last executing test programs: 4.005120944s ago: executing program 0 (id=8551): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x77, 0x8003, 0x4, 0x9, 0x7f}) 3.738861943s ago: executing program 0 (id=8557): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214080, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@part={'part', 0x3d, 0x7ff}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1803a53, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 3.374327006s ago: executing program 0 (id=8563): r0 = socket(0x23, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3.294368137s ago: executing program 2 (id=8565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001500010000000000fcffffff0e000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4044091}, 0x20048080) 3.039222309s ago: executing program 0 (id=8568): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.949334764s ago: executing program 2 (id=8570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c0001800600060008060000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.653228355s ago: executing program 0 (id=8573): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e02025d60270009050202000002000109058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.55601948s ago: executing program 2 (id=8576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x68, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x68}}, 0x0) 2.263791267s ago: executing program 2 (id=8581): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) 2.182663345s ago: executing program 4 (id=8584): r0 = syz_open_dev$vim2m(&(0x7f00000028c0), 0x9142, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000002900)={0xfffffffe, 0x1, 0x0, "bb3a03e63c4ca0f98b71e50953c047dcf894ccb68a2df3622a4e3a0c00", 0x4f565559}) 1.966579256s ago: executing program 2 (id=8586): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") chown(&(0x7f0000000000)='.\x00', 0xee01, 0xffffffffffffffff) 1.910828389s ago: executing program 4 (id=8588): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x40400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000092c0)={0x1, &(0x7f0000009280)=[{0xa000006, 0x0, 0x0, 0xc02, 0x10}]}) 1.830781892s ago: executing program 3 (id=8589): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)) 1.60746914s ago: executing program 4 (id=8591): syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') close(0x3) 1.548654083s ago: executing program 3 (id=8592): socket$unix(0x1, 0x5, 0x0) pselect6(0x40, &(0x7f0000002b40)={0x0, 0x9, 0x7, 0x2, 0x4a1f5aab, 0x7fff, 0x1000, 0x8086}, &(0x7f0000002b80)={0x9, 0x5, 0x6, 0x7, 0x6, 0x49a2, 0x4, 0x8}, 0x0, 0x0, 0x0) 1.501573025s ago: executing program 1 (id=8593): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) 1.46269087s ago: executing program 5 (id=8594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 1.352156011s ago: executing program 4 (id=8595): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62, 0x0, 0xffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd, 0x0, 0x1a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x47}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) 1.261926653s ago: executing program 3 (id=8596): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0x54) 1.159133413s ago: executing program 5 (id=8597): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$binfmt_script(r0, 0x0, 0x0) 1.158432144s ago: executing program 1 (id=8609): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4}) 1.084906479s ago: executing program 4 (id=8598): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89ff, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) 991.575558ms ago: executing program 3 (id=8599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) signalfd4(r0, &(0x7f00000000c0)={[0xe]}, 0x8, 0x80800) 916.505448ms ago: executing program 4 (id=8600): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000180)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38]}}, {@nodatasum}, {@discard}, {@usebackuproot}, {@discard_sync}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0) 912.885832ms ago: executing program 1 (id=8601): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b52, &(0x7f00000001c0)='g') 883.31716ms ago: executing program 5 (id=8602): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) 680.51803ms ago: executing program 3 (id=8603): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x400022}) 679.74267ms ago: executing program 5 (id=8604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x20000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 663.239159ms ago: executing program 1 (id=8605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ipvlan1\x00', &(0x7f0000000700)=@ethtool_drvinfo={0x3, "e8e0b7110d14d1fd9be81ce0c7b456c9971aecc8a659e27dd23aea2d25dbedd7", "1b71cd957bcc9fcf32a5eb2aa11629307265bd5d234b4eb61482d84aeb43399f", "a7ef35589ab69a48376bf4b1d87a75865805e5e8ab002e5320f9bf398b03c971", "03d65f835836878cbda845fc308321cd4033225e2cc78f019dbf86462c649912", "2b8b057c175ad0efc25fc0ab125ab3cab7d6c844df9770016533f7f32edceab6", "03c9ac92d661aadf1652181a", 0x7, 0xb, 0xfffffffe, 0x4, 0x1023}}) 436.832356ms ago: executing program 5 (id=8606): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000017c0)={0xa, 0x0, 0xd, @mcast1, 0x4, 0x2}, 0x20) 312.928091ms ago: executing program 0 (id=8607): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x200000, &(0x7f0000000a80)={[{}, {@umask={'umask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@codepage={'codepage', 0x3d, 'cp861'}}, {@file_umask={'file_umask', 0x3d, 0xb}}, {}, {@type={'type', 0x3d, "90f2c199"}}, {@part={'part', 0x3d, 0x7}}]}, 0x2, 0x370, &(0x7f00000027c0)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xd, 0x0) 312.786601ms ago: executing program 3 (id=8608): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 288.300366ms ago: executing program 1 (id=8610): r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 114.063247ms ago: executing program 5 (id=8611): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 1.588897ms ago: executing program 1 (id=8612): r0 = fsopen(&(0x7f0000000180)='fusectl\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=8613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) kernel console output (not intermixed with test programs): bef5 [ 959.726042][T23561] ? __lock_acquire+0x4a5/0x2630 [ 959.726095][T23561] netlink_rcv_skb+0x159/0x420 [ 959.726151][T23561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 959.726194][T23561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 959.726274][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.726320][T23561] ? netlink_deliver_tap+0x1ae/0xcc0 [ 959.726386][T23561] genl_rcv+0x28/0x40 [ 959.726420][T23561] netlink_unicast+0x585/0x850 [ 959.726487][T23561] ? __pfx_netlink_unicast+0x10/0x10 [ 959.726568][T23561] netlink_sendmsg+0x8b0/0xda0 [ 959.726637][T23561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.726695][T23561] ? __might_fault+0xb0/0x140 [ 959.726746][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.726791][T23561] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 959.726861][T23561] ____sys_sendmsg+0x9e1/0xb70 [ 959.726918][T23561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.726983][T23561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.727051][T23561] ? __pfx_futex_wake_mark+0x10/0x10 [ 959.727123][T23561] ___sys_sendmsg+0x190/0x1e0 [ 959.727186][T23561] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.727242][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.727308][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.727384][T23561] __sys_sendmsg+0x170/0x220 [ 959.727430][T23561] ? __pfx___sys_sendmsg+0x10/0x10 [ 959.727475][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.727521][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.727595][T23561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.727642][T23561] ? rcu_is_watching+0x12/0xc0 [ 959.727706][T23561] do_syscall_64+0x10b/0xf80 [ 959.727749][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.727789][T23561] RIP: 0033:0x7f5db9f9ce59 [ 959.727819][T23561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.727858][T23561] RSP: 002b:00007f5dbaf30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.727894][T23561] RAX: ffffffffffffffda RBX: 00007f5dba215fa0 RCX: 00007f5db9f9ce59 [ 959.727920][T23561] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 959.727945][T23561] RBP: 00007f5dba032d6f R08: 0000000000000000 R09: 0000000000000000 [ 959.727969][T23561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.727993][T23561] R13: 00007f5dba216038 R14: 00007f5dba215fa0 R15: 00007ffea9630f38 [ 959.728045][T23561] [ 959.728989][T23552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.7313: bg 0: block 248: padding at end of block bitmap is not set [ 959.858405][T23557] loop2: detected capacity change from 0 to 256 [ 959.944836][T23552] loop1: lost filesystem error report for type 5 error -117 [ 960.083624][T23557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 960.101797][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 960.198130][T23552] __quota_error: 64 callbacks suppressed [ 960.198157][T23552] Quota error (device loop1): write_blk: dquota write failed [ 960.205238][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 960.205275][ C0] EXT4-fs (loop1): last error at time 2000000815: ext4_validate_block_bitmap:440 [ 960.287030][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 960.382255][ T5742] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.398074][ T5742] usb 4-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 960.410598][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 960.418697][ T5742] usb 4-1: Product: syz [ 960.422996][ T5742] usb 4-1: Manufacturer: syz [ 960.427629][ T5742] usb 4-1: SerialNumber: syz [ 960.469718][T23552] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 960.523727][T23552] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.7313: Failed to acquire dquot type 1 [ 960.608458][T23552] loop1: lost filesystem error report for type 5 error -117 [ 960.615635][T23552] EXT4-fs (loop1): 1 truncate cleaned up [ 960.681233][T23552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 960.700493][ T5742] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.752453][ T5742] usb 4-1: MIDIStreaming interface descriptor not found [ 960.782581][T23552] EXT4-fs: Ignoring removed orlov option [ 960.817518][T23552] EXT4-fs: Ignoring removed bh option [ 960.867156][T23552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 960.960485][T23552] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 961.062410][T23552] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.7313: Abort forced by user [ 961.118935][T23552] EXT4-fs (loop1): Remounting filesystem read-only [ 961.149119][T23552] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 961.173494][T23552] ext4 filesystem being remounted at /1207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 961.298973][ T5742] usb 4-1: USB disconnect, device number 16 [ 961.457505][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.562816][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 961.798694][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7328'. [ 962.267496][T23604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.298948][T23604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.356582][T23604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.370267][T23604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.391189][T23622] loop5: detected capacity change from 0 to 256 [ 962.399754][T23622] exfat: Deprecated parameter 'namecase' [ 962.449196][T23622] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 962.669812][T23624] loop2: detected capacity change from 0 to 4096 [ 962.857684][T23624] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 963.236355][T23624] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB [ 963.435190][T23644] fuse: blksize only supported for fuseblk [ 964.336122][T23669] No such timeout policy "syz0" [ 964.358306][T23667] loop3: detected capacity change from 0 to 2048 [ 964.370302][T23673] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7362'. [ 964.419755][T23673] unsupported nlmsg_type 40 [ 964.448848][T23667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 964.507548][T23638] loop1: detected capacity change from 0 to 32768 [ 964.578672][T23638] Bad next:5 of the last slot in dtroot [ 964.578672][T23638] [ 964.634923][T23638] ERROR: (device loop1): copy_from_dinode: Corrupt dtroot [ 964.634923][T23638] [ 964.709730][T23638] ERROR: (device loop1): remounting filesystem as read-only [ 964.770793][T23638] jfs_lookup: iget failed on inum 32 [ 965.178545][T23694] loop5: detected capacity change from 0 to 2048 [ 965.246768][T23694] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 965.300939][T23694] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 965.329910][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 965.500269][T23694] befs: (loop5): No write support. Marking filesystem read-only [ 965.538703][T23694] befs: (loop5): unable to read superblock [ 965.985775][T23720] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7380'. [ 966.345932][T23729] netlink: 'syz.5.7385': attribute type 10 has an invalid length. [ 966.376372][T23729] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7385'. [ 966.752003][T23745] netlink: 'syz.5.7392': attribute type 32 has an invalid length. [ 966.804746][T23749] loop4: detected capacity change from 0 to 22 [ 966.840669][T23749] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 966.889685][T23749] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 967.388717][T23768] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7402'. [ 967.708430][T23782] netlink: 'syz.2.7410': attribute type 21 has an invalid length. [ 967.737161][T23782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7410'. [ 967.760828][T23781] loop4: detected capacity change from 0 to 764 [ 967.811657][T23781] Symlink component flag not implemented [ 967.812998][T23786] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 967.847611][T23781] Symlink component flag not implemented [ 968.051308][T23793] loop2: detected capacity change from 0 to 16 [ 968.134339][T23793] erofs (device loop2): mounted with root inode @ nid 36. [ 968.198625][T23793] syz.2.7415: attempt to access beyond end of device [ 968.198625][T23793] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 968.265650][T23793] syz.2.7415: attempt to access beyond end of device [ 968.265650][T23793] loop2: rw=0, sector=46, nr_sectors = 1 limit=16 [ 968.312795][T23793] erofs (device loop2): read error -5 @ 0 of nid 36 [ 968.833663][T23811] loop0: detected capacity change from 0 to 4096 [ 968.868502][T23811] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 969.040880][T23811] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 969.070432][T23811] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 969.361489][ T1003] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 969.398635][ T5622] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 969.438629][ T5622] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 969.467117][ T5622] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 969.525400][ T37] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 969.756062][T23808] loop3: detected capacity change from 0 to 32768 [ 969.874951][T23808] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 969.979614][T23820] loop5: detected capacity change from 0 to 32768 [ 970.042515][T23820] Bad next:5 of the last slot in dtroot [ 970.042515][T23820] [ 970.070773][T23818] loop4: detected capacity change from 0 to 32768 [ 970.080940][T23820] ERROR: (device loop5): copy_from_dinode: Corrupt dtroot [ 970.080940][T23820] [ 970.110704][T23818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7427 (23818) [ 970.135216][T23820] ERROR: (device loop5): remounting filesystem as read-only [ 970.168453][T23820] jfs_lookup: iget failed on inum 32 [ 970.185538][T23818] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 970.225455][T23818] BTRFS info (device loop4): using sha256 checksum algorithm [ 970.333219][T23853] loop2: detected capacity change from 0 to 16 [ 970.388576][T23853] erofs (device loop2): mounted with root inode @ nid 36. [ 970.458529][ T5626] ocfs2: Unmounting device (7,3) on (node local) [ 970.488971][T23818] BTRFS info (device loop4): enabling ssd optimizations [ 970.534566][T23818] BTRFS info (device loop4): turning on async discard [ 970.535245][T23853] syz.2.7437: attempt to access beyond end of device [ 970.535245][T23853] loop2: rw=0, sector=0, nr_sectors = 1025 limit=16 [ 970.576225][T23818] BTRFS info (device loop4): enabling free space tree [ 970.690362][T23853] erofs (device loop2): read error -5 @ 0 of nid 36 [ 970.735841][T23863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7441'. [ 970.835315][ T5636] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 971.797458][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7449'. [ 972.116665][T23860] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.124491][T23860] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.206322][T23894] loop3: detected capacity change from 0 to 1764 [ 972.250563][T23886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.262551][T23886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.306740][T23886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.342458][T23886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.606907][T23902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7455'. [ 972.951227][T23911] new mount options do not match the existing superblock, will be ignored [ 973.043613][T23916] loop3: detected capacity change from 0 to 128 [ 973.106489][T23916] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 973.154668][T23916] hpfs: filesystem error: improperly stopped [ 973.160034][T23913] loop1: detected capacity change from 0 to 4096 [ 973.190108][T23913] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 973.215140][T23916] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 973.259009][T23916] hpfs: You really don't want any checks? You are crazy... [ 973.299849][T23916] hpfs: Code page index out of array [ 973.304783][T23913] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 973.334235][T23916] hpfs: code page support is disabled [ 973.338230][T23913] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 973.366618][T23916] hpfs: hpfs_map_4sectors(): unaligned read [ 973.395978][T23916] hpfs: hpfs_map_4sectors(): unaligned read [ 973.411280][T23916] hpfs: filesystem error: unable to find root dir [ 973.448671][T23920] m1: entered promiscuous mode [ 973.646394][T20034] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 973.699917][ T5633] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 973.746990][ T5633] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 973.795529][ T5633] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 973.840624][T20033] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 974.217014][T23945] new mount options do not match the existing superblock, will be ignored [ 974.648591][T23959] loop5: detected capacity change from 0 to 128 [ 974.691562][T23959] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 974.753412][T23959] hpfs: filesystem error: improperly stopped [ 974.781502][T23959] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 974.806453][T23959] hpfs: You really don't want any checks? You are crazy... [ 974.835219][T23959] hpfs: Code page index out of array [ 974.851568][T23959] hpfs: code page support is disabled [ 974.871032][T23959] hpfs: hpfs_map_4sectors(): unaligned read [ 974.912037][T23959] hpfs: hpfs_map_4sectors(): unaligned read [ 974.937369][T23959] hpfs: filesystem error: unable to find root dir [ 975.057500][T23966] loop2: detected capacity change from 0 to 4096 [ 975.069654][T23974] xt_hl: Unknown TTL match mode: 255 [ 975.088089][T23966] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 975.169836][T23977] loop4: detected capacity change from 0 to 512 [ 975.237361][T23966] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 975.278020][T23966] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 975.356707][T23981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.648484][T23990] loop4: detected capacity change from 0 to 512 [ 975.686333][ T37] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 975.711688][ T5638] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 975.748002][ T5638] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 975.807902][ T5638] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 975.828042][T23990] EXT4-fs: inline encryption not supported [ 975.880844][ T37] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 975.917932][T23990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 975.976448][T23990] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 976.040646][T24000] gtp0: entered promiscuous mode [ 976.061266][T23990] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1 [ 976.076157][T24000] gtp0: entered allmulticast mode [ 976.166484][T23990] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 976.191962][T23990] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.7495: Failed to acquire dquot type 1 [ 976.192572][T24007] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 976.211828][T23990] loop4: lost filesystem error report for type 5 error -5 [ 976.218057][T23990] EXT4-fs (loop4): Remounting filesystem read-only [ 976.225257][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 976.225293][ C1] EXT4-fs (loop4): initial error at time 2000000831: ext4_acquire_dquot:7032 [ 976.225338][ C1] EXT4-fs (loop4): last error at time 2000000831: ext4_acquire_dquot:7032 [ 976.320745][T24011] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7499'. [ 976.350664][T23990] EXT4-fs (loop4): 1 truncate cleaned up [ 976.442257][T23990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.482136][T24018] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.7507'. [ 976.771004][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.772478][T24023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 977.160319][T24030] loop3: detected capacity change from 0 to 4096 [ 977.204397][T24030] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 977.342921][T24030] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 977.373901][T24041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7517'. [ 977.386417][T24030] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 977.685035][T20031] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 977.718718][ T5626] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 977.745999][ T5626] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 977.791677][ T5626] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 977.852145][T20031] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 978.032919][T24057] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 978.367198][T24026] loop1: detected capacity change from 0 to 32768 [ 978.458898][T24072] loop3: detected capacity change from 0 to 512 [ 978.491087][T24072] EXT4-fs: Ignoring removed nobh option [ 978.558061][T24072] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.7531: corrupted inode contents [ 978.612191][T24072] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 978.621791][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 978.637324][ C0] EXT4-fs (loop3): initial error at time 2000000833: ext4_do_update_inode:5690: inode 3 [ 978.647130][ C0] EXT4-fs (loop3): last error at time 2000000833: ext4_do_update_inode:5690: inode 3 [ 978.672510][T24072] EXT4-fs (loop3): Remounting filesystem read-only [ 978.682452][T24072] Quota error (device loop3): write_blk: dquota write failed [ 978.720962][T24072] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 978.755372][T24072] EXT4-fs (loop3): 1 truncate cleaned up [ 978.796999][T24072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.867142][T24072] ext4 filesystem being mounted at /1291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.968119][T24072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.062841][T23522] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 979.235503][T23522] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 979.262149][T23522] usb 5-1: config 0 has no interface number 0 [ 979.293411][T23522] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 979.353401][T23522] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 979.409162][T23522] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 979.429964][T23522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.465289][T23522] usb 5-1: Product: syz [ 979.483801][T23522] usb 5-1: Manufacturer: syz [ 979.492287][T23522] usb 5-1: SerialNumber: syz [ 979.528811][T23522] usb 5-1: config 0 descriptor?? [ 979.561038][T24083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 979.601679][T23522] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 979.658176][T23522] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 980.054493][T23522] usb 5-1: USB disconnect, device number 121 [ 980.107733][T23522] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 980.168301][T23522] cyberjack 5-1:0.69: device disconnected [ 980.648577][T24138] netlink: 'syz.2.7563': attribute type 62 has an invalid length. [ 980.970876][T24154] netlink: 'syz.2.7569': attribute type 3 has an invalid length. [ 980.995659][T24154] netlink: 'syz.2.7569': attribute type 3 has an invalid length. [ 981.471067][T24168] sctp: [Deprecated]: syz.4.7578 (pid 24168) Use of int in maxseg socket option. [ 981.471067][T24168] Use struct sctp_assoc_value instead [ 981.710712][T24174] loop2: detected capacity change from 0 to 512 [ 981.730620][T24174] EXT4-fs: Ignoring removed nobh option [ 981.820488][T24174] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.7580: corrupted inode contents [ 981.892104][T24174] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 981.901755][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 981.913415][T24174] EXT4-fs (loop2): Remounting filesystem read-only [ 981.917270][ C1] EXT4-fs (loop2): initial error at time 2000000837: ext4_do_update_inode:5690: inode 3 [ 981.933571][ C1] EXT4-fs (loop2): last error at time 2000000837: ext4_do_update_inode:5690: inode 3 [ 981.961930][T24174] Quota error (device loop2): write_blk: dquota write failed [ 982.011118][T24174] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 982.080297][T24174] EXT4-fs (loop2): 1 truncate cleaned up [ 982.093954][T24174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.107268][T24174] ext4 filesystem being mounted at /1253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.126954][T24174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.591860][T23522] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 982.634142][T24211] program syz.0.7598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 982.771824][T23522] usb 4-1: Using ep0 maxpacket: 32 [ 982.794053][T23522] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 982.818761][T23522] usb 4-1: config 0 has no interface number 1 [ 982.846748][T23522] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 982.875282][T24214] loop2: detected capacity change from 0 to 1024 [ 982.883854][T23522] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 982.911851][T23522] usb 4-1: Product: syz [ 982.923465][T24214] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 982.936028][T23522] usb 4-1: Manufacturer: syz [ 982.953482][T23522] usb 4-1: SerialNumber: syz [ 982.971330][T24214] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 982.989358][T24219] loop0: detected capacity change from 0 to 1764 [ 982.999643][T23522] usb 4-1: config 0 descriptor?? [ 983.014868][T24214] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 983.050221][T24219] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 983.062984][T24214] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.7600: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 983.115802][T24214] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 983.116247][T24214] EXT4-fs (loop2): no journal found [ 983.125343][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 983.125375][ C0] EXT4-fs (loop2): initial error at time 2000000838: ext4_ext_check_inode:521: inode 3 [ 983.125432][ C0] EXT4-fs (loop2): last error at time 2000000838: ext4_ext_check_inode:521: inode 3 [ 983.241934][T23522] qcserial 4-1:0.37: Qualcomm USB modem converter detected [ 983.262089][T24214] EXT4-fs (loop2): can't get journal size [ 983.304900][T24228] netlink: 'syz.1.7606': attribute type 11 has an invalid length. [ 983.310055][T24214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 983.456270][T23522] usb 4-1: USB disconnect, device number 17 [ 983.469259][T23522] qcserial 4-1:0.37: device disconnected [ 983.539043][T24231] loop1: detected capacity change from 0 to 4096 [ 983.569280][T24231] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 983.615012][ T5638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.637307][T24231] ntfs3(loop1): ino=1a, mi_enum_attr [ 983.641235][ T31] audit: type=1326 audit(2000000838.844:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 983.694977][T24231] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 983.785443][ T31] audit: type=1326 audit(2000000838.844:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 983.920252][ T31] audit: type=1326 audit(2000000838.894:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 984.025599][ T31] audit: type=1326 audit(2000000838.894:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 984.051263][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7614'. [ 984.168820][ T31] audit: type=1326 audit(2000000838.894:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 984.289650][ T31] audit: type=1326 audit(2000000838.894:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 984.412263][T24252] loop1: detected capacity change from 0 to 2048 [ 984.423367][ T31] audit: type=1326 audit(2000000838.894:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 984.499997][T24252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 984.537806][ T31] audit: type=1326 audit(2000000838.894:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24236 comm="syz.5.7610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc27199ce59 code=0x7ffc0000 [ 984.759084][T24261] tmpfs: Bad value for 'mpol' [ 984.977887][T24264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7625'. [ 985.126722][T24268] dlm: no local IP address has been set [ 985.178540][T24268] dlm: cannot start dlm midcomms -107 [ 985.362719][T24273] loop4: detected capacity change from 0 to 512 [ 985.377881][T24247] loop0: detected capacity change from 0 to 32768 [ 985.422420][T24247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7616 (24247) [ 985.438854][T24273] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 985.531649][T24247] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.557596][T24273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.570416][T24247] BTRFS info (device loop0): using sha256 checksum algorithm [ 985.602545][T24273] ext4 filesystem being mounted at /1276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 985.897627][T24247] BTRFS info (device loop0): enabling ssd optimizations [ 985.944729][T24247] BTRFS info (device loop0): turning on async discard [ 985.957129][T24247] BTRFS info (device loop0): enabling free space tree [ 986.299377][ T5622] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 986.497443][T24314] kAFS: unable to lookup cell 'syz@' [ 986.763788][ T5778] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 986.967986][ T5778] usb 6-1: Using ep0 maxpacket: 16 [ 987.045399][ T5778] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 987.066267][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.075347][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.125905][ T5778] usb 6-1: Product: syz [ 987.141001][ T5778] usb 6-1: Manufacturer: syz [ 987.150707][ T5778] usb 6-1: SerialNumber: syz [ 987.156466][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 987.174960][ T5778] usb 6-1: config 0 descriptor?? [ 987.183488][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 987.247846][ T5778] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 987.399268][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 987.436493][T24327] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 987.561769][T24327] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 987.606337][T24327] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 987.626629][ T5778] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 987.639878][ T5778] usb 6-1: USB disconnect, device number 19 [ 987.781138][T24327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 987.979332][T24351] loop4: detected capacity change from 0 to 256 [ 987.980050][T24327] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 988.118972][T24351] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 988.230455][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.291224][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.408167][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.482005][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.504506][T24363] netlink: 'syz.3.7661': attribute type 21 has an invalid length. [ 988.520940][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.557390][T24327] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.871823][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 988.884834][T24377] openvswitch: netlink: Duplicate key (type 21). [ 989.044832][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 989.078031][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 989.112371][ T24] usb 2-1: config 8 has an invalid interface number: 61 but max is 2 [ 989.144756][ T24] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 989.183735][ T24] usb 2-1: config 8 has no interface number 0 [ 989.209845][ T24] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 989.266247][ T24] usb 2-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.308146][ T24] usb 2-1: config 8 interface 61 has no altsetting 0 [ 989.328562][T24391] loop0: detected capacity change from 0 to 512 [ 989.340629][ T24] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 989.377839][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.394085][T24394] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7676'. [ 989.414436][ T24] usb 2-1: Product: syz [ 989.426419][T24391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.432455][ T24] usb 2-1: Manufacturer: syz [ 989.500140][ T24] usb 2-1: SerialNumber: syz [ 989.562747][T24399] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 989.766729][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.853594][ T24] bfusb 2-1:8.61: probe with driver bfusb failed with error -5 [ 989.897156][ T24] usb 2-1: USB disconnect, device number 37 [ 990.451977][T24387] loop4: detected capacity change from 0 to 32768 [ 990.529030][T24387] ERROR: (device loop4): diAllocAG: numfree > numinos [ 990.529030][T24387] [ 990.625771][T24387] ERROR: (device loop4): remounting filesystem as read-only [ 990.678795][T24387] ialloc: diAlloc returned -5! [ 991.458907][T24455] loop2: detected capacity change from 0 to 64 [ 991.545122][T24457] loop4: detected capacity change from 0 to 16 [ 991.572404][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 991.761827][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 991.777968][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 991.828886][ T24] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 991.852878][T23522] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 991.858693][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.890119][ T24] usb 1-1: Product: syz [ 991.902138][ T24] usb 1-1: Manufacturer: syz [ 991.910334][ T24] usb 1-1: SerialNumber: syz [ 991.943435][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 992.029514][T23522] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 992.048109][T23522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.062379][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 992.067500][T23522] usb 4-1: Product: syz [ 992.085030][T23522] usb 4-1: Manufacturer: syz [ 992.094223][T23522] usb 4-1: SerialNumber: syz [ 992.114739][T23522] usb 4-1: config 0 descriptor?? [ 992.128151][T23522] hub 4-1:0.0: bad descriptor, ignoring hub [ 992.148622][T23522] hub 4-1:0.0: probe with driver hub failed with error -5 [ 992.166960][T23522] f81232 4-1:0.0: f81534a converter detected [ 992.227536][T24453] loop5: detected capacity change from 0 to 32768 [ 992.313727][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.320244][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.348631][ T24] usb 1-1: us122l: couldn't allocate write buffer [ 992.356761][T23522] usb 4-1: f81534a converter now attached to ttyUSB0 [ 992.371272][ T24] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 992.438426][ T24] usb 1-1: USB disconnect, device number 40 [ 992.559833][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.702170][T23489] usb 4-1: USB disconnect, device number 18 [ 992.784311][T23489] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 992.838822][T23489] f81232 4-1:0.0: device disconnected [ 992.944301][T24465] loop1: detected capacity change from 0 to 4096 [ 992.991038][T24465] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 993.056132][T24465] ntfs3(loop1): ino=3, mi_enum_attr [ 993.209191][T24465] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 993.439665][T24465] ntfs3(loop1): ino=1f, "file2" failed to open parent directory r=5 to update [ 993.512180][T24480] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 993.549460][T24481] netlink: 'syz.2.7715': attribute type 9 has an invalid length. [ 993.575822][T24484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7716'. [ 993.625919][T24484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7716'. [ 993.788975][T20031] ntfs3(loop1): ino=1f, failed to open parent directory r=5 to update [ 994.026365][T24477] virt_wifi0 speed is unknown, defaulting to 1000 [ 994.040713][T24488] loop3: detected capacity change from 0 to 64 [ 994.489741][T24500] loop1: detected capacity change from 0 to 8 [ 994.643607][T24505] loop2: detected capacity change from 0 to 8 [ 994.748327][T24507] loop4: detected capacity change from 0 to 164 [ 994.780564][T24505] SQUASHFS error: xz decompression failed, data probably corrupt [ 994.823822][T24505] SQUASHFS error: Failed to read block 0x60: -5 [ 994.858992][T24505] SQUASHFS error: xz decompression failed, data probably corrupt [ 994.902168][T24505] SQUASHFS error: Failed to read block 0x60: -5 [ 994.924790][T24510] loop0: detected capacity change from 0 to 64 [ 994.946827][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 994.946848][ T31] audit: type=1800 audit(2000000850.154:198): pid=24505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7728" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 995.693792][T24525] netlink: 'syz.1.7738': attribute type 4 has an invalid length. [ 995.724979][T24525] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7738'. [ 995.772131][T23522] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 995.827876][T24525] .`: renamed from bond0 (while UP) [ 995.951776][T23522] usb 3-1: Using ep0 maxpacket: 32 [ 995.954532][T23522] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 995.954579][T23522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.985748][T23522] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 996.188208][T23522] gspca_nw80x: reg_w err -71 [ 996.188303][T23522] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 996.205283][T23522] usb 3-1: USB disconnect, device number 25 [ 996.290071][T24533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7742'. [ 996.537472][T24516] loop3: detected capacity change from 0 to 32768 [ 996.548626][T24518] loop4: detected capacity change from 0 to 32768 [ 996.558857][T24516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7733 (24516) [ 996.613797][T24518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7734 (24518) [ 996.619968][T24516] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 996.620017][T24516] BTRFS info (device loop3): using sha256 checksum algorithm [ 996.656647][T24518] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 996.656702][T24518] BTRFS info (device loop4): using crc32c checksum algorithm [ 996.960580][T24516] BTRFS info (device loop3): enabling ssd optimizations [ 996.960621][T24516] BTRFS info (device loop3): turning on async discard [ 996.960653][T24516] BTRFS info (device loop3): enabling free space tree [ 996.969795][T24565] netlink: 'syz.0.7745': attribute type 2 has an invalid length. [ 996.969827][T24565] netlink: 723 bytes leftover after parsing attributes in process `syz.0.7745'. [ 996.996806][T24518] BTRFS info (device loop4): enabling ssd optimizations [ 996.996845][T24518] BTRFS info (device loop4): turning on flush-on-commit [ 996.996878][T24518] BTRFS info (device loop4): enabling free space tree [ 996.996909][T24518] BTRFS info (device loop4): enabling auto defrag [ 996.996940][T24518] BTRFS info (device loop4): use lzo compression, level 1 [ 996.996979][T24518] BTRFS info (device loop4): max_inline set to 4096 [ 997.192257][ T5626] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 997.265836][T24571] nvme_fabrics: unknown parameter or missing value '‚' in ctrl creation request [ 998.685521][ T5636] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 999.591238][T24595] loop3: detected capacity change from 0 to 32768 [ 1000.407969][T24639] xt_connbytes: Forcing CT accounting to be enabled [ 1000.434657][T24639] xt_bpf: check failed: parse error [ 1000.548377][T24645] program syz.5.7782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1000.589972][T24645] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1000.777544][T24651] vivid-000: disconnect [ 1000.820138][T24650] vivid-000: reconnect [ 1001.140364][T24666] loop0: detected capacity change from 0 to 64 [ 1001.587175][T24676] loop0: detected capacity change from 0 to 8 [ 1002.176575][T24656] loop1: detected capacity change from 0 to 32768 [ 1002.215984][T24656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7784 (24656) [ 1002.283306][T24656] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1002.296460][T24692] loop2: detected capacity change from 0 to 164 [ 1002.335273][T24662] loop4: detected capacity change from 0 to 32768 [ 1002.346440][T24656] BTRFS info (device loop1): using sha256 checksum algorithm [ 1002.392582][T24662] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 835677b6-61a0-4013-b56a-c73f0302eb39 [ 1002.465848][T24662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7789 (24662) [ 1002.491321][T24662] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1002.515618][T24662] BTRFS info (device loop4): using sha256 checksum algorithm [ 1002.585719][T24656] BTRFS info (device loop1): enabling ssd optimizations [ 1002.599210][T24656] BTRFS info (device loop1): turning on async discard [ 1002.625281][T24656] BTRFS info (device loop1): enabling free space tree [ 1002.773296][T24662] BTRFS info (device loop4): enabling ssd optimizations [ 1002.801777][T24662] BTRFS info (device loop4): turning on async discard [ 1002.826360][T24662] BTRFS info (device loop4): enabling free space tree [ 1003.057046][ T5633] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1003.119077][ T5636] BTRFS info (device loop4): last unmount of filesystem 835677b6-61a0-4013-b56a-c73f0302eb39 [ 1003.154608][T24730] loop0: detected capacity change from 0 to 4096 [ 1003.296300][T24730] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1003.461367][T24730] ntfs3(loop0): ino=1a, mi_enum_attr [ 1003.479165][T24730] ntfs3(loop0): ino=1a, mi_enum_attr [ 1003.536401][T24730] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1003.551423][ T24] virt_wifi0 speed is unknown, defaulting to 1000 [ 1003.784949][T24730] ntfs3(loop0): ino=1a, mi_enum_attr [ 1004.240898][T24743] xt_hashlimit: max too large, truncated to 1048576 [ 1004.306575][T24690] loop5: detected capacity change from 0 to 32768 [ 1004.477052][T24690] ERROR: (device loop5): diAllocAG: numfree > numinos [ 1004.477052][T24690] [ 1004.525715][T24722] loop3: detected capacity change from 0 to 32768 [ 1004.541454][T24690] ERROR: (device loop5): remounting filesystem as read-only [ 1004.610523][T24690] ialloc: diAlloc returned -5! [ 1004.641368][T24722] JBD2: Ignoring recovery information on journal [ 1004.649760][T24722] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 1004.661534][T24722] JBD2: bad block at offset 32 [ 1004.725561][T24722] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1004.746695][T24753] loop4: detected capacity change from 0 to 136 [ 1004.955347][T24757] loop2: detected capacity change from 0 to 512 [ 1004.966317][T24757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1004.986591][T24757] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.7821: casefold flag without casefold feature [ 1004.986640][T24757] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1004.991721][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1004.991753][ C1] EXT4-fs (loop2): initial error at time 2000000860: ext4_orphan_get:1397: inode 17 [ 1004.991806][ C1] EXT4-fs (loop2): last error at time 2000000860: ext4_orphan_get:1397: inode 17 [ 1004.993165][T24757] EXT4-fs (loop2): Remounting filesystem read-only [ 1005.055063][T24757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.243827][ T5626] ocfs2: Unmounting device (7,3) on (node local) [ 1005.331559][ T5638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.301833][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1006.454408][T24794] loop1: detected capacity change from 0 to 64 [ 1006.497412][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1006.535790][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.570345][ T24] usb 4-1: Product: syz [ 1006.586530][ T24] usb 4-1: Manufacturer: syz [ 1006.607474][ T24] usb 4-1: SerialNumber: syz [ 1006.658796][ T24] usb 4-1: config 0 descriptor?? [ 1006.832936][T24803] loop0: detected capacity change from 0 to 256 [ 1006.895516][T24803] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1007.210523][ T24] usb 4-1: USB disconnect, device number 19 [ 1007.439043][T24819] loop0: detected capacity change from 0 to 1024 [ 1007.518260][T24819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.615875][T24819] EXT4-fs error (device loop0): ext4_get_first_dir_block:3560: inode #11: comm syz.0.7850: directory missing '..' [ 1007.803456][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.170990][T24837] netlink: set zone limit has 4 unknown bytes [ 1008.235311][T24845] netlink: 'syz.1.7862': attribute type 9 has an invalid length. [ 1008.381984][T23891] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1008.489655][T24814] loop5: detected capacity change from 0 to 32768 [ 1008.510007][T24814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7847 (24814) [ 1008.551789][T23891] usb 3-1: Using ep0 maxpacket: 8 [ 1008.569799][T23891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.579251][T24814] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1008.593308][T23891] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1008.613007][T23891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.624575][T24814] BTRFS info (device loop5): using sha256 checksum algorithm [ 1008.631613][T23891] usb 3-1: Product: syz [ 1008.640884][T23891] usb 3-1: Manufacturer: syz [ 1008.651818][T23891] usb 3-1: SerialNumber: syz [ 1008.672394][T23891] usb 3-1: config 0 descriptor?? [ 1008.691944][T23891] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1008.703419][T23891] usb 3-1: selecting invalid altsetting 1 [ 1008.763907][T24814] BTRFS info (device loop5): enabling ssd optimizations [ 1008.799731][T24814] BTRFS info (device loop5): turning on async discard [ 1008.822644][T24814] BTRFS info (device loop5): enabling free space tree [ 1008.891575][T24870] loop0: detected capacity change from 0 to 512 [ 1008.898986][T23891] gspca_stk014: init reg: 0x00 [ 1008.899091][T23891] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 1008.990799][T24870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1009.069993][T24870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.213880][T24870] ext4 filesystem being mounted at /1331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.227008][ T5644] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1009.245976][T24877] loop4: detected capacity change from 0 to 256 [ 1009.259208][ T24] usb 3-1: USB disconnect, device number 26 [ 1009.309267][T24877] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1009.745066][T24886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1011.027743][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.056261][T24919] netlink: set zone limit has 4 unknown bytes [ 1011.799440][T24952] netlink: 'syz.3.7905': attribute type 9 has an invalid length. [ 1011.872994][T24956] loop2: detected capacity change from 0 to 128 [ 1012.124883][T24966] netlink: 59 bytes leftover after parsing attributes in process `syz.5.7911'. [ 1012.183958][T24966] netlink: 59 bytes leftover after parsing attributes in process `syz.5.7911'. [ 1012.251360][T24964] netlink: set zone limit has 4 unknown bytes [ 1012.258128][T24968] netlink: 'syz.4.7912': attribute type 10 has an invalid length. [ 1012.269283][ T24] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1012.280933][T24968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7912'. [ 1012.293248][T24968] dummy0: entered promiscuous mode [ 1012.323136][T24968] dummy0: entered allmulticast mode [ 1012.340042][T24968] bridge0: port 3(dummy0) entered blocking state [ 1012.372382][T24968] bridge0: port 3(dummy0) entered disabled state [ 1012.449659][ T24] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1012.474162][T24970] loop2: detected capacity change from 0 to 16 [ 1012.483777][ T24] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1012.501036][T24970] erofs (device loop2): mounted with root inode @ nid 36. [ 1012.514734][ T24] usb 2-1: Product: syz [ 1012.523469][ T24] usb 2-1: Manufacturer: syz [ 1012.526788][T24976] netlink: 'syz.3.7914': attribute type 1 has an invalid length. [ 1012.539337][ T24] usb 2-1: SerialNumber: syz [ 1012.595657][ T24] usb 2-1: config 0 descriptor?? [ 1012.747769][T24978] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1012.775982][T24978] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1012.871247][ T24] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v29 fw v231.0.0 (1 channels) [ 1013.073146][ T24] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1013.100914][T24983] loop0: detected capacity change from 0 to 4096 [ 1013.107415][ T24] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1013.159443][T24983] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1013.225447][T24983] ntfs3(loop0): Failed to load $Extend (-22). [ 1013.240235][T24983] ntfs3(loop0): Failed to initialize $Extend. [ 1013.593907][ T24] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1013.649534][ T24] usb 2-1: USB disconnect, device number 38 [ 1013.799267][T25001] netlink: 'syz.0.7928': attribute type 9 has an invalid length. [ 1013.840069][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7931'. [ 1014.051851][ T5778] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1014.127333][T25011] netlink: 'syz.5.7934': attribute type 5 has an invalid length. [ 1014.231841][ T5778] usb 5-1: Using ep0 maxpacket: 8 [ 1014.264468][ T5778] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1014.319036][ T5778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1014.348875][ T5778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1014.386314][ T5778] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1014.441534][ T5778] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1014.469668][ T5778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.500400][ T5778] usb 5-1: Product: syz [ 1014.518593][ T5778] usb 5-1: Manufacturer: syz [ 1014.532003][T25022] loop2: detected capacity change from 0 to 256 [ 1014.539963][ T5778] usb 5-1: SerialNumber: syz [ 1014.587827][ T5778] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1014.613737][T25022] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1014.640382][ T5778] usbtest 5-1:1.0: Linux user mode ISO test driver [ 1014.667436][ T5778] usbtest 5-1:1.0: high-speed {control iso-in} tests (+alt) [ 1014.743771][T25024] loop0: detected capacity change from 0 to 1024 [ 1014.837805][T25024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.890073][T25024] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 623: comm syz.0.7941: Attempting to read directory block (623) that is past i_size (638464) [ 1014.905715][ T5778] usb 5-1: USB disconnect, device number 122 [ 1015.003900][T23891] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1015.094934][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.105076][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7943'. [ 1015.149296][T25008] loop3: detected capacity change from 0 to 32768 [ 1015.161064][T25008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7933 (25008) [ 1015.204033][T23891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1015.221204][T23891] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1015.268200][T23891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.305521][T25008] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.319168][T23891] usb 6-1: config 0 descriptor?? [ 1015.349993][T25008] BTRFS info (device loop3): using sha256 checksum algorithm [ 1015.471176][T25008] BTRFS info (device loop3): enabling ssd optimizations [ 1015.478324][T25008] BTRFS info (device loop3): turning on async discard [ 1015.485174][T25008] BTRFS info (device loop3): enabling free space tree [ 1015.798925][T25018] loop1: detected capacity change from 0 to 32768 [ 1015.825450][ T5626] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.848289][T23891] video4linux radio48: keene_cmd_main failed (-71) [ 1015.861965][T25018] BTRFS info: device /dev/loop1 (7:1) using temp-fsid eb8e03f9-1b27-45c0-a700-adafae29362b [ 1015.879067][T23891] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 1015.906097][T25018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7938 (25018) [ 1015.907069][T23891] usb 6-1: USB disconnect, device number 20 [ 1016.034018][T25018] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1016.073074][T25018] BTRFS info (device loop1): using sha256 checksum algorithm [ 1016.320641][T25018] BTRFS info (device loop1): enabling ssd optimizations [ 1016.330104][T25083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1016.344325][T25018] BTRFS info (device loop1): turning on async discard [ 1016.369617][T25018] BTRFS info (device loop1): enabling free space tree [ 1016.733970][ T5633] BTRFS info (device loop1): last unmount of filesystem eb8e03f9-1b27-45c0-a700-adafae29362b [ 1017.270298][T25108] loop2: detected capacity change from 0 to 64 [ 1017.467348][T25113] loop0: detected capacity change from 0 to 8 [ 1017.513658][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1017.520802][T25113] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1017.677364][ T6418] udevd[6418]: incorrect cramfs checksum on /dev/loop0 [ 1017.693268][T25113] cramfs: Error -3 while decompressing! [ 1017.771795][T25113] cramfs: ffffffff9b282888(18)->ffff88807e4cb000(4096) [ 1017.771887][T25113] cramfs: Error -3 while decompressing! [ 1017.816317][ T6418] udevd[6418]: incorrect cramfs checksum on /dev/loop0 [ 1017.854658][T25113] cramfs: ffffffff9b282888(18)->ffff88807e4cb000(4096) [ 1017.953747][ T5866] udevd[5866]: incorrect cramfs checksum on /dev/loop0 [ 1018.295872][T25125] loop1: detected capacity change from 0 to 8192 [ 1018.383270][T25132] loop0: detected capacity change from 0 to 1024 [ 1018.591924][ T5778] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1018.776304][T25140] openvswitch: netlink: IP tunnel dst address not specified [ 1018.792852][ T5778] usb 4-1: too many configurations: 203, using maximum allowed: 8 [ 1018.822495][ T5778] usb 4-1: config index 0 descriptor too short (expected 65280, got 72) [ 1018.857498][ T5778] usb 4-1: config index 1 descriptor too short (expected 65280, got 72) [ 1018.884472][T25107] loop5: detected capacity change from 0 to 32768 [ 1018.892306][ T5778] usb 4-1: config index 2 descriptor too short (expected 65280, got 72) [ 1018.923028][T25107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7965 (25107) [ 1018.927130][ T5778] usb 4-1: config index 3 descriptor too short (expected 65280, got 72) [ 1019.021421][ T5778] usb 4-1: config index 4 descriptor too short (expected 65280, got 72) [ 1019.043094][T25107] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1019.066120][ T5778] usb 4-1: config index 5 descriptor too short (expected 65280, got 72) [ 1019.098622][ T5778] usb 4-1: config index 6 descriptor too short (expected 65280, got 72) [ 1019.101792][T25107] BTRFS info (device loop5): using sha256 checksum algorithm [ 1019.129670][ T5778] usb 4-1: config index 7 descriptor too short (expected 65280, got 72) [ 1019.166829][ T5778] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1019.204336][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.260611][ T5778] usb 4-1: Product: syz [ 1019.296454][T25107] BTRFS info (device loop5): enabling ssd optimizations [ 1019.310931][ T5778] usb 4-1: Manufacturer: syz [ 1019.317372][ T5778] usb 4-1: SerialNumber: syz [ 1019.320176][T25107] BTRFS info (device loop5): turning on async discard [ 1019.329850][ T5778] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1019.361014][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1019.382577][T25107] BTRFS info (device loop5): enabling free space tree [ 1020.021864][T23523] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1020.221887][T23523] usb 1-1: Using ep0 maxpacket: 32 [ 1020.249678][T25180] loop4: detected capacity change from 0 to 4096 [ 1020.273730][T23523] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1020.322212][T25180] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1020.341511][T23523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.420346][ T5644] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1020.529087][T23523] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1020.588653][ T5778] usb 4-1: USB disconnect, device number 20 [ 1020.601569][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1020.601904][ T24] ath9k_htc: Failed to initialize the device [ 1020.699198][ T5778] usb 4-1: ath9k_htc: USB layer deinitialized [ 1020.828583][T23523] gspca_nw80x: reg_w err -71 [ 1020.828693][T23523] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 1020.874870][T25180] ntfs3(loop4): Failed to load $Extend (-22). [ 1020.874914][T25180] ntfs3(loop4): Failed to initialize $Extend. [ 1020.897065][T23523] usb 1-1: USB disconnect, device number 41 [ 1020.912853][T23489] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1021.062337][T23489] usb 3-1: Using ep0 maxpacket: 16 [ 1021.065066][T23489] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1021.065126][T23489] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 1021.065177][T23489] usb 3-1: config 0 has no interface number 0 [ 1021.068716][T23489] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1021.068785][T23489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.068822][T23489] usb 3-1: Product: syz [ 1021.068849][T23489] usb 3-1: Manufacturer: syz [ 1021.068878][T23489] usb 3-1: SerialNumber: syz [ 1021.089855][T23489] usb 3-1: config 0 descriptor?? [ 1021.334600][T23489] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1021.334664][T23489] uvcvideo 3-1:0.105: No valid video chain found. [ 1021.397224][T23489] usb 3-1: USB disconnect, device number 27 [ 1022.384709][T25213] loop5: detected capacity change from 0 to 512 [ 1022.439208][T25213] EXT4-fs (loop5): blocks per group (8192) and clusters per group (2304) inconsistent [ 1022.791998][T25217] loop0: detected capacity change from 0 to 4096 [ 1022.837713][T25217] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1023.693060][T23523] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1023.864247][T23523] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1023.902432][T23523] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1023.903038][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1023.959383][T23523] usb 6-1: config 0 has no interface number 0 [ 1023.997315][T23523] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 14385, setting to 64 [ 1024.032699][T23523] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.067496][T23523] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1024.097220][T23523] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1024.123238][T23523] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1024.129912][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1024.147993][ T24] usb 4-1: config 0 has no interface number 0 [ 1024.148996][T23523] usb 6-1: Manufacturer: syz [ 1024.166607][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1024.186764][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1024.198394][T23523] usb 6-1: config 0 descriptor?? [ 1024.210752][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.233344][T23523] hub 6-1:0.52: bad descriptor, ignoring hub [ 1024.239923][ T24] usb 4-1: Product: syz [ 1024.254126][ T24] usb 4-1: Manufacturer: syz [ 1024.261746][T23523] hub 6-1:0.52: probe with driver hub failed with error -5 [ 1024.266564][ T24] usb 4-1: SerialNumber: syz [ 1024.324631][ T24] usb 4-1: config 0 descriptor?? [ 1024.522699][T23523] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input69 [ 1024.785522][T23523] usb 6-1: USB disconnect, device number 21 [ 1024.811112][ T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1024.859424][ T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1024.934360][ T24] usb 4-1: USB disconnect, device number 21 [ 1025.183800][T25281] loop2: detected capacity change from 0 to 4096 [ 1025.207331][T25281] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1025.392132][T25287] vti0: entered promiscuous mode [ 1025.930411][T25306] loop4: detected capacity change from 0 to 256 [ 1025.968579][T25308] netlink: 'syz.2.8054': attribute type 10 has an invalid length. [ 1026.012371][T25308] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8054'. [ 1026.031578][T25306] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1026.072082][T21490] Bluetooth: hci5: command 0x0406 tx timeout [ 1026.282964][T25316] loop1: detected capacity change from 0 to 2048 [ 1026.320172][T25316] EXT4-fs: Ignoring removed oldalloc option [ 1026.419965][T25316] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 1026.458498][T25316] System zones: 0-7 [ 1026.478617][T25324] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1026.523766][T25324] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1026.538117][T25316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.549024][T25324] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1026.562674][T25324] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1026.825939][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.179202][T25337] loop2: detected capacity change from 0 to 4096 [ 1027.217532][T25337] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1027.309564][T25337] ntfs3(loop2): ino=19, mi_enum_attr [ 1027.338804][T25337] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1027.391920][T25352] loop4: detected capacity change from 0 to 2048 [ 1027.448234][T25352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.725469][T25363] loop5: detected capacity change from 0 to 128 [ 1027.784364][T25363] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1027.816201][T25363] ext4 filesystem being mounted at /1319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.914402][T25371] xt_l2tp: v2 doesn't support IP mode [ 1027.936815][T25373] netlink: 'syz.4.8084': attribute type 21 has an invalid length. [ 1027.936861][T25373] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8084'. [ 1027.936924][T25373] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8084'. [ 1028.073971][ T5644] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1028.317599][T25346] loop1: detected capacity change from 0 to 32768 [ 1028.364916][T25346] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8069 (25346) [ 1028.419097][T25346] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1028.459637][T25346] BTRFS info (device loop1): using sha256 checksum algorithm [ 1028.635182][T25400] loop5: detected capacity change from 0 to 4096 [ 1028.673755][T25400] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1028.685633][T25346] BTRFS info (device loop1): enabling ssd optimizations [ 1028.717145][T25346] BTRFS info (device loop1): turning on async discard [ 1028.726818][T25346] BTRFS info (device loop1): enabling free space tree [ 1028.734174][T25346] BTRFS info (device loop1): enabling auto defrag [ 1028.740749][T25346] BTRFS info (device loop1): max_inline set to 4096 [ 1028.901148][T25400] ntfs3(loop5): ino=19, mi_enum_attr [ 1029.106037][T25400] ntfs3(loop5): failed to convert "c46c" to cp850 [ 1029.117386][ T5633] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1029.142949][T25400] ntfs3(loop5): ino=20, mi_enum_attr [ 1029.231069][T25409] loop0: detected capacity change from 0 to 4096 [ 1029.284854][T25409] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1029.474337][T25417] veth2: entered allmulticast mode [ 1029.485712][T25409] ntfs3(loop0): ino=19, mi_enum_attr [ 1029.508014][T25409] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1029.595351][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1029.793069][T25420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.801759][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1029.847550][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1029.886302][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.945945][ T24] usb 3-1: config 0 has no interface number 0 [ 1029.966527][T25425] openvswitch: netlink: IPv4 tun info is not correct [ 1030.019391][ T24] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1030.036979][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1030.051754][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.059853][ T24] usb 3-1: Product: syz [ 1030.064657][ T24] usb 3-1: Manufacturer: syz [ 1030.069314][ T24] usb 3-1: SerialNumber: syz [ 1030.084329][ T24] usb 3-1: config 0 descriptor?? [ 1030.095282][ T24] hub 3-1:0.89: bad descriptor, ignoring hub [ 1030.108128][ T24] hub 3-1:0.89: probe with driver hub failed with error -5 [ 1030.140137][ T24] option 3-1:0.89: GSM modem (1-port) converter detected [ 1030.424410][T23489] usb 3-1: USB disconnect, device number 28 [ 1030.429641][T23489] option 3-1:0.89: device disconnected [ 1030.694490][T25441] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8110'. [ 1030.828626][T25413] loop3: detected capacity change from 0 to 32768 [ 1030.887381][T25413] JBD2: Ignoring recovery information on journal [ 1030.991636][T25413] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1031.471802][T23489] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1031.612495][T25413] ocfs2: Unmounting device (7,3) on (node local) [ 1031.675004][T23489] usb 5-1: Using ep0 maxpacket: 16 [ 1031.705012][T25466] loop1: detected capacity change from 0 to 16 [ 1031.722017][T25466] erofs (device loop1): mounted with root inode @ nid 36. [ 1031.761046][T23489] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1031.788057][T23489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.798390][T25466] syz.1.8121: attempt to access beyond end of device [ 1031.798390][T25466] loop1: rw=0, sector=36, nr_sectors = 1 limit=16 [ 1031.810757][T23489] usb 5-1: Product: syz [ 1031.850633][T23489] usb 5-1: Manufacturer: syz [ 1031.870960][T23489] usb 5-1: SerialNumber: syz [ 1031.942928][T23489] usb 5-1: config 0 descriptor?? [ 1031.986527][T23489] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1032.219223][T23489] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 1032.261019][T23489] visor 5-1:0.0: probe with driver visor failed with error -5 [ 1032.485509][T23489] usb 5-1: USB disconnect, device number 123 [ 1032.597748][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8131'. [ 1033.356190][T25475] loop0: detected capacity change from 0 to 32768 [ 1033.388373][T25475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8126 (25475) [ 1033.447614][T25475] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1033.479208][T25475] BTRFS info (device loop0): using sha256 checksum algorithm [ 1033.706801][T25475] BTRFS info (device loop0): enabling ssd optimizations [ 1033.749104][T25475] BTRFS info (device loop0): turning on async discard [ 1033.772733][T25475] BTRFS info (device loop0): enabling free space tree [ 1033.996642][T25530] loop1: detected capacity change from 0 to 4096 [ 1034.041784][T25530] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1034.124998][T25530] NILFS (loop1): mounting unchecked fs [ 1034.225225][ T5866] udevd[5866]: incorrect nilfs2 checksum on /dev/loop1 [ 1034.249576][T25530] NILFS (loop1): recovery complete [ 1034.278937][T25536] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1034.389599][ T5622] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1034.820994][T25514] loop4: detected capacity change from 0 to 32768 [ 1034.834217][T25546] netlink: 'syz.5.8153': attribute type 10 has an invalid length. [ 1034.860530][T25514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8145 (25514) [ 1034.870635][T25546] netlink: 55 bytes leftover after parsing attributes in process `syz.5.8153'. [ 1034.950800][T25514] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1035.016567][T25514] BTRFS info (device loop4): using sha256 checksum algorithm [ 1035.100393][T25545] loop0: detected capacity change from 0 to 4096 [ 1035.148977][T25545] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1035.333868][T25545] ntfs3(loop0): ino=19, mi_enum_attr [ 1035.395623][T25514] BTRFS info (device loop4): enabling ssd optimizations [ 1035.425151][T25514] BTRFS info (device loop4): turning on async discard [ 1035.473426][T25545] ntfs3(loop0): failed to convert "c46c" to cp850 [ 1035.479741][T25514] BTRFS info (device loop4): enabling free space tree [ 1035.527485][T25545] ntfs3(loop0): ino=20, mi_enum_attr [ 1035.841048][ T5636] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1036.027352][T25583] loop1: detected capacity change from 0 to 256 [ 1036.121444][T25583] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1036.469687][T25585] loop5: detected capacity change from 0 to 8192 [ 1036.522973][T25595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1037.253718][T25610] loop0: detected capacity change from 0 to 164 [ 1037.369924][T25610] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1037.423248][T25610] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1037.497056][T25610] Symlink component flag not implemented [ 1037.522259][T25610] Symlink component flag not implemented [ 1037.540022][T25610] Symlink component flag not implemented (7) [ 1037.568522][T25610] Symlink component flag not implemented (116) [ 1037.720373][T25625] netlink: 'syz.3.8185': attribute type 3 has an invalid length. [ 1037.896591][T23523] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1037.999732][T25633] loop3: detected capacity change from 0 to 64 [ 1038.092817][T23523] usb 5-1: Using ep0 maxpacket: 8 [ 1038.113996][T23523] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1038.141917][T23523] usb 5-1: config 127 has an invalid interface number: 1 but max is 0 [ 1038.171779][T23523] usb 5-1: config 127 has no interface number 0 [ 1038.189839][T23523] usb 5-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 1038.232850][T23523] usb 5-1: config 127 interface 1 has no altsetting 0 [ 1038.276626][T23523] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 1038.305350][T23523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.347482][T23523] usb 5-1: Product: syz [ 1038.367187][T23523] usb 5-1: Manufacturer: syz [ 1038.383674][T23523] usb 5-1: SerialNumber: syz [ 1038.437155][T25623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1038.717273][T23523] redrat3 5-1:127.1: Couldn't find all endpoints [ 1038.733864][T25617] loop2: detected capacity change from 0 to 32768 [ 1038.782659][T23523] usb 5-1: USB disconnect, device number 124 [ 1039.190912][T25655] loop3: detected capacity change from 0 to 8 [ 1039.261291][T25655] SQUASHFS error: Unable to read inode 0xe3 [ 1039.380726][T25639] loop1: detected capacity change from 0 to 32768 [ 1039.422401][T25639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8192 (25639) [ 1039.493843][T25639] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1039.547995][T25639] BTRFS info (device loop1): using sha256 checksum algorithm [ 1039.725925][T25670] usb usb5: usbfs: process 25670 (syz.4.8204) did not claim interface 0 before use [ 1039.800212][T25639] BTRFS info (device loop1): enabling ssd optimizations [ 1039.853394][T25639] BTRFS info (device loop1): turning on async discard [ 1039.903619][T25639] BTRFS info (device loop1): enabling free space tree [ 1040.254130][ T5633] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.385900][T25651] loop5: detected capacity change from 0 to 32768 [ 1040.451185][T25651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8196 (25651) [ 1040.466731][T23523] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1040.535849][T25651] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.596906][T25651] BTRFS info (device loop5): using sha256 checksum algorithm [ 1040.694081][T23523] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 1040.743682][T23523] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 110, changing to 7 [ 1040.755590][T23523] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25973, setting to 1024 [ 1040.768113][T23523] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1040.783438][T23523] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1040.866564][T23523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1040.893730][T25715] kAFS: Can only specify source 'none' with -o dyn [ 1040.905107][T23523] usb 1-1: SerialNumber: syz [ 1040.915117][T25651] BTRFS info (device loop5): enabling ssd optimizations [ 1040.986341][T25651] BTRFS info (device loop5): turning on async discard [ 1041.011883][T25651] BTRFS info (device loop5): enabling free space tree [ 1041.159006][T23523] usbtest 1-1:1.0: Linux user mode ISO test driver [ 1041.215802][T23523] usbtest 1-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 1041.310647][T23523] usb 1-1: USB disconnect, device number 42 [ 1041.401333][ T5644] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1041.759118][T25691] loop2: detected capacity change from 0 to 32768 [ 1041.805266][T25691] BTRFS warning: excessive commit interval 65536, use with care [ 1041.845514][T25691] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8209 (25691) [ 1041.959694][T25691] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1042.039438][T25691] BTRFS info (device loop2): using sha256 checksum algorithm [ 1042.346612][T25691] BTRFS info (device loop2): enabling ssd optimizations [ 1042.372476][T25691] BTRFS info (device loop2): turning on async discard [ 1042.392477][T25751] loop0: detected capacity change from 0 to 16 [ 1042.414276][T25691] BTRFS info (device loop2): enabling free space tree [ 1042.442153][T25751] erofs (device loop0): mounted with root inode @ nid 36. [ 1042.833109][ T5638] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1042.850765][T25714] loop4: detected capacity change from 0 to 32768 [ 1043.202221][T23489] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1043.393992][T23489] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1043.428833][T23489] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1043.466224][T23489] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1043.504499][T23489] usb 1-1: Manufacturer: syz [ 1043.530577][T23489] usb 1-1: SerialNumber: syz [ 1043.556914][T25730] loop1: detected capacity change from 0 to 32768 [ 1043.643873][T25730] diRead: diIAGRead returned -5 [ 1043.722283][T25730] jfs_lookup: iget failed on inum 1048352 [ 1043.779865][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1043.801948][T23522] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1043.833053][T23489] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1043.903008][T23489] usb 1-1: USB disconnect, device number 43 [ 1044.010825][T23522] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 1044.052805][T23522] usb 6-1: config 0 has no interface number 0 [ 1044.084847][T23522] usb 6-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1044.162588][T23522] usb 6-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1044.222410][T23522] usb 6-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 1044.295903][T23522] usb 6-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.361755][T23522] usb 6-1: config 0 interface 70 has no altsetting 0 [ 1044.401567][T23522] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1044.453678][T23522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.487101][T23522] usb 6-1: Product: syz [ 1044.507892][T23522] usb 6-1: Manufacturer: syz [ 1044.537776][T23522] usb 6-1: SerialNumber: syz [ 1044.585849][T23522] usb 6-1: config 0 descriptor?? [ 1044.614809][T25768] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1044.870094][T25790] loop4: detected capacity change from 0 to 512 [ 1044.900355][T23522] ti_usb_3410_5052 6-1:0.70: TI USB 3410 1 port adapter converter detected [ 1044.954484][T25790] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1044.990246][T23522] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1045.096052][T23522] usb 6-1: USB disconnect, device number 22 [ 1045.236943][T23522] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1045.271765][T23517] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1045.281892][T23522] ti_usb_3410_5052 6-1:0.70: device disconnected [ 1045.471155][T23517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1045.507496][T23517] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1045.551127][T23517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1045.591639][T25810] trusted_key: encrypted_key: keyword 'newdefault' not recognized [ 1045.594553][T23517] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1045.667184][T23517] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1045.701136][T23517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.717296][T23517] usb 3-1: config 0 descriptor?? [ 1045.991446][T23517] hdpvr 3-1:0.0: firmware version 0xd dated 8°mPª{, [ 1045.991446][T23517] #ðãpó⊻’lôEÈ¥£]Ô +±aV@g_C.ÏÁ«r‡9 [ 1046.061328][T25826] loop4: detected capacity change from 0 to 64 [ 1046.195790][T23517] hdpvr 3-1:0.0: device init failed [ 1046.220737][T23517] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1046.260697][T23517] usb 3-1: USB disconnect, device number 29 [ 1046.372392][ T5778] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1046.530230][T25832] dvmrp1: entered allmulticast mode [ 1046.574150][ T5778] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.611418][ T5778] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1046.645742][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.735905][ T5778] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1046.868095][T25823] loop1: detected capacity change from 0 to 32768 [ 1046.895734][T25823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8258 (25823) [ 1046.960638][T25823] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1047.017320][T25823] BTRFS info (device loop1): using sha256 checksum algorithm [ 1047.175695][T25863] netlink: 'syz.2.8274': attribute type 21 has an invalid length. [ 1047.175788][T25863] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8274'. [ 1047.204798][T25823] BTRFS info (device loop1): enabling ssd optimizations [ 1047.204838][T25823] BTRFS info (device loop1): turning on async discard [ 1047.204870][T25823] BTRFS info (device loop1): enabling free space tree [ 1047.443404][ T5633] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1047.771817][T23517] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1047.838141][ T5778] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1047.953773][T23517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1047.981636][T23517] usb 3-1: not running at top speed; connect to a high speed hub [ 1047.992604][T23517] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 1047.992652][T23517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.992690][T23517] usb 3-1: Product: syz [ 1047.992718][T23517] usb 3-1: Manufacturer: syz [ 1047.992747][T23517] usb 3-1: SerialNumber: syz [ 1048.048809][ T5778] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1048.048844][ T5778] stv0680 4-1:4.0: last error: 90, command = 0xeb [ 1048.061390][ T5778] usb 4-1: USB disconnect, device number 22 [ 1048.143044][T25885] kAFS: unable to lookup cell '' [ 1048.236137][T23517] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1048.237231][T25888] loop4: detected capacity change from 0 to 128 [ 1048.274921][T23517] usb 3-1: found format II with max.bitrate = 9, frame size=0 [ 1048.274964][T23517] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1048.462281][T25890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.480670][T23517] usb 3-1: USB disconnect, device number 30 [ 1048.699844][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.776723][T25896] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1048.803024][T25896] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1048.908193][T25899] loop5: detected capacity change from 0 to 16 [ 1048.912200][T25899] erofs (device loop5): mounted with root inode @ nid 36. [ 1048.953029][T25899] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 1048.992402][T25899] erofs (device loop5): too much compressed data @ la 512 of nid 89 [ 1048.992441][T25899] erofs (device loop5): readahead error at folio 1 @ nid 89 [ 1048.992619][T25899] erofs (device loop5): bogus lookback distance 1 @ lcn 0 of nid 89 [ 1048.992656][T25899] erofs (device loop5): readahead error at folio 0 @ nid 89 [ 1048.997751][T25899] syz.5.8291: attempt to access beyond end of device [ 1048.997751][T25899] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 1049.041282][T25899] erofs (device loop5): bogus lookback distance 1 @ lcn 0 of nid 89 [ 1049.041362][T25899] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 3584 [ 1049.041461][T25899] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1049.067275][ T31] audit: type=1800 audit(2000000904.254:199): pid=25899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8291" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1049.368880][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8295'. [ 1049.368989][T25909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8295'. [ 1049.369018][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8295'. [ 1049.897273][T25928] autofs4:pid:25928:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1049.994621][T25934] loop5: detected capacity change from 0 to 1024 [ 1050.012881][T25934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1050.071961][T23489] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1050.089375][T25934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.121221][T25940] loop2: detected capacity change from 0 to 64 [ 1050.197660][ T24] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1050.233931][T23489] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1050.253830][T23489] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.269986][T23489] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.284643][T23489] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1050.290578][ T5644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.301881][T23489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.321285][T23489] usb 1-1: Product: syz [ 1050.331402][T23489] usb 1-1: Manufacturer: syz [ 1050.348121][T23489] usb 1-1: SerialNumber: syz [ 1050.366580][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1050.416712][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1050.428038][T23489] usb 1-1: selecting invalid altsetting 1 [ 1050.446587][T23489] usb 1-1: unit 6 not found! [ 1050.463325][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 1050.483389][T23489] usb 1-1: unit 2 not found! [ 1050.495165][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.521916][ T24] usb 5-1: Product: syz [ 1050.539394][ T24] usb 5-1: Manufacturer: syz [ 1050.552426][ T24] usb 5-1: SerialNumber: syz [ 1050.713703][T23489] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1050.808331][T23489] usb 1-1: USB disconnect, device number 44 [ 1050.834851][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1050.862856][ T24] usb 5-1: found format II with max.bitrate = 9, frame size=0 [ 1050.903980][ T24] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1050.925013][T25956] loop3: detected capacity change from 0 to 512 [ 1050.959009][T25956] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1051.108672][ T24] usb 5-1: USB disconnect, device number 125 [ 1051.167133][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.370290][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.577861][T25969] kAFS: unable to lookup cell 'syz1' [ 1051.638443][ T31] audit: type=1326 audit(2000000906.824:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.638533][ T31] audit: type=1326 audit(2000000906.844:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.638660][ T31] audit: type=1326 audit(2000000906.844:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.638735][ T31] audit: type=1326 audit(2000000906.844:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.638813][ T31] audit: type=1326 audit(2000000906.844:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.638907][ T31] audit: type=1326 audit(2000000906.844:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.638980][ T31] audit: type=1326 audit(2000000906.844:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.639055][ T31] audit: type=1326 audit(2000000906.844:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.639133][ T31] audit: type=1326 audit(2000000906.844:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25971 comm="syz.0.8325" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81c739ce59 code=0x50000 [ 1051.928438][T23523] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1051.997032][T25976] loop4: detected capacity change from 0 to 8192 [ 1052.031005][T25980] loop0: detected capacity change from 0 to 64 [ 1052.104875][T23523] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1052.104926][T23523] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1052.110466][T23523] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1052.110526][T23523] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1052.110576][T23523] usb 4-1: Product: syz [ 1052.110624][T23523] usb 4-1: Manufacturer: syz [ 1052.110663][T23523] usb 4-1: SerialNumber: syz [ 1052.128515][T23523] usb 4-1: config 0 descriptor?? [ 1052.153511][T23523] usb 4-1: selecting invalid altsetting 0 [ 1052.758757][T25992] Device name not specified. [ 1052.758757][T25992] [ 1052.918397][T25997] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1053.028479][T23523] usb 4-1: USB disconnect, device number 23 [ 1053.137270][T26001] netlink: 'syz.5.8338': attribute type 15 has an invalid length. [ 1053.220952][T26001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8338'. [ 1053.254570][T26010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.334262][ T6418] udevd[6418]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.401970][T26014] syz_tun: entered allmulticast mode [ 1053.421902][ T24] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1053.480737][T26016] loop2: detected capacity change from 0 to 256 [ 1053.606277][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1053.649192][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1053.697558][ T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 1053.749820][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.760351][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.768699][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.810267][ T24] usb 2-1: Product: syz [ 1053.829153][ T24] usb 2-1: Manufacturer: syz [ 1053.863560][ T24] usb 2-1: SerialNumber: syz [ 1054.078226][T26019] loop3: detected capacity change from 0 to 8192 [ 1054.153110][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1054.194885][ T24] usb 2-1: found format II with max.bitrate = 9, frame size=0 [ 1054.221877][ T24] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1054.475598][ T24] usb 2-1: USB disconnect, device number 39 [ 1054.616845][T26041] loop5: detected capacity change from 0 to 4096 [ 1054.649116][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1054.669523][T26041] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1054.710150][T26041] ntfs3(loop5): It is recommended to use chkdsk. [ 1054.739826][T26045] loop2: detected capacity change from 0 to 2048 [ 1054.890329][T26045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.920547][T26045] ext4 filesystem being mounted at /1397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.129305][T26045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.8355: bg 0: block 345: padding at end of block bitmap is not set [ 1055.236315][T26045] EXT4-fs (loop2): Remounting filesystem read-only [ 1055.476140][T26062] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1055.517880][T26062] overlayfs: missing 'lowerdir' [ 1055.528499][ T5638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.705452][T26039] loop0: detected capacity change from 0 to 32768 [ 1055.757529][T26039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8352 (26039) [ 1055.837994][T26039] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1055.872840][T26039] BTRFS info (device loop0): using sha256 checksum algorithm [ 1056.040534][T26039] BTRFS info (device loop0): enabling ssd optimizations [ 1056.053409][T26039] BTRFS info (device loop0): turning on async discard [ 1056.072160][T26039] BTRFS info (device loop0): enabling free space tree [ 1056.219958][T26101] loop4: detected capacity change from 0 to 8 [ 1056.304224][ T5622] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1056.305216][T26101] overlay: filesystem on ./file0 is read-only [ 1056.360439][T23865] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1056.558463][T23865] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1056.577246][T26109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8376'. [ 1056.595204][T23865] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1056.653026][T23865] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.687215][T26112] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8375'. [ 1056.707679][T23865] usb 4-1: config 220 has no interface number 2 [ 1056.738043][T23865] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1056.795746][T26112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1056.821606][T23865] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1056.845434][T23865] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1056.871640][T23865] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1056.887821][T26116] loop1: detected capacity change from 0 to 64 [ 1056.911081][T23865] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1056.932779][T23865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.963042][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1056.981056][T23865] usb 4-1: Product: syz [ 1056.992787][T23865] usb 4-1: Manufacturer: syz [ 1057.003426][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.004958][T26118] Cannot find del_set index 4 as target [ 1057.015700][T23865] usb 4-1: SerialNumber: syz [ 1057.047198][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.147495][T26114] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1057.179811][ T5633] hfs: node 4:3 still has 1 user(s)! [ 1057.213385][T26114] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1057.273094][T26114] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1057.338571][T23865] usb 4-1: selecting invalid altsetting 0 [ 1057.402249][T26114] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1057.471511][T23865] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1057.510895][T23865] uvcvideo 4-1:220.0: No valid video chain found. [ 1057.579655][T23865] usb 4-1: selecting invalid altsetting 0 [ 1057.634063][T23865] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1057.665384][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.699054][T26130] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1057.713159][T23865] usb 4-1: USB disconnect, device number 24 [ 1057.748679][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.808709][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.854678][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.904819][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1057.938296][T26114] wlan1 speed is unknown, defaulting to 1000 [ 1058.011980][T23523] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1058.049350][T26138] netlink: 388 bytes leftover after parsing attributes in process `syz.1.8392'. [ 1058.232657][T23523] usb 3-1: Using ep0 maxpacket: 32 [ 1058.264113][T23523] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.301821][T23523] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.328514][T26146] dvmrp1: entered allmulticast mode [ 1058.348724][T23523] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1058.383262][T23523] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1058.417287][T23523] usb 3-1: Product: syz [ 1058.431224][T23523] usb 3-1: Manufacturer: syz [ 1058.447563][T23523] usb 3-1: SerialNumber: syz [ 1058.523016][T23523] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input71 [ 1058.838896][T23523] usb 3-1: USB disconnect, device number 31 [ 1058.993672][T23523] appletouch 3-1:1.0: input: appletouch disconnected [ 1059.117435][T26169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8406'. [ 1059.217469][T26171] usb usb9: usbfs: process 26171 (syz.5.8407) did not claim interface 0 before use [ 1059.689206][T26141] loop0: detected capacity change from 0 to 40427 [ 1059.729129][T26141] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1059.750450][T26141] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1059.796696][T26141] F2FS-fs (loop0): invalid crc value [ 1060.056334][T26197] loop2: detected capacity change from 0 to 256 [ 1060.102607][T26141] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1060.185548][T26197] FAT-fs (loop2): Directory bread(block 64) failed [ 1060.208702][T26141] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1060.219089][T26197] FAT-fs (loop2): Directory bread(block 65) failed [ 1060.227855][T26202] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1060.239810][T26141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1060.257463][T26197] FAT-fs (loop2): Directory bread(block 66) failed [ 1060.296387][T26197] FAT-fs (loop2): Directory bread(block 67) failed [ 1060.338094][T26197] FAT-fs (loop2): Directory bread(block 68) failed [ 1060.368766][T26197] FAT-fs (loop2): Directory bread(block 69) failed [ 1060.406790][T26197] FAT-fs (loop2): Directory bread(block 70) failed [ 1060.434804][T26197] FAT-fs (loop2): Directory bread(block 71) failed [ 1060.469251][T26197] FAT-fs (loop2): Directory bread(block 72) failed [ 1060.497717][T26197] FAT-fs (loop2): Directory bread(block 73) failed [ 1060.665177][T26205] loop1: detected capacity change from 0 to 4096 [ 1060.695791][ T5622] syz-executor: attempt to access beyond end of device [ 1060.695791][ T5622] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1060.729930][T26205] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1060.767918][T26205] ntfs3(loop1): It is recommended to use chkdsk. [ 1060.793413][T26211] loop5: detected capacity change from 0 to 16 [ 1060.801542][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1060.801588][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.801616][ T5622] Call Trace: [ 1060.801628][ T5622] [ 1060.801645][ T5622] dump_stack_lvl+0x100/0x190 [ 1060.801694][ T5622] f2fs_stop_checkpoint+0x600/0x9b0 [ 1060.801757][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.801802][ T5622] ? errseq_set+0xe3/0x150 [ 1060.801843][ T5622] ? errseq_set+0xe3/0x150 [ 1060.801884][ T5622] f2fs_write_end_io+0xf59/0x1340 [ 1060.801929][ T5622] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1060.801977][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802033][ T5622] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1060.802073][ T5622] bio_endio+0x78f/0x8f0 [ 1060.802130][ T5622] submit_bio_noacct+0x64c/0x2000 [ 1060.802185][ T5622] f2fs_submit_write_bio+0x135/0x340 [ 1060.802250][ T5622] __submit_merged_bio+0x331/0x780 [ 1060.802298][ T5622] __submit_merged_write_cond+0x3fe/0x510 [ 1060.802350][ T5622] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1060.802404][ T5622] ? __pfx___might_resched+0x10/0x10 [ 1060.802457][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802519][ T5622] f2fs_sync_node_pages+0x13c6/0x1690 [ 1060.802609][ T5622] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1060.802670][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802716][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802761][ T5622] ? __lock_acquire+0xd73/0x2630 [ 1060.802848][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802896][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802944][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.802989][ T5622] ? up_write+0x28c/0x4f0 [ 1060.803067][ T5622] block_operations+0x932/0xfc0 [ 1060.803127][ T5622] ? __pfx_block_operations+0x10/0x10 [ 1060.803178][ T5622] ? check_noncircular+0x97/0x160 [ 1060.803271][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.803322][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.803368][ T5622] ? rcu_is_watching+0x12/0xc0 [ 1060.803423][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.803477][ T5622] f2fs_write_checkpoint+0x582/0x5550 [ 1060.803536][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.803583][ T5622] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1060.803642][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.803688][ T5622] ? __wait_for_common+0x1f3/0x4c0 [ 1060.803748][ T5622] ? __pfx_schedule_timeout+0x10/0x10 [ 1060.803808][ T5622] ? __pfx___wait_for_common+0x10/0x10 [ 1060.803873][ T5622] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1060.803936][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.803983][ T5622] ? rcu_is_watching+0x12/0xc0 [ 1060.804039][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.804085][ T5622] ? kthread_stop+0x280/0x640 [ 1060.804131][ T5622] kill_f2fs_super+0x3f1/0x4a0 [ 1060.804183][ T5622] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1060.804255][ T5622] ? lockdep_hardirqs_on+0x78/0x100 [ 1060.804317][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.804365][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.804427][ T5622] deactivate_locked_super+0xc1/0x1b0 [ 1060.804486][ T5622] deactivate_super+0xe7/0x110 [ 1060.804545][ T5622] cleanup_mnt+0x21f/0x450 [ 1060.804585][ T5622] task_work_run+0x150/0x240 [ 1060.804649][ T5622] ? __pfx_task_work_run+0x10/0x10 [ 1060.804701][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1060.804748][ T5622] ? rcu_is_watching+0x12/0xc0 [ 1060.804810][ T5622] exit_to_user_mode_loop+0x107/0x4f0 [ 1060.804859][ T5622] ? rcu_is_watching+0x12/0xc0 [ 1060.804921][ T5622] do_syscall_64+0x706/0xf80 [ 1060.804962][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.805002][ T5622] RIP: 0033:0x7f81c739e097 [ 1060.805033][ T5622] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1060.805071][ T5622] RSP: 002b:00007ffcba66bab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1060.805108][ T5622] RAX: 0000000000000000 RBX: 00007f81c74321ca RCX: 00007f81c739e097 [ 1060.805133][ T5622] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcba66bb70 [ 1060.805158][ T5622] RBP: 00007ffcba66bb70 R08: 00007ffcba66cb70 R09: 00000000ffffffff [ 1060.805184][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcba66cc00 [ 1060.805208][ T5622] R13: 00007f81c74321ca R14: 0000000000102e9b R15: 00007ffcba66cc40 [ 1060.805260][ T5622] [ 1061.253175][ T5622] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1061.312152][T26185] loop3: detected capacity change from 0 to 32768 [ 1061.332289][T26211] erofs (device loop5): mounted with root inode @ nid 36. [ 1061.339937][T26185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8414 (26185) [ 1061.372583][T26211] syz.5.8425: attempt to access beyond end of device [ 1061.372583][T26211] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1061.404142][T26185] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1061.448261][T26185] BTRFS info (device loop3): using sha256 checksum algorithm [ 1061.519141][T26211] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1061.588897][T26211] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1061.596053][ T31] kauditd_printk_skb: 103 callbacks suppressed [ 1061.596075][ T31] audit: type=1800 audit(2000000916.804:312): pid=26211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8425" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1061.777427][T26185] BTRFS info (device loop3): enabling ssd optimizations [ 1061.809524][T26185] BTRFS info (device loop3): turning on async discard [ 1061.834389][T26185] BTRFS info (device loop3): enabling free space tree [ 1061.983754][T26241] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8432'. [ 1061.988854][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8431'. [ 1062.083669][T26240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.091022][T26240] IPv6: NLM_F_CREATE should be set when creating new route [ 1062.098339][T26240] IPv6: NLM_F_CREATE should be set when creating new route [ 1062.118651][ T5626] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1062.584494][T23523] IPVS: starting estimator thread 0... [ 1062.725374][T26251] IPVS: using max 26 ests per chain, 62400 per kthread [ 1062.893306][T14006] Bluetooth: Unknown LE signaling command 0x1d [ 1062.902960][T14006] Bluetooth: Wrong link type (-22) [ 1062.908240][T14006] Bluetooth: hci3: link tx timeout [ 1062.917555][T14006] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1063.022094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1063.044170][T26254] loop5: detected capacity change from 0 to 4096 [ 1063.133148][T26254] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1063.244971][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1063.288618][T26254] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1063.305591][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1063.755387][T26278] affs: No valid root block on device nbd1 [ 1064.536259][T26297] veth3: entered promiscuous mode [ 1064.561821][T26297] veth3: entered allmulticast mode [ 1064.909820][T26309] mmap: syz.3.8465 (26309): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1064.952182][T21490] Bluetooth: hci3: command 0x0406 tx timeout [ 1064.973031][T26270] loop4: detected capacity change from 0 to 32768 [ 1064.995343][T26270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8447 (26270) [ 1065.082787][T26270] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1065.134569][T26313] netlink: 'syz.2.8467': attribute type 21 has an invalid length. [ 1065.158381][T26270] BTRFS info (device loop4): using sha256 checksum algorithm [ 1065.165764][T26313] IPv6: NLM_F_CREATE should be specified when creating new route [ 1065.283344][T23523] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1065.332447][T26329] netlink: 'syz.3.8470': attribute type 4 has an invalid length. [ 1065.368868][T26270] BTRFS info (device loop4): enabling ssd optimizations [ 1065.388594][T26329] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8470'. [ 1065.399337][T26270] BTRFS info (device loop4): turning on async discard [ 1065.408106][T26270] BTRFS info (device loop4): enabling free space tree [ 1065.449047][T23523] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1065.463510][T23523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.491389][T23523] usb 1-1: Product: syz [ 1065.514243][T23523] usb 1-1: Manufacturer: syz [ 1065.536140][T23523] usb 1-1: SerialNumber: syz [ 1065.603881][T23523] usb 1-1: config 0 descriptor?? [ 1065.652007][T23523] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 045 [ 1065.717581][ T5636] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1066.093945][T23523] (null): failure reading functionality [ 1066.164143][T23523] i2c i2c-1: failure reading functionality [ 1066.235189][T23523] i2c i2c-1: connected i2c-tiny-usb device [ 1066.287170][T23523] usb 1-1: USB disconnect, device number 45 [ 1066.700184][T26364] loop2: detected capacity change from 0 to 1764 [ 1066.852316][T23865] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1067.075611][T23865] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1067.097688][T26372] netlink: 'syz.4.8489': attribute type 1 has an invalid length. [ 1067.108310][T23865] usb 4-1: config 1 has no interface number 0 [ 1067.125526][T26372] netlink: 2096 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1067.135622][T23865] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1067.149909][T26368] loop1: detected capacity change from 0 to 4096 [ 1067.156430][T26372] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1067.201080][T23865] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1067.228825][T23865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.264923][T23865] usb 4-1: Product: syz [ 1067.277698][T26368] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1067.287860][T23865] usb 4-1: Manufacturer: syz [ 1067.310631][T23865] usb 4-1: SerialNumber: syz [ 1067.326928][T26368] ntfs3(loop1): Failed to load $Extend (-22). [ 1067.363283][T26368] ntfs3(loop1): Failed to initialize $Extend. [ 1067.520464][T26342] loop5: detected capacity change from 0 to 40427 [ 1067.569518][T26342] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1067.599874][T23865] usb 4-1: No status endpoint found [ 1067.609089][T26342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1067.640405][T26342] F2FS-fs (loop5): invalid crc value [ 1067.889924][T23489] usb 4-1: USB disconnect, device number 25 [ 1067.991952][T26389] openvswitch: netlink: IP tunnel dst address not specified [ 1068.076720][T26342] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1068.167866][T26342] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1068.199894][T26342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1068.344779][T26396] loop0: detected capacity change from 0 to 512 [ 1068.377083][T26396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802c198, mo2=0002] [ 1068.406673][T26396] EXT4-fs error (device loop0): ext4_iget_extra_inode:5127: inode #15: comm syz.0.8498: corrupted in-inode xattr: invalid ea_ino [ 1068.425211][T26396] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1068.431696][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1068.447340][ C0] EXT4-fs (loop0): initial error at time 2000000923: ext4_iget_extra_inode:5127: inode 15 [ 1068.457325][ C0] EXT4-fs (loop0): last error at time 2000000923: ext4_iget_extra_inode:5127: inode 15 [ 1068.468374][T26396] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.8498: couldn't read orphan inode 15 (err -117) [ 1068.495815][T26396] loop0: lost filesystem error report for type 5 error -117 [ 1068.507803][T26396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.566733][T26374] loop2: detected capacity change from 0 to 32768 [ 1068.616231][T26374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8488 (26374) [ 1068.634620][ T5644] syz-executor: attempt to access beyond end of device [ 1068.634620][ T5644] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1068.708234][T26374] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.751828][T26374] BTRFS info (device loop2): using sha256 checksum algorithm [ 1068.778490][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1068.778542][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.778565][ T5644] Call Trace: [ 1068.778577][ T5644] [ 1068.778592][ T5644] dump_stack_lvl+0x100/0x190 [ 1068.778651][ T5644] f2fs_stop_checkpoint+0x600/0x9b0 [ 1068.778717][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.778765][ T5644] ? errseq_set+0xe3/0x150 [ 1068.778811][ T5644] ? errseq_set+0xe3/0x150 [ 1068.778875][ T5644] f2fs_write_end_io+0xf59/0x1340 [ 1068.778926][ T5644] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1068.778974][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.779031][ T5644] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1068.779072][ T5644] bio_endio+0x78f/0x8f0 [ 1068.779132][ T5644] submit_bio_noacct+0x64c/0x2000 [ 1068.779190][ T5644] f2fs_submit_write_bio+0x135/0x340 [ 1068.779261][ T5644] __submit_merged_bio+0x331/0x780 [ 1068.779310][ T5644] __submit_merged_write_cond+0x3fe/0x510 [ 1068.779363][ T5644] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1068.779421][ T5644] ? __pfx___might_resched+0x10/0x10 [ 1068.779476][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.779532][ T5644] f2fs_sync_node_pages+0x13c6/0x1690 [ 1068.779626][ T5644] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1068.779688][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.779734][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.779779][ T5644] ? __lock_acquire+0xd73/0x2630 [ 1068.779868][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.779918][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.779966][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780012][ T5644] ? up_write+0x28c/0x4f0 [ 1068.780074][ T5644] block_operations+0x932/0xfc0 [ 1068.780137][ T5644] ? __pfx_block_operations+0x10/0x10 [ 1068.780188][ T5644] ? check_noncircular+0x97/0x160 [ 1068.780282][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780338][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780386][ T5644] ? rcu_is_watching+0x12/0xc0 [ 1068.780436][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780485][ T5644] f2fs_write_checkpoint+0x582/0x5550 [ 1068.780539][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780582][ T5644] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1068.780639][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780683][ T5644] ? __wait_for_common+0x1f3/0x4c0 [ 1068.780738][ T5644] ? __pfx_schedule_timeout+0x10/0x10 [ 1068.780791][ T5644] ? __pfx___wait_for_common+0x10/0x10 [ 1068.780848][ T5644] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1068.780905][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.780947][ T5644] ? rcu_is_watching+0x12/0xc0 [ 1068.780996][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.781038][ T5644] ? kthread_stop+0x280/0x640 [ 1068.781080][ T5644] kill_f2fs_super+0x3f1/0x4a0 [ 1068.781127][ T5644] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1068.781193][ T5644] ? lockdep_hardirqs_on+0x78/0x100 [ 1068.781248][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.781291][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.781347][ T5644] deactivate_locked_super+0xc1/0x1b0 [ 1068.781401][ T5644] deactivate_super+0xe7/0x110 [ 1068.781456][ T5644] cleanup_mnt+0x21f/0x450 [ 1068.781497][ T5644] task_work_run+0x150/0x240 [ 1068.781546][ T5644] ? __pfx_task_work_run+0x10/0x10 [ 1068.781597][ T5644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.781645][ T5644] ? rcu_is_watching+0x12/0xc0 [ 1068.781707][ T5644] exit_to_user_mode_loop+0x107/0x4f0 [ 1068.781755][ T5644] ? rcu_is_watching+0x12/0xc0 [ 1068.781811][ T5644] do_syscall_64+0x706/0xf80 [ 1068.781849][ T5644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.781885][ T5644] RIP: 0033:0x7fc27199e097 [ 1068.781913][ T5644] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1068.781947][ T5644] RSP: 002b:00007ffec13019e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1068.781980][ T5644] RAX: 0000000000000000 RBX: 00007fc271a321ca RCX: 00007fc27199e097 [ 1068.782002][ T5644] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1301aa0 [ 1068.782024][ T5644] RBP: 00007ffec1301aa0 R08: 00007ffec1302aa0 R09: 00000000ffffffff [ 1068.782045][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec1302b30 [ 1068.782067][ T5644] R13: 00007fc271a321ca R14: 0000000000104d43 R15: 00007ffec1302b70 [ 1068.782114][ T5644] [ 1069.240584][ T5644] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1069.288989][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.404139][T26410] loop4: detected capacity change from 0 to 4096 [ 1069.424724][T26410] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1069.453453][T26374] BTRFS info (device loop2): enabling ssd optimizations [ 1069.499730][T26374] BTRFS info (device loop2): turning on async discard [ 1069.545186][T26410] ntfs3(loop4): It is recommended to use chkdsk. [ 1069.581729][T26374] BTRFS info (device loop2): enabling free space tree [ 1069.965844][T26440] binder: 26439:26440 ioctl c0046209 0 returned -22 [ 1070.033057][T26442] loop0: detected capacity change from 0 to 64 [ 1070.054829][ T5638] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1070.144152][T26442] hfs: cannot create new inode: file count exceeds limit [ 1070.549524][T26452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8516'. [ 1070.909009][T26459] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1071.886511][T26493] loop3: detected capacity change from 0 to 256 [ 1072.263869][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8545'. [ 1072.873723][T26528] usb usb1: usbfs: process 26528 (syz.5.8554) did not claim interface 0 before use [ 1073.029160][T26533] loop0: detected capacity change from 0 to 64 [ 1073.080000][T26536] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1073.343977][T26545] loop1: detected capacity change from 0 to 128 [ 1073.389995][T26545] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1073.444747][T26545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.956001][T14006] Bluetooth: hci1: unexpected event for opcode 0x100c [ 1074.219571][T26576] netlink: 'syz.2.8576': attribute type 2 has an invalid length. [ 1074.259265][T26576] netlink: 'syz.2.8576': attribute type 1 has an invalid length. [ 1074.279575][T26581] €Â: renamed from virt_wifi0 [ 1074.421801][T23523] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1074.631816][T23523] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1074.678716][T23523] usb 1-1: config 0 has no interface number 0 [ 1074.723526][T23523] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1074.773997][T23523] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1074.809566][T23523] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1074.849539][T23523] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1074.880696][T23523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.914714][T23523] usb 1-1: Product: syz [ 1074.933777][T23523] usb 1-1: Manufacturer: syz [ 1074.960058][T23523] usb 1-1: SerialNumber: syz [ 1074.982226][T23523] usb 1-1: config 0 descriptor?? [ 1075.360870][T26614] xt_cgroup: xt_cgroup: no path or classid specified [ 1075.553921][T23489] usb 1-1: USB disconnect, device number 46 [ 1075.917358][T26596] loop2: detected capacity change from 0 to 32768 [ 1075.994881][T26596] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1076.040974][T26596] JBD2: Ignoring recovery information on journal [ 1076.258753][T26596] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1076.428293][T26643] loop3: detected capacity change from 0 to 64 [ 1076.449441][T26644] loop0: detected capacity change from 0 to 64 [ 1076.475481][T26643] hfs: unable to locate alternate MDB [ 1076.501753][T26643] hfs: continuing without an alternate MDB [ 1076.563054][ T31] audit: type=1800 audit(2000000931.774:313): pid=26643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8608" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 1076.707594][T26648] SET target dimension over the limit! [ 1076.731591][T20035] [ 1076.733942][T20035] ====================================================== [ 1076.740960][T20035] WARNING: possible circular locking dependency detected [ 1076.747978][T20035] syzkaller #0 Not tainted [ 1076.752388][T20035] ------------------------------------------------------ [ 1076.759398][T20035] kworker/u8:11/20035 is trying to acquire lock: [ 1076.765715][T20035] ffff8880332d45b0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1076.776469][T20035] [ 1076.776469][T20035] but task is already holding lock: [ 1076.783820][T20035] ffff88807a5820a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1076.793365][T20035] [ 1076.793365][T20035] which lock already depends on the new lock. [ 1076.793365][T20035] [ 1076.803759][T20035] [ 1076.803759][T20035] the existing dependency chain (in reverse order) is: [ 1076.812768][T20035] [ 1076.812768][T20035] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 1076.820890][T20035] __mutex_lock+0x1a4/0x1b10 [ 1076.826007][T20035] hfs_find_init+0x273/0x330 [ 1076.831130][T20035] hfs_ext_read_extent+0x19d/0x9d0 [ 1076.836783][T20035] hfs_get_block+0x576/0x830 [ 1076.841922][T20035] block_read_full_folio+0x36c/0x8e0 [ 1076.847752][T20035] filemap_read_folio+0xfc/0x3b0 [ 1076.853220][T20035] do_read_cache_folio+0x2d7/0x6b0 [ 1076.858872][T20035] read_cache_page+0x5b/0x1b0 [ 1076.864103][T20035] __hfs_bnode_create+0x718/0x9a0 [ 1076.869664][T20035] hfs_bnode_find+0x2d5/0xd30 [ 1076.874872][T20035] hfs_brec_find+0x39d/0x620 [ 1076.880021][T20035] hfs_brec_read+0x26/0x120 [ 1076.885054][T20035] hfs_cat_find_brec+0xdc/0x2a0 [ 1076.890457][T20035] hfs_fill_super+0x58d/0x7e0 [ 1076.895669][T20035] get_tree_bdev_flags+0x38c/0x620 [ 1076.901324][T20035] vfs_get_tree+0x92/0x320 [ 1076.906276][T20035] path_mount+0x7d0/0x23d0 [ 1076.911222][T20035] __x64_sys_mount+0x293/0x310 [ 1076.916515][T20035] do_syscall_64+0x10b/0xf80 [ 1076.921628][T20035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.928052][T20035] [ 1076.928052][T20035] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1076.937284][T20035] __lock_acquire+0x14b8/0x2630 [ 1076.942670][T20035] lock_acquire+0x1b1/0x370 [ 1076.947709][T20035] __mutex_lock+0x1a4/0x1b10 [ 1076.952823][T20035] hfs_extend_file+0xa6/0xcf0 [ 1076.958045][T20035] hfs_bmap_reserve+0x2ab/0x3a0 [ 1076.963433][T20035] __hfs_ext_write_extent+0x3c4/0x510 [ 1076.969356][T20035] hfs_ext_write_extent+0x1b7/0x200 [ 1076.975096][T20035] hfs_write_inode+0xce/0xab0 [ 1076.980297][T20035] __writeback_single_inode+0xcd4/0x1350 [ 1076.986474][T20035] writeback_sb_inodes+0x766/0x1c60 [ 1076.992219][T20035] wb_writeback+0x1bf/0xb90 [ 1076.997267][T20035] wb_workfn+0x14f/0xc00 [ 1077.002052][T20035] process_one_work+0xa0e/0x1980 [ 1077.007522][T20035] worker_thread+0x5ef/0xe50 [ 1077.012646][T20035] kthread+0x370/0x450 [ 1077.017241][T20035] ret_from_fork+0x72b/0xd50 [ 1077.022362][T20035] ret_from_fork_asm+0x1a/0x30 [ 1077.027667][T20035] [ 1077.027667][T20035] other info that might help us debug this: [ 1077.027667][T20035] [ 1077.037883][T20035] Possible unsafe locking scenario: [ 1077.037883][T20035] [ 1077.045320][T20035] CPU0 CPU1 [ 1077.050676][T20035] ---- ---- [ 1077.056030][T20035] lock(&tree->tree_lock#2/1); [ 1077.060910][T20035] lock(&HFS_I(tree->inode)->extents_lock); [ 1077.069460][T20035] lock(&tree->tree_lock#2/1); [ 1077.076869][T20035] lock(&HFS_I(tree->inode)->extents_lock); [ 1077.082860][T20035] [ 1077.082860][T20035] *** DEADLOCK *** [ 1077.082860][T20035] [ 1077.090992][T20035] 3 locks held by kworker/u8:11/20035: [ 1077.096445][T20035] #0: ffff88801c6c4140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1077.107207][T20035] #1: ffffc90003cbfd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1077.119100][T20035] #2: ffff88807a5820a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1077.129105][T20035] [ 1077.129105][T20035] stack backtrace: [ 1077.134990][T20035] CPU: 0 UID: 0 PID: 20035 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1077.135031][T20035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1077.135056][T20035] Workqueue: writeback wb_workfn (flush-7:3) [ 1077.135121][T20035] Call Trace: [ 1077.135134][T20035] [ 1077.135149][T20035] dump_stack_lvl+0x100/0x190 [ 1077.135187][T20035] print_circular_bug.cold+0x178/0x1c7 [ 1077.135248][T20035] check_noncircular+0x146/0x160 [ 1077.135285][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.135334][T20035] __lock_acquire+0x14b8/0x2630 [ 1077.135384][T20035] ? __pfx_stack_trace_save+0x10/0x10 [ 1077.135422][T20035] lock_acquire+0x1b1/0x370 [ 1077.135460][T20035] ? hfs_extend_file+0xa6/0xcf0 [ 1077.135516][T20035] ? __pfx___might_resched+0x10/0x10 [ 1077.135562][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.135603][T20035] ? add_lock_to_list+0x99/0x110 [ 1077.135642][T20035] __mutex_lock+0x1a4/0x1b10 [ 1077.135676][T20035] ? hfs_extend_file+0xa6/0xcf0 [ 1077.135727][T20035] ? hfs_extend_file+0xa6/0xcf0 [ 1077.135781][T20035] ? hfs_write_inode+0xce/0xab0 [ 1077.135812][T20035] ? __writeback_single_inode+0xcd4/0x1350 [ 1077.135866][T20035] ? __pfx___mutex_lock+0x10/0x10 [ 1077.135900][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.135940][T20035] ? lock_acquire+0x1b1/0x370 [ 1077.135987][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.136028][T20035] ? trace_contention_end+0x122/0x170 [ 1077.136072][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.136117][T20035] ? hfs_extend_file+0xa6/0xcf0 [ 1077.136168][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.136208][T20035] hfs_extend_file+0xa6/0xcf0 [ 1077.136263][T20035] ? __pfx_hfs_extend_file+0x10/0x10 [ 1077.136314][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.136362][T20035] hfs_bmap_reserve+0x2ab/0x3a0 [ 1077.136415][T20035] __hfs_ext_write_extent+0x3c4/0x510 [ 1077.136467][T20035] ? hfs_find_init+0x273/0x330 [ 1077.136506][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.136549][T20035] hfs_ext_write_extent+0x1b7/0x200 [ 1077.136602][T20035] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1077.136673][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.136713][T20035] ? __mpage_writepages+0x1a8/0x210 [ 1077.136747][T20035] ? __pfx___mpage_writepages+0x10/0x10 [ 1077.136782][T20035] hfs_write_inode+0xce/0xab0 [ 1077.136816][T20035] ? __pfx_hfs_write_inode+0x10/0x10 [ 1077.136848][T20035] ? __lock_acquire+0x4a5/0x2630 [ 1077.136900][T20035] ? __writeback_single_inode+0x454/0x1350 [ 1077.136957][T20035] ? __writeback_single_inode+0x454/0x1350 [ 1077.137012][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137059][T20035] __writeback_single_inode+0xcd4/0x1350 [ 1077.137123][T20035] ? __pfx___writeback_single_inode+0x10/0x10 [ 1077.137180][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137223][T20035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1077.137271][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137316][T20035] writeback_sb_inodes+0x766/0x1c60 [ 1077.137379][T20035] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1077.137433][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137503][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137544][T20035] ? rcu_is_watching+0x12/0xc0 [ 1077.137593][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137638][T20035] ? queue_io+0x287/0x540 [ 1077.137687][T20035] wb_writeback+0x1bf/0xb90 [ 1077.137744][T20035] ? __pfx_wb_writeback+0x10/0x10 [ 1077.137801][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.137845][T20035] ? mark_held_locks+0x40/0x70 [ 1077.137886][T20035] ? _raw_spin_unlock_irq+0x23/0x50 [ 1077.137939][T20035] wb_workfn+0x14f/0xc00 [ 1077.137992][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138033][T20035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1077.138085][T20035] ? __pfx_wb_workfn+0x10/0x10 [ 1077.138139][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138182][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138225][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138265][T20035] ? rcu_is_watching+0x12/0xc0 [ 1077.138313][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138358][T20035] process_one_work+0xa0e/0x1980 [ 1077.138410][T20035] ? __pfx_process_one_work+0x10/0x10 [ 1077.138451][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138499][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138544][T20035] worker_thread+0x5ef/0xe50 [ 1077.138590][T20035] ? __pfx_worker_thread+0x10/0x10 [ 1077.138637][T20035] ? kthread+0x13a/0x450 [ 1077.138672][T20035] ? __pfx_worker_thread+0x10/0x10 [ 1077.138711][T20035] kthread+0x370/0x450 [ 1077.138746][T20035] ? __pfx_kthread+0x10/0x10 [ 1077.138787][T20035] ret_from_fork+0x72b/0xd50 [ 1077.138831][T20035] ? __pfx_ret_from_fork+0x10/0x10 [ 1077.138893][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.138937][T20035] ? __switch_to+0x800/0x1100 [ 1077.138986][T20035] ? __switch_to_asm+0x39/0x70 [ 1077.139035][T20035] ? __pfx_kthread+0x10/0x10 [ 1077.139073][T20035] ret_from_fork_asm+0x1a/0x30 [ 1077.139130][T20035] [ 1077.637832][T20035] hfs: new node 0 already hashed? [ 1077.645145][T20035] ------------[ cut here ]------------ [ 1077.651000][T20035] 1 [ 1077.651016][T20035] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:11/20035 [ 1077.657370][T26628] loop4: detected capacity change from 0 to 32768 [ 1077.663786][T20035] Modules linked in: [ 1077.671152][T26628] btrfs: Deprecated parameter 'usebackuproot' [ 1077.674173][T20035] CPU: 1 UID: 0 PID: 20035 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1077.680257][T26628] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1077.689898][T20035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1077.710001][T20035] Workqueue: writeback wb_workfn (flush-7:3) [ 1077.712841][T26628] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8600 (26628) [ 1077.716620][T20035] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1077.735043][T20035] Code: 75 31 65 0a e9 47 41 d1 01 e8 7b 1f e1 00 4c 89 f7 e8 63 31 65 0a e8 6e 1f e1 00 89 ee 48 c7 c7 40 e9 d1 8b e8 a0 df fa ff 90 <0f> 0b 90 e9 49 44 d1 01 e8 52 1f e1 00 e8 9d 5b 4d 00 e9 a5 46 d1 [ 1077.754811][T20035] RSP: 0018:ffffc90003cbf020 EFLAGS: 00010282 [ 1077.760912][T20035] RAX: 000000000000001f RBX: ffff88802a973100 RCX: 0000000000000000 [ 1077.768988][T20035] RDX: 000000000000001f RSI: ffffffff81e72d69 RDI: fffff52000797df5 [ 1077.771847][T26628] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1077.777016][T20035] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1077.787116][T26628] BTRFS info (device loop4): using crc32c checksum algorithm [ 1077.795092][T20035] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1077.811079][T20035] R13: ffff88807a582000 R14: ffff88807a5820d8 R15: 0000000000000000 [ 1077.819575][T20035] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 1077.828632][T20035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.835314][T20035] CR2: 00007fff09d6fc80 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 1077.843381][T20035] Call Trace: [ 1077.846702][T20035] [ 1077.849669][T20035] ? _raw_spin_unlock+0x28/0x50 [ 1077.854654][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.860319][T20035] ? hfs_bnode_put+0x208/0x480 [ 1077.865164][T20035] hfs_bmap_alloc+0x5a7/0x6b0 [ 1077.869890][T20035] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1077.875177][T20035] ? __asan_memcpy+0x3c/0x60 [ 1077.879797][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.885808][T20035] ? hfs_bnode_read.part.0+0x298/0x330 [ 1077.891306][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.897283][T20035] ? folio_mark_accessed+0xf3/0x1040 [ 1077.902967][T20035] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1077.908734][T20035] ? rcu_is_watching+0x12/0xc0 [ 1077.914391][T20035] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1077.921255][T20035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1077.926545][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.932271][T20035] ? _raw_spin_unlock+0x28/0x50 [ 1077.937163][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.942891][T20035] ? hfs_bnode_put+0x208/0x480 [ 1077.947695][T20035] hfs_brec_insert+0x8ba/0xc20 [ 1077.952556][T20035] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1077.957889][T20035] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1077.962996][T20035] __hfs_ext_write_extent+0x3ef/0x510 [ 1077.968412][T20035] ? hfs_find_init+0x273/0x330 [ 1077.973298][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.978985][T20035] hfs_ext_write_extent+0x1b7/0x200 [ 1077.984276][T20035] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1077.990043][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1077.995773][T20035] ? __mpage_writepages+0x1a8/0x210 [ 1078.000993][T20035] ? __pfx___mpage_writepages+0x10/0x10 [ 1078.006633][T20035] hfs_write_inode+0xce/0xab0 [ 1078.011350][T20035] ? __pfx_hfs_write_inode+0x10/0x10 [ 1078.017302][T20035] ? __lock_acquire+0x4a5/0x2630 [ 1078.022793][T20035] ? __writeback_single_inode+0x454/0x1350 [ 1078.028737][T20035] ? __writeback_single_inode+0x454/0x1350 [ 1078.034690][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.040377][T20035] __writeback_single_inode+0xcd4/0x1350 [ 1078.046099][T20035] ? __pfx___writeback_single_inode+0x10/0x10 [ 1078.052264][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.057939][T20035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1078.063386][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.069107][T20035] writeback_sb_inodes+0x766/0x1c60 [ 1078.074511][T20035] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1078.080656][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.086416][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.092123][T20035] ? rcu_is_watching+0x12/0xc0 [ 1078.096938][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.102680][T20035] ? queue_io+0x287/0x540 [ 1078.107056][T20035] wb_writeback+0x1bf/0xb90 [ 1078.111609][T20035] ? __pfx_wb_writeback+0x10/0x10 [ 1078.116729][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.123086][T20035] ? mark_held_locks+0x40/0x70 [ 1078.127912][T20035] ? _raw_spin_unlock_irq+0x23/0x50 [ 1078.133669][T20035] wb_workfn+0x14f/0xc00 [ 1078.137956][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.143745][T20035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1078.149604][T20035] ? __pfx_wb_workfn+0x10/0x10 [ 1078.154573][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.160274][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.165979][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.171701][T20035] ? rcu_is_watching+0x12/0xc0 [ 1078.176517][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.182220][T20035] process_one_work+0xa0e/0x1980 [ 1078.187202][T20035] ? __pfx_process_one_work+0x10/0x10 [ 1078.192665][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.198338][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.204064][T20035] worker_thread+0x5ef/0xe50 [ 1078.208693][T20035] ? __pfx_worker_thread+0x10/0x10 [ 1078.213955][T20035] ? kthread+0x13a/0x450 [ 1078.218233][T20035] ? __pfx_worker_thread+0x10/0x10 [ 1078.224150][T20035] kthread+0x370/0x450 [ 1078.228263][T20035] ? __pfx_kthread+0x10/0x10 [ 1078.233462][T20035] ret_from_fork+0x72b/0xd50 [ 1078.238091][T20035] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.243287][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.248953][T20035] ? __switch_to+0x800/0x1100 [ 1078.253699][T20035] ? __switch_to_asm+0x39/0x70 [ 1078.258500][T20035] ? __pfx_kthread+0x10/0x10 [ 1078.263163][T20035] ret_from_fork_asm+0x1a/0x30 [ 1078.267973][T20035] [ 1078.271007][T20035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1078.278293][T20035] CPU: 1 UID: 0 PID: 20035 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1078.287944][T20035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.298015][T20035] Workqueue: writeback wb_workfn (flush-7:3) [ 1078.304061][T20035] Call Trace: [ 1078.307347][T20035] [ 1078.310277][T20035] dump_stack_lvl+0x100/0x190 [ 1078.314974][T20035] vpanic+0x552/0x970 [ 1078.318973][T20035] ? __pfx_vpanic+0x10/0x10 [ 1078.323495][T20035] ? lock_release+0x245/0x310 [ 1078.328206][T20035] panic+0xd1/0xe0 [ 1078.331944][T20035] ? __pfx_panic+0x10/0x10 [ 1078.336379][T20035] ? check_panic_on_warn+0x1f/0x90 [ 1078.341519][T20035] check_panic_on_warn.cold+0x19/0x34 [ 1078.346918][T20035] ? hfs_bnode_create.cold+0x41/0x49 [ 1078.352225][T20035] __warn.cold+0x191/0x328 [ 1078.356652][T20035] __report_bug+0x296/0x3d0 [ 1078.361178][T20035] ? hfs_bnode_create.cold+0x41/0x49 [ 1078.366476][T20035] ? __pfx___report_bug+0x10/0x10 [ 1078.371553][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.377213][T20035] ? preempt_schedule_thunk+0x16/0x30 [ 1078.382614][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.388258][T20035] ? preempt_count_add+0x76/0x150 [ 1078.393300][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.398943][T20035] ? __wake_up_klogd+0xe2/0x140 [ 1078.403806][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.409452][T20035] ? vprintk_emit+0x1c9/0x6b0 [ 1078.414151][T20035] ? __pfx_vprintk_emit+0x10/0x10 [ 1078.419198][T20035] ? hfs_bnode_create.cold+0x41/0x49 [ 1078.424501][T20035] report_bug+0xb2/0x220 [ 1078.428785][T20035] ? hfs_bnode_create.cold+0x41/0x49 [ 1078.434084][T20035] handle_bug+0x16a/0x2a0 [ 1078.438422][T20035] exc_invalid_op+0x17/0x50 [ 1078.442933][T20035] asm_exc_invalid_op+0x1a/0x20 [ 1078.447793][T20035] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1078.453698][T20035] Code: 75 31 65 0a e9 47 41 d1 01 e8 7b 1f e1 00 4c 89 f7 e8 63 31 65 0a e8 6e 1f e1 00 89 ee 48 c7 c7 40 e9 d1 8b e8 a0 df fa ff 90 <0f> 0b 90 e9 49 44 d1 01 e8 52 1f e1 00 e8 9d 5b 4d 00 e9 a5 46 d1 [ 1078.473314][T20035] RSP: 0018:ffffc90003cbf020 EFLAGS: 00010282 [ 1078.479389][T20035] RAX: 000000000000001f RBX: ffff88802a973100 RCX: 0000000000000000 [ 1078.487377][T20035] RDX: 000000000000001f RSI: ffffffff81e72d69 RDI: fffff52000797df5 [ 1078.495350][T20035] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1078.503494][T20035] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1078.511463][T20035] R13: ffff88807a582000 R14: ffff88807a5820d8 R15: 0000000000000000 [ 1078.519440][T20035] ? vprintk_emit+0x1c9/0x6b0 [ 1078.524146][T20035] ? _raw_spin_unlock+0x28/0x50 [ 1078.529019][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.534667][T20035] ? hfs_bnode_put+0x208/0x480 [ 1078.539468][T20035] hfs_bmap_alloc+0x5a7/0x6b0 [ 1078.544173][T20035] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1078.549388][T20035] ? __asan_memcpy+0x3c/0x60 [ 1078.553986][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.559628][T20035] ? hfs_bnode_read.part.0+0x298/0x330 [ 1078.565101][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.570746][T20035] ? folio_mark_accessed+0xf3/0x1040 [ 1078.576081][T20035] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1078.581841][T20035] ? rcu_is_watching+0x12/0xc0 [ 1078.586624][T20035] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1078.592971][T20035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1078.598209][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.603854][T20035] ? _raw_spin_unlock+0x28/0x50 [ 1078.608724][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.614365][T20035] ? hfs_bnode_put+0x208/0x480 [ 1078.619146][T20035] hfs_brec_insert+0x8ba/0xc20 [ 1078.623937][T20035] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1078.629240][T20035] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1078.634315][T20035] __hfs_ext_write_extent+0x3ef/0x510 [ 1078.639711][T20035] ? hfs_find_init+0x273/0x330 [ 1078.644485][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.650132][T20035] hfs_ext_write_extent+0x1b7/0x200 [ 1078.655353][T20035] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1078.661104][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.666748][T20035] ? __mpage_writepages+0x1a8/0x210 [ 1078.671955][T20035] ? __pfx___mpage_writepages+0x10/0x10 [ 1078.677511][T20035] hfs_write_inode+0xce/0xab0 [ 1078.682193][T20035] ? __pfx_hfs_write_inode+0x10/0x10 [ 1078.687480][T20035] ? __lock_acquire+0x4a5/0x2630 [ 1078.692441][T20035] ? __writeback_single_inode+0x454/0x1350 [ 1078.698269][T20035] ? __writeback_single_inode+0x454/0x1350 [ 1078.704103][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.709757][T20035] __writeback_single_inode+0xcd4/0x1350 [ 1078.715417][T20035] ? __pfx___writeback_single_inode+0x10/0x10 [ 1078.721507][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.727152][T20035] ? do_raw_spin_unlock+0x145/0x1e0 [ 1078.732375][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.738074][T20035] writeback_sb_inodes+0x766/0x1c60 [ 1078.743323][T20035] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1078.748982][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.754656][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.760299][T20035] ? rcu_is_watching+0x12/0xc0 [ 1078.765085][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.770734][T20035] ? queue_io+0x287/0x540 [ 1078.775084][T20035] wb_writeback+0x1bf/0xb90 [ 1078.779626][T20035] ? __pfx_wb_writeback+0x10/0x10 [ 1078.784679][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.790323][T20035] ? mark_held_locks+0x40/0x70 [ 1078.795104][T20035] ? _raw_spin_unlock_irq+0x23/0x50 [ 1078.800327][T20035] wb_workfn+0x14f/0xc00 [ 1078.804598][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.810243][T20035] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1078.816079][T20035] ? __pfx_wb_workfn+0x10/0x10 [ 1078.820877][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.826523][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.832183][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.837827][T20035] ? rcu_is_watching+0x12/0xc0 [ 1078.842618][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.848270][T20035] process_one_work+0xa0e/0x1980 [ 1078.853229][T20035] ? __pfx_process_one_work+0x10/0x10 [ 1078.858613][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.864263][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.869916][T20035] worker_thread+0x5ef/0xe50 [ 1078.874529][T20035] ? __pfx_worker_thread+0x10/0x10 [ 1078.879657][T20035] ? kthread+0x13a/0x450 [ 1078.883905][T20035] ? __pfx_worker_thread+0x10/0x10 [ 1078.889025][T20035] kthread+0x370/0x450 [ 1078.893101][T20035] ? __pfx_kthread+0x10/0x10 [ 1078.897741][T20035] ret_from_fork+0x72b/0xd50 [ 1078.902361][T20035] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.907484][T20035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1078.913126][T20035] ? __switch_to+0x800/0x1100 [ 1078.917824][T20035] ? __switch_to_asm+0x39/0x70 [ 1078.922604][T20035] ? __pfx_kthread+0x10/0x10 [ 1078.927207][T20035] ret_from_fork_asm+0x1a/0x30 [ 1078.932026][T20035] [ 1078.935236][T20035] Kernel Offset: disabled [ 1078.939545][T20035] Rebooting in 86400 seconds..