last executing test programs: 2.795892064s ago: executing program 3 (id=7129): syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000280)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@nobarrier}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@user_subvol_rm}, {@discard_async}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) 2.480304988s ago: executing program 1 (id=7137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x44}}, 0x0) 2.356251189s ago: executing program 1 (id=7140): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.218604347s ago: executing program 1 (id=7144): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x32315659, 0x7, 0x0, [{}, {0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {0x80000000, 0xffff}]}}) 2.084092977s ago: executing program 1 (id=7147): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1.898426466s ago: executing program 1 (id=7150): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @init={0x18, 0x84, 0x0, {0x897b, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0xb, 0xfffffffe, 0xff}}], 0x50, 0x4014}, 0x2c0408d0) 1.347125665s ago: executing program 1 (id=7160): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) 1.25821333s ago: executing program 3 (id=7162): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2c6, &(0x7f0000000a00)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x36) 1.131207758s ago: executing program 3 (id=7166): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 972.968645ms ago: executing program 4 (id=7168): r0 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x800, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) 887.990895ms ago: executing program 3 (id=7171): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) 819.496239ms ago: executing program 4 (id=7172): r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 772.709733ms ago: executing program 0 (id=7173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000100020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) 719.245089ms ago: executing program 2 (id=7174): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x2}}) 715.007266ms ago: executing program 3 (id=7175): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b02d25a80648c2594f90524fc60100c060003000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 657.107715ms ago: executing program 2 (id=7176): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x10}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) 603.27676ms ago: executing program 4 (id=7177): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) 589.314274ms ago: executing program 0 (id=7178): r0 = syz_open_procfs(0x0, &(0x7f0000000600)='mountstats\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 490.212619ms ago: executing program 4 (id=7179): unshare(0x22020400) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) 489.776415ms ago: executing program 3 (id=7180): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 448.761399ms ago: executing program 2 (id=7181): r0 = io_uring_setup(0x23b2, &(0x7f0000000080)={0x0, 0x3256, 0x80, 0x3, 0x92}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000180)=[{0xf00, 0x0, 0x0, 0x0, &(0x7f0000000280)}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) 397.311968ms ago: executing program 2 (id=7182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005880)=@newtaction={0x18, 0x31, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 368.563209ms ago: executing program 0 (id=7183): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@t={0x81, 0x5, 0x0, 0x0, @generic=0x6}, @t={0x81, 0x6, 0x0, 0x0, @generic=0xffff}], 0x10) 274.307365ms ago: executing program 2 (id=7184): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa1a, 0xcf6, 0x34324258, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x4}}) 252.426023ms ago: executing program 4 (id=7185): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000006c0)={0x1, 0xdf, @start={0x0, 0x0, "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", "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"}, [0x8, 0x8, 0x5, 0xffffffff, 0xea9, 0x0, 0x3, 0x3, 0x96f, 0x8000000000000001, 0x4, 0xfb, 0x5, 0x7398, 0x8, 0x400, 0x8, 0x8, 0x100000001, 0xf, 0x800, 0x5, 0x8, 0x10000, 0x2, 0x3a8, 0xfffffffffffffffe, 0x284f, 0x1, 0x0, 0x4, 0xec, 0x2, 0x7fffffff, 0x5, 0x2, 0x8, 0x3, 0x1, 0x0, 0x2, 0x4, 0x3, 0x0, 0x68, 0x746, 0x2, 0x2, 0xe, 0x7, 0x5, 0xb, 0x9, 0x2a4f, 0x6, 0x8001, 0x7, 0x4, 0x32119658, 0x100, 0x0, 0xfffffffffffffff1, 0xbf8f, 0x8]}) 181.729356ms ago: executing program 0 (id=7186): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000240)) 117.944992ms ago: executing program 0 (id=7187): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="025e80a14bd92f034800b5bc738baa07", 0x10}, {0x0}], 0x2}, 0x4004010) 74.000928ms ago: executing program 2 (id=7188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100021fdfffffffffadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700000000000a000100aa"], 0x48}}, 0x0) 31.330426ms ago: executing program 0 (id=7189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000040)=""/128}, 0x20) 0s ago: executing program 4 (id=7190): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma') kernel console output (not intermixed with test programs): utor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 491.221754][ T30] audit: type=1326 audit(1758925647.977:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 491.297604][ T30] audit: type=1326 audit(1758925647.977:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 491.408640][ T30] audit: type=1326 audit(1758925647.977:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 491.498150][ T30] audit: type=1326 audit(1758925647.977:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 491.543887][T17133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4993'. [ 491.698044][T17141] netlink: 'syz.0.4997': attribute type 21 has an invalid length. [ 491.740440][T17141] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4997'. [ 491.749571][T17141] netlink: 'syz.0.4997': attribute type 5 has an invalid length. [ 491.774554][T17146] sctp: [Deprecated]: syz.1.4999 (pid 17146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.774554][T17146] Use struct sctp_sack_info instead [ 491.804379][T17141] netlink: 'syz.0.4997': attribute type 6 has an invalid length. [ 491.858415][T17141] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4997'. [ 491.905644][T17149] batadv0: entered promiscuous mode [ 492.707286][T17193] overlayfs: missing 'lowerdir' [ 493.128315][T17216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5034'. [ 493.450740][T17234] loop2: detected capacity change from 0 to 512 [ 493.467850][T17234] EXT4-fs: Ignoring removed oldalloc option [ 493.501221][T17234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.554749][T17234] EXT4-fs (loop2): 1 truncate cleaned up [ 493.607615][T17234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.896680][ T5863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.120422][T17260] loop2: detected capacity change from 0 to 2048 [ 494.155919][T17255] loop1: detected capacity change from 0 to 4096 [ 494.165141][T17260] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 494.242614][T17264] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.254789][ T5918] udevd[5918]: incorrect nilfs2 checksum on /dev/loop2 [ 494.292562][T17260] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 494.328675][T17260] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 494.434876][T17260] Remounting filesystem read-only [ 494.449939][T17260] NILFS (loop2): error -5 truncating bmap (ino=15) [ 494.472321][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5057'. [ 494.572134][ T5863] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 494.644965][T17280] netlink: 'syz.3.5060': attribute type 4 has an invalid length. [ 495.180490][T17304] netlink: 'syz.3.5074': attribute type 2 has an invalid length. [ 495.269170][T17304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5074'. [ 495.333375][T17312] netlink: 'syz.1.5077': attribute type 12 has an invalid length. [ 495.344246][T17313] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5078'. [ 495.405953][T17270] loop4: detected capacity change from 0 to 32768 [ 495.491411][T17270] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 495.632853][T17270] XFS (loop4): Ending clean mount [ 495.663960][T17270] XFS (loop4): Quotacheck needed: Please wait. [ 495.831038][T17270] XFS (loop4): Quotacheck: Done. [ 495.963339][ T5872] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 496.533665][T17365] loop2: detected capacity change from 0 to 1024 [ 496.881342][T17380] autofs4:pid:17380:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 496.917986][T17380] autofs4:pid:17380:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 497.187617][T17394] process 'syz.0.5114' launched './file0' with NULL argv: empty string added [ 497.288569][T17397] loop1: detected capacity change from 0 to 2048 [ 497.422636][T17397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.862587][T17425] QAT: failed to copy from user cfg_data. [ 497.992564][T17433] loop1: detected capacity change from 0 to 256 [ 498.064269][T17433] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.336009][T17447] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5141'. [ 498.463011][T17457] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.5146'. [ 498.543330][ T5983] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 498.737830][ T5983] usb 1-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60 [ 498.762347][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.793586][ T5983] usb 1-1: Product: syz [ 498.798083][ T5983] usb 1-1: Manufacturer: syz [ 498.812232][ T5983] usb 1-1: SerialNumber: syz [ 498.816181][ T5983] usb 1-1: config 0 descriptor?? [ 498.824232][ T5983] cp210x 1-1:0.0: cp210x converter detected [ 499.021117][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5158'. [ 499.059949][ T5983] usb 1-1: cp210x converter now attached to ttyUSB0 [ 499.237786][T17493] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 499.289746][ T5983] usb 1-1: USB disconnect, device number 122 [ 499.317622][ T5983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.348227][ T5983] cp210x 1-1:0.0: device disconnected [ 500.402352][ T5983] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 500.433620][T17558] loop4: detected capacity change from 0 to 512 [ 500.446046][T17558] EXT4-fs: Ignoring removed nobh option [ 500.505383][T17558] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.5195: corrupted inode contents [ 500.580537][T17558] EXT4-fs (loop4): Remounting filesystem read-only [ 500.588821][ T5983] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 500.611764][T17570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5200'. [ 500.625158][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.638031][T17570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5200'. [ 500.655018][T17558] __quota_error: 5 callbacks suppressed [ 500.655036][T17558] Quota error (device loop4): write_blk: dquota write failed [ 500.669981][ T5983] usb 4-1: Product: syz [ 500.674174][ T5983] usb 4-1: Manufacturer: syz [ 500.693148][T17558] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 500.703629][ T5983] usb 4-1: SerialNumber: syz [ 500.726469][ T5983] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 500.734931][T17558] EXT4-fs (loop4): 1 truncate cleaned up [ 500.742792][T17558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.756148][T17558] ext4 filesystem being mounted at /1089/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.783145][ T5870] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.907816][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.265192][ T1071] usb 4-1: USB disconnect, device number 3 [ 501.916680][T17625] netlink: 'syz.3.5227': attribute type 4 has an invalid length. [ 501.953215][T17625] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5227'. [ 501.984169][ T5870] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 502.005960][ T5870] ath9k_htc: Failed to initialize the device [ 502.021904][T17625] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 502.071752][ T1071] usb 4-1: ath9k_htc: USB layer deinitialized [ 502.257323][T17605] loop4: detected capacity change from 0 to 32768 [ 502.317378][T17605] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5217 (17605) [ 502.394308][T17605] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 502.440276][T17648] netlink: 'syz.0.5238': attribute type 3 has an invalid length. [ 502.455690][T17605] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 502.480942][T17648] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5238'. [ 502.608477][T17665] loop1: detected capacity change from 0 to 512 [ 502.647509][T17665] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 502.685792][T17605] BTRFS info (device loop4 state S): setting nodatasum [ 502.710665][T17665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5242: bg 0: block 104: invalid block bitmap [ 502.750219][T17605] BTRFS info (device loop4 state S): setting nodatacow [ 502.781302][T17665] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 502.791685][T17605] BTRFS info (device loop4 state S): enabling ssd optimizations [ 502.829647][T17665] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5242: invalid indirect mapped block 1 (level 1) [ 502.840548][T17605] BTRFS info (device loop4 state S): turning on flush-on-commit [ 502.889749][T17605] BTRFS info (device loop4 state S): turning on async discard [ 502.898763][T17665] EXT4-fs (loop1): 1 truncate cleaned up [ 502.920143][T17605] BTRFS info (device loop4 state S): enabling free space tree [ 502.943336][T17665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.959065][T17605] BTRFS info (device loop4 state S): ignoring meta csums [ 502.987741][T17605] BTRFS info (device loop4 state S): ignoring unknown super block flags [ 503.158347][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.930093][T17720] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5264'. [ 504.111671][T17729] netlink: 'syz.1.5269': attribute type 13 has an invalid length. [ 504.212150][T17729] gretap0: refused to change device tx_queue_len [ 504.218884][T17729] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.408073][ T5872] BTRFS info (device loop4 state S): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 504.860354][T17755] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 504.860354][T17755] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 505.143167][T17768] cgroup: Unknown subsys name 'cpuset' [ 505.272089][T17739] loop0: detected capacity change from 0 to 32768 [ 505.560679][T17787] loop1: detected capacity change from 0 to 16 [ 505.604687][T17787] erofs (device loop1): mounted with root inode @ nid 36. [ 505.776839][T17793] wg1: entered promiscuous mode [ 505.795836][T17793] wg1: entered allmulticast mode [ 505.825027][T17799] 9pnet_fd: Insufficient options for proto=fd [ 505.992713][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5307'. [ 506.253401][T17808] loop4: detected capacity change from 0 to 4096 [ 506.275456][T17808] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 506.452247][T17808] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 506.479205][T17808] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 506.684178][T17831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5320'. [ 506.904132][ T30] audit: type=1326 audit(1758925663.154:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17841 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 506.970308][ T30] audit: type=1326 audit(1758925663.163:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17841 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 507.064679][ T30] audit: type=1326 audit(1758925663.163:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17841 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 507.156603][ T30] audit: type=1326 audit(1758925663.163:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17841 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 507.225318][ T30] audit: type=1326 audit(1758925663.163:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17841 comm="syz.1.5326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 507.330185][T17859] binder: 17858:17859 ioctl 400c620e 0 returned -14 [ 507.393453][T17863] netlink: 'syz.4.5336': attribute type 2 has an invalid length. [ 507.411363][T17863] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5336'. [ 507.638185][T17877] netlink: 'syz.2.5342': attribute type 12 has an invalid length. [ 507.670837][T17877] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5342'. [ 507.935910][T17889] usb usb8: usbfs: process 17889 (syz.3.5349) did not claim interface 0 before use [ 508.238847][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5360'. [ 508.447269][T17915] loop0: detected capacity change from 0 to 1024 [ 508.473547][T17915] EXT4-fs: inline encryption not supported [ 508.494209][T17915] EXT4-fs: Ignoring removed bh option [ 508.575121][T17915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.641708][T17933] libceph: resolve '. [ 508.641708][T17933] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 508.641708][T17933] ' (ret=-3): failed [ 508.685418][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.909159][T17944] netlink: del zone limit has 4 unknown bytes [ 508.924324][T17929] loop4: detected capacity change from 0 to 8192 [ 509.217622][T17954] nfs: Deprecated parameter 'nointr' [ 509.260668][T17956] netlink: 'syz.3.5381': attribute type 29 has an invalid length. [ 509.568108][T17975] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.898748][T17989] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5396'. [ 510.047243][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5401'. [ 510.069779][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5401'. [ 510.102626][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5401'. [ 510.243375][ T5941] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 510.305250][T18007] IPv6: NLM_F_REPLACE set, but no existing node found! [ 510.440465][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 510.457292][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.466643][ T30] audit: type=1326 audit(1758925666.492:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.3.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 510.501040][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 510.525239][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 510.540887][ T30] audit: type=1326 audit(1758925666.492:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.3.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 510.573015][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.606142][ T5941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 510.629056][ T30] audit: type=1326 audit(1758925666.492:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.3.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 510.670308][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 510.709127][ T5941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 392 [ 510.736776][ T30] audit: type=1326 audit(1758925666.492:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.3.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 510.777485][ T5941] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 510.787019][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.810883][ T5941] usb 3-1: Product: syz [ 510.815802][ T5941] usb 3-1: Manufacturer: syz [ 510.838496][ T5941] usb 3-1: SerialNumber: syz [ 510.856370][ T5941] usb 3-1: config 0 descriptor?? [ 510.876567][T17991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 510.891219][T17991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 510.909755][ T5941] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.101144][T18044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5424'. [ 511.191871][ T5941] usb 3-1: USB disconnect, device number 120 [ 511.273464][T18049] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 511.523463][T18062] netlink: 'syz.3.5434': attribute type 1 has an invalid length. [ 511.546893][T18062] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5434'. [ 511.698891][T18070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5437'. [ 512.149598][T18098] loop1: detected capacity change from 0 to 64 [ 512.251544][T18097] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 512.292911][T18097] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 512.366329][T18102] netlink: 'syz.4.5453': attribute type 10 has an invalid length. [ 513.411761][T18135] netlink: set zone limit has 4 unknown bytes [ 513.838060][T18161] loop4: detected capacity change from 0 to 2048 [ 513.902262][T18161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.475857][T18189] netlink: 'syz.2.5497': attribute type 10 has an invalid length. [ 514.483738][T18189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5497'. [ 514.503976][T18151] loop0: detected capacity change from 0 to 32768 [ 514.551273][T18189] team0: entered promiscuous mode [ 514.554180][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5498'. [ 514.576213][T18189] team_slave_0: entered promiscuous mode [ 514.664891][T18189] team_slave_1: entered promiscuous mode [ 514.684226][T18189] team0: entered allmulticast mode [ 514.720222][T18189] team_slave_0: entered allmulticast mode [ 514.756733][T18189] team_slave_1: entered allmulticast mode [ 514.777430][T18189] bridge0: port 3(team0) entered blocking state [ 514.795368][T18189] bridge0: port 3(team0) entered disabled state [ 515.117315][ T5870] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 515.306797][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 515.367334][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 515.384933][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 515.392966][ T5870] usb 2-1: Product: syz [ 515.419011][T18228] netlink: 'syz.4.5515': attribute type 1 has an invalid length. [ 515.419658][ T5870] usb 2-1: config 0 descriptor?? [ 515.454727][ T5870] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 515.464510][T18228] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5515'. [ 515.473362][ T5870] gspca_stv06xx: st6422 sensor detected [ 515.509563][T18232] loop0: detected capacity change from 0 to 2048 [ 515.517947][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5515'. [ 515.583832][T18232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.691550][T18240] loop2: detected capacity change from 0 to 256 [ 515.701568][T18242] binder: 18241:18242 ioctl c0306201 2000000001c0 returned -22 [ 515.711841][T18240] exfat: Deprecated parameter 'utf8' [ 515.738081][T18240] exfat: Deprecated parameter 'namecase' [ 515.851724][T18240] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 515.982124][ T5870] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 516.019737][ T5870] usb 2-1: USB disconnect, device number 124 [ 516.626354][T18282] kAFS: unable to lookup cell 'mS²jQ€·”œ­=È A4Z1Ë¡8' [ 517.062892][T18275] loop0: detected capacity change from 0 to 32768 [ 517.089154][T18275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5538 (18275) [ 517.154627][T18275] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 517.205391][T18275] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 517.342756][T18312] bridge0: port 3(team0) entered disabled state [ 517.375405][T18312] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 517.406923][T18275] BTRFS info (device loop0): enabling ssd optimizations [ 517.437998][T18275] BTRFS info (device loop0): enabling free space tree [ 517.470014][ T5941] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 517.654643][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 517.669564][ T5941] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 517.694584][ T5941] usb 5-1: config 0 has no interface number 0 [ 517.701086][ T5941] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 517.730774][ T5941] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 517.756132][ T5862] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 517.770497][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.808156][ T5941] usb 5-1: Product: syz [ 517.823163][ T5941] usb 5-1: Manufacturer: syz [ 517.823186][ T5941] usb 5-1: SerialNumber: syz [ 517.883384][ T5941] usb 5-1: config 0 descriptor?? [ 517.887115][T18305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.916352][T18342] netlink: 'syz.1.5564': attribute type 28 has an invalid length. [ 517.935950][T18342] netlink: 'syz.1.5564': attribute type 3 has an invalid length. [ 517.947292][T18342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5564'. [ 518.198834][T18305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 518.421858][ T5941] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 96:bd:ba:d8:e9:64 [ 518.506142][ T5941] usb 5-1: USB disconnect, device number 123 [ 518.538188][ T5941] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 518.562959][ T5870] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 518.575659][T18362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5573'. [ 518.776577][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.811819][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.833866][ T5870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 518.852202][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 518.881637][ T5870] usb 1-1: SerialNumber: syz [ 518.919290][ T5870] usb 1-1: 0:2 : does not exist [ 519.076434][ T1071] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 519.208184][ T30] audit: type=1326 audit(1758925674.665:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.3.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 519.232415][T18384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5583'. [ 519.252648][ T30] audit: type=1326 audit(1758925674.665:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.3.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 519.262855][ T1071] usb 2-1: unable to get BOS descriptor or descriptor too short [ 519.298840][ T30] audit: type=1326 audit(1758925674.684:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.3.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 519.305167][ T1071] usb 2-1: config 3 has an invalid interface number: 8 but max is 3 [ 519.336814][ T1071] usb 2-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 519.347439][ T1071] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 519.357453][ T5963] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 519.382032][ T30] audit: type=1326 audit(1758925674.684:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.3.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 519.386758][ T1071] usb 2-1: config 3 has no interface number 0 [ 519.411598][ T30] audit: type=1326 audit(1758925674.684:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.3.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 519.438266][ T5870] usb 1-1: USB disconnect, device number 123 [ 519.466714][ T1071] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 519.508894][ T1071] usb 2-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 519.554662][ T1071] usb 2-1: config 3 interface 8 has no altsetting 0 [ 519.568966][ T1071] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 519.587012][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.596818][ T1071] usb 2-1: Product: syz [ 519.603526][ T1071] usb 2-1: Manufacturer: syz [ 519.608551][ T1071] usb 2-1: SerialNumber: syz [ 519.613660][ T5963] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 519.631300][ T5963] usb 3-1: config 5 has no interface number 0 [ 519.637627][ T5963] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 519.661558][ T5963] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x89 has invalid maxpacket 8981, setting to 64 [ 519.699634][ T5963] usb 3-1: config 5 interface 123 has no altsetting 0 [ 519.723092][ T5963] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 519.735928][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.745055][ T5963] usb 3-1: Product: syz [ 519.767543][ T5963] usb 3-1: Manufacturer: syz [ 519.777539][ T5963] usb 3-1: SerialNumber: syz [ 519.789339][T18381] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 519.890551][ T1071] appledisplay 2-1:3.8: Error while getting initial brightness: -71 [ 519.916910][ T1071] appledisplay 2-1:3.8: probe with driver appledisplay failed with error -71 [ 519.943009][ T1071] usbhid 2-1:3.8: can't add hid device: -22 [ 519.962360][ T1071] usbhid 2-1:3.8: probe with driver usbhid failed with error -22 [ 519.977586][ T1071] usb 2-1: USB disconnect, device number 125 [ 520.095792][ T5963] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 520.130748][ T5963] usb 3-1: USB disconnect, device number 121 [ 520.696708][T18433] loop1: detected capacity change from 0 to 512 [ 520.776613][T18433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.875241][T18433] ext4 filesystem being mounted at /1081/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.902913][T18444] netlink: 'syz.2.5609': attribute type 46 has an invalid length. [ 520.944382][T18444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5609'. [ 520.999190][T18448] netlink: 'syz.4.5610': attribute type 1 has an invalid length. [ 521.028151][T18433] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.5605: corrupted xattr block 6: invalid header [ 521.195055][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.397363][T18458] loop1: detected capacity change from 0 to 1764 [ 521.553479][T18464] netlink: 'syz.2.5621': attribute type 3 has an invalid length. [ 521.572954][T18464] tc_dump_action: action bad kind [ 521.606700][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5624'. [ 521.885898][T18447] loop0: detected capacity change from 0 to 32768 [ 521.903398][T18447] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5612 (18447) [ 521.986081][T18447] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 522.025971][T18447] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 522.261405][T18447] BTRFS info (device loop0): rebuilding free space tree [ 522.324498][T18447] BTRFS info (device loop0): disabling free space tree [ 522.346581][T18447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 522.399908][T18447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 522.458713][T18447] BTRFS info (device loop0): enabling ssd optimizations [ 522.503122][T18515] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5638'. [ 522.519958][T18447] BTRFS info (device loop0): turning on flush-on-commit [ 522.553530][T18447] BTRFS info (device loop0): force clearing of disk cache [ 522.563853][T18509] veth3: entered allmulticast mode [ 522.822910][ T5862] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 524.175844][ T1071] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 524.357578][ T1071] usb 1-1: Using ep0 maxpacket: 8 [ 524.372855][ T1071] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.430584][ T1071] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.477254][ T1071] usb 1-1: config 0 interface 0 has no altsetting 0 [ 524.486352][ T1071] usb 1-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 524.549483][ T1071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.586629][ T1071] usb 1-1: config 0 descriptor?? [ 524.865352][ T1071] usbhid 1-1:0.0: can't add hid device: -71 [ 524.902692][ T1071] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 524.934999][ T1071] usb 1-1: USB disconnect, device number 124 [ 524.981589][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 525.162465][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 525.174539][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 525.193626][ T9] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 525.223546][ T9] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 525.233243][ T9] usb 3-1: Product: syz [ 525.237852][ T9] usb 3-1: Manufacturer: syz [ 525.266944][ T9] usb 3-1: SerialNumber: syz [ 525.397058][T18649] vlan0: entered promiscuous mode [ 525.503741][ T9] usb 3-1: Invalid connection information received from device [ 525.579377][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5704'. [ 525.623031][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5704'. [ 525.733071][ T5926] usb 3-1: USB disconnect, device number 122 [ 526.167771][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5721'. [ 526.217756][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5721'. [ 526.288638][T18693] loop0: detected capacity change from 0 to 512 [ 526.338696][T18693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.386834][T18693] ext4 filesystem being mounted at /1194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.421660][T18703] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.5728'. [ 526.431024][T18703] netlink: zone id is out of range [ 526.504790][T18693] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #2: comm syz.0.5724: corrupted inode contents [ 526.571780][T18693] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #2: comm syz.0.5724: mark_inode_dirty error [ 526.653332][T18693] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #2: comm syz.0.5724: corrupted inode contents [ 526.711145][T18693] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.5724: mark_inode_dirty error [ 526.711277][T18714] bond0: entered promiscuous mode [ 526.728380][T18714] bond0: entered allmulticast mode [ 526.734306][T18714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.851258][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.332136][T18746] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 527.335778][T18714] bond0 (unregistering): Released all slaves [ 527.351060][T18746] overlayfs: missing 'lowerdir' [ 527.775053][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5757'. [ 527.883874][ T30] audit: type=1326 audit(1758925682.772:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18770 comm="syz.4.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 527.963865][ T30] audit: type=1326 audit(1758925682.772:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18770 comm="syz.4.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 528.057296][ T30] audit: type=1326 audit(1758925682.810:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18770 comm="syz.4.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 528.109673][ T30] audit: type=1326 audit(1758925682.810:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18770 comm="syz.4.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 528.197085][ T30] audit: type=1326 audit(1758925682.810:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18770 comm="syz.4.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 528.720526][ T5926] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 528.733462][ T30] audit: type=1326 audit(1758925683.577:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.0.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 528.781013][ T30] audit: type=1326 audit(1758925683.577:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.0.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 528.824779][ T30] audit: type=1326 audit(1758925683.577:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.0.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 528.851207][ T30] audit: type=1326 audit(1758925683.577:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18813 comm="syz.0.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 528.873571][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.915237][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 528.922283][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.951892][ T5926] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 528.961645][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.983041][ T5926] usb 2-1: Product: syz [ 528.993853][ T5926] usb 2-1: Manufacturer: syz [ 529.012964][ T5926] usb 2-1: SerialNumber: syz [ 529.039465][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5791'. [ 529.052613][ T5926] usb 2-1: config 0 descriptor?? [ 529.074888][ T5926] usb 2-1: bad CDC descriptors [ 529.080583][ T5926] usb 2-1: unsupported MDLM descriptors [ 529.090243][T18831] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5791'. [ 529.292471][ T5926] usb 2-1: USB disconnect, device number 126 [ 529.444195][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.443578][T18902] loop1: detected capacity change from 0 to 128 [ 530.524566][T18902] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 530.576710][T18902] hpfs: filesystem error: improperly stopped [ 530.598290][T18902] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 530.648427][T18902] hpfs: You really don't want any checks? You are crazy... [ 530.675326][T18902] hpfs: hpfs_map_sector(): read error [ 530.698247][T18902] hpfs: code page support is disabled [ 530.731850][T18902] hpfs: hpfs_map_4sectors(): unaligned read [ 530.738098][T18902] hpfs: hpfs_map_4sectors(): unaligned read [ 530.760162][T18902] hpfs: filesystem error: unable to find root dir [ 530.847581][T18922] sctp: [Deprecated]: syz.3.5836 (pid 18922) Use of int in max_burst socket option. [ 530.847581][T18922] Use struct sctp_assoc_value instead [ 531.027902][T18931] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 531.100484][T18935] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5842'. [ 531.171643][T18938] loop2: detected capacity change from 0 to 64 [ 531.255242][T18943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5847'. [ 531.291724][T18943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5847'. [ 531.302769][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5848'. [ 531.351251][T18946] netlink: 'syz.4.5848': attribute type 3 has an invalid length. [ 531.586657][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 531.770361][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 531.790010][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 531.821707][T18975] netlink: 'syz.0.5860': attribute type 27 has an invalid length. [ 531.835440][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 531.858551][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.910786][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 531.928847][ T9] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 531.937217][ T9] usb 2-1: Product: syz [ 531.975247][ T9] usb 2-1: Manufacturer: syz [ 531.979896][ T9] usb 2-1: SerialNumber: syz [ 532.042242][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input65 [ 532.085230][T18982] Zero length message leads to an empty skb [ 532.253031][T18988] loop0: detected capacity change from 0 to 256 [ 532.339706][ T9] usb 2-1: USB disconnect, device number 127 [ 532.372674][T18988] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 532.447207][T18988] FAT-fs (loop0): Filesystem has been set read-only [ 532.452032][ T9] appletouch 2-1:1.0: input: appletouch disconnected [ 532.671469][T19002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5874'. [ 532.694753][T19002] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5874'. [ 532.709043][T19002] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5874'. [ 532.765095][ T30] audit: type=1326 audit(1758925687.345:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19003 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 533.276821][ T5926] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 533.471141][ T5926] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 533.481006][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.511270][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 533.521810][ T5926] usb 5-1: config 1 has no interface number 0 [ 533.528177][ T5926] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 533.540026][ T5926] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 533.561368][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.580254][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.599460][ T5926] usb 5-1: Product: syz [ 533.603768][ T5926] usb 5-1: Manufacturer: syz [ 533.610283][ T5926] usb 5-1: SerialNumber: syz [ 534.122406][ T1071] usb 5-1: USB disconnect, device number 124 [ 534.211833][T19034] loop0: detected capacity change from 0 to 32768 [ 534.312249][T19034] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.486959][T19068] dlm: no locking on control device [ 534.714147][T19078] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 534.763338][T19034] XFS (loop0): Ending clean mount [ 534.922835][ T5862] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.967125][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 534.967144][ T30] audit: type=1326 audit(1758925689.393:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 535.027553][ T30] audit: type=1326 audit(1758925689.393:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 535.058338][ T30] audit: type=1326 audit(1758925689.430:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 535.083274][ T30] audit: type=1326 audit(1758925689.430:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 535.106213][ T30] audit: type=1326 audit(1758925689.430:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.4.5914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 535.128536][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.073794][T19139] delete_channel: no stack [ 536.426313][T19160] netlink: 'syz.1.5949': attribute type 2 has an invalid length. [ 536.440696][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5949'. [ 536.935086][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5961'. [ 537.336524][T19198] loop1: detected capacity change from 0 to 2048 [ 537.384843][T19198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.489968][T19198] EXT4-fs error (device loop1): __ext4_iget:5435: inode #12: block 2: comm syz.1.5968: invalid block [ 537.612068][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.815551][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5977'. [ 538.617787][T19221] loop0: detected capacity change from 0 to 32768 [ 539.090573][T19260] netlink: 'syz.3.5998': attribute type 11 has an invalid length. [ 539.338818][T19272] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 541.152905][T19344] loop1: detected capacity change from 0 to 256 [ 541.221006][T19344] FAT-fs (loop1): Directory bread(block 64) failed [ 541.287566][T19344] FAT-fs (loop1): Directory bread(block 65) failed [ 541.294232][T19344] FAT-fs (loop1): Directory bread(block 66) failed [ 541.386413][ T30] audit: type=1107 audit(1758925695.387:113): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 541.413953][T19344] FAT-fs (loop1): Directory bread(block 67) failed [ 541.420605][T19344] FAT-fs (loop1): Directory bread(block 68) failed [ 541.456106][T19344] FAT-fs (loop1): Directory bread(block 69) failed [ 541.478212][T19344] FAT-fs (loop1): Directory bread(block 70) failed [ 541.502281][T19359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 541.514135][T19344] FAT-fs (loop1): Directory bread(block 71) failed [ 541.520772][T19344] FAT-fs (loop1): Directory bread(block 72) failed [ 541.538605][T19344] FAT-fs (loop1): Directory bread(block 73) failed [ 541.801203][T19373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6055'. [ 542.159542][ T30] audit: type=1326 audit(1758925696.126:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19395 comm="syz.4.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 542.182013][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.212759][ T30] audit: type=1326 audit(1758925696.154:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19395 comm="syz.4.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 542.235147][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.237707][ T5941] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 542.316227][ T30] audit: type=1326 audit(1758925696.172:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19395 comm="syz.4.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 542.408549][ T30] audit: type=1326 audit(1758925696.172:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19395 comm="syz.4.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 542.462747][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 542.479836][T19406] loop0: detected capacity change from 0 to 256 [ 542.483157][ T5941] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 542.501579][ T30] audit: type=1326 audit(1758925696.172:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19395 comm="syz.4.6065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974b38eec9 code=0x7ffc0000 [ 542.523917][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.526236][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.540206][T19406] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 542.600946][ T5941] usb 3-1: Product: syz [ 542.605235][ T5941] usb 3-1: Manufacturer: syz [ 542.609850][ T5941] usb 3-1: SerialNumber: syz [ 542.680706][ T5941] r8152-cfgselector 3-1: Unknown version 0x0000 [ 542.698597][ T5941] r8152-cfgselector 3-1: config 0 descriptor?? [ 542.731931][T19415] loop1: detected capacity change from 0 to 512 [ 542.759972][T19415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 542.807852][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6076'. [ 542.836347][ T5870] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 542.836851][T19415] EXT4-fs (loop1): 1 truncate cleaned up [ 542.894618][T19415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.966162][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.007099][ T5870] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 543.017325][ T5870] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 543.038014][ T5870] usb 1-1: config 8 has no interface number 0 [ 543.055228][ T5870] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.077123][ T5870] usb 1-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 543.103565][ T5870] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x8A has invalid maxpacket 45699, setting to 64 [ 543.131372][ T5870] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 543.160502][ T5870] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 543.180286][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.188798][T19433] netlink: 'syz.4.6083': attribute type 1 has an invalid length. [ 543.205704][T19433] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6083'. [ 543.212985][ T5941] r8152-cfgselector 3-1: USB disconnect, device number 123 [ 543.221033][T19435] netlink: 'syz.1.6082': attribute type 1 has an invalid length. [ 543.230812][T19406] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 543.250896][ T5870] usb 1-1: NFC: intf ffff8880798c9000 id ffffffff8ed62640 [ 543.387574][ T5870] nfcmrvl 1-1:8.80: NFC: registered with nci successfully [ 543.491550][ T5870] usb 1-1: USB disconnect, device number 125 [ 543.511143][ T5870] usb 1-1: NFC: intf ffff8880798c9000 [ 543.606452][ T5963] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 543.641223][T19455] netlink: 'syz.4.6091': attribute type 1 has an invalid length. [ 543.755477][T19463] loop1: detected capacity change from 0 to 164 [ 543.791548][ T5963] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 543.804568][ T5963] usb 4-1: config 0 interface 0 has no altsetting 0 [ 543.842077][ T5963] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 543.873544][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 543.881771][ T5963] usb 4-1: Product: syz [ 543.919981][ T5963] usb 4-1: Manufacturer: syz [ 543.924618][ T5963] usb 4-1: SerialNumber: syz [ 543.963208][ T5963] usb 4-1: config 0 descriptor?? [ 543.994375][ T5963] usb 4-1: selecting invalid altsetting 0 [ 544.266351][ T5963] usb 4-1: USB disconnect, device number 4 [ 544.350144][T19487] openvswitch: netlink: Actions may not be safe on all matching packets [ 544.616443][ T30] audit: type=1326 audit(1758925698.426:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 544.656719][ T30] audit: type=1326 audit(1758925698.426:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 544.679079][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.743878][ T30] audit: type=1326 audit(1758925698.463:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 544.766319][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.774544][ T30] audit: type=1326 audit(1758925698.463:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 545.060096][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6124'. [ 545.089422][T19521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6124'. [ 545.167866][ T5963] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 545.349963][ T5963] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 545.369837][ T5963] usb 1-1: config 0 has no interface number 0 [ 545.377813][ T5963] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 545.398149][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.447429][ T5963] usb 1-1: config 0 descriptor?? [ 545.477275][ T5963] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.105/input/input67 [ 545.679176][ T5219] bcm5974 1-1:0.105: could not read from device [ 545.707667][ T5219] bcm5974 1-1:0.105: could not read from device [ 545.715746][ T5963] usb 1-1: USB disconnect, device number 126 [ 545.746191][T19557] loop4: detected capacity change from 0 to 256 [ 545.764345][T19557] exfat: Deprecated parameter 'utf8' [ 545.781522][ T5918] udevd[5918]: Error opening device "/dev/input/event4": No such file or directory [ 545.824508][T19557] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 545.838947][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.867430][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.888355][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.898203][ T5918] udevd[5918]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.916245][ T5941] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 546.078393][ T5941] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 546.109605][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 546.135190][ T5941] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.161661][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.191754][T19573] netlink: 'syz.4.6150': attribute type 3 has an invalid length. [ 546.200519][ T5941] usb 3-1: Product: syz [ 546.204707][ T5941] usb 3-1: Manufacturer: syz [ 546.223481][ T5941] usb 3-1: SerialNumber: syz [ 546.245305][ T5941] usb 3-1: config 0 descriptor?? [ 546.276275][ T5941] usb 3-1: selecting invalid altsetting 0 [ 546.498629][ T5941] usb 3-1: USB disconnect, device number 124 [ 546.554583][T19588] loop4: detected capacity change from 0 to 512 [ 546.602566][T19588] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 546.629911][T19588] FAT-fs (loop4): Filesystem has been set read-only [ 547.356404][T19627] program syz.1.6178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.426768][T19589] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 547.961180][T19662] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6194'. [ 547.986749][T19663] loop0: detected capacity change from 0 to 256 [ 548.011294][T19662] netlink: 'syz.2.6194': attribute type 1 has an invalid length. [ 548.149053][T19671] netlink: 'syz.1.6199': attribute type 46 has an invalid length. [ 549.324522][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6229'. [ 549.352347][T19725] loop4: detected capacity change from 0 to 4096 [ 549.382918][T19725] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 549.449037][T19725] ntfs3(loop4): ino=19, mi_enum_attr [ 549.454390][T19725] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 549.568166][T19740] loop0: detected capacity change from 0 to 1024 [ 550.042853][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 550.042870][ T30] audit: type=1326 audit(1758925703.485:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.3.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 550.132454][ T30] audit: type=1326 audit(1758925703.485:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.3.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 550.211776][ T30] audit: type=1326 audit(1758925703.532:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.3.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 550.328091][ T30] audit: type=1326 audit(1758925703.532:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.3.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 550.418616][ T30] audit: type=1326 audit(1758925703.532:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.3.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 550.522042][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6252'. [ 550.807417][T19796] Mount JFS Failure: -5 [ 550.820978][T19796] jfs_mount failed w/return code = -5 [ 551.065270][T19801] loop1: detected capacity change from 0 to 4096 [ 551.085409][T19801] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 551.227095][T19801] ntfs3(loop1): Failed to load $Extend (-22). [ 551.233958][T19814] netlink: 'syz.3.6270': attribute type 8 has an invalid length. [ 551.259557][T19801] ntfs3(loop1): Failed to initialize $Extend. [ 551.920992][T19806] loop0: detected capacity change from 0 to 32768 [ 552.944947][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6298'. [ 553.308127][T19853] loop1: detected capacity change from 0 to 32768 [ 553.343937][T19853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6287 (19853) [ 553.421266][T19853] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.438026][T19902] loop4: detected capacity change from 0 to 512 [ 553.446791][T19853] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 553.487729][T19902] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 553.510666][T19902] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 553.522163][T19902] EXT4-fs (loop4): 1 truncate cleaned up [ 553.539196][T19902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.686253][T19928] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 553.726134][T19853] BTRFS info (device loop1): enabling ssd optimizations [ 553.763564][T19853] BTRFS info (device loop1): enabling free space tree [ 553.861814][ T5964] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 553.943745][ T5866] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 554.060236][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 554.083283][ T5964] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 554.143880][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.193369][ T5964] usb 5-1: Product: syz [ 554.197563][ T5964] usb 5-1: Manufacturer: syz [ 554.202346][ T5964] usb 5-1: SerialNumber: syz [ 554.303606][ T5964] usb 5-1: config 0 descriptor?? [ 554.462312][T19965] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6324'. [ 554.570575][ T5964] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 554.696372][ T5964] usb 5-1: USB disconnect, device number 125 [ 554.841107][T19978] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 555.043697][T19988] netlink: 'syz.2.6331': attribute type 32 has an invalid length. [ 555.108941][T19992] netlink: 'syz.1.6333': attribute type 1 has an invalid length. [ 555.243027][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.947032][T19977] loop0: detected capacity change from 0 to 32768 [ 555.982625][T19977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6328 (19977) [ 556.047945][T19977] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 556.075801][T19977] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 556.132604][T20036] loop1: detected capacity change from 0 to 512 [ 556.189473][T20036] EXT4-fs: Ignoring removed oldalloc option [ 556.249751][T20036] EXT4-fs (loop1): 1 truncate cleaned up [ 556.257073][T20036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.291882][ T1319] BTRFS warning (device loop0): checksum verify failed on logical 5287936 mirror 1 wanted 0xba2f3320fe4f0dfed931d5a5c7a64dbbccc1fca522c14bbe02198145e0728966 found 0xeb7eb64c1933298f8ed55c9ce452a6e6adc9391d4adcaf3008752d47ae8a7ce9 level 0 [ 556.395611][T19977] BTRFS warning (device loop0): failed to read root (objectid=4): -5 [ 556.563670][T19977] BTRFS error (device loop0): open_ctree failed: -5 [ 556.707171][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.813533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.052285][T20027] loop4: detected capacity change from 0 to 32768 [ 557.120634][T20027] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6347 (20027) [ 557.228651][T20027] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 557.283509][T20027] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 557.498631][T20027] BTRFS info (device loop4): enabling ssd optimizations [ 557.514466][T20027] BTRFS info (device loop4): enabling free space tree [ 557.646476][T20027] BTRFS error (device loop4): balance: invalid convert metadata profile single [ 557.808635][ T5872] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 557.996379][ T5963] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 558.171594][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 558.214976][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 558.266069][ T5963] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 558.312382][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.320406][ T5963] usb 3-1: Product: syz [ 558.369223][ T5963] usb 3-1: Manufacturer: syz [ 558.373858][ T5963] usb 3-1: SerialNumber: syz [ 558.408483][ T5963] usb 3-1: config 0 descriptor?? [ 558.455621][ T5963] hub 3-1:0.0: bad descriptor, ignoring hub [ 558.475342][ T5963] hub 3-1:0.0: probe with driver hub failed with error -5 [ 558.499240][ T5963] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.712734][ T5963] usb 3-1: USB disconnect, device number 125 [ 558.905781][T20170] netlink: 'syz.1.6388': attribute type 1 has an invalid length. [ 558.990786][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6388'. [ 559.402715][T20191] netlink: 'syz.1.6397': attribute type 6 has an invalid length. [ 559.641428][T20207] loop2: detected capacity change from 0 to 256 [ 559.703222][T20207] exfat: Deprecated parameter 'namecase' [ 559.734532][T20207] exfat: Deprecated parameter 'utf8' [ 559.846014][T20207] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 559.858570][ T5963] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 559.936832][T20207] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 559.936832][T20207] SÃȘØÈžZ§6ŸÂ' [ 560.064906][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 560.072167][ T5963] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 560.088883][ T5963] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 560.120596][ T5963] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 560.136299][ T5963] usb 2-1: Product: syz [ 560.152094][ T5963] usb 2-1: Manufacturer: syz [ 560.156723][ T5963] usb 2-1: SerialNumber: syz [ 560.452382][T20239] program syz.4.6415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.461830][ T5963] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 560.480999][ T5963] usb 2-1: Handspring Visor / Palm OS: port 100, is for unknown use [ 560.493062][T20239] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 560.505878][ T5963] usb 2-1: Handspring Visor / Palm OS: port 96, is for Remote File System use [ 560.534949][ T5963] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 560.670657][ T5963] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 560.701380][ T5963] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 560.744992][ T5963] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 560.802335][ T5963] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 560.833169][ T5963] usb 2-1: USB disconnect, device number 2 [ 560.853523][ T5963] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 560.933952][ T5963] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 560.975597][ T5963] visor 2-1:1.0: device disconnected [ 561.131193][T20269] netlink: 'syz.0.6427': attribute type 11 has an invalid length. [ 561.212268][T20272] netlink: 'syz.3.6428': attribute type 3 has an invalid length. [ 561.240454][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6428'. [ 561.681880][ T5963] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 561.893017][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 561.909920][ T5963] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 561.941370][ T5963] usb 5-1: config 0 has no interface number 0 [ 561.967601][ T5963] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.032990][ T5963] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 562.106918][ T5963] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 562.123500][T20312] loop0: detected capacity change from 0 to 4096 [ 562.144697][ T5963] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 562.198288][ T5963] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.265876][ T5963] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 562.281346][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.304355][T20312] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 562.341220][ T5963] usb 5-1: Product: syz [ 562.363552][ T5963] usb 5-1: Manufacturer: syz [ 562.368180][ T5963] usb 5-1: SerialNumber: syz [ 562.481885][ T5963] usb 5-1: config 0 descriptor?? [ 562.566024][T20335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6453'. [ 562.751729][ T5963] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=쇳敺ކ interface=186 now attached to iowarrior0 [ 562.828481][T20342] netlink: 676 bytes leftover after parsing attributes in process `syz.0.6455'. [ 562.872617][T20342] netlink: 676 bytes leftover after parsing attributes in process `syz.0.6455'. [ 563.005752][ T5941] usb 5-1: USB disconnect, device number 126 [ 563.640411][T20375] libceph: resolve '400' (ret=-3): failed [ 563.749156][T20382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6466'. [ 564.162829][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6478'. [ 564.677424][T20434] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6490'. [ 564.704827][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6490'. [ 564.735035][T20434] netlink: 'syz.2.6490': attribute type 1 has an invalid length. [ 564.909661][T20446] netlink: 'syz.4.6496': attribute type 10 has an invalid length. [ 564.932807][T20446] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.940810][T20446] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.970552][T20449] PKCS8: Unsupported PKCS#8 version [ 565.022751][T20446] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.030025][T20446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.037607][T20446] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.044802][T20446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.061922][T20446] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 565.081206][ T5941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 565.121514][T20456] netlink: 'syz.1.6501': attribute type 1 has an invalid length. [ 565.144184][T20456] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6501'. [ 565.153238][T20456] NCSI netlink: No device for ifindex 0 [ 565.254999][ T5941] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.269690][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.287540][T20457] loop0: detected capacity change from 0 to 4096 [ 565.288658][ T5941] usb 4-1: Product: syz [ 565.309503][ T5941] usb 4-1: Manufacturer: syz [ 565.321001][ T5941] usb 4-1: SerialNumber: syz [ 565.364522][ T5941] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 565.390342][ T5926] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.429921][T20457] ntfs3(loop0): ino=1a, mi_enum_attr [ 565.451432][T20457] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 565.906837][ T5870] usb 4-1: USB disconnect, device number 5 [ 566.009870][T20483] loop0: detected capacity change from 0 to 2048 [ 566.045618][T20483] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 566.075634][T20483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.173174][T20465] loop1: detected capacity change from 0 to 32768 [ 566.186731][T20465] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6505 (20465) [ 566.227838][T20465] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 566.249757][T20465] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 566.292292][ T5917] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 566.326300][T20497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6520'. [ 566.351390][T20501] netlink: 308 bytes leftover after parsing attributes in process `syz.4.6521'. [ 566.393949][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6521'. [ 566.408733][T20501] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 566.478581][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 566.507514][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.554904][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.575769][T20465] BTRFS info (device loop1): enabling ssd optimizations [ 566.585621][ T5926] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 566.609109][T20465] BTRFS info (device loop1): enabling free space tree [ 566.625981][ T5926] ath9k_htc: Failed to initialize the device [ 566.643331][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.670389][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.680312][ T5870] usb 4-1: ath9k_htc: USB layer deinitialized [ 566.687864][ T5917] usb 3-1: Product: syz [ 566.704140][ T5917] usb 3-1: Manufacturer: syz [ 566.711349][T20465] BTRFS error (device loop1): balance: invalid convert data profile raid1c4 [ 566.728399][ T5917] usb 3-1: SerialNumber: syz [ 566.848500][ T5866] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 566.973369][ T5917] usb 3-1: 0:2 : does not exist [ 566.982453][ T5917] usb 3-1: unit 9 not found! [ 567.000790][ T5917] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 567.008541][ T5941] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 567.049881][ T5917] usb 3-1: USB disconnect, device number 126 [ 567.132061][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.197947][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 567.209818][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.249260][ T5941] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 567.285374][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.324461][ T5941] usb 5-1: Product: syz [ 567.334137][ T5941] usb 5-1: Manufacturer: syz [ 567.355243][ T5941] usb 5-1: SerialNumber: syz [ 567.379688][ T5941] usb 5-1: config 0 descriptor?? [ 567.392842][ T5941] usb 5-1: bad CDC descriptors [ 567.398714][ T5941] usb 5-1: unsupported MDLM descriptors [ 567.495148][T20538] usb usb8: usbfs: process 20538 (syz.3.6534) did not claim interface 0 before use [ 567.618469][T20544] loop1: detected capacity change from 0 to 16 [ 567.649664][ T5917] usb 5-1: USB disconnect, device number 127 [ 567.729643][T20544] erofs (device loop1): mounted with root inode @ nid 36. [ 567.911006][T20557] netlink: 'syz.3.6538': attribute type 9 has an invalid length. [ 567.947949][T20557] netlink: 'syz.3.6538': attribute type 7 has an invalid length. [ 567.955704][T20557] netlink: 'syz.3.6538': attribute type 8 has an invalid length. [ 568.336085][T20577] loop0: detected capacity change from 0 to 128 [ 568.372577][T20577] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 568.399862][T20581] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6550'. [ 568.444623][T20577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.649626][T20593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6557'. [ 568.731085][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6559'. [ 568.851519][T20603] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 568.929712][T20603] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 568.973001][T20603] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 569.059521][ T30] audit: type=1400 audit(1758925721.271:129): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(1758925721.280:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20616 comm="syz.1.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 569.268638][ T30] audit: type=1326 audit(1758925721.392:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20616 comm="syz.1.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 569.382697][ T30] audit: type=1326 audit(1758925721.392:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20616 comm="syz.1.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 569.427502][ T30] audit: type=1326 audit(1758925721.392:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20616 comm="syz.1.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 569.555080][T20637] loop2: detected capacity change from 0 to 1024 [ 570.372955][T20635] loop1: detected capacity change from 0 to 32768 [ 570.429224][T20635] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 570.429224][T20635] [ 570.459398][T20635] xtLookup: xtSearch returned -5 [ 570.475335][T20635] add_index: get/read_metapage failed! [ 570.491309][ T5870] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 570.518653][T20635] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 570.518653][T20635] [ 570.533335][T20635] xtLookup: xtSearch returned -5 [ 570.549765][T20635] free_index: error reading directory table [ 570.566719][T20635] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 570.566719][T20635] [ 570.582805][T20635] xtLookup: xtSearch returned -5 [ 570.590166][T20635] free_index: error reading directory table [ 570.607249][T20635] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 570.607249][T20635] [ 570.647183][T20635] xtLookup: xtSearch returned -5 [ 570.665542][T20635] free_index: error reading directory table [ 570.671490][T20635] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 570.671490][T20635] [ 570.694227][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 570.732639][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.759693][ T5870] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 570.777343][T20635] xtLookup: xtSearch returned -5 [ 570.801157][T20635] free_index: error reading directory table [ 570.807091][T20635] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 570.807091][T20635] [ 570.817553][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 570.834293][T20635] xtLookup: xtSearch returned -5 [ 570.839254][T20635] free_index: error reading directory table [ 570.854585][ T5870] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 570.900051][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.929476][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 570.937505][ T5870] usb 5-1: SerialNumber: syz [ 570.973405][ T5870] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 570.981463][ T5870] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 571.227209][ T5963] usb 5-1: USB disconnect, device number 2 [ 571.531766][T20699] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 571.538063][T20701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6609'. [ 571.562121][T20701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6609'. [ 571.633848][T20706] netlink: 328 bytes leftover after parsing attributes in process `syz.2.6612'. [ 572.076016][ T5917] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 572.301712][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 572.324686][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 572.334137][ T5917] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 572.344837][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.365077][ T5917] usb 1-1: Product: syz [ 572.382136][ T5917] usb 1-1: Manufacturer: syz [ 572.394542][ T5917] usb 1-1: SerialNumber: syz [ 572.436194][ T5917] usb 1-1: config 0 descriptor?? [ 572.909988][ T5917] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 572.917102][ T5917] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 572.970584][ T5917] usb 1-1: USB disconnect, device number 127 [ 573.366716][T20748] loop4: detected capacity change from 0 to 40427 [ 573.407857][T20748] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 573.427049][T20748] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 573.450919][T20748] F2FS-fs (loop4): invalid crc value [ 573.612194][T20766] loop2: detected capacity change from 0 to 32768 [ 573.711397][T20748] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 573.756010][T20748] F2FS-fs (loop4): Start checkpoint disabled! [ 573.758413][T20766] ialloc: diAlloc returned -5! [ 573.808812][T20748] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 573.823584][T20748] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 573.857308][T20748] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 573.945621][ T5963] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 574.018369][T20801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6659'. [ 574.149155][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 574.198416][ T5963] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 574.213336][ T5963] usb 4-1: config 0 has no interface number 1 [ 574.229226][ T5963] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 574.245381][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 574.268002][ T5963] usb 4-1: Product: syz [ 574.290300][ T5963] usb 4-1: Manufacturer: syz [ 574.294932][ T5963] usb 4-1: SerialNumber: syz [ 574.331486][ T5963] usb 4-1: config 0 descriptor?? [ 574.559610][T20815] loop1: detected capacity change from 0 to 512 [ 574.568578][ T5963] qcserial 4-1:0.37: Qualcomm USB modem converter detected [ 574.588856][T20815] EXT4-fs (loop1): orphan cleanup on readonly fs [ 574.601961][T20815] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.6666: EA inode hash validation failed [ 574.623880][T20815] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 574.643525][T20818] netlink: 'syz.2.6667': attribute type 2 has an invalid length. [ 574.669050][T20815] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6666: corrupted inode contents [ 574.692773][T20815] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.6666: mark_inode_dirty error [ 574.711653][T20820] loop4: detected capacity change from 0 to 1024 [ 574.730107][T20815] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6666: corrupted inode contents [ 574.748651][T20815] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.6666: mark_inode_dirty error [ 574.803516][ T5963] usb 4-1: USB disconnect, device number 6 [ 574.810785][ T5963] qcserial 4-1:0.37: device disconnected [ 574.819349][T20815] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.6666: mark inode dirty (error -117) [ 574.876883][ T4525] hfsplus: b-tree write err: -5, ino 4 [ 574.885551][T20815] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 574.914621][T20815] EXT4-fs (loop1): 1 orphan inode deleted [ 574.940995][T20815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 574.966255][T20815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.978721][T20805] loop0: detected capacity change from 0 to 32768 [ 575.177714][T20841] loop2: detected capacity change from 0 to 16 [ 575.192885][T20841] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 575.213295][T20805] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 575.213318][T20805] allowing incompatible features above 0.0: (unknown version) [ 575.213330][T20805] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 575.334930][T20805] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 575.387507][T20805] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 575.413571][T20805] bcachefs (loop0): Version upgrade required: [ 575.413571][T20805] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 575.413571][T20805] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 575.413571][T20805] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 575.511381][T20805] bcachefs (loop0): dropping and reconstructing all alloc info [ 575.606623][T20805] bcachefs (loop0): accounting_read... done [ 575.630898][T20805] bcachefs (loop0): alloc_read... done [ 575.648103][T20805] bcachefs (loop0): snapshots_read... done [ 575.673444][T20805] bcachefs (loop0): check_allocations... done [ 575.771116][T20805] bcachefs (loop0): going read-write [ 575.786591][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6683'. [ 575.797012][T20805] bcachefs (loop0): done starting filesystem [ 575.816698][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 575.922274][T20867] netlink: 'syz.1.6685': attribute type 3 has an invalid length. [ 575.988412][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 576.009636][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.037222][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 576.052920][ T5862] bcachefs (loop0): shutting down [ 576.057964][ T5862] bcachefs (loop0): going read-only [ 576.060277][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.095501][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.127219][ T5862] bcachefs (loop0): finished waiting for writes to stop [ 576.170908][ T5862] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 576.195233][ T5862] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 576.219646][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 576.251121][ T5917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 576.270284][ T5862] bcachefs (loop0): unclean shutdown complete, journal seq 12 [ 576.288042][ T5917] usb 5-1: Manufacturer: syz [ 576.304011][ T5862] bcachefs (loop0): done going read-only, filesystem not clean [ 576.333894][ T5917] usb 5-1: config 0 descriptor?? [ 576.486365][ T5862] bcachefs (loop0): shutdown complete [ 576.576777][ T5963] usb 5-1: USB disconnect, device number 3 [ 577.280921][T20918] loop2: detected capacity change from 0 to 1024 [ 577.759150][T20938] loop4: detected capacity change from 0 to 1024 [ 577.814343][T20940] ip6tnl1: entered allmulticast mode [ 577.831562][T20938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 577.844702][T20938] ext4 filesystem being mounted at /1387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.918028][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 578.214320][T20963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6731'. [ 578.248702][ T30] audit: type=1326 audit(1758925729.864:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20964 comm="syz.1.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 578.329839][ T30] audit: type=1326 audit(1758925729.864:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20964 comm="syz.1.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 578.426171][ T30] audit: type=1326 audit(1758925729.864:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20964 comm="syz.1.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 578.465654][T20972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6736'. [ 578.498595][ T30] audit: type=1326 audit(1758925729.864:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20964 comm="syz.1.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 578.527433][ T30] audit: type=1326 audit(1758925729.864:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20964 comm="syz.1.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0178eec9 code=0x7ffc0000 [ 578.539414][T20930] loop0: detected capacity change from 0 to 32768 [ 578.696731][T20982] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 578.972316][T20991] loop1: detected capacity change from 0 to 2048 [ 578.992921][T20991] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 579.003714][ T5963] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 579.026171][T20994] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 579.152618][T20998] netlink: 'syz.1.6749': attribute type 1 has an invalid length. [ 579.182487][T20998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6749'. [ 579.191751][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 579.210331][ T5963] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 579.239944][ T5963] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 579.270251][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 579.291951][ T5963] usb 4-1: config 1 has no interface number 0 [ 579.302963][ T5963] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.314347][ T5963] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 579.326468][ T5963] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 579.344028][ T5963] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 579.364510][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.405491][ T5963] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 579.602219][ T5963] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 579.613787][ T5963] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 579.622982][ T5963] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 579.705801][T21018] random: crng reseeded on system resumption [ 579.740241][T21017] bridge5: entered promiscuous mode [ 579.818727][ T5963] usb 4-1: USB disconnect, device number 7 [ 579.897532][T21022] loop0: detected capacity change from 0 to 2048 [ 579.930252][T21022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.068519][T21006] loop2: detected capacity change from 0 to 32768 [ 580.069343][T21031] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 580.106027][T21006] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop2 (7:2) scanned by syz.2.6754 (21006) [ 580.245976][T10389] udevd[10389]: incorrect btrfs checksum on /dev/loop2 [ 580.365492][T21045] netlink: 'syz.1.6771': attribute type 30 has an invalid length. [ 580.586204][ T5941] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 580.669735][T21058] netlink: 'syz.3.6776': attribute type 2 has an invalid length. [ 580.673606][T21056] overlayfs: missing 'lowerdir' [ 580.703393][T21058] netlink: 119 bytes leftover after parsing attributes in process `syz.3.6776'. [ 580.789511][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 580.813558][ T5941] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 580.840030][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.879342][ T5941] usb 3-1: Product: syz [ 580.896313][ T5941] usb 3-1: Manufacturer: syz [ 580.900941][ T5941] usb 3-1: SerialNumber: syz [ 580.986946][ T5941] usb 3-1: config 0 descriptor?? [ 581.230174][ T5941] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 581.381014][T21092] loop0: detected capacity change from 0 to 256 [ 581.445446][ T5941] usb write operation failed. (-71) [ 581.473427][ T5941] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 581.519454][T21092] FAT-fs (loop0): Directory bread(block 64) failed [ 581.526011][T21092] FAT-fs (loop0): Directory bread(block 65) failed [ 581.547282][ T5941] dvbdev: DVB: registering new adapter (Terratec H7) [ 581.568169][ T5941] usb 3-1: media controller created [ 581.577185][T21092] FAT-fs (loop0): Directory bread(block 66) failed [ 581.590829][T21092] FAT-fs (loop0): Directory bread(block 67) failed [ 581.602155][ T5941] usb read operation failed. (-71) [ 581.609663][ T5941] usb write operation failed. (-71) [ 581.626810][ T5941] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 581.636287][T21092] FAT-fs (loop0): Directory bread(block 68) failed [ 581.642836][T21092] FAT-fs (loop0): Directory bread(block 69) failed [ 581.660454][ T5941] usb 3-1: USB disconnect, device number 127 [ 581.670058][T21092] FAT-fs (loop0): Directory bread(block 70) failed [ 581.677820][T21092] FAT-fs (loop0): Directory bread(block 71) failed [ 581.684446][T21092] FAT-fs (loop0): Directory bread(block 72) failed [ 581.691847][T21092] FAT-fs (loop0): Directory bread(block 73) failed [ 582.072732][T21121] loop0: detected capacity change from 0 to 256 [ 582.180623][T21121] FAT-fs (loop0): Directory bread(block 64) failed [ 582.187181][T21121] FAT-fs (loop0): Directory bread(block 65) failed [ 582.225058][T21121] FAT-fs (loop0): Directory bread(block 66) failed [ 582.231750][T21121] FAT-fs (loop0): Directory bread(block 67) failed [ 582.238538][T21121] FAT-fs (loop0): Directory bread(block 68) failed [ 582.254486][T21121] FAT-fs (loop0): Directory bread(block 69) failed [ 582.268259][T21121] FAT-fs (loop0): Directory bread(block 70) failed [ 582.297752][T21121] FAT-fs (loop0): Directory bread(block 71) failed [ 582.333395][T21121] FAT-fs (loop0): Directory bread(block 72) failed [ 582.363307][T21121] FAT-fs (loop0): Directory bread(block 73) failed [ 582.549651][ T30] audit: type=1326 audit(1758925733.894:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 582.640481][ T30] audit: type=1326 audit(1758925733.894:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 582.712817][ T30] audit: type=1326 audit(1758925733.922:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21140 comm="syz.3.6819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4d5c18eec9 code=0x7ffc0000 [ 582.723046][T21147] ALSA: mixer_oss: invalid OSS volume '' [ 582.753477][T21154] netlink: 'syz.1.6825': attribute type 21 has an invalid length. [ 582.753945][T21147] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 582.770634][T21154] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6825'. [ 582.770770][T21147] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 583.184602][T21147] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 583.196202][T21147] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 583.203807][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 583.231529][ T5926] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 583.262485][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.303415][ T5926] usb 3-1: Product: syz [ 583.318525][ T5926] usb 3-1: Manufacturer: syz [ 583.334792][ T5926] usb 3-1: SerialNumber: syz [ 583.347854][ T5926] usb 3-1: config 0 descriptor?? [ 583.512782][T21173] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 583.523389][T21171] loop1: detected capacity change from 0 to 1024 [ 583.570520][T21171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 583.612757][ T5926] usb 3-1: ignoring: not an USB2CAN converter [ 583.632464][T21171] ext4 filesystem being mounted at /1341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.717985][T21171] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.6833: corrupted xattr block 128: bad e_name length [ 583.832191][ T5941] usb 3-1: USB disconnect, device number 2 [ 583.915936][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 583.940195][T21158] loop0: detected capacity change from 0 to 40427 [ 583.972584][T21158] F2FS-fs: heap/no_heap options were deprecated [ 584.009093][T21158] F2FS-fs (loop0): build fault injection rate: 19 [ 584.051131][T21158] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 584.069568][T21158] F2FS-fs (loop0): invalid crc value [ 584.089462][T21184] loop1: detected capacity change from 0 to 256 [ 584.142657][T21158] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 584.282559][T21158] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 584.345044][T21158] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 584.379314][T21158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 584.482155][T21170] loop4: detected capacity change from 0 to 40427 [ 584.495449][ T5862] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0 [ 584.519304][T21198] loop2: detected capacity change from 0 to 1024 [ 584.537104][T21170] F2FS-fs (loop4): Image doesn't support compression [ 584.547645][T21170] F2FS-fs (loop4): build fault injection rate: 690 [ 584.591410][T21170] F2FS-fs (loop4): invalid crc value [ 584.686718][T21205] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6847'. [ 584.704085][ T79] hfsplus: b-tree write err: -5, ino 4 [ 584.880294][T21170] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 584.915794][T21170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 585.105804][T21215] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 585.143799][ T5872] syz-executor: attempt to access beyond end of device [ 585.143799][ T5872] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 585.146776][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 585.146815][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.146846][ T5872] Call Trace: [ 585.146853][ T5872] [ 585.146862][ T5872] dump_stack_lvl+0x189/0x250 [ 585.146888][ T5872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.146906][ T5872] ? __pfx_queue_work_on+0x10/0x10 [ 585.146921][ T5872] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 585.146941][ T5872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 585.146971][ T5872] f2fs_handle_critical_error+0x37c/0x540 [ 585.146997][ T5872] f2fs_write_end_io+0x886/0xb60 [ 585.147035][ T5872] __submit_merged_bio+0x27a/0x6a0 [ 585.147059][ T5872] __submit_merged_write_cond+0x255/0x530 [ 585.147090][ T5872] f2fs_write_data_pages+0x261d/0x3000 [ 585.147137][ T5872] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 585.147225][ T5872] ? __lock_acquire+0xab9/0xd20 [ 585.147256][ T5872] ? do_raw_spin_lock+0x121/0x290 [ 585.147287][ T5872] ? do_raw_spin_unlock+0x122/0x240 [ 585.147307][ T5872] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 585.147328][ T5872] do_writepages+0x32e/0x550 [ 585.147357][ T5872] ? do_raw_spin_unlock+0x122/0x240 [ 585.147381][ T5872] filemap_fdatawrite+0x199/0x240 [ 585.147398][ T5872] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 585.147458][ T5872] ? do_raw_spin_unlock+0x122/0x240 [ 585.147480][ T5872] f2fs_sync_dirty_inodes+0x31f/0x830 [ 585.147524][ T5872] f2fs_write_checkpoint+0x93e/0x2440 [ 585.147544][ T5872] ? __lock_acquire+0xab9/0xd20 [ 585.147589][ T5872] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 585.147637][T21219] netlink: 'syz.2.6855': attribute type 1 has an invalid length. [ 585.147658][ T5872] kill_f2fs_super+0x2cc/0x6d0 [ 585.147674][T21219] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6855'. [ 585.147683][ T5872] ? __pfx_kill_f2fs_super+0x10/0x10 [ 585.147719][ T5872] ? shrinker_free+0x2ce/0x3e0 [ 585.147745][ T5872] deactivate_locked_super+0xbc/0x130 [ 585.147770][ T5872] cleanup_mnt+0x425/0x4c0 [ 585.147793][ T5872] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.147814][ T5872] task_work_run+0x1d4/0x260 [ 585.147835][ T5872] ? __pfx_task_work_run+0x10/0x10 [ 585.147852][ T5872] ? __x64_sys_umount+0x122/0x160 [ 585.147872][ T5872] ? exit_to_user_mode_loop+0x40/0x130 [ 585.147897][ T5872] exit_to_user_mode_loop+0xe9/0x130 [ 585.147920][ T5872] do_syscall_64+0x2bd/0xfa0 [ 585.147938][ T5872] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.147957][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.147974][ T5872] ? clear_bhb_loop+0x60/0xb0 [ 585.147994][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.148009][ T5872] RIP: 0033:0x7f974b3901f7 [ 585.148024][ T5872] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 585.148039][ T5872] RSP: 002b:00007ffdddd6c3b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 585.148056][ T5872] RAX: 0000000000000000 RBX: 00007f974b411d7d RCX: 00007f974b3901f7 [ 585.148067][ T5872] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdddd6c470 [ 585.148078][ T5872] RBP: 00007ffdddd6c470 R08: 0000000000000000 R09: 0000000000000000 [ 585.148089][ T5872] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdddd6d500 [ 585.148100][ T5872] R13: 00007f974b411d7d R14: 00000000000871cf R15: 00007ffdddd6d540 [ 585.148126][ T5872] [ 585.148133][ T5872] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 585.408124][T21221] loop2: detected capacity change from 0 to 4096 [ 585.440959][T21221] ntfs3(loop2): ino=19, mi_enum_attr [ 585.440990][T21221] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 585.945464][T21247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6854'. [ 586.410412][T21265] IPVS: length: 108 != 24 [ 586.478250][ T5964] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 586.496709][T21267] loop1: detected capacity change from 0 to 1024 [ 586.519883][T21267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 586.563982][T21267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.595651][T21267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 586.614953][T21267] System zones: 0-1, 3-36 [ 586.631339][T21267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.671227][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 586.687700][ T5964] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 586.703428][ T5964] usb 1-1: config 0 has no interface number 0 [ 586.735609][ T5964] usb 1-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 586.792136][ T5964] usb 1-1: config 0 interface 2 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 197 [ 586.825893][ T5964] usb 1-1: config 0 interface 2 has no altsetting 0 [ 586.845220][ T5964] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 586.864809][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.874485][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.906362][ T5964] usb 1-1: Product: syz [ 586.915814][ T5964] usb 1-1: Manufacturer: syz [ 586.933473][ T5964] usb 1-1: SerialNumber: syz [ 586.998337][ T5964] usb 1-1: config 0 descriptor?? [ 587.022965][T21283] netlink: 'syz.1.6882': attribute type 2 has an invalid length. [ 587.031602][T21261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 587.063856][T21283] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.6882'. [ 587.266769][ T5964] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.359237][T21297] loop4: detected capacity change from 0 to 128 [ 587.378066][T21297] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 587.378115][T21297] hpfs: filesystem error: improperly stopped [ 587.378130][T21297] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 587.378146][T21297] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 587.378157][T21297] hpfs: You really don't want any checks? You are crazy... [ 587.378469][T21297] hpfs: hpfs_map_sector(): read error [ 587.378481][T21297] hpfs: code page support is disabled [ 587.384606][T21297] hpfs: hpfs_map_4sectors(): unaligned read [ 587.384727][T21297] hpfs: hpfs_map_4sectors(): unaligned read [ 587.384740][T21297] hpfs: filesystem error: unable to find root dir [ 587.404390][T21297] hpfs: hpfs_map_4sectors(): unaligned read [ 587.452001][ T5964] usb 1-1: USB disconnect, device number 2 [ 587.705410][T21309] netlink: 'syz.4.6898': attribute type 7 has an invalid length. [ 588.050201][T21323] kAFS: unable to lookup cell '.S²jË¡8' [ 588.086078][T21325] binder: 21324:21325 ioctl c0046209 200000000000000 returned -22 [ 588.138270][T21327] loop4: detected capacity change from 0 to 64 [ 588.189070][T21331] netlink: 'syz.2.6908': attribute type 39 has an invalid length. [ 588.709872][T21353] netlink: 'syz.0.6918': attribute type 9 has an invalid length. [ 588.723311][ T30] audit: type=1326 audit(1758925739.664:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.2.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 588.812309][ T30] audit: type=1326 audit(1758925739.664:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.2.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 588.899071][ T30] audit: type=1326 audit(1758925739.701:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.2.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 589.026143][ T30] audit: type=1326 audit(1758925739.701:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.2.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 589.123661][ T30] audit: type=1326 audit(1758925739.701:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz.2.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72c18eec9 code=0x7ffc0000 [ 589.187245][T21364] loop1: detected capacity change from 0 to 2048 [ 589.271444][T21364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.473363][T21376] vivid-000: ================= START STATUS ================= [ 589.491028][T21376] vivid-000: Radio HW Seek Mode: Bounded [ 589.509028][T21376] vivid-000: Radio Programmable HW Seek: false [ 589.526151][T21376] vivid-000: RDS Rx I/O Mode: Block I/O [ 589.532822][T21376] vivid-000: Generate RBDS Instead of RDS: false [ 589.547903][T21376] vivid-000: RDS Reception: true [ 589.564026][T21376] vivid-000: RDS Program Type: 0 inactive [ 589.580234][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 589.591039][T21376] vivid-000: RDS PS Name: inactive [ 589.596379][T21376] vivid-000: RDS Radio Text: inactive [ 589.622823][T21376] vivid-000: RDS Traffic Announcement: false inactive [ 589.651390][T21376] vivid-000: RDS Traffic Program: false inactive [ 589.683879][T21376] vivid-000: RDS Music: false inactive [ 589.684320][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6933'. [ 589.699681][T21376] vivid-000: ================== END STATUS ================== [ 589.712946][T21383] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 589.759510][T21388] loop4: detected capacity change from 0 to 8 [ 589.802522][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 589.828826][ T5941] usb 3-1: config index 0 descriptor too short (expected 63, got 34) [ 589.846536][T21383] bond0: entered allmulticast mode [ 589.858207][ T5941] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 589.871190][T21383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.895052][T21388] SQUASHFS error: Unable to read directory block [1d0:0] [ 589.923154][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.954833][ T5941] usb 3-1: config 0 descriptor?? [ 590.195758][ T5941] usb 3-1: string descriptor 0 read error: -71 [ 590.223047][ T5941] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 590.230754][ T5941] uvcvideo 3-1:0.0: No valid video chain found. [ 590.269113][ T5941] usb 3-1: USB disconnect, device number 3 [ 590.323632][T21408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6945'. [ 590.562262][T21425] NILFS (nullb0): couldn't find nilfs on the device [ 590.682953][T21431] libceph: resolve '0' (ret=-3): failed [ 590.746248][T21434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6955'. [ 590.914321][T21443] loop4: detected capacity change from 0 to 764 [ 591.242517][T21455] netlink: 'syz.0.6964': attribute type 10 has an invalid length. [ 591.269889][T21455] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6964'. [ 591.301023][T21460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6966'. [ 591.327872][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6966'. [ 591.356178][T21460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6966'. [ 591.398111][T21463] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6968'. [ 591.410607][T21463] batadv_slave_1: entered promiscuous mode [ 591.416827][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6967'. [ 591.465601][T21464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6967'. [ 591.487268][T21464] tc_dump_action: action bad kind [ 591.554228][T21467] loop0: detected capacity change from 0 to 4096 [ 591.697397][ T5941] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 591.901331][ T5941] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 591.935112][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.958023][T21484] loop0: detected capacity change from 0 to 2048 [ 591.996309][ T5941] usb 3-1: config 0 descriptor?? [ 592.017999][T21484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.492122][ T5941] ath6kl: Failed to submit usb control message: -71 [ 592.529079][ T5941] ath6kl: unable to send the bmi data to the device: -71 [ 592.539840][ T5941] ath6kl: Unable to send get target info: -71 [ 592.566602][ T5941] ath6kl: Failed to init ath6kl core: -71 [ 592.598042][ T5941] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 592.628023][ T5941] usb 3-1: USB disconnect, device number 4 [ 593.008845][T21536] netlink: 'syz.1.7003': attribute type 8 has an invalid length. [ 593.287825][T21550] loop1: detected capacity change from 0 to 128 [ 593.326251][T21550] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 593.418294][T21550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.444896][T21556] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.528759][T21561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7013'. [ 593.791363][T21574] random: crng reseeded on system resumption [ 593.879155][ T5917] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 594.072056][ T5917] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 594.080198][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.113661][ T5917] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 594.129335][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.165447][ T5917] usb 5-1: Product: syz [ 594.173354][ T5917] usb 5-1: Manufacturer: syz [ 594.177986][ T5917] usb 5-1: SerialNumber: syz [ 594.205138][ T5917] usb 5-1: config 0 descriptor?? [ 594.226824][ T5917] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 594.468986][T21609] autofs: Bad value for 'fd' [ 594.488346][T21608] netlink: 'syz.2.7037': attribute type 10 has an invalid length. [ 594.552248][T21608] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 594.561368][T21608] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 594.570372][T21608] team0: Port device netdevsim0 added [ 594.661269][ T5917] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 594.668177][ T5917] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 594.735951][ T5917] usb 5-1: USB disconnect, device number 4 [ 595.149919][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.461370][ T5870] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 595.617816][T21635] loop1: detected capacity change from 0 to 32768 [ 595.676268][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 595.689324][ T5870] usb 4-1: not running at top speed; connect to a high speed hub [ 595.710396][ T5870] usb 4-1: config 7 has an invalid interface number: 44 but max is 0 [ 595.725922][ T5870] usb 4-1: config 7 has no interface number 0 [ 595.736311][T21663] loop4: detected capacity change from 0 to 512 [ 595.754810][ T5870] usb 4-1: config 7 interface 44 altsetting 14 endpoint 0x6 has invalid maxpacket 96, setting to 64 [ 595.801390][ T5870] usb 4-1: config 7 interface 44 has no altsetting 0 [ 595.836527][T21663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.853610][ T5870] usb 4-1: New USB device found, idVendor=798d, idProduct=9787, bcdDevice=fc.51 [ 595.886089][T21663] ext4 filesystem being mounted at /1458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.897437][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.930346][T21663] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.7064: corrupted xattr block 32: overlapping e_value [ 595.939535][ T5870] usb 4-1: Product: syz [ 595.998610][ T5870] usb 4-1: Manufacturer: syz [ 596.003247][ T5870] usb 4-1: SerialNumber: syz [ 596.031703][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.062323][T21641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.187217][ T30] audit: type=1326 audit(1758925746.640:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21675 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 596.263706][ T30] audit: type=1326 audit(1758925746.668:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21675 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 596.319884][ T30] audit: type=1326 audit(1758925746.696:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21675 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 596.343525][ T5870] usb-storage 4-1:7.44: USB Mass Storage device detected [ 596.388943][ T30] audit: type=1326 audit(1758925746.696:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21675 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 596.413541][ T30] audit: type=1326 audit(1758925746.696:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21675 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492b98eec9 code=0x7ffc0000 [ 596.438034][T21668] loop2: detected capacity change from 0 to 32768 [ 596.446198][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 596.483117][ T5870] usb 4-1: USB disconnect, device number 8 [ 596.630177][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 596.637134][ T5917] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 596.646021][ T5917] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 596.659654][ T5917] usb 5-1: config 6 has no interface number 0 [ 596.665800][ T5917] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 596.677825][ T5917] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 596.689371][T21668] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 596.689404][T21668] allowing incompatible features above 0.0: (unknown version) [ 596.689416][T21668] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 596.689530][ T5917] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.760245][T21668] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 596.769865][T21668] bcachefs (loop2): initializing new filesystem [ 596.777537][ T5917] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 596.786784][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.795348][ T5917] usb 5-1: Product: syz [ 596.800263][ T5917] usb 5-1: Manufacturer: syz [ 596.804868][ T5917] usb 5-1: SerialNumber: syz [ 596.818885][T21668] bcachefs (loop2): going read-write [ 596.856848][ T5917] hso 5-1:6.2: Failed to find INT IN ep [ 596.881869][T21668] bcachefs (loop2): marking superblocks [ 596.943783][T21668] bcachefs (loop2): initializing freespace [ 596.973283][T21668] bcachefs (loop2): done initializing freespace [ 597.033801][T21668] bcachefs (loop2): reading snapshots table [ 597.052448][T21668] bcachefs (loop2): reading snapshots done [ 597.159723][T21668] bcachefs (loop2): done starting filesystem [ 597.225870][ T5870] usb 5-1: USB disconnect, device number 5 [ 597.420686][ T5863] bcachefs (loop2): shutting down [ 597.429377][ T5863] bcachefs (loop2): going read-only [ 597.434640][ T5863] bcachefs (loop2): finished waiting for writes to stop [ 597.483971][ T5863] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 597.576908][ T5863] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 597.625426][ T5863] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 597.634059][ T5863] bcachefs (loop2): marking filesystem clean [ 597.701293][ T5863] bcachefs (loop2): shutdown complete [ 597.736548][T21735] usb usb8: usbfs: process 21735 (syz.1.7094) did not claim interface 0 before use [ 597.957097][T21747] IPv6: NLM_F_CREATE should be specified when creating new route [ 597.989056][T21747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.996390][T21747] IPv6: NLM_F_CREATE should be set when creating new route [ 598.003630][T21747] IPv6: NLM_F_CREATE should be set when creating new route [ 598.162917][ T30] audit: type=1400 audit(1758925748.473:154): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=21752 comm="syz.0.7103" [ 598.390531][T21763] loop0: detected capacity change from 0 to 256 [ 598.552864][T21763] FAT-fs (loop0): Directory bread(block 64) failed [ 598.561324][T21763] FAT-fs (loop0): Directory bread(block 65) failed [ 598.581838][T21763] FAT-fs (loop0): Directory bread(block 66) failed [ 598.633313][T21763] FAT-fs (loop0): Directory bread(block 67) failed [ 598.651034][T21763] FAT-fs (loop0): Directory bread(block 68) failed [ 598.661749][T21763] FAT-fs (loop0): Directory bread(block 69) failed [ 598.668389][T21763] FAT-fs (loop0): Directory bread(block 70) failed [ 598.712721][T21763] FAT-fs (loop0): Directory bread(block 71) failed [ 598.730368][T21763] FAT-fs (loop0): Directory bread(block 72) failed [ 598.764976][T21763] FAT-fs (loop0): Directory bread(block 73) failed [ 598.946728][T21782] loop2: detected capacity change from 0 to 4096 [ 599.378770][T21810] netlink: 'syz.4.7131': attribute type 2 has an invalid length. [ 600.022395][T21832] loop4: detected capacity change from 0 to 4096 [ 600.760235][T21869] loop4: detected capacity change from 0 to 8 [ 601.046045][T21884] netlink: 'syz.3.7166': attribute type 1 has an invalid length. [ 601.063617][T21884] __nla_validate_parse: 2 callbacks suppressed [ 601.063634][T21884] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7166'. [ 601.429553][T21902] netlink: 'syz.3.7175': attribute type 6 has an invalid length. [ 601.462771][T21902] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7175'. [ 601.549255][T21905] bond1: entered promiscuous mode [ 601.554584][T21905] bond1: entered allmulticast mode [ 601.560524][T21905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.855875][T21874] loop1: detected capacity change from 0 to 32768 [ 601.916597][T21874] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 601.931573][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 602.083210][T21874] [ 602.085572][T21874] ====================================================== [ 602.092629][T21874] WARNING: possible circular locking dependency detected [ 602.099654][T21874] syzkaller #0 Not tainted [ 602.102592][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 602.104059][T21874] ------------------------------------------------------ [ 602.116085][T21874] syz.1.7160/21874 is trying to acquire lock: [ 602.122153][T21874] ffff8880732031b8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720 [ 602.131487][T21874] [ 602.131487][T21874] but task is already holding lock: [ 602.138853][T21874] ffff88814d648950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 602.148093][T21874] [ 602.148093][T21874] which lock already depends on the new lock. [ 602.148093][T21874] [ 602.158491][T21874] [ 602.158491][T21874] the existing dependency chain (in reverse order) is: [ 602.167493][T21874] [ 602.167493][T21874] -> #4 (jbd2_handle){++++}-{0:0}: [ 602.174790][T21874] lock_acquire+0x120/0x360 [ 602.179811][T21874] start_this_handle+0x1fa7/0x21c0 [ 602.185425][T21874] jbd2__journal_start+0x2c1/0x5b0 [ 602.191044][T21874] jbd2_journal_start+0x2a/0x40 [ 602.196402][T21874] ocfs2_start_trans+0x376/0x6d0 [ 602.201855][T21874] ocfs2_shutdown_local_alloc+0x200/0xa10 [ 602.208079][T21874] ocfs2_fill_super+0x5571/0x63c0 [ 602.213607][T21874] get_tree_bdev_flags+0x40e/0x4d0 [ 602.219225][T21874] vfs_get_tree+0x92/0x2b0 [ 602.224147][T21874] do_new_mount+0x302/0x9e0 [ 602.229153][T21874] __se_sys_mount+0x313/0x410 [ 602.234334][T21874] do_syscall_64+0xfa/0xfa0 [ 602.239344][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.245747][T21874] [ 602.245747][T21874] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 602.254243][T21874] lock_acquire+0x120/0x360 [ 602.259262][T21874] down_read+0x46/0x2e0 [ 602.263928][T21874] ocfs2_start_trans+0x36a/0x6d0 [ 602.269376][T21874] ocfs2_shutdown_local_alloc+0x200/0xa10 [ 602.275602][T21874] ocfs2_fill_super+0x5571/0x63c0 [ 602.281130][T21874] get_tree_bdev_flags+0x40e/0x4d0 [ 602.286758][T21874] vfs_get_tree+0x92/0x2b0 [ 602.291677][T21874] do_new_mount+0x302/0x9e0 [ 602.296690][T21874] __se_sys_mount+0x313/0x410 [ 602.301881][T21874] do_syscall_64+0xfa/0xfa0 [ 602.306893][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.313287][T21874] [ 602.313287][T21874] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 602.320753][T21874] lock_acquire+0x120/0x360 [ 602.325767][T21874] ocfs2_start_trans+0x26b/0x6d0 [ 602.331211][T21874] ocfs2_xattr_set+0xd69/0x11f0 [ 602.336569][T21874] ocfs2_set_acl+0x701/0x7b0 [ 602.341666][T21874] ocfs2_iop_set_acl+0x1aa/0x2a0 [ 602.347108][T21874] vfs_set_acl+0x887/0xb00 [ 602.352026][T21874] do_set_acl+0xf6/0x190 [ 602.356767][T21874] filename_setxattr+0x2e0/0x600 [ 602.362210][T21874] path_setxattrat+0x364/0x3a0 [ 602.367480][T21874] __x64_sys_setxattr+0xbc/0xe0 [ 602.372835][T21874] do_syscall_64+0xfa/0xfa0 [ 602.377842][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.384238][T21874] [ 602.384238][T21874] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 602.394906][T21874] lock_acquire+0x120/0x360 [ 602.399938][T21874] down_write+0x96/0x1f0 [ 602.404691][T21874] ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 602.411096][T21874] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 602.417927][T21874] ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 602.424073][T21874] ocfs2_xattr_set+0xb70/0x11f0 [ 602.429432][T21874] ocfs2_set_acl+0x701/0x7b0 [ 602.434526][T21874] ocfs2_iop_set_acl+0x1aa/0x2a0 [ 602.439979][T21874] vfs_set_acl+0x887/0xb00 [ 602.445002][T21874] do_set_acl+0xf6/0x190 [ 602.449771][T21874] filename_setxattr+0x2e0/0x600 [ 602.455239][T21874] path_setxattrat+0x364/0x3a0 [ 602.460527][T21874] __x64_sys_setxattr+0xbc/0xe0 [ 602.465884][T21874] do_syscall_64+0xfa/0xfa0 [ 602.470891][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.477290][T21874] [ 602.477290][T21874] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 602.485097][T21874] validate_chain+0xb9b/0x2140 [ 602.490373][T21874] __lock_acquire+0xab9/0xd20 [ 602.495560][T21874] lock_acquire+0x120/0x360 [ 602.500573][T21874] down_read+0x46/0x2e0 [ 602.505237][T21874] ocfs2_init_acl+0x2f9/0x720 [ 602.510419][T21874] ocfs2_mknod+0x1321/0x2050 [ 602.515512][T21874] ocfs2_create+0x1a5/0x440 [ 602.520517][T21874] path_openat+0x14f4/0x3830 [ 602.525610][T21874] do_filp_open+0x1fa/0x410 [ 602.530627][T21874] do_sys_openat2+0x121/0x1c0 [ 602.535829][T21874] __x64_sys_openat+0x138/0x170 [ 602.541196][T21874] do_syscall_64+0xfa/0xfa0 [ 602.546214][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.552616][T21874] [ 602.552616][T21874] other info that might help us debug this: [ 602.552616][T21874] [ 602.562824][T21874] Chain exists of: [ 602.562824][T21874] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 602.562824][T21874] [ 602.576553][T21874] Possible unsafe locking scenario: [ 602.576553][T21874] [ 602.583993][T21874] CPU0 CPU1 [ 602.589348][T21874] ---- ---- [ 602.594695][T21874] rlock(jbd2_handle); [ 602.598844][T21874] lock(&journal->j_trans_barrier); [ 602.606644][T21874] lock(jbd2_handle); [ 602.613231][T21874] rlock(&oi->ip_xattr_sem); [ 602.617897][T21874] [ 602.617897][T21874] *** DEADLOCK *** [ 602.617897][T21874] [ 602.626031][T21874] 8 locks held by syz.1.7160/21874: [ 602.631226][T21874] #0: ffff88807bbe0420 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 602.640470][T21874] #1: ffff888073203480 (&type->i_mutex_dir_key#13){+.+.}-{4:4}, at: path_openat+0x8da/0x3830 [ 602.650756][T21874] #2: ffff88804292c2c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 602.664502][T21874] #3: ffff8880732042c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 602.678329][T21874] #4: ffff88804292d100 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0 [ 602.692318][T21874] #5: ffff88807bbe0610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050 [ 602.701539][T21874] #6: ffff8880551c84e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0 [ 602.712237][T21874] #7: ffff88814d648950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 602.721896][T21874] [ 602.721896][T21874] stack backtrace: [ 602.727775][T21874] CPU: 0 UID: 0 PID: 21874 Comm: syz.1.7160 Not tainted syzkaller #0 PREEMPT(full) [ 602.727794][T21874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 602.727806][T21874] Call Trace: [ 602.727816][T21874] [ 602.727823][T21874] dump_stack_lvl+0x189/0x250 [ 602.727843][T21874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.727858][T21874] ? __pfx__printk+0x10/0x10 [ 602.727873][T21874] ? stack_trace_save+0x9c/0xe0 [ 602.727893][T21874] print_circular_bug+0x2ee/0x310 [ 602.727913][T21874] check_noncircular+0x134/0x160 [ 602.727929][T21874] validate_chain+0xb9b/0x2140 [ 602.727954][T21874] __lock_acquire+0xab9/0xd20 [ 602.727974][T21874] ? ocfs2_init_acl+0x2f9/0x720 [ 602.727991][T21874] lock_acquire+0x120/0x360 [ 602.728008][T21874] ? ocfs2_init_acl+0x2f9/0x720 [ 602.728027][T21874] ? __pfx_preempt_schedule+0x10/0x10 [ 602.728045][T21874] down_read+0x46/0x2e0 [ 602.728061][T21874] ? ocfs2_init_acl+0x2f9/0x720 [ 602.728080][T21874] ocfs2_init_acl+0x2f9/0x720 [ 602.728099][T21874] ? ocfs2_mknod_locked+0x148/0x250 [ 602.728118][T21874] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 602.728134][T21874] ? dquot_alloc_inode+0x216/0xa50 [ 602.728154][T21874] ? ocfs2_block_signals+0x94/0xe0 [ 602.728169][T21874] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 602.728183][T21874] ? __kasan_save_free_info+0x46/0x50 [ 602.728204][T21874] ? ocfs2_init_security_get+0x139/0x1a0 [ 602.728226][T21874] ocfs2_mknod+0x1321/0x2050 [ 602.728250][T21874] ? __pfx_ocfs2_mknod+0x10/0x10 [ 602.728265][T21874] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 602.728284][T21874] ? __lock_acquire+0xab9/0xd20 [ 602.728309][T21874] ? look_up_lock_class+0x74/0x170 [ 602.728324][T21874] ? register_lock_class+0x51/0x320 [ 602.728343][T21874] ? __lock_acquire+0xab9/0xd20 [ 602.728364][T21874] ? __lock_acquire+0xab9/0xd20 [ 602.728387][T21874] ? do_raw_spin_lock+0x121/0x290 [ 602.728405][T21874] ? do_raw_spin_unlock+0x122/0x240 [ 602.728422][T21874] ? rcu_is_watching+0x15/0xb0 [ 602.728434][T21874] ? ocfs2_lookup+0x5b9/0x9b0 [ 602.728451][T21874] ocfs2_create+0x1a5/0x440 [ 602.728466][T21874] ? __pfx_ocfs2_lookup+0x10/0x10 [ 602.728480][T21874] ? from_kgid+0x1b0/0x650 [ 602.728497][T21874] ? __pfx_ocfs2_create+0x10/0x10 [ 602.728512][T21874] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 602.728534][T21874] ? inode_permission+0x149/0x470 [ 602.728550][T21874] ? __pfx_ocfs2_permission+0x10/0x10 [ 602.728563][T21874] ? bpf_lsm_inode_create+0x9/0x20 [ 602.728580][T21874] ? __pfx_ocfs2_create+0x10/0x10 [ 602.728594][T21874] path_openat+0x14f4/0x3830 [ 602.728618][T21874] ? __pfx_path_openat+0x10/0x10 [ 602.728636][T21874] do_filp_open+0x1fa/0x410 [ 602.728649][T21874] ? __lock_acquire+0xab9/0xd20 [ 602.728670][T21874] ? __pfx_do_filp_open+0x10/0x10 [ 602.728690][T21874] ? _raw_spin_unlock+0x28/0x50 [ 602.728703][T21874] ? alloc_fd+0x64c/0x6c0 [ 602.728721][T21874] do_sys_openat2+0x121/0x1c0 [ 602.728741][T21874] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.728761][T21874] ? rcu_is_watching+0x15/0xb0 [ 602.728774][T21874] __x64_sys_openat+0x138/0x170 [ 602.728795][T21874] do_syscall_64+0xfa/0xfa0 [ 602.728815][T21874] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.728830][T21874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.728843][T21874] ? clear_bhb_loop+0x60/0xb0 [ 602.728858][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.728872][T21874] RIP: 0033:0x7fbf0178eec9 [ 602.728886][T21874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.728898][T21874] RSP: 002b:00007fbf026cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 602.728917][T21874] RAX: ffffffffffffffda RBX: 00007fbf019e5fa0 RCX: 00007fbf0178eec9 [ 602.728928][T21874] RDX: 0000000000101042 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 602.728940][T21874] RBP: 00007fbf01811f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.728951][T21874] R10: 00000000000000b0 R11: 0000000000000246 R12: 0000000000000000 [ 602.728961][T21874] R13: 00007fbf019e6038 R14: 00007fbf019e5fa0 R15: 00007ffc742820c8 [ 602.728976][T21874] [ 602.729025][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.730840][ T5870] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 602.814842][T21936] CIFS mount error: No usable UNC path provided in device string! [ 602.814842][T21936] [ 602.843329][ T5870] usb 4-1: config 2 has no interface number 0 [ 602.851589][T21936] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 602.865258][ T5870] usb 4-1: config 2 interface 31 has no altsetting 0 [ 603.175609][ T5870] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 603.178123][ T5866] ocfs2: Unmounting device (7,1) on (node local) [ 603.184903][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.201265][ T5870] usb 4-1: Product: syz [ 603.208866][ T5870] usb 4-1: Manufacturer: syz [ 603.213556][ T5870] usb 4-1: SerialNumber: syz [ 603.670716][ T5870] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 603.681648][ T5870] usb 4-1: USB disconnect, device number 9