last executing test programs: 4m44.798636585s ago: executing program 2 (id=10310): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 4m44.570966101s ago: executing program 2 (id=10314): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) 4m44.347119499s ago: executing program 2 (id=10318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001380)=@getsa={0x28, 0x12, 0x1, 0x70bd25, 0x25dfdbfe, {@in6=@private1, 0x4d2, 0x31880fbf842b4855, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) 4m44.083945132s ago: executing program 2 (id=10322): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001240)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x2}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m42.552782382s ago: executing program 2 (id=10343): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xb, 0x9, 0x1}) 4m41.662988442s ago: executing program 2 (id=10358): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x9fffff, 0x800, 0x0, 0x1}, 0x20) 4m41.190953198s ago: executing program 32 (id=10358): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x9fffff, 0x800, 0x0, 0x1}, 0x20) 5.324956014s ago: executing program 3 (id=14306): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x867675dcaf19d293) 4.703952338s ago: executing program 0 (id=14314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.216621894s ago: executing program 0 (id=14319): unshare(0xe060400) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40f, 0x0) 3.784856627s ago: executing program 0 (id=14324): memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x30) 3.198801718s ago: executing program 0 (id=14329): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0xa0202, 0x0, 0x11}, 0x18) 2.893463974s ago: executing program 0 (id=14333): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x16, 0x80, 0x1}, {@rand_addr=0xac1414aa, 0x4e21, 0x1, 0x0, 0x12d5c, 0x7}}, 0x44) 2.715533717s ago: executing program 5 (id=14334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000048d0ffff00000000ff0700008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.617533248s ago: executing program 1 (id=14337): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0xe) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 2.617345425s ago: executing program 3 (id=14338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250100000004000180100002800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x44090) 2.51977064s ago: executing program 0 (id=14339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r1, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) 2.503247061s ago: executing program 5 (id=14340): syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f00000005c0)=ANY=[@ANYBLOB='adinicb,dmode=00000000000000000000006,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7569643d69676e6f72652c696f636861727365743d6d6163696e7569742c6d6f64653d30303030303030303030303030303030303030303031302c696f636861727365743d69736f383835392d31332c6164696e6963622c6769643d69676e6f72652c6c617374626c6f636b3d30303030303030303030303030303030303030372c6769643d666f726765742c766f6c756d653d30303030303030303030303030303030303132342c6206c81400"], 0x1, 0xc4d, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xfffffbff, 0xfffbfffd, 0x0) 2.460520662s ago: executing program 6 (id=14341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r1, 0x0, 0x0, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 1.919771913s ago: executing program 33 (id=14339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r1, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) 1.914218201s ago: executing program 6 (id=14344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c00000002030101000000000149fc356d0080010800010001"], 0x1c}}, 0x80c0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000001030103000000000000000007000001"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) 1.913841525s ago: executing program 4 (id=14345): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 1.913220303s ago: executing program 5 (id=14346): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x106f}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x5c, 0x1, {0x4, 0xe987ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x78}}, 0x8004002) 1.714529616s ago: executing program 6 (id=14347): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x28eb5000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 1.71440654s ago: executing program 4 (id=14348): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x21, 0x3, 0x0, {0x1}}, 0x21) 1.687036903s ago: executing program 3 (id=14349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="0800040080000000080003"], 0x2c}}, 0x0) 1.667558067s ago: executing program 5 (id=14350): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', 0x0, 0xfe) 1.609393078s ago: executing program 1 (id=14351): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.411384715s ago: executing program 6 (id=14352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.359639697s ago: executing program 3 (id=14353): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) 1.058158645s ago: executing program 3 (id=14354): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x6, 0x2, 0xcc7, 0x5, 0x7, 0x1, 0xfd, 0x2, 0x1, 0x9, 0x6, 0x6, 0x5, 0x800, 0x9, 0x44, 0x51, 0x89, 0x809, 0xf27, 0x3, 0x8008, 0x181, 0x9, 0x400004, 0xa, 0x10000, 0x2]}) 991.765363ms ago: executing program 6 (id=14355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000600000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000e68500000015000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 991.550032ms ago: executing program 5 (id=14356): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x1, 0x0, 0x5, 0x0}) 845.611301ms ago: executing program 1 (id=14357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21042abd7000fddbdf2515000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) 797.597236ms ago: executing program 3 (id=14358): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r0, 0x8b15, &(0x7f0000000080)) 672.909528ms ago: executing program 4 (id=14359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x100, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) 522.659994ms ago: executing program 5 (id=14360): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001640)={[{@barrier}, {@stripe={'stripe', 0x3d, 0x59}}, {@nodiscard}, {@barrier}, {@auto_da_alloc}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) 520.454459ms ago: executing program 6 (id=14361): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 454.8461ms ago: executing program 4 (id=14362): creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 373.061556ms ago: executing program 1 (id=14363): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(0x3) 260.791442ms ago: executing program 4 (id=14364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)=""/33, &(0x7f0000000240)=0x21) 229.596422ms ago: executing program 1 (id=14365): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x3ff]}, 0x8, 0x80800) statx(r0, 0x0, 0x1000, 0x0, &(0x7f00000005c0)) 28.811575ms ago: executing program 4 (id=14366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10402}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc880) 0s ago: executing program 1 (id=14367): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) kernel console output (not intermixed with test programs): 9c799 code=0x7ffc0000 [ 1109.805353][T19931] appletouch 2-1:1.0: input: appletouch disconnected [ 1109.877161][ T30] audit: type=1326 audit(1773311808.435:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.4.13173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1e4899c799 code=0x7ffc0000 [ 1109.900981][T10427] loop0: detected capacity change from 0 to 32768 [ 1109.946579][T10427] jfs_lookup: iget failed on inum 4 [ 1110.446003][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1110.571232][T10517] x_tables: unsorted entry at hook 1 [ 1110.740721][ T30] audit: type=1326 audit(1773311810.051:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.6.13195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1110.822885][ T30] audit: type=1326 audit(1773311810.062:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.6.13195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1110.825747][T10531] loop3: detected capacity change from 0 to 1024 [ 1111.106153][T10531] syz.3.13197: attempt to access beyond end of device [ 1111.106153][T10531] loop3: rw=8388608, sector=33030148, nr_sectors = 2 limit=1024 [ 1111.188158][T10531] Buffer I/O error on dev loop3, logical block 16515074, async page read [ 1111.188551][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1111.238807][T10531] hfsplus: unable to mark blocks free: error -5 [ 1111.273970][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13204'. [ 1111.274776][T10531] hfsplus: can't free extent: start 134, count 1 [ 1111.553075][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1111.569702][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1111.585492][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1111.585584][ T13] hfsplus: b-tree write err: -5, ino 20 [ 1111.761071][T10587] loop3: detected capacity change from 0 to 1024 [ 1111.799650][T10585] loop5: detected capacity change from 0 to 4096 [ 1111.811576][T10574] loop4: detected capacity change from 0 to 4096 [ 1111.829208][T10587] EXT4-fs: Ignoring removed oldalloc option [ 1111.835673][T10574] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1111.872407][T10596] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1111.923575][T10587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.003255][T10587] ext4 filesystem being mounted at /2236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.006048][T10574] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1112.075422][T10587] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.13213: directory missing '..' [ 1112.102303][T10574] ntfs3(loop4): ino=1b, mi_enum_attr [ 1112.118823][T10574] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1112.289002][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1112.840332][T10653] loop0: detected capacity change from 0 to 256 [ 1112.875202][T10653] exfat: Deprecated parameter 'namecase' [ 1112.887626][T10653] exfat: Deprecated parameter 'utf8' [ 1112.909163][T10651] geneve2: entered promiscuous mode [ 1112.926136][T10651] geneve2: entered allmulticast mode [ 1112.952913][T10653] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1113.179980][T10672] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13238'. [ 1113.242194][T10675] netlink: 294 bytes leftover after parsing attributes in process `syz.6.13240'. [ 1113.313902][T10675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.700737][T10640] loop1: detected capacity change from 0 to 32768 [ 1113.736413][T10640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.13229 (10640) [ 1113.824130][T10640] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1113.884202][T10640] BTRFS info (device loop1): using sha256 checksum algorithm [ 1114.036100][T10738] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1114.126914][T10640] BTRFS info (device loop1): enabling ssd optimizations [ 1114.160410][T10640] BTRFS info (device loop1): turning on async discard [ 1114.187475][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13257'. [ 1114.210910][T10640] BTRFS info (device loop1): enabling free space tree [ 1114.535354][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1114.960620][ T118] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1115.117533][T10807] loop4: detected capacity change from 0 to 1024 [ 1115.153921][ T118] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1115.187308][ T118] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1115.219623][ T118] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.278231][ T118] usb 7-1: config 220 has no interface number 2 [ 1115.305322][ T118] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1115.356787][T10817] loop5: detected capacity change from 0 to 512 [ 1115.373624][ T118] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1115.440039][ T118] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1115.467762][ T118] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1115.505859][ T118] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1115.522540][ T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.530834][ T118] usb 7-1: Product: syz [ 1115.540741][ T118] usb 7-1: Manufacturer: syz [ 1115.545720][ T118] usb 7-1: SerialNumber: syz [ 1115.610247][T10817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.701772][T10817] ext4 filesystem being mounted at /2209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.769101][T10817] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.13278: corrupted xattr block 33: invalid header [ 1115.793341][T10817] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.13278: corrupted xattr block 33: invalid header [ 1115.818984][ T118] usb 7-1: selecting invalid altsetting 0 [ 1115.829366][T10817] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 1115.845643][ T118] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1115.868407][T19992] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1115.894748][ T118] uvcvideo 7-1:220.0: No valid video chain found. [ 1115.943531][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.953793][ T118] usb 7-1: selecting invalid altsetting 0 [ 1115.959947][ T118] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1116.009025][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13285'. [ 1116.022668][ T118] usb 7-1: USB disconnect, device number 10 [ 1116.060706][T19992] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1116.085755][T19992] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1116.113541][T19992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.152005][T19992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1116.181491][T10872] binder: BC_ATTEMPT_ACQUIRE not supported [ 1116.189343][T19992] usb 1-1: config 1 has no interface number 0 [ 1116.200464][T19992] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1116.227228][T10872] binder: 10870:10872 ioctl c0306201 2000000001c0 returned -22 [ 1116.231139][T19992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.315785][T19992] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1116.386081][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1116.386104][ T30] audit: type=1326 audit(1773311815.983:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4899c799 code=0x7ffc0000 [ 1116.493843][ T30] audit: type=1326 audit(1773311816.035:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4899c799 code=0x7ffc0000 [ 1116.550759][T19992] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 1116.588664][T19992] snd_usb_pod 1-1:1.1: invalid control EP [ 1116.608971][ T30] audit: type=1326 audit(1773311816.035:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f1e4899c799 code=0x7ffc0000 [ 1116.632473][T19992] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 1116.656050][T19992] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1116.685349][T19992] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1116.713042][ T30] audit: type=1326 audit(1773311816.035:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4899c799 code=0x7ffc0000 [ 1116.752900][T19992] usb 1-1: USB disconnect, device number 124 [ 1116.794535][ T30] audit: type=1326 audit(1773311816.035:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.4.13290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4899c799 code=0x7ffc0000 [ 1116.897544][T10921] netlink: 260 bytes leftover after parsing attributes in process `syz.4.13300'. [ 1116.928259][T10920] loop6: detected capacity change from 0 to 128 [ 1116.963638][T10920] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1117.062901][T10920] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.166711][T10920] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1117.189544][ T6598] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1117.369175][T31348] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1117.378309][T10949] loop4: detected capacity change from 0 to 1024 [ 1117.388538][ T6598] usb 6-1: Using ep0 maxpacket: 16 [ 1117.422436][T10949] syz.4.13309: attempt to access beyond end of device [ 1117.422436][T10949] loop4: rw=8388608, sector=393226, nr_sectors = 2 limit=1024 [ 1117.427904][ T6598] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 1117.451783][ T6598] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1117.507492][ T6598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1117.561435][ T6598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1117.608523][ T6598] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.623144][ T30] audit: type=1326 audit(1773311817.284:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.6.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1117.644889][ T6598] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1117.690998][ T6598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.717742][T10954] loop0: detected capacity change from 0 to 4096 [ 1117.751489][ T30] audit: type=1326 audit(1773311817.316:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.6.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1117.775106][T10954] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1117.777669][ T6598] usb 6-1: config 0 descriptor?? [ 1117.873278][ T6598] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76 [ 1117.875066][ T30] audit: type=1326 audit(1773311817.316:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.6.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1117.943381][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1117.992957][T10985] netlink: 'syz.6.13317': attribute type 16 has an invalid length. [ 1118.016530][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1118.020242][T10985] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.13317'. [ 1118.053497][ T30] audit: type=1326 audit(1773311817.347:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.6.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1118.076280][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1118.109173][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1118.201710][ T6467] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1118.228448][ T30] audit: type=1326 audit(1773311817.347:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.6.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1118.279479][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1118.302998][T10993] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13320'. [ 1118.319722][T10924] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1118.406768][ T5170] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1118.422353][T19931] usb 6-1: USB disconnect, device number 11 [ 1118.714520][T11021] loop4: detected capacity change from 0 to 2048 [ 1118.733698][T11026] netlink: zone id is out of range [ 1118.744505][T11021] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1118.779661][T11026] netlink: zone id is out of range [ 1118.808604][T11026] netlink: zone id is out of range [ 1118.813846][T11026] netlink: zone id is out of range [ 1118.850766][T11033] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1118.871558][T11021] NILFS error (device loop4): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 1118.883680][T11026] netlink: zone id is out of range [ 1118.903420][T11026] netlink: zone id is out of range [ 1118.919266][T11026] netlink: zone id is out of range [ 1118.933335][T11021] Remounting filesystem read-only [ 1118.948058][T11026] netlink: zone id is out of range [ 1118.974048][T11026] netlink: zone id is out of range [ 1119.026860][T11026] netlink: zone id is out of range [ 1119.229658][T11049] loop1: detected capacity change from 0 to 2048 [ 1119.333615][T11049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.401558][T11049] ext4 filesystem being mounted at /2259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.469122][T11064] loop3: detected capacity change from 0 to 1024 [ 1119.506499][T11064] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1119.613217][T11064] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1119.662991][T11073] tc_dump_action: action bad kind [ 1119.681143][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.699636][T11064] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #32: comm syz.3.13336: iget: special inode unallocated [ 1119.780286][T11064] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1119.785261][T11064] EXT4-fs (loop3): Remounting filesystem read-only [ 1119.794598][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1119.794623][ C0] EXT4-fs (loop3): initial error at time 1773311819: ext4_get_journal_inode:5863: inode 32 [ 1119.794664][ C0] EXT4-fs (loop3): last error at time 1773311819: ext4_get_journal_inode:5863: inode 32 [ 1119.961131][T11064] EXT4-fs (loop3): no journal found [ 1120.018747][T11064] EXT4-fs (loop3): can't get journal size [ 1120.035957][T11064] EXT4-fs (loop3): filesystem is read-only [ 1120.091336][T11064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1120.366415][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.516676][ T5970] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1120.577100][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13356'. [ 1120.610455][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13356'. [ 1120.670840][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13356'. [ 1120.683798][ T2573] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.709469][ T5970] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1120.729566][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.740885][ T2573] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.771182][ T5970] usb 6-1: Product: syz [ 1120.775390][ T5970] usb 6-1: Manufacturer: syz [ 1120.779991][ T5970] usb 6-1: SerialNumber: syz [ 1120.801201][ T2573] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.830986][ T5970] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1120.849749][ T2573] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.908812][ T6598] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1121.392454][ T118] usb 6-1: USB disconnect, device number 12 [ 1121.478957][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13371'. [ 1121.698093][T11195] netlink: 'syz.4.13374': attribute type 32 has an invalid length. [ 1121.954533][ T6598] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1121.971882][ T6598] ath9k_htc: Failed to initialize the device [ 1121.991290][ T118] usb 6-1: ath9k_htc: USB layer deinitialized [ 1122.100920][T11157] loop0: detected capacity change from 0 to 32768 [ 1122.139847][T11157] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 1688849860264248 exceeds id_count 312 [ 1122.220211][T11157] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1122.272405][T11157] OCFS2: File system is now read-only. [ 1122.282196][T11157] (syz.0.13363,11157,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 1122.320550][T11157] (syz.0.13363,11157,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30 [ 1122.352105][T11157] (syz.0.13363,11157,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 1122.428837][T11157] (syz.0.13363,11157,1):ocfs2_initialize_super:2198 ERROR: status = -30 [ 1122.457462][T11157] (syz.0.13363,11157,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 1122.926207][ T5970] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1123.096486][ T5970] usb 6-1: Using ep0 maxpacket: 8 [ 1123.126565][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1123.179530][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1123.204875][ T5970] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1123.233184][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1123.252133][T11294] netlink: 'syz.6.13400': attribute type 16 has an invalid length. [ 1123.285122][T11294] netlink: 'syz.6.13400': attribute type 17 has an invalid length. [ 1123.292575][ T5970] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1123.324074][ T5970] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1123.354525][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.383269][T11294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.389879][T11297] loop4: detected capacity change from 0 to 128 [ 1123.399340][ T5970] usb 6-1: config 0 descriptor?? [ 1123.404436][ T6598] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1123.420504][T11253] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1123.438668][T11294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.444058][T11297] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1123.507346][T11297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1123.573095][T11297] ext4 filesystem being mounted at /2138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.623747][T11297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.13403: bg 0: bad block bitmap checksum [ 1123.640665][ T6598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.702052][ T6598] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1123.761377][ T6598] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1123.819500][ T6598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.859039][ T6598] usb 4-1: config 0 descriptor?? [ 1123.958860][ T5844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1124.022438][T19931] usb 6-1: USB disconnect, device number 13 [ 1124.025544][ T5850] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 1124.058708][T11332] netlink: 'syz.6.13411': attribute type 13 has an invalid length. [ 1124.072311][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1124.072331][ T30] audit: type=1326 audit(1773311824.056:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.0.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1124.117787][ T30] audit: type=1326 audit(1773311824.098:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.0.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1124.142335][ T6598] Bluetooth: Can't get state to change to load ram patch err [ 1124.190773][ T6598] Bluetooth: Loading patch file failed [ 1124.191872][ T30] audit: type=1326 audit(1773311824.098:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.0.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1124.221061][ T6598] ath3k 4-1:0.0: probe with driver ath3k failed with error -121 [ 1124.275748][ T30] audit: type=1326 audit(1773311824.098:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.0.13412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1124.334348][ T6598] usb 4-1: USB disconnect, device number 126 [ 1124.693683][T11375] loop6: detected capacity change from 0 to 512 [ 1124.722376][T11375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1124.794387][T11375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1124.809437][T11375] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.027509][T31348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1125.057527][T11404] loop0: detected capacity change from 0 to 64 [ 1125.110937][T11404] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1125.505677][ T118] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1125.677973][ T118] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1125.707638][ T118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.741316][ T118] usb 7-1: config 0 descriptor?? [ 1125.817880][T11464] loop1: detected capacity change from 0 to 164 [ 1125.896520][T11464] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1125.928939][T11468] CIFS: Unable to determine destination address [ 1125.972443][ T118] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1126.174163][ T118] [drm:udl_init] *ERROR* Selecting channel failed [ 1126.217199][ T118] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1126.233803][ T118] [drm] Initialized udl on minor 2 [ 1126.263628][ T118] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1126.282411][ T118] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1126.328461][T19992] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1126.367522][T19992] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1126.383211][ T118] usb 7-1: USB disconnect, device number 11 [ 1126.543040][T11517] loop4: detected capacity change from 0 to 8 [ 1127.286904][T11498] loop5: detected capacity change from 0 to 32768 [ 1127.301469][T11498] BTRFS info: device /dev/loop5 (7:5) using temp-fsid d703cf5b-7e84-4fe4-9c25-002e440dc153 [ 1127.342646][T11498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13451 (11498) [ 1127.423875][T11498] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1127.467776][T11498] BTRFS info (device loop5): using crc32c checksum algorithm [ 1127.585030][T11498] BTRFS info (device loop5): enabling ssd optimizations [ 1127.592408][T11498] BTRFS info (device loop5): turning on flush-on-commit [ 1127.599535][T11498] BTRFS info (device loop5): enabling free space tree [ 1127.607147][T11498] BTRFS info (device loop5): enabling auto defrag [ 1127.614188][T11498] BTRFS info (device loop5): use lzo compression, level 1 [ 1127.622240][T11498] BTRFS info (device loop5): max_inline set to 4096 [ 1127.804725][T11557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1127.811683][T11557] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1127.947391][ T5845] BTRFS info (device loop5): last unmount of filesystem d703cf5b-7e84-4fe4-9c25-002e440dc153 [ 1128.011172][T11557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1128.017143][T11557] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1128.108068][T11615] loop1: detected capacity change from 0 to 256 [ 1128.142441][T11615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1128.220798][T11557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1128.226760][T11557] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1128.404333][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13472'. [ 1129.326560][T11711] loop5: detected capacity change from 0 to 1024 [ 1129.372918][ T118] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1129.429943][T11711] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 1129.540701][ T118] usb 4-1: Using ep0 maxpacket: 8 [ 1129.565081][ T118] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1129.611240][ T118] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1129.630847][ T118] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1129.668150][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.696763][ T118] usb 4-1: Product: syz [ 1129.701047][ T118] usb 4-1: Manufacturer: syz [ 1129.705665][ T118] usb 4-1: SerialNumber: syz [ 1129.736671][ T118] usb 4-1: config 0 descriptor?? [ 1129.773100][T19931] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1129.803657][ T118] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1129.909190][T11747] loop6: detected capacity change from 0 to 1024 [ 1129.934953][T11737] loop5: detected capacity change from 0 to 4096 [ 1129.951156][T19931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1129.972314][T11737] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1129.988793][ T118] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1129.992030][T19931] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1130.012785][T11747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1130.021756][T19931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.043907][T11737] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1130.050215][T11747] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.058373][ T118] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1130.065303][T19931] usb 2-1: config 0 descriptor?? [ 1130.085332][T11722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1130.152298][ T118] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1130.164061][T11753] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1130.250375][ T118] usb 4-1: USB disconnect, device number 127 [ 1130.300521][T11772] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1130.363379][T19992] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1130.466153][T31348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1130.534870][T19992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.557017][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.571266][T19992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.580408][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.590236][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.634389][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.656566][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.663906][T19992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.663966][T19992] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1130.724472][T19992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.760205][T19992] usb 5-1: config 0 descriptor?? [ 1130.775167][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.782004][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.813831][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.840206][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.867390][T19931] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 1130.963807][T19931] asus 0003:0B05:1ABE.0001: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 1131.028253][T19931] usb 2-1: USB disconnect, device number 113 [ 1131.182277][T19992] hid-rmi 0003:0461:4E72.0002: item fetching failed at offset 2/11 [ 1131.209010][T19992] hid-rmi 0003:0461:4E72.0002: parse failed [ 1131.232618][T19992] hid-rmi 0003:0461:4E72.0002: probe with driver hid-rmi failed with error -22 [ 1131.296450][T11817] fido_id[11817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1131.322490][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.476444][T19992] usb 5-1: USB disconnect, device number 92 [ 1132.175219][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.254851][T11764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.456873][T11878] loop3: detected capacity change from 0 to 2048 [ 1132.474037][T11878] EXT4-fs: Ignoring removed mblk_io_submit option [ 1132.531782][T11878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.572075][T11878] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.13522: bg 0: block 234: padding at end of block bitmap is not set [ 1132.588107][T11878] EXT4-fs (loop3): Remounting filesystem read-only [ 1132.643246][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.697342][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1133.064267][T11898] loop3: detected capacity change from 0 to 512 [ 1133.186499][T11782] vxcan1 speed is unknown, defaulting to 1000 [ 1133.217863][T11782] syz2: Port: 1 Link DOWN [ 1133.318066][T31210] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.358902][T31210] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1133.410651][T31210] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.440619][T31210] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1133.454540][T11784] vxcan1 speed is unknown, defaulting to 1000 [ 1133.467800][T11914] loop0: detected capacity change from 0 to 8 [ 1133.512095][T11914] SQUASHFS error: xz decompression failed, data probably corrupt [ 1133.538015][ T2571] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.568016][T11914] SQUASHFS error: Failed to read block 0x108: -5 [ 1133.587672][ T2571] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1133.602089][T11914] SQUASHFS error: Unable to read metadata cache entry [106] [ 1133.619341][T11914] SQUASHFS error: Unable to read inode 0x11f [ 1133.621316][ T2571] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.656945][ T2571] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1133.676494][T11929] syz_tun: entered allmulticast mode [ 1133.696436][T11930] loop3: detected capacity change from 0 to 8 [ 1133.971032][T11952] netlink: 'syz.4.13535': attribute type 2 has an invalid length. [ 1134.035943][T11957] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13539'. [ 1134.081800][T11957] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13539'. [ 1134.192803][ T5970] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1134.373779][ T5970] usb 7-1: Using ep0 maxpacket: 32 [ 1134.409810][ T5970] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1134.435971][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1134.439810][ T5970] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 1134.491985][ T5970] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1134.534989][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1134.551563][ T5970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.578789][ T5970] usb 7-1: Product: syz [ 1134.582999][ T5970] usb 7-1: Manufacturer: syz [ 1134.614494][ T5970] usb 7-1: SerialNumber: syz [ 1134.731542][T11983] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 1134.927112][ T5970] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1134.935591][ T5970] usb 7-1: unit 2 not found! [ 1134.996049][T11943] loop5: detected capacity change from 0 to 32768 [ 1135.029419][T11943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13536 (11943) [ 1135.122463][T11943] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1135.145108][T11943] BTRFS info (device loop5): using sha256 checksum algorithm [ 1135.151284][ T5970] usb 7-1: USB disconnect, device number 12 [ 1135.198737][T12020] loop3: detected capacity change from 0 to 1024 [ 1135.219409][T12020] hfsplus: request for non-existent node 3 in B*Tree [ 1135.227863][T12020] hfsplus: request for non-existent node 3 in B*Tree [ 1135.361798][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.415906][T11943] BTRFS info (device loop5): checking UUID tree [ 1135.450637][T11943] BTRFS info (device loop5): setting nodatasum [ 1135.484961][T11943] BTRFS info (device loop5): setting nodatacow [ 1135.493890][T11943] BTRFS info (device loop5): enabling ssd optimizations [ 1135.521041][T11943] BTRFS info (device loop5): turning on async discard [ 1135.534667][T12047] sp0: Synchronizing with TNC [ 1135.557280][T11943] BTRFS info (device loop5): enabling free space tree [ 1135.754894][T12044] loop3: detected capacity change from 0 to 32768 [ 1135.815306][T12044] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1135.884590][T12044] XFS (loop3): Torn write (CRC failure) detected at log block 0x80. Truncating head block from 0xc0. [ 1135.911009][T12044] XFS (loop3): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1135.926138][T12044] XFS (loop3): log mount/recovery failed: error -22 [ 1135.948455][T12044] XFS (loop3): log mount failed [ 1136.098667][ T5845] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1136.279980][T12080] loop0: detected capacity change from 0 to 256 [ 1136.760266][T12113] loop6: detected capacity change from 0 to 512 [ 1136.771081][T12115] netlink: 'syz.0.13568': attribute type 1 has an invalid length. [ 1136.831146][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13568'. [ 1136.883708][T12115] netlink: 'syz.0.13568': attribute type 1 has an invalid length. [ 1136.926644][T12113] EXT4-fs (loop6): 1 truncate cleaned up [ 1136.934297][T12113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.254788][T31348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.307320][T11780] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1137.469886][T11780] usb 5-1: Using ep0 maxpacket: 32 [ 1137.501048][T11780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.536449][T11780] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1137.567063][T11780] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1137.601549][T11780] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1137.616556][T11780] usb 5-1: Product: syz [ 1137.620752][T11780] usb 5-1: Manufacturer: syz [ 1137.638160][T11780] usb 5-1: SerialNumber: syz [ 1137.679141][T11780] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input78 [ 1137.921575][T11780] usb 5-1: USB disconnect, device number 93 [ 1138.099812][T11780] appletouch 5-1:1.0: input: appletouch disconnected [ 1138.571566][T12206] loop6: detected capacity change from 0 to 4096 [ 1138.589287][T12214] loop1: detected capacity change from 0 to 2048 [ 1138.619737][T12165] loop0: detected capacity change from 0 to 32768 [ 1138.636271][T12214] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1138.661530][ T5970] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1138.713388][T12222] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1138.754093][T12224] read_mapping_page failed! [ 1138.796239][T12224] ERROR: (device loop0): txCommit: [ 1138.796239][T12224] [ 1138.874438][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.928207][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.959912][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.026238][ T5841] ERROR: (device loop0): diFree: numfree > numinos [ 1139.026238][ T5841] [ 1139.034136][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.085732][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.140678][ T5970] usb 4-1: config 0 descriptor?? [ 1139.181376][ T5970] hub 4-1:0.0: USB hub found [ 1139.187067][T12234] loop4: detected capacity change from 0 to 128 [ 1139.223233][T12234] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1139.301974][T12234] hpfs: filesystem error: improperly stopped [ 1139.325468][T12234] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1139.351512][T12234] hpfs: You really don't want any checks? You are crazy... [ 1139.364134][ T5970] hub 4-1:0.0: 9 ports detected [ 1139.390360][ T5970] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1139.439904][T12234] hpfs: hpfs_map_sector(): read error [ 1139.461441][T12234] hpfs: code page support is disabled [ 1139.490339][T12234] hpfs: hpfs_map_4sectors(): unaligned read [ 1139.528128][T12234] hpfs: hpfs_map_4sectors(): unaligned read [ 1139.534204][T12234] hpfs: filesystem error: unable to find root dir [ 1139.660112][ T6598] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1139.780327][ T5970] usb 4-1: USB disconnect, device number 2 [ 1139.867813][ T6598] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.913403][ T6598] usb 6-1: config 0 has no interface number 0 [ 1139.933797][ T6598] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.957922][T12289] wireguard: wg2: Could not create IPv4 socket [ 1139.982496][ T6598] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.000417][ T6598] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1140.032237][ T6598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.065643][ T6598] usb 6-1: config 0 descriptor?? [ 1140.142715][T12298] ptrace attach of "./syz-executor exec"[5841] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ "[12298] [ 1140.406886][T12313] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1140.474681][ T6598] hid_parser_main: 471 callbacks suppressed [ 1140.474709][ T6598] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 1140.524994][ T6598] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 1140.560255][ T6598] hid_prodikeys: hid-prodikeys: failed to find output report [ 1140.560255][ T6598] [ 1140.590640][T12326] loop6: detected capacity change from 0 to 16 [ 1140.642903][T12326] erofs (device loop6): mounted with root inode @ nid 36. [ 1140.694109][ T30] audit: type=1800 audit(1773311841.503:2612): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13619" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1140.726117][ T6598] usb 6-1: USB disconnect, device number 14 [ 1140.791237][T12342] macvlan2: entered promiscuous mode [ 1140.886985][T12342] bond0: entered promiscuous mode [ 1140.920889][T12342] bond_slave_0: entered promiscuous mode [ 1140.926785][T12342] bond_slave_1: entered promiscuous mode [ 1140.966840][T12342] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1140.971321][T12336] fido_id[12336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1141.035376][T12361] loop6: detected capacity change from 0 to 256 [ 1141.116759][T12361] exFAT-fs (loop6): error, The cluster chain has a loop [ 1141.155797][T12361] exFAT-fs (loop6): Filesystem has been set read-only [ 1141.183405][T12361] exFAT-fs (loop6): failed to count the number of clusters in root [ 1141.241693][T12361] exFAT-fs (loop6): failed to recognize exfat type [ 1141.577509][T12383] mkiss: ax0: crc mode is auto. [ 1141.697934][T12397] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1142.398877][T12432] loop4: detected capacity change from 0 to 64 [ 1142.516388][T12436] loop5: detected capacity change from 0 to 1024 [ 1142.617214][T12436] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.13644'. [ 1142.631600][T12384] loop6: detected capacity change from 0 to 32768 [ 1142.716884][T12384] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1142.948492][T12408] loop0: detected capacity change from 0 to 32768 [ 1142.975744][T12408] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 147024d8-b3e6-470d-8cfb-cb62d4d5c8cd [ 1143.023906][T12408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13636 (12408) [ 1143.039047][T12384] XFS (loop6): Ending clean mount [ 1143.108159][T12459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.166706][T31348] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1143.181014][T12408] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1143.244463][T12408] BTRFS info (device loop0): using crc32c checksum algorithm [ 1143.347113][T12459] EXT4-fs: Ignoring removed orlov option [ 1143.353243][T12459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1143.397460][T12459] EXT4-fs (loop1): can't enable nombcache during remount [ 1143.657225][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.713064][T12408] BTRFS info (device loop0): enabling ssd optimizations [ 1143.747018][T12408] BTRFS info (device loop0): turning on flush-on-commit [ 1143.804341][T12408] BTRFS info (device loop0): enabling free space tree [ 1143.811165][T12408] BTRFS info (device loop0): enabling auto defrag [ 1143.861832][T12408] BTRFS info (device loop0): use lzo compression, level 1 [ 1143.869033][T12408] BTRFS info (device loop0): max_inline set to 4096 [ 1144.095424][T12468] set_capacity_and_notify: 1 callbacks suppressed [ 1144.095447][T12468] loop4: detected capacity change from 0 to 32768 [ 1144.156758][T12468] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13649 (12468) [ 1144.160746][ T5841] BTRFS info (device loop0): last unmount of filesystem 147024d8-b3e6-470d-8cfb-cb62d4d5c8cd [ 1144.210238][T12511] loop6: detected capacity change from 0 to 256 [ 1144.265931][T12468] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1144.337683][T12468] BTRFS info (device loop4): using blake2b checksum algorithm [ 1144.630178][T12468] BTRFS info (device loop4): enabling ssd optimizations [ 1144.718748][T12468] BTRFS info (device loop4): turning on async discard [ 1144.725675][T12468] BTRFS info (device loop4): enabling free space tree [ 1144.795342][T12468] BTRFS info (device loop4): use zstd compression, level 3 [ 1144.876444][T12483] loop5: detected capacity change from 0 to 32768 [ 1144.935979][T12483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13651 (12483) [ 1145.035162][T12483] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1145.137755][T12483] BTRFS info (device loop5): using sha256 checksum algorithm [ 1145.390730][T12483] BTRFS info (device loop5): allowing degraded mounts [ 1145.401685][T12575] loop3: detected capacity change from 0 to 2048 [ 1145.415722][ T5844] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1145.423341][T12483] BTRFS info (device loop5): enabling free space tree [ 1145.480496][T12483] BTRFS info (device loop5): enabling auto defrag [ 1145.486979][T12483] BTRFS info (device loop5): force zstd compression, level 3 [ 1145.619249][T12575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.898355][ T5845] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1145.960455][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13669'. [ 1146.658813][T12628] loop0: detected capacity change from 0 to 512 [ 1146.826703][T12628] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1146.957404][T12628] EXT4-fs (loop0): 1 truncate cleaned up [ 1146.965002][T12628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.264114][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.352022][T12663] syz_tun: entered promiscuous mode [ 1147.390982][T12663] syz_tun: left promiscuous mode [ 1147.963133][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13696'. [ 1148.021711][T12697] comedi comedi3: dt2817: I/O port conflict (0x4e24,5) [ 1148.312048][T12721] loop6: detected capacity change from 0 to 256 [ 1148.334991][T12721] exfat: Deprecated parameter 'utf8' [ 1148.440882][T12721] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1148.551131][T12735] ipvlan2: entered promiscuous mode [ 1148.834182][ T6598] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1149.026166][ T6598] usb 5-1: Using ep0 maxpacket: 32 [ 1149.054401][ T6598] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 1149.072084][ T6598] usb 5-1: config 0 has no interface number 0 [ 1149.098393][ T6598] usb 5-1: config 0 interface 244 has no altsetting 0 [ 1149.140473][ T6598] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1149.152413][ T6598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.196158][ T6598] usb 5-1: Product: syz [ 1149.200366][ T6598] usb 5-1: Manufacturer: syz [ 1149.236375][ T6598] usb 5-1: SerialNumber: syz [ 1149.256008][ T6598] usb 5-1: config 0 descriptor?? [ 1149.306568][ T6598] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 1149.325797][T12793] loop6: detected capacity change from 0 to 512 [ 1149.470683][ T6598] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 1149.497978][ T6598] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 1149.507367][T12803] loop3: detected capacity change from 0 to 128 [ 1149.534671][ T6598] snd_usb_toneport 5-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 1149.545513][T12803] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1149.595242][T12803] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1149.625486][T12803] hpfs: You really don't want any checks? You are crazy... [ 1149.668739][T12803] hpfs: hpfs_map_sector(): read error [ 1149.693968][T12803] hpfs: code page support is disabled [ 1149.699486][T12803] hpfs: hpfs_map_4sectors(): unaligned read [ 1149.716241][ T5909] usb 5-1: USB disconnect, device number 94 [ 1149.743254][T12824] netlink: 'syz.5.13732': attribute type 29 has an invalid length. [ 1149.748221][T12803] hpfs: hpfs_map_4sectors(): unaligned read [ 1149.762917][T12824] netlink: 'syz.5.13732': attribute type 29 has an invalid length. [ 1149.818417][T12803] hpfs: filesystem error: unable to find root dir [ 1150.392619][T12864] loop0: detected capacity change from 0 to 512 [ 1150.439256][T12864] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1150.508073][T12864] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1150.529203][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1150.535847][ C0] EXT4-fs (loop0): initial error at time 1773311851: ext4_mb_generate_buddy:1315 [ 1150.545269][ C0] EXT4-fs (loop0): last error at time 1773311851: ext4_mb_generate_buddy:1315 [ 1150.613421][T12864] EXT4-fs (loop0): 1 truncate cleaned up [ 1150.636910][T12864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.708175][T12864] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.13744: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0 [ 1150.830319][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.121995][T12897] macsec1: entered promiscuous mode [ 1151.136212][T12897] macsec1: entered allmulticast mode [ 1151.713930][T12877] loop3: detected capacity change from 0 to 32768 [ 1151.766896][T12877] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1151.827687][T12877] JBD2: Ignoring recovery information on journal [ 1152.024809][T12877] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1152.056015][T12949] loop5: detected capacity change from 0 to 64 [ 1152.084646][T12951] netlink: 256 bytes leftover after parsing attributes in process `syz.1.13769'. [ 1152.379971][T12960] loop1: detected capacity change from 0 to 128 [ 1152.408803][ T5838] ocfs2: Unmounting device (7,3) on (node local) [ 1152.475998][T12960] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1152.521594][T12963] loop5: detected capacity change from 0 to 1024 [ 1152.532217][T12930] loop4: detected capacity change from 0 to 32768 [ 1152.550679][T12960] ext4 filesystem being mounted at /2345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.560724][T12930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13762 (12930) [ 1152.633916][T12963] hfsplus: bad catalog entry type [ 1152.644583][T12930] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1152.710181][T12930] BTRFS info (device loop4): using sha256 checksum algorithm [ 1152.719350][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1152.800190][T12920] loop0: detected capacity change from 0 to 32768 [ 1152.856168][T31210] hfsplus: b-tree write err: -5, ino 25 [ 1152.862018][T31210] hfsplus: b-tree write err: -5, ino 4 [ 1152.920503][T12920] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13759 (12920) [ 1152.949604][T31210] hfsplus: b-tree write err: -5, ino 2 [ 1152.999460][T12920] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1153.059860][T12987] loop6: detected capacity change from 0 to 4096 [ 1153.073629][T12930] BTRFS info (device loop4): enabling ssd optimizations [ 1153.088637][T12930] BTRFS info (device loop4): turning on async discard [ 1153.091698][T12920] BTRFS info (device loop0): using sha256 checksum algorithm [ 1153.105944][T12930] BTRFS info (device loop4): enabling free space tree [ 1153.148221][T12998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.380849][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1153.413284][T12920] BTRFS info (device loop0): enabling ssd optimizations [ 1153.450321][T12920] BTRFS info (device loop0): turning on async discard [ 1153.482068][T12920] BTRFS info (device loop0): enabling free space tree [ 1153.513403][T12920] BTRFS info (device loop0): enabling auto defrag [ 1153.519887][T12920] BTRFS info (device loop0): max_inline set to 4096 [ 1153.730601][ T30] audit: type=1400 audit(1773311855.193:2613): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=13041 comm="syz.6.13782" [ 1154.076476][ T5841] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1154.599314][T13060] set_capacity_and_notify: 1 callbacks suppressed [ 1154.599363][T13060] loop1: detected capacity change from 0 to 128 [ 1154.702684][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1154.777848][T13060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1154.904186][T13014] loop5: detected capacity change from 0 to 32768 [ 1155.051380][T13014] jfs_lookup: dtSearch returned -5 [ 1155.142965][T13093] loop3: detected capacity change from 0 to 128 [ 1155.630218][T13120] vivid-002: disconnect [ 1155.667383][T13116] vivid-002: reconnect [ 1156.282915][ T5970] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1156.506427][ T5970] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1156.525579][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.552117][ T5970] usb 5-1: Product: syz [ 1156.561397][ T5970] usb 5-1: Manufacturer: syz [ 1156.566006][ T5970] usb 5-1: SerialNumber: syz [ 1156.585628][T13177] loop5: detected capacity change from 0 to 256 [ 1156.622284][ T5970] usb 5-1: config 0 descriptor?? [ 1156.633210][T13181] loop0: detected capacity change from 0 to 128 [ 1156.681170][ T5970] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 095 [ 1156.732851][T13181] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1156.867059][T13181] ext4 filesystem being mounted at /2342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.966618][T13181] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.13821: No space for directory leaf checksum. Please run e2fsck -D. [ 1157.004692][T13181] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.13821: Directory block failed checksum [ 1157.065012][T13204] loop6: detected capacity change from 0 to 512 [ 1157.093098][T13204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1157.135863][T13204] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1157.149225][ T5841] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1157.159078][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1157.165994][ C1] EXT4-fs (loop6): initial error at time 1773311858: mb_free_blocks:2047: inode 11: block 64 [ 1157.166209][T13204] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #11: comm syz.6.13826: corrupted inode contents [ 1157.176355][ C1] EXT4-fs (loop6): last error at time 1773311858: mb_free_blocks:2047: inode 11: block 64 [ 1157.183416][T13211] loop3: detected capacity change from 0 to 1024 [ 1157.209746][T13204] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1157.214058][T13204] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #11: comm syz.6.13826: mark_inode_dirty error [ 1157.235955][T13211] hfsplus: b-tree write err: -5, ino 2 [ 1157.248186][T13204] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1157.250438][ T5970] i2c i2c-1: failure reading functionality [ 1157.289398][T13204] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.13826: invalid indirect mapped block 1 (level 1) [ 1157.316714][ T5970] i2c i2c-1: connected i2c-tiny-usb device [ 1157.350605][ T5970] usb 5-1: USB disconnect, device number 95 [ 1157.382979][T13204] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1157.383463][T13204] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #11: comm syz.6.13826: corrupted inode contents [ 1157.470115][ T2573] hfsplus: b-tree write err: -5, ino 25 [ 1157.486035][ T2573] hfsplus: b-tree write err: -5, ino 4 [ 1157.491831][ T2573] hfsplus: b-tree write err: -5, ino 2 [ 1157.510820][T13204] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1157.527422][T13204] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1157.560560][ T2573] hfsplus: b-tree write err: -5, ino 26 [ 1157.581820][T13204] loop6: lost filesystem error report for type 5 error -117 [ 1157.582287][T13204] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #11: comm syz.6.13826: corrupted inode contents [ 1157.589724][T13244] ptrace attach of "./syz-executor exec"[5851] was attempted by "ýßu+íO'Uçl$WB·ivÏQåȰ&*\x07¥ -ä:Ma{MræÏ°ØÄZï‰øÓT!kúWŒ_~—¤{&¿Tçvf<¤×{t‘žýªôV\x0d7á1™¥%Ú^~›‚Åõy’—Ä\x5c>¸qX\x09aŸéEÌx¨–~$ßRåÖ~…¼sÛ„9!þ+îËlàvûs\x22~UëxåaŒ*œfÜÈPyôw.¼ÁÉ6û©iîÂBÖ¡O‹¼ÕÎ ¼‘Ì^¦$ îÆwÃü*ƒ÷Íãû? Æ;Ø-é«b·?3—AÕ”‘SÃÑ­ÂKkÆÛr\x0aæéÃØ™:…y>sÄy\x1b¢SD8\x1bÝuƒ\x0aÚÑ2Ûš.¼bf×h„³Üú™‰ËݹÆ5¿cM¹+²wœkà×Ò|Í(Hnô'cC¼æj<,ᨊ¬r.uñ(ln¹vNÍ¿FˆQ+&iÝÁŽÐkŸŸÐ&È¢¬Ä¤>è²¥½f‰bRs«ó·–¾\x0c~1šœ‰Ï%^“?ñ\x1bÈYµû\x1b­g¯´-3Ë©VO|\x0aá³·ÖÆÄ[.ØÀ'3õ¹‹ÚDµÁAÿÅüzrcOÆ ¥ƒ,œô‘»;ò½ŽÛj„Õ!pŽoûŸUe{‘™ˆÅs%@èO®tnZ–b™§Bš&+4û?pÄÅRN¡Œû½!YË‘Nj˜âgÎiqÐïÜ[¶6ÙÍh“í²vN|›°Õ xiúèPo54(%*ª Ëô½ŒáëħlåLU•»©²Dàä§¥7`zú8äh¨Â“ý½„Ù=»‚¨š-eÞði¤’î}˜\x5c\x09£v:-×Ë\x09•œ9.½¦V€¨•§E×&õ†æ¹\x09 b&hΚ€AŽ‘`œRœƒ&±½Ö•—AÌÔO •Ý›/\x1bLÀ\x07Àû&÷òDÈuÄoO…æÆ^Cò'S1 @¯ÃŠòôû#^^ô„¥V1¥¾56rè©´tUõ\x0cô¸½0é´²˜´´>’‰ÅªèÙìMÑü²VÐjØ\x07À=ºÉ}]M†‡XUtûÜY[%>p¹üÄù*×ójšs;”Ûx—9K§£4Ím{yÞãWp5p\x0cVÕ\x0c×\x0a(UηúX«þ8'C}ôħ¿°J=Òјáæ6WwØ&äu×]÷±8?¯œ +Äßþ3 [ 1157.631505][T13204] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1157.766046][T13204] EXT4-fs error (device loop6): ext4_truncate:4587: inode #11: comm syz.6.13826: mark_inode_dirty error [ 1157.810977][T13204] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1157.811650][T13204] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1157.834865][T13204] loop6: lost filesystem error report for type 5 error -117 [ 1157.837707][T13204] EXT4-fs (loop6): 1 truncate cleaned up [ 1157.857268][T13204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1157.929263][T13204] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1157.944731][T13204] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1157.966714][T13204] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1158.163824][T31348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.169483][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13841'. [ 1158.185924][T13272] loop4: detected capacity change from 0 to 64 [ 1158.535013][T13290] net_ratelimit: 2 callbacks suppressed [ 1158.535066][T13290] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1159.070887][T13263] loop0: detected capacity change from 0 to 32768 [ 1159.110116][T13263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13836 (13263) [ 1159.197755][T13263] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1159.243592][T13263] BTRFS info (device loop0): using sha256 checksum algorithm [ 1159.329365][T13336] loop6: detected capacity change from 0 to 1024 [ 1159.418870][T13263] BTRFS info (device loop0): enabling ssd optimizations [ 1159.420348][T13336] hfsplus: bad catalog entry type [ 1159.456138][T13331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.521906][T13263] BTRFS info (device loop0): turning on async discard [ 1159.528560][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13862'. [ 1159.528757][T13263] BTRFS info (device loop0): enabling free space tree [ 1159.705626][T31210] hfsplus: b-tree write err: -5, ino 25 [ 1159.711677][T31210] hfsplus: b-tree write err: -5, ino 4 [ 1159.761443][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.771443][T31210] hfsplus: b-tree write err: -5, ino 2 [ 1160.046470][T13388] set_capacity_and_notify: 1 callbacks suppressed [ 1160.046493][T13388] loop3: detected capacity change from 0 to 2048 [ 1160.114158][T13388] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1160.171188][T13388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1160.209231][ T5970] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1160.312110][T11780] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1160.389253][ T5970] usb 7-1: Using ep0 maxpacket: 16 [ 1160.396513][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.431712][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.469269][ T5970] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1160.492983][T11780] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1160.510428][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.532444][T11780] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.559304][T11780] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.561073][ T5970] usb 7-1: config 0 descriptor?? [ 1160.597690][T11780] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1160.612908][T11780] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1160.640562][T11780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.665451][ T5841] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1160.700118][T11780] usb 5-1: config 0 descriptor?? [ 1160.749294][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1160.897789][T13427] loop5: detected capacity change from 0 to 512 [ 1160.979990][T13427] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.13874: corrupted xattr block 95: invalid header [ 1161.013375][T13427] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1161.016513][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1161.032338][ C0] EXT4-fs (loop5): initial error at time 1773311862: ext4_expand_extra_isize_ea:2808: inode 11 [ 1161.042736][ C0] EXT4-fs (loop5): last error at time 1773311862: ext4_expand_extra_isize_ea:2808: inode 11 [ 1161.066374][T13427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.13874: bg 0: block 7: invalid block bitmap [ 1161.102254][T13427] loop5: lost filesystem error report for type 5 error -117 [ 1161.102947][T13427] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1161.193467][T13427] loop5: lost filesystem error report for type 5 error -117 [ 1161.193958][T13427] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #11: comm syz.5.13874: corrupted xattr block 95: invalid header [ 1161.219739][T11780] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 1161.279084][T11780] holtek 0003:1241:5015.0004: no inputs found [ 1161.288207][T13427] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1161.288699][T13427] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 1161.320236][ T5970] corsair 0003:1B1C:1B02.0005: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 1161.347375][T11780] usb 5-1: USB disconnect, device number 96 [ 1161.376120][T13427] EXT4-fs (loop5): 1 orphan inode deleted [ 1161.408470][ T6598] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1161.446351][T13427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.483720][ T5970] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 1161.551377][T13448] fido_id[13448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1161.560682][ T5970] usb 7-1: USB disconnect, device number 13 [ 1161.621555][ T6598] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1161.657770][ T6598] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1161.702429][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.709022][ T6598] usb 1-1: Product: syz [ 1161.722785][T13460] fido_id[13460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1161.728864][ T6598] usb 1-1: Manufacturer: syz [ 1161.789837][ T6598] usb 1-1: SerialNumber: syz [ 1161.817070][ T6598] usb 1-1: config 0 descriptor?? [ 1161.838460][ T6598] ch341 1-1:0.0: ch341-uart converter detected [ 1162.060413][T13495] loop1: detected capacity change from 0 to 4096 [ 1162.103451][T13495] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1162.139599][T13511] netlink: 'syz.4.13883': attribute type 4 has an invalid length. [ 1162.164449][T13511] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13883'. [ 1162.281192][ T30] audit: type=1800 audit(1773311864.168:2614): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13880" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1162.406009][ T6598] usb 1-1: failed to send control message: -71 [ 1162.445857][ T6598] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1162.497344][T13522] loop3: detected capacity change from 0 to 2048 [ 1162.501462][ T6598] usb 1-1: USB disconnect, device number 125 [ 1162.524673][T13529] loop5: detected capacity change from 0 to 128 [ 1162.563699][ T6598] ch341 1-1:0.0: device disconnected [ 1162.579175][T13522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1162.926174][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13890'. [ 1163.143211][T13557] loop0: detected capacity change from 0 to 256 [ 1163.919749][T13592] [U] „ [ 1164.358026][T13577] loop6: detected capacity change from 0 to 32768 [ 1164.358578][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13907'. [ 1164.389899][T13577] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.13897 (13577) [ 1164.468904][T13577] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1164.468942][T13577] BTRFS info (device loop6): using sha256 checksum algorithm [ 1164.611621][T13577] BTRFS info (device loop6): enabling ssd optimizations [ 1164.611656][T13577] BTRFS info (device loop6): turning on async discard [ 1164.611677][T13577] BTRFS info (device loop6): enabling free space tree [ 1164.611699][T13577] BTRFS info (device loop6): enabling auto defrag [ 1164.611721][T13577] BTRFS info (device loop6): max_inline set to 4096 [ 1164.754243][T13643] syz.0.13911 (13643) used obsolete PPPIOCDETACH ioctl [ 1164.924920][T31348] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1165.038957][ T30] audit: type=1326 audit(1773311867.066:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.143600][ T30] audit: type=1326 audit(1773311867.097:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.271956][ T30] audit: type=1326 audit(1773311867.108:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.399388][ T30] audit: type=1326 audit(1773311867.108:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.484446][ T30] audit: type=1326 audit(1773311867.108:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.583304][ T30] audit: type=1326 audit(1773311867.108:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.731957][ T30] audit: type=1326 audit(1773311867.108:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13654 comm="syz.0.13915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a779c799 code=0x7ffc0000 [ 1165.999085][ T5970] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1166.163984][T13706] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1166.190002][ T5970] usb 6-1: Using ep0 maxpacket: 8 [ 1166.204518][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.267519][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.292406][ T5970] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1166.323388][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.355982][ T5970] usb 6-1: config 0 descriptor?? [ 1166.680324][T13668] loop0: detected capacity change from 0 to 32768 [ 1166.764466][T13668] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1166.795294][ T5970] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 1166.888402][ T5970] logitech 0003:046D:C20E.0006: item fetching failed at offset 10/11 [ 1166.957985][T13668] XFS (loop0): Ending clean mount [ 1166.958791][ T5970] logitech 0003:046D:C20E.0006: parse failed [ 1167.002209][T13668] XFS (loop0): Quotacheck needed: Please wait. [ 1167.027593][ T5970] logitech 0003:046D:C20E.0006: probe with driver logitech failed with error -22 [ 1167.051289][T13713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.085326][T13668] XFS (loop0): Quotacheck: Done. [ 1167.092512][ T5970] usb 6-1: USB disconnect, device number 15 [ 1167.179397][ T5841] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1167.235541][T13713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.484094][T13767] Bluetooth: MGMT ver 1.23 [ 1167.798624][ T323] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.812388][T13776] smc: net device bond0 applied user defined pnetid SYZ2 [ 1167.888479][ T323] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.922312][ T323] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.961271][ T323] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.073553][T13794] loop3: detected capacity change from 0 to 1024 [ 1168.075971][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1168.162000][T13807] loop0: detected capacity change from 0 to 128 [ 1168.256063][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1168.300912][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1168.307778][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.326906][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1168.335602][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1168.354681][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1168.358770][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1168.420220][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.471351][ T24] usb 6-1: config 0 descriptor?? [ 1168.491752][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1168.503329][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1168.581309][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1168.611001][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1168.618117][ T24] usb 6-1: media controller created [ 1168.687624][T13784] dvb-usb: bulk message failed: -22 (5/0) [ 1168.710385][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.802417][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1168.808776][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1168.857157][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input81 [ 1168.930829][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1168.959010][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1169.009079][ T24] usb 6-1: USB disconnect, device number 16 [ 1169.219797][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1169.266195][T13877] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13965'. [ 1169.274781][T13878] loop3: detected capacity change from 0 to 256 [ 1169.334493][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13965'. [ 1169.353823][T13878] FAT-fs (loop3): Directory bread(block 64) failed [ 1169.395590][T13878] FAT-fs (loop3): Directory bread(block 65) failed [ 1169.445486][T13878] FAT-fs (loop3): Directory bread(block 66) failed [ 1169.504202][T13878] FAT-fs (loop3): Directory bread(block 67) failed [ 1169.510981][T13878] FAT-fs (loop3): Directory bread(block 68) failed [ 1169.561450][T13878] FAT-fs (loop3): Directory bread(block 69) failed [ 1169.568091][T13878] FAT-fs (loop3): Directory bread(block 70) failed [ 1169.614497][T13878] FAT-fs (loop3): Directory bread(block 71) failed [ 1169.632442][T13878] FAT-fs (loop3): Directory bread(block 72) failed [ 1169.656533][T13878] FAT-fs (loop3): Directory bread(block 73) failed [ 1169.721744][T13888] loop6: detected capacity change from 0 to 8192 [ 1169.779584][T13828] loop0: detected capacity change from 0 to 32768 [ 1169.845581][T13853] loop4: detected capacity change from 0 to 32768 [ 1169.880301][T13828] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1169.897181][T13853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13960 (13853) [ 1170.052408][T13853] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1170.096366][T13828] XFS (loop0): Ending clean mount [ 1170.162737][T13828] XFS (loop0): Quotacheck needed: Please wait. [ 1170.169633][T13853] BTRFS info (device loop4): using sha256 checksum algorithm [ 1170.189564][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13972'. [ 1170.219404][T13924] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13972'. [ 1170.361090][T13828] XFS (loop0): Quotacheck: Done. [ 1170.416966][T13853] BTRFS info (device loop4): enabling ssd optimizations [ 1170.524524][T13946] loop1: detected capacity change from 0 to 1024 [ 1170.528965][T13853] BTRFS info (device loop4): turning on async discard [ 1170.584473][T13946] hfsplus: b-tree write err: -5, ino 2 [ 1170.599635][T13853] BTRFS info (device loop4): enabling free space tree [ 1170.622574][ T5841] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1170.708878][T13892] loop5: detected capacity change from 0 to 40427 [ 1170.756083][T13892] F2FS-fs (loop5): build fault injection rate: 771 [ 1170.800835][T13892] F2FS-fs (loop5): invalid crc value [ 1170.806910][ T13] hfsplus: b-tree write err: -5, ino 25 [ 1170.821266][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1170.849560][ T13] hfsplus: b-tree write err: -5, ino 2 [ 1170.872979][ T13] hfsplus: b-tree write err: -5, ino 26 [ 1171.250456][T13892] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1171.295086][T13892] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1171.349346][T13964] f2fs_ckpt-7:5: attempt to access beyond end of device [ 1171.349346][T13964] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1171.429441][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1171.442967][T13964] CPU: 1 UID: 0 PID: 13964 Comm: f2fs_ckpt-7:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.443008][T13964] Tainted: [L]=SOFTLOCKUP [ 1171.443019][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1171.443035][T13964] Call Trace: [ 1171.443046][T13964] [ 1171.443057][T13964] dump_stack_lvl+0xe8/0x150 [ 1171.443102][T13964] f2fs_handle_critical_error+0x37c/0x540 [ 1171.443143][T13964] f2fs_write_end_io+0xcdb/0xff0 [ 1171.443203][T13964] __submit_merged_bio+0x256/0x700 [ 1171.443241][T13964] __submit_merged_write_cond+0x3c9/0x4e0 [ 1171.443281][T13964] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1171.443328][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443369][T13964] f2fs_write_data_pages+0x2975/0x35e0 [ 1171.443449][T13964] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1171.443500][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443529][T13964] ? css_rstat_updated+0x23a/0x530 [ 1171.443588][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443617][T13964] ? check_noncircular+0xda/0x150 [ 1171.443666][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443695][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443725][T13964] ? __lock_acquire+0x146e/0x2cf0 [ 1171.443791][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443825][T13964] ? do_raw_spin_lock+0x12b/0x2f0 [ 1171.443859][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443894][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.443930][T13964] ? do_raw_spin_unlock+0xf5/0x210 [ 1171.443957][T13964] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1171.443992][T13964] do_writepages+0x32e/0x550 [ 1171.444034][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.444068][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.444105][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.444136][T13964] ? do_raw_spin_unlock+0xf5/0x210 [ 1171.444170][T13964] filemap_fdatawrite+0x1e9/0x2f0 [ 1171.444215][T13964] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1171.444303][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.444337][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.444375][T13964] ? do_raw_spin_unlock+0xf5/0x210 [ 1171.444409][T13964] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1171.444468][T13964] f2fs_write_checkpoint+0x9df/0x26a0 [ 1171.444504][T13964] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 1171.444583][T13964] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1171.444619][T13964] ? update_load_avg+0x1b0/0x1ec0 [ 1171.444700][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.444731][T13964] ? down_write+0x16d/0x200 [ 1171.444762][T13964] ? __pfx_down_write+0x10/0x10 [ 1171.444787][T13964] ? uplift_priority+0xdb/0x730 [ 1171.444816][T13964] ? trace_sched_exit_tp+0x3a/0x150 [ 1171.444861][T13964] __write_checkpoint_sync+0x124/0x2b0 [ 1171.444896][T13964] ? __lock_acquire+0x6b5/0x2cf0 [ 1171.444945][T13964] ? __pfx___write_checkpoint_sync+0x10/0x10 [ 1171.445000][T13964] ? __pfx___schedule+0x10/0x10 [ 1171.445049][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.445092][T13964] __checkpoint_and_complete_reqs+0x53/0x2d0 [ 1171.445142][T13964] issue_checkpoint_thread+0xd6/0x280 [ 1171.445185][T13964] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 1171.445226][T13964] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1171.445255][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.445287][T13964] ? __kthread_parkme+0x7a/0x1f0 [ 1171.445324][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.445367][T13964] kthread+0x388/0x470 [ 1171.445393][T13964] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 1171.445430][T13964] ? __pfx_kthread+0x10/0x10 [ 1171.445458][T13964] ret_from_fork+0x51e/0xb90 [ 1171.445498][T13964] ? __pfx_ret_from_fork+0x10/0x10 [ 1171.445530][T13964] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.445559][T13964] ? __switch_to+0xc7d/0x1450 [ 1171.445595][T13964] ? __pfx_kthread+0x10/0x10 [ 1171.445624][T13964] ret_from_fork_asm+0x1a/0x30 [ 1171.445691][T13964] [ 1171.828032][T13977] loop3: detected capacity change from 0 to 4096 [ 1171.834593][T13964] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1171.850166][T13983] loop1: detected capacity change from 0 to 1024 [ 1172.123583][T31210] hfsplus: b-tree write err: -5, ino 25 [ 1172.130209][T31210] hfsplus: b-tree write err: -5, ino 4 [ 1172.146664][T31210] hfsplus: b-tree write err: -5, ino 2 [ 1172.213030][T31210] hfsplus: b-tree write err: -5, ino 17 [ 1172.309380][T14000] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1172.549857][T14003] loop6: detected capacity change from 0 to 4096 [ 1172.592784][T14003] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1172.737754][T14012] loop3: detected capacity change from 0 to 4096 [ 1172.785393][T14003] ntfs3(loop6): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22. [ 1172.947181][T14012] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1173.095537][ T13] ntfs3(loop6): ino=1e, ntfs3_write_inode failed, -22. [ 1173.116942][T14012] ntfs3(loop3): Failed to load $Extend (-22). [ 1173.116972][T14012] ntfs3(loop3): Failed to initialize $Extend. [ 1173.286811][T14038] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13995'. [ 1173.287548][T14038] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13995'. [ 1173.484797][T14051] loop5: detected capacity change from 0 to 512 [ 1174.076628][T14082] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.14005'. [ 1174.490340][T14093] loop0: detected capacity change from 0 to 4096 [ 1174.490582][T14091] loop4: detected capacity change from 0 to 4096 [ 1174.547442][T14093] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1174.558307][T14097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1174.601509][T14093] NILFS (loop0): mounting fs with errors [ 1174.682215][T14091] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1174.782893][T14071] loop6: detected capacity change from 0 to 32768 [ 1174.919747][T14071] ialloc: diAlloc returned -5! [ 1174.972299][T14108] comedi comedi3: pcl726: I/O port conflict (0x4f26,16) [ 1175.132706][T14079] loop3: detected capacity change from 0 to 32768 [ 1175.352591][ T5970] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1175.557094][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 1175.563464][T14135] loop6: detected capacity change from 0 to 256 [ 1175.597588][ T5970] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 1175.639524][ T5970] usb 5-1: config 127 has no interface number 0 [ 1175.645840][ T5970] usb 5-1: config 127 interface 124 has no altsetting 0 [ 1175.727003][T14135] FAT-fs (loop6): Directory bread(block 64) failed [ 1175.734793][ T5970] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1175.755442][T14135] FAT-fs (loop6): Directory bread(block 65) failed [ 1175.767616][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.794246][T14135] FAT-fs (loop6): Directory bread(block 66) failed [ 1175.807010][ T5970] usb 5-1: Product: syz [ 1175.815606][T14146] bridge_slave_1: invalid flags given to default FDB implementation [ 1175.819930][ T5970] usb 5-1: Manufacturer: syz [ 1175.833737][T14135] FAT-fs (loop6): Directory bread(block 67) failed [ 1175.853833][T14135] FAT-fs (loop6): Directory bread(block 68) failed [ 1175.865317][ T5970] usb 5-1: SerialNumber: syz [ 1175.900458][T14135] FAT-fs (loop6): Directory bread(block 69) failed [ 1175.936714][T14135] FAT-fs (loop6): Directory bread(block 70) failed [ 1175.973177][T14135] FAT-fs (loop6): Directory bread(block 71) failed [ 1176.012267][T14135] FAT-fs (loop6): Directory bread(block 72) failed [ 1176.018821][T14135] FAT-fs (loop6): Directory bread(block 73) failed [ 1176.240853][T14163] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1176.304453][T14163] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1176.316429][T14163] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.14023: Corrupt directory, running e2fsck is recommended [ 1176.363618][T14163] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1176.438247][T14163] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.14023: corrupted in-inode xattr: e_name out of bounds [ 1176.484934][T14163] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1176.485455][T14163] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.14023: couldn't read orphan inode 15 (err -117) [ 1176.494912][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1176.494947][ C0] EXT4-fs (loop1): initial error at time 1773311879: ext4_iget_extra_inode:5025: inode 15 [ 1176.494989][ C0] EXT4-fs (loop1): last error at time 1773311879: ext4_iget_extra_inode:5025: inode 15 [ 1176.560612][T14163] loop1: lost filesystem error report for type 5 error -117 [ 1176.565549][T14163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.622988][ T5970] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 1176.675224][T14163] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #2: comm syz.1.14023: corrupted xattr entries [ 1176.757396][T14191] netlink: 'syz.6.14030': attribute type 14 has an invalid length. [ 1176.781801][T14193] set_capacity_and_notify: 1 callbacks suppressed [ 1176.781822][T14193] loop0: detected capacity change from 0 to 256 [ 1176.802333][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.858588][ T5970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1176.870011][ T5970] usb 5-1: device firmware changed [ 1176.899404][T14193] FAT-fs (loop0): Directory bread(block 64) failed [ 1176.909181][T14193] FAT-fs (loop0): Directory bread(block 65) failed [ 1176.934967][T14193] FAT-fs (loop0): Directory bread(block 66) failed [ 1176.950232][T14193] FAT-fs (loop0): Directory bread(block 67) failed [ 1176.965198][T14193] FAT-fs (loop0): Directory bread(block 68) failed [ 1176.979688][T14193] FAT-fs (loop0): Directory bread(block 69) failed [ 1177.002475][ T5970] usb 5-1: USB disconnect, device number 97 [ 1177.022515][T14193] FAT-fs (loop0): Directory bread(block 70) failed [ 1177.042686][T14193] FAT-fs (loop0): Directory bread(block 71) failed [ 1177.087542][T14193] FAT-fs (loop0): Directory bread(block 72) failed [ 1177.134110][T14193] FAT-fs (loop0): Directory bread(block 73) failed [ 1177.189026][T14215] loop3: detected capacity change from 0 to 4096 [ 1177.289483][T14215] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1177.327278][T14215] ntfs3(loop3): ino=1a, mi_enum_attr [ 1177.332716][T14215] ntfs3(loop3): ino=1a, mi_enum_attr [ 1177.367695][T14215] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1177.814704][T14244] loop1: detected capacity change from 0 to 2048 [ 1177.849844][T14244] EXT4-fs: Ignoring removed i_version option [ 1177.881872][T14244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.956111][T14244] ext4 filesystem being mounted at /2407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.274523][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.628475][T14234] loop6: detected capacity change from 0 to 40427 [ 1178.659394][T14234] F2FS-fs (loop6): build fault injection rate: 174 [ 1178.679445][T14234] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 1178.742206][T14234] F2FS-fs (loop6): invalid crc value [ 1178.913217][T14310] loop1: detected capacity change from 0 to 256 [ 1179.090206][T14234] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1179.150772][T14234] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1179.275684][T14330] loop4: detected capacity change from 0 to 1024 [ 1179.420786][T14330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.441605][T14330] ext4 filesystem being mounted at /2237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.525734][ T30] audit: type=1326 audit(1773311882.277:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.0.14069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4a779c799 code=0x0 [ 1179.598994][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1179.834525][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14072'. [ 1180.243874][T14377] tipc: Started in network mode [ 1180.270231][T14377] tipc: Node identity 3, cluster identity 4711 [ 1180.277231][T14377] tipc: Node number set to 3 [ 1180.282890][T14377] tipc: Cannot configure node identity twice [ 1180.286047][T14383] loop6: detected capacity change from 0 to 256 [ 1180.310813][T14384] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14081'. [ 1180.321547][T14383] exfat: Deprecated parameter 'utf8' [ 1180.354388][T14383] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 1180.385288][ T30] audit: type=1800 audit(1773311883.180:2623): pid=14383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14071" name="file1" dev="loop6" ino=1048759 res=0 errno=0 [ 1180.663262][T14406] loop6: detected capacity change from 0 to 128 [ 1180.772706][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1180.831191][T14413] loop4: detected capacity change from 0 to 4096 [ 1180.891081][T14413] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1180.937303][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1180.959013][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.991915][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1181.040040][ T24] usb 4-1: config 1 has no interface number 0 [ 1181.062400][ T24] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1181.062612][T14413] ntfs3(loop4): ino=1a, mi_enum_attr [ 1181.106230][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1181.150501][T14413] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1181.172392][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1181.206326][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.247881][ T24] usb 4-1: Product: syz [ 1181.264666][ T24] usb 4-1: Manufacturer: syz [ 1181.284285][ T24] usb 4-1: SerialNumber: syz [ 1181.498851][T14391] loop5: detected capacity change from 0 to 32768 [ 1181.532708][T14391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.14084 (14391) [ 1181.606197][T14391] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1181.636356][T14391] BTRFS info (device loop5): using sha256 checksum algorithm [ 1181.715005][T14391] BTRFS info (device loop5): enabling ssd optimizations [ 1181.732188][T14391] BTRFS info (device loop5): turning on async discard [ 1181.772116][T14391] BTRFS info (device loop5): enabling free space tree [ 1181.800665][ T5970] usb 4-1: USB disconnect, device number 3 [ 1182.467497][ T5845] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1183.335301][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1183.486680][T14547] loop1: detected capacity change from 0 to 4096 [ 1183.554497][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1183.591645][ T24] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1183.637565][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.665903][ T24] usb 7-1: Product: syz [ 1183.680604][ T24] usb 7-1: Manufacturer: syz [ 1183.685234][ T24] usb 7-1: SerialNumber: syz [ 1183.731107][T14566] loop3: detected capacity change from 0 to 64 [ 1184.270611][ T24] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1184.279192][T14576] loop5: detected capacity change from 0 to 32768 [ 1184.314200][T14576] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1184.322508][T14576] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1184.356298][ T24] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1184.379027][ T24] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1184.436149][ T24] usb 7-1: USB disconnect, device number 14 [ 1184.439942][T14600] loop1: detected capacity change from 0 to 64 [ 1184.453365][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1184.479026][T14576] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1184.489461][T11784] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1184.496244][T11784] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1184.584185][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1184.622043][ T24] visor 7-1:1.0: device disconnected [ 1184.760375][T11784] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 277ms [ 1184.865735][T11784] gfs2: fsid=syz:syz.0: jid=0: Done [ 1184.878447][T14576] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1184.929995][T14576] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 8412 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1431 [ 1184.945241][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.5.14127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.945308][T14576] Tainted: [L]=SOFTLOCKUP [ 1184.945319][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.945334][T14576] Call Trace: [ 1184.945345][T14576] [ 1184.945356][T14576] dump_stack_lvl+0xe8/0x150 [ 1184.945398][T14576] gfs2_withdraw+0xc3/0x1b0 [ 1184.945443][T14576] gfs2_quota_init+0x10f8/0x1220 [ 1184.945504][T14576] ? __pfx_gfs2_quota_init+0x10/0x10 [ 1184.945540][T14576] ? __pfx_wake_up_bit+0x10/0x10 [ 1184.945579][T14576] ? inode_go_inval+0x2a0/0x360 [ 1184.945623][T14576] gfs2_make_fs_rw+0x143/0x230 [ 1184.945656][T14576] gfs2_fill_super+0x1ba5/0x21d0 [ 1184.945724][T14576] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1184.945764][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.945802][T14576] ? init_locking+0xb8/0x210 [ 1184.945842][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.945873][T14576] ? sb_set_blocksize+0x155/0x240 [ 1184.945918][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.945950][T14576] ? setup_bdev_super+0x4c1/0x5b0 [ 1184.945986][T14576] get_tree_bdev_flags+0x431/0x4f0 [ 1184.946020][T14576] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1184.946056][T14576] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1184.946080][T14576] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1184.946108][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946147][T14576] gfs2_get_tree+0x51/0x1e0 [ 1184.946192][T14576] vfs_get_tree+0x92/0x2a0 [ 1184.946223][T14576] do_new_mount+0x341/0xd30 [ 1184.946262][T14576] ? apparmor_capable+0x126/0x170 [ 1184.946321][T14576] ? __pfx_do_new_mount+0x10/0x10 [ 1184.946360][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946393][T14576] ? ns_capable+0x89/0xe0 [ 1184.946432][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946467][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946507][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946538][T14576] ? user_path_at+0xd4/0x160 [ 1184.946570][T14576] __se_sys_mount+0x31d/0x420 [ 1184.946621][T14576] ? __pfx___se_sys_mount+0x10/0x10 [ 1184.946660][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946701][T14576] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946733][T14576] ? __x64_sys_mount+0x20/0xc0 [ 1184.946778][T14576] do_syscall_64+0x14d/0xf80 [ 1184.946805][T14576] ? trace_irq_disable+0x3b/0x150 [ 1184.946849][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.946885][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.946912][T14576] RIP: 0033:0x7f037e39da0a [ 1184.946937][T14576] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.946960][T14576] RSP: 002b:00007f037f2b6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1184.946988][T14576] RAX: ffffffffffffffda RBX: 00007f037f2b6ee0 RCX: 00007f037e39da0a [ 1184.947009][T14576] RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007f037f2b6ea0 [ 1184.947029][T14576] RBP: 0000200000037f40 R08: 00007f037f2b6ee0 R09: 0000000003000094 [ 1184.947048][T14576] R10: 0000000003000094 R11: 0000000000000246 R12: 00002000000008c0 [ 1184.947067][T14576] R13: 00007f037f2b6ea0 R14: 0000000000037f5c R15: 0000200000000480 [ 1184.947108][T14576] [ 1184.947170][T14576] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 1185.098880][T14644] loop6: detected capacity change from 0 to 128 [ 1185.380100][T14644] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1185.512705][T14644] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.804754][T31348] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1186.076255][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14154'. [ 1186.137220][T14695] netlink: 145 bytes leftover after parsing attributes in process `syz.5.14154'. [ 1186.202021][T14704] netlink: 'syz.1.14155': attribute type 3 has an invalid length. [ 1186.276997][T14708] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14156'. [ 1186.552565][T14713] loop5: detected capacity change from 0 to 4096 [ 1186.626646][T14727] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1186.936684][T14742] loop4: detected capacity change from 0 to 1024 [ 1186.994460][T14742] hfsplus: bad catalog entry type [ 1187.140063][ T2927] hfsplus: b-tree write err: -5, ino 25 [ 1187.178939][ T2927] hfsplus: b-tree write err: -5, ino 4 [ 1187.221794][ T2927] hfsplus: b-tree write err: -5, ino 2 [ 1187.604024][ T5970] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1187.605557][T14784] loop6: detected capacity change from 0 to 64 [ 1187.677358][T14784] hfs: node is corrupted: leaf_head 11, leaf_tail 5 [ 1187.793887][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.831164][ T5970] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1187.869627][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.902706][ T5970] usb 5-1: config 0 descriptor?? [ 1187.909135][T14801] [U] k43°{}_âhM|Ú™T6½‰Ý¬÷eÜSçÎöÑ ‰+­Î,üs€/Ê‘úÏq%{­£q [ 1188.002678][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14184'. [ 1188.038485][T14809] netlink: 'syz.5.14185': attribute type 3 has an invalid length. [ 1188.086579][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14185'. [ 1188.184292][ T5970] usbhid 5-1:0.0: can't add hid device: -71 [ 1188.190367][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1188.224793][ T5970] usb 5-1: USB disconnect, device number 98 [ 1188.273605][T14815] loop0: detected capacity change from 0 to 2048 [ 1188.320625][T14771] loop3: detected capacity change from 0 to 32768 [ 1188.351491][T14771] BTRFS info: device /dev/loop3 (7:3) using temp-fsid e183e34e-3479-487b-95f1-d8f0c7e5946e [ 1188.368226][T14815] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1188.386953][T14771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14176 (14771) [ 1188.401773][T14815] UDF-fs: Scanning with blocksize 512 failed [ 1188.464751][T14815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1188.473953][T14771] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1188.521675][T14771] BTRFS info (device loop3): using crc32c checksum algorithm [ 1188.604246][T14834] syz.5.14190: attempt to access beyond end of device [ 1188.604246][T14834] mtdblock0: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=256 [ 1188.643991][T14791] loop1: detected capacity change from 0 to 32768 [ 1188.816961][T14771] BTRFS info (device loop3): enabling ssd optimizations [ 1188.863364][T14771] BTRFS info (device loop3): turning on async discard [ 1188.888694][T14771] BTRFS info (device loop3): enabling free space tree [ 1188.939821][T14864] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1189.133887][T14872] loop1: detected capacity change from 0 to 2048 [ 1189.261038][ T5838] BTRFS info (device loop3): last unmount of filesystem e183e34e-3479-487b-95f1-d8f0c7e5946e [ 1189.329153][T14872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.439537][T14872] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1189.619759][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.700188][ T6598] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1189.880696][ T6598] usb 5-1: Using ep0 maxpacket: 16 [ 1189.900539][ T6598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.939242][ T6598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.974117][ T6598] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1190.009631][ T6598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.051179][ T6598] usb 5-1: config 0 descriptor?? [ 1190.280386][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1190.459160][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.459803][ T6598] ntrig 0003:1B96:0008.0007: item fetching failed at offset 6/7 [ 1190.489269][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.517596][ T5909] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1190.518820][ T6598] ntrig 0003:1B96:0008.0007: parse failed [ 1190.551897][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.571300][ T6598] ntrig 0003:1B96:0008.0007: probe with driver ntrig failed with error -22 [ 1190.584558][ T5909] usb 4-1: config 0 descriptor?? [ 1190.751702][ T6598] usb 5-1: USB disconnect, device number 99 [ 1190.754309][T14957] loop1: detected capacity change from 0 to 128 [ 1190.789277][T14957] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1190.804381][T14957] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1190.986115][ T5909] hid-led 0003:27B8:01ED.0008: item fetching failed at offset 1/5 [ 1191.020570][ T13] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1191.035233][ T5909] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -22 [ 1191.176805][ T5909] usb 4-1: USB disconnect, device number 4 [ 1191.248403][ T30] audit: type=1326 audit(2000000010.655:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14996 comm="syz.6.14223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1191.356979][ T30] audit: type=1326 audit(2000000010.665:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14996 comm="syz.6.14223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1191.436216][T15004] loop1: detected capacity change from 0 to 256 [ 1191.442712][ T30] audit: type=1326 audit(2000000010.665:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14996 comm="syz.6.14223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1191.487881][T15004] FAT-fs (loop1): Directory bread(block 1285) failed [ 1191.499953][T15004] FAT-fs (loop1): Directory bread(block 1286) failed [ 1191.518161][T15004] FAT-fs (loop1): Directory bread(block 1287) failed [ 1191.552835][T15004] FAT-fs (loop1): Directory bread(block 1288) failed [ 1191.588864][T15004] FAT-fs (loop1): Directory bread(block 1285) failed [ 1191.597206][T15004] FAT-fs (loop1): Directory bread(block 1286) failed [ 1191.641169][T15004] FAT-fs (loop1): Directory bread(block 1287) failed [ 1191.649970][T15004] FAT-fs (loop1): Directory bread(block 1288) failed [ 1191.657462][T15016] FAT-fs (loop1): Directory bread(block 1285) failed [ 1191.694525][T15018] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14229'. [ 1191.697741][T15016] FAT-fs (loop1): Directory bread(block 1286) failed [ 1191.843165][T15021] xt_hashlimit: size too large, truncated to 1048576 [ 1192.133702][T14976] loop0: detected capacity change from 0 to 40427 [ 1192.189465][T14976] F2FS-fs (loop0): invalid crc value [ 1192.223188][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14234'. [ 1192.448201][T15048] loop6: detected capacity change from 0 to 16 [ 1192.502961][T15048] erofs (device loop6): mounted with root inode @ nid 36. [ 1192.550840][T14976] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1192.563169][T15012] loop4: detected capacity change from 0 to 32768 [ 1192.601369][T14976] F2FS-fs (loop0): Start checkpoint disabled! [ 1192.615630][T15012] (syz.4.14227,15012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1192.655927][T14976] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1192.680309][T15012] (syz.4.14227,15012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1192.698998][T14976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1192.738303][T15012] JBD2: Ignoring recovery information on journal [ 1192.956460][T15012] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1193.033100][ T2580] kworker/u8:12: attempt to access beyond end of device [ 1193.033100][ T2580] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1193.057976][ T2580] kworker/u8:12: attempt to access beyond end of device [ 1193.057976][ T2580] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 1193.058061][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1193.058093][ T2580] Tainted: [L]=SOFTLOCKUP [ 1193.058102][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.058118][ T2580] Workqueue: writeback wb_workfn (flush-7:0) [ 1193.058155][ T2580] Call Trace: [ 1193.058165][ T2580] [ 1193.058176][ T2580] dump_stack_lvl+0xe8/0x150 [ 1193.058220][ T2580] f2fs_handle_critical_error+0x37c/0x540 [ 1193.058257][ T2580] f2fs_write_end_io+0xcdb/0xff0 [ 1193.058314][ T2580] __submit_merged_bio+0x256/0x700 [ 1193.058386][ T2580] __submit_merged_write_cond+0x3c9/0x4e0 [ 1193.058430][ T2580] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1193.058479][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.058522][ T2580] f2fs_write_data_pages+0x2975/0x35e0 [ 1193.058560][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.058590][ T2580] ? lock_release+0x4b/0x3d0 [ 1193.058672][ T2580] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1193.058725][ T2580] ? rcu_is_watching+0x15/0xb0 [ 1193.058762][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.058832][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.058861][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1193.058900][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.058931][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1193.058985][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1193.059028][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.059087][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.059119][ T2580] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1193.059157][ T2580] do_writepages+0x32e/0x550 [ 1193.059206][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.059245][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.059279][ T2580] ? reacquire_held_locks+0x104/0x190 [ 1193.059319][ T2580] ? writeback_sb_inodes+0x477/0x1a20 [ 1193.059365][ T2580] __writeback_single_inode+0x133/0x11a0 [ 1193.059405][ T2580] ? do_raw_spin_unlock+0xf5/0x210 [ 1193.059440][ T2580] writeback_sb_inodes+0x992/0x1a20 [ 1193.059506][ T2580] ? unwind_next_frame+0xa5/0x23c0 [ 1193.059573][ T2580] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1193.059607][ T2580] ? do_raw_spin_lock+0x12b/0x2f0 [ 1193.059692][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.059723][ T2580] ? rcu_is_watching+0x15/0xb0 [ 1193.059761][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.059805][ T2580] wb_writeback+0x456/0xb70 [ 1193.059845][ T2580] ? queue_io+0x1d1/0x4a0 [ 1193.059893][ T2580] ? __pfx_wb_writeback+0x10/0x10 [ 1193.059925][ T2580] ? do_raw_spin_lock+0x12b/0x2f0 [ 1193.059976][ T2580] wb_workfn+0x414/0xf50 [ 1193.060011][ T2580] ? look_up_lock_class+0x57/0x110 [ 1193.060074][ T2580] ? __pfx_wb_workfn+0x10/0x10 [ 1193.060102][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060136][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060173][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060209][ T2580] ? do_raw_spin_unlock+0xf5/0x210 [ 1193.060241][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060272][ T2580] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1193.060318][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060353][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060387][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060422][ T2580] ? process_scheduled_works+0xa25/0x1830 [ 1193.060457][ T2580] ? process_scheduled_works+0xa25/0x1830 [ 1193.060496][ T2580] process_scheduled_works+0xb02/0x1830 [ 1193.060574][ T2580] ? __pfx_process_scheduled_works+0x10/0x10 [ 1193.060618][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060649][ T2580] ? assign_work+0x3d5/0x5e0 [ 1193.060692][ T2580] worker_thread+0xa50/0xfc0 [ 1193.060755][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060800][ T2580] kthread+0x388/0x470 [ 1193.060827][ T2580] ? __pfx_worker_thread+0x10/0x10 [ 1193.060861][ T2580] ? __pfx_kthread+0x10/0x10 [ 1193.060889][ T2580] ret_from_fork+0x51e/0xb90 [ 1193.060926][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.060959][ T2580] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.060992][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1193.061021][ T2580] ? __switch_to+0xc7d/0x1450 [ 1193.061057][ T2580] ? __pfx_kthread+0x10/0x10 [ 1193.061085][ T2580] ret_from_fork_asm+0x1a/0x30 [ 1193.061149][ T2580] [ 1193.064797][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.085782][ T2580] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1193.379406][ T5844] ocfs2: Unmounting device (7,4) on (node local) [ 1193.818243][T15117] loop6: detected capacity change from 0 to 128 [ 1194.216199][T15127] loop4: detected capacity change from 0 to 4096 [ 1194.311444][T15147] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1194.508912][ T6598] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1194.508933][T15152] loop6: detected capacity change from 0 to 2048 [ 1194.515005][T15152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.709094][ T6598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.717900][ T6598] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1194.717936][ T6598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.717963][ T6598] usb 6-1: Product: syz [ 1194.717983][ T6598] usb 6-1: Manufacturer: syz [ 1194.718003][ T6598] usb 6-1: SerialNumber: syz [ 1194.725715][ T6598] usb 6-1: config 0 descriptor?? [ 1194.735557][ T6598] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1194.950402][T15166] loop0: detected capacity change from 0 to 8192 [ 1195.077215][T15186] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 1195.337018][ T6598] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1195.376232][ T6598] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1195.419513][ T6598] usb 6-1: USB disconnect, device number 17 [ 1195.479434][ T30] audit: type=1326 audit(2000000015.096:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.4.14275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e4899c799 code=0x0 [ 1195.710863][T15227] netlink: 'syz.3.14281': attribute type 10 has an invalid length. [ 1195.748448][T15227] netlink: 'syz.3.14281': attribute type 10 has an invalid length. [ 1195.960810][T15240] syz.3.14284: attempt to access beyond end of device [ 1195.960810][T15240] mtdblock0: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=256 [ 1195.987256][T15242] loop5: detected capacity change from 0 to 256 [ 1196.040700][T15242] FAT-fs (loop5): Directory bread(block 64) failed [ 1196.059896][T15242] FAT-fs (loop5): Directory bread(block 65) failed [ 1196.160577][T15242] FAT-fs (loop5): Directory bread(block 66) failed [ 1196.202406][T15242] FAT-fs (loop5): Directory bread(block 67) failed [ 1196.237028][T15242] FAT-fs (loop5): Directory bread(block 68) failed [ 1196.287988][T15242] FAT-fs (loop5): Directory bread(block 69) failed [ 1196.309099][T15242] FAT-fs (loop5): Directory bread(block 70) failed [ 1196.332487][T15242] FAT-fs (loop5): Directory bread(block 71) failed [ 1196.376270][T15242] FAT-fs (loop5): Directory bread(block 72) failed [ 1196.412365][T15242] FAT-fs (loop5): Directory bread(block 73) failed [ 1197.034119][T15288] loop3: detected capacity change from 0 to 512 [ 1197.119910][T15288] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.14298: Directory hole found for htree index block 0 [ 1197.139071][T15288] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1197.140015][T15288] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1197.149289][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1197.149313][ C0] EXT4-fs (loop3): initial error at time 2000000016: dx_probe:791: inode 2 [ 1197.149350][ C0] EXT4-fs (loop3): last error at time 2000000016: dx_probe:791: inode 2 [ 1197.184915][T15288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.293448][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.362282][T15305] netlink: 'syz.5.14302': attribute type 10 has an invalid length. [ 1197.393401][T15305] batadv0: left promiscuous mode [ 1197.419273][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.444251][T15310] loop0: detected capacity change from 0 to 2048 [ 1197.481417][T15305] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1197.513028][T15310] loop0: p4 < > [ 1197.573534][T15326] loop6: detected capacity change from 0 to 256 [ 1197.710583][T15332] loop0: detected capacity change from 0 to 128 [ 1197.745450][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1198.222717][T15280] loop1: detected capacity change from 0 to 32768 [ 1198.291458][T15280] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1198.435501][T15280] XFS (loop1): Ending clean mount [ 1198.464891][T15280] XFS (loop1): Quotacheck needed: Please wait. [ 1198.488569][ T30] audit: type=1326 audit(2000000018.256:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1198.510096][T15280] XFS (loop1): Quotacheck: Done. [ 1198.649691][ T30] audit: type=1326 audit(2000000018.256:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1198.737686][ T30] audit: type=1326 audit(2000000018.319:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe72b19c799 code=0x7ffc0000 [ 1198.824195][T15388] set_capacity_and_notify: 1 callbacks suppressed [ 1198.824218][T15388] loop4: detected capacity change from 0 to 64 [ 1198.839970][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1198.856887][ T30] audit: type=1326 audit(2000000018.319:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe72b19c502 code=0x7ffc0000 [ 1198.881659][ T30] audit: type=1326 audit(2000000018.319:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe72b15cfce code=0x7ffc0000 [ 1198.904592][ T30] audit: type=1326 audit(2000000018.319:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe72b19c5c7 code=0x7ffc0000 [ 1198.948168][T15324] loop3: detected capacity change from 0 to 40427 [ 1198.994630][ T30] audit: type=1326 audit(2000000018.340:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe72b15cfce code=0x7ffc0000 [ 1199.069200][ T30] audit: type=1326 audit(2000000018.340:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe72b19c42b code=0x7ffc0000 [ 1199.069564][T15324] F2FS-fs (loop3): invalid crc value [ 1199.095567][ T30] audit: type=1326 audit(2000000018.340:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe72b15cfce code=0x7ffc0000 [ 1199.217374][ T30] audit: type=1326 audit(2000000018.340:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.14316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe72b15cfce code=0x7ffc0000 [ 1199.404102][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14327'. [ 1199.578683][T15324] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1199.653251][T15324] F2FS-fs (loop3): Start checkpoint disabled! [ 1199.710115][T15324] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1199.746394][T15324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1200.291611][T15451] loop5: detected capacity change from 0 to 2048 [ 1200.327854][T15451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.740514][T15470] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14344'. [ 1200.770910][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14338'. [ 1200.786847][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14346'. [ 1201.126509][T15495] loop5: detected capacity change from 0 to 1024 [ 1201.140279][T15495] EXT4-fs: Ignoring removed nobh option [ 1201.145999][T15495] EXT4-fs: Ignoring removed bh option [ 1201.146065][T24057] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1201.165272][T24057] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1201.173524][T24057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1201.184646][T24057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1201.192421][T24057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1201.283897][T15495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.298618][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1201.308293][T15490] loop1: detected capacity change from 0 to 8192 [ 1201.320743][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1201.328284][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1201.337328][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1201.345316][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1201.477165][ T2927] bridge_slave_0: left allmulticast mode [ 1201.496090][ T2927] bridge_slave_0: left promiscuous mode [ 1201.503659][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.595838][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.645424][T15569] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1202.065346][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14357'. [ 1202.228144][T15592] loop6: detected capacity change from 0 to 2048 [ 1202.248015][T15593] loop5: detected capacity change from 0 to 1024 [ 1202.308816][T15593] EXT4-fs (loop5): stripe (89) is not aligned with cluster size (16), stripe is disabled [ 1202.321727][T15592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1202.467149][T15593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1202.505322][T15593] ext4 filesystem being mounted at /2359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.528382][T15593] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.14360: lblock 3 mapped to illegal pblock 3 (length 2) [ 1202.599898][ T2580] [ 1202.602360][ T2580] ====================================================== [ 1202.609372][ T2580] WARNING: possible circular locking dependency detected [ 1202.616393][ T2580] syzkaller #0 Tainted: G L [ 1202.622369][ T2580] ------------------------------------------------------ [ 1202.629468][ T2580] kworker/u8:12/2580 is trying to acquire lock: [ 1202.633830][T15593] EXT4-fs (loop5): Remounting filesystem read-only [ 1202.635694][ T2580] ffff888011a45720 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1202.635776][ T2580] [ 1202.635776][ T2580] but task is already holding lock: [ 1202.635786][ T2580] ffff888084fa0b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1202.669674][ T2580] [ 1202.669674][ T2580] which lock already depends on the new lock. [ 1202.669674][ T2580] [ 1202.680109][ T2580] [ 1202.680109][ T2580] the existing dependency chain (in reverse order) is: [ 1202.689118][ T2580] [ 1202.689118][ T2580] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1202.697567][ T2580] percpu_down_read_internal+0x48/0x1c0 [ 1202.703839][ T2580] ext4_writepages+0x205/0x3b0 [ 1202.709229][ T2580] do_writepages+0x32e/0x550 [ 1202.714357][ T2580] __writeback_single_inode+0x133/0x11a0 [ 1202.720539][ T2580] writeback_single_inode+0x4ac/0xdc0 [ 1202.726433][ T2580] write_inode_now+0x1c2/0x290 [ 1202.731716][ T2580] iput+0x8c1/0xe80 [ 1202.736069][ T2580] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1202.741986][ T2580] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1202.748425][ T2580] __ext4_expand_extra_isize+0x30d/0x400 [ 1202.754605][ T2580] __ext4_mark_inode_dirty+0x45c/0x730 [ 1202.760607][ T2580] ext4_evict_inode+0x7a1/0xeb0 [ 1202.765999][ T2580] evict+0x61e/0xb10 [ 1202.770421][ T2580] ext4_orphan_cleanup+0xc38/0x1470 [ 1202.776136][ T2580] ext4_fill_super+0x59ff/0x6320 [ 1202.781688][ T2580] get_tree_bdev_flags+0x431/0x4f0 [ 1202.787325][ T2580] vfs_get_tree+0x92/0x2a0 [ 1202.792267][ T2580] do_new_mount+0x341/0xd30 [ 1202.797299][ T2580] __se_sys_mount+0x31d/0x420 [ 1202.802853][ T2580] do_syscall_64+0x14d/0xf80 [ 1202.807965][ T2580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.814463][ T2580] [ 1202.814463][ T2580] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1202.822027][ T2580] __lock_acquire+0x15a5/0x2cf0 [ 1202.827665][ T2580] lock_acquire+0xf0/0x2e0 [ 1202.832605][ T2580] down_write+0x96/0x200 [ 1202.837393][ T2580] ext4_destroy_inline_data+0x28/0xe0 [ 1202.843485][ T2580] ext4_do_writepages+0x51e/0x46e0 [ 1202.849122][ T2580] ext4_writepages+0x241/0x3b0 [ 1202.854410][ T2580] do_writepages+0x32e/0x550 [ 1202.859523][ T2580] __writeback_single_inode+0x133/0x11a0 [ 1202.865680][ T2580] writeback_sb_inodes+0x992/0x1a20 [ 1202.871402][ T2580] wb_writeback+0x456/0xb70 [ 1202.876419][ T2580] wb_workfn+0x414/0xf50 [ 1202.881223][ T2580] process_scheduled_works+0xb02/0x1830 [ 1202.887289][ T2580] worker_thread+0xa50/0xfc0 [ 1202.892399][ T2580] kthread+0x388/0x470 [ 1202.896979][ T2580] ret_from_fork+0x51e/0xb90 [ 1202.902089][ T2580] ret_from_fork_asm+0x1a/0x30 [ 1202.907376][ T2580] [ 1202.907376][ T2580] other info that might help us debug this: [ 1202.907376][ T2580] [ 1202.917858][ T2580] Possible unsafe locking scenario: [ 1202.917858][ T2580] [ 1202.925310][ T2580] CPU0 CPU1 [ 1202.930754][ T2580] ---- ---- [ 1202.936106][ T2580] rlock(&sbi->s_writepages_rwsem); [ 1202.941397][ T2580] lock(&ei->xattr_sem); [ 1202.948262][ T2580] lock(&sbi->s_writepages_rwsem); [ 1202.956169][ T2580] lock(&ei->xattr_sem); [ 1202.960504][ T2580] [ 1202.960504][ T2580] *** DEADLOCK *** [ 1202.960504][ T2580] [ 1202.968638][ T2580] 3 locks held by kworker/u8:12/2580: [ 1202.973996][ T2580] #0: ffff88801f6f6148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1202.985260][ T2580] #1: ffffc9001fcafc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1202.997992][ T2580] #2: ffff888084fa0b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1203.008481][ T2580] [ 1203.008481][ T2580] stack backtrace: [ 1203.014583][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.014626][ T2580] Tainted: [L]=SOFTLOCKUP [ 1203.014638][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1203.014660][ T2580] Workqueue: writeback wb_workfn (flush-7:6) [ 1203.014702][ T2580] Call Trace: [ 1203.014715][ T2580] [ 1203.014727][ T2580] dump_stack_lvl+0xe8/0x150 [ 1203.014768][ T2580] print_circular_bug+0x2e1/0x300 [ 1203.014817][ T2580] check_noncircular+0x12e/0x150 [ 1203.014867][ T2580] __lock_acquire+0x15a5/0x2cf0 [ 1203.014916][ T2580] ? do_raw_spin_lock+0x12b/0x2f0 [ 1203.014950][ T2580] lock_acquire+0xf0/0x2e0 [ 1203.014985][ T2580] ? ext4_destroy_inline_data+0x28/0xe0 [ 1203.015031][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015082][ T2580] down_write+0x96/0x200 [ 1203.015113][ T2580] ? ext4_destroy_inline_data+0x28/0xe0 [ 1203.015158][ T2580] ? __pfx_down_write+0x10/0x10 [ 1203.015190][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015230][ T2580] ext4_destroy_inline_data+0x28/0xe0 [ 1203.015294][ T2580] ext4_do_writepages+0x51e/0x46e0 [ 1203.015330][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015363][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.015408][ T2580] ? unwind_next_frame+0xa5/0x23c0 [ 1203.015458][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015495][ T2580] ? unwind_next_frame+0xa5/0x23c0 [ 1203.015540][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015576][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015610][ T2580] ? look_up_lock_class+0x57/0x110 [ 1203.015657][ T2580] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1203.015690][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015723][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.015765][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015798][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.015839][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015873][ T2580] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.015914][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015953][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.015990][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016029][ T2580] ext4_writepages+0x241/0x3b0 [ 1203.016071][ T2580] ? __pfx_ext4_writepages+0x10/0x10 [ 1203.016109][ T2580] ? unwind_next_frame+0xa5/0x23c0 [ 1203.016160][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016196][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016231][ T2580] ? do_raw_spin_unlock+0xf5/0x210 [ 1203.016261][ T2580] ? __pfx_ext4_writepages+0x10/0x10 [ 1203.016300][ T2580] do_writepages+0x32e/0x550 [ 1203.016334][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016363][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016390][ T2580] ? reacquire_held_locks+0x104/0x190 [ 1203.016424][ T2580] ? writeback_sb_inodes+0x477/0x1a20 [ 1203.016458][ T2580] __writeback_single_inode+0x133/0x11a0 [ 1203.016491][ T2580] ? do_raw_spin_unlock+0xf5/0x210 [ 1203.016516][ T2580] writeback_sb_inodes+0x992/0x1a20 [ 1203.016557][ T2580] ? unwind_next_frame+0xa5/0x23c0 [ 1203.016595][ T2580] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1203.016631][ T2580] ? do_raw_spin_lock+0x12b/0x2f0 [ 1203.016679][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016709][ T2580] ? rcu_is_watching+0x15/0xb0 [ 1203.016744][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.016779][ T2580] wb_writeback+0x456/0xb70 [ 1203.016815][ T2580] ? queue_io+0x1d1/0x4a0 [ 1203.016848][ T2580] ? __pfx_wb_writeback+0x10/0x10 [ 1203.016877][ T2580] ? do_raw_spin_lock+0x12b/0x2f0 [ 1203.016908][ T2580] wb_workfn+0x414/0xf50 [ 1203.016933][ T2580] ? look_up_lock_class+0x57/0x110 [ 1203.016976][ T2580] ? __pfx_wb_workfn+0x10/0x10 [ 1203.016999][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017027][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017056][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017083][ T2580] ? do_raw_spin_unlock+0xf5/0x210 [ 1203.017107][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017133][ T2580] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1203.017170][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017198][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017225][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017253][ T2580] ? process_scheduled_works+0xa25/0x1830 [ 1203.017287][ T2580] ? process_scheduled_works+0xa25/0x1830 [ 1203.017317][ T2580] process_scheduled_works+0xb02/0x1830 [ 1203.017362][ T2580] ? __pfx_process_scheduled_works+0x10/0x10 [ 1203.017395][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017421][ T2580] ? assign_work+0x3d5/0x5e0 [ 1203.017452][ T2580] worker_thread+0xa50/0xfc0 [ 1203.017492][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017523][ T2580] kthread+0x388/0x470 [ 1203.017545][ T2580] ? __pfx_worker_thread+0x10/0x10 [ 1203.017574][ T2580] ? __pfx_kthread+0x10/0x10 [ 1203.017602][ T2580] ret_from_fork+0x51e/0xb90 [ 1203.017635][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017662][ T2580] ? __pfx_ret_from_fork+0x10/0x10 [ 1203.017691][ T2580] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1203.017717][ T2580] ? __switch_to+0xc7d/0x1450 [ 1203.017744][ T2580] ? __pfx_kthread+0x10/0x10 [ 1203.017766][ T2580] ret_from_fork_asm+0x1a/0x30 [ 1203.017810][ T2580] [ 1203.546126][ T5850] Bluetooth: hci1: command tx timeout [ 1203.552600][ T2580] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1203.567492][ T2580] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1203.582057][ T2580] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1203.582057][ T2580] [ 1203.591933][ T2580] EXT4-fs (loop6): Total free blocks count 0 [ 1203.598142][ T2580] EXT4-fs (loop6): Free/Dirty block details [ 1203.604107][ T2580] EXT4-fs (loop6): free_blocks=4096 [ 1203.609333][ T2580] EXT4-fs (loop6): dirty_blocks=512 [ 1203.614799][ T2580] EXT4-fs (loop6): Block reservation details [ 1203.620977][ T2580] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 1203.635773][ T2573] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 1203.665650][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1203.819106][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.828757][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.838666][ T2927] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1203.847456][ T2927] bond0 (unregistering): Released all slaves [ 1203.857089][ T2927] bond1 (unregistering): Released all slaves [ 1203.884332][T15497] vxcan1 speed is unknown, defaulting to 1000 [ 1204.028516][T15497] wlan0 speed is unknown, defaulting to 1000 [ 1204.039508][T15497] lo speed is unknown, defaulting to 1000 [ 1204.362373][T15497] chnl_net:caif_netlink_parms(): no params data found [ 1204.470672][T15497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.478609][T15497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.486236][T15497] bridge_slave_0: entered allmulticast mode [ 1204.493695][T15497] bridge_slave_0: entered promiscuous mode [ 1204.502980][T15497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.510103][T15497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.517720][T15497] bridge_slave_1: entered allmulticast mode [ 1204.524811][T15497] bridge_slave_1: entered promiscuous mode [ 1204.572713][T15497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.599370][T15497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.693071][T15497] team0: Port device team_slave_0 added [ 1204.719595][T15497] team0: Port device team_slave_1 added [ 1204.790467][ T2927] hsr_slave_0: left promiscuous mode [ 1204.797708][ T2927] hsr_slave_1: left promiscuous mode [ 1204.812840][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.822826][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.973920][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 1204.995540][ T2927] team0 (unregistering): Port device C removed [ 1205.043631][ T2580] smc: removing ib device syz2 [ 1205.112844][T15497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.120056][T15497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.169605][T15497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.188823][T15497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.215841][T15497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.273266][T15497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.406757][T15497] hsr_slave_0: entered promiscuous mode [ 1205.413166][T15497] hsr_slave_1: entered promiscuous mode [ 1205.424106][T15497] debugfs: 'hsr0' already exists in 'hsr' [ 1205.430039][T15497] Cannot create hsr debugfs directory [ 1205.492241][ T5850] Bluetooth: hci1: command tx timeout [ 1205.856204][T15497] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1205.876162][T15497] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1205.894625][T15497] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1205.914959][T15497] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1206.057881][T15497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.078242][T15497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.093911][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.101050][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.115867][ T2580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.123019][ T2580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.329764][T15497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.580804][T15497] veth0_vlan: entered promiscuous mode [ 1206.595446][T15497] veth1_vlan: entered promiscuous mode [ 1206.629056][T15497] veth0_macvtap: entered promiscuous mode [ 1206.641699][T15497] veth1_macvtap: entered promiscuous mode [ 1206.659320][T15497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.669926][T15497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.688097][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.699250][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.708823][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.722254][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.754229][T15497] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 1206.785743][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.787852][T15497] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 1206.810543][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.839760][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.849326][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.463557][ T5850] Bluetooth: hci1: command tx timeout [ 1209.445601][ T5850] Bluetooth: hci1: command tx timeout