0xb46/0x1140 [ 265.563126][T11238] kthread+0x388/0x470 [ 265.568025][T11238] ret_from_fork+0x51e/0xb90 [ 265.573789][T11238] ret_from_fork_asm+0x1a/0x30 [ 265.579200][T11238] [ 265.579200][T11238] -> #0 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 265.587682][T11238] __lock_acquire+0x15a5/0x2cf0 [ 265.593446][T11238] lock_acquire+0xf0/0x2e0 [ 265.598597][T11238] __mutex_lock+0x19f/0x1300 [ 265.603918][T11238] hfs_find_init+0x18e/0x300 [ 265.609151][T11238] hfs_extend_file+0x35c/0x15e0 [ 265.614865][T11238] hfs_bmap_reserve+0x107/0x430 [ 265.620701][T11238] hfs_cat_create+0x20f/0x800 [ 265.626642][T11238] hfs_mkdir+0x79/0xe0 [ 265.631472][T11238] vfs_mkdir+0x413/0x630 [ 265.637017][T11238] filename_mkdirat+0x285/0x510 [ 265.643327][T11238] __se_sys_mkdir+0x34/0x150 [ 265.649163][T11238] do_syscall_64+0x14d/0xf80 [ 265.654753][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.661719][T11238] [ 265.661719][T11238] other info that might help us debug this: [ 265.661719][T11238] [ 265.672596][T11238] Possible unsafe locking scenario: [ 265.672596][T11238] [ 265.680510][T11238] CPU0 CPU1 [ 265.685919][T11238] ---- ---- [ 265.692092][T11238] lock(&HFS_I(tree->inode)->extents_lock); [ 265.698198][T11238] lock(&tree->tree_lock#2/1); [ 265.705887][T11238] lock(&HFS_I(tree->inode)->extents_lock); [ 265.715373][T11238] lock(&tree->tree_lock#2/1); [ 265.720351][T11238] [ 265.720351][T11238] *** DEADLOCK *** [ 265.720351][T11238] [ 265.729696][T11238] 4 locks held by syz.2.2264/11238: [ 265.735300][T11238] #0: ffff8880332bc420 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 265.744987][T11238] #1: ffff888051fabd20 (&type->i_mutex_dir_key#25/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 265.756449][T11238] #2: ffff88807a8ae0b0 (&tree->tree_lock#2){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 265.767148][T11238] #3: ffff888051fac1f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 265.779846][T11238] [ 265.779846][T11238] stack backtrace: [ 265.786579][T11238] CPU: 0 UID: 0 PID: 11238 Comm: syz.2.2264 Not tainted syzkaller #0 PREEMPT(full) [ 265.786609][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.786629][T11238] Call Trace: [ 265.786639][T11238] [ 265.786647][T11238] dump_stack_lvl+0xe8/0x150 [ 265.786677][T11238] print_circular_bug+0x2e1/0x300 [ 265.786708][T11238] check_noncircular+0x12e/0x150 [ 265.786739][T11238] __lock_acquire+0x15a5/0x2cf0 [ 265.786763][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 265.786789][T11238] ? kasan_save_track+0x4f/0x80 [ 265.786806][T11238] ? kasan_save_track+0x3e/0x80 [ 265.786822][T11238] ? __kasan_kmalloc+0x93/0xb0 [ 265.786840][T11238] ? __kmalloc_noprof+0x35c/0x760 [ 265.786857][T11238] ? hfs_find_init+0xaa/0x300 [ 265.786875][T11238] ? hfs_extend_file+0x35c/0x15e0 [ 265.786898][T11238] ? hfs_bmap_reserve+0x107/0x430 [ 265.786921][T11238] lock_acquire+0xf0/0x2e0 [ 265.786943][T11238] ? hfs_find_init+0x18e/0x300 [ 265.786965][T11238] __mutex_lock+0x19f/0x1300 [ 265.786990][T11238] ? hfs_find_init+0x18e/0x300 [ 265.787011][T11238] ? hfs_find_init+0x18e/0x300 [ 265.787031][T11238] ? __pfx___mutex_lock+0x10/0x10 [ 265.787055][T11238] ? rcu_is_watching+0x15/0xb0 [ 265.787082][T11238] ? __kmalloc_noprof+0x37d/0x760 [ 265.787099][T11238] ? kasan_save_track+0x4f/0x80 [ 265.787114][T11238] ? hfs_find_init+0xaa/0x300 [ 265.787130][T11238] ? __kmalloc_noprof+0x1b8/0x760 [ 265.787149][T11238] hfs_find_init+0x18e/0x300 [ 265.787168][T11238] hfs_extend_file+0x35c/0x15e0 [ 265.787195][T11238] ? __pfx_hfs_extend_file+0x10/0x10 [ 265.787218][T11238] ? __mutex_lock+0x319/0x1300 [ 265.787249][T11238] ? __pfx___mutex_lock+0x10/0x10 [ 265.787273][T11238] ? rcu_is_watching+0x15/0xb0 [ 265.787305][T11238] hfs_bmap_reserve+0x107/0x430 [ 265.787333][T11238] hfs_cat_create+0x20f/0x800 [ 265.787357][T11238] ? __pfx_hfs_cat_create+0x10/0x10 [ 265.787386][T11238] ? hfs_new_inode+0x92d/0xc70 [ 265.787415][T11238] hfs_mkdir+0x79/0xe0 [ 265.787438][T11238] vfs_mkdir+0x413/0x630 [ 265.787462][T11238] filename_mkdirat+0x285/0x510 [ 265.787485][T11238] ? __pfx_filename_mkdirat+0x10/0x10 [ 265.787507][T11238] ? do_getname+0x151/0x250 [ 265.787530][T11238] __se_sys_mkdir+0x34/0x150 [ 265.787553][T11238] do_syscall_64+0x14d/0xf80 [ 265.787576][T11238] ? trace_irq_disable+0x3b/0x150 [ 265.787603][T11238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.787620][T11238] ? clear_bhb_loop+0x40/0x90 [ 265.787640][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.787658][T11238] RIP: 0033:0x7f7542b9c629 [ 265.787685][T11238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.787702][T11238] RSP: 002b:00007f7543a39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 265.787723][T11238] RAX: ffffffffffffffda RBX: 00007f7542e15fa0 RCX: 00007f7542b9c629 [ 265.787736][T11238] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000200000000b00 [ 265.787748][T11238] RBP: 00007f7542c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 265.787760][T11238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.787771][T11238] R13: 00007f7542e16038 R14: 00007f7542e15fa0 R15: 00007ffe7b964b38 [ 265.787791][T11238] [ 266.226271][T11224] loop4: detected capacity change from 0 to 32768 [ 266.244299][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.300088][T11224] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 266.362647][T11224] XFS (loop4): Ending clean mount [ 266.397709][ T5826] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791