last executing test programs: 2.432406853s ago: executing program 4 (id=4681): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="180000007a00010d00000000011e00000792"], 0x18}], 0x1}, 0x0) 2.211573901s ago: executing program 4 (id=4687): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x81, 0x40}) 2.042101829s ago: executing program 4 (id=4690): r0 = syz_open_dev$video4linux(&(0x7f0000000340), 0x1, 0x8000) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000180)={0x7fffffff, 0x101}) 1.884527231s ago: executing program 4 (id=4694): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) 1.707418288s ago: executing program 4 (id=4698): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.31055958s ago: executing program 3 (id=4707): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{}, {0x0, 0x2}, {}, {}, {}, {0x4000}], 0x0, 0x0, 0x16, 0x1}}) 1.284758476s ago: executing program 0 (id=4709): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x9100, &(0x7f0000000100)={0x1, 0x5, 0x80000}, 0x20) 1.160123284s ago: executing program 3 (id=4710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000f20000000000000a28000000000a0101000000005e1affd5020000000900010000797a300000000008000240000000032c000000030a010358f5e6ff0000000002000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x810) 1.159633564s ago: executing program 1 (id=4711): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1d4, &(0x7f00000006c0)="$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") truncate(&(0x7f00000002c0)='./file1\x00', 0x8800000) 1.016938452s ago: executing program 0 (id=4714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050007000000000000000a00ffff0c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20040442) 982.50506ms ago: executing program 1 (id=4715): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0xffffffffffffffff, 0x0) 853.641683ms ago: executing program 3 (id=4716): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 825.970271ms ago: executing program 0 (id=4718): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5190b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 792.060971ms ago: executing program 1 (id=4719): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000400)={0x3, 0x80000001, 0x0, 0x0}) 741.704964ms ago: executing program 2 (id=4720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0x34, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2f, 0xe18}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 655.527843ms ago: executing program 0 (id=4721): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x40047452, 0x0) 655.345386ms ago: executing program 2 (id=4722): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa4}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 613.838235ms ago: executing program 2 (id=4723): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {0x1}, 0x1}) 582.516868ms ago: executing program 1 (id=4724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) 499.32413ms ago: executing program 2 (id=4725): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000140), 0x2) 446.967274ms ago: executing program 0 (id=4726): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 346.400615ms ago: executing program 3 (id=4727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) 314.73012ms ago: executing program 2 (id=4728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 245.678651ms ago: executing program 1 (id=4729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000024000400200012800e000100697036677265746170000e010c00028008000400229a000008000400ff010006"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 244.372437ms ago: executing program 0 (id=4730): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}]}, 0x4, 0x335, &(0x7f0000000880)="$eJzs3U1r1E4cB/DvJNnd7L+l/9hWCp6kWvBU2npQvFikePENeJBibbdQGitoBS2I1bOIN0Hw6M2z6FvQi/gG9NSDeNJL8WBkJpPN7DqTfehDWvb7AXdjMg+/STLJzC7bgIgG1pWFr2/O78h/ogLAB3AJ8ACEQADgJCbC+xubHQvym0sCaU7xT5rljYYtawidIy8pQIBhYx0dkCRJkm8dU/08lFioPMLswQYPqOneqbaHhx7ZwdhO2zVYjCMsdrGLBxgpMxwiIiqfqKm7g6fvEsN6/O55wJQehx/3+3/L+Ga3vDiOhOb930v/nwi5f/5Xm+R8b20zbqykUzh59L1slmgry3pOJPnuriI9s/whY8hl1GKnYvHqq2txY3pbFfAUlzUj2bh6XUHWEMUVbTV9m7TMTQsUtb3YkGpDRbZhzhH/WFGN1gnwh+94aa9u8VMXMYmP4rNYFBFeYaU5/gsSIXeO2j9RW1dJ459xl6haGaWpWlqZh39CVXIqOwLv3+atrLv2a2ifkUAfR9E+fo+yOF9U3bkwitaPFdLWzbpbp3KNAYFQswYz11wz0W9rrvH2uuqrlbgxvXwndp30+8u6/8RzcV1M4gfeYcEY/3sy9RTcPbOllwuVUp8Zhe0JVMqoi2hVB77dU88k5aqzo7g9wy1cxMi9h1vrS3HcuFv+QtZV+sx+ep/jSU9EfTrKNfLdSINQLlQA7Fulf5IksW4K0HuBPnoNo6KaeuF13uSt9SWhr3l7a6C8crZtmncnBjAPQK/Jrgj91P64mauWF9hV9l/yaKs19hMyi+oQOkhWVcsmH7Wuekq9j0qvPVpfijteQY7xVIAy+UHHxI2yg6EyyHGXSOd/xnxlRl115EtUMP9JOhVulDjrmAGNqtf/upvBNYt1jhOHsoUOc64z54CzbTV6yGp80l5spOPEUfxWsvevMsQCvuAmP/8nIiIiIiIiIiIiIiIiIiIiIiIiIjpuev01Qj8/J2itcWcA//AGEREREREREREREREREREREREREREREdHeGM//BXz1xJiq7fm/RU9qUvz0gQDh3p//i8jv4vm/YruHVhKRzd8AAAD//+GuXfk=") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 174.784274ms ago: executing program 3 (id=4731): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x2, 0xb5315258, 0x1, @discrete={0x2fa8b349, 0x40201}}) 71.962549ms ago: executing program 2 (id=4732): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 39.561928ms ago: executing program 4 (id=4733): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/cpu_byteorder', 0x2000, 0x39fa538ec02a0246) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) 21.307352ms ago: executing program 1 (id=4734): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)=""/163, 0xa3}], 0x2, 0x205, 0x0) 0s ago: executing program 3 (id=4735): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002be301"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): ] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.3248: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 275.068185][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.174697][T13453] loop1: detected capacity change from 0 to 32768 [ 275.440739][T13457] loop0: detected capacity change from 0 to 32768 [ 275.498759][T13457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3260 (13457) [ 275.581540][T13457] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.632379][T13457] BTRFS info (device loop0): using sha256 checksum algorithm [ 275.745543][T13499] loop4: detected capacity change from 0 to 256 [ 275.799767][T13499] exfat: Deprecated parameter 'namecase' [ 275.881011][T13457] BTRFS info (device loop0): enabling ssd optimizations [ 275.920561][T13457] BTRFS info (device loop0): turning on async discard [ 275.951923][T13499] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 275.965024][T13457] BTRFS info (device loop0): enabling free space tree [ 276.085111][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.105282][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.286548][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 276.300447][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.378495][T13528] netlink: 'syz.4.3291': attribute type 5 has an invalid length. [ 276.390368][ T9] usb 3-1: config 0 has no interface number 0 [ 276.414052][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 276.456960][ T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.506789][ T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 276.525048][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.557918][ T9] usb 3-1: Product: syz [ 276.562137][ T9] usb 3-1: Manufacturer: syz [ 276.583075][ T9] usb 3-1: SerialNumber: syz [ 276.606057][ T9] usb 3-1: config 0 descriptor?? [ 276.632125][T13534] loop3: detected capacity change from 0 to 512 [ 276.656790][T13534] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 276.721135][T13534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 276.738734][T13541] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 276.747200][T13534] System zones: 1-12 [ 276.778043][T13534] EXT4-fs (loop3): 1 truncate cleaned up [ 276.804832][T13544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 276.811372][T13534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.832430][T13544] System zones: 1-3, 19-19, 35-36 [ 276.860770][T13544] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.898312][T13544] ext4 filesystem being mounted at /668/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.935115][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.959798][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.997619][ T5819] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.025084][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 277.087187][ T5895] usb 3-1: USB disconnect, device number 15 [ 277.107031][T13555] netlink: 'syz.4.3302': attribute type 1 has an invalid length. [ 277.174317][T13557] set_capacity_and_notify: 1 callbacks suppressed [ 277.174336][T13557] loop0: detected capacity change from 0 to 256 [ 277.204000][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 277.236699][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 277.265059][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.315810][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 277.686606][T13559] loop4: detected capacity change from 0 to 32768 [ 277.717265][T13559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3305 (13559) [ 277.774597][T13559] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.795144][T13559] BTRFS info (device loop4): using sha256 checksum algorithm [ 277.912325][T13559] BTRFS info (device loop4): setting nodatasum [ 277.923344][T13559] BTRFS info (device loop4): setting nodatacow [ 277.930973][T13559] BTRFS info (device loop4): enabling ssd optimizations [ 277.938217][T13559] BTRFS info (device loop4): turning on async discard [ 277.945088][T13559] BTRFS info (device loop4): enabling free space tree [ 278.125408][ T5819] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.156695][ T5895] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.212603][T13609] batadv1: entered promiscuous mode [ 278.376655][ T5895] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 278.399068][ T5895] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 278.412725][T13616] program syz.4.3325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.426653][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 278.467122][ T5895] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 278.480960][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 278.523418][ T5895] usb 4-1: Product: syz [ 278.537040][ T5895] usb 4-1: Manufacturer: syz [ 278.562590][ T5895] usb 4-1: SerialNumber: syz [ 278.591658][ T9] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 278.600923][ T5895] usb 4-1: config 0 descriptor?? [ 278.616533][ T5895] hub 4-1:0.0: bad descriptor, ignoring hub [ 278.618371][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 278.634984][ T5895] hub 4-1:0.0: probe with driver hub failed with error -5 [ 278.658636][ T5895] usb 4-1: selecting invalid altsetting 0 [ 278.689125][ T9] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 278.702991][T13620] bond3 (unregistering): Released all slaves [ 278.736785][ T9] usb 2-1: USB disconnect, device number 18 [ 278.970332][ T9] usb 4-1: USB disconnect, device number 19 [ 279.214225][T13641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3337'. [ 279.393903][T13653] netlink: 'syz.2.3342': attribute type 4 has an invalid length. [ 279.518861][T13659] sctp: [Deprecated]: syz.4.3347 (pid 13659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.518861][T13659] Use struct sctp_sack_info instead [ 279.548315][T13661] sctp: [Deprecated]: syz.1.3346 (pid 13661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.548315][T13661] Use struct sctp_sack_info instead [ 279.661709][T13665] loop3: detected capacity change from 0 to 24 [ 279.678271][T13665] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 279.708863][T13665] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 279.818298][T13673] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.903050][T13677] loop0: detected capacity change from 0 to 256 [ 280.189384][T13689] loop1: detected capacity change from 0 to 256 [ 280.198585][T13683] loop4: detected capacity change from 0 to 8192 [ 280.255180][T13691] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3361'. [ 280.268409][T13689] FAT-fs (loop1): Directory bread(block 64) failed [ 280.309582][T13689] FAT-fs (loop1): Directory bread(block 65) failed [ 280.327558][T13689] FAT-fs (loop1): Directory bread(block 66) failed [ 280.344475][T13689] FAT-fs (loop1): Directory bread(block 67) failed [ 280.357181][T13689] FAT-fs (loop1): Directory bread(block 68) failed [ 280.363738][T13689] FAT-fs (loop1): Directory bread(block 69) failed [ 280.434101][T13689] FAT-fs (loop1): Directory bread(block 70) failed [ 280.452333][T13689] FAT-fs (loop1): Directory bread(block 71) failed [ 280.505107][T13689] FAT-fs (loop1): Directory bread(block 72) failed [ 280.511705][T13689] FAT-fs (loop1): Directory bread(block 73) failed [ 280.553423][T13699] loop0: detected capacity change from 0 to 1024 [ 280.594819][T13701] loop3: detected capacity change from 0 to 64 [ 280.628350][T13699] hfsplus: bad catalog entry type [ 280.744661][ T13] hfsplus: b-tree write err: -5, ino 25 [ 280.765167][ T13] hfsplus: b-tree write err: -5, ino 4 [ 280.770842][ T13] hfsplus: b-tree write err: -5, ino 2 [ 280.905335][T13711] CIFS mount error: No usable UNC path provided in device string! [ 280.905335][T13711] [ 280.925078][T13711] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 281.042141][T13719] netlink: 'syz.1.3374': attribute type 10 has an invalid length. [ 281.068778][T13719] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3374'. [ 281.092845][T13721] netlink: 'syz.0.3377': attribute type 21 has an invalid length. [ 281.306926][T13721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3377'. [ 281.362839][T13733] openvswitch: netlink: IP tunnel dst address not specified [ 281.769568][T13745] xt_NFQUEUE: number of total queues is 0 [ 281.787326][T13731] loop3: detected capacity change from 0 to 32768 [ 281.801299][T13731] xfs: Deprecated parameter 'noikeep' [ 281.808004][T13731] XFS: noikeep mount option is deprecated. [ 281.828549][T13731] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.830417][T13750] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3391'. [ 281.916492][ T50] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 281.931769][T13731] XFS (loop3): Ending clean mount [ 281.978867][T13731] XFS (loop3): Quotacheck needed: Please wait. [ 282.075073][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 282.121794][ T50] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.139945][T13731] XFS (loop3): Quotacheck: Done. [ 282.145237][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.153244][ T50] usb 1-1: Product: syz [ 282.157573][ T50] usb 1-1: Manufacturer: syz [ 282.162185][ T50] usb 1-1: SerialNumber: syz [ 282.178040][ T50] r8152-cfgselector 1-1: Unknown version 0x0000 [ 282.184336][ T50] r8152-cfgselector 1-1: config 0 descriptor?? [ 282.216420][T13770] xfrm0: entered promiscuous mode [ 282.242197][T13770] xfrm0: entered allmulticast mode [ 282.267926][ T5825] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.618546][ T796] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 282.695262][ T50] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 282.734222][T13790] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 282.855368][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 282.888491][ T50] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 282.908889][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.932401][ T50] usb 2-1: Product: syz [ 282.947020][ T50] usb 2-1: Manufacturer: syz [ 282.951662][ T50] usb 2-1: SerialNumber: syz [ 282.986261][ T50] usb 2-1: config 0 descriptor?? [ 283.003589][ T50] as10x_usb: device has been detected [ 283.021286][ T50] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 283.073322][ T50] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 283.107885][ T50] as10x_usb: error during firmware upload part1 [ 283.126105][ T50] Registered device Sky IT Digital Key (green led) [ 283.164332][T13810] loop4: detected capacity change from 0 to 512 [ 283.252561][T13778] random: crng reseeded on system resumption [ 283.305833][ T5917] usb 2-1: USB disconnect, device number 19 [ 283.315533][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3420'. [ 283.339290][T13810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.357071][T13810] ext4 filesystem being mounted at /700/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.359933][ T5917] Unregistered device Sky IT Digital Key (green led) [ 283.368959][ T5917] as10x_usb: device has been disconnected [ 283.519715][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.814215][T13839] loop4: detected capacity change from 0 to 24 [ 283.832510][T13839] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 283.854125][T13841] openvswitch: netlink: Key type 341 is out of range max 32 [ 283.877480][T13839] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 283.896430][ T29] audit: type=1326 audit(1772456209.723:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 283.919054][T13843] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 283.925592][T13843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.985261][T13843] vhci_hcd vhci_hcd.0: Device attached [ 284.011121][T13845] vhci_hcd: connection closed [ 284.013880][ T83] vhci_hcd vhci_hcd.3: stop threads [ 284.013925][ T29] audit: type=1326 audit(1772456209.723:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 284.025006][ T83] vhci_hcd vhci_hcd.3: release socket [ 284.079851][T13851] tipc: Can't bind to reserved service type 1 [ 284.087935][ T83] vhci_hcd vhci_hcd.3: disconnect device [ 284.183797][ T29] audit: type=1326 audit(1772456209.733:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 284.251734][ T29] audit: type=1326 audit(1772456209.733:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 284.301719][ T29] audit: type=1326 audit(1772456209.733:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz.2.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 284.357564][T13861] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 284.622353][T13877] loop1: detected capacity change from 0 to 512 [ 284.686483][T13877] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (18771!=2687) [ 284.701460][T13881] loop3: detected capacity change from 0 to 512 [ 284.727687][T13877] EXT4-fs (loop1): group descriptors corrupted! [ 284.734304][T13884] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 284.775465][T13881] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 284.793806][T13881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 284.795421][T13884] netlink: 'syz.2.3450': attribute type 3 has an invalid length. [ 284.813080][T13881] System zones: 0-1, 15-15, 18-18, 34-34 [ 284.819399][T13881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 284.826499][T13881] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 284.836343][T13881] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 284.851270][T13881] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 284.855579][T13884] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3450'. [ 284.868926][T13881] EXT4-fs (loop3): 1 truncate cleaned up [ 284.903614][T13881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.917747][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3453'. [ 284.940944][T13881] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 285.035045][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.075967][T13892] loop1: detected capacity change from 0 to 512 [ 285.135124][T13892] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3455: inode has both inline data and extents flags [ 285.224497][T13892] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.224877][T13892] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3455: couldn't read orphan inode 15 (err -117) [ 285.224955][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 285.252403][ C0] EXT4-fs (loop1): initial error at time 1772456211: ext4_orphan_get:1391: inode 15 [ 285.261869][ C0] EXT4-fs (loop1): last error at time 1772456211: ext4_orphan_get:1391: inode 15 [ 285.277023][T13892] loop1: lost filesystem error report for type 5 error -117 [ 285.282174][T13892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.395033][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 285.439342][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.569685][ T9] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 285.596719][ T9] usb 3-1: config 0 has no interface number 0 [ 285.623223][ T9] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.647458][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 285.675008][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.684199][ T9] usb 3-1: Product: syz [ 285.694064][ T9] usb 3-1: Manufacturer: syz [ 285.709016][ T9] usb 3-1: SerialNumber: syz [ 285.727102][T13920] loop4: detected capacity change from 0 to 512 [ 285.735535][ T9] usb 3-1: config 0 descriptor?? [ 285.768602][T13920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.775560][ T9] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 285.805559][T13920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3468: bg 0: block 384: padding at end of block bitmap is not set [ 285.885112][T13920] loop4: lost filesystem error report for type 5 error -117 [ 285.893879][T13920] EXT4-fs (loop4): Remounting filesystem read-only [ 285.901857][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 285.901880][ C0] EXT4-fs (loop4): initial error at time 1772456211: ext4_validate_block_bitmap:441 [ 285.901903][ C0] EXT4-fs (loop4): last error at time 1772456211: ext4_validate_block_bitmap:441 [ 285.935853][T13920] EXT4-fs (loop4): 1 truncate cleaned up [ 285.956413][T13920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.998907][T13906] loop0: detected capacity change from 0 to 32768 [ 286.039264][T13906] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3462 (13906) [ 286.091280][T13912] loop3: detected capacity change from 0 to 32768 [ 286.107128][T13906] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.109088][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.142985][T13912] BTRFS info: device /dev/loop3 (7:3) using temp-fsid b14c42a1-e728-4b7b-9426-507c8828f09b [ 286.143695][T13906] BTRFS info (device loop0): using sha256 checksum algorithm [ 286.155949][ T9] usb 3-1: USB disconnect, device number 16 [ 286.177683][ T9] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 286.185064][T13912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3463 (13912) [ 286.263706][T13912] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.288132][T13936] loop4: detected capacity change from 0 to 764 [ 286.297659][T13936] rock: directory entry would overflow storage [ 286.304280][T13936] rock: sig=0x4654, size=5, remaining=4 [ 286.317153][T13912] BTRFS info (device loop3): using sha256 checksum algorithm [ 286.405472][T13906] BTRFS info (device loop0): setting nodatasum [ 286.411692][T13906] BTRFS info (device loop0): setting nodatacow [ 286.491001][T13906] BTRFS info (device loop0): enabling ssd optimizations [ 286.525106][T13906] BTRFS info (device loop0): turning on async discard [ 286.550341][T13906] BTRFS info (device loop0): enabling free space tree [ 286.592986][T13912] BTRFS info (device loop3): enabling ssd optimizations [ 286.628483][T13912] BTRFS info (device loop3): turning on async discard [ 286.669797][T13912] BTRFS info (device loop3): enabling free space tree [ 286.845509][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.909140][ T5825] BTRFS info (device loop3): last unmount of filesystem b14c42a1-e728-4b7b-9426-507c8828f09b [ 287.165030][ T50] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 287.367794][ T50] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 287.389085][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 287.415183][ T50] usb 2-1: config 0 has no interface number 0 [ 287.431703][ T50] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.483589][ T50] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.524962][ T50] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 287.572513][ T50] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 287.584990][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 287.593777][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.623543][ T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 287.633973][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.649408][ T50] usb 2-1: config 0 descriptor?? [ 287.711773][ T24] usb 1-1: config 0 has no interface number 0 [ 287.722983][ T50] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input19 [ 287.747555][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 287.760932][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.805447][ T24] usb 1-1: Product: syz [ 287.809648][ T24] usb 1-1: Manufacturer: syz [ 287.814242][ T24] usb 1-1: SerialNumber: syz [ 287.870542][T14001] tmpfs: Bad value for 'mpol' [ 287.963922][ T24] usb 1-1: config 0 descriptor?? [ 288.024387][ T50] usb 2-1: USB disconnect, device number 20 [ 288.036569][ T24] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 288.066660][T14007] comedi comedi0: c6xdigio: I/O port conflict (0x3,3) [ 288.231550][T14012] netlink: 'syz.4.3498': attribute type 10 has an invalid length. [ 288.240876][T14013] loop2: detected capacity change from 0 to 256 [ 288.250159][ T24] usb 1-1: USB disconnect, device number 21 [ 288.269362][T14012] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3498'. [ 288.316618][T14013] FAT-fs (loop2): Directory bread(block 64) failed [ 288.339792][T14013] FAT-fs (loop2): Directory bread(block 65) failed [ 288.351200][T14013] FAT-fs (loop2): Directory bread(block 66) failed [ 288.365880][T14013] FAT-fs (loop2): Directory bread(block 67) failed [ 288.382313][T14013] FAT-fs (loop2): Directory bread(block 68) failed [ 288.397607][T14013] FAT-fs (loop2): Directory bread(block 69) failed [ 288.404448][T14013] FAT-fs (loop2): Directory bread(block 70) failed [ 288.411876][T14013] FAT-fs (loop2): Directory bread(block 71) failed [ 288.420095][T14013] FAT-fs (loop2): Directory bread(block 72) failed [ 288.428174][T14013] FAT-fs (loop2): Directory bread(block 73) failed [ 288.644415][T14024] netlink: 'syz.4.3504': attribute type 5 has an invalid length. [ 288.680035][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'. [ 288.909451][T14035] netlink: 'syz.0.3509': attribute type 5 has an invalid length. [ 288.924513][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 288.972170][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3510'. [ 289.025134][T14037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3510'. [ 289.076378][ T9] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 289.116254][T14046] loop1: detected capacity change from 0 to 256 [ 289.236760][T14046] FAT-fs (loop1): Directory bread(block 64) failed [ 289.243344][T14046] FAT-fs (loop1): Directory bread(block 65) failed [ 289.275025][ T9] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 289.283426][ T9] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 289.303442][T14046] FAT-fs (loop1): Directory bread(block 66) failed [ 289.326481][ T9] usb 5-1: config 0 has no interface number 0 [ 289.332634][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 289.348162][T14046] FAT-fs (loop1): Directory bread(block 67) failed [ 289.354814][T14046] FAT-fs (loop1): Directory bread(block 68) failed [ 289.362406][ T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.372855][T14046] FAT-fs (loop1): Directory bread(block 69) failed [ 289.385373][T14046] FAT-fs (loop1): Directory bread(block 70) failed [ 289.391938][T14046] FAT-fs (loop1): Directory bread(block 71) failed [ 289.400133][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 289.411015][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.425041][T14046] FAT-fs (loop1): Directory bread(block 72) failed [ 289.431648][T14046] FAT-fs (loop1): Directory bread(block 73) failed [ 289.442958][ T9] usb 5-1: config 0 descriptor?? [ 289.466058][T14057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3520'. [ 289.475581][T14057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3520'. [ 289.548843][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 289.566595][T14060] SET target dimension over the limit! [ 289.727105][ T24] usb 4-1: config 6 has an invalid interface number: 14 but max is 0 [ 289.746720][ T24] usb 4-1: config 6 has no interface number 0 [ 289.766962][ T24] usb 4-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.787939][ T24] usb 4-1: config 6 interface 14 has no altsetting 0 [ 289.810503][ T24] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 289.831969][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.843898][ T24] usb 4-1: Product: syz [ 289.849630][ T24] usb 4-1: Manufacturer: syz [ 289.854509][ T24] usb 4-1: SerialNumber: syz [ 289.887921][ T9] usb 5-1: USB disconnect, device number 17 [ 289.949655][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3530'. [ 290.016693][T14079] loop0: detected capacity change from 0 to 1024 [ 290.055695][T14079] hfsplus: request for non-existent node 211 in B*Tree [ 290.077182][T14079] hfsplus: request for non-existent node 211 in B*Tree [ 290.103006][ T24] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 290.135847][ T24] command write [95] error -8 [ 290.152415][ T24] usb 4-1: USB disconnect, device number 20 [ 290.387844][T14083] loop1: detected capacity change from 0 to 32768 [ 290.409079][T14083] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.603829][T14083] XFS (loop1): Ending clean mount [ 290.677215][T14102] netlink: 'syz.4.3537': attribute type 1 has an invalid length. [ 290.708253][T14102] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3537'. [ 290.773449][ T5824] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.942824][T14116] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 290.971879][T14118] loop3: detected capacity change from 0 to 256 [ 291.348933][T14126] loop4: detected capacity change from 0 to 4096 [ 291.624433][T14142] loop2: detected capacity change from 0 to 8 [ 291.840080][T14144] loop1: detected capacity change from 0 to 4096 [ 291.937915][T14144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.995232][ T29] audit: type=1326 audit(1772456217.833:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 292.081301][T14156] loop2: detected capacity change from 0 to 512 [ 292.085342][ T29] audit: type=1326 audit(1772456217.833:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 292.139876][ T29] audit: type=1326 audit(1772456217.873:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 292.156080][T14156] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3564: inode has both inline data and extents flags [ 292.181118][ T29] audit: type=1326 audit(1772456217.873:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 292.241635][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.284778][T14156] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.284932][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 292.300505][ C1] EXT4-fs (loop2): initial error at time 1772456218: ext4_orphan_get:1391: inode 15 [ 292.301394][ T29] audit: type=1326 audit(1772456217.873:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.4.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 292.309917][ C1] EXT4-fs (loop2): last error at time 1772456218: ext4_orphan_get:1391: inode 15 [ 292.321524][T14156] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3564: couldn't read orphan inode 15 (err -117) [ 292.430654][T14156] loop2: lost filesystem error report for type 5 error -117 [ 292.432711][T14156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.545666][T14167] netlink: 'syz.1.3566': attribute type 8 has an invalid length. [ 292.570173][T14134] infiniband !yz!: set active [ 292.601540][T14134] infiniband !yz!: added team_slave_0 [ 292.631368][T14134] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 292.672159][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.696762][T14134] infiniband !yz!: Couldn't open port 1 [ 292.765295][T14134] RDS/IB: !yz!: added [ 292.785000][T14134] smc: adding ib device !yz! with port count 1 [ 292.807472][T14134] smc: ib device !yz! port 1 has no pnetid [ 292.935139][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.953979][T14184] usb usb1: usbfs: process 14184 (syz.4.3577) did not claim interface 0 before use [ 293.065181][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 293.106577][T14190] loop4: detected capacity change from 0 to 128 [ 293.113867][T14189] ip6t_srh: unknown srh match flags 4000 [ 293.130101][T14190] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.250038][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 293.276870][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 293.309980][ T24] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 293.323087][ T24] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 293.351773][ T24] usb 2-1: Product: syz [ 293.357655][ T24] usb 2-1: Manufacturer: syz [ 293.375433][ T24] usb 2-1: SerialNumber: syz [ 293.601374][ T24] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 293.635691][ T24] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 293.660652][ T24] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 293.804226][ T24] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 293.835529][ T24] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 293.857451][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 293.900266][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 293.922749][T14195] loop3: detected capacity change from 0 to 32768 [ 293.936692][ T24] usb 2-1: USB disconnect, device number 21 [ 293.977735][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 294.018477][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 294.030658][T14195] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 294.059667][ T24] visor 2-1:1.0: device disconnected [ 294.195995][T14195] XFS (loop3): Ending clean mount [ 294.306674][ T5825] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 294.457805][T14228] bond4: Removing last arp target with arp_interval on [ 294.637412][T14241] loop1: detected capacity change from 0 to 512 [ 294.744538][T14241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.758960][T14241] ext4 filesystem being mounted at /688/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.817605][T14241] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3602: corrupted xattr block 33: overlapping e_value [ 295.108530][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.149990][T14263] sg_write: data in/out 294012/2 bytes for SCSI command 0xaf-- guessing data in; [ 295.149990][T14263] program syz.4.3612 not setting count and/or reply_len properly [ 295.268256][T14265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3613'. [ 295.314205][T14265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3613'. [ 295.485123][ T29] audit: type=1326 audit(1772456221.333:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz.4.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 295.550013][ T29] audit: type=1326 audit(1772456221.353:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz.4.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 295.580305][ T29] audit: type=1326 audit(1772456221.363:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz.4.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 295.634228][ T29] audit: type=1326 audit(1772456221.363:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz.4.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 295.695147][ T29] audit: type=1326 audit(1772456221.363:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz.4.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f3f9c799 code=0x7ffc0000 [ 296.085407][T14305] autofs4:pid:14305:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc0189379) [ 296.127230][T14305] autofs4:pid:14305:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 296.772096][T14337] loop1: detected capacity change from 0 to 1024 [ 296.803051][T14339] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3649'. [ 296.959339][ T35] hfsplus: b-tree write err: -5, ino 25 [ 296.978776][ T35] hfsplus: b-tree write err: -5, ino 4 [ 296.997576][ T35] hfsplus: b-tree write err: -5, ino 2 [ 297.329409][T14357] kernel profiling enabled (shift: 63) [ 297.349700][T14357] profiling shift: 63 too large [ 297.493381][T14365] loop3: detected capacity change from 0 to 512 [ 297.544974][T14365] EXT4-fs (loop3): Test dummy encryption mode enabled [ 297.572056][T14365] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 297.624648][T14365] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 297.668034][T14365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.684502][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3668'. [ 297.803825][T14384] loop4: detected capacity change from 0 to 512 [ 297.929422][T14384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.948253][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.011980][T14384] ext4 filesystem being mounted at /767/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.117834][T14396] loop1: detected capacity change from 0 to 8 [ 298.169556][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.393289][T14409] netlink: 'syz.1.3682': attribute type 32 has an invalid length. [ 298.412170][T14405] loop0: detected capacity change from 0 to 2048 [ 298.484129][T14405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.779785][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.815658][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 299.002615][ T24] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 299.020336][ T24] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 299.060031][ T24] usb 4-1: config 0 has no interface number 0 [ 299.089910][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 299.113243][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.143945][ T24] usb 4-1: Product: syz [ 299.155908][ T24] usb 4-1: Manufacturer: syz [ 299.160557][ T24] usb 4-1: SerialNumber: syz [ 299.177434][ T24] usb 4-1: config 0 descriptor?? [ 299.576395][T14465] loop1: detected capacity change from 0 to 128 [ 299.617199][ T24] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 299.628853][T14465] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.641229][ T24] uvcvideo 4-1:0.64: No valid video chain found. [ 299.643312][ T24] usb 4-1: USB disconnect, device number 21 [ 299.673542][T14471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3710'. [ 299.710022][T14471] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 299.732692][T14465] ext4 filesystem being mounted at /716/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.994979][ T50] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 300.117981][T14477] loop4: detected capacity change from 0 to 32768 [ 300.137867][T14477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3713 (14477) [ 300.189478][ T50] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 300.204369][T14477] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.226307][ T50] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 300.241923][T14477] BTRFS info (device loop4): using sha256 checksum algorithm [ 300.249956][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.280245][ T50] usb 2-1: Product: syz [ 300.293183][ T50] usb 2-1: Manufacturer: syz [ 300.317154][ T50] usb 2-1: SerialNumber: syz [ 300.354653][ T50] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 300.416157][T14477] BTRFS info (device loop4): enabling ssd optimizations [ 300.423181][T14477] BTRFS info (device loop4): turning on async discard [ 300.474997][T14477] BTRFS info (device loop4): enabling free space tree [ 300.558292][ T50] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 300.608023][ T50] usb 2-1: USB disconnect, device number 22 [ 300.685545][ T5819] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.980290][T14529] netlink: 'syz.4.3726': attribute type 4 has an invalid length. [ 301.032229][ T29] audit: type=1800 audit(1772456226.873:164): pid=14518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.3725" name="/" dev="tmpfs" ino=1210 res=0 errno=0 [ 301.213618][ T5824] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.386931][T14541] loop1: detected capacity change from 0 to 8 [ 301.416635][T14541] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 301.431454][T14545] loop2: detected capacity change from 0 to 256 [ 301.455449][ T5994] udevd[5994]: incorrect cramfs checksum on /dev/loop1 [ 301.527807][ T5994] udevd[5994]: incorrect cramfs checksum on /dev/loop1 [ 301.583040][T14545] FAT-fs (loop2): Directory bread(block 64) failed [ 301.605428][ T5994] udevd[5994]: incorrect cramfs checksum on /dev/loop1 [ 301.612568][T14545] FAT-fs (loop2): Directory bread(block 65) failed [ 301.616842][T14549] loop3: detected capacity change from 0 to 512 [ 301.650673][T14545] FAT-fs (loop2): Directory bread(block 66) failed [ 301.672368][T14545] FAT-fs (loop2): Directory bread(block 67) failed [ 301.691384][T14545] FAT-fs (loop2): Directory bread(block 68) failed [ 301.698266][T14545] FAT-fs (loop2): Directory bread(block 69) failed [ 301.705191][T14549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.714086][T14545] FAT-fs (loop2): Directory bread(block 70) failed [ 301.731204][T14545] FAT-fs (loop2): Directory bread(block 71) failed [ 301.748746][T14545] FAT-fs (loop2): Directory bread(block 72) failed [ 301.760916][T14549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.777104][T14545] FAT-fs (loop2): Directory bread(block 73) failed [ 301.792461][T14549] ext4 filesystem being mounted at /723/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.018416][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.733003][T14599] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3762'. [ 302.780087][T14599] bond_slave_0: entered promiscuous mode [ 302.786306][T14599] bond_slave_1: entered promiscuous mode [ 302.791996][T14599] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 302.859564][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3763'. [ 302.869025][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3763'. [ 303.022387][ T29] audit: type=1326 audit(1772456228.863:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.098995][ T29] audit: type=1326 audit(1772456228.863:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.192673][ T29] audit: type=1326 audit(1772456228.863:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.216271][ T29] audit: type=1326 audit(1772456228.863:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.262566][T14619] loop2: detected capacity change from 0 to 512 [ 303.275333][ T29] audit: type=1326 audit(1772456228.863:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.361845][ T29] audit: type=1326 audit(1772456228.863:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.389338][ T29] audit: type=1326 audit(1772456228.863:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.444446][T14619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.506651][ T29] audit: type=1326 audit(1772456228.863:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.530602][T14619] ext4 filesystem being mounted at /847/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.552307][T14596] loop1: detected capacity change from 0 to 40427 [ 303.573916][ T29] audit: type=1326 audit(1772456228.863:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f934d99c799 code=0x7ffc0000 [ 303.612733][T14596] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 303.623166][T14629] ip6gre1: entered allmulticast mode [ 303.654305][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.681318][T14596] F2FS-fs (loop1): invalid crc value [ 303.980191][T14596] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 304.017817][T14596] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 304.398512][T14632] loop0: detected capacity change from 0 to 32768 [ 304.426155][T14632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3776 (14632) [ 304.459019][T14632] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.512627][T14632] BTRFS info (device loop0): using sha256 checksum algorithm [ 304.629620][T14632] BTRFS info (device loop0): enabling ssd optimizations [ 304.635052][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 304.644987][T14632] BTRFS info (device loop0): turning on async discard [ 304.658596][T14632] BTRFS info (device loop0): enabling free space tree [ 304.815463][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.834967][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 304.875111][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 304.894955][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 304.936380][T14683] loop3: detected capacity change from 0 to 64 [ 304.950094][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 304.971333][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 305.012258][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 305.068324][T14655] loop2: detected capacity change from 0 to 32768 [ 305.069447][ T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 305.131546][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.156415][ T10] usb 5-1: Product: syz [ 305.160723][ T10] usb 5-1: Manufacturer: syz [ 305.193966][ T10] usb 5-1: SerialNumber: syz [ 305.248030][ T10] usb 5-1: config 0 descriptor?? [ 305.383167][T14693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.734762][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 305.755126][ T10] input input23: Device does not respond to id packet M [ 305.768577][T14700] loop2: detected capacity change from 0 to 4096 [ 305.785109][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 305.791184][ T10] input input23: Device does not respond to id packet P [ 305.823962][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 305.841997][T14707] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.857933][ T10] input input23: Device does not respond to id packet B [ 305.870928][T14700] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 305.911081][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 305.913673][T14700] Remounting filesystem read-only [ 305.929997][T14712] loop3: detected capacity change from 0 to 64 [ 305.938045][ T10] input input23: Device does not respond to id packet N [ 305.975137][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 306.015871][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 306.029093][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 306.056348][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 306.108242][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 306.152216][T14719] loop1: detected capacity change from 0 to 512 [ 306.185866][T14718] comedi comedi1: rti800: a I/O base address must be specified [ 306.196794][ T10] usb 5-1: USB disconnect, device number 18 [ 306.275492][T14719] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 306.315449][T14719] FAT-fs (loop1): Filesystem has been set read-only [ 306.367956][T14719] FAT-fs (loop1): error, invalid access to FAT (entry 0x000000c8) [ 306.551561][T14731] ip6t_rpfilter: unknown options [ 306.916650][T14751] netlink: 'syz.3.3828': attribute type 4 has an invalid length. [ 306.924638][T14751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3828'. [ 306.939001][T14751] wlan1: mtu less than device minimum [ 306.950821][T14753] openvswitch: netlink: Unexpected mask (mask=400440, allowed=410048) [ 307.076458][T14757] CIFS: VFS: Malformed UNC in devname [ 307.095429][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 307.127242][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3833'. [ 307.135351][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 307.342683][T14770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.545279][T14780] binder: 14779:14780 ioctl c00c620f 0 returned -14 [ 307.699905][T14790] loop1: detected capacity change from 0 to 64 [ 307.762585][T14790] hfs: unable to locate alternate MDB [ 307.765220][T14797] xt_hashlimit: max too large, truncated to 1048576 [ 307.772985][T14790] hfs: continuing without an alternate MDB [ 307.784271][T14797] xt_hashlimit: overflow, rate too high: 0 [ 308.118113][T14815] netlink: 'syz.4.3858': attribute type 2 has an invalid length. [ 308.127003][T14816] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 308.145703][T14815] netlink: 'syz.4.3858': attribute type 2 has an invalid length. [ 308.234027][T14818] loop1: detected capacity change from 0 to 256 [ 308.304421][T14818] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 308.464029][T14828] loop3: detected capacity change from 0 to 512 [ 308.483872][T14828] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 308.505561][T14828] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 308.520897][T14835] loop4: detected capacity change from 0 to 256 [ 308.537497][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 308.556878][T14828] System zones: 0-1, 15-15, 18-18, 34-34 [ 308.562868][T14828] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.628402][T14828] __quota_error: 1 callbacks suppressed [ 308.628420][T14828] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 308.643968][T14828] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 308.661641][T14835] FAT-fs (loop4): Directory bread(block 64) failed [ 308.668307][T14835] FAT-fs (loop4): Directory bread(block 65) failed [ 308.675338][T14835] FAT-fs (loop4): Directory bread(block 66) failed [ 308.681885][T14835] FAT-fs (loop4): Directory bread(block 67) failed [ 308.691851][T14828] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 308.714738][T14835] FAT-fs (loop4): Directory bread(block 68) failed [ 308.728803][T14835] FAT-fs (loop4): Directory bread(block 69) failed [ 308.735299][T14828] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3866: bad orphan inode 16 [ 308.763064][T14835] FAT-fs (loop4): Directory bread(block 70) failed [ 308.783246][T14835] FAT-fs (loop4): Directory bread(block 71) failed [ 308.790369][T14828] loop3: lost filesystem error report for type 5 error -117 [ 308.790633][T14828] ext4_test_bit(bit=15, block=18) = 1 [ 308.797987][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 308.798012][ C1] EXT4-fs (loop3): initial error at time 1772456234: ext4_orphan_get:1417 [ 308.798040][ C1] EXT4-fs (loop3): last error at time 1772456234: ext4_orphan_get:1417 [ 308.803589][T14835] FAT-fs (loop4): Directory bread(block 72) failed [ 308.803618][T14835] FAT-fs (loop4): Directory bread(block 73) failed [ 308.871362][T14828] is_bad_inode(inode)=0 [ 308.884999][T14828] NEXT_ORPHAN(inode)=0 [ 308.895430][T14828] max_ino=32 [ 308.898694][T14828] i_nlink=2 [ 308.903495][T14828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.927947][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3871'. [ 308.955305][T14843] netlink: 'syz.1.3871': attribute type 1 has an invalid length. [ 308.998218][T14828] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 309.131070][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.192334][T14853] overlayfs: missing 'lowerdir' [ 309.825865][T14885] loop2: detected capacity change from 0 to 2048 [ 309.848884][T14885] EXT4-fs: Ignoring removed i_version option [ 309.930586][T14885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.994832][T14897] loop4: detected capacity change from 0 to 4096 [ 310.035087][T14897] NILFS (loop4): mounting unchecked fs [ 310.043367][T14897] NILFS (loop4): recovery required for readonly filesystem [ 310.050781][T14897] NILFS (loop4): write access will be enabled during recovery [ 310.060892][T14897] NILFS (loop4): invalid segment: Checksum error in segment payload [ 310.079904][T14897] NILFS (loop4): trying rollback from an earlier position [ 310.088892][T14885] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3893: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 310.161749][T14897] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 310.245396][T14897] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 310.291710][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.373608][T14920] loop0: detected capacity change from 0 to 32768 [ 311.438225][T14920] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.612934][T14945] loop3: detected capacity change from 0 to 32768 [ 311.632777][T14920] XFS (loop0): Ending clean mount [ 311.663081][T14945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3921 (14945) [ 311.716952][T14945] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.744054][T14973] loop2: detected capacity change from 0 to 2048 [ 311.754181][T14945] BTRFS info (device loop3): using sha256 checksum algorithm [ 311.774219][T14973] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 311.798327][T14945] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 311.845429][ T5837] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.891829][T14949] loop1: detected capacity change from 0 to 32768 [ 311.904630][T14987] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.970826][T14949] [ 311.970826][T14949] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 311.970826][T14949] [ 311.986689][T14945] BTRFS info (device loop3): rebuilding free space tree [ 312.058085][T14945] BTRFS info (device loop3): disabling free space tree [ 312.088356][T14945] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 312.089225][T14949] ERROR: (device loop1): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 312.089225][T14949] [ 312.111834][T14945] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 312.147811][T14949] ERROR: (device loop1): jfs_unlink: [ 312.147811][T14949] [ 312.164863][T14945] BTRFS info (device loop3): checking UUID tree [ 312.182352][T14945] BTRFS info (device loop3): setting nodatasum [ 312.204817][T14945] BTRFS info (device loop3): setting nodatacow [ 312.224963][T14945] BTRFS info (device loop3): enabling ssd optimizations [ 312.232588][T14945] BTRFS info (device loop3): enabling disk space caching [ 312.291377][T14945] BTRFS info (device loop3): force clearing of disk cache [ 312.327887][T14945] BTRFS info (device loop3): enabling auto defrag [ 312.336007][T14998] misc userio: Invalid payload size [ 312.395496][ T5824] ERROR: (device loop1): xtTruncate: xt_getpage: xtree page corrupt [ 312.395496][ T5824] [ 312.437806][ T83] ERROR: (device loop1): diWrite: ixpxd invalid [ 312.437806][ T83] [ 312.458143][ T83] ERROR: (device loop1): txCommit: [ 312.458143][ T83] [ 312.478309][ T83] jfs_write_inode: jfs_commit_inode failed! [ 312.514028][ T5824] [ 312.514028][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.514028][ T5824] [ 312.562567][ T5824] [ 312.562567][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 312.562567][ T5824] [ 312.576789][T15004] netlink: 'syz.4.3939': attribute type 1 has an invalid length. [ 312.605333][T15006] loop2: detected capacity change from 0 to 64 [ 312.614670][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.719385][T15008] loop0: detected capacity change from 0 to 1024 [ 313.602142][T15041] loop0: detected capacity change from 0 to 512 [ 313.629050][T15041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.667692][T15041] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 313.685842][T15041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 313.705352][T15041] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 313.767093][T15041] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 313.778836][T15041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 313.800500][T15041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.828219][T15041] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 313.985801][T15051] loop2: detected capacity change from 0 to 2048 [ 313.993987][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.040231][T15051] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 314.090762][T15051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.285433][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 314.314545][T15063] loop1: detected capacity change from 0 to 4096 [ 314.475535][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 314.493052][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.548750][ T10] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 314.595149][ T10] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 314.657833][ T10] usb 4-1: New USB device found, idVendor=07aa, idProduct=0004, bcdDevice=4a.79 [ 314.677602][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.705082][ T10] usb 4-1: Product: syz [ 314.715552][ T10] usb 4-1: Manufacturer: syz [ 314.728971][ T10] usb 4-1: SerialNumber: syz [ 314.835493][T15089] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 314.997271][ T10] usb 4-1: USB disconnect, device number 22 [ 315.161997][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3987'. [ 315.214615][T15109] loop4: detected capacity change from 0 to 1024 [ 315.298602][ T60] hfsplus: b-tree write err: -5, ino 25 [ 315.307907][ T60] hfsplus: b-tree write err: -5, ino 4 [ 315.313494][ T60] hfsplus: b-tree write err: -5, ino 2 [ 315.338852][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3991'. [ 315.411587][T15115] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3993'. [ 315.425547][ T796] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 315.468912][ T29] audit: type=1326 audit(1772456241.313:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630099c799 code=0x7ffc0000 [ 315.547788][ T29] audit: type=1326 audit(1772456241.343:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630099c799 code=0x7ffc0000 [ 315.595319][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 315.607146][ T796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 315.627290][ T29] audit: type=1326 audit(1772456241.353:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f630099c799 code=0x7ffc0000 [ 315.659881][T15123] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3996'. [ 315.665213][ T796] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 315.684138][ T796] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 315.693550][ T29] audit: type=1326 audit(1772456241.353:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630099c799 code=0x7ffc0000 [ 315.717183][ T796] usb 3-1: Product: syz [ 315.724189][ T796] usb 3-1: Manufacturer: syz [ 315.735420][ T796] usb 3-1: SerialNumber: syz [ 315.958369][ T796] usb 3-1: Invalid connection information received from device [ 315.978141][T15135] bond2: down delay (262144) is not a multiple of miimon (5), value rounded to 262140 ms [ 316.010050][T15140] loop1: detected capacity change from 0 to 256 [ 316.173563][ T24] usb 3-1: USB disconnect, device number 17 [ 316.374391][T15155] openvswitch: netlink: IP tunnel dst address not specified [ 316.509344][T15163] AppArmor: change_hat: Invalid input '0' [ 316.637307][T15171] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4019'. [ 316.833747][T15182] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4023'. [ 316.867910][T15185] netlink: 'syz.3.4026': attribute type 30 has an invalid length. [ 317.069578][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4031'. [ 317.186401][ T796] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 317.271780][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.355068][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 317.366469][ T796] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 317.394058][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.408672][T15209] loop1: detected capacity change from 0 to 64 [ 317.465845][ T796] usb 3-1: config 0 descriptor?? [ 317.502681][ T796] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 317.700555][ T796] usb 3-1: Detected FT232A [ 317.758361][ T796] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 317.794509][ T796] usb 3-1: USB disconnect, device number 18 [ 317.835457][T15221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 317.840219][ T796] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 317.877882][ T796] ftdi_sio 3-1:0.0: device disconnected [ 318.125869][T15237] ipt_rpfilter: unknown options [ 318.421263][T15223] loop4: detected capacity change from 0 to 32768 [ 318.448450][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 318.459439][T15223] xfs: Deprecated parameter 'noikeep' [ 318.464851][T15223] XFS: noikeep mount option is deprecated. [ 318.474263][T15248] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 318.507678][T15232] loop0: detected capacity change from 0 to 32768 [ 318.521292][T15248] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 318.556990][T15232] ERROR: (device loop0): diAllocBit: iag inconsistent [ 318.556990][T15232] [ 318.584518][T15232] ialloc: diAlloc returned -5! [ 318.589193][T15223] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.762263][T15223] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 318.847446][T15223] XFS (loop4): Starting recovery (logdev: internal) [ 318.891105][T15223] XFS (loop4): Ending recovery (logdev: internal) [ 318.922964][T15223] XFS: no-recovery mounts must be read-only. [ 318.979309][ T5819] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.200333][T15249] loop1: detected capacity change from 0 to 32768 [ 319.228805][T15249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4054 (15249) [ 319.268502][T15249] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 319.285436][T15249] BTRFS info (device loop1): using sha256 checksum algorithm [ 319.324747][T15249] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 319.432842][T15274] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 319.477397][T15274] bond3 (unregistering): Released all slaves [ 319.566427][T15249] BTRFS info (device loop1): rebuilding free space tree [ 319.573942][T15294] loop2: detected capacity change from 0 to 4096 [ 319.609206][T15249] BTRFS info (device loop1): disabling free space tree [ 319.626903][T15294] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 319.645391][T15249] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 319.645485][T15294] ntfs3(loop2): ino=3, mi_enum_attr [ 319.680676][T15249] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 319.759131][T15294] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 319.798231][T15249] BTRFS info (device loop1): checking UUID tree [ 319.821580][T15249] BTRFS info (device loop1): setting nodatasum [ 319.847870][T15249] BTRFS info (device loop1): setting nodatacow [ 319.854112][T15249] BTRFS info (device loop1): enabling ssd optimizations [ 319.865320][T15294] ntfs3(loop2): ino=1e, mi_enum_attr [ 319.903552][T15249] BTRFS info (device loop1): enabling disk space caching [ 319.929960][T15249] BTRFS info (device loop1): force clearing of disk cache [ 319.957769][T15249] BTRFS info (device loop1): enabling auto defrag [ 320.208721][ T5824] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 320.327121][T15322] loop2: detected capacity change from 0 to 256 [ 320.384790][T15324] SET target dimension over the limit! [ 320.464158][T15322] FAT-fs (loop2): Directory bread(block 64) failed [ 320.478726][T15322] FAT-fs (loop2): Directory bread(block 65) failed [ 320.515042][T15322] FAT-fs (loop2): Directory bread(block 66) failed [ 320.521655][T15322] FAT-fs (loop2): Directory bread(block 67) failed [ 320.590683][T15322] FAT-fs (loop2): Directory bread(block 68) failed [ 320.601819][T15322] FAT-fs (loop2): Directory bread(block 69) failed [ 320.608846][T15322] FAT-fs (loop2): Directory bread(block 70) failed [ 320.615304][T15310] loop4: detected capacity change from 0 to 32768 [ 320.630529][T15322] FAT-fs (loop2): Directory bread(block 71) failed [ 320.637516][T15322] FAT-fs (loop2): Directory bread(block 72) failed [ 320.644171][T15322] FAT-fs (loop2): Directory bread(block 73) failed [ 320.676347][T15310] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4072 (15310) [ 320.724193][T15322] syz.2.4079: attempt to access beyond end of device [ 320.724193][T15322] loop2: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 320.760249][T15310] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 320.777940][T15322] syz.2.4079: attempt to access beyond end of device [ 320.777940][T15322] loop2: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 320.785001][T15310] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 320.822364][ T29] audit: type=1800 audit(1772456246.663:179): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4079" name="file0" dev="loop2" ino=1048662 res=0 errno=0 [ 320.825080][T15310] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 320.942809][T15320] loop3: detected capacity change from 0 to 32768 [ 321.189566][T15326] loop0: detected capacity change from 0 to 32768 [ 321.198902][T15310] BTRFS info (device loop4): rebuilding free space tree [ 321.206353][T15326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4081 (15326) [ 321.292813][T15326] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.306564][T15310] BTRFS info (device loop4): disabling free space tree [ 321.327214][T15326] BTRFS info (device loop0): using sha256 checksum algorithm [ 321.334783][T15310] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 321.368927][T15310] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 321.407839][T15310] BTRFS info (device loop4): allowing degraded mounts [ 321.414666][T15310] BTRFS info (device loop4): enabling ssd optimizations [ 321.428398][T15310] BTRFS info (device loop4): turning on async discard [ 321.435322][T15310] BTRFS info (device loop4): enabling disk space caching [ 321.442746][T15310] BTRFS info (device loop4): force clearing of disk cache [ 321.443588][T15359] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4086'. [ 321.451988][T15310] BTRFS info (device loop4): use zlib compression, level 3 [ 321.536951][T15326] BTRFS info (device loop0): enabling ssd optimizations [ 321.543952][T15326] BTRFS info (device loop0): turning on async discard [ 321.615070][T15326] BTRFS info (device loop0): enabling free space tree [ 321.695218][T15310] BTRFS info (device loop4): balance: start -sprofiles=data|system|metadata|metadata-remap|remapped|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffeffffffffe000,usage=4,usage=4..0,devid=0,drange=9223372036854776319..10 [ 321.745106][T15310] BTRFS info (device loop4): balance: ended with status: 0 [ 321.780463][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.865553][T15369] netlink: 'syz.2.4087': attribute type 21 has an invalid length. [ 321.964101][ T5819] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 322.236249][T15376] loop2: detected capacity change from 0 to 2048 [ 322.251081][T15376] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 322.307220][T15376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.387876][T15376] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 322.594391][T15388] loop3: detected capacity change from 0 to 128 [ 322.904417][T15402] netlink: 'syz.1.4103': attribute type 10 has an invalid length. [ 322.924785][T15402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4103'. [ 323.303562][T15423] loop4: detected capacity change from 0 to 256 [ 323.368893][T15423] FAT-fs (loop4): Directory bread(block 64) failed [ 323.386586][T15423] FAT-fs (loop4): Directory bread(block 65) failed [ 323.416092][T15423] FAT-fs (loop4): Directory bread(block 66) failed [ 323.434048][T15423] FAT-fs (loop4): Directory bread(block 67) failed [ 323.455876][T15423] FAT-fs (loop4): Directory bread(block 68) failed [ 323.474739][T15423] FAT-fs (loop4): Directory bread(block 69) failed [ 323.485028][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 323.499097][T15423] FAT-fs (loop4): Directory bread(block 70) failed [ 323.521784][T15423] FAT-fs (loop4): Directory bread(block 71) failed [ 323.543264][T15423] FAT-fs (loop4): Directory bread(block 72) failed [ 323.559109][T15423] FAT-fs (loop4): Directory bread(block 73) failed [ 323.655092][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.656501][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 323.689695][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.704301][ T24] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 323.714719][ T24] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 323.745902][ T24] usb 3-1: New USB device found, idVendor=07aa, idProduct=0004, bcdDevice=4a.79 [ 323.760041][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.768671][ T24] usb 3-1: Product: syz [ 323.783127][ T24] usb 3-1: Manufacturer: syz [ 323.795055][ T24] usb 3-1: SerialNumber: syz [ 324.031904][ T24] usb 3-1: USB disconnect, device number 19 [ 324.297963][T15448] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4124'. [ 324.505161][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4129'. [ 324.540532][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4129'. [ 324.884994][ T50] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 325.067779][ T50] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 325.077145][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.125203][T15470] loop2: detected capacity change from 0 to 32768 [ 325.135970][ T50] usb 5-1: config 0 descriptor?? [ 325.153739][ T50] cp210x 5-1:0.0: cp210x converter detected [ 325.168493][T15490] loop3: detected capacity change from 0 to 128 [ 325.221495][T15470] JBD2: Ignoring recovery information on journal [ 325.340934][T15470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 325.453965][T15470] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 325.475215][ T796] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 325.511018][T15470] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 325.547988][T15470] OCFS2: File system is now read-only. [ 325.556403][T15470] (syz.2.4136,15470,0):ocfs2_reserve_suballoc_bits:925 ERROR: status = -30 [ 325.565081][ T50] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 325.565110][ T50] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 325.581014][ T50] usb 5-1: cp210x converter now attached to ttyUSB0 [ 325.586982][T15470] (syz.2.4136,15470,0):ocfs2_reserve_cluster_bitmap_bits:1208 ERROR: status = -30 [ 325.633563][ T50] usb 5-1: USB disconnect, device number 19 [ 325.642478][T15470] (syz.2.4136,15470,1):ocfs2_reserve_clusters_with_limit:1277 ERROR: status = -30 [ 325.662518][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 325.676804][ T50] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.698049][T15470] (syz.2.4136,15470,1):ocfs2_reserve_clusters_with_limit:1290 ERROR: status = -30 [ 325.711120][ T50] cp210x 5-1:0.0: device disconnected [ 325.717162][ T796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.724941][T15470] (syz.2.4136,15470,0):ocfs2_block_group_alloc:748 ERROR: status = -30 [ 325.725001][T15470] (syz.2.4136,15470,0):ocfs2_block_group_alloc:833 ERROR: status = -30 [ 325.725022][T15470] (syz.2.4136,15470,0):ocfs2_reserve_suballoc_bits:908 ERROR: status = -30 [ 325.725043][T15470] (syz.2.4136,15470,0):ocfs2_reserve_suballoc_bits:925 ERROR: status = -30 [ 325.725065][T15470] (syz.2.4136,15470,0):ocfs2_reserve_new_metadata_blocks:1065 ERROR: status = -30 [ 325.725193][T15470] (syz.2.4136,15470,0):ocfs2_reserve_new_metadata_blocks:1088 ERROR: status = -30 [ 325.748057][ T796] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 325.788960][T15470] (syz.2.4136,15470,0):ocfs2_expand_inline_dir:2867 ERROR: status = -30 [ 325.826925][ T796] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 325.838266][T15470] (syz.2.4136,15470,0):ocfs2_extend_dir:3231 ERROR: status = -30 [ 325.839508][ T796] usb 2-1: New USB device found, idVendor=07aa, idProduct=0004, bcdDevice=4a.79 [ 325.860169][T15509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4154'. [ 325.861171][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.878006][T15470] (syz.2.4136,15470,0):ocfs2_prepare_dir_for_insert:4349 ERROR: status = -30 [ 325.878041][T15470] (syz.2.4136,15470,0):ocfs2_mknod:302 ERROR: status = -30 [ 325.878064][T15470] (syz.2.4136,15470,0):ocfs2_mknod:506 ERROR: status = -30 [ 325.878084][T15470] (syz.2.4136,15470,0):ocfs2_create:679 ERROR: status = -30 [ 325.919020][ T796] usb 2-1: Product: syz [ 325.923238][ T796] usb 2-1: Manufacturer: syz [ 325.928257][ T796] usb 2-1: SerialNumber: syz [ 325.962543][T15470] syz.2.4136 (15470) used greatest stack depth: 18080 bytes left [ 326.047380][ T5821] ocfs2: Unmounting device (7,2) on (node local) [ 326.156572][ T796] usb 2-1: USB disconnect, device number 23 [ 326.468535][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4165'. [ 326.579829][T15534] netlink: 'syz.0.4167': attribute type 2 has an invalid length. [ 326.606420][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 326.776261][T15520] loop4: detected capacity change from 0 to 32768 [ 326.806439][T15520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4161 (15520) [ 326.861908][T15520] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.899408][T15520] BTRFS info (device loop4): using sha256 checksum algorithm [ 326.933390][T15520] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 327.052002][T15554] comedi comedi2: dac02: I/O port conflict (0x8e7a3,8) [ 327.196042][T15520] BTRFS info (device loop4): rebuilding free space tree [ 327.202145][T15567] loop3: detected capacity change from 0 to 4096 [ 327.216853][T15567] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 327.266390][T15520] BTRFS info (device loop4): disabling free space tree [ 327.273347][T15520] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.314994][T15520] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.400599][T15567] ntfs3(loop3): ino=1a, mi_enum_attr [ 327.405784][T15520] BTRFS info (device loop4): checking UUID tree [ 327.430129][T15567] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 327.450420][T15520] BTRFS info (device loop4): setting nodatasum [ 327.489556][T15520] BTRFS info (device loop4): setting nodatacow [ 327.521969][T15520] BTRFS info (device loop4): enabling ssd optimizations [ 327.554934][T15520] BTRFS info (device loop4): enabling disk space caching [ 327.600574][T15520] BTRFS info (device loop4): force clearing of disk cache [ 327.630331][T15520] BTRFS info (device loop4): enabling auto defrag [ 327.885902][ T5819] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.058084][ T796] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 328.162389][T15571] loop2: detected capacity change from 0 to 32768 [ 328.267360][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.297957][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.352441][ T796] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 328.394960][ T796] usb 4-1: config 1 has no interface number 1 [ 328.395966][T15601] trusted_key: encrypted_key: insufficient parameters specified [ 328.401109][ T796] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.484656][ T796] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.503354][T15603] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4194'. [ 328.511505][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.551638][ T796] usb 4-1: Product: syz [ 328.568192][ T796] usb 4-1: Manufacturer: syz [ 328.572836][ T796] usb 4-1: SerialNumber: syz [ 328.874390][ T796] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 328.989773][ T796] usb 4-1: USB disconnect, device number 23 [ 329.064093][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.248912][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4207'. [ 329.729300][T15657] netlink: 'syz.3.4220': attribute type 64 has an invalid length. [ 329.991925][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.020281][T15672] batadv_slave_0: entered promiscuous mode [ 330.045602][T15672] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 330.261053][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4236'. [ 330.507806][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 330.685790][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 330.707171][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.734943][ T24] usb 4-1: config 0 has no interface number 0 [ 330.746644][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 330.775534][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.804977][ T24] usb 4-1: Product: syz [ 330.815148][ T24] usb 4-1: Manufacturer: syz [ 330.835017][ T24] usb 4-1: SerialNumber: syz [ 330.863828][ T24] usb 4-1: config 0 descriptor?? [ 330.878047][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 330.902747][ T24] usb 4-1: selecting invalid altsetting 1 [ 330.920076][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 330.971629][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.996284][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 331.046330][ T24] usb 4-1: media controller created [ 331.105068][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.127455][T15728] sctp: [Deprecated]: syz.2.4255 (pid 15728) Use of int in maxseg socket option. [ 331.127455][T15728] Use struct sctp_assoc_value instead [ 331.183045][ T24] usb 4-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 331.203278][ T24] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 331.340211][ T24] DVB: Unable to find symbol mxl5005s_attach() [ 331.405805][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 331.419797][T15712] loop0: detected capacity change from 0 to 32768 [ 331.449975][T15712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4247 (15712) [ 331.503786][T15735] loop4: detected capacity change from 0 to 4096 [ 331.523661][T15712] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.546686][T15712] BTRFS info (device loop0): using sha256 checksum algorithm [ 331.556607][T15712] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 331.582766][T15740] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.594553][ T24] usb 4-1: USB disconnect, device number 24 [ 331.609827][T15735] NILFS (loop4): the device already has a read/write mount. [ 331.675219][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.711602][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.743561][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.756110][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.780894][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.791063][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.801095][T15712] BTRFS info (device loop0): rebuilding free space tree [ 331.813625][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.820932][T15712] BTRFS info (device loop0): disabling free space tree [ 331.823444][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.838537][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.848247][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 331.859311][T15712] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 331.869381][T15712] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 331.924232][T15712] BTRFS info (device loop0): checking UUID tree [ 331.958357][T15712] BTRFS info (device loop0): setting nodatasum [ 331.984799][T15712] BTRFS info (device loop0): setting nodatacow [ 331.994020][T15712] BTRFS info (device loop0): enabling ssd optimizations [ 332.008006][T15712] BTRFS info (device loop0): enabling disk space caching [ 332.035003][T15712] BTRFS info (device loop0): force clearing of disk cache [ 332.046368][T15712] BTRFS info (device loop0): enabling auto defrag [ 332.146599][T15770] loop3: detected capacity change from 0 to 16 [ 332.212568][T15770] erofs (device loop3): mounted with root inode @ nid 36. [ 332.255764][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.270123][T15775] netlink: 'syz.2.4268': attribute type 1 has an invalid length. [ 332.274263][T15770] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 332.328868][T15770] erofs (device loop3): readahead error at folio 0 @ nid 89 [ 332.371408][ T5839] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 0 size 4096 => 7464 [ 332.388796][T15770] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89 [ 332.403244][T15770] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 0 size 4096 => 2560 [ 332.414552][T15770] erofs (device loop3): read error -117 @ 0 of nid 89 [ 332.435427][ T29] audit: type=1800 audit(1772456258.283:180): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4266" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 332.768298][T15793] loop2: detected capacity change from 0 to 256 [ 333.026156][T15802] 9pnet_fd: p9_fd_create_unix (15802): problem connecting socket: ./file0: -111 [ 333.387798][T15818] loop2: detected capacity change from 0 to 128 [ 334.256911][T15864] loop0: detected capacity change from 0 to 512 [ 334.273966][T15864] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 334.290803][T15864] EXT4-fs (loop0): orphan cleanup on readonly fs [ 334.341131][T15864] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 334.360455][T15864] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 334.370404][T15864] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4313: Failed to acquire dquot type 1 [ 334.384271][T15864] loop0: lost filesystem error report for type 5 error -5 [ 334.384914][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 334.398517][ C0] EXT4-fs (loop0): initial error at time 1772456260: ext4_acquire_dquot:7001 [ 334.407369][ C0] EXT4-fs (loop0): last error at time 1772456260: ext4_acquire_dquot:7001 [ 334.428959][T15864] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4313: bg 0: block 40: padding at end of block bitmap is not set [ 334.466156][T15864] loop0: lost filesystem error report for type 5 error -117 [ 334.468804][T15864] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 334.517600][T15864] loop0: lost filesystem error report for type 5 error -117 [ 334.518323][T15864] EXT4-fs (loop0): 1 truncate cleaned up [ 334.545592][T15877] loop2: detected capacity change from 0 to 128 [ 334.574142][T15864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.590003][T15879] openvswitch: netlink: Missing key (keys=40, expected=80) [ 334.654312][T15864] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.4313: bad symlink. [ 334.751111][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.025497][T15895] tunl0: entered promiscuous mode [ 335.169464][T15899] ip6tnl3: entered allmulticast mode [ 335.172561][ T29] audit: type=1326 audit(1772456261.013:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7cb9c799 code=0x7ffc0000 [ 335.234786][ T29] audit: type=1326 audit(1772456261.043:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7cb9c799 code=0x7ffc0000 [ 335.268437][ T29] audit: type=1326 audit(1772456261.053:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f7cb5cfce code=0x7ffc0000 [ 335.348451][ T29] audit: type=1326 audit(1772456261.053:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7cb9c42b code=0x7ffc0000 [ 335.407207][ T29] audit: type=1326 audit(1772456261.053:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7cb9c42b code=0x7ffc0000 [ 335.444981][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 335.505113][ T29] audit: type=1326 audit(1772456261.063:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7cb9c42b code=0x7ffc0000 [ 335.551762][ T29] audit: type=1326 audit(1772456261.063:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.0.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7cb9c42b code=0x7ffc0000 [ 335.625248][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 335.649398][ T9] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 335.674981][ T9] usb 1-1: config 251 has no interface number 0 [ 335.694995][ T9] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.725309][ T9] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.746898][ T9] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 335.776603][ T9] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 335.804157][ T9] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 335.845064][ T9] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120 [ 335.875035][ T9] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.916536][ T9] usb 1-1: config 251 interface 202 has no altsetting 0 [ 335.937609][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 335.963541][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 335.993673][ T9] usb 1-1: Product: syz [ 336.003800][ T9] usb 1-1: SerialNumber: syz [ 336.055581][T15902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.304304][ T9] cxacru 1-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 336.345455][ T9] cxacru 1-1:251.202: probe with driver cxacru failed with error -22 [ 336.380994][T15940] loop2: detected capacity change from 0 to 512 [ 336.385287][ T9] usb 1-1: USB disconnect, device number 22 [ 336.443344][T15940] EXT4-fs: Ignoring removed orlov option [ 336.472798][T15940] EXT4-fs: Ignoring removed i_version option [ 336.500587][T15940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.561369][T15940] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 336.579791][T15946] loop3: detected capacity change from 0 to 128 [ 336.583977][T15940] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 336.595186][T15940] EXT4-fs (loop2): orphan cleanup on readonly fs [ 336.603646][T15940] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 336.618699][T15940] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 336.627002][T15940] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4350: bg 0: block 40: padding at end of block bitmap is not set [ 336.641395][T15940] loop2: lost filesystem error report for type 5 error -117 [ 336.641720][T15940] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 336.648706][T15946] EXT4-fs: Ignoring removed nobh option [ 336.649091][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 336.669726][ C0] EXT4-fs (loop2): initial error at time 1772456262: ext4_validate_block_bitmap:441 [ 336.679192][ C0] EXT4-fs (loop2): last error at time 1772456262: ext4_validate_block_bitmap:441 [ 336.693615][T15940] loop2: lost filesystem error report for type 5 error -117 [ 336.693979][T15940] EXT4-fs (loop2): 1 truncate cleaned up [ 336.710484][T15940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.737041][T15940] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.4350: bad symlink. [ 336.766786][T15946] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.820307][T15946] ext4 filesystem being mounted at /848/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.924698][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.070124][T15957] SET target dimension over the limit! [ 337.073596][ T5825] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.287684][T15965] team0: entered promiscuous mode [ 337.293292][T15965] team_slave_0: entered promiscuous mode [ 337.319370][T15965] team_slave_1: entered promiscuous mode [ 337.658797][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 337.669386][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 337.679715][ T5826] Bluetooth: hci1: hardware error 0x00 [ 337.784329][T15961] loop0: detected capacity change from 0 to 32768 [ 337.796635][T15961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4360 (15961) [ 337.854822][T15961] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.883230][T15961] BTRFS info (device loop0): using sha256 checksum algorithm [ 337.894098][T15986] overlayfs: workdir and upperdir must be separate subtrees [ 337.935706][ T5917] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 338.060564][T15961] BTRFS info (device loop0): enabling ssd optimizations [ 338.070800][T15961] BTRFS info (device loop0): turning on async discard [ 338.078551][T15961] BTRFS info (device loop0): enabling free space tree [ 338.107485][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.148481][ T5917] usb 3-1: not running at top speed; connect to a high speed hub [ 338.168114][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.202253][ T5917] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 338.244106][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.279556][ T5917] usb 3-1: Product: syz [ 338.283772][ T5917] usb 3-1: Manufacturer: syz [ 338.331675][ T5917] usb 3-1: SerialNumber: syz [ 338.613524][ T5917] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 338.663249][ T5917] usb 3-1: unit 37 not found! [ 338.682311][ T5917] usb 3-1: unit 0 not found! [ 338.786531][T16024] loop0: detected capacity change from 0 to 2048 [ 338.859441][ T5917] usb 3-1: USB disconnect, device number 20 [ 338.956921][T16024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.030005][T16037] openvswitch: netlink: Unknown key attributes 2 [ 339.051302][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.231454][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.501240][T16031] loop1: detected capacity change from 0 to 32768 [ 339.559709][T16031] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 339.661330][T16031] JBD2: Ignoring recovery information on journal [ 339.784939][T16031] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 339.864560][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 339.864578][ T29] audit: type=1326 audit(1772456265.703:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.3.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 339.895289][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 340.014821][ T29] audit: type=1326 audit(1772456265.733:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.3.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 340.110021][ T29] audit: type=1326 audit(1772456265.753:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.3.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 340.191560][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 340.203241][ T29] audit: type=1326 audit(1772456265.753:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.3.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 340.268280][T16079] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 340.287944][ T29] audit: type=1326 audit(1772456265.753:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16070 comm="syz.3.4401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 340.804798][T16065] loop2: detected capacity change from 0 to 32768 [ 340.887350][T16065] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.928463][T16102] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 340.960312][T16102] bond2 (unregistering): Released all slaves [ 341.089759][T16065] XFS (loop2): Ending clean mount [ 341.115991][T16125] netlink: 'syz.3.4423': attribute type 1 has an invalid length. [ 341.143772][T16065] XFS (loop2): Quotacheck needed: Please wait. [ 341.251719][T16065] XFS (loop2): Quotacheck: Done. [ 341.328352][ T5821] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.689829][ T29] audit: type=1326 audit(1772456267.533:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.3.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 341.782090][ T29] audit: type=1326 audit(1772456267.533:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.3.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 341.860922][T16154] __nla_validate_parse: 43 callbacks suppressed [ 341.860941][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 341.892278][T16154] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4436'. [ 341.895140][ T29] audit: type=1326 audit(1772456267.533:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.3.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 341.976482][T16148] loop3: detected capacity change from 0 to 4096 [ 341.992130][ T29] audit: type=1326 audit(1772456267.533:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.3.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 342.079114][ T29] audit: type=1326 audit(1772456267.533:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.3.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f299c799 code=0x7ffc0000 [ 342.137621][T16148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.186321][T16148] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #12: block 80: comm syz.3.4435: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 342.304665][T16148] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.4435: directory missing '..' [ 342.426407][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.522205][T16174] loop0: detected capacity change from 0 to 4096 [ 342.527159][T16176] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 342.537857][T16174] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 342.623554][T16176] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 342.647725][T16152] loop1: detected capacity change from 0 to 32768 [ 342.656142][T16176] overlayfs: missing 'lowerdir' [ 343.135362][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 343.272113][T16178] loop2: detected capacity change from 0 to 32768 [ 343.305191][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 343.312296][ T10] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 343.330877][ T10] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 343.360079][T16178] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 343.360646][ T10] usb 4-1: config 0 has no interface number 1 [ 343.425382][T16178] JBD2: Ignoring recovery information on journal [ 343.485951][ T10] usb 4-1: config 0 has no interface number 2 [ 343.537724][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 343.559007][T16208] netlink: 'syz.4.4462': attribute type 2 has an invalid length. [ 343.573785][ T10] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 343.591055][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 343.613334][T16178] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 343.631526][ T10] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 343.663093][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.698040][ T10] usb 4-1: config 0 descriptor?? [ 343.848890][ T5821] ocfs2: Unmounting device (7,2) on (node local) [ 343.918221][ T10] usb 4-1: Could not set interface, error -71 [ 343.974450][ T10] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 343.989454][T16222] syz.1.4469 (16222): /proc/16220/oom_adj is deprecated, please use /proc/16220/oom_score_adj instead. [ 344.008853][ T10] usb 4-1: USB disconnect, device number 25 [ 344.342647][T16235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.364564][T16238] loop0: detected capacity change from 0 to 64 [ 344.743817][T16252] loop1: detected capacity change from 0 to 256 [ 344.752744][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4484'. [ 344.770343][T16255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4484'. [ 344.798372][T16252] FAT-fs (loop1): Directory bread(block 64) failed [ 344.817670][T16252] FAT-fs (loop1): Directory bread(block 65) failed [ 344.847956][T16252] FAT-fs (loop1): Directory bread(block 66) failed [ 344.854526][T16252] FAT-fs (loop1): Directory bread(block 67) failed [ 344.915203][T16252] FAT-fs (loop1): Directory bread(block 68) failed [ 344.921775][T16252] FAT-fs (loop1): Directory bread(block 69) failed [ 344.968127][T16252] FAT-fs (loop1): Directory bread(block 70) failed [ 344.986825][T16261] netlink: 'syz.0.4487': attribute type 2 has an invalid length. [ 345.008658][T16262] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4488'. [ 345.011368][T16261] netlink: 'syz.0.4487': attribute type 5 has an invalid length. [ 345.035081][T16252] FAT-fs (loop1): Directory bread(block 71) failed [ 345.045498][T16262] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 345.047274][T16252] FAT-fs (loop1): Directory bread(block 72) failed [ 345.099219][T16252] FAT-fs (loop1): Directory bread(block 73) failed [ 345.178839][T16265] xt_hashlimit: invalid interval [ 345.512172][T16278] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 345.549887][T16281] netlink: 'syz.2.4497': attribute type 1 has an invalid length. [ 345.912516][T16301] loop0: detected capacity change from 0 to 256 [ 346.315279][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 346.495246][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 346.505384][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.519400][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.555397][ T10] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.585466][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.614645][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 346.642271][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.663466][ T10] usb 4-1: Product: syz [ 346.673606][ T10] usb 4-1: Manufacturer: syz [ 346.683847][ T10] usb 4-1: SerialNumber: syz [ 346.717280][ T10] usb 4-1: config 0 descriptor?? [ 346.748670][ T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 346.925767][T16340] comedi comedi1: pcmmio: I/O port conflict (0x10003c4,32) [ 346.932985][ T10] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 346.957095][ T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 346.959324][T16338] loop2: detected capacity change from 0 to 4096 [ 346.979771][ T10] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 347.013041][T16338] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 347.050591][T16338] ntfs3(loop2): ino=3, mi_enum_attr [ 347.199101][ T796] usb 4-1: USB disconnect, device number 26 [ 347.268396][T16348] loop0: detected capacity change from 0 to 512 [ 347.333920][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4532'. [ 347.430870][T16348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.528979][T16348] ext4 filesystem being mounted at /841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.598424][T16348] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 18: comm syz.0.4531: lblock 23 mapped to illegal pblock 18 (length 1) [ 347.636492][T16348] EXT4-fs (loop0): Remounting filesystem read-only [ 347.737002][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.953466][T16371] loop4: detected capacity change from 0 to 256 [ 348.233331][T16357] loop1: detected capacity change from 0 to 32768 [ 348.295236][T16357] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.376031][T16357] XFS (loop1): Ending clean mount [ 348.423958][T16357] XFS (loop1): Quotacheck needed: Please wait. [ 348.456973][T16391] loop3: detected capacity change from 0 to 512 [ 348.465197][T16369] loop2: detected capacity change from 0 to 32768 [ 348.465910][T16391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.502587][T16369] (syz.2.4540,16369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.543857][T16369] (syz.2.4540,16369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 348.585392][T16357] XFS (loop1): Quotacheck: Done. [ 348.593903][T16391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.620909][T16391] ext4 filesystem being mounted at /891/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.669298][T16369] JBD2: Ignoring recovery information on journal [ 348.695759][ T5824] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.707889][T16391] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 348.735382][T16391] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 348.761699][T16391] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4547: Failed to acquire dquot type 1 [ 348.862300][T16369] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 348.926639][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.945207][ T12] ocfs2: Finishing quota recovery on device (7,2) for slot 0 [ 349.322449][ T5821] ocfs2: Unmounting device (7,2) on (node local) [ 349.482604][T16418] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 349.668945][T16428] program syz.0.4563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.835091][T16437] loop1: detected capacity change from 0 to 64 [ 349.995772][ T5917] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 350.078297][T16449] loop0: detected capacity change from 0 to 256 [ 350.100523][T16449] FAT-fs (loop0): Directory bread(block 64) failed [ 350.125469][T16449] FAT-fs (loop0): Directory bread(block 65) failed [ 350.155136][T16449] FAT-fs (loop0): Directory bread(block 66) failed [ 350.155848][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 350.176809][ T796] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 350.184201][T16449] FAT-fs (loop0): Directory bread(block 67) failed [ 350.195924][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.210940][ T5917] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 350.231845][T16449] FAT-fs (loop0): Directory bread(block 68) failed [ 350.239910][ T5917] usb 4-1: config 13 has no interface number 0 [ 350.246691][ T5917] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 350.257531][T16449] FAT-fs (loop0): Directory bread(block 69) failed [ 350.264640][T16449] FAT-fs (loop0): Directory bread(block 70) failed [ 350.272141][ T5917] usb 4-1: config 13 interface 50 has no altsetting 0 [ 350.279176][T16449] FAT-fs (loop0): Directory bread(block 71) failed [ 350.304152][ T5917] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 350.323595][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.331856][T16449] FAT-fs (loop0): Directory bread(block 72) failed [ 350.340954][ T5917] usb 4-1: Product: syz [ 350.349360][ T5917] usb 4-1: Manufacturer: syz [ 350.354077][T16449] FAT-fs (loop0): Directory bread(block 73) failed [ 350.354166][T16456] netlink: 'syz.1.4578': attribute type 1 has an invalid length. [ 350.364530][ T5917] usb 4-1: SerialNumber: syz [ 350.384811][ T796] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 350.393976][T16431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 350.435481][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.458454][ T796] usb 3-1: Product: syz [ 350.462671][ T796] usb 3-1: Manufacturer: syz [ 350.480417][ T796] usb 3-1: SerialNumber: syz [ 350.507959][ T796] usb 3-1: config 0 descriptor?? [ 350.534235][ T796] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 350.630554][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.646341][ T5917] usb 4-1: MIDIStreaming interface descriptor not found [ 350.723233][T16469] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4584'. [ 350.740794][ T796] gspca_stk1135: reg_w 0x2 err -71 [ 350.762016][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 350.773854][T16469] netlink: 'syz.1.4584': attribute type 2 has an invalid length. [ 350.809620][ T796] gspca_stk1135: Sensor write failed [ 350.826397][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 350.844606][ T796] gspca_stk1135: Sensor write failed [ 350.853238][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 350.857720][ T5917] usb 4-1: USB disconnect, device number 27 [ 350.863336][ T796] gspca_stk1135: Sensor read failed [ 350.891994][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 350.908794][ T796] gspca_stk1135: Sensor read failed [ 350.914041][ T796] gspca_stk1135: Detected sensor type unknown (0x0) [ 350.955213][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 350.961593][ T796] gspca_stk1135: Sensor read failed [ 350.987509][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 351.009135][ T796] gspca_stk1135: Sensor read failed [ 351.034253][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 351.054951][ T796] gspca_stk1135: Sensor write failed [ 351.060338][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 351.100501][ T796] gspca_stk1135: Sensor write failed [ 351.115046][ T796] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 351.157132][ T796] usb 3-1: USB disconnect, device number 21 [ 351.238465][T16483] loop4: detected capacity change from 0 to 1024 [ 351.266221][T16483] EXT4-fs: Ignoring removed bh option [ 351.277893][T16483] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 351.302096][T16483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.452118][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.816780][T16477] loop1: detected capacity change from 0 to 32768 [ 351.859463][T16513] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 352.163163][T16526] loop2: detected capacity change from 0 to 256 [ 352.217602][T16529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.402895][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4613'. [ 352.549735][T16539] loop4: detected capacity change from 0 to 1024 [ 352.590111][T16539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.185842][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.336567][T16582] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.4637'. [ 353.364949][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 353.386786][ T10] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 353.415016][ T10] usb 2-1: config 0 has no interface number 0 [ 353.421302][ T10] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.465648][ T10] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 353.479962][ T10] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 353.524942][ T10] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 353.555215][ T10] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.620980][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 353.632489][T16592] loop0: detected capacity change from 0 to 1024 [ 353.634981][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.653540][T16594] loop2: detected capacity change from 0 to 1024 [ 353.664189][ T10] usb 2-1: Product: syz [ 353.671208][ T10] usb 2-1: Manufacturer: syz [ 353.697798][ T10] usb 2-1: SerialNumber: syz [ 353.708717][T16592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.754657][ T10] usb 2-1: config 0 descriptor?? [ 353.789779][T16592] /dev/loop0: Can't open blockdev [ 353.847652][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4646'. [ 353.878465][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4646'. [ 353.902990][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.035085][ T10] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 354.261671][T16590] loop4: detected capacity change from 0 to 40427 [ 354.265339][T16610] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 354.277635][ T24] usb 2-1: USB disconnect, device number 24 [ 354.296787][T16590] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 354.315031][T16590] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 354.342589][T16590] F2FS-fs (loop4): invalid crc value [ 354.549482][T16590] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 354.580317][T16590] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 354.601294][T16590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 354.782628][T16602] loop2: detected capacity change from 0 to 40427 [ 354.825932][T16602] F2FS-fs: heap/no_heap options were deprecated [ 354.841753][T16602] F2FS-fs (loop2): build fault injection rate: 23 [ 354.862633][T16602] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 354.916914][T16602] F2FS-fs (loop2): invalid crc value [ 354.949678][T16602] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 355.040118][T16630] loop3: detected capacity change from 0 to 4096 [ 355.084496][T16630] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 355.229783][T16602] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.295365][T16602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 355.307066][T16643] loop0: detected capacity change from 0 to 1024 [ 355.411505][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4659'. [ 355.441599][T16602] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90 [ 355.482531][T16602] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 355.626532][T16654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4668'. [ 355.695239][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 355.888157][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 355.901385][ T10] usb 4-1: config 0 has an invalid interface number: 88 but max is 3 [ 355.930521][ T10] usb 4-1: config 0 has an invalid interface number: 250 but max is 3 [ 355.935210][T16666] netlink: 'syz.0.4676': attribute type 16 has an invalid length. [ 355.960199][ T10] usb 4-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 355.971658][T16666] netlink: 'syz.0.4676': attribute type 17 has an invalid length. [ 355.990472][ T10] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 356.004949][ T10] usb 4-1: config 0 has no interface number 0 [ 356.011248][ T10] usb 4-1: config 0 has no interface number 1 [ 356.019506][ T10] usb 4-1: config 0 interface 88 has no altsetting 0 [ 356.036233][ T10] usb 4-1: config 0 interface 250 has no altsetting 0 [ 356.045448][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 356.076824][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.085273][T16666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.095410][T16671] loop1: detected capacity change from 0 to 2048 [ 356.118890][ T10] usb 4-1: config 0 descriptor?? [ 356.169716][T16673] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.282520][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 356.344410][ T10] usb 4-1: string descriptor 0 read error: -71 [ 356.440686][ T10] usb 4-1: USB disconnect, device number 28 [ 356.669979][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4686'. [ 356.684080][T16691] loop0: detected capacity change from 0 to 1764 [ 357.045960][T16713] loop2: detected capacity change from 0 to 16 [ 357.069571][T16713] erofs (device loop2): mounted with root inode @ nid 36. [ 357.223987][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4700'. [ 357.570009][T16738] loop0: detected capacity change from 0 to 64 [ 357.591569][T16738] minix: block size(59136) > page size(4096) not supported by filesystem [ 357.646577][T16738] MINIX-fs: deleted inode referenced: 3 [ 357.673379][T16738] MINIX-fs: deleted inode referenced: 3 [ 357.808863][T16744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4710'. [ 357.848912][T16746] usb usb9: usbfs: process 16746 (syz.2.4713) did not claim interface 4 before use [ 358.098876][T16765] netlink: 'syz.2.4720': attribute type 5 has an invalid length. [ 358.103116][T16719] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.173375][T16756] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 358.262077][T16719] XFS (loop4): Ending clean mount [ 358.288559][T16719] XFS (loop4): Quotacheck needed: Please wait. [ 358.306995][T16756] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 358.481926][ T12] hfsplus: b-tree write err: -5, ino 25 [ 358.484097][T16719] XFS (loop4): Quotacheck: Done. [ 358.487930][ T12] hfsplus: b-tree write err: -5, ino 4 [ 358.511701][ T12] hfsplus: b-tree write err: -5, ino 2 [ 358.677497][T16787] set_capacity_and_notify: 3 callbacks suppressed [ 358.677515][T16787] loop0: detected capacity change from 0 to 64 [ 358.773250][ T5819] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.795757][T16787] [ 358.798125][T16787] ====================================================== [ 358.805145][T16787] WARNING: possible circular locking dependency detected [ 358.812186][T16787] syzkaller #0 Not tainted [ 358.816606][T16787] ------------------------------------------------------ [ 358.823628][T16787] syz.0.4730/16787 is trying to acquire lock: [ 358.829703][T16787] ffff88803202e0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 358.839060][T16787] [ 358.839060][T16787] but task is already holding lock: [ 358.846430][T16787] ffff888059070778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 358.857260][T16787] [ 358.857260][T16787] which lock already depends on the new lock. [ 358.857260][T16787] [ 358.867670][T16787] [ 358.867670][T16787] the existing dependency chain (in reverse order) is: [ 358.876703][T16787] [ 358.876703][T16787] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 358.885912][T16787] __mutex_lock+0x19f/0x1300 [ 358.891108][T16787] hfs_extend_file+0xf2/0x15e0 [ 358.896390][T16787] hfs_bmap_reserve+0x107/0x430 [ 358.901757][T16787] __hfs_ext_write_extent+0x1fa/0x470 [ 358.907650][T16787] hfs_ext_write_extent+0x17e/0x210 [ 358.913368][T16787] hfs_write_inode+0x117/0x960 [ 358.918657][T16787] __writeback_single_inode+0x75a/0x11a0 [ 358.924824][T16787] writeback_sb_inodes+0x992/0x1a20 [ 358.930548][T16787] wb_writeback+0x456/0xb70 [ 358.935586][T16787] wb_workfn+0x414/0xf50 [ 358.940344][T16787] process_one_work+0x949/0x1650 [ 358.945794][T16787] worker_thread+0xb46/0x1140 [ 358.951000][T16787] kthread+0x388/0x470 [ 358.955595][T16787] ret_from_fork+0x51e/0xb90 [ 358.960702][T16787] ret_from_fork_asm+0x1a/0x30 [ 358.965985][T16787] [ 358.965985][T16787] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 358.973897][T16787] __lock_acquire+0x15a5/0x2cf0 [ 358.979270][T16787] lock_acquire+0xf0/0x2e0 [ 358.984212][T16787] __mutex_lock+0x19f/0x1300 [ 358.989333][T16787] hfs_find_init+0x18e/0x300 [ 358.994445][T16787] hfs_extend_file+0x35c/0x15e0 [ 358.999819][T16787] hfs_bmap_reserve+0x107/0x430 [ 359.005186][T16787] hfs_cat_create+0x20f/0x800 [ 359.010380][T16787] hfs_mkdir+0x79/0xe0 [ 359.014966][T16787] vfs_mkdir+0x413/0x630 [ 359.019724][T16787] filename_mkdirat+0x285/0x510 [ 359.025092][T16787] __se_sys_mkdirat+0x35/0x150 [ 359.030375][T16787] do_syscall_64+0x14d/0xf80 [ 359.035488][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.041897][T16787] [ 359.041897][T16787] other info that might help us debug this: [ 359.041897][T16787] [ 359.052111][T16787] Possible unsafe locking scenario: [ 359.052111][T16787] [ 359.059552][T16787] CPU0 CPU1 [ 359.064909][T16787] ---- ---- [ 359.070261][T16787] lock(&HFS_I(tree->inode)->extents_lock); [ 359.076239][T16787] lock(&tree->tree_lock/1); [ 359.083432][T16787] lock(&HFS_I(tree->inode)->extents_lock); [ 359.091924][T16787] lock(&tree->tree_lock/1); [ 359.096601][T16787] [ 359.096601][T16787] *** DEADLOCK *** [ 359.096601][T16787] [ 359.104734][T16787] 4 locks held by syz.0.4730/16787: [ 359.109917][T16787] #0: ffff88802c3a4420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 359.119146][T16787] #1: ffff888059071620 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 359.129769][T16787] #2: ffff88802955a0b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 359.139347][T16787] #3: ffff888059070778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 359.150586][T16787] [ 359.150586][T16787] stack backtrace: [ 359.156466][T16787] CPU: 1 UID: 0 PID: 16787 Comm: syz.0.4730 Not tainted syzkaller #0 PREEMPT(full) [ 359.156486][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.156509][T16787] Call Trace: [ 359.156519][T16787] [ 359.156526][T16787] dump_stack_lvl+0xe8/0x150 [ 359.156549][T16787] print_circular_bug+0x2e1/0x300 [ 359.156575][T16787] check_noncircular+0x12e/0x150 [ 359.156599][T16787] __lock_acquire+0x15a5/0x2cf0 [ 359.156619][T16787] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 359.156645][T16787] ? kasan_save_track+0x4f/0x80 [ 359.156660][T16787] ? kasan_save_track+0x3e/0x80 [ 359.156674][T16787] ? __kasan_kmalloc+0x93/0xb0 [ 359.156689][T16787] ? __kmalloc_noprof+0x35c/0x760 [ 359.156704][T16787] ? hfs_find_init+0xaa/0x300 [ 359.156719][T16787] ? hfs_extend_file+0x35c/0x15e0 [ 359.156739][T16787] ? hfs_bmap_reserve+0x107/0x430 [ 359.156759][T16787] lock_acquire+0xf0/0x2e0 [ 359.156777][T16787] ? hfs_find_init+0x18e/0x300 [ 359.156795][T16787] __mutex_lock+0x19f/0x1300 [ 359.156816][T16787] ? hfs_find_init+0x18e/0x300 [ 359.156835][T16787] ? hfs_find_init+0x18e/0x300 [ 359.156851][T16787] ? __pfx___mutex_lock+0x10/0x10 [ 359.156867][T16787] ? rcu_is_watching+0x15/0xb0 [ 359.156890][T16787] ? __kmalloc_noprof+0x37d/0x760 [ 359.156905][T16787] ? kasan_save_track+0x4f/0x80 [ 359.156918][T16787] ? hfs_find_init+0xaa/0x300 [ 359.156933][T16787] ? __kmalloc_noprof+0x1b8/0x760 [ 359.156949][T16787] hfs_find_init+0x18e/0x300 [ 359.156966][T16787] hfs_extend_file+0x35c/0x15e0 [ 359.156989][T16787] ? __pfx_hfs_extend_file+0x10/0x10 [ 359.157009][T16787] ? __mutex_lock+0x319/0x1300 [ 359.157030][T16787] ? __pfx___mutex_lock+0x10/0x10 [ 359.157045][T16787] ? rcu_is_watching+0x15/0xb0 [ 359.157067][T16787] hfs_bmap_reserve+0x107/0x430 [ 359.157090][T16787] hfs_cat_create+0x20f/0x800 [ 359.157111][T16787] ? __pfx_hfs_cat_create+0x10/0x10 [ 359.157136][T16787] ? hfs_new_inode+0x92d/0xc70 [ 359.157159][T16787] hfs_mkdir+0x79/0xe0 [ 359.157179][T16787] vfs_mkdir+0x413/0x630 [ 359.157199][T16787] filename_mkdirat+0x285/0x510 [ 359.157218][T16787] ? __pfx_filename_mkdirat+0x10/0x10 [ 359.157237][T16787] ? do_getname+0x151/0x250 [ 359.157256][T16787] __se_sys_mkdirat+0x35/0x150 [ 359.157274][T16787] do_syscall_64+0x14d/0xf80 [ 359.157290][T16787] ? trace_irq_disable+0x3b/0x150 [ 359.157303][T16787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.157318][T16787] ? clear_bhb_loop+0x40/0x90 [ 359.157334][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.157349][T16787] RIP: 0033:0x7f4f7cb9b607 [ 359.157364][T16787] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.157378][T16787] RSP: 002b:00007f4f7daede58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 359.157396][T16787] RAX: ffffffffffffffda RBX: 00007f4f7daedee0 RCX: 00007f4f7cb9b607 [ 359.157407][T16787] RDX: 00000000000001ff RSI: 0000200000000240 RDI: 00000000ffffff9c [ 359.157417][T16787] RBP: 0000200000000200 R08: 00002000000000c0 R09: 0000000000000000 [ 359.157428][T16787] R10: 0000200000000200 R11: 0000000000000246 R12: 0000200000000240 [ 359.157438][T16787] R13: 00007f4f7daedea0 R14: 0000000000000000 R15: 0000000000000000 [ 359.157453][T16787]