last executing test programs: 9m8.346462032s ago: executing program 2 (id=1687): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0xff, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @loopback, 0xffffffff}}]}, 0x38}}, 0x4000000) 9m8.161441417s ago: executing program 2 (id=1692): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xcd, 0x0, 0x5c) 9m7.965140431s ago: executing program 2 (id=1696): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000340)={0x400007f5, 0x3500000, 0x100082}, 0xc) 9m7.760103617s ago: executing program 2 (id=1700): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 9m7.369640137s ago: executing program 2 (id=1707): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) 9m6.718028014s ago: executing program 2 (id=1717): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x1, 0x1}, 0x10}, 0x94) 9m6.218857716s ago: executing program 32 (id=1717): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x1, 0x1}, 0x10}, 0x94) 4.838803107s ago: executing program 0 (id=8898): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d40)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000100000004000480080002000100000008000100000000000400088048010cc054000b8008"], 0x174}}, 0x0) 4.688395671s ago: executing program 0 (id=8900): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = open(&(0x7f0000000100)='mnt\x00', 0x143142, 0xa2) read$FUSE(r0, &(0x7f0000004480)={0x2020}, 0x2020) 3.346526735s ago: executing program 0 (id=8915): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 3.019822063s ago: executing program 0 (id=8919): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300), 0x4) 2.865168187s ago: executing program 3 (id=8922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0x4c0d0) 2.808129889s ago: executing program 3 (id=8924): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000040)={[{@errors_remount}, {@errors_continue}, {}, {@keep_last_dots}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fmask={'fmask', 0x3d, 0x3}}, {@utf8}, {@gid}, {@keep_last_dots}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.74519887s ago: executing program 0 (id=8925): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x2, 0x4}}}, 0x118) 2.531088556s ago: executing program 0 (id=8928): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) 2.36602889s ago: executing program 3 (id=8930): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x1) 2.216952414s ago: executing program 3 (id=8933): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.039351108s ago: executing program 1 (id=8936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 1.96143282s ago: executing program 1 (id=8937): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 1.862331073s ago: executing program 1 (id=8938): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 1.057830293s ago: executing program 3 (id=8940): unshare(0x8040480) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 900.700707ms ago: executing program 4 (id=8941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf251a000000070021"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) 762.035651ms ago: executing program 3 (id=8942): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) connect$bt_sco(r0, &(0x7f0000000240)={0x1f, @none}, 0x8) 558.046426ms ago: executing program 4 (id=8943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 420.573169ms ago: executing program 4 (id=8944): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0xa0880c, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x5, 0x2e2, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) 269.381163ms ago: executing program 1 (id=8945): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 229.093574ms ago: executing program 4 (id=8946): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 152.229456ms ago: executing program 1 (id=8947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 134.969466ms ago: executing program 4 (id=8948): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) 47.347488ms ago: executing program 1 (id=8949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) 0s ago: executing program 4 (id=8950): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001a00210f29bd7000fadbdf251c000000ff"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x24880) kernel console output (not intermixed with test programs): T969] netlink: 'syz.0.7537': attribute type 8 has an invalid length. [ 641.702019][ T978] loop3: detected capacity change from 0 to 64 [ 641.778139][ T978] Trying to free block not in datazone [ 641.824879][ T985] netlink: 'syz.4.7542': attribute type 6 has an invalid length. [ 642.064935][ T994] loop3: detected capacity change from 0 to 512 [ 642.074399][ T958] loop1: detected capacity change from 0 to 32768 [ 642.165530][ T958] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 642.182196][ T994] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 642.211446][ T994] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 642.224513][ T994] System zones: 0-1, 15-15, 18-18, 34-34 [ 642.232808][ T994] EXT4-fs (loop3): orphan cleanup on readonly fs [ 642.243284][ T994] __quota_error: 5 callbacks suppressed [ 642.243297][ T994] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 642.261813][ T994] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 642.281342][ T994] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 642.297458][ T994] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.7544: bad orphan inode 16 [ 642.344379][ T994] ext4_test_bit(bit=15, block=18) = 1 [ 642.350114][ T994] is_bad_inode(inode)=0 [ 642.354417][ T994] NEXT_ORPHAN(inode)=0 [ 642.358595][ T994] max_ino=32 [ 642.361927][ T994] i_nlink=2 [ 642.373191][ T994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.455966][ T958] XFS (loop1): Ending clean mount [ 642.482209][ T994] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 642.561611][ T958] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 642.601536][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.784003][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 642.829091][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7553'. [ 643.633882][ T1096] loop3: detected capacity change from 0 to 1024 [ 643.775754][ T173] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 643.992767][ T173] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 644.015764][ T173] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 644.040736][ T173] usb 5-1: Product: syz [ 644.055002][ T173] usb 5-1: SerialNumber: syz [ 644.087108][ T173] usb 5-1: config 0 descriptor?? [ 644.327145][ T173] hso 5-1:0.0: Failed to find BULK IN ep [ 644.422338][ T1146] ieee802154 phy1 wpan1: encryption failed: -22 [ 644.465715][ T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 644.559828][ T173] usb 5-1: USB disconnect, device number 41 [ 644.669090][ T8] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 644.688414][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.719867][ T8] usb 4-1: config 0 descriptor?? [ 644.732225][ T8] gspca_main: spca505-2.14.0 probing 0733:0430 [ 644.939054][ T1177] loop0: detected capacity change from 0 to 4096 [ 645.164568][ T8] gspca_spca505: reg write: error -71 [ 645.205899][ T8] spca505: probe of 4-1:0.0 failed with error -5 [ 645.242732][ T8] usb 4-1: USB disconnect, device number 46 [ 645.438607][ T1211] dlm: no locking on control device [ 645.609774][ T1224] netlink: 'syz.4.7597': attribute type 1 has an invalid length. [ 645.806201][ T1233] loop0: detected capacity change from 0 to 1024 [ 645.905430][ T1233] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 645.929625][ T1233] syz.0.7600: attempt to access beyond end of device [ 645.929625][ T1233] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 645.974945][ T1233] Buffer I/O error on dev loop0, logical block 458752, async page read [ 646.006010][ T1233] syz.0.7600: attempt to access beyond end of device [ 646.006010][ T1233] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 646.064228][ T1233] Buffer I/O error on dev loop0, logical block 458752, async page read [ 646.411940][ T1268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7611'. [ 646.608443][ T1281] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7613'. [ 646.806535][ T5814] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 646.985993][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 647.004019][ T5814] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.020601][ T5814] usb 4-1: config 0 has no interface number 0 [ 647.029498][ T5814] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 647.043406][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.055293][ T5814] usb 4-1: Product: syz [ 647.055312][ T5814] usb 4-1: Manufacturer: syz [ 647.055327][ T5814] usb 4-1: SerialNumber: syz [ 647.074875][ T5814] usb 4-1: config 0 descriptor?? [ 647.293332][ T5814] usb 4-1: selecting invalid altsetting 1 [ 647.293360][ T5814] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 647.293438][ T5814] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 647.293530][ T5814] speedtch: probe of 4-1:0.1 failed with error -22 [ 647.304989][ T5814] usb 4-1: USB disconnect, device number 47 [ 647.929933][ T1353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7633'. [ 647.959063][ T1353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7633'. [ 648.359634][ T1380] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 648.458365][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7645'. [ 648.971482][ T28] audit: type=1326 audit(1785755669.707:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.0.7654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311db9e019 code=0x7ffc0000 [ 649.050443][ T28] audit: type=1326 audit(1785755669.727:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.0.7654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311db9e019 code=0x7ffc0000 [ 649.143438][ T28] audit: type=1326 audit(1785755669.737:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.0.7654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f311db9e019 code=0x7ffc0000 [ 649.192848][ T1421] RGB/YUV Input: ================= START STATUS ================= [ 649.202953][ T1421] RGB/YUV Input: Test Pattern: 75% Colorbar [ 649.223872][ T28] audit: type=1326 audit(1785755669.737:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1414 comm="syz.0.7654" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311db9e019 code=0x7ffc0000 [ 649.227826][ T1421] RGB/YUV Input: Show Information: All [ 649.310895][ T1421] RGB/YUV Input: Vertical Flip: false [ 649.323894][ T1421] RGB/YUV Input: Horizontal Flip: false [ 649.345952][ T1421] RGB/YUV Input: Brightness: 128 [ 649.371323][ T1421] RGB/YUV Input: Contrast: 128 [ 649.391576][ T1421] RGB/YUV Input: Hue: 0 [ 649.401733][ T1421] RGB/YUV Input: Saturation: 128 [ 649.411866][ T1421] RGB/YUV Input: ================== END STATUS ================== [ 649.424484][ T1400] loop1: detected capacity change from 0 to 32768 [ 649.573599][ T1407] loop3: detected capacity change from 0 to 32768 [ 649.674182][ T1407] JBD2: Ignoring recovery information on journal [ 649.852032][ T1439] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 649.869800][ T1407] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 650.090154][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 650.156035][ T8] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 650.279032][ T28] audit: type=1326 audit(1785755671.017:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1460 comm="syz.1.7666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5ff9e019 code=0x7ffc0000 [ 650.340891][ T28] audit: type=1326 audit(1785755671.017:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1460 comm="syz.1.7666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5ff9e019 code=0x7ffc0000 [ 650.386940][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 650.399265][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 650.414199][ T28] audit: type=1326 audit(1785755671.037:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1460 comm="syz.1.7666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5ff9e019 code=0x7ffc0000 [ 650.452095][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 650.466637][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.476448][ T28] audit: type=1326 audit(1785755671.037:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1460 comm="syz.1.7666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5ff9e019 code=0x7ffc0000 [ 650.501885][ T1466] loop0: detected capacity change from 0 to 256 [ 650.512037][ T28] audit: type=1326 audit(1785755671.047:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1460 comm="syz.1.7666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7feb5ff9e019 code=0x7ffc0000 [ 650.538954][ T1466] exfat: Deprecated parameter 'utf8' [ 650.545455][ T1443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 650.568754][ T8] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 650.581964][ T1466] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 650.651051][ T28] audit: type=1326 audit(1785755671.047:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1460 comm="syz.1.7666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb5ff9e019 code=0x7ffc0000 [ 650.663809][ T1479] IPVS: Error joining to the multicast group [ 651.002954][ T1501] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7673'. [ 651.033760][ T1501] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 651.165967][T28963] usb 5-1: USB disconnect, device number 42 [ 651.547926][ T5814] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 651.698113][ T1553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7684'. [ 651.769641][ T5814] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 651.805770][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.863477][ T5814] usb 4-1: config 0 descriptor?? [ 651.882512][ T5814] cp210x 4-1:0.0: cp210x converter detected [ 652.165998][ T23] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 652.199177][ T1580] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1580] [ 652.280918][ T1583] loop1: detected capacity change from 0 to 128 [ 652.313044][ T5814] usb 4-1: cp210x converter now attached to ttyUSB0 [ 652.336168][ T5814] usb 4-1: USB disconnect, device number 48 [ 652.359360][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 652.386392][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 652.404663][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 652.416150][ T5814] cp210x 4-1:0.0: device disconnected [ 652.434804][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 652.466668][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 652.492949][ T23] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 652.516219][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.525317][ T23] usb 5-1: Product: syz [ 652.535812][ T23] usb 5-1: Manufacturer: syz [ 652.540463][ T23] usb 5-1: SerialNumber: syz [ 652.563478][ T23] usb 5-1: config 0 descriptor?? [ 652.583221][ T23] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 652.602656][ T1605] loop1: detected capacity change from 0 to 1764 [ 652.874057][ T23] ums-isd200: probe of 5-1:0.0 failed with error -22 [ 653.065415][ T23] usb 5-1: USB disconnect, device number 43 [ 653.524628][ T1647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7702'. [ 653.547401][ T1647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.568495][ T1632] loop1: detected capacity change from 0 to 32768 [ 653.596840][ T1632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7699 (1632) [ 653.651674][ T1632] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.695283][ T1632] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 653.737738][ T1632] BTRFS info (device loop1): using free space tree [ 653.825818][ T1668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7704'. [ 653.834863][ T1668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7704'. [ 653.870099][ T1632] BTRFS info (device loop1): enabling ssd optimizations [ 653.894426][ T1632] BTRFS info (device loop1): auto enabling async discard [ 653.921404][ T1656] loop3: detected capacity change from 0 to 4096 [ 654.025396][ T1656] ntfs: volume version 3.1. [ 654.172194][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 654.378573][ T1691] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7710'. [ 654.573842][ T1693] loop1: detected capacity change from 0 to 4096 [ 654.611854][ T1693] EXT4-fs: inline encryption not supported [ 654.679460][ T1693] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 654.715325][ T1693] EXT4-fs (loop1): Test dummy encryption mode enabled [ 654.734745][ T1712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7713'. [ 654.756376][ T1693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 654.764610][ T1693] System zones: 0-5 [ 654.813889][ T1693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.925825][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 654.925841][ T28] audit: type=1800 audit(1785755675.657:658): pid=1693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7709" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 654.976185][ T1723] loop4: detected capacity change from 0 to 24 [ 655.043407][ T1723] romfs: read error for inode 0x8000 [ 655.058434][ T1727] loop0: detected capacity change from 0 to 128 [ 655.069207][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.590095][ T1756] sit1: entered allmulticast mode [ 656.045908][T28963] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 656.246058][T28963] usb 1-1: Using ep0 maxpacket: 32 [ 656.272188][ T1800] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7738'. [ 656.279058][T28963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.315766][T28963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.325570][T28963] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 656.374170][T28963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.413085][T28963] usb 1-1: config 0 descriptor?? [ 656.427694][T28963] hub 1-1:0.0: USB hub found [ 656.579665][ T1816] futex_wake_op: syz.3.7741 tries to shift op by 144; fix this program [ 656.613753][ T1816] futex_wake_op: syz.3.7741 tries to shift op by 144; fix this program [ 656.649573][T28963] hub 1-1:0.0: 1 port detected [ 656.855472][T28963] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 656.885707][T28963] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 656.902482][T28963] usbhid 1-1:0.0: can't add hid device: -71 [ 656.903809][ T1836] loop3: detected capacity change from 0 to 16 [ 656.921052][ T1836] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 656.936399][T28963] usbhid: probe of 1-1:0.0 failed with error -71 [ 656.945791][ T1836] cramfs: empty filesystem [ 656.987124][T28963] usb 1-1: USB disconnect, device number 48 [ 657.345840][ T23] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 657.539715][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 657.567072][ T1880] netlink: 'syz.4.7759': attribute type 30 has an invalid length. [ 657.585881][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.604151][ T23] usb 2-1: Product: syz [ 657.614267][ T23] usb 2-1: Manufacturer: syz [ 657.623615][ T1883] loop3: detected capacity change from 0 to 256 [ 657.630592][ T23] usb 2-1: SerialNumber: syz [ 657.692564][ T5159] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 658.189227][ T5814] usb 2-1: USB disconnect, device number 40 [ 658.317369][ T1909] loop0: detected capacity change from 0 to 8192 [ 658.328653][ T1909] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 658.344189][ T1909] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 658.354426][ T1909] REISERFS (device loop0): using ordered data mode [ 658.361258][ T1909] reiserfs: using flush barriers [ 658.368691][ T1909] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 658.391775][ T1909] REISERFS (device loop0): checking transaction log (loop0) [ 658.412586][ T1909] REISERFS (device loop0): Using r5 hash to sort names [ 658.427420][ T1909] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 658.504938][ T8] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 658.654064][ T1935] netlink: 'syz.3.7771': attribute type 1 has an invalid length. [ 658.673189][ T1935] netlink: 'syz.3.7771': attribute type 1 has an invalid length. [ 658.748926][ T8] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 658.766698][ T5159] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 658.771400][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 658.797797][ T8] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 658.798804][ T5159] ath9k_htc: Failed to initialize the device [ 658.807545][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.846122][ T8] usb 5-1: Product: syz [ 658.850345][ T8] usb 5-1: Manufacturer: syz [ 658.862285][ T8] usb 5-1: SerialNumber: syz [ 658.866779][ T5814] usb 2-1: ath9k_htc: USB layer deinitialized [ 658.909597][ T8] usb 5-1: config 0 descriptor?? [ 658.942776][ T8] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 659.015956][ T1954] kernel profiling enabled (shift: 63) [ 659.030742][ T1954] profiling shift: 63 too large [ 659.332348][ T8] gspca_sunplus: reg_r err -71 [ 659.348281][ T8] sunplus: probe of 5-1:0.0 failed with error -71 [ 659.366533][ T8] usb 5-1: USB disconnect, device number 44 [ 659.506074][T28963] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 659.720921][T28963] usb 2-1: Using ep0 maxpacket: 16 [ 659.731242][T28963] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 659.740278][T28963] usb 2-1: config 0 has no interface number 0 [ 659.746974][T28963] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 659.760532][T28963] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 659.775154][T28963] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 659.784822][T28963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.800530][T28963] usb 2-1: Product: syz [ 659.804841][T28963] usb 2-1: Manufacturer: syz [ 659.811381][T28963] usb 2-1: SerialNumber: syz [ 659.824801][T28963] usb 2-1: config 0 descriptor?? [ 659.837156][ T1966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 659.858653][T28963] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 660.071223][T28963] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 660.095551][T28963] usb 2-1: USB disconnect, device number 41 [ 660.117655][T28963] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 660.142599][T28963] cypress_m8 2-1:0.35: device disconnected [ 660.372579][ T2017] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 660.389209][ T2016] 8021q: VLANs not supported on lo [ 660.921437][ T2053] loop0: detected capacity change from 0 to 128 [ 660.958853][ T2053] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 660.995431][ T2057] ntfs3: loop3: try to read out of volume at offset 0x0 [ 661.155617][ T2065] loop4: detected capacity change from 0 to 1024 [ 661.224359][ T2065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 661.243134][ T2065] ext4 filesystem being mounted at /1452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.279733][ T2065] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.7802: corrupted xattr block 128: bad e_name length [ 661.404490][ T2081] usb usb8: usbfs: process 2081 (syz.3.7805) did not claim interface 0 before use [ 661.437345][ T9754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 662.174266][ T2133] loop3: detected capacity change from 0 to 64 [ 662.435922][ T2146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7825'. [ 662.835130][ T2167] xt_time: unknown flags 0x4 [ 663.404267][ T2130] loop4: detected capacity change from 0 to 32768 [ 663.442177][ T2130] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 663.452168][ T2130] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 663.600723][ T2130] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 663.631745][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 663.645085][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 663.784460][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 139ms [ 663.811864][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 663.837339][ T2130] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 664.068853][ T2230] loop1: detected capacity change from 0 to 256 [ 664.239866][ T2130] gfs2: fsid=syz:syz.0: found 1 quota changes [ 664.413540][ T2130] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 664.413540][ T2130] inode = 11 2339 [ 664.413540][ T2130] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 664.438679][ T2130] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 664.450948][ T2130] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:2130 [syz.4.7821] gfs2_quota_sync+0x411/0x5a0 [ 664.464798][ T2130] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 664.483149][ T2130] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 664.585323][ T2130] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 664.598679][ T2130] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 664.641322][ T2130] gfs2: fsid=syz:syz.0: File system withdrawn [ 664.664763][ T2130] CPU: 0 PID: 2130 Comm: syz.4.7821 Not tainted syzkaller #0 [ 664.672186][ T2130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.682284][ T2130] Call Trace: [ 664.685599][ T2130] [ 664.688597][ T2130] dump_stack_lvl+0x18c/0x250 [ 664.693401][ T2130] ? show_regs_print_info+0x20/0x20 [ 664.698643][ T2130] ? load_image+0x420/0x420 [ 664.703239][ T2130] ? kobject_uevent_env+0x368/0x890 [ 664.708576][ T2130] gfs2_withdraw+0xe16/0x1400 [ 664.713320][ T2130] ? gfs2_lm+0x240/0x240 [ 664.717616][ T2130] ? preempt_schedule+0xc0/0xd0 [ 664.722614][ T2130] ? gfs2_consist_inode_i+0xf5/0x110 [ 664.727961][ T2130] gfs2_inode_refresh+0xb3c/0x11a0 [ 664.733141][ T2130] ? gfs2_inode_metasync+0xf0/0xf0 [ 664.738300][ T2130] ? gfs2_glock_nq+0xe2e/0x1440 [ 664.743208][ T2130] gfs2_instantiate+0x162/0x220 [ 664.748126][ T2130] gfs2_glock_wait+0x1d4/0x2a0 [ 664.752944][ T2130] do_sync+0x4b8/0xd90 [ 664.757077][ T2130] ? gfs2_quota_sync+0x411/0x5a0 [ 664.762086][ T2130] ? bh_get+0x760/0x760 [ 664.766298][ T2130] ? gfs2_quota_sync+0x318/0x5a0 [ 664.771290][ T2130] ? gfs2_quota_sync+0x411/0x5a0 [ 664.776282][ T2130] ? do_raw_spin_unlock+0x121/0x230 [ 664.781589][ T2130] gfs2_quota_sync+0x411/0x5a0 [ 664.786429][ T2130] gfs2_sync_fs+0x4c/0xb0 [ 664.790837][ T2130] sync_filesystem+0xea/0x220 [ 664.795595][ T2130] gfs2_reconfigure+0xb7/0xb20 [ 664.800441][ T2130] reconfigure_super+0x229/0x8e0 [ 664.805455][ T2130] path_mount+0xcfe/0xfa0 [ 664.809848][ T2130] __se_sys_mount+0x2e7/0x3d0 [ 664.814589][ T2130] ? __x64_sys_mount+0xc0/0xc0 [ 664.819414][ T2130] ? lockdep_hardirqs_on+0x98/0x150 [ 664.824659][ T2130] ? __x64_sys_mount+0x20/0xc0 [ 664.829462][ T2130] do_syscall_64+0x55/0xb0 [ 664.833915][ T2130] ? clear_bhb_loop+0x40/0x90 [ 664.838759][ T2130] ? clear_bhb_loop+0x40/0x90 [ 664.843500][ T2130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.849444][ T2130] RIP: 0033:0x7f6b3279e019 [ 664.853894][ T2130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.873539][ T2130] RSP: 002b:00007f6b335a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 664.882020][ T2130] RAX: ffffffffffffffda RBX: 00007f6b32a25fa0 RCX: 00007f6b3279e019 [ 664.890045][ T2130] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 664.898087][ T2130] RBP: 00007f6b3283500c R08: 0000000000000000 R09: 0000000000000000 [ 664.906100][ T2130] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 664.914109][ T2130] R13: 00007f6b32a26038 R14: 00007f6b32a25fa0 R15: 00007ffd4c9e77a8 [ 664.922136][ T2130] [ 665.093783][ T2268] loop3: detected capacity change from 0 to 512 [ 665.170740][ T2268] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.7861: bg 0: block 127: padding at end of block bitmap is not set [ 665.230751][ T2268] EXT4-fs (loop3): Remounting filesystem read-only [ 665.253198][ T2268] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.7861: cleanup dec ref error -28 [ 665.297457][ T2268] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 665.307765][ T2282] netlink: 23 bytes leftover after parsing attributes in process `syz.0.7864'. [ 665.341019][ T2268] EXT4-fs (loop3): 1 orphan inode deleted [ 665.380073][ T2268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.794356][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.888802][ T2301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'. [ 665.919376][ T2301] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7867'. [ 666.089483][ T2311] loop4: detected capacity change from 0 to 16 [ 666.096431][ T2310] raw_sendmsg: syz.0.7871 forgot to set AF_INET. Fix it! [ 666.122179][ T2311] erofs: (device loop4): mounted with root inode @ nid 36. [ 666.185088][ T2284] loop1: detected capacity change from 0 to 32768 [ 666.243342][ T2284] ea_get: invalid extended attribute [ 666.260367][ T2284] ffff88805bb63ab0: 04 00 00 00 .... [ 666.416644][ T2328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 666.789470][ T2341] loop0: detected capacity change from 0 to 4096 [ 666.876461][ T2350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7881'. [ 666.903103][ T2352] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 666.979217][ T2341] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=104, inode=8796093022224, rec_len=0, name_len=5 [ 667.063986][ T2341] Remounting filesystem read-only [ 667.445840][ T789] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 667.494539][ T2342] loop4: detected capacity change from 0 to 32768 [ 667.640086][ T789] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 667.656708][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.687877][ T789] usb 2-1: config 0 descriptor?? [ 667.717200][ T789] cp210x 2-1:0.0: cp210x converter detected [ 667.950411][ T789] usb 2-1: cp210x converter now attached to ttyUSB0 [ 668.062665][ T2414] loop4: detected capacity change from 0 to 16 [ 668.086186][ T2414] erofs: (device loop4): mounted with root inode @ nid 36. [ 668.162442][ T789] usb 2-1: USB disconnect, device number 42 [ 668.200167][ T789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 668.266766][ T789] cp210x 2-1:0.0: device disconnected [ 668.523795][ T2392] loop3: detected capacity change from 0 to 32768 [ 668.588372][ T2392] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 668.603810][ T28] audit: type=1326 audit(1785755689.347:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.4.7900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 668.632079][ T28] audit: type=1326 audit(1785755689.347:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.4.7900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 668.690121][ T28] audit: type=1326 audit(1785755689.397:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.4.7900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 668.741401][ T2392] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 668.752161][ T28] audit: type=1326 audit(1785755689.397:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.4.7900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 668.833356][ T28] audit: type=1326 audit(1785755689.397:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2458 comm="syz.4.7900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 668.962136][ T2482] loop1: detected capacity change from 0 to 128 [ 669.018879][ T2482] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 669.165985][ T2482] ext4 filesystem being mounted at /2039/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 669.363535][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 669.999889][ T2551] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7919'. [ 670.163522][ T2561] veth0_to_hsr: entered allmulticast mode [ 670.233880][ T2567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.468803][ T2535] loop1: detected capacity change from 0 to 32768 [ 671.085849][ T789] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 671.191683][ T2574] loop0: detected capacity change from 0 to 32768 [ 671.232504][ T2574] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 671.289207][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 671.307056][ T789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 671.336409][ T2623] loop3: detected capacity change from 0 to 256 [ 671.354547][ T789] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 671.388475][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.415832][ T2574] XFS (loop0): Ending clean mount [ 671.421527][ T789] usb 2-1: Product: syz [ 671.441807][ T789] usb 2-1: Manufacturer: syz [ 671.455837][ T789] usb 2-1: SerialNumber: syz [ 671.464053][ T789] usb 2-1: config 0 descriptor?? [ 671.490912][ T789] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 671.517675][ T789] usb 2-1: Detected FT232R [ 671.573525][ T28] audit: type=1326 audit(1785755692.297:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2631 comm="syz.4.7934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 671.606759][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 671.663519][ T2639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7935'. [ 671.672726][ T28] audit: type=1326 audit(1785755692.297:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2631 comm="syz.4.7934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 671.757305][ T28] audit: type=1326 audit(1785755692.337:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2631 comm="syz.4.7934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 671.825848][ T28] audit: type=1326 audit(1785755692.337:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2631 comm="syz.4.7934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 671.871758][ T28] audit: type=1326 audit(1785755692.337:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2631 comm="syz.4.7934" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f6b3279e019 code=0x7ffc0000 [ 671.951896][ T789] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 671.980948][ T789] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 672.012626][ T789] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 672.058712][ T789] usb 2-1: USB disconnect, device number 43 [ 672.078468][ T789] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 672.106820][ T789] ftdi_sio 2-1:0.0: device disconnected [ 672.226243][ T2672] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 672.234665][ T2672] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 672.285452][ T2672] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 672.314262][ T2682] loop4: detected capacity change from 0 to 512 [ 672.324226][ T2672] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 672.344697][ T2672] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 672.383256][ T2672] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 672.391680][ T2682] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7941: invalid indirect mapped block 256 (level 2) [ 672.413445][ T2672] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 672.424495][ T2672] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 672.432571][ T2672] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 672.441073][ T2672] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 672.449695][ T2672] ALSA: mixer_oss: invalid OSS volume 'î[' [ 672.455847][ T2672] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 672.463091][ T2672] ALSA: mixer_oss: invalid OSS volume '·$qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 695.191324][ T5782] CPU: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 [ 695.198947][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 695.209041][ T5782] Call Trace: [ 695.212351][ T5782] [ 695.215313][ T5782] dump_stack_lvl+0x18c/0x250 [ 695.220045][ T5782] ? show_regs_print_info+0x20/0x20 [ 695.225293][ T5782] ? load_image+0x420/0x420 [ 695.229860][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 695.235123][ T5782] gfs2_assert_warn_i+0x18b/0x2c0 [ 695.240215][ T5782] gfs2_qd_dispose+0x488/0x580 [ 695.245039][ T5782] gfs2_quota_cleanup+0x40d/0x720 [ 695.250121][ T5782] ? gfs2_make_fs_ro+0x17e/0x320 [ 695.255111][ T5782] ? spin_lock_bucket+0x150/0x150 [ 695.260191][ T5782] ? __might_sleep+0xe0/0xe0 [ 695.264867][ T5782] ? down_write+0x16e/0x200 [ 695.269408][ T5782] ? down_read_killable+0x340/0x340 [ 695.274652][ T5782] ? gfs2_quota_sync+0x595/0x5a0 [ 695.279706][ T5782] gfs2_make_fs_ro+0x2aa/0x320 [ 695.284519][ T5782] ? gfs2_put_super+0x1db/0x930 [ 695.289500][ T5782] ? gfs2_dinode_out+0xb10/0xb10 [ 695.294489][ T5782] ? do_raw_spin_lock+0x11f/0x2b0 [ 695.299566][ T5782] ? __rwlock_init+0x150/0x150 [ 695.304418][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 695.309703][ T5782] gfs2_put_super+0x224/0x930 [ 695.314435][ T5782] ? gfs2_evict_inode+0x13c0/0x13c0 [ 695.319676][ T5782] generic_shutdown_super+0x134/0x2b0 [ 695.325101][ T5782] kill_block_super+0x44/0x90 [ 695.329832][ T5782] deactivate_locked_super+0x97/0x100 [ 695.335289][ T5782] cleanup_mnt+0x3d7/0x460 [ 695.339766][ T5782] task_work_run+0x1d4/0x260 [ 695.344415][ T5782] ? task_work_cancel+0x220/0x220 [ 695.349501][ T5782] ? exit_to_user_mode_loop+0x3b/0x110 [ 695.355021][ T5782] exit_to_user_mode_loop+0xe6/0x110 [ 695.360355][ T5782] exit_to_user_mode_prepare+0xee/0x180 [ 695.365956][ T5782] syscall_exit_to_user_mode+0x1a/0x50 [ 695.371479][ T5782] do_syscall_64+0x61/0xb0 [ 695.375941][ T5782] ? clear_bhb_loop+0x40/0x90 [ 695.380688][ T5782] ? clear_bhb_loop+0x40/0x90 [ 695.385436][ T5782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.391377][ T5782] RIP: 0033:0x7feb5ff9f257 [ 695.395845][ T5782] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 695.415488][ T5782] RSP: 002b:00007ffcc471fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 695.423949][ T5782] RAX: 0000000000000000 RBX: 00007feb6003445c RCX: 00007feb5ff9f257 [ 695.431997][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc471fe40 [ 695.440013][ T5782] RBP: 00007ffcc471fe40 R08: 00007ffcc4720e40 R09: 00000000ffffffff [ 695.448031][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc4720ed0 [ 695.456033][ T5782] R13: 00007feb6003445c R14: 00000000000a9a8d R15: 00007ffcc4720f10 [ 695.464052][ T5782] [ 695.790975][ T4109] tmpfs: Bad value for 'mpol' [ 695.992343][ T4116] loop3: detected capacity change from 0 to 512 [ 696.034499][ T4116] EXT4-fs (loop3): 1 truncate cleaned up [ 696.077857][ T4116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.096445][ T4122] comedi comedi0: Minor -4 is invalid! [ 696.422654][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.493087][ T4097] loop0: detected capacity change from 0 to 32768 [ 696.513803][ T4097] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8252 (4097) [ 696.566436][ T4097] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.597956][ T4097] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 696.617530][ T4097] BTRFS info (device loop0): use zlib compression, level 3 [ 696.624787][ T4097] BTRFS info (device loop0): using free space tree [ 696.866580][ T4097] BTRFS info (device loop0): enabling ssd optimizations [ 696.873630][ T4097] BTRFS info (device loop0): auto enabling async discard [ 697.066927][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 697.170161][ T4190] loop1: detected capacity change from 0 to 512 [ 697.207731][ T4190] EXT4-fs (loop1): bad s_min_extra_isize: 1824 [ 697.342532][ T4188] loop3: detected capacity change from 0 to 4096 [ 697.368183][ T4188] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 697.497820][ T4188] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 697.578840][ T4188] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 697.761606][ T4208] sctp: [Deprecated]: syz.1.8276 (pid 4208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.761606][ T4208] Use struct sctp_sack_info instead [ 698.085369][ T4216] loop3: detected capacity change from 0 to 4096 [ 698.093766][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8280'. [ 698.116119][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8280'. [ 698.174420][ T4216] ntfs: volume version 3.1. [ 698.223112][ T4186] loop4: detected capacity change from 0 to 32768 [ 698.285349][ T4186] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.8270 (4186) [ 698.356840][ T4186] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 698.375803][ T4186] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 698.404426][ T4186] BTRFS info (device loop4): using free space tree [ 698.439519][ T4234] loop1: detected capacity change from 0 to 256 [ 698.456712][ T4234] exfat: Deprecated parameter 'namecase' [ 698.462420][ T4234] exfat: Deprecated parameter 'namecase' [ 698.489805][ T4234] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 698.587997][ T4186] BTRFS info (device loop4): enabling ssd optimizations [ 698.622037][ T4186] BTRFS info (device loop4): auto enabling async discard [ 698.849809][ T9754] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 699.197256][ T4282] loop3: detected capacity change from 0 to 1024 [ 699.247922][ T4282] hfsplus: invalid length 32517 has been corrected to 255 [ 699.305562][ T4289] netlink: 'syz.1.8293': attribute type 63 has an invalid length. [ 699.330520][ T4282] hfsplus: xattr searching failed [ 699.355885][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8293'. [ 699.385014][ T4289] netlink: 'syz.1.8293': attribute type 63 has an invalid length. [ 699.427961][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8293'. [ 699.702353][ T34] hfsplus: b-tree write err: -5, ino 20 [ 699.745773][ T789] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 699.948682][ T789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 699.958688][ T789] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 699.978731][ T789] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 700.022138][ T789] usb 5-1: config 63 has no interface number 0 [ 700.038862][ T4324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8302'. [ 700.039135][ T789] usb 5-1: config 63 interface 66 has no altsetting 0 [ 700.059166][ T789] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 700.060112][ T4325] loop0: detected capacity change from 0 to 1764 [ 700.070050][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.089204][ T4324] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8302'. [ 700.113496][ T4325] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 700.146472][ T789] usb 5-1: Product: syz [ 700.150724][ T789] usb 5-1: Manufacturer: syz [ 700.166649][ T789] usb 5-1: SerialNumber: syz [ 700.343411][ T4342] loop1: detected capacity change from 0 to 512 [ 700.453596][ T4342] EXT4-fs (loop1): 1 truncate cleaned up [ 700.459719][ T789] usb 5-1: Found UVC 0.07 device syz (174f:8acf) [ 700.496232][ T4342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.510130][ T789] usb 5-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 700.520977][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8309'. [ 700.563281][ T789] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 700.609910][ T789] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 700.656205][ T789] usb 5-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 700.675308][ T789] usb 5-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 700.729348][ T789] usb 5-1: No streaming interface found for terminal 29. [ 700.754486][ T789] uvcvideo 5-1:63.66: Entity type for entity Output 5 was not initialized! [ 700.825224][ T789] usb 5-1: USB disconnect, device number 47 [ 700.858543][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.199217][ T4393] loop4: detected capacity change from 0 to 1024 [ 701.538283][ T4413] netlink: 209860 bytes leftover after parsing attributes in process `syz.0.8322'. [ 701.592482][ T4414] set_capacity_and_notify: 1 callbacks suppressed [ 701.592500][ T4414] loop1: detected capacity change from 0 to 1024 [ 701.675281][ T4414] hfsplus: invalid length 32517 has been corrected to 255 [ 701.812175][ T4414] hfsplus: xattr searching failed [ 701.837004][ T4426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8325'. [ 701.952869][ T4431] loop3: detected capacity change from 0 to 64 [ 702.296469][ T3550] hfsplus: b-tree write err: -5, ino 20 [ 702.305858][ T4447] netlink: 'syz.4.8331': attribute type 28 has an invalid length. [ 702.710848][ T4470] loop0: detected capacity change from 0 to 256 [ 702.787500][ T4470] FAT-fs (loop0): Directory bread(block 64) failed [ 702.794133][ T4470] FAT-fs (loop0): Directory bread(block 65) failed [ 702.818157][ T4470] FAT-fs (loop0): Directory bread(block 66) failed [ 702.824786][ T4470] FAT-fs (loop0): Directory bread(block 67) failed [ 702.834659][ T4461] loop1: detected capacity change from 0 to 8192 [ 702.850772][ T4470] FAT-fs (loop0): Directory bread(block 68) failed [ 702.860615][ T4461] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 702.874292][ T4470] FAT-fs (loop0): Directory bread(block 69) failed [ 702.881412][ T4461] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 702.891020][ T4461] REISERFS (device loop1): using ordered data mode [ 702.898153][ T4461] reiserfs: using flush barriers [ 702.905455][ T4461] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 702.922298][ T4461] REISERFS (device loop1): checking transaction log (loop1) [ 702.930884][ T4470] FAT-fs (loop0): Directory bread(block 70) failed [ 702.938049][ T4470] FAT-fs (loop0): Directory bread(block 71) failed [ 702.945063][ T4470] FAT-fs (loop0): Directory bread(block 72) failed [ 702.952335][ T4461] REISERFS (device loop1): Using r5 hash to sort names [ 702.959403][ T4470] FAT-fs (loop0): Directory bread(block 73) failed [ 702.966792][ T4461] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 703.272981][ T4484] loop4: detected capacity change from 0 to 1024 [ 703.355885][ T4484] hfsplus: invalid length 32517 has been corrected to 255 [ 703.392331][ T4493] loop0: detected capacity change from 0 to 2048 [ 703.445868][ T4498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8344'. [ 703.460149][ T4484] hfsplus: xattr searching failed [ 703.472197][ T4493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.499006][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8344'. [ 703.549206][ T28] audit: type=1800 audit(1785755724.287:689): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8343" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 703.826658][ T3500] hfsplus: b-tree write err: -5, ino 20 [ 704.222438][ T4528] loop0: detected capacity change from 0 to 8192 [ 704.233596][ T4537] loop4: detected capacity change from 0 to 64 [ 704.282348][ T4528] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 704.336940][ T4528] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 704.347319][ T4528] REISERFS (device loop0): using ordered data mode [ 704.354363][ T4528] reiserfs: using flush barriers [ 704.415868][ T4528] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 704.451863][ T4528] REISERFS (device loop0): checking transaction log (loop0) [ 704.472981][ T4528] REISERFS (device loop0): Using r5 hash to sort names [ 704.502968][ T4528] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 704.982038][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8365'. [ 705.005981][ T4576] netlink: 'syz.4.8365': attribute type 1 has an invalid length. [ 705.013892][ T4576] netlink: 'syz.4.8365': attribute type 2 has an invalid length. [ 705.046435][ T4580] Cannot find del_set index 0 as target [ 705.052228][ T4576] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8365'. [ 705.075292][ T4581] loop3: detected capacity change from 0 to 128 [ 705.481875][ T4606] loop4: detected capacity change from 0 to 512 [ 705.495095][ T4604] xt_ecn: cannot match TCP bits for non-tcp packets [ 705.567745][ T4606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 705.584678][ T4606] FAT-fs (loop4): Filesystem has been set read-only [ 705.593018][ T4606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 705.603027][ T4606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 705.821521][ T4617] EXT4-fs (loop4): 1 truncate cleaned up [ 705.848022][ T4617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.911481][ T4631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8379'. [ 705.920764][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8379'. [ 706.024331][ T9754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.727780][ T4672] set_capacity_and_notify: 1 callbacks suppressed [ 706.727808][ T4672] loop4: detected capacity change from 0 to 4096 [ 706.821644][ T4672] ntfs: volume version 3.1. [ 706.959981][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8399'. [ 706.986769][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8399'. [ 707.112934][ T4687] loop3: detected capacity change from 0 to 4096 [ 707.290384][ T4687] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 707.322727][ T4687] ntfs3: loop3: Failed to load $Extend (-22). [ 707.335365][ T4687] ntfs3: loop3: Failed to initialize $Extend. [ 707.468419][ T4710] loop0: detected capacity change from 0 to 64 [ 707.514455][ T5784] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 707.609859][ T4710] Trying to free block not in datazone [ 707.669198][ T4710] Trying to free block not in datazone [ 707.866156][ T5856] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 708.049689][ T5856] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 708.069501][ T5856] usb 2-1: config 0 has no interface number 0 [ 708.097221][ T5856] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 708.139470][ T5856] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 708.180413][ T5856] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 708.196379][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.217385][ T5856] usb 2-1: config 0 descriptor?? [ 708.259895][ T5856] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 708.490568][ T4719] iowarrior 2-1:0.1: Error -90 while submitting URB [ 708.524509][ T5856] usb 2-1: USB disconnect, device number 45 [ 708.692686][ T4791] autofs4:pid:4791:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375) [ 708.724742][ T4791] autofs4:pid:4791:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 709.235095][ T4821] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8433'. [ 709.630133][ T4847] loop3: detected capacity change from 0 to 1024 [ 709.787511][ T4858] loop4: detected capacity change from 0 to 256 [ 709.794751][ T4858] exfat: Deprecated parameter 'utf8' [ 709.866089][ T4858] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 710.116244][ T173] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 710.147612][ T4883] loop4: detected capacity change from 0 to 64 [ 710.233949][ T28] audit: type=1800 audit(1785755730.967:690): pid=4883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8450" name=2E02 dev="loop4" ino=21 res=0 errno=0 [ 710.326683][ T173] usb 2-1: Using ep0 maxpacket: 16 [ 710.346710][ T173] usb 2-1: config 0 has no interfaces? [ 710.378758][ T173] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 710.403144][ T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.433670][ T173] usb 2-1: Product: syz [ 710.451947][ T173] usb 2-1: Manufacturer: syz [ 710.466372][ T173] usb 2-1: SerialNumber: syz [ 710.486772][ T173] r8152-cfgselector 2-1: config 0 descriptor?? [ 710.495350][ T4931] loop4: detected capacity change from 0 to 64 [ 710.690020][ T4940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8457'. [ 710.707862][ T173] r8152-cfgselector 2-1: Unknown version 0x0000 [ 710.911304][ T5814] r8152-cfgselector 2-1: USB disconnect, device number 46 [ 711.466084][ T4995] bridge0: port 3(batadv0) entered blocking state [ 711.493054][ T4995] bridge0: port 3(batadv0) entered disabled state [ 711.514407][ T4995] batadv0: entered allmulticast mode [ 711.524873][ T4994] loop3: detected capacity change from 0 to 4096 [ 711.534698][ T4995] batadv0: entered promiscuous mode [ 711.553426][ T4995] bridge0: port 3(batadv0) entered blocking state [ 711.560060][ T4995] bridge0: port 3(batadv0) entered forwarding state [ 711.572221][ T4994] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 711.584897][ T4990] loop0: detected capacity change from 0 to 4096 [ 711.613664][ T4990] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 711.628960][ T4994] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 711.643124][ T4994] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 711.700599][ T4990] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 711.938839][ T3429] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 711.948790][ T3429] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 712.305972][ T5814] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 712.505796][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 712.553996][ T5814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 712.608308][ T5043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 712.621030][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.653586][ T5814] usb 4-1: Product: syz [ 712.664528][ T5814] usb 4-1: Manufacturer: syz [ 712.692285][ T5814] usb 4-1: SerialNumber: syz [ 712.701526][ T5814] usb 4-1: config 0 descriptor?? [ 712.934387][ T5814] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 713.133326][ T5814] usb write operation failed. (-71) [ 713.179138][ T5814] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 713.218555][ T5814] dvbdev: DVB: registering new adapter (Terratec H7) [ 713.245880][ T5814] usb 4-1: media controller created [ 713.252008][ T5814] usb read operation failed. (-71) [ 713.260901][ T5814] usb write operation failed. (-71) [ 713.304894][ T5814] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 713.320063][ T5814] usb 4-1: USB disconnect, device number 51 [ 713.650984][ T5155] loop4: detected capacity change from 0 to 4096 [ 713.701850][ T5155] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 713.758640][ T5155] ntfs3: loop4: Failed to load $Extend (-22). [ 713.764775][ T5155] ntfs3: loop4: Failed to initialize $Extend. [ 713.992312][ T5169] loop3: detected capacity change from 0 to 2048 [ 714.046383][ T5169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.458138][ T5160] loop0: detected capacity change from 0 to 32768 [ 714.547826][ T5160] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 714.651088][ T5204] loop4: detected capacity change from 0 to 4096 [ 714.717790][ T5209] loop3: detected capacity change from 0 to 256 [ 714.748414][ T5204] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 714.818121][ T5215] loop1: detected capacity change from 0 to 256 [ 714.845368][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 714.884278][ T5209] FAT-fs (loop3): Directory bread(block 64) failed [ 714.904774][ T5209] FAT-fs (loop3): Directory bread(block 65) failed [ 714.914220][ T5204] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 714.948444][ T5209] FAT-fs (loop3): Directory bread(block 66) failed [ 714.962914][ T5209] FAT-fs (loop3): Directory bread(block 67) failed [ 714.989428][ T5209] FAT-fs (loop3): Directory bread(block 68) failed [ 715.015660][ T5209] FAT-fs (loop3): Directory bread(block 69) failed [ 715.022365][ T5209] FAT-fs (loop3): Directory bread(block 70) failed [ 715.038434][ T5215] FAT-fs (loop1): Directory bread(block 64) failed [ 715.045118][ T5215] FAT-fs (loop1): Directory bread(block 65) failed [ 715.084676][ T5209] FAT-fs (loop3): Directory bread(block 71) failed [ 715.092883][ T5215] FAT-fs (loop1): Directory bread(block 66) failed [ 715.106116][ T5209] FAT-fs (loop3): Directory bread(block 72) failed [ 715.129751][ T5215] FAT-fs (loop1): Directory bread(block 67) failed [ 715.137333][ T5209] FAT-fs (loop3): Directory bread(block 73) failed [ 715.166325][ T5215] FAT-fs (loop1): Directory bread(block 68) failed [ 715.172923][ T5215] FAT-fs (loop1): Directory bread(block 69) failed [ 715.216067][ T5215] FAT-fs (loop1): Directory bread(block 70) failed [ 715.222644][ T5215] FAT-fs (loop1): Directory bread(block 71) failed [ 715.265941][ T5215] FAT-fs (loop1): Directory bread(block 72) failed [ 715.272525][ T5215] FAT-fs (loop1): Directory bread(block 73) failed [ 715.458018][ T5234] loop4: detected capacity change from 0 to 8 [ 715.546676][ T28] audit: type=1800 audit(1785755736.277:691): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8517" name="file1" dev="loop1" ino=1048683 res=0 errno=0 [ 715.567576][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.619682][ T5234] SQUASHFS error: Unable to read directory block [629:46] [ 715.774900][ T5248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8525'. [ 715.796424][ T5248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8525'. [ 715.812631][ T5248] Zero length message leads to an empty skb [ 715.858749][ T5252] loop3: detected capacity change from 0 to 128 [ 716.022342][ T5261] comedi comedi3: 8255: I/O port conflict (0x8001,4) [ 716.049058][ T5261] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 716.058312][ T5261] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 717.021064][ T5310] loop0: detected capacity change from 0 to 4096 [ 717.060472][ T5310] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 717.164457][ T5310] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 717.182282][ T5310] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 717.199174][ T5326] Bluetooth: MGMT ver 1.22 [ 717.415378][ T5334] loop1: detected capacity change from 0 to 512 [ 717.523203][ T5334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 717.598459][ T5334] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 717.629934][ T5334] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.8551: invalid indirect mapped block 2683928664 (level 1) [ 717.722079][ T5334] EXT4-fs (loop1): Remounting filesystem read-only [ 717.761103][ T5334] EXT4-fs (loop1): 1 truncate cleaned up [ 717.775899][ T5355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8555'. [ 717.793037][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.954656][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.102977][ T5369] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 718.120972][ T5369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 718.135700][ T5369] System zones: 1-12 [ 718.170198][ T5369] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.8561: bad orphan inode 131072 [ 718.183564][ T5369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.434403][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.906894][ T173] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 719.086108][T28963] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 719.124748][ T173] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 719.135709][ T173] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 719.156094][ T173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.164734][ T173] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 719.174435][ T173] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 719.195671][ T173] usb 2-1: Product: syz [ 719.199965][ T173] usb 2-1: Manufacturer: syz [ 719.204607][ T173] usb 2-1: SerialNumber: syz [ 719.214056][ T173] usb 2-1: config 0 descriptor?? [ 719.227943][ T173] hub 2-1:0.0: bad descriptor, ignoring hub [ 719.246213][ T173] hub: probe of 2-1:0.0 failed with error -5 [ 719.265445][ T173] usb 2-1: selecting invalid altsetting 0 [ 719.281540][T28963] usb 1-1: Using ep0 maxpacket: 32 [ 719.291729][T28963] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 719.307218][T28963] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 719.349164][T28963] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 719.367091][T28963] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 719.381726][T28963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 719.414316][T28963] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 719.423868][T28963] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 719.432733][T28963] usb 1-1: Product: syz [ 719.455763][T28963] usb 1-1: Manufacturer: syz [ 719.460439][T28963] usb 1-1: SerialNumber: syz [ 719.486327][T28963] usb 1-1: config 0 descriptor?? [ 719.519996][T28963] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 719.563519][T28963] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 719.656970][ T789] usb 2-1: USB disconnect, device number 47 [ 719.850078][T28963] usb 1-1: USB disconnect, device number 52 [ 719.866841][T28963] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 719.881995][ T5494] set_capacity_and_notify: 3 callbacks suppressed [ 719.882008][ T5494] loop4: detected capacity change from 0 to 128 [ 720.317575][ T5522] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8589'. [ 720.341086][ T5522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.885464][ T5555] loop0: detected capacity change from 0 to 1024 [ 720.903493][ T5557] tipc: Enabling of bearer rejected, failed to enable media [ 720.971262][ T5555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 721.063934][ T5555] ext4 filesystem being mounted at /2163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.232589][ T5555] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.8599: lblock 3 mapped to illegal pblock 3 (length 1) [ 721.302620][ T5555] EXT4-fs (loop0): Remounting filesystem read-only [ 721.440859][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 721.617936][ T5606] loop0: detected capacity change from 0 to 128 [ 721.941474][ T5628] loop3: detected capacity change from 0 to 1024 [ 721.998359][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.102189][ T5640] loop0: detected capacity change from 0 to 24 [ 722.179231][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.199826][ T5640] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 722.229919][ T5640] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 722.752947][ T5669] loop4: detected capacity change from 0 to 512 [ 722.780849][ T5669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 722.841351][ T5669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 722.857591][ T5669] System zones: 1-12 [ 722.861885][ T5669] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.8628: bad orphan inode 131072 [ 722.887955][ T5669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.965634][ T5654] loop3: detected capacity change from 0 to 32768 [ 723.047388][ T5654] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 723.567518][ T9754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.627361][ T5686] loop1: detected capacity change from 0 to 4096 [ 723.647091][ T5686] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 723.691190][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 724.007255][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8636'. [ 724.031311][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8636'. [ 724.119690][ T5708] loop1: detected capacity change from 0 to 512 [ 724.147465][ T5708] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 724.207864][ T5708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 724.233126][ T5708] System zones: 1-12 [ 724.245509][ T5708] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.8637: bad orphan inode 131072 [ 724.298933][ T5708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.382247][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.549582][ T5731] loop3: detected capacity change from 0 to 512 [ 724.569272][ T5735] IPVS: length: 24 != 73752 [ 724.645568][ T5731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 724.673344][ T5731] ext4 filesystem being mounted at /2185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.885892][ T5731] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 724.910446][ T5731] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 724.940078][ T5731] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.8643: Failed to acquire dquot type 0 [ 725.069673][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 725.158823][ T5781] veth1_macvtap: left promiscuous mode [ 725.165017][ T5781] macsec0: entered promiscuous mode [ 725.194649][ T5781] veth1_macvtap: entered promiscuous mode [ 725.207697][ T5781] macsec0: left promiscuous mode [ 725.289013][ T5786] loop3: detected capacity change from 0 to 1024 [ 725.331460][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 725.378145][ T5786] ext4 filesystem being mounted at /2186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.435463][ T5802] loop0: detected capacity change from 0 to 512 [ 725.464400][ T5786] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.8652: lblock 3 mapped to illegal pblock 3 (length 1) [ 725.479951][ T5802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 725.532701][ T5786] EXT4-fs (loop3): Remounting filesystem read-only [ 725.575481][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 725.581560][ T5802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.633215][ T5802] ext4 filesystem being mounted at /2177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.668027][ T5802] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 725.738413][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.811694][ T5834] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 725.832361][ T5834] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 725.877687][ T5834] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 725.940632][ T5841] macsec1: entered promiscuous mode [ 726.019550][T28963] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 726.230444][T28963] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 726.250423][T28963] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 726.274929][T28963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 726.296235][T28963] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 726.316618][T28963] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 726.338341][T28963] usb 5-1: Product: syz [ 726.342807][ T5856] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 726.352788][T28963] usb 5-1: Manufacturer: syz [ 726.357778][T28963] usb 5-1: SerialNumber: syz [ 726.373208][T28963] usb 5-1: config 0 descriptor?? [ 726.385966][T28963] hub 5-1:0.0: bad descriptor, ignoring hub [ 726.392923][T28963] hub: probe of 5-1:0.0 failed with error -5 [ 726.407147][T28963] usb 5-1: selecting invalid altsetting 0 [ 726.566690][ T5856] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 726.575326][ T5856] usb 4-1: config 0 has no interface number 0 [ 726.584526][ T5856] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 726.605184][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.615972][ T5856] usb 4-1: Product: syz [ 726.620970][ T5856] usb 4-1: Manufacturer: syz [ 726.625739][ T5856] usb 4-1: SerialNumber: syz [ 726.632510][ T5891] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8670'. [ 726.638872][ T5856] usb 4-1: config 0 descriptor?? [ 726.642121][ T5814] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 726.660997][ T5891] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8670'. [ 726.853858][ T173] usb 5-1: USB disconnect, device number 48 [ 726.885243][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 726.913298][ T5814] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.919526][ T5856] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 726.941506][ T5814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 726.965973][ T5814] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 726.972282][ T5856] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 726.990921][ T5856] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 726.999071][ T5856] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 727.009089][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.027797][ T5814] usb 1-1: config 0 descriptor?? [ 727.030105][ T5856] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 727.392807][ T5856] usb 4-1: USB disconnect, device number 52 [ 727.424384][ T5856] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 727.454590][ T5856] keyspan 4-1:0.133: device disconnected [ 727.500630][ T5814] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x1 [ 727.515003][ T5814] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x6 [ 727.537388][ T5814] saitek 0003:06A3:0CD0.0001: collection stack underflow [ 727.544491][ T5814] saitek 0003:06A3:0CD0.0001: item 0 1 0 12 parsing failed [ 727.573529][ T5814] saitek 0003:06A3:0CD0.0001: parse failed [ 727.579494][ T5814] saitek: probe of 0003:06A3:0CD0.0001 failed with error -22 [ 727.631177][ T5935] loop4: detected capacity change from 0 to 2048 [ 727.645600][ T5935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 727.732623][ T5935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.786479][ T5814] usb 1-1: USB disconnect, device number 53 [ 727.874322][ T9754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.142670][ T5965] can0: slcan on ttyS3. [ 728.264948][ T5964] can0 (unregistered): slcan off ttyS3. [ 728.436662][ T5983] loop4: detected capacity change from 0 to 512 [ 728.475598][ T5983] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 728.475625][ T5983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 728.508945][ T5983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 728.509085][ T5983] System zones: 1-12 [ 728.515083][ T5983] EXT4-fs (loop4): 1 truncate cleaned up [ 728.516522][ T5983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.549051][ T28] audit: type=1800 audit(1785755748.891:692): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8680" name="mnt" dev="loop4" ino=18 res=0 errno=0 [ 728.601542][ T5991] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 728.639576][ T9754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.723967][ T5996] loop1: detected capacity change from 0 to 64 [ 729.311943][ T5856] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 729.537415][ T5856] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.546101][ T5856] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 729.572157][ T5856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 729.589276][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 729.607190][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 729.621198][ T5856] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 729.636114][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 729.645829][ T5856] usb 5-1: Product: syz [ 729.650172][ T5856] usb 5-1: Manufacturer: syz [ 729.667099][ T5856] cdc_wdm 5-1:1.0: skipping garbage [ 729.673189][ T5856] cdc_wdm 5-1:1.0: skipping garbage [ 729.683951][ T5856] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 729.691723][ T5856] cdc_wdm 5-1:1.0: Unknown control protocol [ 729.789843][ T6020] loop0: detected capacity change from 0 to 32768 [ 730.302012][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -75 [ 730.507624][ T6073] syz.1.8705: attempt to access beyond end of device [ 730.507624][ T6073] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 730.527216][ T6073] efs: cannot read volume header [ 730.528602][ T5856] usb 5-1: USB disconnect, device number 49 [ 730.674536][ T6084] vlan0: entered promiscuous mode [ 730.679754][ T6084] syz_tun: entered promiscuous mode [ 730.685832][ T6084] vlan0: entered allmulticast mode [ 730.696289][ T6084] syz_tun: entered allmulticast mode [ 730.985687][ T6101] loop3: detected capacity change from 0 to 1024 [ 731.271464][ T6116] loop3: detected capacity change from 0 to 256 [ 731.287762][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8714'. [ 731.293520][ T6116] exfat: Deprecated parameter 'namecase' [ 731.333224][ T6116] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 732.143020][ T6146] loop3: detected capacity change from 0 to 32768 [ 732.199890][ T6146] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 732.275582][ T6131] loop0: detected capacity change from 0 to 32768 [ 732.319827][ T6131] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 732.473030][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 732.479868][ T6131] XFS (loop0): Ending clean mount [ 732.635051][ T5776] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 733.056071][ T6193] loop3: detected capacity change from 0 to 1024 [ 733.086005][ T6193] hfsplus: invalid gid specified [ 733.097271][ T6193] hfsplus: unable to parse mount options [ 733.153952][ T3482] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 733.400790][ T6214] loop3: detected capacity change from 0 to 1024 [ 733.440654][ T6214] EXT4-fs: Ignoring removed bh option [ 733.461153][ T6214] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 733.526945][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.596456][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8739'. [ 733.622752][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.977968][ T6249] loop3: detected capacity change from 0 to 128 [ 733.992703][ T6249] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 734.019388][ T6249] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 734.296881][ T6262] loop3: detected capacity change from 0 to 64 [ 734.341670][ T6265] vlan0: entered promiscuous mode [ 734.353641][ T6265] syz_tun: entered promiscuous mode [ 734.365766][ T6265] vlan0: entered allmulticast mode [ 734.375806][ T6265] syz_tun: entered allmulticast mode [ 734.464270][ T6242] loop4: detected capacity change from 0 to 32768 [ 734.489172][ T6242] (syz.4.8743,6242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 734.518952][ T6242] (syz.4.8743,6242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 734.555971][ T6242] JBD2: Ignoring recovery information on journal [ 734.612657][ T6242] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 734.920590][ T9754] ocfs2: Unmounting device (7,4) on (node local) [ 735.212309][ T28] audit: type=1800 audit(1785755755.131:693): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8749" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 735.505898][ T6282] loop1: detected capacity change from 0 to 32768 [ 735.573638][ T6282] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 735.666564][ T6282] XFS (loop1): Ending clean mount [ 735.898233][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 736.078614][ T6325] netlink: 'syz.3.8762': attribute type 30 has an invalid length. [ 736.877697][ T6394] loop0: detected capacity change from 0 to 4096 [ 736.915405][ T6394] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 737.030245][ T6394] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 737.046221][ T6394] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 737.234068][ T5776] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 737.244903][ T6404] loop3: detected capacity change from 0 to 1024 [ 737.481535][ T6390] loop1: detected capacity change from 0 to 32768 [ 737.564704][ T6410] loop0: detected capacity change from 0 to 4096 [ 737.573055][ T6390] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 737.585964][ T6410] EXT4-fs: inline encryption not supported [ 737.646682][ T6410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 737.673985][ T6410] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 737.708001][ T6390] XFS (loop1): Ending clean mount [ 737.717717][ T6410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.791767][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.835119][ T173] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 737.843768][ T28] audit: type=1800 audit(1785755757.591:694): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8770" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 738.000617][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 738.075320][ T173] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 738.088656][ T173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 738.115232][ T173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 738.131832][ T173] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 738.141222][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.199724][ T173] usb 4-1: config 0 descriptor?? [ 738.205863][ T6418] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.491957][ T6458] loop1: detected capacity change from 0 to 1024 [ 738.499685][ T6458] EXT4-fs: Ignoring removed bh option [ 738.511534][ T6458] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 738.558130][T28963] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 738.572757][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.673552][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.692346][ T173] waltop 0003:172F:0038.0002: unknown main item tag 0x0 [ 738.707044][ T173] waltop 0003:172F:0038.0002: unexpected long global item [ 738.715085][ T173] waltop: probe of 0003:172F:0038.0002 failed with error -22 [ 738.775222][T28963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 738.786630][T28963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.797123][T28963] usb 5-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00 [ 738.806993][T28963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.825929][T28963] usb 5-1: config 0 descriptor?? [ 738.888145][ T173] usb 4-1: USB disconnect, device number 53 [ 738.975592][ T5159] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 739.180384][ T5159] usb 1-1: unable to get BOS descriptor or descriptor too short [ 739.211053][ T5159] usb 1-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 739.220190][ T5159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.247897][ T5159] usb 1-1: Product: syz [ 739.252217][ T5159] usb 1-1: Manufacturer: syz [ 739.268845][ T5159] usb 1-1: SerialNumber: syz [ 739.340676][T28963] wacom 0003:056A:0117.0003: Unknown device_type for 'HID 056a:0117'. Ignoring. [ 739.439774][ T6508] netlink: 'syz.1.8791': attribute type 10 has an invalid length. [ 739.494441][ T6508] team0: Port device dummy0 added [ 739.534469][ T5159] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 739.545693][ T5159] usb 1-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 739.579774][ T5159] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 739.584159][ T6510] netlink: 'syz.1.8791': attribute type 10 has an invalid length. [ 739.631361][ T5159] usb 1-1: USB disconnect, device number 54 [ 739.673089][ T789] usb 5-1: USB disconnect, device number 50 [ 739.685846][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.783040][ T6510] team0: Port device dummy0 removed [ 739.801336][ T6543] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.087282][ T6558] syz.3.8796[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 740.087451][ T6558] syz.3.8796[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 740.124963][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8797'. [ 740.310251][ T6567] loop1: detected capacity change from 0 to 256 [ 741.215270][ T6607] loop0: detected capacity change from 0 to 1024 [ 741.276576][ T6574] loop3: detected capacity change from 0 to 32768 [ 741.331851][ T6574] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 741.360238][ T6607] syz.0.8811: attempt to access beyond end of device [ 741.360238][ T6607] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 741.441458][ T6578] loop4: detected capacity change from 0 to 32768 [ 741.503502][ T6574] XFS (loop3): Ending clean mount [ 741.539079][ T6578] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 741.722818][ T5784] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 741.825733][ T6578] XFS (loop4): Ending clean mount [ 741.866797][ T6578] XFS (loop4): Quotacheck needed: Please wait. [ 741.916126][ T6609] loop1: detected capacity change from 0 to 40427 [ 741.993360][ T6609] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 742.042590][ T6609] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 742.099584][ T6609] F2FS-fs (loop1): invalid crc value [ 742.104628][ T6578] XFS (loop4): Quotacheck: Done. [ 742.142955][ T6609] F2FS-fs (loop1): Found nat_bits in checkpoint [ 742.195152][ T6643] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 742.245756][ T6643] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 742.287070][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 742.361952][ T6609] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 742.402700][ T6609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 742.430056][ T9754] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 743.101736][ T6679] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 743.589897][ T6693] set_capacity_and_notify: 1 callbacks suppressed [ 743.589915][ T6693] loop1: detected capacity change from 0 to 4096 [ 743.637052][ T6693] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 743.671131][ T6706] loop4: detected capacity change from 0 to 16 [ 743.709188][ T6706] erofs: (device loop4): mounted with root inode @ nid 36. [ 743.831631][ T6675] loop0: detected capacity change from 0 to 32768 [ 743.870846][ T6693] ntfs3: loop1: failed to convert "c46c" to macturkish [ 744.548208][ T6747] netlink: 'syz.0.8841': attribute type 10 has an invalid length. [ 744.581373][ T6747] dummy0: entered promiscuous mode [ 744.595545][ T6747] team0: Port device dummy0 added [ 744.636063][ T6747] netlink: 'syz.0.8841': attribute type 10 has an invalid length. [ 744.902651][ T6756] loop4: detected capacity change from 0 to 512 [ 744.927280][ T6747] dummy0 (unregistering): left promiscuous mode [ 744.958926][ T6756] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 744.979350][ T6747] team0: Port device dummy0 removed [ 744.997039][ T6756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 745.032261][ T6756] System zones: 0-1, 15-15, 18-18, 34-34 [ 745.051250][ T6756] EXT4-fs (loop4): orphan cleanup on readonly fs [ 745.067835][ T6756] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 745.077306][ T6756] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 745.110549][ T6756] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 745.131833][ T6756] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.8845: bad orphan inode 16 [ 745.153277][ T6756] ext4_test_bit(bit=15, block=18) = 1 [ 745.158681][ T6756] is_bad_inode(inode)=0 [ 745.162878][ T6756] NEXT_ORPHAN(inode)=0 [ 745.176727][ T6756] max_ino=32 [ 745.179977][ T6756] i_nlink=2 [ 745.184342][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 745.249672][ T6756] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 745.281535][ T6756] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 745.355424][ T9754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.765205][ T6795] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 746.086229][ T6802] loop0: detected capacity change from 0 to 4096 [ 746.277906][ T6802] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 746.420927][ T6802] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 746.462724][ T6821] ntfs3: Volume is dirty and "force" flag is not set! [ 746.482252][ T6822] loop4: detected capacity change from 0 to 64 [ 746.729040][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8861'. [ 746.871821][ T6814] loop3: detected capacity change from 0 to 32768 [ 746.915728][ T6814] [ 746.915728][ T6814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 746.915728][ T6814] [ 747.018795][ T5784] [ 747.018795][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 747.018795][ T5784] [ 747.066875][ T5784] [ 747.066875][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 747.066875][ T5784] [ 747.237766][ T789] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 747.453435][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.485532][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.511472][ T789] usb 1-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00 [ 747.538261][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.563284][ T789] usb 1-1: config 0 descriptor?? [ 747.629036][ T6876] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 747.782733][ T5159] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 747.987497][ T5159] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 747.999205][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 748.010325][ T5159] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 748.024729][ T5159] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 748.033992][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.047717][ T789] wacom 0003:056A:0117.0004: Unknown device_type for 'HID 056a:0117'. Ignoring. [ 748.061994][ T5159] usb 4-1: config 0 descriptor?? [ 748.067780][ T6867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 748.269386][T28963] usb 1-1: USB disconnect, device number 55 [ 748.543684][ T5159] sony 0003:054C:1000.0005: unknown main item tag 0x4 [ 748.552365][ T5159] sony 0003:054C:1000.0005: unknown main item tag 0xd [ 748.585027][ T5159] sony 0003:054C:1000.0005: hidraw0: USB HID v9.42 Device [HID 054c:1000] on usb-dummy_hcd.3-1/input0 [ 748.605759][ T5159] sony 0003:054C:1000.0005: failed to claim input [ 748.817686][T28963] usb 4-1: USB disconnect, device number 54 [ 748.954533][ T6895] loop1: detected capacity change from 0 to 32768 [ 748.984105][ T6895] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 749.048804][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.077947][ T6929] loop0: detected capacity change from 0 to 256 [ 749.089368][ T6929] exfat: Deprecated parameter 'utf8' [ 749.095026][ T6929] exfat: Deprecated parameter 'namecase' [ 749.119413][ T6929] exfat: Deprecated parameter 'namecase' [ 749.145578][ T6929] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 749.223019][ T6895] XFS (loop1): Ending clean mount [ 749.250624][ T6895] XFS (loop1): Quotacheck needed: Please wait. [ 749.320749][ T6895] XFS (loop1): Quotacheck: Done. [ 749.509084][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 749.642325][ T6947] netlink: 'syz.4.8882': attribute type 10 has an invalid length. [ 749.688992][ T6947] dummy0: entered promiscuous mode [ 749.694731][ T6947] team0: Port device dummy0 added [ 749.716587][ T6947] netlink: 'syz.4.8882': attribute type 10 has an invalid length. [ 749.805704][ T6950] loop3: detected capacity change from 0 to 2048 [ 749.829743][ T6947] dummy0 (unregistering): left promiscuous mode [ 749.877408][ T6947] team0: Port device dummy0 removed [ 749.896707][ T6953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.155197][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8889'. [ 750.540618][ T5159] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 750.756745][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.768148][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.783738][ T5159] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.803946][ T5159] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.813495][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.848204][ T5159] usb 4-1: config 0 descriptor?? [ 751.194373][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8895'. [ 751.309538][ T5159] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 751.332525][ T5159] plantronics 0003:047F:FFFF.0006: parse failed [ 751.341029][ T5159] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 751.520804][ T789] usb 4-1: USB disconnect, device number 55 [ 751.551771][ T7016] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8898'. [ 751.561969][ T7016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8898'. [ 751.686978][ T7026] loop1: detected capacity change from 0 to 1024 [ 751.726190][ T7026] hfsplus: small dir entry [ 751.995411][ T7035] loop1: detected capacity change from 0 to 4096 [ 752.042003][ T7042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 752.235980][ T7048] loop3: detected capacity change from 0 to 256 [ 752.588103][ T7030] loop0: detected capacity change from 0 to 32768 [ 752.673977][ T7030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 753.055941][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 753.356750][ T5088] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 753.611238][ T7111] loop3: detected capacity change from 0 to 256 [ 753.618667][ T7111] exfat: Deprecated parameter 'namecase' [ 753.654330][ T7111] exfat: Deprecated parameter 'utf8' [ 753.721913][ T7111] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 754.518000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 754.594541][ T7148] loop4: detected capacity change from 0 to 32768 [ 754.617479][ T7148] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.8935 (7148) [ 754.643530][ T7148] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 754.654914][ T7148] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 754.671221][ T7148] BTRFS info (device loop4): using free space tree [ 754.741191][ T7148] BTRFS info (device loop4): enabling ssd optimizations [ 754.751803][ T7148] BTRFS info (device loop4): auto enabling async discard [ 754.784418][ T5856] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 754.893870][ T9754] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 755.009346][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.027098][ T5856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 755.062169][ T5856] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 755.093052][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.122253][ T5769] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop4 scanned by udevd (5769) [ 755.139957][ T5856] usb 2-1: config 0 descriptor?? [ 755.160603][ T5856] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 755.189092][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 755.222494][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 755.264714][ T5856] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 755.289807][ T5856] usb 2-1: media controller created [ 755.351687][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.367840][ T7157] dvb-usb: bulk message failed: -22 (2/0) [ 755.446331][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 755.471310][ T5856] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 755.500958][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 755.549510][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8941'. [ 755.562487][ T5856] dvb-usb: schedule remote query interval to 150 msecs. [ 755.577936][ T5856] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 755.605291][ T5856] usb 2-1: USB disconnect, device number 48 [ 755.672952][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 755.822708][ T7220] loop4: detected capacity change from 0 to 512 [ 755.836935][ T7220] ext4: Unknown parameter 'permit_directio' [ 755.919848][ T7225] loop4: detected capacity change from 0 to 64 [ 756.014319][ T28] audit: type=1800 audit(1785755774.580:695): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8944" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 756.298628][ T7243] [ 756.301021][ T7243] ====================================================== [ 756.308068][ T7243] WARNING: possible circular locking dependency detected [ 756.315132][ T7243] syzkaller #0 Not tainted [ 756.319563][ T7243] ------------------------------------------------------ [ 756.326595][ T7243] syz.1.8949/7243 is trying to acquire lock: [ 756.332592][ T7243] ffffffff976c1598 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 756.342827][ T7243] [ 756.342827][ T7243] but task is already holding lock: [ 756.350214][ T7243] ffff88807b3d0cb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 756.360644][ T7243] [ 756.360644][ T7243] which lock already depends on the new lock. [ 756.360644][ T7243] [ 756.371097][ T7243] [ 756.371097][ T7243] the existing dependency chain (in reverse order) is: [ 756.380134][ T7243] [ 756.380134][ T7243] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 756.388432][ T7243] __mutex_lock+0x135/0xc80 [ 756.393512][ T7243] nf_tables_dumpreset_obj+0x72/0xa0 [ 756.399382][ T7243] netlink_dump+0x738/0xec0 [ 756.404503][ T7243] __netlink_dump_start+0x57c/0x7a0 [ 756.410242][ T7243] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 756.416446][ T7243] nf_tables_getobj_reset+0x1e1/0x630 [ 756.422383][ T7243] nfnetlink_rcv_msg+0x89c/0x1290 [ 756.428030][ T7243] netlink_rcv_skb+0x235/0x4c0 [ 756.433360][ T7243] nfnetlink_rcv+0x2c9/0x2490 [ 756.438587][ T7243] netlink_unicast+0x7b1/0x930 [ 756.443944][ T7243] netlink_sendmsg+0x8d0/0xbf0 [ 756.449249][ T7243] ____sys_sendmsg+0x61b/0x980 [ 756.454605][ T7243] ___sys_sendmsg+0x2a6/0x360 [ 756.459822][ T7243] __se_sys_sendmsg+0x1d0/0x2c0 [ 756.465219][ T7243] do_syscall_64+0x55/0xb0 [ 756.470184][ T7243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.476614][ T7243] [ 756.476614][ T7243] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 756.484881][ T7243] __mutex_lock+0x135/0xc80 [ 756.489926][ T7243] __netlink_dump_start+0xf4/0x7a0 [ 756.495573][ T7243] ip_set_dump+0x15c/0x1f0 [ 756.500531][ T7243] nfnetlink_rcv_msg+0xcaf/0x1290 [ 756.506195][ T7243] netlink_rcv_skb+0x235/0x4c0 [ 756.511498][ T7243] nfnetlink_rcv+0x2c9/0x2490 [ 756.516709][ T7243] netlink_unicast+0x7b1/0x930 [ 756.522013][ T7243] netlink_sendmsg+0x8d0/0xbf0 [ 756.527324][ T7243] ____sys_sendmsg+0x61b/0x980 [ 756.532625][ T7243] ___sys_sendmsg+0x2a6/0x360 [ 756.537840][ T7243] __se_sys_sendmsg+0x1d0/0x2c0 [ 756.543223][ T7243] do_syscall_64+0x55/0xb0 [ 756.548178][ T7243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.554605][ T7243] [ 756.554605][ T7243] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 756.562436][ T7243] __lock_acquire+0x37ef/0x7d80 [ 756.567819][ T7243] lock_acquire+0x19e/0x420 [ 756.572886][ T7243] __mutex_lock+0x135/0xc80 [ 756.577931][ T7243] ip_set_nfnl_get_byindex+0x67/0x230 [ 756.583836][ T7243] set_target_v1_checkentry+0x8c/0x4f0 [ 756.589903][ T7243] xt_check_target+0x4a1/0xbf0 [ 756.595235][ T7243] nft_target_init+0x694/0xa00 [ 756.600561][ T7243] nf_tables_newrule+0x176e/0x2870 [ 756.606241][ T7243] nfnetlink_rcv+0x1133/0x2490 [ 756.611555][ T7243] netlink_unicast+0x7b1/0x930 [ 756.616866][ T7243] netlink_sendmsg+0x8d0/0xbf0 [ 756.622160][ T7243] ____sys_sendmsg+0x61b/0x980 [ 756.627472][ T7243] ___sys_sendmsg+0x2a6/0x360 [ 756.632706][ T7243] __se_sys_sendmsg+0x1d0/0x2c0 [ 756.638091][ T7243] do_syscall_64+0x55/0xb0 [ 756.643072][ T7243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.649490][ T7243] [ 756.649490][ T7243] other info that might help us debug this: [ 756.649490][ T7243] [ 756.659745][ T7243] Chain exists of: [ 756.659745][ T7243] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 756.659745][ T7243] [ 756.674208][ T7243] Possible unsafe locking scenario: [ 756.674208][ T7243] [ 756.681658][ T7243] CPU0 CPU1 [ 756.687062][ T7243] ---- ---- [ 756.692450][ T7243] lock(&nft_net->commit_mutex); [ 756.697491][ T7243] lock(nlk_cb_mutex-NETFILTER); [ 756.705056][ T7243] lock(&nft_net->commit_mutex); [ 756.712603][ T7243] lock(nfnl_subsys_ipset); [ 756.717200][ T7243] [ 756.717200][ T7243] *** DEADLOCK *** [ 756.717200][ T7243] [ 756.725350][ T7243] 1 lock held by syz.1.8949/7243: [ 756.730381][ T7243] #0: ffff88807b3d0cb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 756.741201][ T7243] [ 756.741201][ T7243] stack backtrace: [ 756.747098][ T7243] CPU: 1 PID: 7243 Comm: syz.1.8949 Not tainted syzkaller #0 [ 756.754505][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.764579][ T7243] Call Trace: [ 756.767879][ T7243] [ 756.770835][ T7243] dump_stack_lvl+0x18c/0x250 [ 756.775540][ T7243] ? load_image+0x420/0x420 [ 756.780076][ T7243] ? show_regs_print_info+0x20/0x20 [ 756.785303][ T7243] ? print_circular_bug+0x12b/0x1a0 [ 756.790518][ T7243] check_noncircular+0x2fc/0x400 [ 756.795479][ T7243] ? print_deadlock_bug+0x5d0/0x5d0 [ 756.800700][ T7243] ? lockdep_lock+0xf5/0x230 [ 756.805316][ T7243] ? _find_first_zero_bit+0xd6/0x100 [ 756.810662][ T7243] __lock_acquire+0x37ef/0x7d80 [ 756.815545][ T7243] ? __lock_acquire+0x1262/0x7d80 [ 756.820594][ T7243] ? verify_lock_unused+0x140/0x140 [ 756.825910][ T7243] lock_acquire+0x19e/0x420 [ 756.830433][ T7243] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 756.836024][ T7243] ? __might_sleep+0xe0/0xe0 [ 756.840637][ T7243] ? read_lock_is_recursive+0x20/0x20 [ 756.846030][ T7243] ? is_bpf_text_address+0x26/0x2a0 [ 756.851267][ T7243] __mutex_lock+0x135/0xc80 [ 756.855791][ T7243] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 756.861357][ T7243] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 756.866949][ T7243] ? mutex_lock_nested+0x20/0x20 [ 756.871921][ T7243] ? ip_set_pernet+0x23/0x230 [ 756.876620][ T7243] ip_set_nfnl_get_byindex+0x67/0x230 [ 756.882006][ T7243] set_target_v1_checkentry+0x8c/0x4f0 [ 756.887486][ T7243] ? set_target_v1+0x3f0/0x3f0 [ 756.892270][ T7243] xt_check_target+0x4a1/0xbf0 [ 756.897075][ T7243] ? __flush_work+0x120/0xac0 [ 756.901775][ T7243] ? xt_find_jump_offset+0xe0/0xe0 [ 756.906924][ T7243] ? stack_trace_snprint+0xf0/0xf0 [ 756.912067][ T7243] ? __stack_depot_save+0x1f/0x660 [ 756.917205][ T7243] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 756.923203][ T7243] ? nft_target_init+0x1ea/0xa00 [ 756.928164][ T7243] nft_target_init+0x694/0xa00 [ 756.932978][ T7243] ? nfnetlink_rcv+0x1133/0x2490 [ 756.937927][ T7243] ? netlink_unicast+0x7b1/0x930 [ 756.942910][ T7243] ? nft_target_release_ops+0x70/0x70 [ 756.948336][ T7243] ? nf_tables_newrule+0x1515/0x2870 [ 756.953649][ T7243] ? rcu_is_watching+0x15/0xb0 [ 756.958433][ T7243] ? nf_tables_newrule+0x1515/0x2870 [ 756.963741][ T7243] ? __kmalloc+0xe5/0x240 [ 756.968136][ T7243] nf_tables_newrule+0x176e/0x2870 [ 756.973275][ T7243] ? nf_tables_delchain+0x1050/0x1050 [ 756.978716][ T7243] ? __lock_acquire+0x7d80/0x7d80 [ 756.983763][ T7243] ? mutex_unlock+0x10/0x10 [ 756.988300][ T7243] ? __nla_parse+0x40/0x50 [ 756.992738][ T7243] nfnetlink_rcv+0x1133/0x2490 [ 756.997525][ T7243] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 757.003166][ T7243] ? verify_lock_unused+0x140/0x140 [ 757.008411][ T7243] ? __lock_acquire+0x7d80/0x7d80 [ 757.013453][ T7243] ? netlink_deliver_tap+0x2e/0x1b0 [ 757.018675][ T7243] netlink_unicast+0x7b1/0x930 [ 757.023478][ T7243] netlink_sendmsg+0x8d0/0xbf0 [ 757.028260][ T7243] ? netlink_getsockopt+0x590/0x590 [ 757.033503][ T7243] ? apparmor_socket_sendmsg+0x8e/0x330 [ 757.039096][ T7243] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 757.044407][ T7243] ? security_socket_sendmsg+0x80/0xa0 [ 757.049976][ T7243] ? netlink_getsockopt+0x590/0x590 [ 757.055194][ T7243] ____sys_sendmsg+0x61b/0x980 [ 757.059998][ T7243] ? __asan_memset+0x22/0x40 [ 757.064638][ T7243] ? __sys_sendmsg_sock+0x30/0x30 [ 757.069704][ T7243] ? __import_iovec+0x5f2/0x850 [ 757.074597][ T7243] ? import_iovec+0x73/0xa0 [ 757.079145][ T7243] ___sys_sendmsg+0x2a6/0x360 [ 757.083846][ T7243] ? __sys_sendmsg+0x2b0/0x2b0 [ 757.088644][ T7243] __se_sys_sendmsg+0x1d0/0x2c0 [ 757.093613][ T7243] ? __x64_sys_sendmsg+0x80/0x80 [ 757.098571][ T7243] ? lockdep_hardirqs_on+0x98/0x150 [ 757.103803][ T7243] do_syscall_64+0x55/0xb0 [ 757.108244][ T7243] ? clear_bhb_loop+0x40/0x90 [ 757.112937][ T7243] ? clear_bhb_loop+0x40/0x90 [ 757.117626][ T7243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.123537][ T7243] RIP: 0033:0x7feb5ff9e019 [ 757.127980][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.147702][ T7243] RSP: 002b:00007feb60e3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.156142][ T7243] RAX: ffffffffffffffda RBX: 00007feb60225fa0 RCX: 00007feb5ff9e019 [ 757.164123][ T7243] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 757.172107][ T7243] RBP: 00007feb6003500c R08: 0000000000000000 R09: 0000000000000000 [ 757.180098][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.188087][ T7243] R13: 00007feb60226038 R14: 00007feb60225fa0 R15: 00007ffcc4720b18 [ 757.196081][ T7243] [ 757.295679][ T7243] Cannot find add_set index 0 as target [ 757.766844][ T7203] Bluetooth: hci1: command 0x0406 tx timeout