last executing test programs: 5.180829018s ago: executing program 1 (id=7007): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffa, @none}, 0xe) 4.846371924s ago: executing program 1 (id=7009): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, 0x0, 0x2}) 4.437809168s ago: executing program 1 (id=7011): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 4.182409634s ago: executing program 1 (id=7014): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 3.705143752s ago: executing program 3 (id=7019): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) 3.490678613s ago: executing program 1 (id=7021): syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) 3.315966239s ago: executing program 3 (id=7023): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.921622574s ago: executing program 3 (id=7029): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004000080080009"], 0x1c}], 0x1}, 0x0) 2.643245606s ago: executing program 3 (id=7033): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir, 0x3a}], [], 0x2f}) 2.319921749s ago: executing program 2 (id=7034): kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) kexec_load(0xffffffffffffff0a, 0x0, 0x0, 0x1) 2.319544317s ago: executing program 3 (id=7035): r0 = io_uring_setup(0xbbd, &(0x7f0000000000)={0x0, 0x15d7, 0x40, 0x3, 0x66}) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0x1) 2.3193681s ago: executing program 4 (id=7036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000600000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.319268783s ago: executing program 5 (id=7037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280340001800a0001006c696d6974000000240002800c00024000000000000010000c000140000000000000000108000440000000010c000180080001006475700008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x410}, 0x0) 1.978324347s ago: executing program 3 (id=7039): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x4703, &(0x7f0000008f40)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x2}], {}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x2c, 0x3) 1.93876861s ago: executing program 4 (id=7040): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x1, 0x0}, 0x20000811) 1.682728375s ago: executing program 0 (id=7041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) 1.682409881s ago: executing program 4 (id=7042): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff, 0x1, 0x2, 0x3, 0x7, 0x7}, 0x20) 1.514652234s ago: executing program 1 (id=7043): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) 1.420499175s ago: executing program 4 (id=7044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) 1.34673807s ago: executing program 5 (id=7045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 1.346460686s ago: executing program 0 (id=7047): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2, 0x4, 0x4, 0x2, 0x7, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_address={0x5, 0x7, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x98, @dev={0xfe, 0x80, '\x00', 0x41}, 0xfffffff4}}]}, 0x38}}, 0x4014) 1.170900004s ago: executing program 5 (id=7048): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x12, 0x1, 0x0, 0x0, @str='+\x00\x00\x00*%*[-#\xd9&-\x00'}]}, 0x28}}, 0x0) 1.145895463s ago: executing program 4 (id=7049): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) 1.111362395s ago: executing program 0 (id=7050): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000001480)) 1.017209065s ago: executing program 2 (id=7051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x3c, 0x13, 0x501, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1402}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) 881.355235ms ago: executing program 4 (id=7052): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 865.919936ms ago: executing program 5 (id=7053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000080603e7ffffff00000000000a0b00040900010007"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 865.170965ms ago: executing program 0 (id=7054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x200001, 0x0, {0xa, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 695.656922ms ago: executing program 2 (id=7055): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x5, 0xfffffffc, 0x32315559, 0x1, 0x7, 0xc, 0xa, 0x8, 0x1, 0x0, 0x2, 0x7}}) 584.469632ms ago: executing program 0 (id=7056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540840000020900020073797a310000000008000a"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) 516.877143ms ago: executing program 2 (id=7057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000440), 0x4) 454.762236ms ago: executing program 5 (id=7058): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff, 0x0, 0x101], [], [0x9]}) 140.559158ms ago: executing program 0 (id=7059): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x3) 140.037821ms ago: executing program 2 (id=7060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 139.889964ms ago: executing program 5 (id=7061): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000001bc0)=0xffffffffffffff65) 0s ago: executing program 2 (id=7062): syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) poll(0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): ] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 898.696338][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.704658][T19365] FAT-fs (loop0): Directory bread(block 73) failed [ 898.767086][T19371] romfs: read error for inode 0x70040 [ 898.854238][T18353] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 898.894459][T18353] [drm:udl_init] *ERROR* Selecting channel failed [ 898.992218][T18353] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 899.023309][T18353] [drm] Initialized udl on minor 2 [ 899.063154][T18353] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 899.111247][T18353] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 899.124709][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 899.166055][T18353] usb 2-1: USB disconnect, device number 106 [ 899.180546][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 900.504325][T19378] loop4: detected capacity change from 0 to 32768 [ 900.573216][ T5945] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 900.638959][T19378] JBD2: Ignoring recovery information on journal [ 900.665952][T19418] netlink: 'syz.1.5660': attribute type 4 has an invalid length. [ 900.797167][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 900.818180][T19378] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 900.833570][T19422] loop3: detected capacity change from 0 to 16 [ 900.839803][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 900.844632][ T5945] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 900.864005][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.914782][ T5945] usb 1-1: Product: syz [ 900.940779][ T5945] usb 1-1: Manufacturer: syz [ 900.941150][T19422] erofs (device loop3): mounted with root inode @ nid 36. [ 900.945388][ T5945] usb 1-1: SerialNumber: syz [ 901.013161][ T5945] usb 1-1: config 0 descriptor?? [ 901.036001][ T5945] hub 1-1:0.0: bad descriptor, ignoring hub [ 901.063556][ T5945] hub 1-1:0.0: probe with driver hub failed with error -5 [ 901.076769][T19422] syz.3.5661: attempt to access beyond end of device [ 901.076769][T19422] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 901.155646][T19422] erofs (device loop3): read error -5 @ 43 of nid 36 [ 901.162679][ T5945] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input51 [ 901.298936][T19388] loop2: detected capacity change from 0 to 32768 [ 901.343083][ T5864] ocfs2: Unmounting device (7,4) on (node local) [ 901.412927][T19388] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 901.664527][T19388] XFS (loop2): Ending clean mount [ 901.889959][T19446] comedi: No check for data length of config insn id 131103 is implemented [ 901.990592][T19446] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 902.047591][T19446] comedi: Assuming n=15 is correct [ 902.083985][ T5870] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 903.036104][ T30] audit: type=1326 audit(2000000700.450:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f678ebe9 code=0x7ffc0000 [ 903.104678][T19479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.154974][ T30] audit: type=1326 audit(2000000700.450:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f678ebe9 code=0x7ffc0000 [ 903.294453][ T30] audit: type=1326 audit(2000000700.450:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f36f678ebe9 code=0x7ffc0000 [ 903.405031][ T30] audit: type=1326 audit(2000000700.450:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f678ebe9 code=0x7ffc0000 [ 903.431167][T19487] loop2: detected capacity change from 0 to 512 [ 903.469434][ T30] audit: type=1326 audit(2000000700.450:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.5684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f678ebe9 code=0x7ffc0000 [ 903.558107][T19487] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm syz.2.5690: Invalid inode bitmap blk 4 in block_group 0 [ 903.654052][T19487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.749757][T19487] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 903.834911][T19487] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm syz.2.5690: Invalid inode bitmap blk 4 in block_group 0 [ 903.854846][T19499] geneve2: entered promiscuous mode [ 903.875956][T19499] geneve2: entered allmulticast mode [ 903.899509][T19487] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 904.188120][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.217170][T19546] loop4: detected capacity change from 0 to 256 [ 905.312957][ T5945] usb 1-1: USB disconnect, device number 127 [ 905.331960][T19546] FAT-fs (loop4): Directory bread(block 64) failed [ 905.338510][T19546] FAT-fs (loop4): Directory bread(block 65) failed [ 905.393163][T19546] FAT-fs (loop4): Directory bread(block 66) failed [ 905.446393][T19546] FAT-fs (loop4): Directory bread(block 67) failed [ 905.460753][T19546] FAT-fs (loop4): Directory bread(block 68) failed [ 905.468239][T19546] FAT-fs (loop4): Directory bread(block 69) failed [ 905.474856][T19546] FAT-fs (loop4): Directory bread(block 70) failed [ 905.506096][T19546] FAT-fs (loop4): Directory bread(block 71) failed [ 905.539201][T19546] FAT-fs (loop4): Directory bread(block 72) failed [ 905.572440][T19546] FAT-fs (loop4): Directory bread(block 73) failed [ 905.746595][T19558] netlink: 'syz.1.5722': attribute type 2 has an invalid length. [ 906.537310][T19583] netlink: 'syz.2.5732': attribute type 21 has an invalid length. [ 906.545274][T19583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5732'. [ 907.007038][T19554] loop0: detected capacity change from 0 to 32768 [ 907.067454][T19554] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5720 (19554) [ 907.189900][T19554] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 907.243070][T19554] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 907.269989][T19596] loop1: detected capacity change from 0 to 4096 [ 907.580592][T19596] ntfs3(loop1): ino=19, mi_enum_attr [ 907.604290][T19554] BTRFS info (device loop0): enabling ssd optimizations [ 907.660863][T19596] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 907.669828][T19554] BTRFS info (device loop0): enabling free space tree [ 907.976192][T19632] delete_channel: no stack [ 908.094295][ T5866] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 908.244522][T19640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5753'. [ 908.311700][T19640] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 908.654252][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5760'. [ 908.742836][ T5945] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 908.963664][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 908.987207][ T5945] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 908.995401][ T5945] usb 6-1: config 0 has no interface number 0 [ 909.059839][ T5945] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 909.069887][ T5945] usb 6-1: config 0 interface 196 has no altsetting 0 [ 909.146358][T19660] comedi comedi1: adq12b: I/O port conflict (0x22f00,16) [ 909.180276][T19662] loop2: detected capacity change from 0 to 256 [ 909.192178][ T5945] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 909.209522][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.248644][ T5945] usb 6-1: Product: syz [ 909.257538][T19662] exfat: Unknown parameter 'discaro' [ 909.265960][ T5945] usb 6-1: Manufacturer: syz [ 909.270569][ T5945] usb 6-1: SerialNumber: syz [ 909.318907][ T5945] usb 6-1: config 0 descriptor?? [ 909.362338][T19644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 909.664624][ T5945] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 909.715231][ T5945] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 909.735558][T19671] loop4: detected capacity change from 0 to 2048 [ 909.781031][ T5945] usb 6-1: USB disconnect, device number 123 [ 909.846045][T19675] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 910.229540][T19678] loop2: detected capacity change from 0 to 4096 [ 910.261109][T19679] loop3: detected capacity change from 0 to 4096 [ 910.290701][T19678] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 910.328061][T19679] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 910.525087][T19678] ntfs3(loop2): ino=19, mi_enum_attr [ 910.559980][T19679] ntfs3(loop3): ino=19, mi_enum_attr [ 910.589534][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5778'. [ 910.631278][T19679] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 910.650142][T19678] ntfs3(loop2): ino=5, "/" indx_read [ 910.684985][T19678] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 910.762203][T19679] ntfs3(loop3): failed to convert "c46c" to cp855 [ 910.799000][T19679] ntfs3(loop3): ino=20, mi_enum_attr [ 911.211397][T19700] Lens A: ================= START STATUS ================= [ 911.218906][T19700] Lens A: Focus, Absolute: 0 [ 911.293964][T19700] Lens A: ================== END STATUS ================== [ 911.444261][T19672] loop1: detected capacity change from 0 to 32768 [ 912.049575][T19721] geneve2: entered promiscuous mode [ 912.091246][T19721] geneve2: entered allmulticast mode [ 912.230461][T19717] loop0: detected capacity change from 0 to 4096 [ 912.285181][T19717] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 912.480172][T19717] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 912.526561][T19717] ntfs3(loop0): mft corrupted [ 912.563476][T19717] ntfs3(loop0): Failed to load $Extend (-22). [ 912.604750][T19717] ntfs3(loop0): Failed to initialize $Extend. [ 912.697380][T19735] loop1: detected capacity change from 0 to 16 [ 912.760306][T19717] ntfs3(loop0): ino=1e, mi_enum_attr [ 912.765874][T19717] ntfs3(loop0): ino=1e, mi_enum_attr [ 912.771691][T19735] erofs (device loop1): mounted with root inode @ nid 36. [ 912.826294][T19735] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 912.858636][T19735] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 912.914262][T19735] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 912.976670][T19735] erofs (device loop1): read error -117 @ 0 of nid 89 [ 913.036354][ T30] audit: type=1800 audit(2000000709.806:72): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5801" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 913.128589][T19742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 913.379287][T19745] netlink: 'syz.0.5806': attribute type 3 has an invalid length. [ 913.387468][T19745] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5806'. [ 913.550681][T19712] loop3: detected capacity change from 0 to 32768 [ 913.670339][T19712] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 913.682199][T19756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5811'. [ 914.019882][T19712] XFS (loop3): Ending clean mount [ 914.267605][ T5876] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 914.492852][T19741] loop4: detected capacity change from 0 to 32768 [ 914.622568][T19741] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 914.656394][T19784] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5821'. [ 914.678839][T19785] loop2: detected capacity change from 0 to 8 [ 914.844882][T19785] SQUASHFS error: Failed to read block 0x4de: -5 [ 914.894596][T19785] SQUASHFS error: Failed to read block 0x4de: -5 [ 914.925961][T19785] SQUASHFS error: Failed to read block 0x4de: -5 [ 914.993435][T19785] SQUASHFS error: Failed to read block 0x4de: -5 [ 915.006167][T19790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 915.037310][T19741] XFS (loop4): Ending clean mount [ 915.037353][T19785] SQUASHFS error: Failed to read block 0x4de: -5 [ 915.089690][T19741] XFS (loop4): Quotacheck needed: Please wait. [ 915.113652][ T30] audit: type=1800 audit(2000000711.751:73): pid=19785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5820" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 915.248744][T19741] XFS (loop4): Quotacheck: Done. [ 915.456485][T19759] loop5: detected capacity change from 0 to 32768 [ 915.508028][T19759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5810 (19759) [ 915.508616][ T5864] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 915.729484][T19759] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 915.824901][T19759] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 916.162147][ T30] audit: type=1107 audit(2000000712.724:74): pid=19825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 916.216978][T19759] BTRFS info (device loop5): enabling ssd optimizations [ 916.245127][T19759] BTRFS info (device loop5): enabling free space tree [ 916.589814][ T5863] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 917.653611][T19864] loop2: detected capacity change from 0 to 4096 [ 917.730430][T19864] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 917.950698][T19864] ntfs3(loop2): ino=5, "/" indx_read [ 918.380947][ T43] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 918.617351][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 918.638666][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 918.672040][ T43] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 918.696912][ T43] usb 1-1: config 1 has no interface number 0 [ 918.718669][ T43] usb 1-1: config 1 interface 138 has no altsetting 0 [ 918.755213][ T43] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 918.788366][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.796406][ T43] usb 1-1: Product: syz [ 918.847647][ T43] usb 1-1: Manufacturer: syz [ 918.883301][ T43] usb 1-1: SerialNumber: syz [ 918.933330][T19865] loop3: detected capacity change from 0 to 32768 [ 919.151893][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.276179][ T43] usb 1-1: USB disconnect, device number 2 [ 919.430489][T19865] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 919.430539][T19865] allowing incompatible features above 0.0: (unknown version) [ 919.430563][T19865] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 919.507854][T19919] loop5: detected capacity change from 0 to 2048 [ 919.512816][T19919] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 919.564819][T19922] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 919.667910][T19865] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 919.687141][T19865] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 919.700588][T19926] loop1: detected capacity change from 0 to 256 [ 919.724930][T19865] bcachefs (loop3): Version upgrade required: [ 919.724930][T19865] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 919.724930][T19865] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 919.724930][T19865] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 919.849594][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.952050][T19865] bcachefs (loop3): dropping and reconstructing all alloc info [ 920.121993][T19865] bcachefs (loop3): accounting_read... done [ 920.182585][T19865] bcachefs (loop3): alloc_read... done [ 920.236383][T19865] bcachefs (loop3): snapshots_read... done [ 920.270147][T19865] bcachefs (loop3): check_allocations... done [ 920.534376][T19942] binder: 19941:19942 ioctl c0046209 0 returned -22 [ 920.658564][T19865] bcachefs (loop3): going read-write [ 920.669547][T19946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 920.754431][T19865] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 920.775743][T19865] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 920.784693][T19865] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 920.890501][T19865] bcachefs (loop3): unclean shutdown complete, journal seq 11 [ 920.951860][T19865] bcachefs (loop3): error in recovery: EINTR [ 920.951887][T19865] emergency read only at seq 11 [ 921.023716][T19865] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 921.072261][T19865] bcachefs (loop3): shutting down [ 921.204708][T19865] bcachefs (loop3): shutdown complete [ 921.299743][T19965] overlayfs: missing 'lowerdir' [ 921.703788][T19977] loop2: detected capacity change from 0 to 1764 [ 921.778307][T19977] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 922.123622][T19989] netlink: 'syz.2.5905': attribute type 4 has an invalid length. [ 922.236983][T19995] loop1: detected capacity change from 0 to 512 [ 922.316922][T19995] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 922.347220][T19995] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 922.383078][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 922.670189][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 923.427003][T20029] loop0: detected capacity change from 0 to 8 [ 923.456051][T20031] loop4: detected capacity change from 0 to 1024 [ 923.492317][T20031] EXT4-fs: Ignoring removed orlov option [ 923.498581][T20029] SQUASHFS error: Failed to read block 0x1ec: -5 [ 923.515648][T20031] EXT4-fs: Ignoring removed mblk_io_submit option [ 923.522151][T20029] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 923.554810][T20031] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 923.651163][T20031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.025914][ T5864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.100037][ T9] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 924.281135][T20051] loop2: detected capacity change from 0 to 1024 [ 924.339688][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 924.371090][ T9] usb 6-1: config 0 has no interface number 0 [ 924.376178][T20056] loop0: detected capacity change from 0 to 8 [ 924.439699][T20056] SQUASHFS error: Failed to read block 0x4de: -5 [ 924.456144][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 924.476843][T20056] SQUASHFS error: Failed to read block 0x4de: -5 [ 924.483345][T20056] SQUASHFS error: Failed to read block 0x4de: -5 [ 924.488052][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.527573][ T9] usb 6-1: Product: syz [ 924.535100][T20056] SQUASHFS error: Failed to read block 0x4de: -5 [ 924.548765][ T9] usb 6-1: Manufacturer: syz [ 924.567653][ T9] usb 6-1: SerialNumber: syz [ 924.572816][T19865] bcachefs: bch2_fs_get_tree() error: EINTR [ 924.604229][T20056] SQUASHFS error: Failed to read block 0x4de: -5 [ 924.624580][ T9] usb 6-1: config 0 descriptor?? [ 924.645796][ T30] audit: type=1800 audit(2000000720.676:75): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5935" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 924.856401][ T9] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 924.935514][ T9] usb 6-1: USB disconnect, device number 124 [ 925.282977][T20070] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 925.372404][T20072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.705687][T20052] loop1: detected capacity change from 0 to 32768 [ 925.820815][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 925.833287][T20052] ea_get: invalid extended attribute [ 925.838864][T20052] ffff88805927df60: 04 00 00 00 .... [ 925.991756][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 926.056349][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.119956][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.129734][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 926.162735][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.219243][ T43] usb 4-1: config 0 descriptor?? [ 926.237194][ T43] hub 4-1:0.0: USB hub found [ 926.377929][T20094] netlink: 'syz.1.5952': attribute type 10 has an invalid length. [ 926.385908][T20092] loop5: detected capacity change from 0 to 4096 [ 926.446325][ T43] hub 4-1:0.0: 2 ports detected [ 926.485111][T20095] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 926.655262][T20094] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 926.675017][ T43] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 926.737586][ T43] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 926.816170][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 926.822213][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 926.890423][ T43] usb 4-1: USB disconnect, device number 6 [ 927.083564][T20068] loop4: detected capacity change from 0 to 32768 [ 927.183512][T20068] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 927.253337][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 927.415184][ T43] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 927.484056][T20068] XFS (loop4): Ending clean mount [ 927.513653][T20068] XFS (loop4): Quotacheck needed: Please wait. [ 927.555957][T20118] loop2: detected capacity change from 0 to 2048 [ 927.590489][T20068] XFS (loop4): Quotacheck: Done. [ 927.629704][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 927.631472][T20118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 927.668244][ T43] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 927.699404][ T43] usb 2-1: config 0 has no interface number 0 [ 927.744980][ T43] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 927.755063][ T43] usb 2-1: config 0 interface 196 has no altsetting 0 [ 927.782383][T20119] loop5: detected capacity change from 0 to 4096 [ 927.810944][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 927.825644][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.847593][ T5864] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 927.855541][ T43] usb 2-1: Product: syz [ 927.860293][ T43] usb 2-1: Manufacturer: syz [ 927.883773][T20119] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 927.911601][ T43] usb 2-1: SerialNumber: syz [ 927.959987][ T43] usb 2-1: config 0 descriptor?? [ 927.994142][T20105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 928.269193][ T43] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 928.315852][ T43] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 928.389356][ T43] usb 2-1: USB disconnect, device number 107 [ 929.002660][T20104] loop0: detected capacity change from 0 to 32768 [ 929.044742][T20141] tmpfs: Bad value for 'mpol' [ 929.081287][T20104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5957 (20104) [ 929.164252][T20143] loop3: detected capacity change from 0 to 2048 [ 929.197184][T20143] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 929.205462][T20104] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 929.212092][T20147] usb usb8: usbfs: process 20147 (syz.1.5971) did not claim interface 0 before use [ 929.263103][T20104] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 929.284246][T20143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 929.594767][T20104] BTRFS info (device loop0): enabling ssd optimizations [ 929.601757][T20104] BTRFS info (device loop0): enabling free space tree [ 930.080160][ T5866] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 930.183871][T20183] loop1: detected capacity change from 0 to 256 [ 930.237380][ T30] audit: type=1326 audit(2000000725.906:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.287224][T20183] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 930.348828][T20183] FAT-fs (loop1): Filesystem has been set read-only [ 930.357253][ T30] audit: type=1326 audit(2000000725.925:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.393660][ T30] audit: type=1326 audit(2000000725.934:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.416247][ T30] audit: type=1326 audit(2000000725.934:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.439133][ T30] audit: type=1326 audit(2000000725.934:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.544434][ T30] audit: type=1326 audit(2000000725.934:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.682021][ T30] audit: type=1326 audit(2000000725.934:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.812724][ T30] audit: type=1326 audit(2000000725.934:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.909686][ T30] audit: type=1326 audit(2000000725.934:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20186 comm="syz.3.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 930.941816][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 931.138436][T18353] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 931.165266][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 931.174995][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 931.195604][ T9] usb 1-1: config 0 has no interface number 0 [ 931.206453][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 931.264244][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 931.291059][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 931.322553][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.347750][T18353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 931.366247][ T9] usb 1-1: Product: syz [ 931.379338][T18353] usb 4-1: not running at top speed; connect to a high speed hub [ 931.384315][ T9] usb 1-1: Manufacturer: syz [ 931.414929][ T9] usb 1-1: SerialNumber: syz [ 931.446823][ T9] usb 1-1: config 0 descriptor?? [ 931.449708][T18353] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 931.480980][T18353] usb 4-1: config 1 has no interface number 0 [ 931.501875][T18353] usb 4-1: config 1 interface 138 has no altsetting 0 [ 931.503688][T20195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.556998][T18353] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 931.578171][T18353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.597223][T18353] usb 4-1: Product: syz [ 931.609748][T18353] usb 4-1: Manufacturer: syz [ 931.618787][T18353] usb 4-1: SerialNumber: syz [ 931.822436][ T9] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 931.881886][ T9] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 931.919866][T20226] netlink: 'syz.4.6003': attribute type 10 has an invalid length. [ 931.923214][T18353] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 931.970891][ T9] usb 1-1: USB disconnect, device number 3 [ 932.080589][T20226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 932.095677][ T5945] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 932.096098][T18353] usb 4-1: USB disconnect, device number 7 [ 932.291900][ T5945] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 932.331739][ T5945] usb 3-1: config 0 has no interface number 0 [ 932.348723][ T5945] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 932.380881][ T5945] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 932.440168][ T5945] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 932.490871][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.498911][ T5945] usb 3-1: Product: syz [ 932.541051][ T5945] usb 3-1: Manufacturer: syz [ 932.554874][ T5945] usb 3-1: SerialNumber: syz [ 932.603587][ T5945] usb 3-1: config 0 descriptor?? [ 932.630280][T20224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 932.664168][ T5945] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 932.706718][ T5945] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 933.245635][T18353] usb 3-1: USB disconnect, device number 123 [ 933.278266][T18353] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 933.344635][T18353] cyberjack 3-1:0.69: device disconnected [ 933.515728][T20260] loop1: detected capacity change from 0 to 64 [ 933.779140][T20262] loop3: detected capacity change from 0 to 4096 [ 933.853343][T20262] ntfs3(loop3): It is recommened to use chkdsk. [ 933.907626][T20268] netlink: 'syz.4.6023': attribute type 11 has an invalid length. [ 933.924979][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 933.976039][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 934.019180][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 934.027110][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 934.079194][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 934.125251][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 934.194897][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 934.239118][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 934.293104][T20262] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 934.489767][T20282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6029'. [ 934.623400][T20245] loop5: detected capacity change from 0 to 32768 [ 934.746481][T20245] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 934.807072][T20298] netlink: 'syz.0.6033': attribute type 21 has an invalid length. [ 934.955030][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6036'. [ 935.053768][T20245] XFS (loop5): Ending clean mount [ 935.079906][T20245] XFS (loop5): Quotacheck needed: Please wait. [ 935.227261][T20245] XFS (loop5): Quotacheck: Done. [ 935.494469][T20315] dlm: no locking on control device [ 935.597692][ T5863] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 935.785825][T20319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6044'. [ 935.914952][ T30] audit: type=1326 audit(2000000731.210:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 935.975215][ T30] audit: type=1326 audit(2000000731.238:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 936.090610][ T30] audit: type=1326 audit(2000000731.238:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 936.184142][ T30] audit: type=1326 audit(2000000731.238:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 936.199906][T20321] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 936.234289][T20321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6045'. [ 936.270400][T20321] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 936.296481][ T30] audit: type=1326 audit(2000000731.238:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20322 comm="syz.2.6046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 936.606462][T20332] loop0: detected capacity change from 0 to 4096 [ 936.742794][T20332] ntfs3(loop0): ino=1a, mi_enum_attr [ 936.760713][T20332] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 936.794490][T20309] loop1: detected capacity change from 0 to 32768 [ 936.873565][T20309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6039 (20309) [ 936.942461][T20309] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 936.982843][T20309] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 937.021423][T20313] loop4: detected capacity change from 0 to 32768 [ 937.140921][ T5962] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 937.153368][T20313] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 937.228035][T20363] netlink: 'syz.0.6056': attribute type 11 has an invalid length. [ 937.365941][ T5962] usb 6-1: unable to get BOS descriptor or descriptor too short [ 937.380813][T20309] BTRFS info (device loop1): enabling ssd optimizations [ 937.407916][T20309] BTRFS info (device loop1): enabling free space tree [ 937.425142][ T5962] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 937.487944][ T5962] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 937.517913][ T5962] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 937.548578][ T5962] usb 6-1: config 129 has no interface number 0 [ 937.576800][ T5962] usb 6-1: config 129 has no interface number 1 [ 937.620238][ T5962] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 937.646239][T20313] XFS (loop4): Ending clean mount [ 937.673547][ T5865] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.677022][T20313] XFS (loop4): Quotacheck needed: Please wait. [ 937.691088][ T5962] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 937.723858][ T5962] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 937.811361][ T5962] usb 6-1: config 129 interface 135 has no altsetting 0 [ 937.841466][ T5962] usb 6-1: config 129 interface 5 has no altsetting 0 [ 937.920178][ T5962] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 937.979429][T20313] XFS (loop4): Quotacheck: Done. [ 937.987892][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.028639][ T5962] usb 6-1: Product: syz [ 938.043754][ T5962] usb 6-1: Manufacturer: syz [ 938.070962][ T5962] usb 6-1: SerialNumber: syz [ 938.254556][ T5945] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 938.262186][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 938.358558][ T5962] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 938.365883][ T5962] usb 6-1: MIDIStreaming interface descriptor not found [ 938.369449][ T5864] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 938.455480][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 938.467740][ T5962] usb 6-1: USB disconnect, device number 125 [ 938.468351][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 938.517039][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 938.529805][ T5945] usb 4-1: config 0 has no interface number 0 [ 938.543886][ T9] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 938.570889][ T5945] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 938.602006][ T9] usb 2-1: Product: syz [ 938.612779][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.626367][ T9] usb 2-1: Manufacturer: syz [ 938.631003][ T9] usb 2-1: SerialNumber: syz [ 938.677780][ T5945] usb 4-1: Product: syz [ 938.690831][ T5945] usb 4-1: Manufacturer: syz [ 938.696258][ T5945] usb 4-1: SerialNumber: syz [ 938.710551][ T9] usb 2-1: config 0 descriptor?? [ 938.764630][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 938.777951][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.873885][ T5945] usb 4-1: config 0 descriptor?? [ 939.095484][T20359] loop2: detected capacity change from 0 to 32768 [ 939.155280][ T5945] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 939.183810][T20359] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 939.229303][ T9] gspca_zc3xx: reg_r err -71 [ 939.233984][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 939.247043][ T5945] usb 4-1: USB disconnect, device number 8 [ 939.259951][ T9] usb 2-1: USB disconnect, device number 108 [ 939.425051][T20359] XFS (loop2): Ending clean mount [ 939.428607][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 939.475019][T20359] XFS (loop2): Quotacheck needed: Please wait. [ 939.594109][T20359] XFS (loop2): Quotacheck: Done. [ 939.620683][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 939.684918][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 939.714925][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 939.779599][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.814924][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 939.835474][ T10] usb 1-1: config 1 has no interface number 0 [ 939.866366][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 939.905075][ T5870] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 939.909098][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.008214][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 940.229471][ T10] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 940.266229][T20407] loop1: detected capacity change from 0 to 256 [ 940.272191][ T10] snd_usb_pod 1-1:1.1: invalid control EP [ 940.282710][ T10] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 940.304485][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 940.312896][ T10] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 940.436900][T20400] loop5: detected capacity change from 0 to 32768 [ 940.506253][T18353] usb 1-1: USB disconnect, device number 4 [ 940.571190][T20400] (syz.5.6068,20400,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 940.631114][T20400] (syz.5.6068,20400,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 940.758930][T20400] (syz.5.6068,20400,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 940.840413][T20400] JBD2: Ignoring recovery information on journal [ 940.978062][T20400] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 941.435425][ T5863] ocfs2: Unmounting device (7,5) on (node local) [ 941.472837][T20428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 941.573587][T20424] loop1: detected capacity change from 0 to 8192 [ 941.625770][T20424] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 941.726040][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 941.743641][T20440] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.6086'. [ 941.758620][T20424] FAT-fs (loop1): Filesystem has been set read-only [ 941.776829][T20440] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.6086'. [ 941.786630][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 941.801218][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 941.820113][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 941.865495][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 941.916647][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 941.945222][T20441] loop2: detected capacity change from 0 to 4096 [ 941.975129][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 942.019522][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 942.044714][T20441] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 942.098967][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 942.139294][T20424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 942.208110][ T30] audit: type=1800 audit(2000000737.085:90): pid=20424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6078" name="file2" dev="loop1" ino=1048633 res=0 errno=0 [ 942.281485][T20413] loop3: detected capacity change from 0 to 32768 [ 942.326833][T20447] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 942.343212][T20413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6075 (20413) [ 942.453826][T20413] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 942.535618][T20413] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 942.690119][T20447] bond3: entered promiscuous mode [ 942.695187][T20447] bond3: entered allmulticast mode [ 942.852294][T20447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 942.885342][T20413] BTRFS info (device loop3): enabling ssd optimizations [ 942.900998][T20465] loop0: detected capacity change from 0 to 1764 [ 942.933449][T20413] BTRFS info (device loop3): enabling free space tree [ 943.065794][T20465] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 943.319506][ T5876] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 943.657997][T20486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.870216][T20494] loop1: detected capacity change from 0 to 128 [ 943.953934][T20494] FAT-fs (loop1): Directory bread(block 11554) failed [ 943.986717][T20494] FAT-fs (loop1): Directory bread(block 11555) failed [ 944.043566][T20494] FAT-fs (loop1): Directory bread(block 11556) failed [ 944.073194][T20494] FAT-fs (loop1): Directory bread(block 11557) failed [ 944.089230][T20494] FAT-fs (loop1): Directory bread(block 11558) failed [ 944.096035][T20494] FAT-fs (loop1): Directory bread(block 11559) failed [ 944.113766][T20467] loop4: detected capacity change from 0 to 32768 [ 944.153436][T20467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6095 (20467) [ 944.163436][T20494] FAT-fs (loop1): Directory bread(block 11560) failed [ 944.173010][T20494] FAT-fs (loop1): Directory bread(block 11561) failed [ 944.227252][T20467] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 944.258690][T20494] FAT-fs (loop1): Directory bread(block 11562) failed [ 944.274540][T20467] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 944.287634][T20494] FAT-fs (loop1): Directory bread(block 11563) failed [ 944.481886][T20467] BTRFS info (device loop4): enabling ssd optimizations [ 944.554866][T20467] BTRFS info (device loop4): enabling free space tree [ 944.811570][T20522] loop0: detected capacity change from 0 to 16 [ 944.858825][T20522] erofs (device loop0): mounted with root inode @ nid 36. [ 944.907151][ T5864] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 945.770665][T20552] netlink: 'syz.4.6125': attribute type 1 has an invalid length. [ 946.110132][T20559] ieee802154 phy0 wpan0: encryption failed: -22 [ 946.278614][T20560] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 946.327042][T20560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6129'. [ 946.351438][T20560] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 946.365626][ T5962] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 946.558643][ T5962] usb 2-1: Using ep0 maxpacket: 8 [ 946.596441][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 946.651252][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 946.679699][T20576] ./file0: Can't open blockdev [ 946.698425][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 946.757740][ T5962] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 946.793084][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.814461][ T5962] usb 2-1: Product: syz [ 946.818640][ T5962] usb 2-1: Manufacturer: syz [ 946.843433][ T5962] usb 2-1: SerialNumber: syz [ 946.905646][ T5962] usb 2-1: config 0 descriptor?? [ 946.942466][ T5962] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 947.108415][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6143'. [ 947.124426][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 947.195702][T20590] Driver unsupported XDP return value 0 on prog (id 341) dev N/A, expect packet loss! [ 947.226527][ T43] usb 2-1: USB disconnect, device number 109 [ 947.319674][ T5962] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 947.329680][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 947.343624][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.375868][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 947.395895][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.418389][ T24] usb 1-1: config 0 descriptor?? [ 947.456226][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 947.500692][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 947.516864][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 947.532062][ T5962] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 947.562726][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.562730][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 947.621986][ T5962] usb 3-1: Product: syz [ 947.626233][ T5962] usb 3-1: Manufacturer: syz [ 947.640020][ T5962] usb 3-1: SerialNumber: syz [ 947.664572][ T5962] usb 3-1: config 0 descriptor?? [ 947.733885][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 947.753375][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.774103][ T9] usb 5-1: Product: syz [ 947.778655][ T9] usb 5-1: Manufacturer: syz [ 947.783260][ T9] usb 5-1: SerialNumber: syz [ 947.820796][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 947.864063][ T5945] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 947.871644][ T24] gspca_vc032x: reg_w err -71 [ 947.910543][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 947.980668][ T24] usb 1-1: USB disconnect, device number 5 [ 948.138539][ T5962] usb 3-1: USB disconnect, device number 124 [ 948.157437][ C0] usb 5-1: ath: unknown panic pattern! [ 948.267390][T12352] udevd[12352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.067937][T20613] netlink: 'syz.3.6155': attribute type 3 has an invalid length. [ 949.802337][T20623] loop3: detected capacity change from 0 to 256 [ 949.903152][T20623] exfat: Deprecated parameter 'utf8' [ 950.096029][T20623] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 950.265300][T20602] loop5: detected capacity change from 0 to 40427 [ 950.419365][T20602] F2FS-fs (loop5): build fault injection rate: 14 [ 950.545708][T20602] F2FS-fs (loop5): invalid crc value [ 950.929976][ T43] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 951.050113][T20636] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 951.197080][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 951.272124][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.365398][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.485345][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 951.544425][T20602] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 951.603243][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.766112][ T43] usb 2-1: config 0 descriptor?? [ 951.842531][ T43] hub 2-1:0.0: USB hub found [ 951.998320][ T43] hub 2-1:0.0: 2 ports detected [ 952.233957][ T43] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 952.317375][ T43] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 952.469248][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 952.516555][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 952.651523][ T43] usb 2-1: USB disconnect, device number 110 [ 954.106709][T20659] loop4: detected capacity change from 0 to 16 [ 954.241580][T20659] erofs (device loop4): mounted with root inode @ nid 36. [ 954.716895][ T5878] erofs (device loop4): failed to decompress -26 in[46, 0] out[9000] [ 954.739526][T20659] erofs (device loop4): failed to decompress -26 in[46, 4050] out[8192] [ 954.760983][T20661] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 954.823906][T20659] erofs (device loop4): read error -117 @ 1 of nid 89 [ 954.885296][ T30] audit: type=1800 audit(2000000748.966:91): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6176" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 954.890801][ T5945] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 954.915350][ T9] usb 5-1: USB disconnect, device number 5 [ 954.941793][ T5945] ath9k_htc: Failed to initialize the device [ 954.949168][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 955.675614][T20671] loop0: detected capacity change from 0 to 4096 [ 955.745988][T20671] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 955.865384][T20655] loop3: detected capacity change from 0 to 32768 [ 955.914554][T20655] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6174 (20655) [ 956.013944][T20655] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 956.043200][T20671] ntfs3(loop0): ino=19, mi_enum_attr [ 956.051820][T20671] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 956.082036][T20655] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 956.091288][T20655] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 956.144344][T20687] loop4: detected capacity change from 0 to 4096 [ 956.235053][T20671] ntfs3(loop0): failed to convert "c46c" to cp865 [ 956.271231][T20703] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 956.282267][T20671] ntfs3(loop0): ino=20, mi_enum_attr [ 956.368100][T20702] loop1: detected capacity change from 0 to 2048 [ 956.477917][T20655] BTRFS info (device loop3): rebuilding free space tree [ 956.502359][T20702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.533350][T20655] BTRFS info (device loop3): disabling free space tree [ 956.544441][T20655] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 956.579347][T20655] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 956.694726][T20655] BTRFS info (device loop3): allowing degraded mounts [ 956.701552][T20655] BTRFS info (device loop3): enabling ssd optimizations [ 956.784131][T20655] BTRFS info (device loop3): enabling disk space caching [ 956.827651][T20655] BTRFS info (device loop3): force clearing of disk cache [ 956.870495][T20655] BTRFS info (device loop3): use zlib compression, level 3 [ 957.025453][T20655] BTRFS info (device loop3): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=4,usage=4..0,devid=0,drange=9223372036854776319..7,limit=20030,limit=20030..0 [ 957.087144][T20655] BTRFS info (device loop3): balance: ended with status: 0 [ 957.320568][ T5876] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 957.495710][T20727] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6200'. [ 957.692305][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.698872][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 957.798390][T20693] loop5: detected capacity change from 0 to 32768 [ 958.043052][T20739] loop1: detected capacity change from 0 to 164 [ 958.058160][T20738] loop4: detected capacity change from 0 to 1024 [ 958.098247][T20739] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 958.249447][T20739] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 958.264617][T20743] loop0: detected capacity change from 0 to 1024 [ 958.339356][ T36] hfsplus: b-tree write err: -5, ino 4 [ 958.361541][T20743] EXT4-fs (loop0): orphan cleanup on readonly fs [ 958.457738][T20748] loop3: detected capacity change from 0 to 64 [ 958.521108][T20743] EXT4-fs (loop0): 1 truncate cleaned up [ 958.608203][T20743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 958.922379][ T5866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.022558][T20760] loop4: detected capacity change from 0 to 16 [ 959.064011][T20760] erofs (device loop4): mounted with root inode @ nid 36. [ 959.145734][T20760] erofs (device loop4): invalid tail-packing pclustersize 32768 [ 959.195662][T20760] erofs (device loop4): invalid tail-packing pclustersize 32768 [ 959.261427][T20760] erofs (device loop4): read error -117 @ 32811 of nid 36 [ 960.668103][T20820] geneve3: entered promiscuous mode [ 960.673343][T20820] geneve3: entered allmulticast mode [ 960.881251][T20829] random: crng reseeded on system resumption [ 960.977831][T20832] netlink: 'syz.4.6239': attribute type 1 has an invalid length. [ 961.003847][T20830] loop1: detected capacity change from 0 to 1024 [ 961.042012][T20832] netlink: 'syz.4.6239': attribute type 3 has an invalid length. [ 961.049772][T20832] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6239'. [ 961.409748][ T3560] hfsplus: b-tree write err: -5, ino 4 [ 962.013460][T20858] loop1: detected capacity change from 0 to 256 [ 962.020003][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 962.064270][T20858] exfat: Deprecated parameter 'namecase' [ 962.089606][T20858] exfat: Deprecated parameter 'utf8' [ 962.160341][T20858] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 962.210165][ T24] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 962.239782][ T24] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 962.270036][ T24] usb 1-1: Product: syz [ 962.296053][ T24] usb 1-1: Manufacturer: syz [ 962.300693][ T24] usb 1-1: SerialNumber: syz [ 962.357192][ T24] usb 1-1: config 0 descriptor?? [ 962.416282][ T24] usb 1-1: selecting invalid altsetting 1 [ 962.441704][ T24] comedi comedi5: could not switch to alternate setting 1 [ 962.463574][ T24] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 962.497314][T20870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6257'. [ 962.688645][ T5962] usb 1-1: USB disconnect, device number 6 [ 962.749923][T20836] loop3: detected capacity change from 0 to 32768 [ 962.806535][T20836] (syz.3.6241,20836,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 962.872149][T20836] (syz.3.6241,20836,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 962.956625][T20836] JBD2: Ignoring recovery information on journal [ 962.993392][T20883] netlink: 'syz.4.6264': attribute type 11 has an invalid length. [ 963.155272][T20836] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 963.649740][T20892] loop0: detected capacity change from 0 to 2048 [ 963.708983][ T5876] ocfs2: Unmounting device (7,3) on (node local) [ 963.731089][ T7091] loop0: p1 < > p3 p4 < > [ 963.751411][ T7091] loop0: p3 start 4284289 is beyond EOD, truncated [ 963.790116][T20892] loop0: p1 < > p3 p4 < > [ 963.825694][T20892] loop0: p3 start 4284289 is beyond EOD, truncated [ 964.091624][T20880] loop1: detected capacity change from 0 to 32768 [ 964.353125][ T7091] udevd[7091]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 964.359701][ T6031] udevd[6031]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 964.715929][T20886] loop2: detected capacity change from 0 to 32768 [ 964.736740][T20886] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6265 (20886) [ 964.750830][ T5962] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 964.901777][T20886] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 964.939241][T20886] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 964.964980][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 964.983678][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 965.031075][ T5962] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 965.106314][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.172410][ T5962] usb 4-1: config 0 descriptor?? [ 965.188505][ T5962] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input53 [ 965.217044][T20886] BTRFS info (device loop2): enabling ssd optimizations [ 965.274880][T20886] BTRFS info (device loop2): enabling free space tree [ 965.416692][ T5212] bcm5974 4-1:0.0: could not read from device [ 965.519921][ T5962] bcm5974 4-1:0.0: could not read from device [ 965.558092][ T5212] bcm5974 4-1:0.0: could not read from device [ 965.630231][ T5870] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 965.674316][ T5962] input: failed to attach handler mousedev to device input53, error: -5 [ 965.699455][ T5212] bcm5974 4-1:0.0: could not read from device [ 965.741463][ T5212] bcm5974 4-1:0.0: could not read from device [ 965.747947][ T5962] usb 4-1: USB disconnect, device number 9 [ 966.450470][T20917] loop4: detected capacity change from 0 to 32768 [ 966.497416][T20956] program syz.3.6291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 966.571175][T20959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.584532][T20917] ERROR: (device loop4): diAllocAG: numfree > numinos [ 966.584532][T20917] [ 966.684486][T20916] loop1: detected capacity change from 0 to 32768 [ 966.697777][T20917] ialloc: diAlloc returned -5! [ 968.289725][ T5988] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 968.503032][ T5988] usb 4-1: config 0 has no interfaces? [ 968.527693][ T5988] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 968.567182][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.575210][ T5988] usb 4-1: Product: syz [ 968.613853][ T5988] usb 4-1: Manufacturer: syz [ 968.618531][ T5988] usb 4-1: SerialNumber: syz [ 968.664873][ T5988] usb 4-1: config 0 descriptor?? [ 968.899184][T20999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.938317][T20999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.957198][ T30] audit: type=1326 audit(2000000762.120:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21030 comm="syz.5.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2898ebe9 code=0x7ffc0000 [ 968.980410][ T9] usb 4-1: USB disconnect, device number 10 [ 969.073464][ T30] audit: type=1326 audit(2000000762.176:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21030 comm="syz.5.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f2c2898ebe9 code=0x7ffc0000 [ 969.095835][ C1] vkms_vblank_simulate: vblank timer overrun [ 969.200766][ T30] audit: type=1326 audit(2000001530.186:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21030 comm="syz.5.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2898ebe9 code=0x7ffc0000 [ 969.223052][ C1] vkms_vblank_simulate: vblank timer overrun [ 969.280370][T21036] loop0: detected capacity change from 0 to 8 [ 969.314811][ T30] audit: type=1326 audit(2000001530.186:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21030 comm="syz.5.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2898ebe9 code=0x7ffc0000 [ 969.482719][T21036] SQUASHFS error: xz decompression failed, data probably corrupt [ 969.517425][T21036] SQUASHFS error: Failed to read block 0x60: -5 [ 969.588887][T21036] SQUASHFS error: xz decompression failed, data probably corrupt [ 969.596657][T21036] SQUASHFS error: Failed to read block 0x60: -5 [ 969.651548][ T30] audit: type=1800 audit(2000001530.837:96): pid=21036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6331" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 969.675742][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6336'. [ 970.694413][T21075] loop4: detected capacity change from 0 to 4096 [ 970.863201][T21087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.937956][T21075] ntfs3(loop4): ino=5, "/" indx_read [ 970.994614][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6358'. [ 971.307555][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 971.359388][T21098] netlink: 'syz.0.6362': attribute type 2 has an invalid length. [ 972.007847][T21121] random: crng reseeded on system resumption [ 972.051764][T21125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6374'. [ 972.173802][T21124] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 972.636443][T21140] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 973.198859][T21158] wg1 speed is unknown, defaulting to 1000 [ 973.253368][T21160] loop1: detected capacity change from 0 to 1024 [ 974.020382][T21130] loop0: detected capacity change from 0 to 32768 [ 974.111234][T21130] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 974.292450][T21196] loop3: detected capacity change from 0 to 64 [ 974.366430][T21199] loop2: detected capacity change from 0 to 16 [ 974.417261][T21196] hfs: keylen 94 too large [ 974.437103][T21130] XFS (loop0): Ending clean mount [ 974.470467][T21199] erofs (device loop2): mounted with root inode @ nid 36. [ 974.483598][ T5988] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 974.509673][T21130] XFS (loop0): Quotacheck needed: Please wait. [ 974.565515][ T5878] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000] [ 974.600291][T21199] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 974.675631][ T5988] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 974.714097][T21199] erofs (device loop2): read error -117 @ 1 of nid 89 [ 974.733861][ T30] audit: type=1800 audit(2000001536.160:97): pid=21199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6407" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 974.759636][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.767738][T21130] XFS (loop0): Quotacheck: Done. [ 974.818943][ T5988] usb 2-1: Product: syz [ 974.823158][ T5988] usb 2-1: Manufacturer: syz [ 974.864526][ T5988] usb 2-1: SerialNumber: syz [ 974.900468][ T5988] usb 2-1: config 0 descriptor?? [ 974.947728][ T5988] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 975.067035][ T5866] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 975.360237][ T5988] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 975.369016][ T5988] sq905c 2-1:0.0: Reading version command failed [ 975.401951][ T5988] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 975.442101][ T5988] usb 2-1: USB disconnect, device number 111 [ 976.112882][T21240] loop1: detected capacity change from 0 to 128 [ 976.140710][ T5953] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 976.159793][ T5962] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 976.209931][T21240] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 976.307246][T21246] loop3: detected capacity change from 0 to 512 [ 976.314434][ T5953] usb 6-1: config 0 has an invalid interface number: 90 but max is 0 [ 976.323296][T21246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 976.331764][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 976.342950][ T5962] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 976.359302][ T5953] usb 6-1: config 0 has no interface number 0 [ 976.368758][ T5962] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 976.379695][T21240] ext4 filesystem being mounted at /1084/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 976.397091][ T5953] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 976.400554][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.428167][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.461169][T21246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.463284][ T5962] usb 5-1: Product: syz [ 976.484866][ T5953] usb 6-1: Product: syz [ 976.497613][ T5962] usb 5-1: Manufacturer: syz [ 976.501946][ T5953] usb 6-1: Manufacturer: syz [ 976.512193][ T5962] usb 5-1: SerialNumber: syz [ 976.529426][ T5962] usb 5-1: config 0 descriptor?? [ 976.540653][ T5953] usb 6-1: SerialNumber: syz [ 976.541619][T21233] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 976.552573][T21246] ext4 filesystem being mounted at /1059/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.596892][T21246] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.6432: verity file corrupted; can't find descriptor [ 976.599001][ T5865] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 976.615000][ T5962] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 976.638871][T21246] EXT4-fs (loop3): Remounting filesystem read-only [ 976.652575][ T5953] usb 6-1: config 0 descriptor?? [ 976.654051][T21246] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 976.896383][ T5953] cdc_subset 6-1:0.90: probe with driver cdc_subset failed with error -22 [ 976.965873][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.181599][ T43] usb 6-1: USB disconnect, device number 126 [ 977.196417][T21233] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 977.202950][T21233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 977.248857][T21233] vhci_hcd vhci_hcd.0: Device attached [ 977.320926][T21259] vhci_hcd: connection closed [ 977.325269][ T5953] usb 5-1: USB disconnect, device number 6 [ 977.325406][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 977.378485][ T1139] vhci_hcd: stop threads [ 977.395311][T21268] loop1: detected capacity change from 0 to 2048 [ 977.403500][ T1139] vhci_hcd: release socket [ 977.418912][ T5962] vhci_hcd: vhci_device speed not set [ 977.434087][ T1139] vhci_hcd: disconnect device [ 977.496456][T21268] loop1: p1 < > p4 [ 977.502619][ T5962] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 977.526897][T21268] loop1: p4 start 42180 is beyond EOD, truncated [ 977.533871][ T5962] usb 41-1: enqueue for inactive port 0 [ 977.628955][ T5962] vhci_hcd: vhci_device speed not set [ 977.851794][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6442'. [ 978.299235][T21291] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 979.045723][ T5953] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 979.081824][T21317] ALSA: mixer_oss: invalid OSS volume '' [ 979.108505][T21317] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 979.165518][T21317] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 979.194427][T21317] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 979.251395][T21317] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 979.259337][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.262155][T21317] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 979.284433][T21317] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 979.292775][T21317] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 979.293626][ T5953] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 979.304991][T21317] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 979.366667][T21317] ALSA: mixer_oss: invalid OSS volume 'I ‹È:•þàâ' [ 979.368829][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.402622][T21317] ALSA: mixer_oss: invalid OSS volume '%^Óvƒªhc¾GJPÿÃÐöø¬rª('â¯Q=' [ 979.414380][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.447668][ T5953] usb 5-1: Product: syz [ 979.464659][T21317] ALSA: mixer_oss: invalid OSS volume ' ‰Gjä;4÷ÊÃŒðÙÆzÜ3¸W´Ò¼0ÙF=%¾' [ 979.469723][ T5953] usb 5-1: Manufacturer: syz [ 979.510633][ T5953] usb 5-1: SerialNumber: syz [ 979.512194][T21317] ALSA: mixer_oss: invalid OSS volume ';4— å‚«4òfhÊ߇G¥ŽIב°Q÷5o“J' [ 979.561956][T21308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 979.568334][T21308] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 979.578365][ T5953] cdc_ncm 5-1:1.0: skipping garbage [ 979.599617][ T5953] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 979.607223][T21317] ALSA: mixer_oss: invalid OSS volume 'WöŒ’ló]Y1Õ-¬ž¾ÙJ<´¶³ªAÆ>ƒïo' [ 979.641352][ T5953] cdc_ncm 5-1:1.0: bind() failure [ 979.673454][T21308] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 979.680621][ T5953] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 979.710593][T21308] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 979.719262][ T5953] cdc_ncm 5-1:1.1: bind() failure [ 979.729876][T21308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 979.785593][T21336] loop0: detected capacity change from 0 to 256 [ 979.788743][T21308] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 979.817731][ T5953] usb 5-1: USB disconnect, device number 7 [ 979.956205][T21336] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 980.010004][T21344] loop5: detected capacity change from 0 to 8 [ 980.144284][T21344] SQUASHFS error: xz decompression failed, data probably corrupt [ 980.221166][T21344] SQUASHFS error: Failed to read block 0x60: -5 [ 980.262825][T21344] SQUASHFS error: xz decompression failed, data probably corrupt [ 980.296019][T21344] SQUASHFS error: Failed to read block 0x60: -5 [ 980.344802][ T30] audit: type=1800 audit(2000001542.050:98): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6473" name="file1" dev="loop5" ino=1 res=0 errno=0 [ 980.399225][T21348] loop2: detected capacity change from 0 to 64 [ 981.941769][T21391] loop4: detected capacity change from 0 to 512 [ 982.020023][T21391] EXT4-fs: Ignoring removed bh option [ 982.025432][T21391] EXT4-fs: Ignoring removed mblk_io_submit option [ 982.121693][T21399] overlayfs: failed to resolve './file0': -2 [ 982.202751][T21391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.250281][T21391] ext4 filesystem being mounted at /1114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 982.378654][T21391] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #12: block 32: comm syz.4.6494: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 982.436744][T21391] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #12: comm syz.4.6494: directory missing '.' [ 982.802292][ T5864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.079625][T21426] loop0: detected capacity change from 0 to 16 [ 983.109120][T21426] erofs (device loop0): mounted with root inode @ nid 36. [ 983.189577][T21367] loop2: detected capacity change from 0 to 32768 [ 983.203167][ T5878] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[9000] [ 983.227172][T21426] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 983.245932][T21426] erofs (device loop0): read error -117 @ 1 of nid 89 [ 983.252944][ T30] audit: type=1800 audit(2000001545.126:99): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6507" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 983.302593][T21367] ialloc: diAlloc returned -17! [ 983.599006][T21439] loop3: detected capacity change from 0 to 512 [ 983.674702][T21439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 983.763725][T21439] System zones: 1-12 [ 983.830692][T21439] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.6510: error while reading EA inode 32 err=-116 [ 983.902287][T21439] EXT4-fs (loop3): Remounting filesystem read-only [ 983.964159][T21439] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 984.008344][T21439] EXT4-fs (loop3): 1 orphan inode deleted [ 984.016163][T21439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.110534][T21439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.193984][T21464] netlink: 'syz.2.6521': attribute type 1 has an invalid length. [ 984.236638][T21464] netlink: 'syz.2.6521': attribute type 1 has an invalid length. [ 984.341375][T21468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6523'. [ 984.836554][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 984.983452][T21488] netlink: 'syz.2.6531': attribute type 2 has an invalid length. [ 984.992625][T21488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.009863][T21490] loop1: detected capacity change from 0 to 8 [ 985.016321][ T9] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 985.048849][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.076623][ T7091] udevd[7091]: incorrect cramfs checksum on /dev/loop1 [ 985.089213][T21490] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 985.103669][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.145191][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.155207][T21490] cramfs: Error -3 while decompressing! [ 985.164337][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.173768][T21490] cramfs: ffffffff9af2cda8(26)->ffff888070f9c000(4096) [ 985.193836][T21490] cramfs: bad data blocksize 3489655184 [ 985.201217][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 985.206484][ T10] usb 1-1: Product: syz [ 985.211609][ T10] usb 1-1: Manufacturer: syz [ 985.216450][ T10] usb 1-1: SerialNumber: syz [ 985.223924][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 985.233199][T21490] cramfs: Error -3 while decompressing! [ 985.235999][ T7091] udevd[7091]: incorrect cramfs checksum on /dev/loop1 [ 985.255490][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.263999][T21490] cramfs: ffffffff9af2cda8(26)->ffff888070f9c000(4096) [ 985.277054][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 985.282269][ T10] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 985.304448][ T9] usb 6-1: config 0 descriptor?? [ 985.315197][ T10] cdc_ncm 1-1:1.0: bind() failure [ 985.317975][ T30] audit: type=1800 audit(2000001547.268:100): pid=21490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6532" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 985.321893][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 985.393590][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 985.413747][ T10] cdc_ncm 1-1:1.1: bind() failure [ 985.507777][ T10] usb 1-1: USB disconnect, device number 7 [ 985.529346][ T9] usb 6-1: Detected FT232B [ 985.721283][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 985.776680][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 985.804334][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 985.866693][ T9] usb 6-1: USB disconnect, device number 127 [ 985.945445][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 985.991270][ T9] ftdi_sio 6-1:0.0: device disconnected [ 986.303541][T21514] netlink: 'syz.4.6540': attribute type 16 has an invalid length. [ 986.331422][T21514] netlink: 'syz.4.6540': attribute type 17 has an invalid length. [ 986.543077][T21514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 987.073805][T21494] loop3: detected capacity change from 0 to 32768 [ 987.732295][T21506] loop2: detected capacity change from 0 to 32768 [ 988.237072][T21568] CIFS mount error: No usable UNC path provided in device string! [ 988.237072][T21568] [ 988.333422][T21568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 988.358981][T21506] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 988.359035][T21506] allowing incompatible features above 0.0: (unknown version) [ 988.359058][T21506] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 988.410635][T21506] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 988.419039][T21506] bcachefs (loop2): initializing new filesystem [ 988.437710][T21506] bcachefs (loop2): going read-write [ 988.522676][T21506] bcachefs (loop2): marking superblocks [ 988.735095][T21506] bcachefs (loop2): initializing freespace [ 988.791692][T21506] bcachefs (loop2): done initializing freespace [ 988.805397][T21506] bcachefs (loop2): reading snapshots table [ 988.823707][T21506] bcachefs (loop2): reading snapshots done [ 989.011995][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6567'. [ 989.099496][T21506] bcachefs (loop2): done starting filesystem [ 989.178845][ T5870] bcachefs (loop2): shutting down [ 989.199419][ T5870] bcachefs (loop2): going read-only [ 989.204673][ T5870] bcachefs (loop2): finished waiting for writes to stop [ 989.359186][ T5870] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 989.389972][T21599] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 989.433642][T21551] loop1: detected capacity change from 0 to 32768 [ 989.456445][T21599] cramfs: wrong magic [ 989.546458][T21551] (syz.1.6553,21551,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 989.560978][ T5870] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 989.572340][T21604] loop0: detected capacity change from 0 to 8 [ 989.611638][T21551] (syz.1.6553,21551,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 989.633894][ T5870] bcachefs (loop2): clean shutdown complete, journal seq 15 [ 989.689206][ T5870] bcachefs (loop2): marking filesystem clean [ 989.853136][T21551] JBD2: Ignoring recovery information on journal [ 989.986754][ T5870] bcachefs (loop2): shutdown complete [ 990.113775][T21551] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 990.157175][T21618] loop4: detected capacity change from 0 to 64 [ 990.282707][T21624] QAT: failed to copy from user cfg_data. [ 990.856665][ T5865] ocfs2: Unmounting device (7,1) on (node local) [ 991.485334][T21655] new mount options do not match the existing superblock, will be ignored [ 991.597861][T21659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 991.671446][T21662] loop0: detected capacity change from 0 to 256 [ 991.789583][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 991.808122][T21662] FAT-fs (loop0): Directory bread(block 64) failed [ 991.844962][T21662] FAT-fs (loop0): Directory bread(block 65) failed [ 991.888864][T21662] FAT-fs (loop0): Directory bread(block 66) failed [ 991.916751][T21662] FAT-fs (loop0): Directory bread(block 67) failed [ 991.935612][T21662] FAT-fs (loop0): Directory bread(block 68) failed [ 991.985052][T21662] FAT-fs (loop0): Directory bread(block 69) failed [ 991.999068][T21662] FAT-fs (loop0): Directory bread(block 70) failed [ 992.008656][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 992.029792][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 992.046615][T21662] FAT-fs (loop0): Directory bread(block 71) failed [ 992.056847][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 992.098541][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 992.114058][T21662] FAT-fs (loop0): Directory bread(block 72) failed [ 992.120613][T21662] FAT-fs (loop0): Directory bread(block 73) failed [ 992.160994][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 992.213612][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 992.259828][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 992.303668][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 50 [ 992.331920][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 992.366918][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.396023][ T10] usb 5-1: Product: syz [ 992.415457][ T10] usb 5-1: Manufacturer: syz [ 992.427849][ T10] usb 5-1: SerialNumber: syz [ 992.449647][ T10] usb 5-1: config 0 descriptor?? [ 992.473463][T21657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 992.498857][T21657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 992.529518][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.948163][ T10] usb 5-1: USB disconnect, device number 8 [ 993.144043][ T5953] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 993.236816][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.358493][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 993.411631][ T5953] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 993.433104][ T5953] usb 1-1: config 0 has no interface number 0 [ 993.494809][ T5953] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 993.541970][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 993.550133][ T5953] usb 1-1: Product: syz [ 993.571044][ T5953] usb 1-1: SerialNumber: syz [ 993.601413][ T5953] usb 1-1: config 0 descriptor?? [ 993.632938][ T5953] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input55 [ 993.703865][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 993.858128][T21716] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 993.917687][ T24] usb 6-1: config 1 has an invalid interface number: 27 but max is 0 [ 993.936051][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.972843][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 993.982354][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 993.989715][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 993.996871][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 994.004075][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 994.011222][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 994.018359][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 994.022178][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 994.025883][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 994.041936][ T5953] usb 1-1: USB disconnect, device number 8 [ 994.048029][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 994.048067][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 994.108390][ T24] usb 6-1: config 1 has no interface number 1 [ 994.170717][ T24] usb 6-1: config 1 interface 27 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 994.202911][ T5953] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 994.225208][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.287626][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 994.331630][ T24] usb 6-1: SerialNumber: syz [ 994.390212][ T24] usb 6-1: bad CDC descriptors [ 994.758294][ T5962] usb 6-1: USB disconnect, device number 2 [ 994.883427][T21735] loop4: detected capacity change from 0 to 512 [ 994.944268][T21740] loop0: detected capacity change from 0 to 64 [ 995.012292][T21735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 995.056322][T21740] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 995.094967][T21735] System zones: 1-12 [ 995.114455][T21735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.6620: error while reading EA inode 32 err=-116 [ 995.166123][T21735] EXT4-fs (loop4): Remounting filesystem read-only [ 995.204606][T21735] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 995.256258][T21735] EXT4-fs (loop4): 1 orphan inode deleted [ 995.264101][T21735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.330101][T21735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.671709][T21762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6626'. [ 995.704282][T21765] netlink: 'syz.2.6628': attribute type 21 has an invalid length. [ 995.712113][T21765] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6628'. [ 995.810033][T21765] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6628'. [ 996.045075][T21773] loop3: detected capacity change from 0 to 16 [ 996.117516][T21773] erofs (device loop3): mounted with root inode @ nid 36. [ 996.251223][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6635'. [ 996.354701][T21780] netlink: 93 bytes leftover after parsing attributes in process `syz.0.6635'. [ 996.430815][T21784] trusted_key: encrypted_key: insufficient parameters specified [ 997.151693][ T5962] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 997.364853][ T5962] usb 1-1: config 1 has an invalid interface number: 27 but max is 0 [ 997.383449][ T5962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.441652][ T5962] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 997.491590][ T5962] usb 1-1: config 1 has no interface number 1 [ 997.532364][ T5962] usb 1-1: config 1 interface 27 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 997.614614][ T5962] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 997.655245][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 997.710716][ T5962] usb 1-1: SerialNumber: syz [ 997.762474][ T5962] usb 1-1: bad CDC descriptors [ 997.846810][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6657'. [ 998.058511][ T5953] usb 1-1: USB disconnect, device number 9 [ 998.197926][T21837] netlink: 'syz.5.6660': attribute type 8 has an invalid length. [ 998.623339][T21842] loop4: detected capacity change from 0 to 4096 [ 998.691197][T21853] loop5: detected capacity change from 0 to 512 [ 998.811541][T21853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.881873][ T30] audit: type=1326 audit(2000001561.536:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 998.891313][T21853] ext4 filesystem being mounted at /1118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.047415][ T30] audit: type=1326 audit(2000001561.536:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 999.191022][T21853] Quota error (device loop5): do_check_range: Getting block 4128768 out of range 0-5 [ 999.209109][ T30] audit: type=1326 audit(2000001561.568:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 999.338565][ T30] audit: type=1326 audit(2000001561.568:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0998ebe9 code=0x7ffc0000 [ 999.465006][ T30] audit: type=1800 audit(2000001562.051:105): pid=21869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6672" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 999.545162][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.653740][T21876] netlink: 'syz.0.6676': attribute type 16 has an invalid length. [ 999.704518][T21876] netlink: 'syz.0.6676': attribute type 17 has an invalid length. [ 999.859910][T21876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1000.192219][ T5962] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1000.269845][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1000.280432][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1000.333340][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1000.371148][ T5962] usb 6-1: Using ep0 maxpacket: 16 [ 1000.378476][ T5962] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1000.390140][ T5953] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1000.574959][ T5953] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1000.610469][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.632393][T21892] infiniband syz2: set active [ 1000.637612][T21892] infiniband syz2: added vxcan1 [ 1000.684790][ T5962] usb 6-1: config 0 has no interface number 0 [ 1000.693949][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 1000.705755][ T5953] usb 5-1: config 0 descriptor?? [ 1000.711203][ T5962] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1000.721922][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.730144][ T5962] usb 6-1: Product: syz [ 1000.734396][ T5962] usb 6-1: Manufacturer: syz [ 1000.739081][ T5962] usb 6-1: SerialNumber: syz [ 1000.747182][ T5962] usb 6-1: config 0 descriptor?? [ 1000.762232][ T5962] hub 6-1:0.132: bad descriptor, ignoring hub [ 1000.772788][ T5962] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1000.787123][ T5962] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input57 [ 1000.788500][ T5953] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1000.817462][T21892] RDS/IB: syz2: added [ 1000.833419][T21892] smc: adding ib device syz2 with port count 1 [ 1000.899297][T21892] smc: ib device syz2 port 1 has pnetid [ 1000.951268][ T5988] vxcan1 speed is unknown, defaulting to 1000 [ 1001.004831][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1001.170707][ T5953] gspca_cpia1: usb_control_msg 03, error -71 [ 1001.200127][ T5953] gspca_cpia1: usb_control_msg 01, error -71 [ 1001.206143][ T5953] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1001.289798][ T5953] usb 5-1: USB disconnect, device number 9 [ 1001.625682][T21914] loop3: detected capacity change from 0 to 512 [ 1001.796626][T21914] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1001.945485][T21914] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 1002.114142][T21927] netlink: 'syz.5.6695': attribute type 16 has an invalid length. [ 1002.172477][T21927] netlink: 'syz.5.6695': attribute type 17 has an invalid length. [ 1002.356078][T21934] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6697'. [ 1002.368422][T21927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1002.390288][ T5988] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1002.586281][ T5988] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1002.612800][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1002.643001][ T5988] usb 2-1: config 1 has no interface number 0 [ 1002.657714][ T5988] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1002.716825][ T5988] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1002.771810][ T5988] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.814458][T21942] netlink: 'syz.4.6700': attribute type 10 has an invalid length. [ 1002.814793][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6701'. [ 1002.877676][ T5988] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1002.906371][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.958715][ T5988] usb 2-1: Product: syz [ 1002.978886][ T5988] usb 2-1: Manufacturer: syz [ 1002.984616][ T5988] usb 2-1: SerialNumber: syz [ 1003.000814][T21929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1003.039296][T21942] team0: Port device netdevsim0 added [ 1003.320217][T21929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1003.607862][ T5988] usb 2-1: Incompatible driver and firmware versions [ 1003.670265][ T5988] usb 2-1: USB disconnect, device number 112 [ 1003.752399][ T5962] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1003.936254][ T5962] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1004.009725][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.084840][ T5962] usb 1-1: config 0 descriptor?? [ 1004.109810][ T5962] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1004.296158][T21978] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6713'. [ 1004.361519][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1004.515300][ T24] usb 6-1: USB disconnect, device number 3 [ 1004.547252][ T5962] gspca_cpia1: usb_control_msg 03, error -71 [ 1004.559773][ T5962] gspca_cpia1: usb_control_msg 01, error -71 [ 1004.581726][ T5962] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1004.638526][ T5962] usb 1-1: USB disconnect, device number 10 [ 1004.877303][T21992] netlink: 'syz.5.6719': attribute type 24 has an invalid length. [ 1004.986154][T21992] bridge2: entered allmulticast mode [ 1005.435736][T22007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6724'. [ 1005.915645][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1006.086299][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1006.295536][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1006.323277][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1006.378935][ T10] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1006.419664][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.464435][ T10] usb 6-1: config 0 descriptor?? [ 1006.488751][ T10] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1006.747550][ T24] usb 6-1: USB disconnect, device number 4 [ 1006.944449][T22046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6740'. [ 1007.148737][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1008.804814][T21892] vxcan1 speed is unknown, defaulting to 1000 [ 1009.276674][T22113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1009.284325][T22113] IPv6: NLM_F_CREATE should be set when creating new route [ 1010.138209][T22090] loop0: detected capacity change from 0 to 32768 [ 1010.211765][T22090] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6757 (22090) [ 1010.321382][T22090] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1010.371936][T22090] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1010.420997][T22090] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1010.678198][T22090] BTRFS info (device loop0): rebuilding free space tree [ 1010.782063][T22090] BTRFS info (device loop0): disabling free space tree [ 1010.789049][T22090] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1010.841152][T22120] loop3: detected capacity change from 0 to 32768 [ 1010.894272][T22120] BTRFS info: device /dev/loop3 (7:3) using temp-fsid aaa2949b-b7ff-400a-8b51-75f620140dff [ 1010.896415][T22090] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1010.953041][T22120] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6768 (22120) [ 1010.964111][T22090] BTRFS info (device loop0): allowing degraded mounts [ 1010.990897][T22090] BTRFS info (device loop0): enabling ssd optimizations [ 1011.000064][T22159] loop5: detected capacity change from 0 to 512 [ 1011.007666][T22159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1011.049492][T22120] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1011.055248][T22090] BTRFS info (device loop0): enabling disk space caching [ 1011.080477][T22090] BTRFS info (device loop0): force clearing of disk cache [ 1011.115228][T22090] BTRFS info (device loop0): use zlib compression, level 3 [ 1011.143679][T22120] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1011.182973][T22159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.285206][T22159] ext4 filesystem being mounted at /1138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.352144][ T30] audit: type=1326 audit(2000001574.618:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.2.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 1011.402726][ T30] audit: type=1326 audit(2000001574.681:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.2.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 1011.523262][T22120] BTRFS info (device loop3): enabling ssd optimizations [ 1011.549397][ T30] audit: type=1326 audit(2000001574.681:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.2.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 1011.562438][T22120] BTRFS info (device loop3): enabling free space tree [ 1011.593887][ T5866] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1011.726084][ T30] audit: type=1326 audit(2000001574.681:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.2.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03278ebe9 code=0x7ffc0000 [ 1011.926479][ T5863] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.130009][ T5876] BTRFS info (device loop3): last unmount of filesystem aaa2949b-b7ff-400a-8b51-75f620140dff [ 1012.213318][T22199] netlink: 'syz.0.6786': attribute type 10 has an invalid length. [ 1012.413415][T22199] team0: Port device netdevsim0 added [ 1013.360913][T22222] loop0: detected capacity change from 0 to 1764 [ 1013.372739][T22223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.229436][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1014.291966][T22214] loop2: detected capacity change from 0 to 32768 [ 1014.331369][T22238] netlink: 'syz.5.6808': attribute type 10 has an invalid length. [ 1014.425504][T22240] loop0: detected capacity change from 0 to 256 [ 1014.427400][T22238] team0: Port device netdevsim0 added [ 1014.469580][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1014.473759][T22240] exfat: Deprecated parameter 'utf8' [ 1014.504937][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1014.553008][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1014.581748][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1014.617386][ T10] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1014.647169][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.684986][T22220] loop1: detected capacity change from 0 to 32768 [ 1014.691481][ T10] usb 5-1: Product: syz [ 1014.691515][ T10] usb 5-1: Manufacturer: syz [ 1014.691545][ T10] usb 5-1: SerialNumber: syz [ 1014.717290][ T10] usb 5-1: config 0 descriptor?? [ 1014.759005][ T10] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1014.773945][T22220] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6798 (22220) [ 1014.787673][T22240] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1014.834569][T22220] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1014.855055][T22220] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1014.865916][T22220] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1014.942192][ T10] scsi host1: usb-storage 5-1:0.0 [ 1015.102846][ T10] usb 5-1: USB disconnect, device number 10 [ 1015.213936][T22220] BTRFS info (device loop1): rebuilding free space tree [ 1015.328077][T22220] BTRFS info (device loop1): disabling free space tree [ 1015.355170][T22220] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1015.362579][T22274] loop5: detected capacity change from 0 to 64 [ 1015.389683][T22220] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1015.473646][T22220] BTRFS info (device loop1): allowing degraded mounts [ 1015.516103][T22220] BTRFS info (device loop1): enabling ssd optimizations [ 1015.523081][T22220] BTRFS info (device loop1): enabling disk space caching [ 1015.613178][T22220] BTRFS info (device loop1): force clearing of disk cache [ 1015.671350][T22220] BTRFS info (device loop1): use zlib compression, level 3 [ 1015.944167][T22282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6821'. [ 1016.062904][T22283] loop4: detected capacity change from 0 to 8 [ 1016.497140][ T5865] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1016.996057][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1017.140689][T22276] loop0: detected capacity change from 0 to 32768 [ 1017.201367][T22307] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1017.212201][T22276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6818 (22276) [ 1017.262018][T22307] exFAT-fs (nullb0): invalid boot record signature [ 1017.305195][T22307] exFAT-fs (nullb0): failed to read boot sector [ 1017.334727][T22276] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1017.354024][T22307] exFAT-fs (nullb0): failed to recognize exfat type [ 1017.387316][T22276] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1017.427082][T22309] netlink: 'syz.2.6833': attribute type 1 has an invalid length. [ 1017.445615][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1017.452066][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.940450][T22276] BTRFS info (device loop0): rebuilding free space tree [ 1018.036392][T22276] BTRFS info (device loop0): enabling ssd optimizations [ 1018.043568][T22341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6841'. [ 1018.063377][T22276] BTRFS info (device loop0): using spread ssd allocation scheme [ 1018.105581][T22276] BTRFS info (device loop0): enabling free space tree [ 1018.142727][T22276] BTRFS info (device loop0): force clearing of disk cache [ 1019.088108][T22359] bridge2: entered allmulticast mode [ 1019.139538][T22333] loop5: detected capacity change from 0 to 32768 [ 1019.344123][ T5962] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1019.555593][ T5962] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1019.601061][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.699255][ T5962] usb 2-1: config 0 descriptor?? [ 1019.748376][ T5962] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1019.804481][T22342] loop4: detected capacity change from 0 to 32768 [ 1019.863997][T22342] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6839 (22342) [ 1019.981535][T22342] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1020.046198][T22342] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1020.129588][ T5962] gspca_spca508: reg_read err -71 [ 1020.164514][ T5962] gspca_spca508: reg_read err -71 [ 1020.175116][ T5962] gspca_spca508: reg_read err -71 [ 1020.182371][ T5962] gspca_spca508: reg_read err -71 [ 1020.187903][ T5962] gspca_spca508: reg write: error -71 [ 1020.219142][ T5962] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1020.259372][ T5962] usb 2-1: USB disconnect, device number 113 [ 1020.368178][T22342] BTRFS info (device loop4): enabling ssd optimizations [ 1020.401027][T22342] BTRFS info (device loop4): enabling free space tree [ 1020.705276][ T5864] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1022.392443][T22459] block nbd4: Attempted send on invalid socket [ 1022.414768][T22459] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1022.488350][T22459] XFS (nbd4): SB validate failed with error -5. [ 1023.601998][T22500] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1023.975338][T22505] loop1: detected capacity change from 0 to 4096 [ 1024.036883][T22505] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1024.115253][T22505] ntfs3(loop1): mft corrupted [ 1024.147330][T22505] ntfs3(loop1): Failed to load $MFT. [ 1024.306455][T22519] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 1024.806646][T22497] loop3: detected capacity change from 0 to 32768 [ 1024.855727][T22497] BTRFS info: device /dev/loop3 (7:3) using temp-fsid d6a2c874-850b-4ec6-8a85-876fd0cc8896 [ 1024.906704][T22497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6908 (22497) [ 1024.964276][T22497] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1025.021150][T22497] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1025.039988][T22541] ipvlan0: entered promiscuous mode [ 1025.045214][T22541] ipvlan0: entered allmulticast mode [ 1025.078834][T22541] veth0_vlan: entered allmulticast mode [ 1025.306286][T22497] BTRFS info (device loop3): enabling ssd optimizations [ 1025.342767][T22497] BTRFS info (device loop3): enabling free space tree [ 1025.563487][ T5961] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1025.624754][ T5876] BTRFS info (device loop3): last unmount of filesystem d6a2c874-850b-4ec6-8a85-876fd0cc8896 [ 1025.732171][T22572] loop1: detected capacity change from 0 to 128 [ 1025.760864][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 1025.789959][ T5961] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1025.839905][ T5961] usb 6-1: config 0 has no interface number 0 [ 1025.846046][ T5961] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1025.912259][ T5961] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1025.934234][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1025.981755][ T5961] usb 6-1: Product: syz [ 1025.996053][ T5961] usb 6-1: SerialNumber: syz [ 1026.145735][ T5961] usb 6-1: config 0 descriptor?? [ 1026.166543][ T5961] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1026.189531][T22580] netlink: 'syz.1.6941': attribute type 10 has an invalid length. [ 1026.236734][ T5961] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input62 [ 1026.341038][T22580] team0: Port device netdevsim0 added [ 1026.640727][ C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1026.647913][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1026.649768][ T5988] usb 6-1: USB disconnect, device number 5 [ 1026.654859][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1026.718587][T22590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1026.760159][T22537] loop2: detected capacity change from 0 to 32768 [ 1026.809665][ T5988] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1026.961352][T22593] loop3: detected capacity change from 0 to 1024 [ 1027.014513][T22593] EXT4-fs: Ignoring removed orlov option [ 1027.081503][T22593] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1027.165362][T22593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.466933][ T5962] hid (null): report_id 2445601295 is invalid [ 1027.489907][ T5962] hid (null): report_id 0 is invalid [ 1027.511479][ T5962] hid (null): global environment stack underflow [ 1027.536996][ T5876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.556407][ T5962] hid (null): unknown global tag 0xe [ 1027.617809][ T5962] hid-generic 2BD5:3849DFF5:F76C68F0.0001: report_id 2445601295 is invalid [ 1027.678162][ T5962] hid-generic 2BD5:3849DFF5:F76C68F0.0001: item 0 4 1 8 parsing failed [ 1027.687176][ T5962] hid-generic 2BD5:3849DFF5:F76C68F0.0001: probe with driver hid-generic failed with error -22 [ 1027.787012][T22616] sit0: entered promiscuous mode [ 1027.817238][T22616] netlink: 'syz.3.6958': attribute type 1 has an invalid length. [ 1027.853540][T22616] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6958'. [ 1028.134746][T22627] loop4: detected capacity change from 0 to 128 [ 1028.231972][T22627] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1028.392341][T22627] ext4 filesystem being mounted at /1197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.534786][T22633] loop1: detected capacity change from 0 to 4096 [ 1028.631685][T22633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.683207][ T5864] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1028.973498][ T5865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.046929][T22649] loop2: detected capacity change from 0 to 1024 [ 1029.990397][T22678] netlink: 'syz.3.6988': attribute type 1 has an invalid length. [ 1030.030544][T22678] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1030.516301][ T5953] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1030.697728][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 1030.751330][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1030.792873][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1030.816237][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1030.848249][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1030.868598][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1030.891227][ T5953] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1030.901058][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.909770][ T5953] usb 2-1: Product: syz [ 1030.914124][ T5953] usb 2-1: Manufacturer: syz [ 1030.919246][ T5953] usb 2-1: SerialNumber: syz [ 1030.946427][ T5953] usb 2-1: config 0 descriptor?? [ 1030.978296][ T5953] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input63 [ 1031.362885][ T24] usb 2-1: USB disconnect, device number 114 [ 1031.411216][ T5953] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1031.461475][T22674] loop2: detected capacity change from 0 to 32768 [ 1031.547819][T22674] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1031.563477][T22705] nvme_fabrics: missing parameter 'transport=%s' [ 1031.593600][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 1031.599587][T22705] nvme_fabrics: missing parameter 'nqn=%s' [ 1031.606386][ T5953] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1031.614987][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.635116][ T5953] usb 4-1: config 0 has no interface number 0 [ 1031.694286][T22674] XFS (loop2): Ending clean mount [ 1031.700207][ T5953] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1031.752526][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.808865][ T5953] usb 4-1: Product: syz [ 1031.826191][ T5953] usb 4-1: Manufacturer: syz [ 1031.854098][ T5953] usb 4-1: SerialNumber: syz [ 1031.899269][ T5953] usb 4-1: config 0 descriptor?? [ 1031.914224][ T5953] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1031.947552][ T5953] usb 4-1: No valid video chain found. [ 1032.030673][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1032.043344][ T5870] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1032.150155][ T10] usb 4-1: USB disconnect, device number 11 [ 1032.227016][ T24] usb 5-1: config 2 has an invalid interface number: 117 but max is 0 [ 1032.249726][ T24] usb 5-1: config 2 has no interface number 0 [ 1032.302147][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=bb.f5 [ 1032.383165][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.433722][ T24] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1032.491375][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1032.497144][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1032.583082][ T24] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-19) [ 1032.672246][ T24] usb 5-1: USB disconnect, device number 11 [ 1033.064718][T22739] sctp: [Deprecated]: syz.0.7013 (pid 22739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1033.064718][T22739] Use struct sctp_sack_info instead [ 1033.169399][T22743] loop1: detected capacity change from 0 to 512 [ 1033.221312][T22743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1033.387635][T22743] EXT4-fs (loop1): 1 truncate cleaned up [ 1033.399210][T22743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.470789][T22725] loop5: detected capacity change from 0 to 32768 [ 1033.582526][T22753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7018'. [ 1033.617381][T22725] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1033.708878][ T5865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.718615][T22725] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1033.837346][T22725] (syz.5.7005,22725,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 1034.096768][ T5863] ocfs2: Unmounting device (7,5) on (node local) [ 1034.240577][ T10] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 1034.422800][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1034.443347][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1034.480162][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1034.516542][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1034.560690][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1034.629960][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1034.683716][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1034.715811][T22786] overlayfs: cannot append lower layer [ 1034.748364][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1034.755299][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1034.783214][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.841070][ T10] usb 2-1: config 0 descriptor?? [ 1034.969226][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 1035.003269][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1035.040846][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input64 [ 1035.143959][ T10] usb 2-1: USB disconnect, device number 115 [ 1035.903531][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'. [ 1036.450002][T22831] netlink: 'syz.5.7053': attribute type 1 has an invalid length. [ 1036.474323][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7053'. [ 1036.549663][T22831] netlink: 'syz.5.7053': attribute type 1 has an invalid length. [ 1036.702690][T22803] loop3: detected capacity change from 0 to 32768 [ 1036.713492][T22832] loop4: detected capacity change from 0 to 4096 [ 1036.755127][T22803] (syz.3.7039,22803,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1036.808458][T22803] (syz.3.7039,22803,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1036.855591][T22832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.898262][T22812] loop1: detected capacity change from 0 to 32768 [ 1036.916488][T22812] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 01de2344-3e22-4a36-87ff-625c3f7a7556 [ 1036.955543][T22812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7043 (22812) [ 1037.006438][T22803] JBD2: Ignoring recovery information on journal [ 1037.053729][T22812] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1037.136083][T22812] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1037.220888][T22803] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1037.312782][ T5864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.400923][T22812] BTRFS info (device loop1): rebuilding free space tree [ 1037.415465][T22803] [ 1037.417802][T22803] ====================================================== [ 1037.424825][T22803] WARNING: possible circular locking dependency detected [ 1037.431840][T22803] syzkaller #0 Not tainted [ 1037.436249][T22803] ------------------------------------------------------ [ 1037.443261][T22803] syz.3.7039/22803 is trying to acquire lock: [ 1037.449322][T22803] ffff888050802640 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xd35/0x2a80 [ 1037.450115][T22812] BTRFS info (device loop1): enabling ssd optimizations [ 1037.461733][T22803] [ 1037.461733][T22803] but task is already holding lock: [ 1037.461748][T22803] ffff88804b69a378 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x429/0x2a80 [ 1037.461853][T22803] [ 1037.461853][T22803] which lock already depends on the new lock. [ 1037.461853][T22803] [ 1037.461869][T22803] [ 1037.461869][T22803] the existing dependency chain (in reverse order) is: [ 1037.461883][T22803] [ 1037.461883][T22803] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1037.461937][T22803] down_read+0x9b/0x480 [ 1037.497693][T22812] BTRFS info (device loop1): using spread ssd allocation scheme [ 1037.504989][T22803] ocfs2_init_acl+0x2fc/0x7d0 [ 1037.530190][T22803] ocfs2_mknod+0xd5c/0x2540 [ 1037.535227][T22803] ocfs2_create+0x17c/0x460 [ 1037.540260][T22803] lookup_open.isra.0+0x11d3/0x1580 [ 1037.545998][T22803] path_openat+0x893/0x2cb0 [ 1037.551018][T22803] do_filp_open+0x20b/0x470 [ 1037.556063][T22803] do_sys_openat2+0x11b/0x1d0 [ 1037.561270][T22803] __x64_sys_openat+0x174/0x210 [ 1037.566649][T22803] do_syscall_64+0xcd/0x4c0 [ 1037.571689][T22803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.578103][T22803] [ 1037.578103][T22803] -> #1 (jbd2_handle){++++}-{0:0}: [ 1037.585415][T22803] jbd2_journal_lock_updates+0xa4/0x380 [ 1037.591504][T22803] __ocfs2_flush_truncate_log+0x281/0x1160 [ 1037.597836][T22803] ocfs2_flush_truncate_log+0x4a/0x70 [ 1037.603732][T22803] ocfs2_sync_fs+0x1c6/0x3d0 [ 1037.608864][T22803] sync_filesystem+0x1d0/0x290 [ 1037.614148][T22803] ocfs2_reconfigure+0x119/0xe90 [ 1037.619605][T22803] reconfigure_super+0x450/0xb60 [ 1037.625089][T22803] path_mount+0x1805/0x2000 [ 1037.630117][T22803] __x64_sys_mount+0x28d/0x310 [ 1037.635407][T22803] do_syscall_64+0xcd/0x4c0 [ 1037.640447][T22803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.646863][T22803] [ 1037.646863][T22803] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 1037.657569][T22803] __lock_acquire+0x12a6/0x1ce0 [ 1037.662965][T22803] lock_acquire+0x179/0x350 [ 1037.668011][T22803] down_write+0x92/0x200 [ 1037.672798][T22803] ocfs2_xattr_set+0xd35/0x2a80 [ 1037.678184][T22803] ocfs2_set_acl+0x46d/0x550 [ 1037.683308][T22803] ocfs2_iop_set_acl+0x224/0x2d0 [ 1037.688780][T22803] set_posix_acl+0x25f/0x320 [ 1037.693908][T22803] vfs_set_acl+0x5a7/0x930 [ 1037.698853][T22803] do_set_acl+0xd9/0x1a0 [ 1037.703629][T22803] do_setxattr+0xeb/0x180 [ 1037.708473][T22803] filename_setxattr+0x16b/0x1d0 [ 1037.713931][T22803] path_setxattrat+0x1de/0x2a0 [ 1037.719215][T22803] __x64_sys_setxattr+0xc6/0x140 [ 1037.724673][T22803] do_syscall_64+0xcd/0x4c0 [ 1037.729713][T22803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.736129][T22803] [ 1037.736129][T22803] other info that might help us debug this: [ 1037.736129][T22803] [ 1037.746344][T22803] Chain exists of: [ 1037.746344][T22803] &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem [ 1037.746344][T22803] [ 1037.762294][T22803] Possible unsafe locking scenario: [ 1037.762294][T22803] [ 1037.769729][T22803] CPU0 CPU1 [ 1037.775080][T22803] ---- ---- [ 1037.780431][T22803] lock(&oi->ip_xattr_sem); [ 1037.785025][T22803] lock(jbd2_handle); [ 1037.791614][T22803] lock(&oi->ip_xattr_sem); [ 1037.798725][T22803] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 1037.806187][T22803] [ 1037.806187][T22803] *** DEADLOCK *** [ 1037.806187][T22803] [ 1037.814314][T22803] 3 locks held by syz.3.7039/22803: [ 1037.819501][T22803] #0: ffff88802fbf8428 (sb_writers#25){.+.+}-{0:0}, at: filename_setxattr+0xbb/0x1d0 [ 1037.829125][T22803] #1: ffff88804b69a640 (&type->i_mutex_dir_key#18){+.+.}-{4:4}, at: vfs_set_acl+0x33e/0x930 [ 1037.839367][T22803] #2: ffff88804b69a378 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x429/0x2a80 [ 1037.849336][T22803] [ 1037.849336][T22803] stack backtrace: [ 1037.855216][T22803] CPU: 1 UID: 0 PID: 22803 Comm: syz.3.7039 Not tainted syzkaller #0 PREEMPT(full) [ 1037.855258][T22803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1037.855279][T22803] Call Trace: [ 1037.855290][T22803] [ 1037.855303][T22803] dump_stack_lvl+0x116/0x1f0 [ 1037.855352][T22803] print_circular_bug+0x275/0x350 [ 1037.855410][T22803] check_noncircular+0x14c/0x170 [ 1037.855470][T22803] __lock_acquire+0x12a6/0x1ce0 [ 1037.855535][T22803] lock_acquire+0x179/0x350 [ 1037.855590][T22803] ? ocfs2_xattr_set+0xd35/0x2a80 [ 1037.855635][T22803] ? __pfx___might_resched+0x10/0x10 [ 1037.855685][T22803] down_write+0x92/0x200 [ 1037.855736][T22803] ? ocfs2_xattr_set+0xd35/0x2a80 [ 1037.855780][T22803] ? __pfx_down_write+0x10/0x10 [ 1037.855836][T22803] ? kasan_save_track+0x14/0x30 [ 1037.855889][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.855933][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.855975][T22803] ? ocfs2_xattr_ibody_find.constprop.0+0x2e5/0x480 [ 1037.856039][T22803] ocfs2_xattr_set+0xd35/0x2a80 [ 1037.856082][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.856124][T22803] ? __kernel_text_address+0xd/0x40 [ 1037.856163][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.856216][T22803] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 1037.856260][T22803] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1037.856303][T22803] ? lockdep_hardirqs_on+0x7c/0x110 [ 1037.856350][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.856392][T22803] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1037.856435][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.856477][T22803] ? stack_depot_save_flags+0x3de/0x9c0 [ 1037.856534][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.856588][T22803] ? kasan_save_stack+0x42/0x60 [ 1037.856639][T22803] ? kasan_save_stack+0x33/0x60 [ 1037.856690][T22803] ? kasan_save_track+0x14/0x30 [ 1037.856742][T22803] ? __kasan_kmalloc+0xaa/0xb0 [ 1037.856793][T22803] ? __kmalloc_noprof+0x223/0x510 [ 1037.856849][T22803] ? ocfs2_set_acl+0x10b/0x550 [ 1037.856893][T22803] ? ocfs2_iop_set_acl+0x224/0x2d0 [ 1037.856938][T22803] ? set_posix_acl+0x25f/0x320 [ 1037.856980][T22803] ? vfs_set_acl+0x5a7/0x930 [ 1037.857020][T22803] ? do_set_acl+0xd9/0x1a0 [ 1037.857065][T22803] ? do_setxattr+0xeb/0x180 [ 1037.857094][T22803] ? filename_setxattr+0x16b/0x1d0 [ 1037.857125][T22803] ? path_setxattrat+0x1de/0x2a0 [ 1037.857156][T22803] ? __x64_sys_setxattr+0xc6/0x140 [ 1037.857188][T22803] ? do_syscall_64+0xcd/0x4c0 [ 1037.857237][T22803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.857290][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.857332][T22803] ? map_id_range_up+0x2ce/0x3b0 [ 1037.857383][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.857425][T22803] ? from_kuid+0x8d/0xd0 [ 1037.857463][T22803] ? __pfx_from_kuid+0x10/0x10 [ 1037.857501][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.857548][T22803] ? ocfs2_set_acl+0x46d/0x550 [ 1037.857592][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.857635][T22803] ocfs2_set_acl+0x46d/0x550 [ 1037.857687][T22803] ocfs2_iop_set_acl+0x224/0x2d0 [ 1037.857735][T22803] ? __pfx_ocfs2_iop_set_acl+0x10/0x10 [ 1037.857785][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.857833][T22803] ? __pfx_from_kuid+0x10/0x10 [ 1037.857874][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.857917][T22803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1037.857961][T22803] ? set_posix_acl+0x25f/0x320 [ 1037.858003][T22803] set_posix_acl+0x25f/0x320 [ 1037.858045][T22803] ? __entry_text_end+0x1020b6/0x1020b9 [ 1037.858090][T22803] vfs_set_acl+0x5a7/0x930 [ 1037.858140][T22803] do_set_acl+0xd9/0x1a0 [ 1037.858188][T22803] do_setxattr+0xeb/0x180 [ 1037.858221][T22803] filename_setxattr+0x16b/0x1d0 [ 1037.858254][T22803] ? __pfx_filename_setxattr+0x10/0x10 [ 1037.858289][T22803] ? getname_flags.part.0+0x1c5/0x550 [ 1037.858340][T22803] path_setxattrat+0x1de/0x2a0 [ 1037.858373][T22803] ? __pfx_path_setxattrat+0x10/0x10 [ 1037.858409][T22803] ? putname+0x154/0x1a0 [ 1037.858447][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.858507][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.858549][T22803] ? __x64_sys_openat+0x174/0x210 [ 1037.858595][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.858638][T22803] ? xfd_validate_state+0x61/0x180 [ 1037.858700][T22803] __x64_sys_setxattr+0xc6/0x140 [ 1037.858733][T22803] ? do_syscall_64+0x91/0x4c0 [ 1037.858781][T22803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1037.858828][T22803] ? lockdep_hardirqs_on+0x7c/0x110 [ 1037.858874][T22803] do_syscall_64+0xcd/0x4c0 [ 1037.858925][T22803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.858960][T22803] RIP: 0033:0x7fde0998ebe9 [ 1037.858987][T22803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.859022][T22803] RSP: 002b:00007fde0a71f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1037.859053][T22803] RAX: ffffffffffffffda RBX: 00007fde09bb5fa0 RCX: 00007fde0998ebe9 [ 1037.859077][T22803] RDX: 00002000000002c0 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1037.859100][T22803] RBP: 00007fde09a11e19 R08: 0000000000000003 R09: 0000000000000000 [ 1037.859122][T22803] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000000 [ 1037.859144][T22803] R13: 00007fde09bb6038 R14: 00007fde09bb5fa0 R15: 00007fff99d15678 [ 1037.859179][T22803] [ 1037.859593][T22812] BTRFS info (device loop1): enabling free space tree [ 1038.014733][ T5988] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1038.050059][T22812] BTRFS info (device loop1): force clearing of disk cache [ 1038.260955][ T5988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.276753][ T5876] ocfs2: Unmounting device (7,3) on (node local) [ 1038.309730][ T5988] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1038.546187][ T5988] usb 3-1: config 1 has no interface number 1 [ 1038.552358][ T5988] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1038.565456][ T5988] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1038.578582][ T5988] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1038.588012][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.596427][ T5988] usb 3-1: Product: syz [ 1038.600649][ T5988] usb 3-1: Manufacturer: syz [ 1038.605530][ T5988] usb 3-1: SerialNumber: syz [ 1038.613035][T22867] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.824103][ T5988] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1038.832049][ T5988] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1038.850557][ T5988] usb 3-1: USB disconnect, device number 125 [ 1038.877944][T12352] udevd[12352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory