last executing test programs: 1.19537404s ago: executing program 1 (id=13483): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe3, &(0x7f0000001040), &(0x7f00000000c0)=0x4) 1.146371943s ago: executing program 3 (id=13485): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x1}, 0x1c) 1.003507821s ago: executing program 2 (id=13487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x4c, 0x30, 0x205, 0x70bd2d, 0x25dfdbff, {}, [{0x38, 0x1, [@m_ipt={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) 995.070732ms ago: executing program 1 (id=13488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x80d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) 986.310592ms ago: executing program 3 (id=13490): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6a, 0x7, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0x81, 0x3}, {0x6, 0x82, 0x80, 0xc}]}) 826.066242ms ago: executing program 2 (id=13492): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) 801.288173ms ago: executing program 1 (id=13493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0xe4}}, 0x20) 755.368706ms ago: executing program 0 (id=13494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000070}, 0x4) 735.740187ms ago: executing program 3 (id=13495): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x118, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @nested={0xc, 0x36, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @pid}]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 633.896873ms ago: executing program 2 (id=13496): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x9, 0xfc, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 632.985413ms ago: executing program 0 (id=13497): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeae}) 576.399147ms ago: executing program 1 (id=13498): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 508.22722ms ago: executing program 2 (id=13499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x30, 0x201, 0x8000, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x28}}, 0x0) 459.648274ms ago: executing program 1 (id=13500): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) 425.168625ms ago: executing program 3 (id=13501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x4000000) 365.978288ms ago: executing program 0 (id=13502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003d00)={0x14, 0x4, 0x7, 0x3, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8800) 313.122952ms ago: executing program 2 (id=13503): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0xa0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x100000}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff62, 0x0, 0x0, 0x9}) 304.099132ms ago: executing program 3 (id=13504): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000140)={{0x200000010000000a, 0x71}, {0x200000010000000a, 0x3}, 0x400005, 0x5}) 279.861304ms ago: executing program 0 (id=13505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f00)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000e40, 0x0, 0x0, 0x200000000e70, 0x200000000ea0], 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000fbffffff0000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 205.466998ms ago: executing program 1 (id=13506): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 89.993105ms ago: executing program 0 (id=13507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 89.801195ms ago: executing program 3 (id=13508): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x22000c0, &(0x7f0000000180)={[{@codepage={'codepage', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0) 87.815805ms ago: executing program 2 (id=13509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 0 (id=13510): r0 = socket$isdn_base(0x22, 0x2, 0x10) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) kernel console output (not intermixed with test programs): sb 1-1: Manufacturer: syz [ 1522.564895][ T6927] usb 1-1: SerialNumber: syz [ 1522.583456][ T6927] usb 1-1: config 0 descriptor?? [ 1522.622531][ T6927] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1522.632376][ T23] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1522.658121][ T5954] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 10 /dev/loop2 scanned by udevd (5954) [ 1522.853444][ T6927] usb 1-1: USB disconnect, device number 55 [ 1522.860289][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1522.888320][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1522.910390][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.930098][ T23] usb 2-1: Product: syz [ 1522.941272][ T23] usb 2-1: Manufacturer: syz [ 1522.952450][ T23] usb 2-1: SerialNumber: syz [ 1522.969437][ T23] r8152-cfgselector 2-1: config 0 descriptor?? [ 1523.214072][ T23] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1523.464928][ T23] usb 2-1: USB disconnect, device number 68 [ 1523.705636][ T393] loop0: detected capacity change from 0 to 256 [ 1523.716558][ T393] exfat: Deprecated parameter 'namecase' [ 1523.783186][ T393] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1523.845934][ T381] loop3: detected capacity change from 0 to 32768 [ 1523.862462][ T381] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.11621 (381) [ 1523.914052][ T381] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1523.935436][ T381] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1523.944723][ T381] BTRFS info (device loop3): force zlib compression, level 3 [ 1523.978167][ T381] BTRFS info (device loop3): force clearing of disk cache [ 1523.985341][ T381] BTRFS info (device loop3): setting nodatasum [ 1524.022607][ T381] BTRFS info (device loop3): allowing degraded mounts [ 1524.029550][ T381] BTRFS info (device loop3): enabling disk space caching [ 1524.073994][ T381] BTRFS info (device loop3): disk space caching is enabled [ 1524.339672][ T381] BTRFS info (device loop3): auto enabling async discard [ 1524.397028][ T381] BTRFS info (device loop3): rebuilding free space tree [ 1524.459285][ T381] BTRFS info (device loop3): disabling free space tree [ 1524.472859][ T381] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1524.498387][ T381] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1524.584468][ T390] loop2: detected capacity change from 0 to 32768 [ 1524.722956][ T390] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1524.722956][ T390] [ 1524.785554][ T390] ERROR: (device loop2): remounting filesystem as read-only [ 1524.815926][ T390] ERROR: (device loop2): jfs_unlink: [ 1524.815926][ T390] [ 1524.834404][ T5822] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1524.955362][ T5813] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1524.955362][ T5813] [ 1525.502603][ T433] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1525.622440][ T23] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1525.811964][ T416] loop0: detected capacity change from 0 to 32768 [ 1525.831385][ T23] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1525.845740][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.854466][ T23] usb 3-1: Product: syz [ 1525.868095][ T416] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1525.877499][ T23] usb 3-1: Manufacturer: syz [ 1525.880935][ T416] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1525.883971][ T23] usb 3-1: SerialNumber: syz [ 1525.902739][ T23] usb 3-1: config 0 descriptor?? [ 1525.994563][ T416] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1526.027559][T18808] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1526.058883][T18808] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1526.128954][ T23] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1526.153052][ T450] loop3: detected capacity change from 0 to 128 [ 1526.211482][T18808] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms [ 1526.221056][ T450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1526.260063][T18808] gfs2: fsid=syz:syz.0: jid=0: Done [ 1526.277416][ T416] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1526.334114][ T5822] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1526.379982][ T23] usb 3-1: USB disconnect, device number 78 [ 1526.647289][ T416] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1526.726964][ T468] loop1: detected capacity change from 0 to 64 [ 1526.764375][ T5811] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1526.764375][ T5811] inode = 11 2339 [ 1526.764375][ T5811] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 1526.809410][ T5811] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1526.822450][ T5811] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5811 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 1526.833173][ T5811] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1526.841377][ T5811] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1526.855994][ T5811] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1526.862520][ T468] syz.1.11653: attempt to access beyond end of device [ 1526.862520][ T468] loop1: rw=0, sector=6106906642, nr_sectors = 2 limit=64 [ 1526.865089][ T5811] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1526.868639][ T5811] gfs2: fsid=syz:syz.0: File system withdrawn [ 1526.893311][ T5811] CPU: 1 PID: 5811 Comm: syz-executor Not tainted syzkaller #0 [ 1526.900903][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1526.910976][ T5811] Call Trace: [ 1526.914265][ T5811] [ 1526.917208][ T5811] dump_stack_lvl+0x18c/0x250 [ 1526.921920][ T5811] ? kobject_uevent_env+0x363/0x8b0 [ 1526.927161][ T5811] ? show_regs_print_info+0x20/0x20 [ 1526.932375][ T5811] ? load_image+0x400/0x400 [ 1526.936892][ T5811] ? kobject_uevent_env+0x363/0x8b0 [ 1526.942125][ T5811] gfs2_withdraw+0xb24/0x13d0 [ 1526.946840][ T5811] ? gfs2_lm+0x240/0x240 [ 1526.951104][ T5811] ? preempt_schedule+0xc0/0xd0 [ 1526.955975][ T5811] ? gfs2_consist_inode_i+0xf5/0x110 [ 1526.961290][ T5811] gfs2_inode_refresh+0xb89/0x1000 [ 1526.966419][ T5811] ? gfs2_inode_metasync+0xf0/0xf0 [ 1526.971578][ T5811] ? gfs2_glock_nq+0xd4f/0x1420 [ 1526.976460][ T5811] gfs2_instantiate+0x162/0x220 [ 1526.981348][ T5811] gfs2_glock_wait+0x1d4/0x2a0 [ 1526.986139][ T5811] do_sync+0x4c6/0xe50 [ 1526.990219][ T5811] ? gfs2_quota_sync+0x411/0x5a0 [ 1526.995181][ T5811] ? bh_get+0x760/0x760 [ 1526.999356][ T5811] ? __lock_acquire+0x7d40/0x7d40 [ 1527.004402][ T5811] ? do_raw_spin_lock+0x11f/0x2c0 [ 1527.009541][ T5811] ? gfs2_quota_sync+0x411/0x5a0 [ 1527.014498][ T5811] ? do_raw_spin_unlock+0x121/0x230 [ 1527.019716][ T5811] gfs2_quota_sync+0x411/0x5a0 [ 1527.024501][ T5811] gfs2_sync_fs+0x4c/0xb0 [ 1527.028856][ T5811] sync_filesystem+0xea/0x220 [ 1527.033557][ T5811] generic_shutdown_super+0x6f/0x2b0 [ 1527.038866][ T5811] kill_block_super+0x44/0x90 [ 1527.043558][ T5811] deactivate_locked_super+0x97/0x100 [ 1527.048947][ T5811] cleanup_mnt+0x43b/0x4d0 [ 1527.053426][ T5811] task_work_run+0x1d4/0x260 [ 1527.058036][ T5811] ? task_work_cancel+0x220/0x220 [ 1527.063082][ T5811] ? exit_to_user_mode_loop+0x3b/0x110 [ 1527.068567][ T5811] exit_to_user_mode_loop+0xe6/0x110 [ 1527.073874][ T5811] exit_to_user_mode_prepare+0xee/0x180 [ 1527.079447][ T5811] syscall_exit_to_user_mode+0x1a/0x50 [ 1527.084927][ T5811] do_syscall_64+0x61/0xa0 [ 1527.089405][ T5811] ? clear_bhb_loop+0x40/0x90 [ 1527.094099][ T5811] ? clear_bhb_loop+0x40/0x90 [ 1527.098796][ T5811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1527.104744][ T5811] RIP: 0033:0x7f631bb9d1d7 [ 1527.109195][ T5811] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1527.128817][ T5811] RSP: 002b:00007ffff3f75428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1527.137253][ T5811] RAX: 0000000000000000 RBX: 00007f631bc31c3b RCX: 00007f631bb9d1d7 [ 1527.145242][ T5811] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff3f754e0 [ 1527.153253][ T5811] RBP: 00007ffff3f754e0 R08: 00007ffff3f764e0 R09: 00000000ffffffff [ 1527.161246][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff3f76570 [ 1527.169277][ T5811] R13: 00007f631bc31c3b R14: 000000000015fef8 R15: 00007ffff3f765b0 [ 1527.177305][ T5811] [ 1527.206744][ T6927] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1527.214661][ T468] Buffer I/O error on dev loop1, logical block 3053453321, async page read [ 1527.266214][ T468] Trying to free block not in datazone [ 1527.422605][ T470] loop2: detected capacity change from 0 to 128 [ 1527.460966][ T6927] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1527.477292][ T6927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.495626][ T6927] usb 4-1: Product: syz [ 1527.500003][ T6927] usb 4-1: Manufacturer: syz [ 1527.508034][ T6927] usb 4-1: SerialNumber: syz [ 1527.525002][ T6927] r8152-cfgselector 4-1: config 0 descriptor?? [ 1527.783817][ T6927] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1527.836890][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1527.876606][ T486] loop2: detected capacity change from 0 to 256 [ 1527.892422][ T486] exfat: Deprecated parameter 'namecase' [ 1527.930611][ T486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1528.025821][ T6927] usb 4-1: USB disconnect, device number 67 [ 1528.794232][ T520] loop1: detected capacity change from 0 to 4096 [ 1528.824517][ T520] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1528.903917][ T529] loop3: detected capacity change from 0 to 16 [ 1528.917377][ T529] erofs: (device loop3): mounted with root inode @ nid 36. [ 1528.939636][ T529] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1528.997004][ T520] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1528.999333][ T529] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1529.091654][ T529] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1529.127740][ T529] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1529.184044][ T28] audit: type=1800 audit(973083222.440:153): pid=529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11676" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1529.420121][ T541] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11682'. [ 1529.850546][ T555] loop2: detected capacity change from 0 to 128 [ 1529.878142][ T555] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1529.936316][ T555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1530.101135][ T535] loop0: detected capacity change from 0 to 32768 [ 1530.183412][ T535] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1530.245153][ T569] loop2: detected capacity change from 0 to 1024 [ 1530.262434][ T569] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1530.279221][ T569] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00ec01c, mo2=0082] [ 1530.297271][ T569] System zones: 0-1, 3-36 [ 1530.327332][ T573] xt_addrtype: ipv6 does not support BROADCAST matching [ 1530.337735][ T569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.440281][ T535] XFS (loop0): Ending clean mount [ 1530.603351][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.702430][ T5811] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1530.900665][ T583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11696'. [ 1530.947698][ T583] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1531.258115][T11865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1531.269451][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1531.546878][ T605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11708'. [ 1531.602706][ T28] audit: type=1326 audit(973083224.722:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=598 comm="syz.0.11705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f631bb9bf79 code=0x0 [ 1532.262752][T22189] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1532.444542][T18808] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1532.492763][T22189] usb 2-1: config index 0 descriptor too short (expected 1316, got 36) [ 1532.513708][T22189] usb 2-1: config 7 has an invalid interface number: 204 but max is -1 [ 1532.539954][T22189] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 1532.554415][T22189] usb 2-1: config 7 has no interface number 0 [ 1532.560585][T22189] usb 2-1: config 7 interface 204 has no altsetting 0 [ 1532.582369][T22189] usb 2-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 1532.597120][T22189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.606388][T22189] usb 2-1: Product: syz [ 1532.615094][T22189] usb 2-1: Manufacturer: syz [ 1532.622979][T22189] usb 2-1: SerialNumber: syz [ 1532.658233][T18808] usb 1-1: Using ep0 maxpacket: 16 [ 1532.675476][T18808] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1532.685348][T18808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.706940][T18808] usb 1-1: Product: syz [ 1532.711159][T18808] usb 1-1: Manufacturer: syz [ 1532.727009][T18808] usb 1-1: SerialNumber: syz [ 1532.742553][T18808] r8152-cfgselector 1-1: config 0 descriptor?? [ 1532.873713][T22189] smsc95xx v2.0.0 [ 1532.891066][T22189] smsc95xx 2-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1532.904826][ T656] kAFS: No cell specified [ 1532.932592][T22189] smsc95xx: probe of 2-1:7.204 failed with error -22 [ 1532.948671][T22189] usbhid 2-1:7.204: couldn't find an input interrupt endpoint [ 1532.982392][T22189] usb 2-1: USB disconnect, device number 69 [ 1533.195252][T18808] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1533.217918][T18808] r8152-cfgselector 1-1: USB disconnect, device number 56 [ 1533.380222][ T673] loop3: detected capacity change from 0 to 512 [ 1533.606720][ T682] loop2: detected capacity change from 0 to 1024 [ 1534.054221][ T692] loop2: detected capacity change from 0 to 4096 [ 1534.085243][ T698] loop0: detected capacity change from 0 to 256 [ 1534.182503][ T692] ntfs: volume version 3.1. [ 1534.224125][ T698] FAT-fs (loop0): Directory bread(block 64) failed [ 1534.236571][ T698] FAT-fs (loop0): Directory bread(block 65) failed [ 1534.276883][ T698] FAT-fs (loop0): Directory bread(block 66) failed [ 1534.305161][ T698] FAT-fs (loop0): Directory bread(block 67) failed [ 1534.311823][ T698] FAT-fs (loop0): Directory bread(block 68) failed [ 1534.335740][ T698] FAT-fs (loop0): Directory bread(block 69) failed [ 1534.344722][ T698] FAT-fs (loop0): Directory bread(block 70) failed [ 1534.375813][ T698] FAT-fs (loop0): Directory bread(block 71) failed [ 1534.405891][ T698] FAT-fs (loop0): Directory bread(block 72) failed [ 1534.435028][ T698] FAT-fs (loop0): Directory bread(block 73) failed [ 1534.557926][ T708] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1534.621400][ T710] ipt_REJECT: ECHOREPLY no longer supported. [ 1534.965517][ T28] audit: type=1326 audit(973083227.865:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1534.987725][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.047063][ T28] audit: type=1326 audit(973083227.874:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.149046][ T28] audit: type=1326 audit(973083227.874:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.193218][ T732] loop2: detected capacity change from 0 to 8 [ 1535.200488][ T732] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1535.223287][ T28] audit: type=1326 audit(973083227.893:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.277768][ T5954] udevd[5954]: incorrect cramfs checksum on /dev/loop2 [ 1535.320835][ T28] audit: type=1326 audit(973083227.893:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.355046][ T28] audit: type=1326 audit(973083227.893:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.414888][ T5954] udevd[5954]: incorrect cramfs checksum on /dev/loop2 [ 1535.416432][ T28] audit: type=1326 audit(973083227.893:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.485056][ T28] audit: type=1326 audit(973083227.893:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=721 comm="syz.3.11767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1535.507259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.532422][ T739] loop1: detected capacity change from 0 to 164 [ 1535.601226][ T744] loop3: detected capacity change from 0 to 64 [ 1535.865004][ T750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1535.921167][ T751] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1536.045491][ T758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11784'. [ 1536.278177][ T766] loop3: detected capacity change from 0 to 256 [ 1537.114268][ T811] loop2: detected capacity change from 0 to 16 [ 1537.150189][ T811] erofs: (device loop2): mounted with root inode @ nid 36. [ 1537.183623][ T811] syz.2.11806: attempt to access beyond end of device [ 1537.183623][ T811] loop2: rw=0, sector=32, nr_sectors = 8 limit=16 [ 1537.376513][ T814] loop1: detected capacity change from 0 to 4096 [ 1537.399921][ T814] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1537.437268][ T814] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1537.489091][ T814] ntfs: volume version 3.1. [ 1537.516125][ T822] binder: 821:822 unknown command 1074553619 [ 1537.522434][ T822] binder: 821:822 ioctl c0306201 200000000640 returned -22 [ 1537.691739][ T826] loop0: detected capacity change from 0 to 2048 [ 1537.754151][ T826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1538.067785][ T6927] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1538.191719][ T842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11821'. [ 1538.203235][ T842] netlink: 440 bytes leftover after parsing attributes in process `syz.0.11821'. [ 1538.330704][ T6927] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1538.344490][ T6927] usb 2-1: config 0 has no interface number 0 [ 1538.367881][ T6927] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1538.399552][ T6927] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 1538.448635][ T6927] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1538.486372][ T6927] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 1538.516795][ T852] loop2: detected capacity change from 0 to 16 [ 1538.517844][ T6927] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1538.540644][ T852] erofs: (device loop2): mounted with root inode @ nid 36. [ 1538.566095][ T6927] usb 2-1: Product: syz [ 1538.581172][ T6927] usb 2-1: Manufacturer: syz [ 1538.585871][ T6927] usb 2-1: SerialNumber: syz [ 1538.597769][ T852] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1538.614372][ T6927] usb 2-1: config 0 descriptor?? [ 1538.624645][ T830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1538.636769][ T852] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -24 in[64, 4032] out[1851] [ 1538.661270][ T852] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1538.670457][ T6927] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1538.864552][ T862] loop3: detected capacity change from 0 to 1024 [ 1538.881588][ T862] EXT4-fs: Ignoring removed mblk_io_submit option [ 1538.908618][ T860] loop0: detected capacity change from 0 to 1024 [ 1538.931517][T18808] usb 2-1: USB disconnect, device number 70 [ 1538.952547][ T862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.006118][ T860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.183952][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.193658][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.858432][ T890] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1539.927852][T18808] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1540.142100][T18808] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1540.173091][T18808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.194146][T18808] usb 2-1: config 0 descriptor?? [ 1540.208786][T18808] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1540.463416][ T912] loop0: detected capacity change from 0 to 4096 [ 1540.484809][ T912] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1540.508994][ T915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11852'. [ 1540.659331][T18808] gspca_stv06xx: I2C: Read error writing address: -71 [ 1540.683710][T18808] usb 2-1: USB disconnect, device number 71 [ 1540.720275][ T918] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11853'. [ 1541.380991][ T924] loop0: detected capacity change from 0 to 32768 [ 1541.431855][ T924] [ 1541.431855][ T924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.431855][ T924] [ 1541.521016][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.565373][ T946] kAFS: unable to lookup cell '.,' [ 1541.596596][ T5811] [ 1541.596596][ T5811] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.596596][ T5811] [ 1541.637428][ T5811] [ 1541.637428][ T5811] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1541.637428][ T5811] [ 1541.768877][ T950] : renamed from bridge_slave_0 [ 1542.023655][ T962] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 1542.053007][ T965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1542.111208][ T965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1542.173061][ T965] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1542.182158][ T965] netlink: 'syz.1.11872': attribute type 2 has an invalid length. [ 1542.245452][ T965] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1542.322843][ T973] CIFS mount error: No usable UNC path provided in device string! [ 1542.322843][ T973] [ 1542.370390][ T973] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1542.412116][ T976] loop1: detected capacity change from 0 to 256 [ 1542.489641][ T976] FAT-fs (loop1): Directory bread(block 64) failed [ 1542.509651][ T976] FAT-fs (loop1): Directory bread(block 65) failed [ 1542.518861][ T976] FAT-fs (loop1): Directory bread(block 66) failed [ 1542.550687][ T976] FAT-fs (loop1): Directory bread(block 67) failed [ 1542.570336][ T976] FAT-fs (loop1): Directory bread(block 68) failed [ 1542.576927][ T976] FAT-fs (loop1): Directory bread(block 69) failed [ 1542.607555][ T976] FAT-fs (loop1): Directory bread(block 70) failed [ 1542.626960][ T976] FAT-fs (loop1): Directory bread(block 71) failed [ 1542.644040][ T976] FAT-fs (loop1): Directory bread(block 72) failed [ 1542.661634][ T976] FAT-fs (loop1): Directory bread(block 73) failed [ 1542.833234][ T976] syz.1.11877: attempt to access beyond end of device [ 1542.833234][ T976] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 1542.868527][ T976] syz.1.11877: attempt to access beyond end of device [ 1542.868527][ T976] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 1542.937606][ T969] loop2: detected capacity change from 0 to 32768 [ 1543.012409][ T969] JBD2: Ignoring recovery information on journal [ 1543.120202][ T969] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1543.338953][ T969] (syz.2.11874,969,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0 [ 1543.411107][ T969] (syz.2.11874,969,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1543.434402][ T969] (syz.2.11874,969,1):ocfs2_mknod:298 ERROR: status = -2 [ 1543.441893][ T969] (syz.2.11874,969,1):ocfs2_mknod:502 ERROR: status = -2 [ 1543.460934][ T969] (syz.2.11874,969,1):ocfs2_create:676 ERROR: status = -2 [ 1543.665179][ T5813] ocfs2: Unmounting device (7,2) on (node local) [ 1544.122630][ T1032] loop1: detected capacity change from 0 to 256 [ 1544.214340][ T1032] FAT-fs (loop1): Directory bread(block 64) failed [ 1544.247150][ T1032] FAT-fs (loop1): Directory bread(block 65) failed [ 1544.253881][ T1032] FAT-fs (loop1): Directory bread(block 66) failed [ 1544.301110][ T1032] FAT-fs (loop1): Directory bread(block 67) failed [ 1544.307830][ T1032] FAT-fs (loop1): Directory bread(block 68) failed [ 1544.334527][ T1032] FAT-fs (loop1): Directory bread(block 69) failed [ 1544.364580][ T1032] FAT-fs (loop1): Directory bread(block 70) failed [ 1544.371208][ T1032] FAT-fs (loop1): Directory bread(block 71) failed [ 1544.419580][ T1032] FAT-fs (loop1): Directory bread(block 72) failed [ 1544.426220][ T1032] FAT-fs (loop1): Directory bread(block 73) failed [ 1544.628773][ T1052] loop0: detected capacity change from 0 to 16 [ 1544.654116][ T1052] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1544.905156][ T1064] loop1: detected capacity change from 0 to 2048 [ 1544.975519][ T1064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1545.361470][ T1076] loop3: detected capacity change from 0 to 2048 [ 1545.388124][ T1076] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1545.421330][ T1076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1545.792507][ T1068] loop0: detected capacity change from 0 to 32768 [ 1545.813082][ T1068] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.11915 (1068) [ 1545.837859][ T1091] loop3: detected capacity change from 0 to 256 [ 1545.853482][ T1091] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1545.866904][ T1068] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1545.905069][ T1068] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1545.913941][ T1068] BTRFS info (device loop0): enabling disk space caching [ 1545.969050][ T1068] BTRFS info (device loop0): force clearing of disk cache [ 1545.987117][ T1068] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1546.009074][ T1068] BTRFS info (device loop0): use zstd compression, level 3 [ 1546.034828][ T1068] BTRFS info (device loop0): disk space caching is enabled [ 1546.122723][ T1108] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1546.198174][ T1068] BTRFS info (device loop0): enabling ssd optimizations [ 1546.235232][ T1068] BTRFS info (device loop0): auto enabling async discard [ 1546.278217][ T1068] BTRFS info (device loop0): rebuilding free space tree [ 1546.324116][ T1068] BTRFS info (device loop0): disabling free space tree [ 1546.342276][ T1068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1546.380440][ T1068] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1546.516747][ T1125] : renamed from bridge_slave_0 (while UP) [ 1546.716733][ T5811] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1547.040084][ T1143] netlink: 'syz.0.11940': attribute type 10 has an invalid length. [ 1547.156376][ T1143] team0: Device vxcan1 is of different type [ 1547.272525][T22189] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1547.510612][T22189] usb 2-1: Using ep0 maxpacket: 16 [ 1547.537970][T22189] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1547.555367][T22189] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1547.581347][T22189] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1547.601458][T22189] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1547.624994][T22189] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1547.644423][T22189] usb 2-1: config 0 has no interface number 0 [ 1547.657267][T22189] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1547.683878][ T1162] kAFS: unparsable volume name [ 1547.694033][T22189] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1547.742655][T22189] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1547.758965][T22189] usb 2-1: too many endpoints for config 0 interface 125 altsetting 48: 120, using maximum allowed: 30 [ 1547.796139][T22189] usb 2-1: config 0 interface 125 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1547.834833][T22189] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1547.854998][T22189] usb 2-1: config 0 interface 125 has no altsetting 1 [ 1547.884365][T22189] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1547.913957][T22189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.922021][T22189] usb 2-1: Product: syz [ 1547.956430][T22189] usb 2-1: Manufacturer: syz [ 1547.961121][T22189] usb 2-1: SerialNumber: syz [ 1547.993841][T22189] usb 2-1: config 0 descriptor?? [ 1548.228412][ T1182] loop0: detected capacity change from 0 to 1024 [ 1548.568043][T22189] usb 2-1: USB disconnect, device number 72 [ 1548.644672][ T1199] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[1199] [ 1548.753163][ T1203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11971'. [ 1548.913650][ T1210] loop3: detected capacity change from 0 to 1024 [ 1549.095451][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11978'. [ 1549.430311][ T1232] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11985'. [ 1549.460299][ T1232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11985'. [ 1549.539972][ T23] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1549.642749][ T1240] netlink: 'syz.3.11989': attribute type 5 has an invalid length. [ 1549.677012][ T1238] loop0: detected capacity change from 0 to 8192 [ 1549.695368][ T1238] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1549.719302][ T1238] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1549.742393][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1549.753185][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1549.767710][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1549.781267][ T23] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1549.793993][ T1238] REISERFS (device loop0): using journaled data mode [ 1549.800962][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.809922][ T1238] reiserfs: using flush barriers [ 1549.821108][ T23] usb 2-1: Product: syz [ 1549.825431][ T23] usb 2-1: Manufacturer: syz [ 1549.846046][ T23] usb 2-1: SerialNumber: syz [ 1549.862313][ T1238] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1549.881923][ T23] usb 2-1: config 0 descriptor?? [ 1549.902743][ T1238] REISERFS (device loop0): checking transaction log (loop0) [ 1549.928440][ T1238] REISERFS (device loop0): Using r5 hash to sort names [ 1549.937164][ T1238] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1549.980340][ T1238] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1550.398488][T18808] usb 2-1: USB disconnect, device number 73 [ 1550.483288][ T1263] netlink: zone id is out of range [ 1550.488526][ T1263] netlink: zone id is out of range [ 1550.511502][ T1263] netlink: zone id is out of range [ 1550.525778][ T1263] netlink: zone id is out of range [ 1550.539604][ T1263] netlink: zone id is out of range [ 1550.549758][ T1263] netlink: zone id is out of range [ 1550.564991][ T1263] netlink: zone id is out of range [ 1550.597500][ T1263] netlink: zone id is out of range [ 1550.602701][ T1263] netlink: zone id is out of range [ 1550.616522][ T1263] netlink: zone id is out of range [ 1551.138309][ T1296] qrtr: Invalid version 195 [ 1551.187789][ T1300] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1551.271312][ T23] kernel write not supported for file /6041/clear_refs (pid: 23 comm: kworker/1:0) [ 1551.419899][ T1310] netlink: 'syz.2.12020': attribute type 1 has an invalid length. [ 1551.651841][ T1319] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1551.794549][T11865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.809503][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1552.155443][ T1342] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12034'. [ 1552.182375][ T1342] netlink: 6 bytes leftover after parsing attributes in process `syz.3.12034'. [ 1552.192111][ T1342] netlink: 6 bytes leftover after parsing attributes in process `syz.3.12034'. [ 1552.201568][ T1343] netlink: 'syz.2.12035': attribute type 10 has an invalid length. [ 1552.255673][ T1343] team0: Device vxcan1 is of different type [ 1552.306206][ T1345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12036'. [ 1552.519124][ T1351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1553.054251][ T1378] netlink: 'syz.2.12052': attribute type 10 has an invalid length. [ 1553.201232][ T1378] team0 (unregistering): Port device team_slave_0 removed [ 1553.243730][ T1378] team0 (unregistering): Port device team_slave_1 removed [ 1553.280826][ T1378] team0 (unregistering): Port device dummy0 removed [ 1553.337088][ T1381] netlink: 'syz.3.12054': attribute type 4 has an invalid length. [ 1553.345383][ T23] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1553.592797][ T23] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1553.602569][ T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1553.615720][ T1394] xt_hashlimit: overflow, try lower: 3/0 [ 1553.625585][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1553.646295][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1553.661041][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1553.676223][ T23] usb 2-1: Product: syz [ 1553.680440][ T23] usb 2-1: Manufacturer: syz [ 1553.685065][ T23] usb 2-1: SerialNumber: syz [ 1553.719484][ T23] usb 2-1: config 0 descriptor?? [ 1553.757787][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 1553.765784][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 1553.786895][ T23] usb 2-1: selecting invalid altsetting 0 [ 1554.100596][ T1409] netlink: 'syz.3.12067': attribute type 10 has an invalid length. [ 1554.135141][ T1413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12069'. [ 1554.309872][T18808] usb 2-1: USB disconnect, device number 74 [ 1554.660613][ T1431] loop3: detected capacity change from 0 to 512 [ 1554.719453][ T1431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1554.743347][ T1433] loop0: detected capacity change from 0 to 1764 [ 1554.805031][ T1433] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1554.881344][ T1431] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 1554.992244][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1555.492985][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12094'. [ 1555.509163][ T1467] netlink: 312 bytes leftover after parsing attributes in process `syz.3.12094'. [ 1555.685924][T18808] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1555.898778][T18808] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1555.910320][T18808] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1555.920257][T18808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1555.955167][T18808] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1555.974961][T18808] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1555.983227][T18808] usb 3-1: Product: syz [ 1556.018277][T18808] usb 3-1: Manufacturer: syz [ 1556.022967][T18808] usb 3-1: SerialNumber: syz [ 1556.035845][ T1487] netlink: 'syz.3.12104': attribute type 8 has an invalid length. [ 1556.052601][T18808] usb 3-1: config 0 descriptor?? [ 1556.075225][T18808] hub 3-1:0.0: bad descriptor, ignoring hub [ 1556.098498][T18808] hub: probe of 3-1:0.0 failed with error -5 [ 1556.119059][T18808] usb 3-1: selecting invalid altsetting 0 [ 1556.478147][ T1501] loop3: detected capacity change from 0 to 512 [ 1556.552114][ T23] usb 3-1: USB disconnect, device number 79 [ 1556.564993][ T1501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1556.595110][ T1501] __quota_error: 2 callbacks suppressed [ 1556.595127][ T1501] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1556.612721][ T1501] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1556.625799][ T1501] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.12111: Failed to acquire dquot type 0 [ 1556.793347][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.509309][ T1539] net_ratelimit: 335 callbacks suppressed [ 1557.509328][ T1539] openvswitch: netlink: Actions may not be safe on all matching packets [ 1558.005573][ T6927] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1558.232184][ T6927] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1558.251633][ T6927] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1558.261527][ T6927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1558.292603][ T1565] netlink: 388 bytes leftover after parsing attributes in process `syz.2.12142'. [ 1558.300679][ T6927] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1558.322400][ T6927] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1558.358752][ T6927] usb 1-1: Product: syz [ 1558.372051][ T6927] usb 1-1: Manufacturer: syz [ 1558.376792][ T6927] usb 1-1: SerialNumber: syz [ 1558.407215][ T6927] usb 1-1: config 0 descriptor?? [ 1558.419610][ T6927] hub 1-1:0.0: bad descriptor, ignoring hub [ 1558.433737][ T6927] hub: probe of 1-1:0.0 failed with error -5 [ 1558.449423][ T6927] usb 1-1: selecting invalid altsetting 0 [ 1558.749487][ T1578] SET target dimension over the limit! [ 1558.856100][T11865] usb 1-1: USB disconnect, device number 57 [ 1559.834372][ T1626] loop1: detected capacity change from 0 to 512 [ 1559.952216][ T1626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.050583][ T1626] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1560.061570][ T1626] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1560.071834][ T1626] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.12172: Failed to acquire dquot type 0 [ 1560.194684][ T1640] loop0: detected capacity change from 0 to 4096 [ 1560.212778][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.628053][ T1658] loop0: detected capacity change from 0 to 8 [ 1560.681450][ T1658] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1560.708185][ T1658] SQUASHFS error: Failed to read block 0x1c0: -5 [ 1560.744318][ T1658] SQUASHFS error: Unable to read metadata cache entry [1be] [ 1561.275747][ T1685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12199'. [ 1561.298948][ T1685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1561.680047][ T1698] IPVS: length: 218 != 24 [ 1561.848659][ T1677] loop1: detected capacity change from 0 to 32768 [ 1561.898018][ T1677] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 1561.898018][ T1677] [ 1562.047954][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1562.737599][ T1740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12226'. [ 1563.310228][ T1768] ..0ˆ: renamed from veth0_to_hsr (while UP) [ 1563.649363][ T1756] loop1: detected capacity change from 0 to 32768 [ 1563.682411][ T1756] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.12234 (1756) [ 1563.749008][ T1756] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1563.768260][ T1756] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1563.777031][ T1756] BTRFS info (device loop1): enabling disk space caching [ 1563.820056][ T1756] BTRFS info (device loop1): force clearing of disk cache [ 1563.869158][ T1756] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1563.893996][ T1756] BTRFS info (device loop1): use zstd compression, level 3 [ 1563.917679][ T1756] BTRFS info (device loop1): disk space caching is enabled [ 1564.129023][ T1756] BTRFS info (device loop1): enabling ssd optimizations [ 1564.136252][ T1756] BTRFS info (device loop1): auto enabling async discard [ 1564.166752][ T1756] BTRFS info (device loop1): rebuilding free space tree [ 1564.229591][ T1756] BTRFS info (device loop1): disabling free space tree [ 1564.236575][ T1756] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1564.270665][ T1756] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1564.365260][ T1817] loop0: detected capacity change from 0 to 512 [ 1564.444549][ T1817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.569116][ T1825] IPv6: NLM_F_CREATE should be specified when creating new route [ 1564.580634][ T5817] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1564.700675][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.002756][ T1837] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12266'. [ 1565.038824][ T1833] loop0: detected capacity change from 0 to 4096 [ 1565.177394][ T1841] netlink: 'syz.1.12261': attribute type 1 has an invalid length. [ 1565.280555][ T1833] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1565.440318][ T1848] tmpfs: Bad value for 'mpol' [ 1565.467732][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1565.702674][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12275'. [ 1565.875406][ T1861] loop3: detected capacity change from 0 to 4096 [ 1566.468746][ T28] audit: type=1400 audit(973083257.330:163): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=1889 comm="syz.0.12291" [ 1566.618056][ T1898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12295'. [ 1566.857737][ T6927] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1567.083957][ T6927] usb 3-1: config 0 has no interfaces? [ 1567.092019][ T6927] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1567.121370][ T6927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.157868][ T6927] usb 3-1: Product: syz [ 1567.162130][ T6927] usb 3-1: Manufacturer: syz [ 1567.181503][ T6927] usb 3-1: SerialNumber: syz [ 1567.206464][ T6927] r8152-cfgselector 3-1: config 0 descriptor?? [ 1567.286215][ T1924] loop0: detected capacity change from 0 to 64 [ 1567.441029][ T6927] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1567.540274][ T1934] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1567.560940][ T1934] [U] J"—e:ÀÆ" [ 1567.680467][ T6927] usb 3-1: USB disconnect, device number 80 [ 1567.818558][ T1944] loop1: detected capacity change from 0 to 256 [ 1568.349918][ T1942] loop0: detected capacity change from 0 to 32768 [ 1568.394019][ T1942] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1568.600120][ T1942] XFS (loop0): Ending clean mount [ 1568.621891][ T1942] XFS (loop0): Quotacheck needed: Please wait. [ 1568.732465][ T1942] XFS (loop0): Quotacheck: Done. [ 1568.855178][ T5811] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1569.205852][ T1993] program syz.2.12338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1569.217254][ T1991] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12336'. [ 1569.520591][ T2003] netlink: 'syz.0.12342': attribute type 1 has an invalid length. [ 1569.532165][ T2005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12343'. [ 1570.298283][ T2041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12362'. [ 1570.485321][ T2051] loop0: detected capacity change from 0 to 8 [ 1570.557838][ T2051] SQUASHFS error: xz decompression failed, data probably corrupt [ 1570.565664][ T2051] SQUASHFS error: Failed to read block 0x108: -5 [ 1570.609905][ T2051] SQUASHFS error: Unable to read metadata cache entry [106] [ 1570.617358][ T2051] SQUASHFS error: Unable to read inode 0x11f [ 1570.767408][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 1571.112702][ T2073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12377'. [ 1571.647714][ T2099] x_tables: unsorted underflow at hook 3 [ 1571.786040][ T788] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1571.863504][T11865] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1571.978640][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 1571.985772][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1571.999738][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1572.031671][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1572.041376][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1572.074705][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1572.079647][T11865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1572.084800][ T788] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1572.108378][T11865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.124148][T11865] usb 2-1: config 0 descriptor?? [ 1572.138762][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.172030][ T788] usb 4-1: config 0 descriptor?? [ 1572.178003][ T2093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1572.310454][T27460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.324678][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.495820][ T2128] loop0: detected capacity change from 0 to 2048 [ 1572.520045][ T2128] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1572.578441][ T2131] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1572.595887][T11865] ath6kl: Failed to submit usb control message: -71 [ 1572.609800][T11865] ath6kl: unable to send the bmi data to the device: -71 [ 1572.624203][T11865] ath6kl: Unable to send get target info: -71 [ 1572.653597][T11865] ath6kl: Failed to init ath6kl core: -71 [ 1572.669237][T11865] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1572.697459][T18808] usb 4-1: USB disconnect, device number 68 [ 1572.703494][ T5821] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1572.714143][ T2128] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1572.726253][ T2128] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1572.743344][ T2128] Remounting filesystem read-only [ 1572.754252][ T2128] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1572.762454][T11865] usb 2-1: USB disconnect, device number 75 [ 1572.802853][ T2133] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1572.895790][ T5811] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1572.903604][ T5811] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1572.911346][ T5811] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1572.920758][ T5811] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1572.930953][ T5811] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1572.940896][ T5811] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1572.997324][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1573.397749][ T2153] loop1: detected capacity change from 0 to 512 [ 1573.451732][ T2153] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.12415: iget: bad i_size value: 38620345925642 [ 1573.479293][ T28] audit: type=1326 audit(973083263.897:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.2.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76819bf79 code=0x7ffc0000 [ 1573.517158][ T28] audit: type=1326 audit(973083263.897:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.2.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76819bf79 code=0x7ffc0000 [ 1573.541884][ T28] audit: type=1326 audit(973083263.897:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.2.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ff76819bf79 code=0x7ffc0000 [ 1573.551091][ T2153] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.12415: couldn't read orphan inode 15 (err -117) [ 1573.564579][ T28] audit: type=1326 audit(973083263.897:167): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.2.12418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff76819bf79 code=0x7ffc0000 [ 1573.647945][ T2153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1573.890868][ T2172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1573.901668][ T2172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1573.911222][ T2172] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1573.920789][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12423'. [ 1573.931519][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12423'. [ 1573.955970][ T2173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12423'. [ 1574.041730][T11865] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1574.236861][T11865] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 1574.273211][T11865] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 1574.304160][T11865] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1574.325534][T11865] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1574.351854][T11865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.392114][ T2153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1574.422479][T11865] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1574.446683][T11865] usb 2-1: invalid MIDI in EP 0 [ 1574.546978][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.627196][T11865] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1574.676075][T11865] usb 2-1: USB disconnect, device number 76 [ 1575.287387][ T2228] netlink: 'syz.0.12449': attribute type 1 has an invalid length. [ 1575.295698][ T2228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12449'. [ 1575.416162][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.508460][ T2232] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12451'. [ 1575.528867][ T2232] openvswitch: netlink: Key type 29 is not supported [ 1575.702420][ T2236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12454'. [ 1576.044384][ T2249] loop0: detected capacity change from 0 to 1024 [ 1576.188167][T18104] hfsplus: b-tree write err: -5, ino 4 [ 1576.617194][ T2267] loop3: detected capacity change from 0 to 4096 [ 1576.763956][ T2276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12474'. [ 1576.989409][ T2284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12478'. [ 1577.522247][ T2306] loop0: detected capacity change from 0 to 764 [ 1577.772592][ T2312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12492'. [ 1577.951687][ T2298] loop1: detected capacity change from 0 to 32768 [ 1577.987265][ T2298] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.12484 (2298) [ 1578.036058][ T2298] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1578.054305][ T2302] loop3: detected capacity change from 0 to 32768 [ 1578.065468][ T2298] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1578.093674][ T2298] BTRFS info (device loop1): turning off barriers [ 1578.113866][ T2298] BTRFS info (device loop1): max_inline at 0 [ 1578.134358][ T2298] BTRFS info (device loop1): enabling all of the rescue options [ 1578.175992][ T2298] BTRFS info (device loop1): ignoring data csums [ 1578.201477][ T2298] BTRFS info (device loop1): ignoring bad roots [ 1578.220996][ T2298] BTRFS info (device loop1): disabling log replay at mount time [ 1578.264730][ T2298] BTRFS info (device loop1): force zlib compression, level 3 [ 1578.275407][ T2298] BTRFS info (device loop1): enabling ssd optimizations [ 1578.282692][ T2298] BTRFS info (device loop1): using spread ssd allocation scheme [ 1578.340299][ T2298] BTRFS info (device loop1): allowing degraded mounts [ 1578.347285][ T2298] BTRFS info (device loop1): using free space tree [ 1578.410395][ T2298] workqueue: max_active 2097161 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 1578.451393][ T2329] netlink: 'syz.2.12500': attribute type 1 has an invalid length. [ 1578.459635][ T2298] workqueue: max_active 2097161 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 1578.478446][ T2329] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12500'. [ 1578.494210][ T2330] binder: 2327:2330 ioctl c018620b 0 returned -14 [ 1578.509827][ T2329] nbd: must specify at least one socket [ 1578.541410][ T2298] workqueue: max_active 2097161 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 1578.607936][ T2298] workqueue: max_active 2097161 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 1578.675262][ T2298] workqueue: max_active 2097161 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 1578.707477][ T2298] workqueue: max_active 2097161 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 1578.751524][ T2342] loop3: detected capacity change from 0 to 64 [ 1578.759490][ T2298] workqueue: max_active 2097161 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 1578.866602][T24552] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0 [ 1578.916587][T22189] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1578.959002][ T2298] BTRFS error (device loop1): failed to load root extent [ 1578.987561][T18104] BTRFS warning (device loop1: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1 [ 1579.084048][ T2298] BTRFS info (device loop1: state C): auto enabling async discard [ 1579.183961][T22189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1579.194117][T22189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1579.247817][T22189] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1579.256128][ T5817] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1579.259516][T22189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.300251][T22189] usb 1-1: config 0 descriptor?? [ 1579.544465][T22189] ath6kl: Failed to submit usb control message: -71 [ 1579.579307][T22189] ath6kl: unable to send the bmi data to the device: -71 [ 1579.600614][T22189] ath6kl: Unable to send get target info: -71 [ 1579.625786][T22189] ath6kl: Failed to init ath6kl core: -71 [ 1579.655625][T22189] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1579.702678][T22189] usb 1-1: USB disconnect, device number 58 [ 1580.146530][ T2374] bad cache= option: no%e [ 1580.146530][ T2374] [ 1580.153538][ T2374] CIFS: VFS: bad cache= option: no%e [ 1580.307806][ T2380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12515'. [ 1580.326295][ T2380] netlink: 'syz.1.12515': attribute type 1 has an invalid length. [ 1580.616287][ T2394] program syz.3.12520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1580.741233][ T2398] netlink: 'syz.1.12521': attribute type 1 has an invalid length. [ 1580.750710][ T2398] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.12521'. [ 1580.793974][ T2400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12523'. [ 1580.835325][ T2400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12523'. [ 1580.973629][ T2409] loop3: detected capacity change from 0 to 16 [ 1581.019781][ T2409] erofs: (device loop3): mounted with root inode @ nid 36. [ 1581.060230][ T2409] syz.3.12526: attempt to access beyond end of device [ 1581.060230][ T2409] loop3: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 1581.116049][ T2409] syz.3.12526: attempt to access beyond end of device [ 1581.116049][ T2409] loop3: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 1581.418584][ T2417] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1581.634778][ T2429] libceph: resolve '0.' (ret=-3): failed [ 1581.806530][ T2440] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.12537'. [ 1582.149343][ T2450] loop0: detected capacity change from 0 to 4096 [ 1582.160936][ T2457] netlink: 'syz.2.12545': attribute type 10 has an invalid length. [ 1582.188582][ T2457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12545'. [ 1582.208254][ T2457] bridge0: port 3(ipvlan1) entered blocking state [ 1582.295118][ T2457] bridge0: port 3(ipvlan1) entered disabled state [ 1582.316422][ T2457] ipvlan1: entered allmulticast mode [ 1582.325101][ T2461] overlayfs: workdir and upperdir must be separate subtrees [ 1582.332654][ T2457] veth0_vlan: entered allmulticast mode [ 1582.350641][ T2457] ipvlan1: left allmulticast mode [ 1582.369476][ T2457] veth0_vlan: left allmulticast mode [ 1582.380737][ T2457] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1582.403831][ T2459] loop3: detected capacity change from 0 to 4096 [ 1582.431860][ T2459] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1582.504652][ T2459] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1582.534983][ T2459] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1582.573462][ T2459] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1582.584100][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1582.648423][ T2459] ntfs: volume version 3.1. [ 1582.786831][ T2459] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1582.796288][ T2459] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1583.388567][ T2504] loop1: detected capacity change from 0 to 512 [ 1583.813076][T11865] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1584.037207][T11865] usb 1-1: Using ep0 maxpacket: 8 [ 1584.044689][T11865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1584.061468][T11865] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1584.079941][T11865] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1584.101351][T11865] usb 1-1: Product: syz [ 1584.105577][T11865] usb 1-1: Manufacturer: syz [ 1584.120387][T11865] usb 1-1: SerialNumber: syz [ 1584.413879][T11865] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1584.421807][T11865] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1584.443547][T11865] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1584.490659][ T2551] netlink: 'syz.1.12583': attribute type 1 has an invalid length. [ 1584.627335][T11865] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1584.635753][T11865] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1584.668279][T11865] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1584.690824][T11865] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1584.731342][T11865] usb 1-1: USB disconnect, device number 59 [ 1584.760824][T11865] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1584.814806][T11865] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1584.837835][T11865] visor 1-1:1.0: device disconnected [ 1585.018930][ T2557] No such timeout policy "syz1" [ 1585.102286][ T2546] loop3: detected capacity change from 0 to 32768 [ 1585.169286][ T2546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1585.210603][ T2546] (syz.3.12582,2546,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1585.286764][ T2546] (syz.3.12582,2546,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1585.341565][ T2546] (syz.3.12582,2546,0):ocfs2_mknod:298 ERROR: status = -2 [ 1585.348764][ T2546] (syz.3.12582,2546,0):ocfs2_mknod:502 ERROR: status = -2 [ 1585.366092][ T2546] (syz.3.12582,2546,1):ocfs2_mkdir:659 ERROR: status = -2 [ 1585.611525][ T5822] ocfs2: Unmounting device (7,3) on (node local) [ 1585.948060][ T2589] loop3: detected capacity change from 0 to 764 [ 1585.992789][ T2589] rock: directory entry would overflow storage [ 1586.015162][ T2589] rock: sig=0x4654, size=5, remaining=4 [ 1586.026333][ T2591] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12598'. [ 1586.247263][ T2600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12602'. [ 1586.364064][ T2576] loop1: detected capacity change from 0 to 32768 [ 1586.425639][ T2606] loop3: detected capacity change from 0 to 1024 [ 1586.442935][ T2576] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1586.562533][ T2576] XFS (loop1): Ending clean mount [ 1586.616696][ T2576] XFS (loop1): Quotacheck needed: Please wait. [ 1586.647815][ T2625] overlayfs: workdir and upperdir must be separate subtrees [ 1586.668057][ T3514] hfsplus: b-tree write err: -5, ino 4 [ 1586.739439][ T2576] XFS (loop1): Quotacheck: Done. [ 1586.774040][T27460] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1586.792437][ T2630] binder: 2626:2630 ioctl c00c620f 2000000000c0 returned -22 [ 1586.868712][ T5817] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1586.999036][T27460] usb 1-1: Using ep0 maxpacket: 16 [ 1587.030937][T27460] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1587.040418][T27460] usb 1-1: config 12 has an invalid interface number: 103 but max is 0 [ 1587.068804][T27460] usb 1-1: config 12 has no interface number 0 [ 1587.075771][ T2638] syz.2.12614: attempt to access beyond end of device [ 1587.075771][ T2638] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1587.091451][T27460] usb 1-1: config 12 interface 103 has no altsetting 0 [ 1587.124316][T27460] usb 1-1: New USB device found, idVendor=1901, idProduct=0197, bcdDevice=f6.d9 [ 1587.133604][T27460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.177507][T27460] usb 1-1: Product: syz [ 1587.186940][T27460] usb 1-1: Manufacturer: syz [ 1587.192875][ T28] audit: type=1326 audit(973083276.721:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2639 comm="syz.3.12615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1587.215049][T27460] usb 1-1: SerialNumber: syz [ 1587.292944][ T28] audit: type=1326 audit(973083276.740:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2639 comm="syz.3.12615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1587.357934][ T28] audit: type=1326 audit(973083276.758:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2639 comm="syz.3.12615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1587.405161][ T28] audit: type=1326 audit(973083276.758:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2639 comm="syz.3.12615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1587.466844][ T2649] loop1: detected capacity change from 0 to 8 [ 1587.479250][T27460] cp210x 1-1:12.103: cp210x converter detected [ 1587.487573][T27460] cp210x 1-1:12.103: failed to get vendor val 0x370b size 1: -71 [ 1587.498145][ T2649] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1587.506638][T27460] cp210x 1-1:12.103: querying part number failed [ 1587.521461][ T2649] cramfs: Error -5 while decompressing! [ 1587.528838][T27460] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1587.535858][ T2649] cramfs: ffffffff973f8368(26)->ffff888045dfb000(4096) [ 1587.542780][ T2649] cramfs: Error -3 while decompressing! [ 1587.552896][ T2649] cramfs: ffffffff973f8382(26)->ffff8880548c4000(4096) [ 1587.573492][ T5816] udevd[5816]: incorrect cramfs checksum on /dev/loop1 [ 1587.580875][ T2649] cramfs: Error -3 while decompressing! [ 1587.589072][T27460] usb 1-1: USB disconnect, device number 60 [ 1587.598971][T27460] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1587.609487][ T2649] cramfs: ffffffff973f839c(16)->ffff88804f324000(4096) [ 1587.620670][T27460] cp210x 1-1:12.103: device disconnected [ 1587.633782][ T2649] cramfs: Error -5 while decompressing! [ 1587.650776][ T2649] cramfs: ffffffff973f8368(26)->ffff888045dfb000(4096) [ 1587.656187][ T5816] udevd[5816]: incorrect cramfs checksum on /dev/loop1 [ 1587.747013][T11865] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1587.971830][T11865] usb 4-1: Using ep0 maxpacket: 32 [ 1587.983511][T11865] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1588.004098][T11865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.018777][T11865] usb 4-1: config 0 descriptor?? [ 1588.028364][T11865] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1588.174513][ T788] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1588.333976][ T2679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12629'. [ 1588.379513][ T788] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1588.411106][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1588.444299][ T788] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1588.455851][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.476139][T11865] gspca_sunplus: reg_w_riv err -71 [ 1588.481376][T11865] sunplus: probe of 4-1:0.0 failed with error -71 [ 1588.492014][ T788] usb 3-1: Product: syz [ 1588.497066][ T788] usb 3-1: Manufacturer: syz [ 1588.501725][ T788] usb 3-1: SerialNumber: syz [ 1588.511808][T11865] usb 4-1: USB disconnect, device number 69 [ 1588.543403][ T788] rtl8150 3-1:1.0: couldn't find required endpoints [ 1588.574858][ T788] rtl8150: probe of 3-1:1.0 failed with error -5 [ 1588.705388][ T2687] loop1: detected capacity change from 0 to 4096 [ 1588.713130][ T2687] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1588.744764][ T2687] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1588.792073][ T6927] usb 3-1: USB disconnect, device number 81 [ 1588.802519][ T2687] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1588.824300][ T2687] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1588.850682][ T2687] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1588.862567][ T2687] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1588.895775][ T2687] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1588.926593][ T2687] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1588.947527][ T2687] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1588.956829][ T2687] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1589.001529][ T2687] ntfs: volume version 3.1. [ 1589.896318][ T2729] loop1: detected capacity change from 0 to 16 [ 1589.910926][ T2729] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1590.074322][ T2734] loop0: detected capacity change from 0 to 64 [ 1590.495006][ T2748] loop1: detected capacity change from 0 to 1024 [ 1590.630977][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1590.830804][ T2758] xt_CONNSECMARK: invalid mode: 66 [ 1590.838062][ T2756] netlink: 'syz.2.12661': attribute type 1 has an invalid length. [ 1591.337840][ T2789] netlink: 292 bytes leftover after parsing attributes in process `syz.2.12674'. [ 1591.722053][ T2800] loop1: detected capacity change from 0 to 8192 [ 1591.790144][ T2800] loop1: p1 < > p2 p4 < p5 > [ 1591.794942][ T2800] loop1: partition table partially beyond EOD, truncated [ 1591.835160][ T2800] loop1: p1 start 524299 is beyond EOD, truncated [ 1591.853396][ T2800] loop1: p2 size 16128 extends beyond EOD, truncated [ 1591.916845][ T2800] loop1: p5 size 16128 extends beyond EOD, truncated [ 1592.102841][ T2832] sit0: entered promiscuous mode [ 1592.171576][ T2832] netlink: 'syz.2.12689': attribute type 1 has an invalid length. [ 1592.183541][ T788] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1592.209113][ T2832] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12689'. [ 1592.258690][ T2834] ieee802154 phy1 wpan1: encryption failed: -22 [ 1592.409930][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 1592.419026][ T788] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1592.455619][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.476930][ T788] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1592.507024][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1592.524501][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.533654][ T788] usb 2-1: Product: syz [ 1592.538252][ T788] usb 2-1: Manufacturer: syz [ 1592.542894][ T788] usb 2-1: SerialNumber: syz [ 1592.779867][ T2848] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1592.836037][T27460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.849181][T11865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.870041][T27460] usb 2-1: USB disconnect, device number 77 [ 1594.011856][ T2873] binder: 2872:2873 ioctl c00c620f 0 returned -14 [ 1594.022361][ T2875] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12707'. [ 1595.020584][ T2910] loop0: detected capacity change from 0 to 8192 [ 1595.029420][ T2916] trusted_key: encrypted_key: insufficient parameters specified [ 1595.038901][ T2914] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.12726'. [ 1595.060655][ T2910] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1595.082512][ T2910] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1595.118210][ T2910] REISERFS (device loop0): using ordered data mode [ 1595.126647][ T2910] reiserfs: using flush barriers [ 1595.133350][ T2910] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1595.150589][ T2910] REISERFS (device loop0): checking transaction log (loop0) [ 1595.209818][ T2910] REISERFS (device loop0): Using rupasov hash to sort names [ 1595.596707][ T2928] netlink: 424 bytes leftover after parsing attributes in process `syz.0.12732'. [ 1595.615402][ T2928] netlink: 'syz.0.12732': attribute type 1 has an invalid length. [ 1595.910952][ T2932] loop0: detected capacity change from 0 to 4096 [ 1595.983273][ T2932] __ntfs_error: 14 callbacks suppressed [ 1595.983291][ T2932] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1596.025828][ T2919] loop1: detected capacity change from 0 to 32768 [ 1596.034108][ T2932] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1596.082355][ T2932] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1596.140607][ T2932] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1596.169640][ T2932] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1596.196459][ T2932] ntfs: volume version 3.1. [ 1596.203358][ T2932] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1596.224099][ T2932] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1596.299024][ T2932] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1596.326708][ T2932] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1596.363552][ T2932] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1596.891018][ T2951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1597.103676][ T2967] ./file0: Can't lookup blockdev [ 1597.742906][T22189] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1597.857693][ T3006] ieee802154 phy1 wpan1: encryption failed: -90 [ 1597.952079][T22189] usb 2-1: Using ep0 maxpacket: 16 [ 1597.964177][T22189] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1597.984551][T22189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.014006][T22189] usb 2-1: config 0 descriptor?? [ 1598.033877][ T3014] netlink: 'syz.0.12773': attribute type 9 has an invalid length. [ 1598.045253][T22189] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1598.180276][ T3021] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.12776'. [ 1598.309648][ T3024] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12778'. [ 1598.330770][T22189] usb 2-1: Detected FT232B [ 1598.546247][T22189] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1598.573229][T22189] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1598.609182][T22189] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1598.632503][T22189] usb 2-1: USB disconnect, device number 78 [ 1598.672840][ T3040] loop0: detected capacity change from 0 to 16 [ 1598.684006][T22189] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1598.714768][ T3040] erofs: (device loop0): mounted with root inode @ nid 36. [ 1598.737743][T22189] ftdi_sio 2-1:0.0: device disconnected [ 1598.753956][ T3040] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1598.780340][T28867] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1598.803293][ T3040] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1598.842870][ T3038] Cannot find del_set index 286 as target [ 1599.164674][ T3059] netlink: 'syz.2.12795': attribute type 2 has an invalid length. [ 1599.172862][ T3059] netlink: 5356 bytes leftover after parsing attributes in process `syz.2.12795'. [ 1599.182325][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1599.207235][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1599.255279][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1599.282343][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1599.313925][ T3061] netlink: 'syz.0.12796': attribute type 1 has an invalid length. [ 1599.322270][ T3061] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12796'. [ 1599.325353][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1599.357518][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1600.126949][T27460] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1600.154377][ T3096] loop0: detected capacity change from 0 to 8192 [ 1600.184826][ T3096] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1600.233937][ T3096] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1600.243588][ T3096] REISERFS (device loop0): using ordered data mode [ 1600.250518][ T3096] reiserfs: using flush barriers [ 1600.258136][ T3096] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1600.275758][ T3096] REISERFS (device loop0): checking transaction log (loop0) [ 1600.286466][ T3104] loop1: detected capacity change from 0 to 2048 [ 1600.293626][ T3096] REISERFS (device loop0): Using r5 hash to sort names [ 1600.322667][ T3104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1600.366856][T27460] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1600.389476][T27460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.453567][T27460] usb 4-1: Product: syz [ 1600.457851][T27460] usb 4-1: Manufacturer: syz [ 1600.479590][T27460] usb 4-1: SerialNumber: syz [ 1600.496318][T27460] r8152-cfgselector 4-1: config 0 descriptor?? [ 1600.958879][T27460] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1600.995632][T27460] r8152-cfgselector 4-1: USB disconnect, device number 70 [ 1602.007274][ T3151] loop3: detected capacity change from 0 to 512 [ 1602.050908][ T3151] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.12839: bad orphan inode 15 [ 1602.086240][ T3151] ext4_test_bit(bit=14, block=5) = 0 [ 1602.105217][ T3151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1602.302874][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.599204][ T3172] loop3: detected capacity change from 0 to 256 [ 1602.788580][ T23] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1602.948361][ T3160] loop0: detected capacity change from 0 to 32768 [ 1602.991654][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1602.995395][ T3183] loop3: detected capacity change from 0 to 2048 [ 1602.998656][ T3160] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1603.042537][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1603.073596][ T3183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1603.098903][T11865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1603.107422][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.120395][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1603.132663][ T23] usb 2-1: Product: syz [ 1603.136971][ T23] usb 2-1: Manufacturer: syz [ 1603.167790][ T23] usb 2-1: SerialNumber: syz [ 1603.197022][ T23] usb 2-1: config 0 descriptor?? [ 1603.377677][ T3160] XFS (loop0): Ending clean mount [ 1603.406761][ T3160] XFS (loop0): Quotacheck needed: Please wait. [ 1603.511344][ T3160] XFS (loop0): Quotacheck: Done. [ 1603.668973][ T23] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 1603.693342][ T23] airspy 2-1:0.0: Could not detect board [ 1603.711276][ T23] airspy: probe of 2-1:0.0 failed with error -71 [ 1603.735135][ T23] usb 2-1: USB disconnect, device number 79 [ 1603.738912][ T5811] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1604.322767][ T3226] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1604.338363][ T788] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1604.556693][ T788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1604.575121][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.587750][ T3236] batadv1: entered promiscuous mode [ 1604.589919][ T788] usb 4-1: Product: syz [ 1604.609855][ T788] usb 4-1: Manufacturer: syz [ 1604.614529][ T788] usb 4-1: SerialNumber: syz [ 1604.666343][ T788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1604.708887][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1604.763449][ T3242] __nla_validate_parse: 47 callbacks suppressed [ 1604.763465][ T3242] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12878'. [ 1604.788784][ T3240] loop0: detected capacity change from 0 to 4096 [ 1604.806856][ T3242] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1604.836535][ T3243] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1604.860618][ T3240] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1604.916177][ T3240] Remounting filesystem read-only [ 1605.170329][T11865] usb 4-1: USB disconnect, device number 71 [ 1605.464635][ T3265] netlink: 'syz.1.12888': attribute type 9 has an invalid length. [ 1605.685767][ T5904] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1605.836819][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1605.856982][ T23] ath9k_htc: Failed to initialize the device [ 1605.866550][ T3280] loop0: detected capacity change from 0 to 512 [ 1605.874860][ T3280] EXT4-fs: Ignoring removed bh option [ 1605.885155][T11865] usb 4-1: ath9k_htc: USB layer deinitialized [ 1605.899762][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1605.914954][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.941117][ T5904] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1605.951518][ T3280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.975529][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.983668][ T5904] usb 3-1: Product: syz [ 1606.002991][ T5904] usb 3-1: Manufacturer: syz [ 1606.009218][ T5904] usb 3-1: SerialNumber: syz [ 1606.034017][ T5904] usb 3-1: config 0 descriptor?? [ 1606.057089][ T5904] usb 3-1: bad CDC descriptors [ 1606.080797][ T5904] usb 3-1: unsupported MDLM descriptors [ 1606.131636][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.328721][T11865] usb 3-1: USB disconnect, device number 82 [ 1606.623099][ T3278] loop1: detected capacity change from 0 to 32768 [ 1606.651238][ T3278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12895 (3278) [ 1606.685158][ T3278] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1606.699948][ T3278] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1606.725569][ T3278] BTRFS info (device loop1): setting nodatasum [ 1606.731789][ T3278] BTRFS info (device loop1): force zlib compression, level 3 [ 1606.739914][ T3278] BTRFS info (device loop1): metadata ratio 1 [ 1606.749337][ T3278] BTRFS info (device loop1): enabling ssd optimizations [ 1606.770022][ T3278] BTRFS info (device loop1): allowing degraded mounts [ 1606.789753][ T3278] BTRFS info (device loop1): using free space tree [ 1607.076800][ T3354] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1607.173462][ T3357] loop0: detected capacity change from 0 to 16 [ 1607.194236][ T3357] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1607.272405][ T5817] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1608.417713][ T3430] batadv2: entered promiscuous mode [ 1608.942560][ T3427] loop0: detected capacity change from 0 to 32768 [ 1608.965556][ T3427] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.12930 (3427) [ 1609.024236][ T3427] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1609.043410][ T3427] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1609.062552][ T3427] BTRFS info (device loop0): force zlib compression, level 3 [ 1609.075018][ T3427] BTRFS info (device loop0): force clearing of disk cache [ 1609.088402][ T3427] BTRFS info (device loop0): setting nodatasum [ 1609.102577][ T3427] BTRFS info (device loop0): allowing degraded mounts [ 1609.129435][ T3427] BTRFS info (device loop0): enabling disk space caching [ 1609.136547][ T3427] BTRFS info (device loop0): disk space caching is enabled [ 1609.259190][ T3514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1609.292531][ T3427] BTRFS info (device loop0): auto enabling async discard [ 1609.326238][ T3427] BTRFS info (device loop0): rebuilding free space tree [ 1609.371705][ T3427] BTRFS info (device loop0): disabling free space tree [ 1609.380879][ T3427] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1609.438200][ T3427] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1609.450045][ T788] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1609.641050][ T3427] BTRFS info (device loop0): balance: start -susage=8589935361,usage=769..2 [ 1609.661202][ T3427] BTRFS info (device loop0): balance: ended with status: 0 [ 1609.671334][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 1609.707808][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1609.729152][ T788] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1609.739239][ T788] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1609.747372][ T788] usb 3-1: Product: syz [ 1609.762874][ T788] usb 3-1: Manufacturer: syz [ 1609.767524][ T788] usb 3-1: SerialNumber: syz [ 1609.956725][ T5811] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1609.990286][ T3504] loop3: detected capacity change from 0 to 8192 [ 1610.038227][ T788] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1610.046568][ T788] usb 3-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 1610.051372][ T3504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1610.079739][ T788] usb 3-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 1610.090674][ T788] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1610.129426][ T3504] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1610.196506][ T3504] REISERFS (device loop3): using ordered data mode [ 1610.209495][ T3504] reiserfs: using flush barriers [ 1610.253120][ T788] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1610.282811][ T788] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1610.326925][ T3504] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1610.355209][ T788] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1610.379571][ T3504] REISERFS (device loop3): checking transaction log (loop3) [ 1610.409469][ T788] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1610.422255][ T3504] REISERFS (device loop3): Using r5 hash to sort names [ 1610.429518][ T3504] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1610.471229][ T788] usb 3-1: USB disconnect, device number 83 [ 1610.518007][ T3504] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1610.550822][ T788] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1610.616923][ T788] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1610.671116][ T788] visor 3-1:1.0: device disconnected [ 1610.855884][ T3550] loop1: detected capacity change from 0 to 2048 [ 1610.961218][ T3558] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1611.330489][T18808] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1611.433713][ T3589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1611.555717][T18808] usb 4-1: Using ep0 maxpacket: 32 [ 1611.586788][T18808] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1611.601129][T18808] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1611.622723][T18808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1611.653223][T18808] usb 4-1: config 1 has no interface number 0 [ 1611.661892][T18808] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1611.704848][T18808] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1611.744732][T18808] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1611.768451][T18808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.790336][ T3604] loop1: detected capacity change from 0 to 1764 [ 1611.826011][T18808] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1612.072184][T18808] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1612.299255][ T6927] usb 4-1: USB disconnect, device number 72 [ 1612.308468][ T6927] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1612.773859][T22189] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1612.972315][T22189] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1612.992584][T22189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.008809][T22189] usb 2-1: Product: syz [ 1613.018910][T22189] usb 2-1: Manufacturer: syz [ 1613.034817][T22189] usb 2-1: SerialNumber: syz [ 1613.066781][T22189] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1613.126798][ T6927] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1613.362175][T18808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1613.572718][ T3666] loop3: detected capacity change from 0 to 32768 [ 1613.598853][ T3666] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.12986 (3666) [ 1613.646249][ T3666] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1613.663590][T18808] usb 2-1: USB disconnect, device number 80 [ 1613.693148][ T3666] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1613.713566][ T3666] BTRFS info (device loop3): force zlib compression, level 3 [ 1613.734898][ T3666] BTRFS info (device loop3): force clearing of disk cache [ 1613.767790][ T3666] BTRFS info (device loop3): setting nodatasum [ 1613.778828][ T3666] BTRFS info (device loop3): allowing degraded mounts [ 1613.785659][ T3666] BTRFS info (device loop3): enabling disk space caching [ 1613.800650][ T3670] loop0: detected capacity change from 0 to 32768 [ 1613.825503][ T3666] BTRFS info (device loop3): disk space caching is enabled [ 1613.856289][ T3670] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1613.936214][ T3666] BTRFS info (device loop3): auto enabling async discard [ 1613.961056][ T3666] BTRFS info (device loop3): rebuilding free space tree [ 1614.021535][ T3666] BTRFS info (device loop3): disabling free space tree [ 1614.079120][ T3666] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1614.099344][ T3670] XFS (loop0): Ending clean mount [ 1614.101576][ T3666] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1614.129438][ T3670] XFS (loop0): Quotacheck needed: Please wait. [ 1614.172909][ T3708] usb usb8: usbfs: process 3708 (syz.2.12988) did not claim interface 0 before use [ 1614.302692][ T6927] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1614.315240][ T3670] XFS (loop0): Quotacheck: Done. [ 1614.326127][ T6927] ath9k_htc: Failed to initialize the device [ 1614.332879][T18808] usb 2-1: ath9k_htc: USB layer deinitialized [ 1614.341591][ T3666] BTRFS info (device loop3): balance: start -susage=8589935361,usage=769..2 [ 1614.390942][ T3666] BTRFS info (device loop3): balance: ended with status: 0 [ 1614.549772][ T5822] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1614.588671][ T5811] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1615.172942][ T3750] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1615.313588][ T788] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1615.423906][ T3514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1615.521849][ T3756] loop0: detected capacity change from 0 to 4096 [ 1615.543571][ T788] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1615.551739][ T788] usb 4-1: config 0 has no interface number 0 [ 1615.575337][ T3756] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1615.594876][ T788] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1615.624158][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.634056][ T788] usb 4-1: Product: syz [ 1615.638449][ T788] usb 4-1: Manufacturer: syz [ 1615.644828][ T788] usb 4-1: SerialNumber: syz [ 1615.669099][ T788] usb 4-1: config 0 descriptor?? [ 1615.929997][ T788] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 1615.953555][ T788] usb 4-1: No valid video chain found. [ 1615.982708][ T788] usb 4-1: USB disconnect, device number 73 [ 1616.236743][ T3788] netlink: 196 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1616.246256][ T3788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1616.262007][ T3788] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1616.660472][ T3812] netlink: 'syz.0.13019': attribute type 7 has an invalid length. [ 1616.666024][ T3813] nfs: Unknown parameter 'ntext' [ 1616.672054][ T3812] netlink: 'syz.0.13019': attribute type 8 has an invalid length. [ 1616.832182][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1616.832198][ T28] audit: type=1326 audit(973083304.446:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3819 comm="syz.1.13021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a39bf79 code=0x7ffc0000 [ 1616.879433][ T3823] x_tables: duplicate entry at hook 1 [ 1616.879960][ T28] audit: type=1326 audit(973083304.474:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3819 comm="syz.1.13021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a39bf79 code=0x7ffc0000 [ 1616.919387][ T28] audit: type=1326 audit(973083304.521:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3819 comm="syz.1.13021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fac6a39bf79 code=0x7ffc0000 [ 1617.060827][ T28] audit: type=1326 audit(973083304.521:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3819 comm="syz.1.13021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a39bf79 code=0x7ffc0000 [ 1618.150058][ T3898] loop0: detected capacity change from 0 to 4096 [ 1618.210962][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.468665][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.558969][ T3878] loop1: detected capacity change from 0 to 32768 [ 1618.602731][ T3878] [ 1618.602731][ T3878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1618.602731][ T3878] [ 1618.657035][ T3914] comedi comedi0: dmm32at: I/O port conflict (0x8001,16) [ 1618.690184][ T3878] jfs_rename: dtInsert returned -EIO [ 1618.807209][ T3897] loop3: detected capacity change from 0 to 32768 [ 1618.868680][ T5817] [ 1618.868680][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1618.868680][ T5817] [ 1618.888775][ T3897] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1618.960674][ T5817] [ 1618.960674][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1618.960674][ T5817] [ 1619.055497][ T3897] XFS (loop3): ro->rw transition prohibited on norecovery mount [ 1619.225050][ T5822] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1619.615844][ T3966] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 1619.861820][ T6927] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1620.075321][ T6927] usb 2-1: Using ep0 maxpacket: 16 [ 1620.082339][ T6927] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 1620.094098][ T6927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.127359][ T6927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.160734][ T6927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.203861][ T6927] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1620.224146][ T6927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.256562][ T6927] usb 2-1: config 0 descriptor?? [ 1620.272615][ T6927] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input103 [ 1620.352364][ T5128] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.396063][ T5128] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.417458][T12964] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.434566][ T4011] loop0: detected capacity change from 0 to 16 [ 1620.448936][ T4011] erofs: (device loop0): mounted with root inode @ nid 36. [ 1620.449997][ T5128] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.521187][ T5128] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.550613][ T3958] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.613530][ T5128] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1620.628591][T22189] usb 2-1: USB disconnect, device number 81 [ 1621.078152][ T28] audit: type=1326 audit(973083308.412:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4054 comm="syz.3.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1621.148389][ T28] audit: type=1326 audit(973083308.431:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4054 comm="syz.3.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1621.219978][ T28] audit: type=1326 audit(973083308.459:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4054 comm="syz.3.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1621.275004][ T28] audit: type=1326 audit(973083308.459:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4054 comm="syz.3.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x7ffc0000 [ 1621.748991][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13102'. [ 1622.080564][ T4089] loop0: detected capacity change from 0 to 8192 [ 1622.246664][ T4070] loop1: detected capacity change from 0 to 32768 [ 1622.314711][ T4070] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1622.592318][ T4070] XFS (loop1): Ending clean mount [ 1622.634902][ T4124] loop0: detected capacity change from 0 to 65 [ 1622.694144][ T4124] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1622.731384][ T4124] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1622.744318][ T5817] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1623.453027][ T4155] loop3: detected capacity change from 0 to 4096 [ 1623.509087][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1623.573477][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.644511][ T4176] xt_hashlimit: max too large, truncated to 1048576 [ 1623.804163][ T4181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13130'. [ 1623.849283][ T4181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13130'. [ 1623.868412][ T4181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13130'. [ 1624.843443][ T23] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1624.942857][T22189] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1625.038794][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1625.051078][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 1625.060107][ T23] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1625.068967][ T23] usb 4-1: config 0 has no interface number 0 [ 1625.075137][ T23] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1625.086290][ T23] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1625.096220][ T23] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1625.106770][ T23] usb 4-1: string descriptor 0 read error: -22 [ 1625.113193][ T23] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1625.122701][ T23] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1625.135819][ T23] usb 4-1: config 0 descriptor?? [ 1625.147164][ T23] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input105 [ 1625.159017][T22189] usb 2-1: Using ep0 maxpacket: 32 [ 1625.167258][T22189] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1625.177639][T22189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.214593][T22189] usb 2-1: config 0 descriptor?? [ 1625.220629][ T23] input: failed to attach handler mousedev to device input105, error: -5 [ 1625.241294][T22189] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1625.288370][ T5954] udevd[5954]: Error opening device "/dev/input/event4": Input/output error [ 1625.297528][ T5954] udevd[5954]: Unable to EVIOCGABS device "/dev/input/event4" [ 1625.306453][ T5954] udevd[5954]: Unable to EVIOCGABS device "/dev/input/event4" [ 1625.314448][ T5954] udevd[5954]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1625.350641][ T5143] udevd[5143]: worker [5954] terminated by signal 6 (Aborted) [ 1625.359971][ T5143] udevd[5143]: worker [5954] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input105/event4' [ 1625.403298][T27460] usb 4-1: USB disconnect, device number 74 [ 1625.670639][T22189] gspca_sq930x: ucbus_write failed -71 [ 1625.676349][T22189] sq930x: probe of 2-1:0.0 failed with error -71 [ 1625.688628][T22189] usb 2-1: USB disconnect, device number 82 [ 1626.280328][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13149'. [ 1626.779343][T27460] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1626.894066][ T4275] loop1: detected capacity change from 0 to 32768 [ 1626.930094][ T4275] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.13148 (4275) [ 1626.983878][T27460] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1626.992484][T27460] usb 1-1: not running at top speed; connect to a high speed hub [ 1627.009399][ T4275] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1627.035442][T27460] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1627.049409][ T4275] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1627.058855][T27460] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1627.080379][ T4275] BTRFS info (device loop1): force zlib compression, level 3 [ 1627.092603][T27460] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1627.105215][ T4275] BTRFS info (device loop1): force clearing of disk cache [ 1627.113850][T27460] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 1627.124881][ T4275] BTRFS info (device loop1): setting nodatasum [ 1627.144694][ T4275] BTRFS info (device loop1): allowing degraded mounts [ 1627.161261][T27460] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1627.170654][T27460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.181460][ T4275] BTRFS info (device loop1): enabling disk space caching [ 1627.205838][T27460] usb 1-1: Product: syz [ 1627.210068][T27460] usb 1-1: Manufacturer: syz [ 1627.215173][ T4275] BTRFS info (device loop1): disk space caching is enabled [ 1627.236842][T27460] usb 1-1: SerialNumber: syz [ 1627.307612][ T4275] BTRFS info (device loop1): auto enabling async discard [ 1627.316408][ T4275] BTRFS info (device loop1): rebuilding free space tree [ 1627.376566][ T4275] BTRFS info (device loop1): disabling free space tree [ 1627.406374][ T4275] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1627.418437][ T4275] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1627.485359][T27460] usb 1-1: 0:2 : does not exist [ 1627.534572][ T4275] BTRFS info (device loop1): balance: start -susage=8589935361,usage=769..2 [ 1627.566682][T27460] usb 1-1: USB disconnect, device number 61 [ 1627.572956][T11865] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1627.601759][ T4275] BTRFS info (device loop1): balance: ended with status: 0 [ 1627.621040][T12964] udevd[12964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1627.674499][ T4352] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13165'. [ 1627.749985][ T5817] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1627.799880][T11865] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1627.810373][T11865] usb 4-1: config 1 has no interface number 0 [ 1627.826959][T11865] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1627.837284][T11865] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1627.851703][T11865] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1627.870378][T11865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.884134][T11865] usb 4-1: Product: syz [ 1627.888354][T11865] usb 4-1: Manufacturer: syz [ 1627.899297][T11865] usb 4-1: SerialNumber: syz [ 1628.192543][T11865] aqc111: probe of 4-1:1.105 failed with error -22 [ 1628.447529][ T6927] usb 4-1: USB disconnect, device number 75 [ 1628.966650][ T4404] loop0: detected capacity change from 0 to 256 [ 1629.075891][ T4404] FAT-fs (loop0): Directory bread(block 64) failed [ 1629.108958][ T4404] FAT-fs (loop0): Directory bread(block 65) failed [ 1629.115779][ T4404] FAT-fs (loop0): Directory bread(block 66) failed [ 1629.149024][ T4404] FAT-fs (loop0): Directory bread(block 67) failed [ 1629.159902][ T4404] FAT-fs (loop0): Directory bread(block 68) failed [ 1629.171639][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13184'. [ 1629.181968][ T4404] FAT-fs (loop0): Directory bread(block 69) failed [ 1629.188859][ T4414] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1629.198465][ T4404] FAT-fs (loop0): Directory bread(block 70) failed [ 1629.215767][ T4404] FAT-fs (loop0): Directory bread(block 71) failed [ 1629.233375][ T4404] FAT-fs (loop0): Directory bread(block 72) failed [ 1629.243479][ T4404] FAT-fs (loop0): Directory bread(block 73) failed [ 1629.678530][ T4437] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13191'. [ 1630.476968][ T4488] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1630.834113][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13216'. [ 1630.847757][ T4539] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1630.860940][ T4539] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1631.770906][ T4592] netlink: 'syz.1.13235': attribute type 1 has an invalid length. [ 1631.805490][ T4592] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13235'. [ 1632.063566][ T4610] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1632.123978][T22189] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1632.337506][T22189] usb 3-1: Using ep0 maxpacket: 16 [ 1632.360197][T22189] usb 3-1: config 0 has no interfaces? [ 1632.380743][T22189] usb 3-1: config 0 has no interfaces? [ 1632.394808][T22189] usb 3-1: config 0 has no interfaces? [ 1632.404563][T22189] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1632.431456][T22189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.454039][T22189] usb 3-1: Product: syz [ 1632.462486][T22189] usb 3-1: Manufacturer: syz [ 1632.472339][T22189] usb 3-1: SerialNumber: syz [ 1632.489016][T22189] r8152-cfgselector 3-1: config 0 descriptor?? [ 1632.536948][ T4639] loop1: detected capacity change from 0 to 256 [ 1632.616469][ T4639] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 1632.746657][T22189] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1632.975447][ T23] r8152-cfgselector 3-1: USB disconnect, device number 84 [ 1632.988363][ T4666] loop0: detected capacity change from 0 to 256 [ 1633.055305][ T4666] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1634.033167][ T4734] loop3: detected capacity change from 0 to 512 [ 1634.075203][ T4734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1634.213125][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.230253][T27460] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1634.447316][T27460] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1634.462985][T27460] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1634.482375][T27460] usb 1-1: Product: syz [ 1634.489225][T27460] usb 1-1: SerialNumber: syz [ 1634.505576][T27460] usb 1-1: config 0 descriptor?? [ 1634.521373][ T4766] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1634.702548][ T4806] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13286'. [ 1634.712105][T11865] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1634.727404][ T4806] hsr_slave_0: left promiscuous mode [ 1634.753084][ T4806] hsr_slave_1: left promiscuous mode [ 1634.759435][T27460] hso 1-1:0.0: Failed to find BULK IN ep [ 1634.950551][T11865] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1634.970843][T11865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.977681][T22189] usb 1-1: USB disconnect, device number 62 [ 1634.992910][T11865] usb 4-1: Product: syz [ 1634.997125][T11865] usb 4-1: Manufacturer: syz [ 1635.028346][T11865] usb 4-1: SerialNumber: syz [ 1635.050273][T11865] usb 4-1: config 0 descriptor?? [ 1635.108519][ T4835] loop1: detected capacity change from 0 to 8 [ 1635.149968][ T4835] SQUASHFS error: Unable to read inode 0xe3 [ 1635.304834][T11865] hso 4-1:0.0: Failed to find BULK IN ep [ 1635.323227][T11865] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1635.519905][ T6927] usb 4-1: USB disconnect, device number 76 [ 1635.625869][ T4863] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1635.825098][ T4905] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13299'. [ 1635.876089][ T4905] hsr_slave_0: left promiscuous mode [ 1635.899604][ T4905] hsr_slave_1: left promiscuous mode [ 1636.245717][ T4932] netlink: 'syz.2.13308': attribute type 2 has an invalid length. [ 1636.257948][ T4932] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13308'. [ 1637.057534][ T4975] loop3: detected capacity change from 0 to 256 [ 1637.133317][ T4975] FAT-fs (loop3): Directory bread(block 64) failed [ 1637.148377][ T4975] FAT-fs (loop3): Directory bread(block 65) failed [ 1637.155035][ T4975] FAT-fs (loop3): Directory bread(block 66) failed [ 1637.172134][ T4975] FAT-fs (loop3): Directory bread(block 67) failed [ 1637.201842][ T4975] FAT-fs (loop3): Directory bread(block 68) failed [ 1637.208426][ T4975] FAT-fs (loop3): Directory bread(block 69) failed [ 1637.244080][ T4975] FAT-fs (loop3): Directory bread(block 70) failed [ 1637.276570][ T4975] FAT-fs (loop3): Directory bread(block 71) failed [ 1637.303805][ T4975] FAT-fs (loop3): Directory bread(block 72) failed [ 1637.334919][ T4975] FAT-fs (loop3): Directory bread(block 73) failed [ 1638.219171][ T5038] veth0_macvtap: entered promiscuous mode [ 1638.250256][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 1638.473300][ T5054] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1638.621161][ T5064] binfmt_misc: register: failed to install interpreter file ./file0 [ 1638.680496][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1638.949362][ T5093] loop1: detected capacity change from 0 to 64 [ 1639.094377][T22189] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1639.297103][T22189] usb 1-1: Using ep0 maxpacket: 16 [ 1639.320403][T22189] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 1639.345804][T22189] usb 1-1: config 0 has no interface number 0 [ 1639.358619][T22189] usb 1-1: config 0 interface 245 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1639.377649][T22189] usb 1-1: config 0 interface 245 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1639.391203][T22189] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=b2.a5 [ 1639.401605][T22189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.425277][T22189] usb 1-1: Product: syz [ 1639.429519][T22189] usb 1-1: Manufacturer: syz [ 1639.442579][T22189] usb 1-1: SerialNumber: syz [ 1639.455192][T22189] usb 1-1: config 0 descriptor?? [ 1639.462462][ T5075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1639.478909][ T5075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1639.780054][T22189] usb 1-1: probing VID:PID(2201:012C) [ 1639.787072][T22189] usb 1-1: vub300 testing BULK OUT EndPoint(0) 04 [ 1639.803152][T22189] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 1639.809859][T22189] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1639.848771][ T5151] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13377'. [ 1639.873612][T22189] vub300: probe of 1-1:0.245 failed with error -22 [ 1639.924008][T22189] usb 1-1: USB disconnect, device number 63 [ 1639.966372][ T5162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13379'. [ 1640.170789][ T5176] ceph: No source [ 1640.195720][ T5178] loop3: detected capacity change from 0 to 256 [ 1640.256336][ T5183] ieee802154 phy1 wpan1: encryption failed: -90 [ 1640.311714][ T5178] FAT-fs (loop3): Directory bread(block 64) failed [ 1640.332570][ T5185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13386'. [ 1640.340300][ T5178] FAT-fs (loop3): Directory bread(block 65) failed [ 1640.381396][ T5178] FAT-fs (loop3): Directory bread(block 66) failed [ 1640.405140][ T5178] FAT-fs (loop3): Directory bread(block 67) failed [ 1640.417555][ T5178] FAT-fs (loop3): Directory bread(block 68) failed [ 1640.445344][ T5178] FAT-fs (loop3): Directory bread(block 69) failed [ 1640.460312][ T5178] FAT-fs (loop3): Directory bread(block 70) failed [ 1640.484290][ T5178] FAT-fs (loop3): Directory bread(block 71) failed [ 1640.503530][ T5178] FAT-fs (loop3): Directory bread(block 72) failed [ 1640.518423][ T5178] FAT-fs (loop3): Directory bread(block 73) failed [ 1640.534090][ T5191] bridge0: port 3(hsr0) entered blocking state [ 1640.561452][ T5191] bridge0: port 3(hsr0) entered disabled state [ 1640.567919][ T5191] hsr0: entered allmulticast mode [ 1640.601373][ T5191] hsr_slave_0: entered allmulticast mode [ 1640.607076][ T5191] hsr_slave_1: entered allmulticast mode [ 1640.639793][ T5191] hsr0: entered promiscuous mode [ 1640.665039][ T5191] bridge0: port 3(hsr0) entered blocking state [ 1640.671501][ T5191] bridge0: port 3(hsr0) entered forwarding state [ 1640.809516][ T5204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13393'. [ 1641.068955][ T5213] loop3: detected capacity change from 0 to 4096 [ 1641.105573][ T5213] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1641.467840][T11865] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1641.702701][T11865] usb 2-1: Using ep0 maxpacket: 8 [ 1641.710065][T11865] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1641.723806][T11865] usb 2-1: config 2 has no interface number 0 [ 1641.734903][T11865] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1641.755054][T11865] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1641.765933][T11865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.784173][T11865] usb 2-1: Product: syz [ 1641.799030][T11865] usb 2-1: Manufacturer: syz [ 1641.803750][T11865] usb 2-1: SerialNumber: syz [ 1641.834642][ T5261] netlink: 'syz.2.13411': attribute type 21 has an invalid length. [ 1641.848902][ T5261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13411'. [ 1642.085689][ T5273] tc_dump_action: action bad kind [ 1642.279709][T11865] ch9200: probe of 2-1:2.31 failed with error -22 [ 1642.313367][T11865] usb 2-1: USB disconnect, device number 83 [ 1642.416233][ T5295] comedi comedi4: bad chanlist[0]=0x04200005 chan=5 range length=2 [ 1642.612989][ T5310] misc userio: Invalid payload size [ 1643.005909][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.059919][ T5328] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1643.098930][ T5328] bond0: (slave gre0): Error -95 calling set_mac_address [ 1643.180815][ T5345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13436'. [ 1644.112660][ T5395] loop0: detected capacity change from 0 to 1024 [ 1644.150617][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1644.216361][ T5395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.408384][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.545032][ T5369] loop3: detected capacity change from 0 to 32768 [ 1644.602974][ T5369] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1644.858571][ T5451] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1644.973869][ T5369] XFS (loop3): Ending clean mount [ 1645.218456][ T5822] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1645.227094][ T5464] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13464'. [ 1645.517906][ T5480] loop0: detected capacity change from 0 to 64 [ 1645.696970][ T5480] Trying to free block not in datazone [ 1645.711366][ T5480] minix_free_block (loop0:21): bit already cleared [ 1645.728774][ T5488] batadv2: entered allmulticast mode [ 1645.757811][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1646.380683][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13479'. [ 1646.933662][ T28] audit: type=1326 audit(973083332.602:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5559 comm="syz.3.13490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4838f9bf79 code=0x0 [ 1647.237670][ T5583] netlink: 'syz.3.13495': attribute type 1 has an invalid length. [ 1647.278180][ T5583] netlink: 228 bytes leftover after parsing attributes in process `syz.3.13495'. [ 1647.386597][ T5594] netlink: 'syz.2.13499': attribute type 1 has an invalid length. [ 1647.792781][ T5623] loop3: detected capacity change from 0 to 64 [ 1647.853471][ T5623] [ 1647.855860][ T5623] ====================================================== [ 1647.857351][ T5628] delete_channel: no stack [ 1647.862878][ T5623] WARNING: possible circular locking dependency detected [ 1647.862895][ T5623] syzkaller #0 Not tainted [ 1647.862904][ T5623] ------------------------------------------------------ [ 1647.862910][ T5623] syz.3.13508/5623 is trying to acquire lock: [ 1647.862920][ T5623] ffff888059f780b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1647.862990][ T5623] [ 1647.862990][ T5623] but task is already holding lock: [ 1647.862995][ T5623] ffff888055a02e78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 1647.863035][ T5623] [ 1647.863035][ T5623] which lock already depends on the new lock. [ 1647.863035][ T5623] [ 1647.863041][ T5623] [ 1647.863041][ T5623] the existing dependency chain (in reverse order) is: [ 1647.863047][ T5623] [ 1647.863047][ T5623] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1647.863073][ T5623] __mutex_lock+0x136/0xcc0 [ 1647.863099][ T5623] hfs_extend_file+0xff/0x1380 [ 1647.863123][ T5623] hfs_bmap_reserve+0x107/0x430 [ 1647.863138][ T5623] __hfs_ext_write_extent+0x1fa/0x470 [ 1647.863154][ T5623] hfs_ext_write_extent+0x17f/0x210 [ 1647.863170][ T5623] hfs_write_inode+0xdc/0x880 [ 1647.863186][ T5623] __writeback_single_inode+0x705/0xec0 [ 1647.863211][ T5623] writeback_sb_inodes+0x7cd/0xf50 [ 1647.992590][ T5623] wb_writeback+0x46a/0xbf0 [ 1647.997645][ T5623] wb_workfn+0x400/0xe60 [ 1648.002433][ T5623] process_scheduled_works+0xa5d/0x15d0 [ 1648.008517][ T5623] worker_thread+0xa55/0xfc0 [ 1648.013644][ T5623] kthread+0x2fa/0x390 [ 1648.018240][ T5623] ret_from_fork+0x48/0x80 [ 1648.023189][ T5623] ret_from_fork_asm+0x11/0x20 [ 1648.028499][ T5623] [ 1648.028499][ T5623] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1648.036601][ T5623] __lock_acquire+0x2df1/0x7d40 [ 1648.041998][ T5623] lock_acquire+0x19e/0x420 [ 1648.047047][ T5623] __mutex_lock+0x136/0xcc0 [ 1648.052100][ T5623] hfs_find_init+0x17e/0x1f0 [ 1648.057233][ T5623] hfs_extend_file+0x361/0x1380 [ 1648.062633][ T5623] hfs_bmap_reserve+0x107/0x430 [ 1648.068018][ T5623] hfs_cat_create+0x1fe/0x6b0 [ 1648.073235][ T5623] hfs_mkdir+0x6c/0xe0 [ 1648.077831][ T5623] vfs_mkdir+0x296/0x440 [ 1648.082604][ T5623] do_mkdirat+0x1dc/0x450 [ 1648.087460][ T5623] __x64_sys_mkdirat+0x89/0xa0 [ 1648.092751][ T5623] do_syscall_64+0x55/0xa0 [ 1648.097706][ T5623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.104141][ T5623] [ 1648.104141][ T5623] other info that might help us debug this: [ 1648.104141][ T5623] [ 1648.114383][ T5623] Possible unsafe locking scenario: [ 1648.114383][ T5623] [ 1648.121848][ T5623] CPU0 CPU1 [ 1648.127220][ T5623] ---- ---- [ 1648.132594][ T5623] lock(&HFS_I(tree->inode)->extents_lock); [ 1648.138585][ T5623] lock(&tree->tree_lock#2/1); [ 1648.145977][ T5623] lock(&HFS_I(tree->inode)->extents_lock); [ 1648.154488][ T5623] lock(&tree->tree_lock#2/1); [ 1648.159366][ T5623] [ 1648.159366][ T5623] *** DEADLOCK *** [ 1648.159366][ T5623] [ 1648.167551][ T5623] 4 locks held by syz.3.13508/5623: [ 1648.172755][ T5623] #0: ffff88807ee6e418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1648.182037][ T5623] #1: ffff888055a036b8 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 1648.192808][ T5623] #2: ffff88802edfe0b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 1648.202581][ T5623] #3: ffff888055a02e78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 1648.213813][ T5623] [ 1648.213813][ T5623] stack backtrace: [ 1648.219728][ T5623] CPU: 0 PID: 5623 Comm: syz.3.13508 Not tainted syzkaller #0 [ 1648.227206][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1648.237306][ T5623] Call Trace: [ 1648.240609][ T5623] [ 1648.243590][ T5623] dump_stack_lvl+0x18c/0x250 [ 1648.248302][ T5623] ? load_image+0x400/0x400 [ 1648.252827][ T5623] ? show_regs_print_info+0x20/0x20 [ 1648.258050][ T5623] ? print_circular_bug+0x12b/0x1a0 [ 1648.263267][ T5623] check_noncircular+0x2fc/0x400 [ 1648.268224][ T5623] ? look_up_lock_class+0x75/0x140 [ 1648.273356][ T5623] ? print_deadlock_bug+0x5d0/0x5d0 [ 1648.278571][ T5623] ? lockdep_lock+0xf5/0x230 [ 1648.283193][ T5623] ? _find_first_zero_bit+0xd3/0x100 [ 1648.288499][ T5623] __lock_acquire+0x2df1/0x7d40 [ 1648.293402][ T5623] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1648.299325][ T5623] ? verify_lock_unused+0x140/0x140 [ 1648.304547][ T5623] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1648.310457][ T5623] ? _raw_spin_unlock+0x40/0x40 [ 1648.315327][ T5623] ? stack_trace_save+0xaa/0x100 [ 1648.320290][ T5623] ? stack_trace_snprint+0xf0/0xf0 [ 1648.325438][ T5623] lock_acquire+0x19e/0x420 [ 1648.329965][ T5623] ? hfs_find_init+0x17e/0x1f0 [ 1648.334768][ T5623] ? hfs_extend_file+0x361/0x1380 [ 1648.339808][ T5623] ? hfs_bmap_reserve+0x107/0x430 [ 1648.344881][ T5623] ? do_syscall_64+0x55/0xa0 [ 1648.349489][ T5623] ? __might_sleep+0xe0/0xe0 [ 1648.354100][ T5623] ? read_lock_is_recursive+0x20/0x20 [ 1648.359502][ T5623] __mutex_lock+0x136/0xcc0 [ 1648.364033][ T5623] ? hfs_find_init+0x17e/0x1f0 [ 1648.368827][ T5623] ? hfs_find_init+0x17e/0x1f0 [ 1648.373612][ T5623] ? mutex_lock_nested+0x20/0x20 [ 1648.378566][ T5623] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1648.384226][ T5623] ? hfs_find_init+0xa7/0x1f0 [ 1648.388921][ T5623] ? hfs_find_init+0xa7/0x1f0 [ 1648.393622][ T5623] ? __kmalloc+0xe2/0x230 [ 1648.397977][ T5623] hfs_find_init+0x17e/0x1f0 [ 1648.402591][ T5623] hfs_extend_file+0x361/0x1380 [ 1648.407483][ T5623] ? hfs_get_block+0xc50/0xc50 [ 1648.412256][ T5623] ? rcu_is_watching+0x15/0xb0 [ 1648.417044][ T5623] ? trace_contention_end+0x39/0xe0 [ 1648.422255][ T5623] ? __mutex_lock+0x315/0xcc0 [ 1648.426977][ T5623] ? mutex_lock_nested+0x20/0x20 [ 1648.431952][ T5623] hfs_bmap_reserve+0x107/0x430 [ 1648.436817][ T5623] hfs_cat_create+0x1fe/0x6b0 [ 1648.441506][ T5623] ? hfs_cat_build_key+0x170/0x170 [ 1648.446666][ T5623] ? _raw_spin_unlock+0x28/0x40 [ 1648.451524][ T5623] ? hfs_new_inode+0x92d/0xc00 [ 1648.456303][ T5623] hfs_mkdir+0x6c/0xe0 [ 1648.460386][ T5623] vfs_mkdir+0x296/0x440 [ 1648.464645][ T5623] do_mkdirat+0x1dc/0x450 [ 1648.469045][ T5623] ? vfs_mkdir+0x440/0x440 [ 1648.473480][ T5623] __x64_sys_mkdirat+0x89/0xa0 [ 1648.478271][ T5623] do_syscall_64+0x55/0xa0 [ 1648.482736][ T5623] ? clear_bhb_loop+0x40/0x90 [ 1648.487429][ T5623] ? clear_bhb_loop+0x40/0x90 [ 1648.492118][ T5623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.498023][ T5623] RIP: 0033:0x7f4838f9ae57 [ 1648.502457][ T5623] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.522107][ T5623] RSP: 002b:00007f4839f13e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1648.530535][ T5623] RAX: ffffffffffffffda RBX: 00007f4839f13ee0 RCX: 00007f4838f9ae57 [ 1648.538518][ T5623] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 1648.546503][ T5623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1648.554492][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 1648.562484][ T5623] R13: 00007f4839f13ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1648.570485][ T5623]