last executing test programs: 3.610037116s ago: executing program 0 (id=5326): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8000000000080003004700000008003e00b0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 3.33589201s ago: executing program 0 (id=5332): r0 = syz_open_dev$sg(&(0x7f0000002780), 0x0, 0x2002) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 3.14836926s ago: executing program 0 (id=5336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0xffffff82}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) 3.055879762s ago: executing program 1 (id=5338): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000002240)=[{&(0x7f0000001080)="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", 0xf2f}], 0x1) 2.760545868s ago: executing program 1 (id=5341): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 2.578938599s ago: executing program 0 (id=5344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.432915876s ago: executing program 1 (id=5346): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f000001f880)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 2.336568028s ago: executing program 0 (id=5348): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18009, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9, 0x5505, &(0x7f0000000440)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x120065, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 2.084121746s ago: executing program 1 (id=5351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) 1.793226789s ago: executing program 4 (id=5356): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000002c0)) 1.458839111s ago: executing program 3 (id=5359): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)) 1.412436018s ago: executing program 2 (id=5360): r0 = syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000080)='./file1\x00', 0x18013, &(0x7f0000000940)={[{@nodots}, {@dots}, {@fat=@debug}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x4}}, {@dots}, {@nodots}, {@dots}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@errors_continue}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x4a3}}, {@dots}]}, 0x0, 0x213, &(0x7f0000000a40)="$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") getdents64(r0, &(0x7f00000002c0)=""/189, 0xbd) 1.282244873s ago: executing program 3 (id=5361): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$eJzslb+r01AUx7/3Ji9pfW5uLg4+8DmYJqm/lgfPxclB8Edxs9i0VFMrbQZbEPEvcHdzcPFfEKGu/hFSBVEQXdT5SnJvkptqSltbing+0JNv7j09OfeccAKCIP5bPrz/ORU/Dj5VABzFHmy1/tnIfbjm/67y7dGbK5cbT80Xb+2pUy1Gs5d+vglgcslApO6FEELf31PX6+CZvgGO00o3wOAofRscN5UOwHBL6bua7u8oEQbOnX7YanfDwI2NFxs/NvXZ/L4+YWhp+TFtfzga32uGYTDYmLBKKjf5kuVXAQ60/PR+OZDZulr9PHB4StfBcE3pi7DhOE5eEu38x808vjH3/BaWP+SuvvIx6U660p5xNrBkHXfm+MS1Xa0xAPtz719t9m1YRVgorOBlvmXIrbSjW0917QJm8aR/EVDYBtaf4QV7DUPk9aHsX5bqY3lfdO7vzu/y4WLvz6KVz+aneM5wSptPcpQ8Sz4Wtaj3oDYcjc90e81O0Anu+379vHvWdc/5tWQQSVsyA+P41WQ+HZGhY6plvhaz8LAZRQNP2uzelzY/QP4fnsw/jv2TSL4cDMeuzsb9DiB9KFM/nlxjtW+UJk8QBLFFToBlg9NMhfqaqA1LCOH/NvQIgiAIgiAIgiAIgvhn+BUAAP//aA9ZjQ==") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1e1) 1.113325351s ago: executing program 2 (id=5362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0) 995.788435ms ago: executing program 4 (id=5363): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000180001f72bbd7000fbdbdf250aa48d00fd04c800002000000c00090008000808", @ANYRES32=0x0, @ANYBLOB="140005"], 0x44}, 0x1, 0x2}, 0x10) 800.113313ms ago: executing program 3 (id=5364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) tee(r0, r0, 0x7ff, 0x9) 724.753137ms ago: executing program 2 (id=5365): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={0x0, 0x0, 0x0}) 671.993511ms ago: executing program 4 (id=5366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) 567.727071ms ago: executing program 3 (id=5367): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0x2, @vbi={0x6, 0x0, 0x7, 0x56595559, [0x9, 0x2], [0x4, 0x5], 0x1}}) 549.974907ms ago: executing program 4 (id=5368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x101, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0) 510.083367ms ago: executing program 2 (id=5369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statfs(0x0, 0x0) 408.973844ms ago: executing program 0 (id=5370): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r0, &(0x7f0000000380)=""/200, 0x1d) 407.11263ms ago: executing program 3 (id=5371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000004003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) 370.683329ms ago: executing program 4 (id=5372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)={0x20, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004) 332.62839ms ago: executing program 1 (id=5373): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$SIOCAX25ADDFWD(r0, 0x8917, &(0x7f0000000040)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 331.889844ms ago: executing program 2 (id=5374): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdcedd9467f5cd2d6c4e8b3043614238ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESDEC=0x0], 0x11, 0x31b, &(0x7f0000000240)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 107.328507ms ago: executing program 4 (id=5375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7540cb3b64c7a56c}}]}]}, 0x8c}}, 0x0) 29.317858ms ago: executing program 3 (id=5376): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000008400000001000000020000000000004eb535aadecaff0e51d62b7a0800000002000000ffff"], 0x30}, 0x0) 28.55294ms ago: executing program 1 (id=5377): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x541b, 0x0) 0s ago: executing program 2 (id=5378): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000000)={0x1, 0x2464befb}) kernel console output (not intermixed with test programs): netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 494.793383][T14665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 494.828791][T13963] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 494.920081][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.930820][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.986842][T13963] usb 5-1: Using ep0 maxpacket: 32 [ 494.998542][T13963] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 495.010779][T13963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.059143][T13963] usb 5-1: config 0 has no interface number 0 [ 495.083133][T13963] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 495.127876][T13963] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 495.163854][T13963] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 495.203650][T14683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3732'. [ 495.214732][T13963] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 495.255003][T13963] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 495.304301][T13963] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 495.349537][T13963] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 495.392245][T13963] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 495.442324][T13963] usb 5-1: config 0 interface 239 has no altsetting 0 [ 495.456482][T13963] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 495.471180][T13963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.513994][T13963] usb 5-1: Product: syz [ 495.528966][T13963] usb 5-1: Manufacturer: syz [ 495.553662][T13963] usb 5-1: SerialNumber: syz [ 495.587505][T13963] usb 5-1: config 0 descriptor?? [ 495.593589][T14659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.601160][T14659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.613930][T14697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3739'. [ 495.641069][T14697] netlink: 'syz.3.3739': attribute type 2 has an invalid length. [ 495.653961][T14690] loop2: detected capacity change from 0 to 4096 [ 495.680342][ T5847] Bluetooth: hci5: urb ffff8880364ee800 submission failed (90) [ 495.847868][T14690] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 495.885690][ T9] usb 5-1: USB disconnect, device number 101 [ 496.108751][T14707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 496.166848][T14711] comedi comedi1: comedi_parport: I/O port conflict (0xffffffff80000003,3) [ 496.455487][T14701] loop0: detected capacity change from 0 to 32768 [ 496.548599][T14701] add_index: next_index = 0. Resetting! [ 496.579776][T14701] find_entry called with index >= next_index [ 496.587598][T14701] find_entry called with index >= next_index [ 497.259177][T14754] loop4: detected capacity change from 0 to 256 [ 497.605722][ T5995] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 497.777525][ T5995] usb 3-1: Using ep0 maxpacket: 16 [ 497.810118][ T5995] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 497.829975][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.848637][ T5995] usb 3-1: Product: syz [ 497.852870][ T5995] usb 3-1: Manufacturer: syz [ 497.867986][ T5995] usb 3-1: SerialNumber: syz [ 497.907903][ T5995] r8152-cfgselector 3-1: Unknown version 0x0000 [ 497.926271][ T5995] r8152-cfgselector 3-1: config 0 descriptor?? [ 497.935248][T14780] loop3: detected capacity change from 0 to 256 [ 498.062600][T14780] FAT-fs (loop3): Directory bread(block 64) failed [ 498.083432][T14780] FAT-fs (loop3): Directory bread(block 65) failed [ 498.109625][T14780] FAT-fs (loop3): Directory bread(block 66) failed [ 498.131965][T14780] FAT-fs (loop3): Directory bread(block 67) failed [ 498.163817][T14780] FAT-fs (loop3): Directory bread(block 68) failed [ 498.183194][T14780] FAT-fs (loop3): Directory bread(block 69) failed [ 498.221702][T14780] FAT-fs (loop3): Directory bread(block 70) failed [ 498.248926][T14792] loop4: detected capacity change from 0 to 64 [ 498.250952][T14780] FAT-fs (loop3): Directory bread(block 71) failed [ 498.286411][T14780] FAT-fs (loop3): Directory bread(block 72) failed [ 498.307410][T14780] FAT-fs (loop3): Directory bread(block 73) failed [ 498.378698][ T5900] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 499.574711][T14840] IPv6: sit1: Disabled Multicast RS [ 499.614241][T14843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3810'. [ 499.644734][T14843] unsupported nlmsg_type 40 [ 500.213479][T14838] loop1: detected capacity change from 0 to 32768 [ 500.275901][T14838] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3808 (14838) [ 500.351536][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3821'. [ 500.366360][T14838] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 500.382202][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3821'. [ 500.400994][T14838] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 500.420512][T14863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3821'. [ 500.552458][T14838] BTRFS info (device loop1): enabling ssd optimizations [ 500.635459][T14838] BTRFS info (device loop1): turning on flush-on-commit [ 500.663432][T14838] BTRFS info (device loop1): turning on async discard [ 500.719297][T14838] BTRFS info (device loop1): enabling free space tree [ 500.729621][T14838] BTRFS info (device loop1): force zlib compression, level 3 [ 500.773955][T14838] BTRFS info (device loop1): max_inline set to 4096 [ 500.792395][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3824'. [ 500.984234][ T5841] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 501.531621][T14912] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3838'. [ 501.741638][T14921] netlink: 'syz.3.3843': attribute type 21 has an invalid length. [ 501.843683][T14925] loop4: detected capacity change from 0 to 1024 [ 501.886267][T14925] syz.4.3844: attempt to access beyond end of device [ 501.886267][T14925] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 501.928646][T14925] Buffer I/O error on dev loop4, logical block 458752, async page read [ 501.970972][T14925] syz.4.3844: attempt to access beyond end of device [ 501.970972][T14925] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024 [ 502.048841][T14925] Buffer I/O error on dev loop4, logical block 458752, async page read [ 502.695469][T14957] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 502.705228][T14919] loop1: detected capacity change from 0 to 32768 [ 502.728883][T14919] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3829 (14919) [ 502.786766][T14919] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 502.840453][T14919] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 502.882121][T14919] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 503.093942][T14919] BTRFS info (device loop1): rebuilding free space tree [ 503.113899][T14919] BTRFS info (device loop1): disabling free space tree [ 503.121136][T14919] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 503.131202][T14919] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 503.171817][T14919] BTRFS info (device loop1): allowing degraded mounts [ 503.178673][T14919] BTRFS info (device loop1): enabling ssd optimizations [ 503.196462][T14939] loop0: detected capacity change from 0 to 32768 [ 503.204677][T14919] BTRFS info (device loop1): turning on async discard [ 503.211597][T14919] BTRFS info (device loop1): enabling disk space caching [ 503.219021][T14919] BTRFS info (device loop1): force clearing of disk cache [ 503.226405][T14919] BTRFS info (device loop1): use zlib compression, level 3 [ 503.312774][T14939] (syz.0.3851,14939,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 503.422479][T14939] (syz.0.3851,14939,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 503.447607][T14919] BTRFS info (device loop1): balance: start -f -susage=0..2,drange=11..18446744073709551614,limit=67076096..0 [ 503.557811][T14919] BTRFS info (device loop1): balance: ended with status: 0 [ 503.749139][ T5841] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 504.040056][T14997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3872'. [ 504.389691][T15011] loop4: detected capacity change from 0 to 512 [ 504.415949][T15011] EXT4-fs: Ignoring removed bh option [ 504.464035][T15011] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 504.482995][T14986] loop3: detected capacity change from 0 to 32768 [ 504.546515][T15011] EXT4-fs (loop4): 1 truncate cleaned up [ 504.581104][T15011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.641947][T14986] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 504.851108][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.876068][T14986] XFS (loop3): Ending clean mount [ 504.931116][T14986] XFS (loop3): Quotacheck needed: Please wait. [ 505.053524][T14986] XFS (loop3): Quotacheck: Done. [ 505.130035][T15037] openvswitch: netlink: Missing valid actions attribute. [ 505.160091][T15037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.225991][ T5849] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 505.358858][T15045] usb usb8: usbfs: process 15045 (syz.2.3891) did not claim interface 0 before use [ 505.592610][T15055] netlink: zone id is out of range [ 505.602971][T15055] netlink: zone id is out of range [ 505.627317][T15055] netlink: zone id is out of range [ 505.645776][T15055] netlink: zone id is out of range [ 505.686203][T15055] netlink: zone id is out of range [ 505.707323][T15055] netlink: zone id is out of range [ 505.737026][T15055] netlink: zone id is out of range [ 505.771077][T15055] netlink: zone id is out of range [ 506.047207][T15064] loop1: detected capacity change from 0 to 4096 [ 506.191572][T15078] netlink: 'syz.4.3906': attribute type 1 has an invalid length. [ 506.193282][T15064] ntfs3(loop1): Failed to load $Extend (-22). [ 506.232132][T15078] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3906'. [ 506.243547][T15064] ntfs3(loop1): Failed to initialize $Extend. [ 506.334758][T15064] ntfs3(loop1): ino=5, "/" indx_read_ra [ 507.165603][T15117] loop3: detected capacity change from 0 to 2048 [ 507.258869][T15122] loop1: detected capacity change from 0 to 256 [ 507.267929][T15117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.327811][T15126] loop0: detected capacity change from 0 to 24 [ 507.348505][T15126] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 507.404327][T15126] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 507.424687][T15122] FAT-fs (loop1): Directory bread(block 64) failed [ 507.451791][T15122] FAT-fs (loop1): Directory bread(block 65) failed [ 507.474030][T15126] process 'syz.0.3930' launched './file2' with NULL argv: empty string added [ 507.485395][T15122] FAT-fs (loop1): Directory bread(block 66) failed [ 507.515831][T15122] FAT-fs (loop1): Directory bread(block 67) failed [ 507.522598][T15122] FAT-fs (loop1): Directory bread(block 68) failed [ 507.588706][T15122] FAT-fs (loop1): Directory bread(block 69) failed [ 507.595376][T15122] FAT-fs (loop1): Directory bread(block 70) failed [ 507.627832][T15122] FAT-fs (loop1): Directory bread(block 71) failed [ 507.634496][T15122] FAT-fs (loop1): Directory bread(block 72) failed [ 507.642382][T15122] FAT-fs (loop1): Directory bread(block 73) failed [ 507.821422][T15139] netlink: 'syz.2.3937': attribute type 1 has an invalid length. [ 507.954498][ T29] audit: type=1400 audit(515.931:25): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=15142 comm="syz.0.3939" [ 508.390672][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3950'. [ 508.411527][T15165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3950'. [ 508.439712][T15164] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 508.850880][ T2351] pvrusb2: request_firmware fatal error with code=-110 [ 508.889358][ T2351] pvrusb2: Failure uploading firmware1 [ 508.904877][ T2351] pvrusb2: Device initialization was not successful. [ 508.911610][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 508.949817][T13963] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 508.973558][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'. [ 508.977485][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 508.995104][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'. [ 509.022051][ T2351] pvrusb2: Failed to submit write-control URB status=-19 [ 509.031516][ T5851] pvrusb2: Device being rendered inoperable [ 509.055132][ T2351] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 509.083907][ T2351] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 509.155583][T13963] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.201042][T13963] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.233468][T13963] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 509.245331][T13963] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 509.276256][T13963] usb 3-1: Product: syz [ 509.280500][T13963] usb 3-1: Manufacturer: syz [ 509.335577][T13963] hub 3-1:4.0: USB hub found [ 509.417762][T15197] loop0: detected capacity change from 0 to 1024 [ 509.525181][T15197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.543000][T13963] hub 3-1:4.0: 2 ports detected [ 509.556480][T13963] hub 3-1:4.0: insufficient power available to use all downstream ports [ 509.628567][T15197] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.3963: missing EA_INODE flag [ 509.651261][T15197] EXT4-fs (loop0): Remounting filesystem read-only [ 509.731417][T13963] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 509.779117][T13963] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 509.793369][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.861202][T13963] usb 3-1: USB disconnect, device number 105 [ 510.066085][T15186] loop1: detected capacity change from 0 to 32768 [ 510.097053][T15186] (syz.1.3959,15186,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 510.143637][T15186] (syz.1.3959,15186,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 510.150628][T15212] loop0: detected capacity change from 0 to 4096 [ 510.196142][T15212] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 510.234232][T15186] JBD2: Ignoring recovery information on journal [ 510.391159][T15186] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 510.833814][ T5841] ocfs2: Unmounting device (7,1) on (node local) [ 511.414633][T15255] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3990'. [ 511.547220][T15264] net_ratelimit: 6 callbacks suppressed [ 511.547243][T15264] openvswitch: netlink: Message has 592 unknown bytes. [ 511.593654][T15264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.652651][T15258] xt_CT: No such helper "snmp" [ 511.895692][T15278] netlink: 'syz.0.4000': attribute type 3 has an invalid length. [ 511.911820][T15278] netlink: 'syz.0.4000': attribute type 3 has an invalid length. [ 511.936676][T15278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4000'. [ 512.213187][T15286] loop2: detected capacity change from 0 to 4096 [ 512.240978][T15286] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 512.295364][T15286] ntfs3(loop2): ino=19, mi_enum_attr [ 512.300730][T15286] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 512.313458][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4009'. [ 512.326003][T15296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4009'. [ 512.367068][T15286] ntfs3(loop2): failed to convert "c46c" to cp950 [ 512.402320][T15286] ntfs3(loop2): ino=20, mi_enum_attr [ 512.624676][T15306] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 512.647147][T15306] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 513.288736][T15334] loop4: detected capacity change from 0 to 512 [ 513.422056][T15334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.492166][T15334] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 513.502627][T15334] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 513.512706][T15334] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.4028: Failed to acquire dquot type 0 [ 513.603587][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.705037][T15349] loop0: detected capacity change from 0 to 4096 [ 513.803218][T15349] ntfs3(loop0): ino=19, mi_enum_attr [ 513.809139][T15349] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 514.256087][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 514.545374][T15389] loop1: detected capacity change from 0 to 256 [ 514.583471][T15392] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 514.599691][T15393] loop3: detected capacity change from 0 to 64 [ 514.608736][T15389] exfat: Deprecated parameter 'utf8' [ 514.614174][T15389] exfat: Deprecated parameter 'namecase' [ 514.634557][T15392] overlayfs: missing 'lowerdir' [ 514.676768][T15389] exfat: Deprecated parameter 'namecase' [ 514.691325][ T29] audit: type=1800 audit(523.163:26): pid=15393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4056" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 514.709400][T15389] exfat: Deprecated parameter 'utf8' [ 514.739170][T15395] loop2: detected capacity change from 0 to 2048 [ 514.755706][T15395] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 514.785823][T15389] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 514.905444][ T29] audit: type=1800 audit(523.388:27): pid=15389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4054" name="file2" dev="loop1" ino=1048615 res=0 errno=0 [ 515.017450][ T5900] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 515.203428][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 515.223490][ T5900] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 515.252256][ T5900] usb 3-1: config 179 has no interface number 0 [ 515.268495][ T5900] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 515.305476][ T5900] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 515.329892][ T5900] usb 3-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 515.329933][ T5900] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x82 has an invalid bInterval 22, changing to 7 [ 515.329963][ T5900] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x82 has invalid maxpacket 9428, setting to 1024 [ 515.329992][ T5900] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 515.330043][ T5900] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 515.336494][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.347918][T15395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 515.569649][ T5981] usb 3-1: USB disconnect, device number 106 [ 515.617877][T15423] loop3: detected capacity change from 0 to 64 [ 515.862748][T15433] SET target dimension over the limit! [ 515.928233][T15436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4077'. [ 516.026342][T15438] sctp: [Deprecated]: syz.0.4078 (pid 15438) Use of int in max_burst socket option. [ 516.026342][T15438] Use struct sctp_assoc_value instead [ 516.401976][T15458] loop1: detected capacity change from 0 to 512 [ 516.432206][T15457] loop2: detected capacity change from 0 to 2048 [ 516.541793][ T6011] loop2: p1 < > p3 p4 < > [ 516.551419][ T6011] loop2: partition table partially beyond EOD, truncated [ 516.571921][ T6011] loop2: p1 start 16777991 is beyond EOD, truncated [ 516.600576][ T6011] loop2: p3 start 263168 is beyond EOD, truncated [ 516.641193][T15457] loop2: p1 < > p3 p4 < > [ 516.645855][T15457] loop2: partition table partially beyond EOD, truncated [ 516.676687][T15457] loop2: p1 start 16777991 is beyond EOD, truncated [ 516.707182][T15457] loop2: p3 start 263168 is beyond EOD, truncated [ 516.885650][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 517.043406][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 517.194839][T15485] loop4: detected capacity change from 0 to 512 [ 517.243325][T15485] EXT4-fs: Ignoring removed nobh option [ 517.320150][T15485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.520848][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.728595][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4112'. [ 518.374228][ T5995] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 518.426839][ T29] audit: type=1400 audit(527.175:28): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15541 comm="syz.4.4129" [ 518.530638][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 518.542447][ T5995] usb 3-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 518.560880][ T5995] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 518.589947][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.634236][ T5995] usb 3-1: config 0 descriptor?? [ 518.650845][ T5995] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 518.689655][ T5995] uvcvideo 3-1:0.0: No valid video chain found. [ 518.861109][ T5995] usb 3-1: USB disconnect, device number 107 [ 518.890272][ T29] audit: type=1326 audit(527.669:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 518.926459][ T29] audit: type=1326 audit(527.669:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 518.983957][ T29] audit: type=1326 audit(527.723:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 519.036137][ T29] audit: type=1326 audit(527.723:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 519.089067][ T29] audit: type=1326 audit(527.723:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.3.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 519.192992][ T5995] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 519.304377][T15578] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 519.346090][ T5995] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 519.374195][ T5995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.397099][ T5995] usb 5-1: config 0 has no interface number 0 [ 519.414047][ T5995] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.448759][T15582] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4147'. [ 519.470246][ T5995] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 519.484633][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 519.509039][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.520556][ T5995] usb 5-1: Product: syz [ 519.524773][ T5995] usb 5-1: Manufacturer: syz [ 519.524902][T15584] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 519.531143][ T5995] usb 5-1: SerialNumber: syz [ 519.554152][ T5995] usb 5-1: config 0 descriptor?? [ 519.754691][T15592] overlayfs: missing 'lowerdir' [ 519.918170][T15596] veth2: entered promiscuous mode [ 519.924258][T15596] veth2: entered allmulticast mode [ 520.043337][ T5995] usb 5-1: USB disconnect, device number 102 [ 520.082693][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.152741][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 520.314168][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 520.343194][ T9] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 520.362689][ T9] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 520.391352][ T9] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 520.406487][ T9] usb 4-1: config 129 has no interface number 0 [ 520.413757][ T9] usb 4-1: config 129 has no interface number 1 [ 520.420212][ T9] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 520.437798][ T9] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 520.451352][ T9] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 520.524927][ T9] usb 4-1: config 129 interface 135 has no altsetting 0 [ 520.553064][ T9] usb 4-1: config 129 interface 5 has no altsetting 0 [ 520.593550][ T9] usb 4-1: string descriptor 0 read error: -22 [ 520.601171][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 520.629174][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.684876][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.704186][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 520.926238][ T9] usb 4-1: USB disconnect, device number 98 [ 520.981513][T13963] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 521.134728][T13788] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 521.142013][T13963] usb 5-1: Using ep0 maxpacket: 16 [ 521.149744][T13963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.226846][T13963] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 521.242951][T13963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.251087][T13963] usb 5-1: Product: syz [ 521.261664][T13963] usb 5-1: Manufacturer: syz [ 521.266400][T13963] usb 5-1: SerialNumber: syz [ 521.300365][T13963] usb 5-1: config 0 descriptor?? [ 521.303299][T13788] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 521.327311][T13788] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 521.344003][T13788] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 521.354667][T13788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.362893][T13788] usb 3-1: Product: syz [ 521.368573][T13788] usb 3-1: Manufacturer: syz [ 521.376422][T13788] usb 3-1: SerialNumber: syz [ 521.405530][T13788] usb 3-1: config 0 descriptor?? [ 521.446023][T15629] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 521.466624][T15629] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 521.534564][T13963] usb 5-1: selecting invalid altsetting 0 [ 521.540367][T13963] usb 5-1: can't set first interface for hiFace device. [ 521.577613][T13963] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 521.606870][T13963] usb 5-1: USB disconnect, device number 103 [ 521.705303][T15629] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 521.725395][T15629] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 521.951390][T13788] Error reading MAC address [ 521.980078][T13788] usb 3-1: USB disconnect, device number 108 [ 522.004826][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4180'. [ 522.037065][T15652] loop0: detected capacity change from 0 to 2048 [ 522.074591][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4180'. [ 522.075967][T15652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.147033][T15651] vlan0: entered promiscuous mode [ 522.278718][T15654] loop1: detected capacity change from 0 to 4096 [ 522.315907][T15654] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 522.324686][T15658] loop4: detected capacity change from 0 to 128 [ 522.342623][ T29] audit: type=1326 audit(531.370:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.3.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 522.397809][T15658] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 522.424228][T15658] FAT-fs (loop4): Filesystem has been set read-only [ 522.431433][ T29] audit: type=1326 audit(531.403:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.3.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 522.463169][T15654] ntfs3(loop1): ino=19, mi_enum_attr [ 522.501656][ T29] audit: type=1326 audit(531.413:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.3.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 522.520297][T15654] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 522.613447][ T29] audit: type=1326 audit(531.413:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.3.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 522.689222][T15654] ntfs3(loop1): failed to convert "c46c" to cp855 [ 522.734598][T15654] ntfs3(loop1): ino=20, mi_enum_attr [ 523.012278][T15677] ip6erspan0: entered allmulticast mode [ 523.088765][T15681] ip6gre1: entered allmulticast mode [ 523.505005][T15704] tmpfs: Bad value for 'mpol' [ 523.708888][T15710] IPv6: sit2: Disabled Multicast RS [ 523.741173][T15714] tmpfs: Bad value for 'mpol' [ 524.123208][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 524.123229][ T29] audit: type=1400 audit(533.291:39): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15733 comm="syz.0.4222" [ 524.651509][T15757] loop4: detected capacity change from 0 to 512 [ 524.691731][T15757] EXT4-fs: Ignoring removed nobh option [ 524.841815][T15757] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.4233: corrupted inode contents [ 524.868623][T15757] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 524.870926][T15757] EXT4-fs (loop4): Remounting filesystem read-only [ 524.880166][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 524.880194][ C1] EXT4-fs (loop4): initial error at time 534: ext4_do_update_inode:5569: inode 3 [ 524.880231][ C1] EXT4-fs (loop4): last error at time 534: ext4_do_update_inode:5569: inode 3 [ 524.918565][T15772] loop3: detected capacity change from 0 to 128 [ 524.945290][T15772] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 524.973449][T15774] sctp: [Deprecated]: syz.1.4239 (pid 15774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.973449][T15774] Use struct sctp_sack_info instead [ 524.991656][T15757] Quota error (device loop4): write_blk: dquota write failed [ 524.999309][T15757] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 525.027607][T15757] EXT4-fs (loop4): 1 truncate cleaned up [ 525.035251][T15757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.070977][T15757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.498995][T15790] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 525.570768][T15755] loop0: detected capacity change from 0 to 32768 [ 525.685362][T15795] veth2: entered promiscuous mode [ 525.715119][T15795] veth2: entered allmulticast mode [ 526.006547][T15804] loop2: detected capacity change from 0 to 4096 [ 526.079980][T15808] loop3: detected capacity change from 0 to 1024 [ 526.096624][T15804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.218907][T15804] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz.2.4254: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 526.289718][T15804] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz.2.4254: directory missing '..' [ 526.504403][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.510349][T15820] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4263'. [ 526.739917][T15827] loop2: detected capacity change from 0 to 128 [ 526.782698][ T29] audit: type=1400 audit(536.123:40): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=15825 comm="syz.4.4267" [ 526.862048][T15834] tipc: Trying to set illegal importance in message [ 527.085254][T15842] x_tables: unsorted underflow at hook 3 [ 527.105352][T15844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4274'. [ 527.203065][T15848] loop4: detected capacity change from 0 to 128 [ 527.308103][T15852] netlink: 'syz.3.4278': attribute type 33 has an invalid length. [ 527.360639][T15852] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4278'. [ 527.385501][T15852] `: renamed from team0 (while UP) [ 527.478644][T15858] loop4: detected capacity change from 0 to 256 [ 527.567350][T15858] FAT-fs (loop4): Directory bread(block 64) failed [ 527.594936][T15858] FAT-fs (loop4): Directory bread(block 65) failed [ 527.640713][T15858] FAT-fs (loop4): Directory bread(block 66) failed [ 527.678494][T15858] FAT-fs (loop4): Directory bread(block 67) failed [ 527.719548][T15858] FAT-fs (loop4): Directory bread(block 68) failed [ 527.729970][T15868] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4286'. [ 527.759610][T15858] FAT-fs (loop4): Directory bread(block 69) failed [ 527.799544][T15858] FAT-fs (loop4): Directory bread(block 70) failed [ 527.823063][T15858] FAT-fs (loop4): Directory bread(block 71) failed [ 527.844346][T15858] FAT-fs (loop4): Directory bread(block 72) failed [ 527.850940][T15858] FAT-fs (loop4): Directory bread(block 73) failed [ 528.098853][T15880] veth2: entered promiscuous mode [ 528.142053][T15880] veth2: entered allmulticast mode [ 528.269308][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'. [ 528.522906][T15898] loop3: detected capacity change from 0 to 1764 [ 528.561865][T15900] loop2: detected capacity change from 0 to 512 [ 528.588374][T15900] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4302: bg 0: block 16: invalid block bitmap [ 528.602510][T15900] loop2: lost filesystem error report for type 5 error -117 [ 528.605994][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 528.619855][ C0] EXT4-fs (loop2): initial error at time 538: ext4_validate_block_bitmap:432 [ 528.628713][ C0] EXT4-fs (loop2): last error at time 538: ext4_validate_block_bitmap:432 [ 528.638741][T15900] EXT4-fs (loop2): Remounting filesystem read-only [ 528.645570][T15900] EXT4-fs (loop2): 1 truncate cleaned up [ 528.666724][T15898] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 528.681950][T15900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.863450][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.951969][T15908] xt_TPROXY: Can be used only with -p tcp or -p udp [ 529.048101][T15886] loop1: detected capacity change from 0 to 40427 [ 529.083464][T15886] F2FS-fs (loop1): invalid crc value [ 529.324624][T15886] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 529.336883][T15886] F2FS-fs (loop1): Start checkpoint disabled! [ 529.355975][T15886] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 529.389034][T15886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 529.418189][T13788] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 529.439177][T15923] xt_NFQUEUE: number of total queues is 0 [ 529.588430][T13788] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 529.621478][T13788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.630104][T13788] usb 3-1: Product: syz [ 529.645485][T13788] usb 3-1: Manufacturer: syz [ 529.653901][T13788] usb 3-1: SerialNumber: syz [ 529.683240][T13788] usb 3-1: config 0 descriptor?? [ 529.846904][T15909] loop4: detected capacity change from 0 to 32768 [ 529.898282][T13788] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 529.980025][T15909] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 530.083382][T15909] XFS (loop4): Ending clean mount [ 530.131049][T13963] usb 3-1: USB disconnect, device number 109 [ 530.138856][T15909] XFS (loop4): Quotacheck needed: Please wait. [ 530.157165][T15946] loop0: detected capacity change from 0 to 128 [ 530.211746][T15909] XFS (loop4): Quotacheck: Done. [ 530.406470][ T5848] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 530.423955][T15953] netlink: 'syz.0.4320': attribute type 7 has an invalid length. [ 530.518211][T15957] netlink: 'syz.3.4322': attribute type 1 has an invalid length. [ 530.526008][T15957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4322'. [ 530.955896][T15971] netlink: 'syz.0.4331': attribute type 5 has an invalid length. [ 531.549002][T15995] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 531.577161][T16000] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 531.586319][T16000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4345'. [ 531.617735][T15995] bond2 (unregistering): Released all slaves [ 531.904139][T16006] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 531.933169][T16006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 532.020167][T16012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.297023][T16023] xt_TCPMSS: Only works on TCP SYN packets [ 532.305534][T16024] netlink: 'syz.1.4355': attribute type 21 has an invalid length. [ 532.362217][T16024] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4355'. [ 532.430786][T16024] netlink: 'syz.1.4355': attribute type 5 has an invalid length. [ 532.449522][T16024] netlink: 'syz.1.4355': attribute type 6 has an invalid length. [ 532.505551][T16024] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4355'. [ 532.590687][T16036] netlink: 'syz.3.4362': attribute type 8 has an invalid length. [ 532.750805][T16043] netlink: 'syz.3.4367': attribute type 32 has an invalid length. [ 532.887798][T16050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4368'. [ 533.093154][T16061] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4373'. [ 533.308280][T16069] xfrm0: entered promiscuous mode [ 533.339426][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4377'. [ 533.352017][T16069] xfrm0: entered allmulticast mode [ 533.586173][T16081] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.4381'. [ 533.765818][T16085] loop0: detected capacity change from 0 to 64 [ 534.217011][T16070] loop4: detected capacity change from 0 to 32768 [ 534.280726][T16070] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 534.291073][T16111] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4392'. [ 534.325037][T16111] IPv6: Can't replace route, no match found [ 534.367765][T16070] XFS (loop4): Ending clean mount [ 534.532141][ T5848] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 534.879264][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 535.309761][T16154] loop3: detected capacity change from 0 to 64 [ 536.505671][T16212] infiniband: Added to hash: ib_dev=ffff888034dac000 (0)() ndev=ffff888078ad2000 (26)(hsr0) [ 536.590510][T16212] hsr0 speed is unknown, defaulting to 1000 [ 536.645650][T16212] hsr0 speed is unknown, defaulting to 1000 [ 536.683088][T16212] hsr0 speed is unknown, defaulting to 1000 [ 536.708214][T16212] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 536.742689][T16212] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 536.785324][T16222] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 536.802647][T16212] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 536.871876][T16212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 536.999690][T16212] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 537.044552][T16230] loop0: detected capacity change from 0 to 128 [ 537.200242][T16212] hsr0 speed is unknown, defaulting to 1000 [ 537.218604][T16212] hsr0 speed is unknown, defaulting to 1000 [ 537.309031][T16215] loop2: detected capacity change from 0 to 32768 [ 537.325691][T16235] netlink: 'syz.0.4453': attribute type 10 has an invalid length. [ 537.344884][T16212] hsr0 speed is unknown, defaulting to 1000 [ 537.358219][T16235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4453'. [ 537.376221][T16235] veth0_vlan: entered allmulticast mode [ 537.394408][T16235] bridge0: port 3(veth0_vlan) entered blocking state [ 537.403871][T16237] loop3: detected capacity change from 0 to 256 [ 537.427520][T16215] ERROR: (device loop2): diWrite: ixpxd invalid [ 537.427520][T16215] [ 537.445850][T16215] ERROR: (device loop2): remounting filesystem as read-only [ 537.455882][T16235] bridge0: port 3(veth0_vlan) entered disabled state [ 537.488455][T16215] ERROR: (device loop2): txCommit: [ 537.488455][T16215] [ 537.502614][T16235] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 537.535404][T16215] imap: ffff88807d408000: 07ffffff 00000000 00000000 00000000 [ 537.565800][T16215] imap: ffff88807d408010: 00000004 00000002 00000000 00000000 [ 537.587831][T16215] ERROR: (device loop2): diFree: inum = 64, iagno = 0, nextiag = 0 [ 537.587831][T16215] [ 537.594288][T16212] hsr0 speed is unknown, defaulting to 1000 [ 537.652218][T16212] hsr0 speed is unknown, defaulting to 1000 [ 538.092139][T16262] loop0: detected capacity change from 0 to 256 [ 538.237427][T16262] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000ff0) [ 538.345302][T16265] loop4: detected capacity change from 0 to 4096 [ 538.408775][T16265] NILFS (loop4): mounting unchecked fs [ 538.452456][T16265] NILFS (loop4): recovery required for readonly filesystem [ 538.477255][T16265] NILFS (loop4): write access will be enabled during recovery [ 538.520229][T16265] NILFS (loop4): invalid segment: Checksum error in segment payload [ 538.588512][T16275] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4472'. [ 538.594869][T16265] NILFS (loop4): trying rollback from an earlier position [ 538.605740][T16276] program syz.0.4470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.655856][T16265] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 538.706859][T16265] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 538.737263][ T5981] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 538.830774][T16281] netlink: 'syz.0.4474': attribute type 5 has an invalid length. [ 538.836214][T16279] loop1: detected capacity change from 0 to 4096 [ 538.923068][T16279] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 538.952225][ T5981] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 538.968556][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.013028][ T5981] usb 3-1: config 0 descriptor?? [ 539.056861][ T5981] gspca_main: spca508-2.14.0 probing 8086:0110 [ 539.071641][T16279] ntfs3(loop1): Failed to load $Extend (-22). [ 539.093993][T16279] ntfs3(loop1): Failed to initialize $Extend. [ 539.436036][ T5981] gspca_spca508: reg_read err -71 [ 539.456529][ T5981] gspca_spca508: reg_read err -71 [ 539.464266][ T5981] gspca_spca508: reg_read err -71 [ 539.477109][ T5981] gspca_spca508: reg_read err -71 [ 539.494251][ T5981] gspca_spca508: reg write: error -71 [ 539.502177][ T5981] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 539.538182][ T5981] usb 3-1: USB disconnect, device number 110 [ 539.680108][T16301] loop1: detected capacity change from 0 to 4096 [ 539.696101][T16301] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 539.753717][T16301] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 539.965082][T16309] sit2: entered allmulticast mode [ 540.132453][T16313] @ÿ: renamed from veth0_vlan (while UP) [ 540.298739][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4494'. [ 540.320708][T16325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4496'. [ 540.663803][ T5995] kernel read not supported for file /1888/net/xfrm_stat (pid: 5995 comm: kworker/0:7) [ 540.676150][T13963] kernel write not supported for file /1888/net/xfrm_stat (pid: 13963 comm: kworker/0:2) [ 540.908075][T16344] bond2: option tlb_dynamic_lb: invalid value (2) [ 540.918143][T16344] bond2 (unregistering): Released all slaves [ 541.028155][T16327] loop4: detected capacity change from 0 to 32768 [ 541.052103][T16327] (syz.4.4497,16327,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 541.072548][T16327] (syz.4.4497,16327,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 541.094544][T16352] loop3: detected capacity change from 0 to 256 [ 541.102207][T16350] loop1: detected capacity change from 0 to 4096 [ 541.127762][T16350] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 541.170965][T16327] JBD2: Ignoring recovery information on journal [ 541.291095][T16352] FAT-fs (loop3): Directory bread(block 64) failed [ 541.313308][T16352] FAT-fs (loop3): Directory bread(block 65) failed [ 541.340392][T16350] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 541.362707][T16327] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 541.372091][T16352] FAT-fs (loop3): Directory bread(block 66) failed [ 541.400119][T16350] ntfs3(loop1): ino=19, mi_enum_attr [ 541.407575][T16327] (syz.4.4497,16327,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 541.415068][T16352] FAT-fs (loop3): Directory bread(block 67) failed [ 541.442162][T16352] FAT-fs (loop3): Directory bread(block 68) failed [ 541.457357][T16352] FAT-fs (loop3): Directory bread(block 69) failed [ 541.465874][T16350] ntfs3(loop1): failed to convert "c46c" to euc-jp [ 541.473431][T16350] ntfs3(loop1): ino=20, mi_enum_attr [ 541.479183][T16352] FAT-fs (loop3): Directory bread(block 70) failed [ 541.485743][T16352] FAT-fs (loop3): Directory bread(block 71) failed [ 541.515355][T16352] FAT-fs (loop3): Directory bread(block 72) failed [ 541.525762][T16352] FAT-fs (loop3): Directory bread(block 73) failed [ 541.626694][T16327] (syz.4.4497,16327,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 541.695269][T16327] (syz.4.4497,16327,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 541.745147][T16327] (syz.4.4497,16327,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 541.822338][T16327] (syz.4.4497,16327,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 541.831447][T16327] (syz.4.4497,16327,0):ocfs2_quota_read:201 ERROR: status = -5 [ 541.846480][T16327] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 541.857862][T16327] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 541.922786][T16327] (syz.4.4497,16327,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 541.934045][T16327] (syz.4.4497,16327,0):ocfs2_mknod:318 ERROR: status = -5 [ 541.941835][T16327] (syz.4.4497,16327,0):ocfs2_mknod:506 ERROR: status = -5 [ 542.025440][T16370] loop1: detected capacity change from 0 to 512 [ 542.046011][T16370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.185919][T16370] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4517: corrupted in-inode xattr: e_value size too large [ 542.204919][ T5848] ocfs2: Unmounting device (7,4) on (node local) [ 542.298406][T16370] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.298887][T16370] EXT4-fs (loop1): Remounting filesystem read-only [ 542.308385][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 542.308411][ C0] EXT4-fs (loop1): initial error at time 552: ext4_iget_extra_inode:5025: inode 15 [ 542.308447][ C0] EXT4-fs (loop1): last error at time 552: ext4_iget_extra_inode:5025: inode 15 [ 542.390160][T16382] loop0: detected capacity change from 0 to 2048 [ 542.462243][T16382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.507336][T16370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.580724][T16388] SET target dimension over the limit! [ 542.734789][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.175075][T16412] loop4: detected capacity change from 0 to 764 [ 543.239921][T16412] Symlink component flag not implemented [ 543.245868][T16412] Symlink component flag not implemented (116) [ 543.671087][T16432] No such timeout policy "syz1" [ 544.134316][T13788] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 544.297012][T16428] loop0: detected capacity change from 0 to 32768 [ 544.331293][T13788] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 544.348291][T13788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.366166][T13788] usb 5-1: config 0 descriptor?? [ 544.388128][T13788] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 544.395148][T16428] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 544.438348][T16428] JBD2: Ignoring recovery information on journal [ 544.509158][T16428] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 544.545996][T16428] (syz.0.4545,16428,0):ocfs2_find_entry:1104 ERROR: status = -117 [ 544.583743][T16428] (syz.0.4545,16428,1):ocfs2_find_entry:1104 ERROR: status = -117 [ 544.596953][T16428] (syz.0.4545,16428,1):ocfs2_symlink:2081 ERROR: status = -117 [ 544.747637][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 544.787818][T13788] gspca_sunplus: reg_w_riv err -71 [ 544.793081][T13788] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 544.864146][T13788] usb 5-1: USB disconnect, device number 104 [ 544.995697][T16452] loop2: detected capacity change from 0 to 32768 [ 545.133702][T16472] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 545.178314][T16472] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 545.265819][T16454] loop3: detected capacity change from 0 to 32768 [ 545.299490][T16454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4558 (16454) [ 545.435663][T16454] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.468060][T16454] BTRFS info (device loop3): using sha256 checksum algorithm [ 545.662401][T16497] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 545.670724][T16497] openvswitch: netlink: Message has 16 unknown bytes. [ 545.692062][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 545.776482][T16500] ip6tnl1: entered allmulticast mode [ 545.786906][T16454] BTRFS info (device loop3): enabling ssd optimizations [ 545.821144][T13963] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 545.841006][T16454] BTRFS info (device loop3): turning on async discard [ 545.847844][T16454] BTRFS info (device loop3): enabling free space tree [ 545.976873][T13963] usb 3-1: Using ep0 maxpacket: 16 [ 546.003985][T13963] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.028573][T13963] usb 3-1: config 0 has no interface number 0 [ 546.074972][T13963] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 546.085980][ T5849] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.092987][T13963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.117050][T13963] usb 3-1: Product: syz [ 546.134305][T13963] usb 3-1: Manufacturer: syz [ 546.178926][T13963] usb 3-1: SerialNumber: syz [ 546.192075][T13963] usb 3-1: config 0 descriptor?? [ 546.234092][T13963] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 546.619985][T13963] gspca_spca1528: reg_w err -71 [ 546.641290][T13963] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 546.698284][T13963] usb 3-1: USB disconnect, device number 111 [ 546.759011][T16510] loop1: detected capacity change from 0 to 32768 [ 546.789917][T16510] (syz.1.4576,16510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.839697][T16510] (syz.1.4576,16510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.991665][T16510] JBD2: Ignoring recovery information on journal [ 547.023321][T16534] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 547.053166][T16538] openvswitch: netlink: IP tunnel TTL not specified. [ 547.139294][T16510] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 547.169014][T16510] (syz.1.4576,16510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 547.360524][T16510] (syz.1.4576,16510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 547.429436][T16510] (syz.1.4576,16510,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 547.462697][T16510] (syz.1.4576,16510,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 547.532568][T16510] (syz.1.4576,16510,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 547.552624][T16554] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4595'. [ 547.574307][T16510] (syz.1.4576,16510,1):ocfs2_quota_read:201 ERROR: status = -5 [ 547.581933][T16510] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 547.607871][T16510] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 547.630260][T16510] (syz.1.4576,16510,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 547.661410][T16510] (syz.1.4576,16510,1):ocfs2_mknod:318 ERROR: status = -5 [ 547.693988][T16560] loop0: detected capacity change from 0 to 512 [ 547.707760][T16510] (syz.1.4576,16510,0):ocfs2_mknod:506 ERROR: status = -5 [ 547.752187][T16560] EXT4-fs: Ignoring removed orlov option [ 547.815648][T16560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.872988][ T5841] ocfs2: Unmounting device (7,1) on (node local) [ 548.053673][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.241311][T16578] x_tables: duplicate underflow at hook 1 [ 548.897410][T16610] loop4: detected capacity change from 0 to 128 [ 548.959730][T16610] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.244771][ T5848] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.260729][T16624] overlayfs: missing 'lowerdir' [ 549.355087][T13963] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 549.399384][T16629] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 549.465173][T16632] loop3: detected capacity change from 0 to 512 [ 549.523891][T13963] usb 3-1: Using ep0 maxpacket: 32 [ 549.529227][T16632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 549.553343][T16636] netlink: 'syz.0.4632': attribute type 1 has an invalid length. [ 549.573967][T13963] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 549.592010][T16632] EXT4-fs (loop3): 1 truncate cleaned up [ 549.599151][T13963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.627435][T13963] usb 3-1: Product: syz [ 549.631673][T13963] usb 3-1: Manufacturer: syz [ 549.657926][T16632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.684351][T13963] usb 3-1: SerialNumber: syz [ 549.693295][T16639] bridge1: entered promiscuous mode [ 549.738362][T13963] usb 3-1: config 0 descriptor?? [ 549.829124][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.946554][T13963] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 549.975913][T13963] eb 2a 3b 80 9b e4 7a f0 [ 549.998277][T13963] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 550.150203][ T5914] usb 3-1: USB disconnect, device number 112 [ 550.739324][T16682] loop1: detected capacity change from 0 to 2048 [ 550.783642][T16688] loop4: detected capacity change from 0 to 512 [ 550.813072][T16682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.869962][T16688] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 550.929249][T16688] EXT4-fs (loop4): orphan cleanup on readonly fs [ 550.978195][T16688] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.4656: Block bitmap for bg 0 marked uninitialized [ 551.036488][T16688] loop4: lost filesystem error report for type 5 error -117 [ 551.038811][T16688] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 551.046263][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 551.046292][ C1] EXT4-fs (loop4): initial error at time 562: ext4_read_block_bitmap_nowait:517 [ 551.046324][ C1] EXT4-fs (loop4): last error at time 562: ext4_read_block_bitmap_nowait:517 [ 551.082712][T16688] loop4: lost filesystem error report for type 5 error -117 [ 551.088387][T16688] EXT4-fs (loop4): 1 orphan inode deleted [ 551.128833][T16688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 551.322296][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.799149][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 552.095380][T16732] bond2: entered promiscuous mode [ 552.106427][T16736] loop0: detected capacity change from 0 to 512 [ 552.132220][T16732] bond2: entered allmulticast mode [ 552.165143][T16732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.206707][T16736] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 552.294146][T16736] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4680: bg 0: block 104: invalid block bitmap [ 552.335389][T16736] loop0: lost filesystem error report for type 5 error -117 [ 552.336964][ C1] EXT4-fs (loop0): initial error at time 563: ext4_validate_block_bitmap:432 [ 552.353240][ C1] EXT4-fs (loop0): last error at time 563: ext4_validate_block_bitmap:432 [ 552.372772][T16736] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 552.381716][T16736] loop0: lost filesystem error report for type 5 error -117 [ 552.382399][T16736] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4680: invalid indirect mapped block 1 (level 1) [ 552.485151][T16736] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 552.486862][T16736] EXT4-fs (loop0): 1 truncate cleaned up [ 552.511192][T16725] loop3: detected capacity change from 0 to 32768 [ 552.523187][T16736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.585351][ T29] audit: type=1800 audit(563.826:41): pid=16736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4680" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 552.620671][T16751] netlink: 'syz.2.4686': attribute type 2 has an invalid length. [ 552.655360][T16725] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 552.679456][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.850502][T16725] XFS (loop3): Ending clean mount [ 552.888738][T16725] XFS (loop3): Quotacheck needed: Please wait. [ 552.998476][T16725] XFS (loop3): Quotacheck: Done. [ 553.208963][ T5849] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 553.253269][T16778] infiniband: Added to hash: ib_dev=ffff88807db24000 (0)() ndev=ffff88823bff6000 (16)(bond_slave_0) [ 553.515981][T16786] sit0: entered promiscuous mode [ 553.552604][T16786] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 553.574078][T16786] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4700'. [ 553.769672][T16791] cgroup: none used incorrectly [ 553.896884][T16778] infiniband syz1: set active [ 553.902264][T16778] infiniband syz1: added bond_slave_0 [ 553.935114][T16778] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 553.964113][T16778] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 553.981539][T16778] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 554.068051][T16778] RDS/IB: syz1: added [ 554.080305][T16778] smc: adding ib device syz1 with port count 1 [ 554.113170][T16778] smc: ib device syz1 port 1 has no pnetid [ 554.490732][ T5995] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 554.647430][ T5995] usb 5-1: Using ep0 maxpacket: 32 [ 554.668057][ T5995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.702593][ T5995] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 554.740589][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.783429][ T5995] usb 5-1: Product: syz [ 554.790098][ T5995] usb 5-1: Manufacturer: syz [ 554.798348][ T5995] usb 5-1: SerialNumber: syz [ 554.810561][ T5995] usb 5-1: config 0 descriptor?? [ 554.973805][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4719'. [ 555.001740][T16830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4719'. [ 555.034541][T16830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4719'. [ 555.046139][ T5995] kaweth 5-1:0.0: Firmware present in device. [ 555.068709][ T5995] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 555.095757][T16832] loop2: detected capacity change from 0 to 256 [ 555.103107][T16832] exfat: Deprecated parameter 'utf8' [ 555.105552][ T5995] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 555.125345][T16810] loop3: detected capacity change from 0 to 32768 [ 555.149689][ T5995] usb 5-1: USB disconnect, device number 105 [ 555.153604][T16832] exfat: Deprecated parameter 'utf8' [ 555.228586][T16810] XFS (loop3): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 555.257377][T16832] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 555.490778][T16842] loop1: detected capacity change from 0 to 4096 [ 555.662633][T16810] XFS (loop3): Ending clean mount [ 555.674770][T16842] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 555.694786][T16842] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 555.862915][ T5849] XFS (loop3): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 555.876699][ T83] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 555.910796][ T5841] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 555.947443][ T5841] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 555.958857][ T5841] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 555.979746][ T83] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 556.933929][T16877] ieee802154 phy1 wpan1: encryption failed: -90 [ 557.175336][T16880] loop3: detected capacity change from 0 to 4096 [ 557.196711][T16880] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 557.593064][ T5995] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 557.760413][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 557.772873][ T5995] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 557.789144][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.805623][ T5995] usb 2-1: Product: syz [ 557.821667][ T5995] usb 2-1: Manufacturer: syz [ 557.845131][ T5995] usb 2-1: SerialNumber: syz [ 557.864239][ T5995] usb 2-1: config 0 descriptor?? [ 558.077805][ T5995] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 558.102187][ T5995] b3 c1 69 eb 50 3d 29 15 [ 558.117095][T16916] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 558.124664][ T5995] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 558.147511][T16916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 558.264283][ T5914] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 558.290529][ T5921] usb 2-1: USB disconnect, device number 106 [ 558.462396][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.480657][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.510219][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.543703][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.555049][ T5914] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 558.564558][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.609502][ T5914] hub 4-1:1.0: bad descriptor, ignoring hub [ 558.637552][ T5914] hub 4-1:1.0: probe with driver hub failed with error -5 [ 558.659258][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 558.664552][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 558.680844][ T5914] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 558.710889][ T5914] cdc_wdm 4-1:1.0: Unknown control protocol [ 558.950983][ T5981] usb 4-1: USB disconnect, device number 99 [ 559.120578][T16953] loop4: detected capacity change from 0 to 1024 [ 559.122766][T16954] netlink: 'syz.2.4775': attribute type 3 has an invalid length. [ 559.167018][T16953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 559.290200][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 559.313502][T16961] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 559.595665][T16975] netlink: 'syz.3.4784': attribute type 21 has an invalid length. [ 559.619807][T16975] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.641295][T16975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.648660][T16975] IPv6: NLM_F_CREATE should be set when creating new route [ 559.655991][T16975] IPv6: NLM_F_CREATE should be set when creating new route [ 559.663393][T16975] IPv6: NLM_F_CREATE should be set when creating new route [ 559.769144][T16979] loop4: detected capacity change from 0 to 16 [ 559.803331][T16979] erofs (device loop4): mounted with root inode @ nid 36. [ 559.858375][T16979] syz.4.4786: attempt to access beyond end of device [ 559.858375][T16979] loop4: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 559.887781][T16981] netlink: 'syz.3.4787': attribute type 1 has an invalid length. [ 559.901076][T16979] syz.4.4786: attempt to access beyond end of device [ 559.901076][T16979] loop4: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 559.914521][T16981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.966115][T16986] netlink: 'syz.0.4789': attribute type 39 has an invalid length. [ 560.070141][T16979] syz.4.4786: attempt to access beyond end of device [ 560.070141][T16979] loop4: rw=524288, sector=0, nr_sectors = 1792 limit=16 [ 560.150770][T16979] syz.4.4786: attempt to access beyond end of device [ 560.150770][T16979] loop4: rw=0, sector=256, nr_sectors = 8 limit=16 [ 560.169886][T16979] erofs (device loop4): read error -5 @ 1 of nid 89 [ 560.178151][ T29] audit: type=1800 audit(571.969:42): pid=16979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4786" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 560.454839][ T5995] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 560.611202][ T5995] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.640875][ T5995] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.667733][T17012] loop3: detected capacity change from 0 to 256 [ 560.676102][ T5995] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.690738][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.723565][ T5995] usb 3-1: SerialNumber: syz [ 560.970821][ T5995] usb 3-1: invalid UAC_HEADER (v1) [ 561.170132][ T5995] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 561.209312][ T5995] usb 3-1: USB disconnect, device number 113 [ 561.258203][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.592925][T17040] loop4: detected capacity change from 0 to 4096 [ 561.627472][T17040] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 561.682992][T17040] ntfs3(loop4): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 561.836905][T17040] ntfs3(loop4): ino=19, mi_enum_attr [ 562.008437][T17065] loop0: detected capacity change from 0 to 256 [ 562.033322][T17065] exfat: Deprecated parameter 'namecase' [ 562.059627][T17065] exfat: Deprecated parameter 'utf8' [ 562.089456][T17065] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 562.247207][T17074] loop1: detected capacity change from 0 to 256 [ 562.521759][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4835'. [ 562.812877][T17094] loop3: detected capacity change from 0 to 4096 [ 562.839881][T17094] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 562.886744][ T5995] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 562.940455][T17094] ntfs3(loop3): ino=19, mi_enum_attr [ 562.969177][T17094] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 563.010576][T17094] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 563.054626][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 563.069348][ T5995] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 563.091997][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 563.100231][ T5995] usb 5-1: Product: syz [ 563.115609][ T5995] usb 5-1: Manufacturer: syz [ 563.123246][ T5995] usb 5-1: SerialNumber: syz [ 563.148826][ T5995] usb 5-1: config 0 descriptor?? [ 563.174372][ T5995] gspca_main: sq905-2.14.0 probing 2770:9120 [ 563.540942][ T5995] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 563.572006][ T5995] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 563.603879][ T5995] usb 5-1: USB disconnect, device number 106 [ 563.874708][T17135] netlink: 'syz.0.4860': attribute type 1 has an invalid length. [ 563.917580][ T29] audit: type=1326 audit(575.982:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17136 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 563.983268][ T29] audit: type=1326 audit(576.014:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17136 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 564.068225][ T29] audit: type=1326 audit(576.014:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17136 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 564.138320][ T29] audit: type=1326 audit(576.014:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17136 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 564.179705][ T29] audit: type=1326 audit(576.014:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17136 comm="syz.1.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 564.265241][T17148] loop4: detected capacity change from 0 to 256 [ 564.280569][T17148] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 564.329130][T17149] gretap1: entered allmulticast mode [ 564.409339][T17153] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 564.475396][T17155] loop3: detected capacity change from 0 to 256 [ 564.551193][T17155] FAT-fs (loop3): Directory bread(block 64) failed [ 564.574069][T17155] FAT-fs (loop3): Directory bread(block 65) failed [ 564.599927][T17155] FAT-fs (loop3): Directory bread(block 66) failed [ 564.622294][T17155] FAT-fs (loop3): Directory bread(block 67) failed [ 564.643622][T17155] FAT-fs (loop3): Directory bread(block 68) failed [ 564.678776][T17155] FAT-fs (loop3): Directory bread(block 69) failed [ 564.701110][T17155] FAT-fs (loop3): Directory bread(block 70) failed [ 564.727147][T17155] FAT-fs (loop3): Directory bread(block 71) failed [ 564.734972][T17155] FAT-fs (loop3): Directory bread(block 72) failed [ 564.743699][T17155] FAT-fs (loop3): Directory bread(block 73) failed [ 565.038594][T17175] loop0: detected capacity change from 0 to 16 [ 565.045336][T17169] loop1: detected capacity change from 0 to 4096 [ 565.101812][T17175] erofs (device loop0): mounted with root inode @ nid 36. [ 565.364199][T17179] netlink: 'syz.3.4883': attribute type 10 has an invalid length. [ 565.428772][T17179] `: Device vxcan1 is of different type [ 565.819753][T17192] syz.0.4888 uses old SIOCAX25GETINFO [ 566.130989][ T2351] pvrusb2: request_firmware fatal error with code=-110 [ 566.168022][ T2351] pvrusb2: Failure uploading firmware1 [ 566.173545][ T2351] pvrusb2: Device initialization was not successful. [ 566.223934][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 566.270820][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 566.304461][ T5851] pvrusb2: Device being rendered inoperable [ 566.532103][T17220] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4902'. [ 566.572648][T17220] batadv_slave_1: entered promiscuous mode [ 567.042467][T17237] loop3: detected capacity change from 0 to 256 [ 567.125185][T17237] FAT-fs (loop3): Directory bread(block 64) failed [ 567.155750][T17237] FAT-fs (loop3): Directory bread(block 65) failed [ 567.185431][T17237] FAT-fs (loop3): Directory bread(block 66) failed [ 567.218215][T17237] FAT-fs (loop3): Directory bread(block 67) failed [ 567.242209][T17237] FAT-fs (loop3): Directory bread(block 68) failed [ 567.271043][T17237] FAT-fs (loop3): Directory bread(block 69) failed [ 567.301129][T17237] FAT-fs (loop3): Directory bread(block 70) failed [ 567.342277][T17237] FAT-fs (loop3): Directory bread(block 71) failed [ 567.359060][T17237] FAT-fs (loop3): Directory bread(block 72) failed [ 567.368295][T17237] FAT-fs (loop3): Directory bread(block 73) failed [ 567.382676][T17246] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 567.423458][T17214] loop0: detected capacity change from 0 to 32768 [ 567.461632][T17214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4899 (17214) [ 567.560968][T17214] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.604862][T17214] BTRFS info (device loop0): using sha256 checksum algorithm [ 567.886548][T17214] BTRFS info (device loop0): enabling ssd optimizations [ 567.894137][T17214] BTRFS info (device loop0): turning on async discard [ 567.900977][T17214] BTRFS info (device loop0): enabling free space tree [ 568.122029][ T5835] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.221555][ T5914] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 568.373897][T17288] loop4: detected capacity change from 0 to 4096 [ 568.418235][ T5914] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 568.439232][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.484822][ T5914] usb 2-1: config 0 descriptor?? [ 568.564083][ T5921] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 568.743151][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 568.795292][ T5921] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 568.818414][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.836583][ T5921] usb 4-1: Product: syz [ 568.840824][ T5921] usb 4-1: Manufacturer: syz [ 568.845936][ T5921] usb 4-1: SerialNumber: syz [ 568.861754][ T5921] usb 4-1: config 0 descriptor?? [ 568.901770][ T5914] ath6kl: Failed to submit usb control message: -71 [ 568.937673][ T5914] ath6kl: unable to send the bmi data to the device: -71 [ 568.944769][ T5914] ath6kl: Unable to send get target info: -71 [ 568.952488][T17305] netlink: 'syz.2.4936': attribute type 10 has an invalid length. [ 568.961291][T17305] veth0_vlan: entered allmulticast mode [ 568.981683][ T5914] ath6kl: Failed to init ath6kl core: -71 [ 569.006867][ T5914] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 569.032082][T17305] veth0_vlan: left promiscuous mode [ 569.065744][T17305] veth0_vlan: entered promiscuous mode [ 569.075135][ T5914] usb 2-1: USB disconnect, device number 107 [ 569.099172][ T5921] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 100 [ 569.126641][T17305] team0: Device veth0_vlan failed to register rx_handler [ 569.281481][ T5851] usb 4-1: USB disconnect, device number 100 [ 569.439542][T17319] ip6t_srh: unknown srh invflags 4000 [ 569.507115][T17323] openvswitch: netlink: IP tunnel dst address not specified [ 569.542047][T13788] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 569.637031][T17327] loop1: detected capacity change from 0 to 128 [ 569.729755][T13788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.746938][T13788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 569.759585][T13788] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 569.784228][T13788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.812322][T13788] usb 5-1: Product: syz [ 569.826754][T13788] usb 5-1: Manufacturer: syz [ 569.845472][T13788] usb 5-1: SerialNumber: syz [ 569.870537][T13788] usb 5-1: config 0 descriptor?? [ 569.901420][T13788] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 569.953006][T13788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.996803][T13788] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 570.025827][T13788] usb 5-1: media controller created [ 570.094981][T13788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.288577][T13788] DVB: Unable to find symbol tda10046_attach() [ 570.294797][T13788] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 570.325632][T13788] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 570.359820][T17352] loop1: detected capacity change from 0 to 512 [ 570.388120][T17352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.414610][T17353] loop3: detected capacity change from 0 to 2048 [ 570.428281][T17354] loop0: detected capacity change from 0 to 512 [ 570.434840][T17352] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.4960: Unimplemented hash flags: 0x0001 [ 570.456458][T17354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.482430][T17352] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4960: Corrupt directory, running e2fsck is recommended [ 570.500867][T17354] EXT4-fs: Ignoring removed nobh option [ 570.536413][T17356] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.546633][T13788] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 570.589465][T13788] usb 5-1: USB disconnect, device number 107 [ 570.607250][T17353] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 570.660735][T17354] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.4958: ea_inode file size=0 entry size=6 [ 570.678894][T17354] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.4958: iget: bad extra_isize 90 (inode size 256) [ 570.693603][T17354] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 570.700387][T17354] EXT4-fs (loop0): Remounting filesystem read-only [ 570.707003][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 570.723050][ C1] EXT4-fs (loop0): initial error at time 583: ext4_xattr_inode_iget:441: inode 11 [ 570.732372][ C1] EXT4-fs (loop0): last error at time 583: ext4_xattr_inode_iget:441: inode 11 [ 570.783638][T17353] Remounting filesystem read-only [ 570.795542][T17354] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -30) [ 570.805609][T17354] EXT4-fs (loop0): 1 orphan inode deleted [ 570.817868][T17354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.867539][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.988591][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.180779][T17343] loop2: detected capacity change from 0 to 32768 [ 571.311703][T17369] loop3: detected capacity change from 0 to 64 [ 571.505113][T17375] loop0: detected capacity change from 0 to 256 [ 571.542200][T17375] exfat: Deprecated parameter 'namecase' [ 571.574470][T17375] exfat: Deprecated parameter 'namecase' [ 571.602224][T17375] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 571.900884][ T5914] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 571.921684][T17391] loop1: detected capacity change from 0 to 8 [ 571.933002][T17390] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4976'. [ 571.967359][T17391] SQUASHFS error: Unable to read inode 0x87 [ 572.083029][ T5914] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 572.104712][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.142493][ T5914] usb 4-1: Product: syz [ 572.158616][ T5914] usb 4-1: Manufacturer: syz [ 572.168161][T17397] loop4: detected capacity change from 0 to 2048 [ 572.187599][ T5914] usb 4-1: SerialNumber: syz [ 572.203300][ T5914] usb 4-1: config 0 descriptor?? [ 572.207015][ T5914] usb 4-1: selecting invalid altsetting 1 [ 572.207038][ T5914] technisat-usb2: could not set alternate setting to 0 [ 572.262384][T17397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.403134][ T5914] technisat-usb2: firmware version: 0.0 [ 572.431559][ T5914] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 572.601516][ T5914] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 572.623373][T17412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4986'. [ 572.657971][ T5914] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 572.694353][ T5914] usb 4-1: USB disconnect, device number 101 [ 572.759534][T17417] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4989'. [ 572.969661][T17424] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.090280][T17429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.399262][T17443] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 573.590361][T17447] loop1: detected capacity change from 0 to 2048 [ 573.643587][T17447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.829707][T17458] netlink: 'syz.3.5008': attribute type 10 has an invalid length. [ 573.838107][T17458] veth0_vlan: entered allmulticast mode [ 573.891011][T17421] JBD2: Ignoring recovery information on journal [ 574.073455][T17421] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 574.197608][T17458] `: Device veth0_vlan failed to register rx_handler [ 574.287052][T17474] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 574.335376][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 574.485192][T17479] netlink: 'syz.4.5019': attribute type 2 has an invalid length. [ 574.571359][ T29] audit: type=1326 audit(587.408:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 574.684166][ T29] audit: type=1326 audit(587.440:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 574.773131][ T29] audit: type=1326 audit(587.451:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 574.856617][ T29] audit: type=1326 audit(587.451:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 574.918270][ T29] audit: type=1326 audit(587.451:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17480 comm="syz.1.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02999c629 code=0x7ffc0000 [ 575.208218][ T29] audit: type=1326 audit(588.095:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.2.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 575.283210][ T29] audit: type=1326 audit(588.095:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.2.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 575.339924][T17509] Process accounting resumed [ 575.384265][ T29] audit: type=1326 audit(588.095:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.2.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 575.427630][ T29] audit: type=1326 audit(588.095:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.2.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 575.483599][ T29] audit: type=1326 audit(588.095:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.2.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 575.895062][T17537] set_capacity_and_notify: 1 callbacks suppressed [ 575.895084][T17537] loop4: detected capacity change from 0 to 8 [ 576.117767][T17537] SQUASHFS error: Failed to read block 0x106: -5 [ 576.177462][T17537] SQUASHFS error: Failed to read block 0xc00107: -5 [ 576.204534][T17541] loop3: detected capacity change from 0 to 4096 [ 576.214302][T17537] SQUASHFS error: Failed to read block 0xc8f2de: -5 [ 576.235758][T17537] SQUASHFS error: Failed to read block 0x106: -5 [ 576.241899][ T5995] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 576.289584][T13788] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 576.318677][T17541] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 576.420485][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 576.436857][ T5995] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 576.463200][T13788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.465989][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 576.504390][T13788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 576.523778][T13788] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 576.526003][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 576.541819][T13788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.562617][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 576.610833][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 576.611331][T13788] usb 1-1: config 0 descriptor?? [ 576.667567][ T5995] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 576.688604][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.718627][ T5995] usb 2-1: Product: syz [ 576.737377][ T5995] usb 2-1: Manufacturer: syz [ 576.750478][ T5995] usb 2-1: SerialNumber: syz [ 576.775318][ T5995] usb 2-1: config 0 descriptor?? [ 576.886421][T17561] netlink: 'syz.3.5059': attribute type 7 has an invalid length. [ 576.894500][T17561] netlink: 'syz.3.5059': attribute type 8 has an invalid length. [ 577.071477][T13788] Bluetooth: Can't get state to change to load configuration err [ 577.119100][T13788] Bluetooth: Loading sysconfig file failed [ 577.138057][T13788] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 577.158850][T13788] usb 1-1: USB disconnect, device number 86 [ 577.199234][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.219048][ T5995] input input47: Device does not respond to id packet M [ 577.246350][T17571] loop3: detected capacity change from 0 to 512 [ 577.255114][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.268514][ T5995] input input47: Device does not respond to id packet P [ 577.286032][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.297966][T17571] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 577.309094][ T5995] input input47: Device does not respond to id packet B [ 577.335407][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.337957][T17571] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (4742!=33349) [ 577.341584][ T5995] input input47: Device does not respond to id packet N [ 577.387420][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.403931][T17571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 577.404200][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.442448][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.456023][ T5995] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 577.468035][ T5995] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 577.486323][T17571] EXT4-fs (loop3): orphan cleanup on readonly fs [ 577.500905][ T5995] usb 2-1: USB disconnect, device number 108 [ 577.539852][T17571] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5064: invalid indirect mapped block 2185560079 (level 1) [ 577.603794][T17571] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 577.622292][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 577.637943][ C1] EXT4-fs (loop3): initial error at time 590: ext4_free_branches:1023: inode 11 [ 577.647119][ C1] EXT4-fs (loop3): last error at time 590: ext4_free_branches:1023: inode 11 [ 577.659036][T17571] EXT4-fs (loop3): Remounting filesystem read-only [ 577.688006][T17571] EXT4-fs (loop3): 1 truncate cleaned up [ 577.706096][T17571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 577.780264][T17582] CIFS mount error: No usable UNC path provided in device string! [ 577.780264][T17582] [ 577.795230][T17571] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.5064: dx entry: limit 0 != root limit 125 [ 577.816166][T17582] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 577.851828][T17580] loop0: detected capacity change from 0 to 4096 [ 577.878915][T17571] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5064: Corrupt directory, running e2fsck is recommended [ 577.895285][T17580] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 577.989396][T17580] ntfs3(loop0): ino=3, mi_enum_attr [ 578.078663][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 578.156068][T17580] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 578.179620][T17580] ntfs3(loop0): ino=1f, "file2" failed to open parent directory r=5 to update [ 578.412140][ T83] ntfs3(loop0): ino=1f, failed to open parent directory r=5 to update [ 578.627515][T17602] loop1: detected capacity change from 0 to 2048 [ 578.639074][T17606] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5082'. [ 578.685978][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5082'. [ 578.701278][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5082'. [ 578.702397][T17602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.890323][T13963] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 578.942874][T17610] loop2: detected capacity change from 0 to 2048 [ 578.975667][T17610] EXT4-fs: Ignoring removed i_version option [ 579.041833][T17610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.069576][T13963] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 579.098577][T13963] usb 1-1: config 0 has no interface number 0 [ 579.119646][T13963] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 579.170237][T13963] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.184117][T17610] EXT4-fs error (device loop2): ext4_find_extent:941: inode #2: comm syz.2.5083: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 579.227575][T17590] loop4: detected capacity change from 0 to 32768 [ 579.255604][T13963] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 579.268442][T13963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.291609][T17590] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 579.321404][T13963] usb 1-1: Product: syz [ 579.325683][T13963] usb 1-1: Manufacturer: syz [ 579.336420][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.363141][T13963] usb 1-1: SerialNumber: syz [ 579.400180][T13963] usb 1-1: config 0 descriptor?? [ 579.417525][T17608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 579.431604][T13963] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 579.485554][T13963] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 579.522472][T17614] loop1: detected capacity change from 0 to 32768 [ 579.597074][T17614] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5085 (17614) [ 579.652121][T17631] loop2: detected capacity change from 0 to 1024 [ 579.665106][T17590] XFS (loop4): Ending clean mount [ 579.706897][T17614] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 579.743725][T17590] XFS (loop4): syz.4.5072 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 579.764179][T17631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.776661][T17614] BTRFS info (device loop1): using crc32c checksum algorithm [ 579.784119][T17614] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 579.839552][ T5995] usb 1-1: USB disconnect, device number 87 [ 579.851779][T17631] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.5088: missing EA_INODE flag [ 579.889571][ T5995] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 579.964524][ T5995] cyberjack 1-1:0.69: device disconnected [ 579.985771][T17631] EXT4-fs (loop2): Remounting filesystem read-only [ 579.994791][ T5848] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 580.097815][T17614] BTRFS info (device loop1): rebuilding free space tree [ 580.129436][T17614] BTRFS info (device loop1): disabling free space tree [ 580.137533][T17614] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 580.158369][T17614] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 580.191137][T17614] BTRFS info (device loop1): setting nodatasum [ 580.196760][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.211267][T17614] BTRFS info (device loop1): setting nodatacow [ 580.230068][T17614] BTRFS info (device loop1): enabling ssd optimizations [ 580.243448][T17614] BTRFS info (device loop1): using spread ssd allocation scheme [ 580.261838][T17614] BTRFS info (device loop1): turning on sync discard [ 580.291295][T17614] BTRFS info (device loop1): enabling disk space caching [ 580.308882][T17614] BTRFS info (device loop1): force clearing of disk cache [ 580.854617][ T5841] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.118231][ T5851] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 581.290486][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 581.304232][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 581.353814][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 581.378073][ T5851] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 581.413931][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.463491][ T5851] usb 3-1: Product: syz [ 581.467720][ T5851] usb 3-1: Manufacturer: syz [ 581.491849][T17694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5110'. [ 581.511765][ T5851] usb 3-1: SerialNumber: syz [ 581.529759][ T5851] usb 3-1: config 0 descriptor?? [ 581.572492][T17697] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 581.898840][ T5851] usb 3-1: USB disconnect, device number 114 [ 581.994433][T13788] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 582.037384][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.161163][T13788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.179648][T13788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.210771][T13788] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 582.228970][T17714] loop4: detected capacity change from 0 to 1764 [ 582.236094][T13788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 582.248129][T13788] usb 2-1: SerialNumber: syz [ 582.321303][T17714] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 582.331792][T17716] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 582.457389][T13788] usb 2-1: 0:2 : does not exist [ 582.591126][T13788] usb 2-1: USB disconnect, device number 109 [ 582.707222][ T6058] udevd[6058]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.063428][T17748] smc: removing ib device syz1 [ 583.156815][T17748] smbdirect: ib_dev[syz1] removed [ 583.797582][T17743] loop2: detected capacity change from 0 to 32768 [ 583.822258][T17743] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5133 (17743) [ 583.944653][T17743] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 583.985734][T17743] BTRFS info (device loop2): using sha256 checksum algorithm [ 584.185292][T17757] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 584.193423][T13963] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 584.204556][T17743] BTRFS info (device loop2): enabling ssd optimizations [ 584.211796][T17743] BTRFS info (device loop2): turning on async discard [ 584.218928][T17743] BTRFS info (device loop2): enabling free space tree [ 584.302589][T17743] BTRFS error (device loop2): unable to set label with more than 255 bytes [ 584.344793][T13963] usb 4-1: Using ep0 maxpacket: 32 [ 584.355205][T13963] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 40 [ 584.383318][T13963] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 584.414718][T13963] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 584.427034][ T5837] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.439809][T13963] usb 4-1: Product: syz [ 584.460241][T13963] usb 4-1: Manufacturer: syz [ 584.471783][T13963] usb 4-1: SerialNumber: syz [ 584.552141][T13963] usb 4-1: config 0 descriptor?? [ 584.580560][T17769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 584.606021][T13963] hub 4-1:0.0: bad descriptor, ignoring hub [ 584.607414][T17798] loop4: detected capacity change from 0 to 256 [ 584.621264][T13963] hub 4-1:0.0: probe with driver hub failed with error -5 [ 584.964789][T17804] loop0: detected capacity change from 0 to 1024 [ 585.061608][ T5981] usb 4-1: USB disconnect, device number 102 [ 585.390556][T17821] loop4: detected capacity change from 0 to 1024 [ 585.431095][T17821] hfsplus: bad catalog file entry [ 585.543358][ T156] hfsplus: bad catalog file entry [ 586.660458][T17829] loop3: detected capacity change from 0 to 32768 [ 586.697846][T17829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5168 (17829) [ 586.797520][T17748] infiniband: Removed from hash: ib_dev=ffff88807db24000 (0)(syz1) ndev=ffff88823bff6000 (15)(bond_slave_0) [ 586.797740][T17829] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 586.841384][T17829] BTRFS info (device loop3): using sha256 checksum algorithm [ 586.869151][T17859] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 586.876614][T17859] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 587.090719][T17829] BTRFS info (device loop3): enabling ssd optimizations [ 587.127670][T17829] BTRFS info (device loop3): turning on async discard [ 587.139059][T17829] BTRFS info (device loop3): enabling free space tree [ 587.322613][ T5849] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 587.544243][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5192'. [ 587.587414][T17848] loop0: detected capacity change from 0 to 32768 [ 588.012874][T17901] loop1: detected capacity change from 0 to 2048 [ 588.131457][T17907] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.196375][T17901] syz.1.5195: attempt to access beyond end of device [ 588.196375][T17901] loop1: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048 [ 588.332276][T17901] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 588.361400][T17901] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 588.419928][T17901] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 588.471086][T17901] Remounting filesystem read-only [ 588.509608][T17901] NILFS (loop1): error -5 truncating bmap (ino=16) [ 588.525991][T17911] loop0: detected capacity change from 0 to 4096 [ 588.587203][T17911] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 588.663042][ T5841] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 588.709986][T17911] ntfs3(loop0): Inode r=19 is not in use! [ 588.735723][T17911] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 588.808568][T17911] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 588.882350][T17911] ntfs3(loop0): ino=1b, mi_enum_attr [ 588.892584][T17911] ntfs3(loop0): ino=1b, mi_enum_attr [ 589.594084][T17953] netlink: 'syz.0.5221': attribute type 10 has an invalid length. [ 589.628573][T17953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.649988][T17922] loop3: detected capacity change from 0 to 32768 [ 589.661457][T17953] team0: Port device bond0 added [ 589.749642][T17922] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 589.947549][T17966] loop4: detected capacity change from 0 to 1764 [ 590.008515][T17966] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 590.057163][T17941] loop1: detected capacity change from 0 to 32768 [ 590.082667][T17966] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 590.104598][T17941] btrfs: Deprecated parameter 'usebackuproot' [ 590.110784][T17941] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 590.142871][T17922] XFS (loop3): Ending clean mount [ 590.168931][T17922] XFS (loop3): Quotacheck needed: Please wait. [ 590.188278][T17941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5216 (17941) [ 590.321523][T17941] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 590.339228][T17922] XFS (loop3): Quotacheck: Done. [ 590.401020][T17941] BTRFS info (device loop1): using crc32c checksum algorithm [ 590.487998][T17990] loop2: detected capacity change from 0 to 256 [ 590.514528][T17990] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 590.578892][ T58] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 590.609165][ T5849] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 590.619899][T17941] BTRFS error (device loop1): failed to load root extent [ 590.685739][T17941] BTRFS warning (device loop1): try to load backup roots slot 1 [ 590.733639][T17941] BTRFS info (device loop1): setting nodatasum [ 590.740401][T17941] BTRFS info (device loop1): setting nodatacow [ 590.755285][T17941] BTRFS info (device loop1): turning on flush-on-commit [ 590.762842][T17941] BTRFS info (device loop1): turning on sync discard [ 590.783187][T17941] BTRFS info (device loop1): enabling free space tree [ 590.790023][T17941] BTRFS info (device loop1): force clearing of disk cache [ 590.827736][T17941] BTRFS info (device loop1): trying to use backup root at mount time [ 590.939040][T18006] loop0: detected capacity change from 0 to 8 [ 591.005664][T18006] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 591.044887][ T5841] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 591.064741][ T6059] udevd[6059]: incorrect cramfs checksum on /dev/loop0 [ 591.132221][ T6058] udevd[6058]: incorrect cramfs checksum on /dev/loop0 [ 591.156708][T18006] cramfs: Error -3 while decompressing! [ 591.176984][T18006] cramfs: ffffffff9a3bbc68(26)->ffff88806c3eb000(4096) [ 591.184515][T18006] cramfs: Error -3 while decompressing! [ 591.190226][T18006] cramfs: ffffffff9a3bbc82(26)->ffff8880749ed000(4096) [ 591.200681][T18006] cramfs: Error -3 while decompressing! [ 591.206645][T18006] cramfs: ffffffff9a3bbc9c(16)->ffff88804d932000(4096) [ 591.214737][T18006] cramfs: Error -3 while decompressing! [ 591.220430][T18006] cramfs: ffffffff9a3bbc68(26)->ffff88806c3eb000(4096) [ 591.986702][ T5921] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 592.042259][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 592.042278][ T29] audit: type=1326 audit(606.162:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18044 comm="syz.3.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 592.106005][ T29] audit: type=1326 audit(606.195:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18044 comm="syz.3.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 592.129713][ T29] audit: type=1326 audit(606.195:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18044 comm="syz.3.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 592.179618][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 592.189229][ T29] audit: type=1326 audit(606.195:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18044 comm="syz.3.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 592.238114][ T29] audit: type=1326 audit(606.195:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18044 comm="syz.3.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbeff9c629 code=0x7ffc0000 [ 592.286892][ T5921] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 592.297268][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.316748][ T5921] usb 2-1: Product: syz [ 592.321009][ T5921] usb 2-1: Manufacturer: syz [ 592.340025][ T5921] usb 2-1: SerialNumber: syz [ 592.376690][ T5921] usb 2-1: config 0 descriptor?? [ 592.409138][ T5921] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 592.452876][T18055] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5254'. [ 592.463684][T18055] 0ªX¹¦À: renamed from caif0 [ 592.476782][T18055] 0ªX¹¦À: entered allmulticast mode [ 592.484565][T18055] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 592.673533][T18066] loop0: detected capacity change from 0 to 16 [ 592.697308][T18066] erofs (device loop0): mounted with root inode @ nid 36. [ 592.735498][T18066] erofs (device loop0): inconsistent algorithmtype 1 for nid 89 [ 592.766902][ T5921] gspca_sonixj: reg_r err -71 [ 592.777834][ T5921] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 592.793623][T18066] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 592.813197][ T5921] usb 2-1: USB disconnect, device number 110 [ 592.851760][T18066] erofs (device loop0): inconsistent algorithmtype 1 for nid 89 [ 592.888328][T18066] erofs (device loop0): inconsistent algorithmtype 1 for nid 89 [ 592.898676][T18066] erofs (device loop0): read error -117 @ 1 of nid 89 [ 592.906294][ T29] audit: type=1800 audit(607.085:64): pid=18066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5257" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 593.035614][T18074] netlink: 'syz.3.5262': attribute type 21 has an invalid length. [ 593.043872][T18074] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5262'. [ 593.076515][T18074] netlink: 'syz.3.5262': attribute type 5 has an invalid length. [ 593.084309][T18074] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5262'. [ 593.180274][T18077] loop0: detected capacity change from 0 to 512 [ 593.239353][T18077] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5261: inode has both inline data and extents flags [ 593.281213][T18077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 593.284456][T18077] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5261: couldn't read orphan inode 15 (err -117) [ 593.293734][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 593.293758][ C1] EXT4-fs (loop0): initial error at time 607: ext4_orphan_get:1391: inode 15 [ 593.293791][ C1] EXT4-fs (loop0): last error at time 607: ext4_orphan_get:1391: inode 15 [ 593.394759][T18087] netlink: 'syz.2.5266': attribute type 11 has an invalid length. [ 593.407116][T18087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5266'. [ 593.409425][T18077] loop0: lost filesystem error report for type 5 error -117 [ 593.460475][T18077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.637818][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.110591][T18115] autofs: Bad value for 'fd' [ 594.232071][ T5921] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 594.323391][T18119] loop1: detected capacity change from 0 to 4096 [ 594.351181][T18119] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 594.362752][ T29] audit: type=1326 audit(608.651:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18126 comm="syz.0.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24c79c629 code=0x7ffc0000 [ 594.415510][T18119] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 594.427898][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 594.445764][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 594.463551][ T29] audit: type=1326 audit(608.651:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18126 comm="syz.0.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24c79c629 code=0x7ffc0000 [ 594.489601][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 594.504445][T18119] ntfs3(loop1): ino=19, mi_enum_attr [ 594.510707][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 594.548875][ T29] audit: type=1326 audit(608.684:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18126 comm="syz.0.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24c79c629 code=0x7ffc0000 [ 594.597226][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 51093, setting to 1024 [ 594.626126][ T5921] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 594.637576][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.651372][ T29] audit: type=1326 audit(608.684:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18126 comm="syz.0.5286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24c79c629 code=0x7ffc0000 [ 594.687124][ T5921] usb 3-1: Product: syz [ 594.703204][ T5921] usb 3-1: Manufacturer: syz [ 594.721162][ T5921] usb 3-1: SerialNumber: syz [ 594.762080][ T5921] usb 3-1: config 0 descriptor?? [ 594.793036][T18113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 594.804559][T18137] loop3: detected capacity change from 0 to 64 [ 594.828944][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input49 [ 595.093543][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 595.115853][ T5921] usb 3-1: USB disconnect, device number 115 [ 595.115853][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 595.306431][T18151] loop4: detected capacity change from 0 to 128 [ 595.355353][T18151] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 595.401965][T18151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.951660][T18141] syz.0.5293 (18141): drop_caches: 2 [ 596.320418][T18190] kAFS: Can only specify source 'none' with -o dyn [ 596.353283][T18194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5317'. [ 596.453205][T18193] loop1: detected capacity change from 0 to 4096 [ 596.514415][T18201] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.912867][T18212] netlink: 'syz.0.5326': attribute type 62 has an invalid length. [ 597.307886][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.368345][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.430116][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.456827][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.468371][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.477804][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.489465][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.525860][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.537325][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.548789][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 597.697165][T18243] loop1: detected capacity change from 0 to 1024 [ 597.787236][T18213] loop4: detected capacity change from 0 to 32768 [ 597.808266][T18213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5327 (18213) [ 597.838196][T18243] hfsplus: keylen 65060 too large [ 597.850293][T18213] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 597.921092][T18213] BTRFS info (device loop4): using sha256 checksum algorithm [ 598.146675][T18213] BTRFS info (device loop4): enabling ssd optimizations [ 598.153805][T18213] BTRFS info (device loop4): turning on async discard [ 598.212139][T18213] BTRFS info (device loop4): enabling free space tree [ 598.588371][ T5848] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.626714][ T5981] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 598.642331][T18286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.817559][ T5981] usb 2-1: Using ep0 maxpacket: 8 [ 598.843203][ T5981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 598.893988][ T5981] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 598.917970][ T5981] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 598.969274][ T5981] usb 2-1: Product: syz [ 598.973595][ T5981] usb 2-1: Manufacturer: syz [ 599.008185][ T5981] usb 2-1: SerialNumber: syz [ 599.068484][T18294] loop2: detected capacity change from 0 to 256 [ 599.215910][T18298] loop3: detected capacity change from 0 to 16 [ 599.232421][ T5981] usb 2-1: Invalid connection information received from device [ 599.242607][T18272] loop0: detected capacity change from 0 to 40427 [ 599.292824][T18298] erofs (device loop3): mounted with root inode @ nid 36. [ 599.301398][T18272] F2FS-fs (loop0): Image doesn't support compression [ 599.308489][T18272] F2FS-fs (loop0): build fault injection rate: 690 [ 599.321243][T18298] syz.3.5361: attempt to access beyond end of device [ 599.321243][T18298] loop3: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 599.340676][T18272] F2FS-fs (loop0): invalid crc value [ 599.393549][T18298] syz.3.5361: attempt to access beyond end of device [ 599.393549][T18298] loop3: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 599.455881][ T5981] usb 2-1: USB disconnect, device number 111 [ 599.475643][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 599.475661][ T29] audit: type=1800 audit(614.134:74): pid=18298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5361" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 599.633818][T18272] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 599.654155][T18272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 599.796932][T18272] F2FS-fs (loop0): Image doesn't support compression [ 599.853722][T18272] F2FS-fs (loop0): build fault injection rate: 690 [ 599.936433][ T29] audit: type=1326 audit(614.617:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 600.011914][ T29] audit: type=1326 audit(614.649:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 600.104111][ T29] audit: type=1326 audit(614.649:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 600.171836][T18323] loop2: detected capacity change from 0 to 64 [ 600.197621][ T29] audit: type=1326 audit(614.649:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 600.226293][T18323] hfs: unable to locate alternate MDB [ 600.231725][T18323] hfs: continuing without an alternate MDB [ 600.244602][ T29] audit: type=1326 audit(614.649:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 600.270257][ T29] audit: type=1326 audit(614.649:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 600.398200][ T3003] [ 600.400590][ T3003] ====================================================== [ 600.407727][ T3003] WARNING: possible circular locking dependency detected [ 600.414785][ T3003] syzkaller #0 Not tainted [ 600.419223][ T3003] ------------------------------------------------------ [ 600.426267][ T3003] kworker/u8:9/3003 is trying to acquire lock: [ 600.432449][ T3003] ffff888053b10778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 600.443334][ T3003] [ 600.443334][ T3003] but task is already holding lock: [ 600.450830][ T3003] ffff88807d96e0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 600.460447][ T3003] [ 600.460447][ T3003] which lock already depends on the new lock. [ 600.460447][ T3003] [ 600.470871][ T3003] [ 600.470871][ T3003] the existing dependency chain (in reverse order) is: [ 600.480014][ T3003] [ 600.480014][ T3003] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 600.488148][ T3003] __mutex_lock+0x19f/0x1300 [ 600.493286][ T3003] hfs_find_init+0x18e/0x300 [ 600.498416][ T3003] hfs_get_block+0x556/0xc50 [ 600.503554][ T3003] block_read_full_folio+0x29f/0x830 [ 600.509407][ T3003] filemap_read_folio+0x137/0x3b0 [ 600.515093][ T3003] do_read_cache_folio+0x358/0x590 [ 600.520748][ T3003] read_cache_page+0x5d/0x170 [ 600.525963][ T3003] __hfs_bnode_create+0x4b9/0x980 [ 600.531527][ T3003] hfs_bnode_find+0x211/0xd40 [ 600.536745][ T3003] hfs_brec_find+0x17b/0x510 [ 600.541877][ T3003] hfs_brec_read+0x24/0x110 [ 600.547090][ T3003] hfs_cat_find_brec+0x177/0x3f0 [ 600.552570][ T3003] hfs_fill_super+0x4ff/0x770 [ 600.557795][ T3003] get_tree_bdev_flags+0x431/0x4f0 [ 600.563552][ T3003] vfs_get_tree+0x92/0x2a0 [ 600.568509][ T3003] do_new_mount+0x341/0xd30 [ 600.573570][ T3003] __se_sys_mount+0x31d/0x420 [ 600.578879][ T3003] do_syscall_64+0x14d/0xf80 [ 600.584107][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.590626][ T3003] [ 600.590626][ T3003] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 600.599860][ T3003] __lock_acquire+0x15a5/0x2cf0 [ 600.605260][ T3003] lock_acquire+0xf0/0x2e0 [ 600.610222][ T3003] __mutex_lock+0x19f/0x1300 [ 600.615362][ T3003] hfs_extend_file+0xf2/0x15e0 [ 600.620675][ T3003] hfs_bmap_reserve+0x107/0x430 [ 600.626076][ T3003] __hfs_ext_write_extent+0x1fa/0x470 [ 600.632097][ T3003] hfs_ext_write_extent+0x17e/0x210 [ 600.637918][ T3003] hfs_write_inode+0x117/0x960 [ 600.643226][ T3003] __writeback_single_inode+0x75a/0x11a0 [ 600.649404][ T3003] writeback_sb_inodes+0x992/0x1a20 [ 600.655152][ T3003] wb_writeback+0x456/0xb70 [ 600.660195][ T3003] wb_workfn+0x414/0xf50 [ 600.664986][ T3003] process_one_work+0x949/0x1650 [ 600.670467][ T3003] worker_thread+0xb46/0x1140 [ 600.675700][ T3003] kthread+0x388/0x470 [ 600.680313][ T3003] ret_from_fork+0x51e/0xb90 [ 600.685521][ T3003] ret_from_fork_asm+0x1a/0x30 [ 600.690825][ T3003] [ 600.690825][ T3003] other info that might help us debug this: [ 600.690825][ T3003] [ 600.701089][ T3003] Possible unsafe locking scenario: [ 600.701089][ T3003] [ 600.708560][ T3003] CPU0 CPU1 [ 600.713951][ T3003] ---- ---- [ 600.719339][ T3003] lock(&tree->tree_lock#2/1); [ 600.724227][ T3003] lock(&HFS_I(tree->inode)->extents_lock); [ 600.732745][ T3003] lock(&tree->tree_lock#2/1); [ 600.740153][ T3003] lock(&HFS_I(tree->inode)->extents_lock); [ 600.746255][ T3003] [ 600.746255][ T3003] *** DEADLOCK *** [ 600.746255][ T3003] [ 600.754410][ T3003] 3 locks held by kworker/u8:9/3003: [ 600.759724][ T3003] #0: ffff888020ab6148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 600.770532][ T3003] #1: ffffc9000cddfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 600.782416][ T3003] #2: ffff88807d96e0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 600.792469][ T3003] [ 600.792469][ T3003] stack backtrace: [ 600.798385][ T3003] CPU: 1 UID: 0 PID: 3003 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 600.798408][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.798420][ T3003] Workqueue: writeback wb_workfn (flush-7:2) [ 600.798448][ T3003] Call Trace: [ 600.798456][ T3003] [ 600.798465][ T3003] dump_stack_lvl+0xe8/0x150 [ 600.798491][ T3003] print_circular_bug+0x2e1/0x300 [ 600.798522][ T3003] check_noncircular+0x12e/0x150 [ 600.798552][ T3003] __lock_acquire+0x15a5/0x2cf0 [ 600.798576][ T3003] ? unwind_next_frame+0x1aaf/0x23c0 [ 600.798605][ T3003] ? unwind_next_frame+0xa5/0x23c0 [ 600.798630][ T3003] ? ret_from_fork_asm+0x1a/0x30 [ 600.798646][ T3003] ? ret_from_fork_asm+0x1a/0x30 [ 600.798664][ T3003] lock_acquire+0xf0/0x2e0 [ 600.798685][ T3003] ? hfs_extend_file+0xf2/0x15e0 [ 600.798711][ T3003] __mutex_lock+0x19f/0x1300 [ 600.798735][ T3003] ? hfs_extend_file+0xf2/0x15e0 [ 600.798763][ T3003] ? check_path+0x21/0x40 [ 600.798786][ T3003] ? check_noncircular+0xda/0x150 [ 600.798812][ T3003] ? add_lock_to_list+0xc7/0x100 [ 600.798837][ T3003] ? hfs_extend_file+0xf2/0x15e0 [ 600.798860][ T3003] ? __pfx___mutex_lock+0x10/0x10 [ 600.798884][ T3003] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 600.798912][ T3003] hfs_extend_file+0xf2/0x15e0 [ 600.798934][ T3003] ? __pfx___mutex_trylock_common+0x10/0x10 [ 600.798953][ T3003] ? __pfx_hfs_extend_file+0x10/0x10 [ 600.798974][ T3003] ? trace_contention_end+0x3d/0x150 [ 600.798991][ T3003] ? __mutex_lock+0x319/0x1300 [ 600.799019][ T3003] ? __asan_memset+0x22/0x50 [ 600.799034][ T3003] ? hfs_brec_find+0x19a/0x510 [ 600.799053][ T3003] hfs_bmap_reserve+0x107/0x430 [ 600.799080][ T3003] __hfs_ext_write_extent+0x1fa/0x470 [ 600.799104][ T3003] hfs_ext_write_extent+0x17e/0x210 [ 600.799127][ T3003] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 600.799156][ T3003] hfs_write_inode+0x117/0x960 [ 600.799181][ T3003] ? __pfx_hfs_write_inode+0x10/0x10 [ 600.799207][ T3003] ? __pfx_hfs_writepages+0x10/0x10 [ 600.799235][ T3003] ? do_raw_spin_unlock+0xf5/0x210 [ 600.799254][ T3003] __writeback_single_inode+0x75a/0x11a0 [ 600.799281][ T3003] writeback_sb_inodes+0x992/0x1a20 [ 600.799315][ T3003] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 600.799336][ T3003] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.799369][ T3003] ? rcu_is_watching+0x15/0xb0 [ 600.799398][ T3003] wb_writeback+0x456/0xb70 [ 600.799421][ T3003] ? queue_io+0x231/0x4a0 [ 600.799445][ T3003] ? __pfx_wb_writeback+0x10/0x10 [ 600.799465][ T3003] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.799489][ T3003] wb_workfn+0x414/0xf50 [ 600.799509][ T3003] ? look_up_lock_class+0x57/0x110 [ 600.799538][ T3003] ? __pfx_wb_workfn+0x10/0x10 [ 600.799556][ T3003] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.799575][ T3003] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 600.799601][ T3003] ? process_one_work+0x87c/0x1650 [ 600.799624][ T3003] process_one_work+0x949/0x1650 [ 600.799656][ T3003] ? __pfx_process_one_work+0x10/0x10 [ 600.799678][ T3003] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.799703][ T3003] worker_thread+0xb46/0x1140 [ 600.799754][ T3003] kthread+0x388/0x470 [ 600.799771][ T3003] ? __pfx_worker_thread+0x10/0x10 [ 600.799794][ T3003] ? __pfx_kthread+0x10/0x10 [ 600.799811][ T3003] ret_from_fork+0x51e/0xb90 [ 600.799841][ T3003] ? __pfx_ret_from_fork+0x10/0x10 [ 600.799863][ T3003] ? __switch_to+0xc7d/0x1450 [ 600.799884][ T3003] ? __pfx_kthread+0x10/0x10 [ 600.799901][ T3003] ret_from_fork_asm+0x1a/0x30 [ 600.799923][ T3003] [ 601.140537][ T29] audit: type=1326 audit(614.670:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 601.162313][ T29] audit: type=1326 audit(614.670:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 601.184789][ T29] audit: type=1326 audit(614.670:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.2.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8128b9c629 code=0x7ffc0000 [ 601.483525][T18335] loop2: detected capacity change from 0 to 32768 [ 601.510878][T18335] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 601.541606][T18335] XFS (loop2): Ending clean mount [ 601.575152][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 609.055661][ T1306] ieee802154 phy1 wpan1: encryption failed: -22