last executing test programs: 2.800258022s ago: executing program 3 (id=17456): syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696465726f636b706572916964652c00add51ea29069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f502634dfa74f42b394b1587068ecfa5acd459ae5a7dce3d2ca29a5d67adb9bfb87ce6ccb85cb98b2b7a0c5bae05ac8cfd1895938b2910b1498c0d61c80000"], 0x0, 0x694, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2.71169359s ago: executing program 2 (id=17457): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffeffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) 2.684408943s ago: executing program 3 (id=17458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2.523286587s ago: executing program 3 (id=17461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) 2.509005519s ago: executing program 2 (id=17462): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x18) 2.348069484s ago: executing program 2 (id=17465): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x1010000, &(0x7f0000000740)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@shortname_lower}, {@utf8no}, {}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@quiet}]}, 0x1, 0x363, &(0x7f0000000280)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002ec0)=""/4096, 0x1000) 2.293511489s ago: executing program 3 (id=17467): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x200000, &(0x7f0000005a80)=ANY=[], 0x2, 0x5506, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x10001, 0x3}) 2.148214502s ago: executing program 4 (id=17469): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1014800, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e84, &(0x7f0000000800)={@desc={0x20000700, 0xc21bffff, @auto="3de400001000"}}) 1.904287785s ago: executing program 2 (id=17472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.771641157s ago: executing program 4 (id=17473): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.662420677s ago: executing program 2 (id=17475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5fd0fb13dfb0ca6e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.562112317s ago: executing program 4 (id=17478): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') 1.492221013s ago: executing program 2 (id=17479): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0) 1.288057521s ago: executing program 1 (id=17482): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, &(0x7f0000000100)) 1.235351547s ago: executing program 4 (id=17485): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000340)="c796bab467f3068794dee57f04a0caa16edf5059d79b2fa8324cb02707eb0410ab", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="650d10e4955fd036", 0x8}, {&(0x7f0000000240)="7a16d923", 0x4}], 0x2}}], 0x3, 0x8008801) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 1.09066538s ago: executing program 0 (id=17486): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.064389412s ago: executing program 0 (id=17487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) 1.009715787s ago: executing program 0 (id=17488): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 910.357926ms ago: executing program 0 (id=17489): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x38108c9, &(0x7f00000008c0)=ANY=[@ANYBLOB="696f636861727365743d63703836312c636f6465706167653d69736f383835392d332c706172743d3078303030303030303030303030000000000001000065742c706172743d3078303030303030303030303030303030352c00"], 0x12, 0x2c7, &(0x7f0000000140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000a40)=""/44, 0x25) 909.903176ms ago: executing program 4 (id=17490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r1, 0x1, 0x0, 0x0, {0x5, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 907.968957ms ago: executing program 1 (id=17491): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x19) 852.115162ms ago: executing program 0 (id=17492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xf2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 740.238532ms ago: executing program 4 (id=17493): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @main=@item_4={0x3, 0x0, 0x9, "1e8503e8"}, @local=@item_012={0x2, 0x2, 0x2, 'p1'}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0x8, "49ba"}, @main=@item_4={0x3, 0x0, 0x9, "93cb2eba"}]}}, 0x0}, 0x0) 674.233898ms ago: executing program 3 (id=17494): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200c00, &(0x7f0000000040)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@prjquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x0, 0x2ffffffffffffff, 0x401, 0x0, 0x0, 0x4}) 649.125291ms ago: executing program 0 (id=17495): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 464.253398ms ago: executing program 1 (id=17496): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') 275.444755ms ago: executing program 1 (id=17497): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140005"], 0x2c}}, 0x0) 90.854852ms ago: executing program 1 (id=17498): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], @echo_reply}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 185.37µs ago: executing program 3 (id=17499): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 1 (id=17500): r0 = io_uring_setup(0x7c52, &(0x7f00000002c0)={0x0, 0x10000, 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): [T12527] FAT-fs (loop0): Directory bread(block 67) failed [ 1658.829456][T12527] FAT-fs (loop0): Directory bread(block 68) failed [ 1658.849703][T12527] FAT-fs (loop0): Directory bread(block 69) failed [ 1658.849839][T12527] FAT-fs (loop0): Directory bread(block 70) failed [ 1658.889396][T12527] FAT-fs (loop0): Directory bread(block 71) failed [ 1658.889537][T12527] FAT-fs (loop0): Directory bread(block 72) failed [ 1658.889572][T12527] FAT-fs (loop0): Directory bread(block 73) failed [ 1658.981637][T12533] netlink: 'syz.3.16382': attribute type 10 has an invalid length. [ 1658.982112][T12533] device team0 left promiscuous mode [ 1658.982130][T12533] device team_slave_0 left promiscuous mode [ 1658.982303][T12533] device team_slave_1 left promiscuous mode [ 1658.982421][T12533] device bridge0 left promiscuous mode [ 1658.997197][T12499] loop4: detected capacity change from 0 to 40427 [ 1659.000276][T12499] F2FS-fs (loop4): invalid crc value [ 1659.002362][T12499] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1659.031749][T12533] batman_adv: batadv0: Adding interface: team0 [ 1659.111703][T12499] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1659.128483][T12533] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1659.178489][T12533] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1659.208254][T12535] netlink: 'syz.3.16382': attribute type 10 has an invalid length. [ 1659.213054][T12514] loop1: detected capacity change from 0 to 32768 [ 1659.233438][T12535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16382'. [ 1659.252787][ T8111] syz-executor: attempt to access beyond end of device [ 1659.252787][ T8111] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1659.260188][T12535] device team0 entered promiscuous mode [ 1659.286301][T12535] device team_slave_0 entered promiscuous mode [ 1659.293021][T12535] device team_slave_1 entered promiscuous mode [ 1659.318895][T12535] device bridge0 entered promiscuous mode [ 1659.326371][T12514] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1659.382699][T12535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.403080][T12514] (syz.1.16373,12514,1):ocfs2_get_suballoc_slot_bit:2716 ERROR: invalid inode 139 requested [ 1659.420413][T12535] batman_adv: batadv0: Interface activated: team0 [ 1659.433696][T12535] batman_adv: batadv0: Interface deactivated: team0 [ 1659.444782][T12514] (syz.1.16373,12514,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -22 [ 1659.450752][T12535] batman_adv: batadv0: Removing interface: team0 [ 1659.459205][T12514] (syz.1.16373,12514,1):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -22 [ 1659.478274][T12514] (syz.1.16373,12514,1):ocfs2_test_inode_bit:2864 ERROR: status = -22 [ 1659.489664][T12535] bridge0: port 3(team0) entered blocking state [ 1659.507085][T12535] bridge0: port 3(team0) entered disabled state [ 1659.570514][T10799] ocfs2: Unmounting device (7,1) on (node local) [ 1659.626018][T10009] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1659.730603][ T27] audit: type=1400 audit(2000000314.463:3618): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26D6 pid=12553 comm="syz.3.16391" [ 1659.888883][T10009] usb 3-1: Using ep0 maxpacket: 8 [ 1659.923838][T12560] loop1: detected capacity change from 0 to 8 [ 1659.985700][T12560] SQUASHFS error: Unable to read directory block [629:1f] [ 1660.026785][T10009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.032615][T12567] MPTCP: kernel_bind error, err=-99 [ 1660.054697][T10009] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1660.091997][T10009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.110416][T10009] usb 3-1: config 0 descriptor?? [ 1660.434579][T12583] loop1: detected capacity change from 0 to 2048 [ 1660.448380][T12583] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1660.590356][T10009] hid-alps 0003:044E:121E.00BA: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 1660.676106][T10007] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1660.809145][T10009] usb 3-1: USB disconnect, device number 117 [ 1661.155762][T12606] loop1: detected capacity change from 0 to 4096 [ 1661.170281][T12606] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1661.228909][T12606] ntfs: (device loop1): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 1661.241068][T10007] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1661.251004][T10007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.259385][T10007] usb 5-1: Product: syz [ 1661.263600][T10007] usb 5-1: Manufacturer: syz [ 1661.269508][T10007] usb 5-1: SerialNumber: syz [ 1661.273979][T12606] ntfs: volume version 3.1. [ 1661.310286][T10007] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1661.383759][T12611] loop1: detected capacity change from 0 to 16 [ 1661.401833][T12611] erofs: (device loop1): mounted with root inode @ nid 36. [ 1661.420048][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 1661.437725][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 1661.452695][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 1661.463017][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1661.482353][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1661.524847][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 1661.534633][T12611] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1661.547286][T12611] syz.1.16417: attempt to access beyond end of device [ 1661.547286][T12611] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 1661.573849][T12611] syz.1.16417: attempt to access beyond end of device [ 1661.573849][T12611] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 1661.592872][T12611] syz.1.16417: attempt to access beyond end of device [ 1661.592872][T12611] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1661.896457][T10007] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1662.051843][T12631] loop0: detected capacity change from 0 to 4096 [ 1662.090361][T12631] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1662.099388][T12631] NILFS (loop0): trying rollback from an earlier position [ 1662.135682][T12631] NILFS (loop0): recovery complete [ 1662.153080][T12632] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1662.317113][T10009] usb 5-1: USB disconnect, device number 82 [ 1662.407369][T12617] loop2: detected capacity change from 0 to 32768 [ 1662.443819][T12617] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1662.452443][T12617] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1662.471187][T12617] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1662.498529][T10214] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1662.505695][T10214] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1662.605657][T10214] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 99ms [ 1662.619436][T10214] gfs2: fsid=syz:syz.0: jid=0: Done [ 1662.624991][T12617] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1663.084055][T12650] netlink: 'syz.2.16432': attribute type 4 has an invalid length. [ 1663.094101][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16432'. [ 1663.202349][T10007] usb 5-1: Service connection timeout for: 256 [ 1663.214916][T10007] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1663.233839][T10007] ath9k_htc: Failed to initialize the device [ 1663.248341][T10009] usb 5-1: ath9k_htc: USB layer deinitialized [ 1663.613998][T12661] loop1: detected capacity change from 0 to 4096 [ 1663.646251][T12667] tipc: Enabling of bearer rejected, failed to enable media [ 1663.721324][T12669] netlink: 'syz.4.16445': attribute type 1 has an invalid length. [ 1663.731677][T12642] loop0: detected capacity change from 0 to 32768 [ 1663.803945][T12642] XFS (loop0): Mounting V5 Filesystem [ 1663.912408][T12642] XFS (loop0): Ending clean mount [ 1663.939716][T12642] XFS (loop0): Quotacheck needed: Please wait. [ 1664.028840][T10799] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1664.045771][T10799] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1664.085455][T12642] XFS (loop0): Quotacheck: Done. [ 1664.132447][T30744] XFS (loop0): Unmounting Filesystem [ 1664.492915][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16458'. [ 1664.504242][T12699] loop1: detected capacity change from 0 to 16 [ 1664.585343][T12699] erofs: (device loop1): mounted with root inode @ nid 36. [ 1664.651087][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 1664.682496][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 1664.708393][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 1664.741987][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 1664.773098][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 1664.799982][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 1664.823571][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 1664.849184][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 1664.883184][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 1664.921689][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 1664.946153][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 1664.971337][T12715] loop4: detected capacity change from 0 to 1024 [ 1664.988971][T12715] EXT4-fs: Ignoring removed orlov option [ 1664.994693][T12715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1665.007753][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 1665.043033][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 1665.066429][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 1665.105682][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 1665.116153][T12715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1665.163307][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 1665.226685][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 1665.240729][T12705] loop2: detected capacity change from 0 to 32768 [ 1665.266248][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 1665.297483][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 1665.304673][T12705] XFS (loop2): Mounting V5 Filesystem [ 1665.346657][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 1665.402779][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 1665.434212][T12705] XFS (loop2): Ending clean mount [ 1665.459998][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1665.508332][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1665.548302][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 1665.578781][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1665.605578][ T5782] XFS (loop2): Unmounting Filesystem [ 1665.617690][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1665.648698][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 1665.658370][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 1665.668533][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 1665.679109][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1665.688793][T12699] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1665.698401][T12699] bio_check_eod: 3 callbacks suppressed [ 1665.698418][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.698418][T12699] loop1: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 1665.741800][ T27] audit: type=1326 audit(2000000320.473:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12749 comm="syz.3.16477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56b37dff9 code=0x0 [ 1665.742133][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.742133][T12699] loop1: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 1665.780302][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.780302][T12699] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1665.797352][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.797352][T12699] loop1: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 1665.819838][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.819838][T12699] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 1665.848157][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.848157][T12699] loop1: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 1665.873881][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.873881][T12699] loop1: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 1665.891358][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.891358][T12699] loop1: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 1665.909109][T12753] netlink: 'syz.4.16478': attribute type 12 has an invalid length. [ 1665.917537][T12753] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16478'. [ 1665.932289][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.932289][T12699] loop1: rw=524288, sector=14550774152, nr_sectors = 16 limit=16 [ 1665.950323][T12699] syz.1.16456: attempt to access beyond end of device [ 1665.950323][T12699] loop1: rw=524288, sector=14550774160, nr_sectors = 16 limit=16 [ 1666.083341][T12759] loop4: detected capacity change from 0 to 64 [ 1666.227261][T12767] loop1: detected capacity change from 0 to 256 [ 1666.241581][T12767] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 1666.255351][T12767] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006005) [ 1666.404216][T12773] loop1: detected capacity change from 0 to 1024 [ 1666.421342][T12773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1666.456193][T10009] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1666.471777][T10799] EXT4-fs (loop1): unmounting filesystem. [ 1666.585476][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16490'. [ 1666.836446][T10009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.852789][T10009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.863945][T10009] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 1666.874058][T10009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.885486][T10009] usb 5-1: config 0 descriptor?? [ 1667.138900][T12793] loop1: detected capacity change from 0 to 64 [ 1667.363759][T10009] wacom 0003:056A:032B.00BB: unknown main item tag 0x0 [ 1667.381211][T10009] wacom 0003:056A:032B.00BB: unknown main item tag 0x0 [ 1667.411937][T10009] wacom 0003:056A:032B.00BB: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.4-1/input0 [ 1667.471738][T12801] netlink: 'syz.1.16501': attribute type 3 has an invalid length. [ 1667.562679][T10214] usb 5-1: USB disconnect, device number 83 [ 1668.153835][T12824] loop2: detected capacity change from 0 to 256 [ 1668.209666][T12822] loop1: detected capacity change from 0 to 4096 [ 1668.220165][T12822] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1668.333379][T12822] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 1668.405161][T10799] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 1668.435427][T10799] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 1668.456998][T10799] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1668.517295][T12839] netlink: 'syz.3.16520': attribute type 1 has an invalid length. [ 1668.798193][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.804552][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.043754][T12863] loop2: detected capacity change from 0 to 1024 [ 1669.100014][T12863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1669.133805][T12835] loop0: detected capacity change from 0 to 32768 [ 1669.148931][T12835] JBD2: Ignoring recovery information on journal [ 1669.188516][T12835] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1669.252733][T30744] ocfs2: Unmounting device (7,0) on (node local) [ 1669.287395][ T5782] EXT4-fs (loop2): unmounting filesystem. [ 1669.376593][T12872] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1669.586201][T12877] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16535'. [ 1669.831229][T12881] loop0: detected capacity change from 0 to 4096 [ 1669.843285][T12851] loop1: detected capacity change from 0 to 32768 [ 1669.852129][T12881] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1669.874832][T12851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.16524 (12851) [ 1669.895242][T12851] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1669.909042][T12851] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1669.918751][T12851] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1669.927502][T12851] BTRFS info (device loop1): turning on flush-on-commit [ 1669.945451][ T27] audit: type=1326 audit(2000000324.673:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.16537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56b37dff9 code=0x7ffc0000 [ 1669.951582][T12881] ntfs: volume version 3.1. [ 1669.973386][T12851] BTRFS info (device loop1): enabling auto defrag [ 1669.983125][T12851] BTRFS info (device loop1): max_inline at 0 [ 1669.993244][T12851] BTRFS info (device loop1): using free space tree [ 1670.026171][ T27] audit: type=1326 audit(2000000324.673:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.16537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56b37dff9 code=0x7ffc0000 [ 1670.073783][T12866] loop4: detected capacity change from 0 to 32768 [ 1670.080996][ T27] audit: type=1326 audit(2000000324.713:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.16537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa56b37dff9 code=0x7ffc0000 [ 1670.087471][T12866] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.16531 (12866) [ 1670.103837][ T27] audit: type=1326 audit(2000000324.713:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.16537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56b37dff9 code=0x7ffc0000 [ 1670.103886][ T27] audit: type=1326 audit(2000000324.713:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12882 comm="syz.3.16537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56b37dff9 code=0x7ffc0000 [ 1670.177108][T12866] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1670.217358][T12866] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1670.243730][T12866] BTRFS info (device loop4): using free space tree [ 1670.313312][T12851] BTRFS info (device loop1): enabling ssd optimizations [ 1670.495899][T10799] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1670.526276][T12866] BTRFS info (device loop4): enabling ssd optimizations [ 1670.992392][ T8111] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1671.003375][T12943] loop6: detected capacity change from 0 to 524287999 [ 1671.057281][ C0] blk_print_req_error: 6 callbacks suppressed [ 1671.057302][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.072684][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.120824][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.130099][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.138230][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.138396][ T4160] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1671.147438][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.156738][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.172460][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.186084][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.195316][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.204583][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.213799][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.233611][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.242887][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.252025][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.261253][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.274561][T12943] ldm_validate_partition_table(): Disk read failed. [ 1671.282371][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.291639][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.325640][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1671.335078][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1671.352066][T12943] Dev loop6: unable to read RDB block 0 [ 1671.360894][T12943] loop6: unable to read partition table [ 1671.385255][T12943] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1671.438830][ T4160] usb 3-1: Using ep0 maxpacket: 16 [ 1671.556479][ T4160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.584291][ T4160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.604559][ T4160] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1671.626167][ T4160] usb 3-1: New USB device found, idVendor=045e, idProduct=0001, bcdDevice= 0.00 [ 1671.645599][ T4160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.671772][ T4160] usb 3-1: config 0 descriptor?? [ 1671.684842][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16549'. [ 1671.846471][T10007] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1671.922927][T12967] loop4: detected capacity change from 0 to 64 [ 1672.163958][ T4160] hid-generic 0003:045E:0001.00BC: unknown main item tag 0x0 [ 1672.179348][ T4160] hid-generic 0003:045E:0001.00BC: ignoring exceeding usage max [ 1672.191757][ T4160] hid-generic 0003:045E:0001.00BC: unknown main item tag 0x0 [ 1672.203245][ T4160] hid-generic 0003:045E:0001.00BC: unbalanced collection at end of report description [ 1672.220137][ T4160] hid-generic: probe of 0003:045E:0001.00BC failed with error -22 [ 1672.236523][T10007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.256124][T10007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.276444][T10007] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1672.298608][T10007] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1672.301492][T12975] loop4: detected capacity change from 0 to 256 [ 1672.317882][T10007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.337570][T10007] usb 2-1: config 0 descriptor?? [ 1672.378429][T12975] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 1672.392449][T12975] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006005) [ 1672.412957][T10009] usb 3-1: USB disconnect, device number 118 [ 1672.830541][T10007] macally 0003:060B:0001.00BD: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [ 1673.020065][ T27] audit: type=1326 audit(2000000327.753:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.2.16582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1673.049973][T10009] usb 2-1: USB disconnect, device number 113 [ 1673.082992][ T27] audit: type=1326 audit(2000000327.753:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.2.16582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1673.140563][ T27] audit: type=1326 audit(2000000327.753:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13007 comm="syz.2.16582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1673.217055][T13019] netlink: 'syz.3.16587': attribute type 30 has an invalid length. [ 1673.233489][T13020] loop2: detected capacity change from 0 to 256 [ 1673.266265][T13020] exfat: Deprecated parameter 'utf8' [ 1673.292489][T13020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1673.494025][T13033] device sit0 entered promiscuous mode [ 1673.524893][T13033] netlink: 'syz.0.16594': attribute type 1 has an invalid length. [ 1673.553163][T13033] netlink: 1 bytes leftover after parsing attributes in process `syz.0.16594'. [ 1673.757016][T13045] loop2: detected capacity change from 0 to 512 [ 1673.776684][T13045] EXT4-fs: Ignoring removed nobh option [ 1673.786633][ T4160] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1673.801720][T13049] IPVS: Error connecting to the multicast addr [ 1673.851113][T13045] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1673.873547][T13045] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1673.906177][T13045] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #13: comm syz.2.16599: casefold flag without casefold feature [ 1673.926694][T13045] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.16599: couldn't read orphan inode 13 (err -117) [ 1673.966310][T13045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1674.026496][ T4160] usb 5-1: Using ep0 maxpacket: 16 [ 1674.059891][ T5782] EXT4-fs (loop2): unmounting filesystem. [ 1674.156559][ T4160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.178539][ T4160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.205086][ T4160] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1674.223052][ T4160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.267369][ T4160] usb 5-1: config 0 descriptor?? [ 1674.523724][T13077] loop2: detected capacity change from 0 to 256 [ 1674.549499][T13077] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1674.573494][T13077] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1674.724506][T13057] loop0: detected capacity change from 0 to 32768 [ 1674.749470][ T4160] hid-led 0003:1294:1320.00BE: unbalanced delimiter at end of report description [ 1674.759929][T13057] XFS: attr2 mount option is deprecated. [ 1674.769618][ T4160] hid-led: probe of 0003:1294:1320.00BE failed with error -22 [ 1674.845289][T13057] XFS (loop0): Mounting V5 Filesystem [ 1674.957415][ T4160] usb 5-1: USB disconnect, device number 84 [ 1674.985235][T13057] XFS (loop0): Ending clean mount [ 1674.992934][T13057] XFS (loop0): Quotacheck needed: Please wait. [ 1675.043809][T13097] netlink: 'syz.2.16620': attribute type 19 has an invalid length. [ 1675.052245][T13097] netlink: 'syz.2.16620': attribute type 19 has an invalid length. [ 1675.187953][T13057] XFS (loop0): Quotacheck: Done. [ 1675.230054][T13101] block nbd1: not configured, cannot reconfigure [ 1675.290888][T30744] XFS (loop0): Unmounting Filesystem [ 1675.351955][T13106] loop2: detected capacity change from 0 to 1024 [ 1675.423383][ T27] audit: type=1800 audit(2000000330.153:3628): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16624" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 1675.592576][T13120] loop2: detected capacity change from 0 to 2048 [ 1675.615683][T13120] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1675.632568][T13120] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1675.643589][T13120] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1675.651424][T13120] UDF-fs: Scanning with blocksize 512 failed [ 1675.674150][T13120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1675.702144][ T27] audit: type=1800 audit(2000000330.433:3629): pid=13120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16633" name="file2" dev="loop2" ino=839 res=0 errno=0 [ 1675.770533][T10007] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1675.820432][T13129] loop2: detected capacity change from 0 to 512 [ 1675.828181][T13129] ext4: Unknown parameter 'uid>00000000000000000000' [ 1675.876153][T10213] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1676.019273][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16641'. [ 1676.041821][T10007] usb 4-1: Using ep0 maxpacket: 16 [ 1676.090075][T13141] loop1: detected capacity change from 0 to 4096 [ 1676.114276][T13141] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1676.122602][T13141] NILFS (loop1): trying rollback from an earlier position [ 1676.142128][T13141] NILFS (loop1): recovery complete [ 1676.150705][T13146] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1676.166399][T10007] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1676.174694][T10007] usb 4-1: config 0 has no interface number 0 [ 1676.181679][T10007] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1676.192213][T10007] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1676.193852][T13141] NILFS (loop1): error -2 reading inode: ino=32768 [ 1676.249536][T10213] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 1676.264179][T10213] usb 5-1: config 0 has no interface number 0 [ 1676.278728][T10213] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1676.291688][T10213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.320057][T10213] usb 5-1: config 0 descriptor?? [ 1676.366575][T10007] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1676.370468][T10213] ums-realtek 5-1:0.5: USB Mass Storage device detected [ 1676.380528][T10007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.394672][T10007] usb 4-1: Product: syz [ 1676.406486][T10007] usb 4-1: Manufacturer: syz [ 1676.411135][T10007] usb 4-1: SerialNumber: syz [ 1676.427787][T10007] usb 4-1: config 0 descriptor?? [ 1676.446840][T13113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1676.464589][T13113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1676.584492][ T3684] usb 5-1: USB disconnect, device number 85 [ 1676.692326][T13113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1676.711623][T13113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1676.980367][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16656'. [ 1677.166137][T10007] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1677.192831][T10007] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1677.224761][T10007] asix: probe of 4-1:0.251 failed with error -71 [ 1677.281133][T10007] usb 4-1: USB disconnect, device number 2 [ 1677.288040][T13188] loop4: detected capacity change from 0 to 736 [ 1677.318032][T13192] netlink: 'syz.1.16664': attribute type 2 has an invalid length. [ 1677.336735][T13192] netlink: 'syz.1.16664': attribute type 9 has an invalid length. [ 1677.355620][T13192] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16664'. [ 1677.401974][T13188] Symlink component flag not implemented [ 1677.404755][T13190] loop0: detected capacity change from 0 to 8192 [ 1677.416157][T13188] Symlink component flag not implemented (121) [ 1677.445183][T13190] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1677.550781][T13198] ALSA: seq fatal error: cannot create timer (-19) [ 1677.655818][T13206] loop2: detected capacity change from 0 to 512 [ 1677.663110][T13206] EXT4-fs: Ignoring removed mblk_io_submit option [ 1677.682708][T13206] EXT4-fs: Ignoring removed i_version option [ 1677.752745][T13206] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.16671: invalid block [ 1677.795799][T13206] EXT4-fs (loop2): Remounting filesystem read-only [ 1677.826150][T13206] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.16671: couldn't read orphan inode 11 (err -117) [ 1677.869765][T13206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1677.896321][T10007] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1677.929483][T13206] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.16671: Directory hole found for htree leaf block 0 [ 1677.953291][T13206] EXT4-fs (loop2): Remounting filesystem read-only [ 1678.017846][ T5782] EXT4-fs (loop2): unmounting filesystem. [ 1678.025503][T13216] loop4: detected capacity change from 0 to 1024 [ 1678.219381][T13208] loop0: detected capacity change from 0 to 32768 [ 1678.286185][T13208] XFS (loop0): Mounting V5 Filesystem [ 1678.300033][T10007] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1678.326089][T10007] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1678.361811][T10007] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1678.452036][T13208] XFS (loop0): Ending clean mount [ 1678.469792][T13208] XFS (loop0): Quotacheck needed: Please wait. [ 1678.568733][T10007] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1678.589094][T10007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.589098][T13208] XFS (loop0): Quotacheck: Done. [ 1678.589125][T10007] usb 2-1: Product: syz [ 1678.664151][T10007] usb 2-1: Manufacturer: syz [ 1678.676069][T10007] usb 2-1: SerialNumber: syz [ 1678.686152][T30744] XFS (loop0): Unmounting Filesystem [ 1678.752884][T10007] hub 2-1:1.0: bad descriptor, ignoring hub [ 1678.761935][T10007] hub: probe of 2-1:1.0 failed with error -5 [ 1678.971993][T10007] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1679.306441][ T3684] usb 2-1: USB disconnect, device number 114 [ 1679.342238][ T3684] usblp0: removed [ 1679.633038][T13244] loop4: detected capacity change from 0 to 32768 [ 1679.643775][T13244] XFS: ikeep mount option is deprecated. [ 1679.752064][T13244] XFS (loop4): Mounting V5 Filesystem [ 1680.069974][T13244] XFS (loop4): Ending clean mount [ 1680.206487][ T8111] XFS (loop4): Unmounting Filesystem [ 1680.691431][T13266] loop1: detected capacity change from 0 to 32768 [ 1680.714619][T13266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.16692 (13266) [ 1680.781865][T13266] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1680.810207][T13266] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1680.846064][T13266] BTRFS info (device loop1): use no compression [ 1680.852475][T13266] BTRFS info (device loop1): force zlib compression, level 3 [ 1680.862570][T13266] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1680.885398][T13266] BTRFS info (device loop1): use lzo compression, level 0 [ 1680.906074][T13266] BTRFS info (device loop1): turning on flush-on-commit [ 1680.936073][T13266] BTRFS info (device loop1): enabling auto defrag [ 1680.942620][T13266] BTRFS info (device loop1): using free space tree [ 1681.178390][T13266] BTRFS info (device loop1): enabling ssd optimizations [ 1681.218022][T13266] BTRFS warning (device loop1): get dev_stats failed, device not found [ 1681.303823][T10799] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1681.485366][T13332] loop2: detected capacity change from 0 to 64 [ 1682.022485][T13342] loop2: detected capacity change from 0 to 164 [ 1682.406631][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16732'. [ 1682.799126][T13393] netlink: 'syz.4.16743': attribute type 1 has an invalid length. [ 1682.812976][T13392] loop1: detected capacity change from 0 to 128 [ 1682.860391][T13392] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1682.895311][T13392] bio_check_eod: 47 callbacks suppressed [ 1682.895332][T13392] syz.1.16741: attempt to access beyond end of device [ 1682.895332][T13392] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 1682.933196][T13398] netlink: 'syz.3.16745': attribute type 10 has an invalid length. [ 1682.950033][T13398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.957612][T13398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.959860][T13392] sysv_free_block: trying to free block not in datazone [ 1683.024993][T13398] device bridge0 left promiscuous mode [ 1683.094349][T13398] team0: Port device bridge0 removed [ 1683.094740][T10799] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1683.104979][T13398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.113826][T13398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.122040][T13398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.129249][T13398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.178190][T13398] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1683.226302][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16745'. [ 1683.285063][T13403] device bridge_slave_1 left promiscuous mode [ 1683.314455][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.357459][T13403] device bridge_slave_0 left promiscuous mode [ 1683.386300][T13403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.491516][T13403] bond0: (slave bridge0): Releasing backup interface [ 1683.591199][T13417] loop2: detected capacity change from 0 to 2048 [ 1683.624333][T13418] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1683.663777][T13402] loop4: detected capacity change from 0 to 32768 [ 1683.686091][T13402] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1683.695332][T13402] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1683.717580][T13402] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1683.740923][ T152] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1683.754804][ T152] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1683.786288][ T3688] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1683.814300][ T152] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 1683.833742][ T152] gfs2: fsid=syz:syz.0: jid=0: Done [ 1683.853168][T13402] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1684.056572][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 1684.188789][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.223951][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1684.266296][ T3688] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1684.295771][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.317675][ T3688] usb 2-1: config 0 descriptor?? [ 1684.329678][T13442] program syz.0.16767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1684.679974][T13458] loop0: detected capacity change from 0 to 1764 [ 1684.804445][ T3688] microsoft 0003:045E:07DA.00BF: ignoring exceeding usage max [ 1684.835141][T13432] loop2: detected capacity change from 0 to 32768 [ 1684.846287][T10213] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1684.856337][ T3688] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00BF/input/input97 [ 1684.919594][T13465] loop4: detected capacity change from 0 to 512 [ 1684.951580][ T3688] microsoft 0003:045E:07DA.00BF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1684.966285][T13465] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1684.984169][T13465] EXT4-fs (loop4): 1 truncate cleaned up [ 1684.990985][T13465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1685.024339][ T3688] usb 2-1: USB disconnect, device number 115 [ 1685.105873][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 1685.127154][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16781'. [ 1685.217574][T10213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.240863][T10213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.271452][T10213] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1685.295286][T10213] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1685.315523][T10213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.343976][T10213] usb 4-1: config 0 descriptor?? [ 1685.355675][T13477] loop0: detected capacity change from 0 to 4096 [ 1685.363697][T13477] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1685.366164][ T3655] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1685.386043][ T3656] Bluetooth: hci0: command 0x0c1a tx timeout [ 1685.409092][T13477] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1685.420653][T13477] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1685.430292][T13477] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1685.444043][T13477] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1685.476337][T13477] ntfs: volume version 3.1. [ 1685.493261][T13477] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1685.513899][T13477] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1685.526560][T13477] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1685.573987][T13477] ntfs: (device loop0): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1685.621922][ T3688] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1685.709629][T13484] loop1: detected capacity change from 0 to 256 [ 1685.761499][T13484] FAT-fs (loop1): Directory bread(block 64) failed [ 1685.784141][T13484] FAT-fs (loop1): Directory bread(block 65) failed [ 1685.801481][T13484] FAT-fs (loop1): Directory bread(block 66) failed [ 1685.816777][T13484] FAT-fs (loop1): Directory bread(block 67) failed [ 1685.829208][T10213] uclogic 0003:28BD:0055.00C0: interface is invalid, ignoring [ 1685.846173][T13484] FAT-fs (loop1): Directory bread(block 68) failed [ 1685.855206][T13475] loop4: detected capacity change from 0 to 40427 [ 1685.863142][T13484] FAT-fs (loop1): Directory bread(block 69) failed [ 1685.869482][T13475] F2FS-fs (loop4): invalid crc value [ 1685.873406][T13484] FAT-fs (loop1): Directory bread(block 70) failed [ 1685.882725][T13484] FAT-fs (loop1): Directory bread(block 71) failed [ 1685.889868][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 1685.901835][T13484] FAT-fs (loop1): Directory bread(block 72) failed [ 1685.909689][T13484] FAT-fs (loop1): Directory bread(block 73) failed [ 1685.917677][T13475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1686.006405][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.017881][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.028244][T13475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1686.049289][T10213] usb 4-1: USB disconnect, device number 3 [ 1686.055471][ T27] audit: type=1800 audit(2000000340.783:3630): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16782" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 1686.077839][ T3688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.096456][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16790'. [ 1686.106344][ T3688] usb 3-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 1686.115439][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.133521][ T3688] usb 3-1: config 0 descriptor?? [ 1686.152135][ T8111] syz-executor: attempt to access beyond end of device [ 1686.152135][ T8111] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1686.629360][ T3688] hid-generic 0003:1E7D:71CE.00C1: collection stack underflow [ 1686.656447][ T3688] hid-generic 0003:1E7D:71CE.00C1: item 0 2 0 12 parsing failed [ 1686.665009][ T3688] hid-generic: probe of 0003:1E7D:71CE.00C1 failed with error -22 [ 1686.834368][ T3688] usb 3-1: USB disconnect, device number 119 [ 1686.854977][T13521] loop1: detected capacity change from 0 to 128 [ 1687.103102][T13514] loop4: detected capacity change from 0 to 40427 [ 1687.124897][T13514] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1687.204804][T13514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1687.281765][ T8111] syz-executor: attempt to access beyond end of device [ 1687.281765][ T8111] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1687.599360][ T3688] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1687.705352][T13548] loop0: detected capacity change from 0 to 4096 [ 1687.755206][T13548] ntfs: volume version 3.1. [ 1687.956302][ T26] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1687.986635][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.006529][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.017423][T10009] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1688.042242][ T3688] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1688.066491][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.087564][ T3688] usb 2-1: config 0 descriptor?? [ 1688.216321][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 1688.346560][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1688.398295][T13564] loop0: detected capacity change from 0 to 32768 [ 1688.401500][T10009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.422918][T10009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.433226][T10009] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 1688.443367][T10009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.454079][T10009] usb 3-1: config 0 descriptor?? [ 1688.478629][T13564] XFS (loop0): Mounting V5 Filesystem [ 1688.529936][T13564] XFS (loop0): Ending clean mount [ 1688.561882][ T3688] zeroplus 0003:0C12:0030.00C2: unknown main item tag 0x1 [ 1688.569702][ T26] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1688.585990][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.594594][ T26] usb 5-1: Product: syz [ 1688.606296][ T3688] zeroplus 0003:0C12:0030.00C2: item fetching failed at offset 6/7 [ 1688.614819][ T3688] zeroplus 0003:0C12:0030.00C2: parse failed [ 1688.628106][ T26] usb 5-1: Manufacturer: syz [ 1688.632825][ T26] usb 5-1: SerialNumber: syz [ 1688.643531][ T3688] zeroplus: probe of 0003:0C12:0030.00C2 failed with error -22 [ 1688.660123][ T26] usb 5-1: config 0 descriptor?? [ 1688.677805][T13551] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1688.706825][ T26] hub 5-1:0.0: bad descriptor, ignoring hub [ 1688.713046][ T26] hub: probe of 5-1:0.0 failed with error -5 [ 1688.729039][ T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input98 [ 1688.749454][T30744] XFS (loop0): Unmounting Filesystem [ 1688.764085][ T26] usb 2-1: USB disconnect, device number 116 [ 1688.916923][ T3688] usb 5-1: USB disconnect, device number 86 [ 1688.965000][T10009] wacom 0003:056A:00B1.00C3: unknown main item tag 0x0 [ 1689.001788][T10009] wacom 0003:056A:00B1.00C3: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 1689.020580][T10009] wacom 0003:056A:00B1.00C3: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.2-1/input0 [ 1689.042314][T10009] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B1.00C3/input/input99 [ 1689.180967][ T4160] usb 3-1: USB disconnect, device number 120 [ 1689.634344][T13588] loop1: detected capacity change from 0 to 32768 [ 1689.642160][T13588] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.16837 (13588) [ 1689.657311][T13588] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1689.667974][T13588] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1689.677325][T13588] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1689.685517][T13588] BTRFS info (device loop1): enabling auto defrag [ 1689.692477][T13588] BTRFS info (device loop1): max_inline at 0 [ 1689.700359][T13588] BTRFS info (device loop1): using free space tree [ 1689.978689][T10799] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1690.111019][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16835'. [ 1690.438321][T13608] loop2: detected capacity change from 0 to 32768 [ 1690.575604][T13608] XFS (loop2): Mounting V5 Filesystem [ 1690.651515][T13608] XFS (loop2): Ending clean mount [ 1690.665606][T13597] loop4: detected capacity change from 0 to 32768 [ 1690.684981][T13608] XFS (loop2): Quotacheck needed: Please wait. [ 1690.901624][T13608] XFS (loop2): Quotacheck: Done. [ 1691.033338][ T5782] XFS (loop2): Unmounting Filesystem [ 1691.088380][T13645] loop4: detected capacity change from 0 to 4096 [ 1691.105177][T13645] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1691.155250][T13644] loop1: detected capacity change from 0 to 2048 [ 1691.218215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.276092][ T3656] Bluetooth: hci0: command 0x0c1a tx timeout [ 1691.279482][ T3655] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1691.317860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.325111][T13645] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1691.339093][T13654] (syz.3.16850,13654,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1691.349264][T13654] (syz.3.16850,13654,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1691.362087][T13653] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1691.815304][T13671] loop2: detected capacity change from 0 to 8 [ 1691.889022][T13671] SQUASHFS error: xz decompression failed, data probably corrupt [ 1691.904954][T13671] SQUASHFS error: Failed to read block 0xa8: -5 [ 1691.942558][T13671] SQUASHFS error: xz decompression failed, data probably corrupt [ 1691.957292][T13671] SQUASHFS error: Failed to read block 0xa8: -5 [ 1691.971013][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1691.971029][ T27] audit: type=1800 audit(2000000346.703:3631): pid=13671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16856" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 1692.468886][T13691] loop0: detected capacity change from 0 to 64 [ 1692.494381][T13689] loop4: detected capacity change from 0 to 4096 [ 1692.565997][T13694] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1692.732371][T13693] loop2: detected capacity change from 0 to 4096 [ 1692.771422][T13703] sp0: Synchronizing with TNC [ 1692.866663][T13693] ntfs3: loop2: ino=5, "/" directory corrupted [ 1692.872900][T13693] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1692.894834][T13706] loop1: detected capacity change from 0 to 2048 [ 1692.912181][T13693] ntfs3: loop2: ino=5, "/" directory corrupted [ 1692.924298][T13706] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1692.948873][T13706] syz.1.16872: attempt to access beyond end of device [ 1692.948873][T13706] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1693.007451][T13712] loop0: detected capacity change from 0 to 1024 [ 1693.084000][T10185] hfsplus: b-tree write err: -5, ino 4 [ 1693.196271][ T3688] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1693.466181][ T3688] usb 5-1: Using ep0 maxpacket: 8 [ 1693.550857][T13730] loop0: detected capacity change from 0 to 256 [ 1693.567726][T13730] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1693.593256][T13730] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1693.606839][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.628009][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.632272][T13730] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1693.656376][ T3688] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1693.686747][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.716770][ T3688] usb 5-1: config 0 descriptor?? [ 1693.794023][T13734] loop1: detected capacity change from 0 to 47 [ 1694.115741][T13725] loop2: detected capacity change from 0 to 32768 [ 1694.123040][T13725] XFS: ikeep mount option is deprecated. [ 1694.190389][T13725] XFS (loop2): Mounting V5 Filesystem [ 1694.235499][T13760] netlink: 'syz.0.16895': attribute type 4 has an invalid length. [ 1694.244669][T13760] netlink: 'syz.0.16895': attribute type 2 has an invalid length. [ 1694.274818][T13725] XFS (loop2): Ending clean mount [ 1694.288251][T13725] XFS (loop2): Quotacheck needed: Please wait. [ 1694.302354][ T3688] hid-picolcd 0003:04D8:F002.00C4: No report with id 0xf3 found [ 1694.310370][T10009] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1694.318009][ T3688] hid-picolcd 0003:04D8:F002.00C4: No report with id 0xf4 found [ 1694.393677][T13725] XFS (loop2): Quotacheck: Done. [ 1694.425829][ T3688] usb 5-1: USB disconnect, device number 87 [ 1694.505703][ T5782] XFS (loop2): Unmounting Filesystem [ 1694.513932][T13770] loop1: detected capacity change from 0 to 8 [ 1694.530428][T13770] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1694.574960][T13770] SQUASHFS error: Failed to read block 0x13e: -5 [ 1694.581614][T13770] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1694.589119][T13770] SQUASHFS error: Unable to read directory block [13c:26] [ 1694.872950][T13780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16904'. [ 1694.968155][T10009] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1695.001956][T10009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.017263][T10009] usb 4-1: Product: syz [ 1695.021500][T10009] usb 4-1: Manufacturer: syz [ 1695.038813][T10009] usb 4-1: SerialNumber: syz [ 1695.089829][T10009] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1695.232454][T13799] usb usb9: usbfs: process 13799 (syz.2.16914) did not claim interface 0 before use [ 1695.676971][T13815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1695.701761][T10009] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1695.769135][T13797] loop4: detected capacity change from 0 to 32768 [ 1695.797240][T13797] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.16912 (13797) [ 1695.829509][T13797] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1695.854131][T13797] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1695.874021][T13797] BTRFS info (device loop4): force zlib compression, level 3 [ 1695.892169][T13797] BTRFS info (device loop4): force clearing of disk cache [ 1695.895851][T13819] loop2: detected capacity change from 0 to 64 [ 1695.909890][T13797] BTRFS info (device loop4): setting nodatasum [ 1695.924785][T13797] BTRFS info (device loop4): allowing degraded mounts [ 1695.941975][T13797] BTRFS info (device loop4): enabling disk space caching [ 1695.944325][ T27] audit: type=1800 audit(2000000350.673:3632): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16923" name="bus" dev="loop2" ino=21 res=0 errno=0 [ 1695.959414][T13797] BTRFS info (device loop4): disk space caching is enabled [ 1696.138447][T13797] BTRFS info (device loop4): rebuilding free space tree [ 1696.158588][T13797] BTRFS info (device loop4): disabling free space tree [ 1696.171352][T13797] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1696.183648][T13797] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1696.253073][T13797] BTRFS info (device loop4): balance: start -susage=7,stripes=0..262144 [ 1696.334101][ T26] usb 4-1: USB disconnect, device number 4 [ 1696.370448][T13797] BTRFS info (device loop4): relocating block group 1048576 flags system [ 1696.449841][T13797] BTRFS info (device loop4): balance: ended with status: 0 [ 1696.553462][ T8111] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1696.722404][ T27] audit: type=1326 audit(2000000351.453:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1696.766089][ T27] audit: type=1326 audit(2000000351.473:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1696.850432][ T27] audit: type=1326 audit(2000000351.503:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1696.914440][ T27] audit: type=1326 audit(2000000351.503:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1696.956178][T10009] usb 4-1: Service connection timeout for: 256 [ 1696.962406][T10009] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1696.966138][T13858] mkiss: ax0: crc mode is auto. [ 1696.985432][ T27] audit: type=1326 audit(2000000351.503:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1696.988040][T10009] ath9k_htc: Failed to initialize the device [ 1697.029761][ T26] usb 4-1: ath9k_htc: USB layer deinitialized [ 1697.048198][ T27] audit: type=1326 audit(2000000351.543:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1697.087448][T13860] loop1: detected capacity change from 0 to 4096 [ 1697.094097][ T27] audit: type=1326 audit(2000000351.543:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1697.120122][T13860] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1697.141603][ T27] audit: type=1326 audit(2000000351.543:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.2.16931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11e157dff9 code=0x7ffc0000 [ 1697.180429][T13860] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1697.197271][T13860] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1697.210180][T13860] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1697.225640][T13860] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1697.272532][T13860] ntfs: volume version 3.1. [ 1697.307935][T13860] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 1697.467149][T13872] loop4: detected capacity change from 0 to 256 [ 1697.507919][T13872] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1697.722541][T13876] loop2: detected capacity change from 0 to 4096 [ 1697.770798][T13876] ntfs: volume version 3.1. [ 1698.046393][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1698.332815][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 1698.371776][T13905] loop0: detected capacity change from 0 to 4096 [ 1698.379418][T13902] loop1: detected capacity change from 0 to 4096 [ 1698.394088][T13902] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1698.646159][ T26] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1698.655250][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.683924][ T26] usb 4-1: Product: syz [ 1698.687330][T13911] netlink: 'syz.1.16958': attribute type 6 has an invalid length. [ 1698.688538][ T26] usb 4-1: Manufacturer: syz [ 1698.706028][ T26] usb 4-1: SerialNumber: syz [ 1698.717233][ T26] usb 4-1: config 0 descriptor?? [ 1698.726152][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16958'. [ 1698.936437][T13917] loop4: detected capacity change from 0 to 4096 [ 1698.980981][T13917] ntfs: volume version 3.1. [ 1699.126394][T10009] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1699.147671][T13936] loop0: detected capacity change from 0 to 64 [ 1699.175414][T13937] loop4: detected capacity change from 0 to 1764 [ 1699.226591][ T26] airspy 4-1:0.0: Board ID: 00 [ 1699.231445][ T26] airspy 4-1:0.0: Firmware version: [ 1699.365754][T13945] loop2: detected capacity change from 0 to 128 [ 1699.384385][T13946] loop0: detected capacity change from 0 to 256 [ 1699.399781][T13945] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1699.422643][T13945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1699.456290][ T26] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 1699.485773][ T26] airspy 4-1:0.0: Registered as swradio16 [ 1699.495596][ T26] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1699.526132][T10009] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1699.535417][T13950] loop4: detected capacity change from 0 to 1024 [ 1699.537498][ T26] usb 4-1: USB disconnect, device number 5 [ 1699.548341][T10009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.563810][T10009] usb 2-1: config 0 descriptor?? [ 1699.593236][ T5782] UDF-fs: warning (device loop2): udf_evict_inode: Inode 95 (mode 40755) has inode size 264 different from extent length 512. Filesystem need not be standards compliant. [ 1699.624289][T13953] tipc: Enabling of bearer rejected, failed to enable media [ 1699.646993][T10009] cp210x 2-1:0.0: cp210x converter detected [ 1699.749134][ T4808] hfsplus: b-tree write err: -5, ino 4 [ 1699.803209][T13960] loop2: detected capacity change from 0 to 256 [ 1699.825449][T13961] netlink: 'syz.0.16981': attribute type 1 has an invalid length. [ 1699.830899][T13960] FAT-fs (loop2): Directory bread(block 64) failed [ 1699.844204][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16981'. [ 1699.853164][T13960] FAT-fs (loop2): Directory bread(block 65) failed [ 1699.867084][T13960] FAT-fs (loop2): Directory bread(block 66) failed [ 1699.874181][T13960] FAT-fs (loop2): Directory bread(block 67) failed [ 1699.881452][T13960] FAT-fs (loop2): Directory bread(block 68) failed [ 1699.888943][T13960] FAT-fs (loop2): Directory bread(block 69) failed [ 1699.895667][T13960] FAT-fs (loop2): Directory bread(block 70) failed [ 1699.902720][T13960] FAT-fs (loop2): Directory bread(block 71) failed [ 1699.911822][T13960] FAT-fs (loop2): Directory bread(block 72) failed [ 1699.929711][T13960] FAT-fs (loop2): Directory bread(block 73) failed [ 1700.108442][T13972] mkiss: ax0: crc mode is auto. [ 1700.114951][T13970] loop2: detected capacity change from 0 to 1764 [ 1700.289882][T10009] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1700.303309][T10009] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1700.328844][T10009] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1700.337787][T10009] usb 2-1: USB disconnect, device number 117 [ 1700.363141][T10009] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1700.394544][T10009] cp210x 2-1:0.0: device disconnected [ 1700.419607][T13981] wireguard: wg2: Could not create IPv4 socket [ 1700.662965][T13991] netlink: 'syz.2.16996': attribute type 10 has an invalid length. [ 1700.683333][T13991] batman_adv: batadv0: Removing interface: bridge0 [ 1700.701559][T13991] bridge0: port 3(team0) entered blocking state [ 1700.708041][T13991] bridge0: port 3(team0) entered forwarding state [ 1700.714770][T13991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.721996][T13991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.729463][T13991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.736704][T13991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.753923][T13991] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1700.779169][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16996'. [ 1700.799346][T13996] bridge0: port 3(team0) entered disabled state [ 1700.842915][T13996] device bridge_slave_1 left promiscuous mode [ 1700.876929][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.902217][T13996] device bridge_slave_0 left promiscuous mode [ 1700.915117][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.977746][T13996] bond0: (slave bridge0): Releasing backup interface [ 1701.061779][T14007] loop1: detected capacity change from 0 to 16 [ 1701.077392][T14007] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 1701.326848][T14018] loop1: detected capacity change from 0 to 1764 [ 1701.486140][T17143] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1701.610116][T14025] loop4: detected capacity change from 0 to 256 [ 1701.852114][T14035] netlink: 'syz.4.17016': attribute type 10 has an invalid length. [ 1701.866503][T17143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.886081][T17143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.904661][T14035] bridge0: port 3(team0) entered disabled state [ 1701.911257][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.918505][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.922955][T17143] usb 3-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 1701.952343][T17143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.965756][T14038] netlink: 'syz.0.17017': attribute type 29 has an invalid length. [ 1701.984974][T17143] usb 3-1: config 0 descriptor?? [ 1701.994886][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17016'. [ 1702.013195][T14036] bridge0: port 3(team0) entered disabled state [ 1702.025719][T14036] device bridge_slave_1 left promiscuous mode [ 1702.038177][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.051612][T14036] device bridge_slave_0 left promiscuous mode [ 1702.060574][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.106997][T14036] bond0: (slave bridge0): Releasing backup interface [ 1702.168605][T14040] tipc: Started in network mode [ 1702.173715][T14040] tipc: Node identity 5f2e14aa, cluster identity 4711 [ 1702.187464][T14040] tipc: Enabling of bearer rejected, failed to enable media [ 1702.195739][T14038] netlink: 'syz.0.17017': attribute type 29 has an invalid length. [ 1702.214526][T14041] netlink: 'syz.0.17017': attribute type 29 has an invalid length. [ 1702.488690][T14055] loop4: detected capacity change from 0 to 256 [ 1702.490219][T17143] wacom 0003:056A:009F.00C5: hidraw0: USB HID v0.00 Device [HID 056a:009f] on usb-dummy_hcd.2-1/input0 [ 1702.515527][T14055] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1702.516210][T14056] netlink: 'syz.0.17033': attribute type 10 has an invalid length. [ 1702.541851][T14055] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1702.557134][T14056] bridge0: port 3(team0) entered disabled state [ 1702.563631][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.570918][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.589700][T14055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1702.632345][T14056] bridge0: port 3(team0) entered blocking state [ 1702.638791][T14056] bridge0: port 3(team0) entered forwarding state [ 1702.645522][T14056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.652732][T14056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.660220][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.667442][T14056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.715664][T10209] usb 3-1: USB disconnect, device number 121 [ 1702.734604][T14056] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1702.744213][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17033'. [ 1702.754240][T14057] bridge0: port 3(team0) entered disabled state [ 1702.816633][T14057] device bridge_slave_1 left promiscuous mode [ 1702.824799][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.863867][T14057] device bridge_slave_0 left promiscuous mode [ 1702.876628][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.948936][T14057] bond0: (slave bridge0): Releasing backup interface [ 1703.161604][T14066] loop0: detected capacity change from 0 to 1024 [ 1703.173172][T14066] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1703.185303][T14066] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1703.201748][T14066] EXT4-fs error (device loop0): ext4_get_journal_inode:5733: inode #5: comm syz.0.17029: unexpected bad inode w/o EXT4_IGET_BAD [ 1703.215554][T14066] EXT4-fs (loop0): no journal found [ 1703.221242][T14066] EXT4-fs (loop0): can't get journal size [ 1703.231344][T14066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1703.245103][T14066] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.17029: bg 0: block 32: padding at end of block bitmap is not set [ 1703.305074][T30744] EXT4-fs (loop0): unmounting filesystem. [ 1703.471358][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17035'. [ 1703.696858][T14087] loop1: detected capacity change from 0 to 256 [ 1703.719453][T14087] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1703.756277][T14087] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1703.796636][T14087] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1703.821312][T10009] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1704.044480][T14094] netlink: 'syz.1.17041': attribute type 10 has an invalid length. [ 1704.083107][T14094] bridge0: port 3(team0) entered disabled state [ 1704.090135][T14094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.097679][T14094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.105961][T10009] usb 5-1: Using ep0 maxpacket: 8 [ 1704.167874][T14094] bridge0: port 3(team0) entered blocking state [ 1704.174309][T14094] bridge0: port 3(team0) entered forwarding state [ 1704.181036][T14094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.188228][T14094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.195693][T14094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.203028][T14094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.229918][T14094] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1704.251606][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17041'. [ 1704.272619][T10009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.296025][T10009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.313118][T14076] loop2: detected capacity change from 0 to 32768 [ 1704.315654][T14097] bridge0: port 3(team0) entered disabled state [ 1704.319711][T10009] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1704.335528][T10009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.346585][T14076] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1704.354791][T14076] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1704.363592][T14097] device bridge_slave_1 left promiscuous mode [ 1704.363694][T10009] usb 5-1: config 0 descriptor?? [ 1704.380575][T14097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.387607][T14076] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1704.397196][ T3684] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1704.404012][ T3684] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1704.421720][T14097] device bridge_slave_0 left promiscuous mode [ 1704.436411][T14097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.492194][ T3684] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 88ms [ 1704.499996][ T3684] gfs2: fsid=syz:syz.0: jid=0: Done [ 1704.505568][T14076] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1704.507153][ C0] vkms_vblank_simulate: vblank timer overrun [ 1704.528587][T14097] bond0: (slave bridge0): Releasing backup interface [ 1704.888297][T10009] belkin 0003:1020:0006.00C6: unknown main item tag 0xd [ 1704.898214][T10009] belkin 0003:1020:0006.00C6: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 1705.011764][T14123] loop1: detected capacity change from 0 to 512 [ 1705.052033][T14123] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1705.098186][T10009] usb 5-1: USB disconnect, device number 88 [ 1705.119275][T14123] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.17054: corrupted in-inode xattr [ 1705.174273][T14123] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.17054: couldn't read orphan inode 15 (err -117) [ 1705.201715][T14123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1705.243188][T14122] EXT4-fs (loop1): unmounting filesystem. [ 1705.407253][T14141] netlink: 'syz.3.17062': attribute type 10 has an invalid length. [ 1705.425156][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17062'. [ 1705.987969][T14137] loop0: detected capacity change from 0 to 32768 [ 1706.009102][T14137] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1706.029462][T14137] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1706.055500][T14137] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1706.074903][T10209] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1706.082539][T10209] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1706.155028][T10209] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 1706.177981][T10209] gfs2: fsid=syz:syz.0: jid=0: Done [ 1706.183304][T14137] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1706.650297][T14185] netlink: 'syz.3.17085': attribute type 1 has an invalid length. [ 1706.832123][T14197] sp0: Synchronizing with TNC [ 1706.859072][T14196] [U] è [ 1707.116206][T10009] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1707.225152][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17098'. [ 1707.245436][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17098'. [ 1707.296040][T14216] sp0: Synchronizing with TNC [ 1707.496307][T10009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.513704][T10009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.534158][T14227] vivid-008: disconnect [ 1707.548557][T14226] vivid-008: reconnect [ 1707.553156][T10009] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1707.574035][T10009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.598021][T10009] usb 2-1: config 0 descriptor?? [ 1707.778991][T14236] netlink: 'syz.2.17108': attribute type 10 has an invalid length. [ 1707.794676][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17108'. [ 1708.026100][T10209] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1708.093028][T10009] uclogic 0003:5543:0005.00C7: unknown main item tag 0x0 [ 1708.096927][T14250] netlink: 'syz.3.17116': attribute type 29 has an invalid length. [ 1708.108668][T10009] uclogic 0003:5543:0005.00C7: unknown main item tag 0x0 [ 1708.109281][T14250] netlink: 'syz.3.17116': attribute type 29 has an invalid length. [ 1708.124323][T10009] uclogic 0003:5543:0005.00C7: No inputs registered, leaving [ 1708.134871][T14250] netlink: 'syz.3.17116': attribute type 29 has an invalid length. [ 1708.144894][T10009] uclogic 0003:5543:0005.00C7: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 1708.277210][T10209] usb 5-1: Using ep0 maxpacket: 16 [ 1708.293628][T10009] usb 2-1: USB disconnect, device number 118 [ 1708.399068][T10209] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.438359][T10209] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.469823][T10209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1708.469919][T14248] loop2: detected capacity change from 0 to 32768 [ 1708.489376][T10209] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1708.501692][T14248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.17115 (14248) [ 1708.506049][T10209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.544740][T10209] usb 5-1: config 0 descriptor?? [ 1708.555308][T14248] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1708.586148][T14248] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1708.595056][T14248] BTRFS info (device loop2): using free space tree [ 1708.598293][T14256] loop0: detected capacity change from 0 to 8192 [ 1708.617212][T14256] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1708.638075][T14256] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1708.654075][T14256] REISERFS (device loop0): using ordered data mode [ 1708.664168][T14256] reiserfs: using flush barriers [ 1708.677338][T14256] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1708.700150][T14256] REISERFS (device loop0): checking transaction log (loop0) [ 1708.827836][T14248] BTRFS info (device loop2): enabling ssd optimizations [ 1708.892328][T14256] REISERFS (device loop0): Using tea hash to sort names [ 1708.920956][T14256] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1708.991061][ T5782] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1709.027994][T10209] microsoft 0003:045E:00F9.00C8: item fetching failed at offset 0/2 [ 1709.064946][T10209] microsoft 0003:045E:00F9.00C8: parse failed [ 1709.079849][T10209] microsoft: probe of 0003:045E:00F9.00C8 failed with error -22 [ 1709.231984][ T4159] usb 5-1: USB disconnect, device number 89 [ 1709.417391][T10209] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1709.666156][T10209] usb 2-1: Using ep0 maxpacket: 8 [ 1709.946283][T10209] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1709.965698][T10209] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1709.994469][T10209] usb 2-1: Product: syz [ 1710.006174][T10209] usb 2-1: Manufacturer: syz [ 1710.021203][T10209] usb 2-1: SerialNumber: syz [ 1710.041816][T10209] usb 2-1: config 0 descriptor?? [ 1710.098302][T10209] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1710.124715][T14290] loop2: detected capacity change from 0 to 32768 [ 1710.295542][T14302] loop4: detected capacity change from 0 to 2048 [ 1710.344213][T14302] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1710.368994][T14302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1710.546903][T14295] loop0: detected capacity change from 0 to 40427 [ 1710.563667][T14295] F2FS-fs (loop0): Invalid segment/section count (458776 != 24 * 1) [ 1710.576159][T14295] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1710.593490][T14295] F2FS-fs (loop0): invalid crc value [ 1710.602106][T14295] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1710.659675][T14295] F2FS-fs (loop0): recover fsync data on readonly fs [ 1710.667359][T14295] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 1710.674718][T14295] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1710.700830][T14295] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 1710.746165][T10209] gspca_zc3xx: reg_w_i err -71 [ 1710.754319][T10209] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1710.796189][T10209] usb 2-1: USB disconnect, device number 119 [ 1710.871794][ T5959] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1711.136483][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 1711.284367][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.303025][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.319458][ T5959] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 1711.330994][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.379308][ T5959] usb 5-1: config 0 descriptor?? [ 1711.770103][T14329] loop0: detected capacity change from 0 to 32768 [ 1711.793044][T14329] XFS (loop0): Mounting V5 Filesystem [ 1711.841204][T14329] XFS (loop0): Ending clean mount [ 1711.848762][T14329] XFS (loop0): Quotacheck needed: Please wait. [ 1711.866560][ T5959] corsair-psu 0003:1B1C:1C1E.00C9: hidraw0: USB HID v0.00 Device [HID 1b1c:1c1e] on usb-dummy_hcd.4-1/input0 [ 1711.932994][T14325] loop2: detected capacity change from 0 to 40427 [ 1711.943793][T14325] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1711.951759][T14325] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1711.962283][T14325] F2FS-fs (loop2): invalid crc value [ 1711.970182][ T5959] corsair-psu 0003:1B1C:1C1E.00C9: unable to initialize device (-38) [ 1711.990139][T14329] XFS (loop0): Quotacheck: Done. [ 1711.993534][ T5959] corsair-psu: probe of 0003:1B1C:1C1E.00C9 failed with error -38 [ 1712.025606][T14325] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1712.064790][ T5959] usb 5-1: USB disconnect, device number 90 [ 1712.075335][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 1712.075354][ T27] audit: type=1800 audit(2000000366.803:3641): pid=14329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17138" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 1712.163836][T14325] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1712.175383][T30744] XFS (loop0): Unmounting Filesystem [ 1712.181501][T14325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1712.921917][T14380] loop2: detected capacity change from 0 to 256 [ 1713.353038][T14394] loop0: detected capacity change from 0 to 4096 [ 1713.367866][T14394] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1713.647977][T14419] loop0: detected capacity change from 0 to 512 [ 1713.695242][T14419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1713.710130][T14419] ext4 filesystem being mounted at /1182/file0 supports timestamps until 2038 (0x7fffffff) [ 1713.807176][T30744] EXT4-fs (loop0): unmounting filesystem. [ 1713.853764][T14426] loop1: detected capacity change from 0 to 1024 [ 1713.932041][T14426] hfsplus: invalid xattr key length: 0 [ 1714.021157][T10185] hfsplus: b-tree write err: -5, ino 8 [ 1714.133700][T14437] netlink: 9 bytes leftover after parsing attributes in process `syz.1.17187'. [ 1714.439806][T14447] loop4: detected capacity change from 0 to 512 [ 1714.522512][T14447] ceph: Unexpected value for 'acl' [ 1714.923745][T14466] loop1: detected capacity change from 0 to 1024 [ 1714.957461][T14466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1715.033851][T14436] loop2: detected capacity change from 0 to 32768 [ 1715.063714][T10799] EXT4-fs (loop1): unmounting filesystem. [ 1715.065659][T14470] loop0: detected capacity change from 0 to 2048 [ 1715.199701][T14436] XFS (loop2): Mounting V5 Filesystem [ 1715.236699][T14480] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1715.321706][T14436] XFS (loop2): Ending clean mount [ 1715.453018][ T5782] XFS (loop2): Unmounting Filesystem [ 1715.636104][T14495] mkiss: ax0: crc mode is auto. [ 1715.735101][T14464] loop4: detected capacity change from 0 to 32768 [ 1715.812169][T14464] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1715.928873][ T8111] ocfs2: Unmounting device (7,4) on (node local) [ 1716.236103][T10209] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1716.283982][T14514] loop2: detected capacity change from 0 to 2048 [ 1716.292287][T14498] loop0: detected capacity change from 0 to 32768 [ 1716.305613][T14498] JBD2: Ignoring recovery information on journal [ 1716.332440][T14514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1716.341663][T14514] ext4 filesystem being mounted at /3069/file0 supports timestamps until 2038 (0x7fffffff) [ 1716.348069][T14498] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1716.428881][ T5782] EXT4-fs (loop2): unmounting filesystem. [ 1716.438343][T30744] ocfs2: Unmounting device (7,0) on (node local) [ 1716.487701][T10209] usb 2-1: Using ep0 maxpacket: 8 [ 1716.504910][T10009] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1716.542816][T14520] loop4: detected capacity change from 0 to 4096 [ 1716.606256][T10209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.756056][T10009] usb 4-1: Using ep0 maxpacket: 8 [ 1716.786479][T10209] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=f4.bb [ 1716.811158][T14528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17224'. [ 1716.820863][T10209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.834574][T10209] usb 2-1: Product: syz [ 1716.841221][T10209] usb 2-1: Manufacturer: syz [ 1716.851387][T10209] usb 2-1: SerialNumber: syz [ 1716.873530][T10209] usb 2-1: config 0 descriptor?? [ 1716.880028][T14530] loop4: detected capacity change from 0 to 512 [ 1716.908418][T14530] EXT4-fs: Ignoring removed bh option [ 1716.928251][T10209] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1716.961460][T14533] netlink: 'syz.0.17226': attribute type 3 has an invalid length. [ 1716.962723][T14530] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.17225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 1717.052587][T14530] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.17225: couldn't read orphan inode 16 (err -117) [ 1717.076771][T14530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1717.085808][T14530] ext4 filesystem being mounted at /2749/file1 supports timestamps until 2038 (0x7fffffff) [ 1717.100569][T10009] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 1717.122559][T10009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.132521][T10209] usb 2-1: USB disconnect, device number 120 [ 1717.142561][T10009] usb 4-1: Product: syz [ 1717.156045][T10009] usb 4-1: Manufacturer: syz [ 1717.160708][T10009] usb 4-1: SerialNumber: syz [ 1717.203634][T10009] usb 4-1: config 0 descriptor?? [ 1717.211721][T14522] loop2: detected capacity change from 0 to 32768 [ 1717.243587][T14522] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.17220 (14522) [ 1717.258508][T10009] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 1717.271733][T10009] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 1717.280389][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 1717.287029][T14522] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1717.304127][T14522] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1717.313550][T14522] BTRFS info (device loop2): force zlib compression, level 3 [ 1717.321199][T14522] BTRFS info (device loop2): force clearing of disk cache [ 1717.328435][T14522] BTRFS info (device loop2): setting nodatasum [ 1717.335156][T14522] BTRFS info (device loop2): allowing degraded mounts [ 1717.345762][T14522] BTRFS info (device loop2): enabling disk space caching [ 1717.353231][T14522] BTRFS info (device loop2): disk space caching is enabled [ 1717.397948][T14556] loop4: detected capacity change from 0 to 128 [ 1717.469776][T10009] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 1717.499777][T14522] BTRFS info (device loop2): rebuilding free space tree [ 1717.528983][T14522] BTRFS info (device loop2): disabling free space tree [ 1717.542120][T14522] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1717.566004][T14522] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1717.640978][T14567] loop0: detected capacity change from 0 to 2048 [ 1717.683416][T14522] BTRFS info (device loop2): balance: start -susage=7,stripes=0..262144 [ 1717.697366][T10009] radio-raremono 4-1:0.0: V4L2 device registered as radio32 [ 1717.718129][T14522] BTRFS info (device loop2): relocating block group 1048576 flags system [ 1717.805837][T14522] BTRFS info (device loop2): balance: ended with status: 0 [ 1717.936548][T10209] usb 4-1: USB disconnect, device number 6 [ 1717.942980][T10209] radio-raremono 4-1:0.0: Thanko's Raremono disconnected [ 1717.993276][ T5782] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1718.434968][T14592] loop0: detected capacity change from 0 to 2048 [ 1718.456791][ T3717] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1718.462699][T14592] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1718.480198][T14592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1718.706203][ T3717] usb 5-1: Using ep0 maxpacket: 32 [ 1718.727538][T14596] loop0: detected capacity change from 0 to 256 [ 1718.820046][T14602] loop1: detected capacity change from 0 to 256 [ 1718.836288][ T3717] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1718.854887][ T3717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.887956][ T3717] usb 5-1: config 0 descriptor?? [ 1718.943904][ T3717] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1719.099295][T14610] loop1: detected capacity change from 0 to 4096 [ 1719.250057][T14610] ntfs: (device loop1): parse_options(): NLS character set iso not found. Using previous one cp950. [ 1719.303951][T14610] ntfs: volume version 3.1. [ 1719.328998][T14619] loop2: detected capacity change from 0 to 4096 [ 1719.372774][T14619] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1719.484212][T14625] loop1: detected capacity change from 0 to 64 [ 1719.547675][T14608] loop0: detected capacity change from 0 to 32768 [ 1719.565694][T14608] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.17253 (14608) [ 1719.595027][ T3717] gspca_nw80x: reg_w err -71 [ 1719.599988][T14608] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1719.600399][ T3717] nw80x: probe of 5-1:0.0 failed with error -71 [ 1719.620643][T14608] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1719.626482][ T3717] usb 5-1: USB disconnect, device number 91 [ 1719.636134][T14608] BTRFS info (device loop0): force zlib compression, level 3 [ 1719.636170][T14608] BTRFS info (device loop0): force clearing of disk cache [ 1719.636193][T14608] BTRFS info (device loop0): setting nodatasum [ 1719.636216][T14608] BTRFS info (device loop0): allowing degraded mounts [ 1719.664466][T14608] BTRFS info (device loop0): enabling disk space caching [ 1719.694867][T14608] BTRFS info (device loop0): disk space caching is enabled [ 1719.715406][T14631] loop1: detected capacity change from 0 to 512 [ 1719.724648][T14631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1719.753142][T14631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1719.767581][T14631] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038 (0x7fffffff) [ 1719.804115][T14631] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1719.825178][T14631] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1719.844789][T14631] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.17264: Failed to acquire dquot type 0 [ 1719.846082][T10209] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1719.922087][T10799] EXT4-fs (loop1): unmounting filesystem. [ 1719.965260][T14608] BTRFS info (device loop0): rebuilding free space tree [ 1719.991434][T14608] BTRFS info (device loop0): disabling free space tree [ 1720.017859][T14608] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1720.028065][T14608] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1720.096073][T10209] usb 4-1: Using ep0 maxpacket: 16 [ 1720.102000][T14608] BTRFS info (device loop0): balance: start -susage=7,stripes=0..262144 [ 1720.118956][T14608] BTRFS info (device loop0): relocating block group 1048576 flags system [ 1720.173225][T14608] BTRFS info (device loop0): balance: ended with status: 0 [ 1720.322602][ T3717] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1720.386203][T10209] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1720.395336][T10209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.413782][T10209] usb 4-1: Product: syz [ 1720.423898][T10209] usb 4-1: Manufacturer: syz [ 1720.428690][T10209] usb 4-1: SerialNumber: syz [ 1720.444973][T30744] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1720.462106][T10209] usb 4-1: config 0 descriptor?? [ 1720.586632][ T3717] usb 2-1: Using ep0 maxpacket: 16 [ 1720.715207][T14658] loop4: detected capacity change from 0 to 32768 [ 1720.743385][T14658] XFS: ikeep mount option is deprecated. [ 1720.756164][ T3717] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1720.764721][ T3717] usb 2-1: config 0 has no interface number 0 [ 1720.781973][T14658] XFS: noikeep mount option is deprecated. [ 1720.790932][T10209] usb 4-1: ignoring: not an USB2CAN converter [ 1720.845848][ T3717] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1720.866578][ T3717] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1720.931746][T14635] loop2: detected capacity change from 0 to 65536 [ 1720.953343][T14658] XFS (loop4): Mounting V5 Filesystem [ 1720.972998][T14635] XFS (loop2): Mounting V5 Filesystem [ 1720.996198][T10008] usb 4-1: USB disconnect, device number 7 [ 1721.026242][ T3717] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1721.035558][ T3717] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1721.044334][ T3717] usb 2-1: Product: syz [ 1721.048845][ T3717] usb 2-1: SerialNumber: syz [ 1721.055238][ T3717] usb 2-1: config 0 descriptor?? [ 1721.071579][T14658] XFS (loop4): Ending clean mount [ 1721.072073][T14635] XFS (loop2): Ending clean mount [ 1721.082697][T14658] XFS (loop4): Quotacheck needed: Please wait. [ 1721.108603][ T3717] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1721.137655][ T3717] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input105 [ 1721.182461][T14658] XFS (loop4): Quotacheck: Done. [ 1721.209744][ T5782] XFS (loop2): Unmounting Filesystem [ 1721.302973][ T8111] XFS (loop4): Unmounting Filesystem [ 1721.318438][ T8069] usb 2-1: USB disconnect, device number 121 [ 1721.349157][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 1721.356597][ T8069] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1721.909386][ T8069] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1722.141929][T14698] loop2: detected capacity change from 0 to 256 [ 1722.169400][ T8069] usb 4-1: Using ep0 maxpacket: 8 [ 1722.169981][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17279'. [ 1722.204122][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17279'. [ 1722.226479][ T3717] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1722.289576][ T8069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.311122][ T8069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.341584][ T8069] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1722.353653][T14688] loop0: detected capacity change from 0 to 32768 [ 1722.363849][ T8069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.375201][T14688] XFS: attr2 mount option is deprecated. [ 1722.384700][T14688] XFS: ikeep mount option is deprecated. [ 1722.401446][ T8069] usb 4-1: config 0 descriptor?? [ 1722.409139][T14688] XFS: noikeep mount option is deprecated. [ 1722.476046][T14688] XFS (loop0): Mounting V5 Filesystem [ 1722.496228][ T3717] usb 5-1: Using ep0 maxpacket: 16 [ 1722.567422][T14688] XFS (loop0): Ending clean mount [ 1722.584663][T14688] XFS (loop0): Quotacheck needed: Please wait. [ 1722.618802][ T3717] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1722.653758][ T3717] usb 5-1: config 0 has no interface number 0 [ 1722.685469][T14703] loop2: detected capacity change from 0 to 32768 [ 1722.724559][T14688] XFS (loop0): Quotacheck: Done. [ 1722.789395][T14703] XFS (loop2): Mounting V5 Filesystem [ 1722.885681][T14703] XFS (loop2): Ending clean mount [ 1722.889867][T30744] XFS (loop0): Unmounting Filesystem [ 1722.891686][ T3717] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1722.896458][ T8069] logitech 0003:046D:C298.00CA: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 1722.919662][ T8069] logitech 0003:046D:C298.00CA: no inputs found [ 1722.922017][ T3717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.940531][ T3717] usb 5-1: Product: syz [ 1722.944873][ T3717] usb 5-1: Manufacturer: syz [ 1722.955615][ T3717] usb 5-1: SerialNumber: syz [ 1722.964092][ T3717] usb 5-1: config 0 descriptor?? [ 1723.013855][ T3717] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1723.022255][ T5782] XFS (loop2): Unmounting Filesystem [ 1723.092697][T10010] usb 4-1: USB disconnect, device number 8 [ 1723.578724][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17298'. [ 1723.688525][ T3717] gspca_spca1528: reg_w err -71 [ 1723.726320][ T3717] spca1528: probe of 5-1:0.1 failed with error -71 [ 1723.739864][ T3717] usb 5-1: USB disconnect, device number 92 [ 1723.794600][T14757] netlink: 'syz.3.17301': attribute type 2 has an invalid length. [ 1723.816328][T10008] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1723.895671][T14761] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17303'. [ 1724.102842][T14770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17307'. [ 1724.272080][T10008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.288966][T10008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.316349][T10008] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1724.329205][T10008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.351303][T10008] usb 3-1: config 0 descriptor?? [ 1724.464944][T14781] sp0: Synchronizing with TNC [ 1724.660112][T14789] loop0: detected capacity change from 0 to 4096 [ 1724.673186][T14789] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1724.702863][T14789] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1724.715530][T14789] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1724.733148][T14789] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1724.752203][T14789] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1724.782710][T14789] ntfs: volume version 3.1. [ 1724.859536][T10008] uclogic 0003:5543:0005.00CB: unknown main item tag 0x0 [ 1724.875016][T10008] uclogic 0003:5543:0005.00CB: unknown main item tag 0x0 [ 1724.891373][T10008] uclogic 0003:5543:0005.00CB: No inputs registered, leaving [ 1724.909739][T10008] uclogic 0003:5543:0005.00CB: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 1724.911969][T14792] tipc: Enabling of bearer rejected, failed to enable media [ 1725.078081][T10008] usb 3-1: USB disconnect, device number 122 [ 1725.228941][T14800] loop1: detected capacity change from 0 to 1024 [ 1725.292293][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17320'. [ 1725.315977][T14800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17320'. [ 1725.325073][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17320'. [ 1725.345777][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17320'. [ 1726.006078][T10008] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1726.056079][ T4159] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1726.101829][T14814] loop1: detected capacity change from 0 to 32768 [ 1726.115799][T14814] XFS (loop1): Mounting V5 Filesystem [ 1726.169686][T14814] XFS (loop1): Ending clean mount [ 1726.180243][T14814] XFS (loop1): Quotacheck needed: Please wait. [ 1726.228203][T14814] XFS (loop1): Quotacheck: Done. [ 1726.267575][T10799] XFS (loop1): Unmounting Filesystem [ 1726.427201][ T4159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.438844][ T4159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.449528][ T4159] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1726.456156][T10008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.463549][ T4159] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1726.487428][T10008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.491405][ T4159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.508705][T10008] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1726.519385][ T4159] usb 5-1: config 0 descriptor?? [ 1726.536371][T10008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.557719][T10008] usb 3-1: config 0 descriptor?? [ 1726.692556][T14835] loop1: detected capacity change from 0 to 4096 [ 1726.741379][T14835] ntfs3: loop1: ino=1f, "file2" ntfs_rename [ 1726.813165][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17334'. [ 1726.999885][ T4159] koneplus 0003:1E7D:2D51.00CC: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 1727.042660][T14844] loop1: detected capacity change from 0 to 4096 [ 1727.047475][T10008] cmedia_hs100b 0003:0D8C:0014.00CD: item fetching failed at offset 2/5 [ 1727.050065][T14844] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1727.071057][T10008] cmedia_hs100b: probe of 0003:0D8C:0014.00CD failed with error -22 [ 1727.087377][T14844] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1727.111448][T14844] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1727.123862][T14844] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1727.139782][T14844] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1727.141293][T14844] ntfs: volume version 3.1. [ 1727.209090][T10008] usb 5-1: USB disconnect, device number 93 [ 1727.246380][ T4159] usb 3-1: USB disconnect, device number 123 [ 1727.758982][T14858] loop1: detected capacity change from 0 to 32768 [ 1727.800942][T14858] XFS (loop1): Mounting V5 Filesystem [ 1727.916327][T14858] XFS (loop1): Ending clean mount [ 1727.928634][T14858] XFS (loop1): Quotacheck needed: Please wait. [ 1728.093205][T14858] XFS (loop1): Quotacheck: Done. [ 1728.191943][T10799] XFS (loop1): Unmounting Filesystem [ 1728.394505][T14892] loop2: detected capacity change from 0 to 64 [ 1728.630368][T14900] hugetlbfs: Bad value for 'size' [ 1728.748631][T14902] loop2: detected capacity change from 0 to 512 [ 1728.824498][T14902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1728.904163][T14902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1728.952338][T14902] ext4 filesystem being mounted at /3087/file1 supports timestamps until 2038 (0x7fffffff) [ 1729.087635][T14896] loop4: detected capacity change from 0 to 32768 [ 1729.095776][T14896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.17360 (14896) [ 1729.121311][T14896] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1729.131797][T14896] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1729.152049][T14896] BTRFS info (device loop4): using free space tree [ 1729.234226][T14902] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1729.296287][T14896] BTRFS info (device loop4): enabling ssd optimizations [ 1729.429317][T14940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17371'. [ 1729.479346][ T5782] EXT4-fs (loop2): unmounting filesystem. [ 1729.485553][ T8111] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1729.853073][T14946] loop2: detected capacity change from 0 to 4096 [ 1729.864514][T14946] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1730.164457][T14935] loop1: detected capacity change from 0 to 40427 [ 1730.191899][T14935] F2FS-fs (loop1): invalid crc value [ 1730.213514][T14935] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1730.239692][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.246214][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.331456][T14935] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1730.341870][T14954] IPv6: NLM_F_CREATE should be specified when creating new route [ 1730.353281][T14954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1730.360633][T14954] IPv6: NLM_F_CREATE should be set when creating new route [ 1730.367961][T14954] IPv6: NLM_F_CREATE should be set when creating new route [ 1730.376084][T14935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1730.427907][T10799] syz-executor: attempt to access beyond end of device [ 1730.427907][T10799] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1730.542845][T14959] loop4: detected capacity change from 0 to 2048 [ 1730.597029][T14964] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1730.665091][T14959] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=2048, inode=0, rec_len=0, name_len=0 [ 1730.699860][T14959] Remounting filesystem read-only [ 1730.770525][ T8111] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1730.792949][ T8111] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 1730.814366][ T8111] NILFS (loop4): discard dirty block: blocknr=15, size=2048 [ 1730.842143][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=2048 [ 1730.860088][ T8111] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1730.871177][ T8111] NILFS (loop4): discard dirty block: blocknr=26, size=2048 [ 1730.884322][ T8111] NILFS (loop4): discard dirty block: blocknr=27, size=2048 [ 1730.896308][ T8111] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1730.926125][ T8111] NILFS (loop4): discard dirty block: blocknr=28, size=2048 [ 1730.933573][ T8111] NILFS (loop4): discard dirty block: blocknr=29, size=2048 [ 1730.942814][ T8111] NILFS (loop4): discard dirty page: offset=462848, ino=3 [ 1730.960480][ T8111] NILFS (loop4): discard dirty block: blocknr=40, size=2048 [ 1730.976193][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=2048 [ 1731.302931][T14963] loop2: detected capacity change from 0 to 32768 [ 1731.355851][T14982] loop1: detected capacity change from 0 to 4096 [ 1731.370995][T14963] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1731.390356][T14982] __ntfs_warning: 11 callbacks suppressed [ 1731.390375][T14982] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1731.436884][T14982] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1731.453592][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17392'. [ 1731.494487][T14982] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1731.526063][T14982] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1731.572193][T14982] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1731.589747][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 1731.640013][T14982] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1731.654689][T14982] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1731.675133][T14982] ntfs: volume version 3.1. [ 1731.685603][T14982] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1731.703844][T14982] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1731.746830][T14982] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1732.209653][T15025] loop2: detected capacity change from 0 to 1764 [ 1732.303579][T15029] program syz.2.17412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1732.957879][T15056] loop4: detected capacity change from 0 to 8 [ 1733.045095][T15056] SQUASHFS error: xz decompression failed, data probably corrupt [ 1733.066084][T15056] SQUASHFS error: Failed to read block 0xa8: -5 [ 1733.117496][T15056] SQUASHFS error: xz decompression failed, data probably corrupt [ 1733.146493][T15056] SQUASHFS error: Failed to read block 0xa8: -5 [ 1733.696776][T15074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17432'. [ 1733.809191][T15050] loop1: detected capacity change from 0 to 32768 [ 1733.914109][T15080] tipc: Enabled bearer , priority 0 [ 1734.384213][T15064] loop2: detected capacity change from 0 to 40427 [ 1734.442747][T15064] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1734.486014][ T4159] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1734.579563][T15064] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1734.660621][T15082] loop0: detected capacity change from 0 to 32768 [ 1734.674305][ T5782] syz-executor: attempt to access beyond end of device [ 1734.674305][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1734.689536][T15082] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.17436 (15082) [ 1734.719358][T15082] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1734.742877][T15082] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1734.764538][T15084] loop4: detected capacity change from 0 to 32768 [ 1734.771599][T15082] BTRFS info (device loop0): using free space tree [ 1734.830778][T15084] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1734.846310][ T4159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.880240][ T4159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.897511][ T4159] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1734.922915][ T4159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.960874][ T4159] usb 2-1: config 0 descriptor?? [ 1734.982793][ T8111] ocfs2: Unmounting device (7,4) on (node local) [ 1735.046172][T15082] BTRFS info (device loop0): enabling ssd optimizations [ 1735.196482][T30744] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1735.440173][ T4159] kye 0003:0458:5015.00CE: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 1735.452018][T15126] netlink: 'syz.4.17445': attribute type 3 has an invalid length. [ 1735.460315][ T4159] kye 0003:0458:5015.00CE: tablet-enabling feature report not found [ 1735.469313][T15126] netlink: 666 bytes leftover after parsing attributes in process `syz.4.17445'. [ 1735.478893][ T4159] kye 0003:0458:5015.00CE: tablet enabling failed [ 1735.644095][T10008] usb 2-1: USB disconnect, device number 122 [ 1735.976465][T15138] loop2: detected capacity change from 0 to 4096 [ 1736.096040][T15138] ntfs: volume version 3.1. [ 1736.149492][T15145] loop4: detected capacity change from 0 to 2048 [ 1736.212432][T15148] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1736.235664][T15148] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1736.271628][T15148] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1736.282919][T15148] Remounting filesystem read-only [ 1736.325348][ T8111] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 1736.338244][ T8111] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 1736.349752][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1736.378547][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1736.402335][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1736.418273][ T8111] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 1736.425019][ T8111] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 1736.432773][T15158] tipc: Bearer : already 2 bearers with priority 0 [ 1736.444843][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1736.456083][T15158] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1736.474254][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1736.504133][ T8111] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1736.572809][T15165] loop2: detected capacity change from 0 to 256 [ 1736.619438][T15165] FAT-fs (loop2): Directory bread(block 64) failed [ 1736.642012][T15165] FAT-fs (loop2): Directory bread(block 65) failed [ 1736.649060][T15165] FAT-fs (loop2): Directory bread(block 66) failed [ 1736.672028][T15165] FAT-fs (loop2): Directory bread(block 67) failed [ 1736.712040][T15165] FAT-fs (loop2): Directory bread(block 68) failed [ 1736.718989][T15165] FAT-fs (loop2): Directory bread(block 69) failed [ 1736.734160][T15165] FAT-fs (loop2): Directory bread(block 70) failed [ 1736.756042][T15165] FAT-fs (loop2): Directory bread(block 71) failed [ 1736.793649][T15165] FAT-fs (loop2): Directory bread(block 72) failed [ 1736.811755][T15165] FAT-fs (loop2): Directory bread(block 73) failed [ 1736.894693][T15174] loop4: detected capacity change from 0 to 4096 [ 1736.931429][T15178] loop0: detected capacity change from 0 to 4096 [ 1736.965534][T15174] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1737.005197][T15174] NILFS (loop4): trying rollback from an earlier position [ 1737.047123][T15174] NILFS (loop4): recovery complete [ 1737.075792][T15182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1737.411263][T15197] loop4: detected capacity change from 0 to 512 [ 1737.433886][T15197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1737.482272][T15202] loop1: detected capacity change from 0 to 256 [ 1737.498098][T15202] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1737.514787][T15197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1737.521744][T15202] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 1737.524312][T15197] ext4 filesystem being mounted at /2790/file1 supports timestamps until 2038 (0x7fffffff) [ 1737.576856][T15197] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1737.679209][T15209] loop1: detected capacity change from 0 to 512 [ 1737.679271][ T8111] EXT4-fs (loop4): unmounting filesystem. [ 1737.706183][T10008] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1737.743912][T15209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1737.804647][T15209] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038 (0x7fffffff) [ 1737.954205][T15222] loop0: detected capacity change from 0 to 64 [ 1737.983104][T10799] EXT4-fs (loop1): unmounting filesystem. [ 1738.110698][T10008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.125817][T10008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.141072][T10008] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1738.162064][T10008] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1738.179772][T10008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.217157][T10008] usb 3-1: config 0 descriptor?? [ 1738.426561][T15241] loop1: detected capacity change from 0 to 512 [ 1738.434833][T15241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1738.479599][T15241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1738.494838][T15241] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038 (0x7fffffff) [ 1738.521650][T10010] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1738.548084][T15241] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1738.618122][T10799] EXT4-fs (loop1): unmounting filesystem. [ 1738.688602][T10008] hid-udraw 0003:20D6:CB17.00CF: unknown main item tag 0x0 [ 1738.699206][T10008] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.00CF/input/input106 [ 1738.727685][T10008] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.00CF/input/input107 [ 1738.770984][T10008] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.00CF/input/input108 [ 1738.785508][T10010] usb 5-1: Using ep0 maxpacket: 16 [ 1738.807049][T10008] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.00CF/input/input109 [ 1738.831671][T10008] hid-udraw 0003:20D6:CB17.00CF: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 1738.889867][T15249] [ 1738.892250][T15249] ====================================================== [ 1738.894447][T10008] usb 3-1: USB disconnect, device number 124 [ 1738.899275][T15249] WARNING: possible circular locking dependency detected [ 1738.899286][T15249] 6.1.112-syzkaller #0 Not tainted [ 1738.899299][T15249] ------------------------------------------------------ [ 1738.899307][T15249] syz.3.17499/15249 is trying to acquire lock: [ 1738.899319][T15249] ffffffff8e6762e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0xa2/0x370 [ 1738.939835][T15249] [ 1738.939835][T15249] but task is already holding lock: [ 1738.947377][T15249] ffffffff8e679ce8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x233/0x2180 [ 1738.957061][T15249] [ 1738.957061][T15249] which lock already depends on the new lock. [ 1738.957061][T15249] [ 1738.967464][T15249] [ 1738.967464][T15249] the existing dependency chain (in reverse order) is: [ 1738.976476][T15249] [ 1738.976476][T15249] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 1738.984391][T15249] lock_acquire+0x1f8/0x5a0 [ 1738.989447][T15249] __mutex_lock+0x132/0xd80 [ 1738.994480][T15249] rfcomm_dev_ioctl+0x233/0x2180 [ 1739.000041][T15249] rfcomm_sock_ioctl+0x82/0xc0 [ 1739.005353][T15249] sock_do_ioctl+0x152/0x450 [ 1739.010470][T15249] sock_ioctl+0x47f/0x770 [ 1739.015331][T15249] __se_sys_ioctl+0xf1/0x160 [ 1739.020448][T15249] do_syscall_64+0x3b/0xb0 [ 1739.025388][T15249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.032001][T15249] [ 1739.032001][T15249] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 1739.041410][T15249] lock_acquire+0x1f8/0x5a0 [ 1739.046465][T15249] lock_sock_nested+0x44/0x100 [ 1739.051805][T15249] rfcomm_sk_state_change+0x57/0x300 [ 1739.057624][T15249] __rfcomm_dlc_close+0x2b2/0x6d0 [ 1739.063265][T15249] rfcomm_dlc_close+0xed/0x180 [ 1739.068649][T15249] __rfcomm_sock_close+0x104/0x220 [ 1739.074295][T15249] rfcomm_sock_shutdown+0xb4/0x230 [ 1739.079943][T15249] __se_sys_shutdown+0x147/0x1a0 [ 1739.085504][T15249] do_syscall_64+0x3b/0xb0 [ 1739.090446][T15249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.096873][T15249] [ 1739.096873][T15249] -> #1 (&d->lock){+.+.}-{3:3}: [ 1739.103923][T15249] lock_acquire+0x1f8/0x5a0 [ 1739.108961][T15249] __mutex_lock+0x132/0xd80 [ 1739.114018][T15249] __rfcomm_dlc_close+0x259/0x6d0 [ 1739.119661][T15249] rfcomm_dlc_close+0xed/0x180 [ 1739.124952][T15249] __rfcomm_sock_close+0x104/0x220 [ 1739.130599][T15249] rfcomm_sock_shutdown+0xb4/0x230 [ 1739.136244][T15249] __se_sys_shutdown+0x147/0x1a0 [ 1739.142068][T15249] do_syscall_64+0x3b/0xb0 [ 1739.147008][T15249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.153458][T15249] [ 1739.153458][T15249] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 1739.160852][T15249] validate_chain+0x1661/0x5950 [ 1739.166230][T15249] __lock_acquire+0x125b/0x1f80 [ 1739.171615][T15249] lock_acquire+0x1f8/0x5a0 [ 1739.176672][T15249] __mutex_lock+0x132/0xd80 [ 1739.181703][T15249] rfcomm_dlc_exists+0xa2/0x370 [ 1739.187172][T15249] rfcomm_dev_ioctl+0xb2d/0x2180 [ 1739.192641][T15249] rfcomm_sock_ioctl+0x82/0xc0 [ 1739.197936][T15249] sock_do_ioctl+0x152/0x450 [ 1739.203053][T15249] sock_ioctl+0x47f/0x770 [ 1739.207931][T15249] __se_sys_ioctl+0xf1/0x160 [ 1739.213048][T15249] do_syscall_64+0x3b/0xb0 [ 1739.217988][T15249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.224416][T15249] [ 1739.224416][T15249] other info that might help us debug this: [ 1739.224416][T15249] [ 1739.234667][T15249] Chain exists of: [ 1739.234667][T15249] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 1739.234667][T15249] [ 1739.249453][T15249] Possible unsafe locking scenario: [ 1739.249453][T15249] [ 1739.256901][T15249] CPU0 CPU1 [ 1739.262265][T15249] ---- ---- [ 1739.267655][T15249] lock(rfcomm_ioctl_mutex); [ 1739.272338][T15249] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 1739.281137][T15249] lock(rfcomm_ioctl_mutex); [ 1739.288366][T15249] lock(rfcomm_mutex); [ 1739.292530][T15249] [ 1739.292530][T15249] *** DEADLOCK *** [ 1739.292530][T15249] [ 1739.300697][T15249] 2 locks held by syz.3.17499/15249: [ 1739.305982][T15249] #0: ffff88805a56e130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0x74/0xc0 [ 1739.317432][T15249] #1: ffffffff8e679ce8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x233/0x2180 [ 1739.327652][T15249] [ 1739.327652][T15249] stack backtrace: [ 1739.333541][T15249] CPU: 0 PID: 15249 Comm: syz.3.17499 Not tainted 6.1.112-syzkaller #0 [ 1739.341784][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1739.351844][T15249] Call Trace: [ 1739.355125][T15249] [ 1739.358071][T15249] dump_stack_lvl+0x1e3/0x2cb [ 1739.362767][T15249] ? nf_tcp_handle_invalid+0x642/0x642 [ 1739.368251][T15249] ? print_circular_bug+0x12b/0x1a0 [ 1739.373452][T15249] check_noncircular+0x2fa/0x3b0 [ 1739.378478][T15249] ? reacquire_held_locks+0x660/0x660 [ 1739.384034][T15249] ? add_chain_block+0x850/0x850 [ 1739.389062][T15249] ? lockdep_lock+0x11f/0x2a0 [ 1739.394537][T15249] ? mark_lock+0x9a/0x340 [ 1739.398910][T15249] ? _find_first_zero_bit+0xd0/0x100 [ 1739.404367][T15249] validate_chain+0x1661/0x5950 [ 1739.409260][T15249] ? validate_chain+0x112/0x5950 [ 1739.414217][T15249] ? reacquire_held_locks+0x660/0x660 [ 1739.419604][T15249] ? validate_chain+0x112/0x5950 [ 1739.424547][T15249] ? reacquire_held_locks+0x660/0x660 [ 1739.430017][T15249] ? mark_lock+0x9a/0x340 [ 1739.434451][T15249] __lock_acquire+0x125b/0x1f80 [ 1739.439321][T15249] lock_acquire+0x1f8/0x5a0 [ 1739.443838][T15249] ? rfcomm_dlc_exists+0xa2/0x370 [ 1739.448875][T15249] ? read_lock_is_recursive+0x10/0x10 [ 1739.454284][T15249] ? __might_sleep+0xb0/0xb0 [ 1739.458880][T15249] ? __lock_acquire+0x125b/0x1f80 [ 1739.463926][T15249] __mutex_lock+0x132/0xd80 [ 1739.468521][T15249] ? rfcomm_dlc_exists+0xa2/0x370 [ 1739.473585][T15249] ? rfcomm_dlc_exists+0xa2/0x370 [ 1739.478633][T15249] ? mutex_lock_nested+0x10/0x10 [ 1739.483692][T15249] ? aa_get_newest_label+0xfb/0x6e0 [ 1739.488910][T15249] ? end_current_label_crit_section+0x170/0x170 [ 1739.495163][T15249] ? __might_fault+0xa1/0x110 [ 1739.499850][T15249] rfcomm_dlc_exists+0xa2/0x370 [ 1739.504717][T15249] ? __rfcomm_dlc_close+0x6d0/0x6d0 [ 1739.509928][T15249] ? bpf_lsm_capable+0x5/0x10 [ 1739.514705][T15249] ? security_capable+0x86/0xb0 [ 1739.519662][T15249] rfcomm_dev_ioctl+0xb2d/0x2180 [ 1739.524620][T15249] ? rfcomm_sock_debugfs_show+0x120/0x120 [ 1739.530357][T15249] ? __local_bh_enable_ip+0x164/0x1f0 [ 1739.535757][T15249] ? lockdep_hardirqs_on+0x94/0x130 [ 1739.540964][T15249] ? __local_bh_enable_ip+0x164/0x1f0 [ 1739.546526][T15249] ? _local_bh_enable+0xa0/0xa0 [ 1739.551390][T15249] ? do_raw_spin_unlock+0x137/0x8a0 [ 1739.556599][T15249] rfcomm_sock_ioctl+0x82/0xc0 [ 1739.561378][T15249] sock_do_ioctl+0x152/0x450 [ 1739.565978][T15249] ? sock_show_fdinfo+0xb0/0xb0 [ 1739.570858][T15249] ? __fget_files+0x28/0x4a0 [ 1739.575461][T15249] sock_ioctl+0x47f/0x770 [ 1739.579819][T15249] ? sock_poll+0x410/0x410 [ 1739.584267][T15249] ? __fget_files+0x28/0x4a0 [ 1739.588885][T15249] ? __fget_files+0x435/0x4a0 [ 1739.593564][T15249] ? __fget_files+0x28/0x4a0 [ 1739.598183][T15249] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1739.603146][T15249] ? security_file_ioctl+0x7d/0xa0 [ 1739.608273][T15249] ? sock_poll+0x410/0x410 [ 1739.612786][T15249] __se_sys_ioctl+0xf1/0x160 [ 1739.617398][T15249] do_syscall_64+0x3b/0xb0 [ 1739.621847][T15249] ? clear_bhb_loop+0x45/0xa0 [ 1739.626554][T15249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.632460][T15249] RIP: 0033:0x7fa56b37dff9 [ 1739.636889][T15249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.656504][T15249] RSP: 002b:00007fa56c17c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.664927][T15249] RAX: ffffffffffffffda RBX: 00007fa56b535f80 RCX: 00007fa56b37dff9 [ 1739.672903][T15249] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 1739.680882][T15249] RBP: 00007fa56b3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1739.688876][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1739.696850][T15249] R13: 0000000000000000 R14: 00007fa56b535f80 R15: 00007ffd0e31c1a8 [ 1739.704835][T15249] [ 1739.707878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1739.710950][T10010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.726127][T10010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.736614][T10010] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1739.749723][T10010] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1739.762103][T10010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.784685][T10010] usb 5-1: config 0 descriptor?? [ 1740.277971][T10010] microsoft 0003:045E:07DA.00D0: ignoring exceeding usage max [ 1740.291005][T10010] microsoft 0003:045E:07DA.00D0: No inputs registered, leaving [ 1740.299942][T10010] microsoft 0003:045E:07DA.00D0: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1740.311670][T10010] microsoft 0003:045E:07DA.00D0: no inputs found [ 1740.318311][T10010] microsoft 0003:045E:07DA.00D0: could not initialize ff, continuing anyway [ 1740.506284][T10008] usb 5-1: USB disconnect, device number 94