last executing test programs: 7m33.213214505s ago: executing program 2 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1, 0x40, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20008000) 7m33.030406571s ago: executing program 2 (id=1357): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x6, 0x4) 7m32.787887424s ago: executing program 2 (id=1361): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="3d0d8f929d36d99c19d99c138002cdf0e58683ee338052edae8fe82b406a6abe3f845d219f9fd3e69dafad010069beee8fe486cc41c0d102976bd34daada5a7b56156bf75e3aa7774f816d8c5c12beaf2e67cb9398730e8b1eea29b131753ca48fc2d9c32eac08210f971fcf13d756464395e4ac8a06ddf5df473e89ae07fba67a4dbf58b696b8a43d31f0c8316fb2a818a9b93c3b80f2303412cf4ff9884cb45d17679f2aaa4725904c876771b756ac7dad467950a86cc600f909c4514a2bfb8b0d7aba253fd70fa49d07deef6bb5d8523b568187fe224a5b6b9b7ac9484c84ffee1956520d5d9a20a340549293bb4743d698d0f0ca", @ANYRES16=0x0], 0x1, 0x19c, &(0x7f0000000780)="$eJzsVT9PIkEU/83usAtX3F19ueSKu9xBcbAsd8ZOK8MHsDYSXJG4+IclUQiJWPE9bPgifgcLjQ0WxsQCezNmZt6ui4mFCUY080vg9/7Om7eTebMV7UcugPtJv45lKNj4jHPGwAH8YNq24mq+cTQXSb/mmgtkPyG+II66ve1aGAbtpwJ73vVSYWYLzbew9vol5GHOQacfXKArgxktSDdtTg/uiHb3JtUf1aVjC7dqlp1N+nUprAMQQgggPg+wdIwN4DSJAb5x9WM2RBIjM6XyB0Cp09orRd3e32ar1ggawY7vVxa8f5733y9tNsPA0/8sVcKiupILAORMzaX8GQCXOR3zCdNgqa2Rn6VzndRwzv+czrUYT3JjzpJP5tJsh/wEq/itfAcDJgiA+EIRqqUqGGxwpZR5an+6t6xyFOu74cYQDPJdES7gjcBhxWljZGJFpiZKUFkcxNseEv8irhKPiMfE8ZsVv0VcrXBFWn4AODisdTrtsjRpKbH5ic3/mlS2qOqdM93cdxcGBgYGBgYGBu8MDwEAAP//3ttbHw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 7m32.570230379s ago: executing program 2 (id=1364): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x20108c2, &(0x7f0000000400)=ANY=[@ANYBLOB='usrquota,iocharset=cp949,discard,integrity,quota,uid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',fsname=]}@}X}[-)+,fsname=obj_role,subj_user=,subj_role=*,fowner>', @ANYRESDEC, @ANYRES16], 0xff, 0x6178, &(0x7f000000c680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m30.719529439s ago: executing program 2 (id=1390): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x1808001, &(0x7f0000000000)={[{@coherency_full}, {@noacl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@err_cont}, {@data_writeback}, {@journal_async_commit}, {@commit}]}, 0x1, 0x4470, &(0x7f0000008c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 7m29.122542671s ago: executing program 2 (id=1410): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) 7m28.485865492s ago: executing program 32 (id=1410): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) 3.75767069s ago: executing program 0 (id=6875): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x10000}, &(0x7f0000000440)=0x8) 3.360209707s ago: executing program 0 (id=6879): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='::,:\x00\ai\x88\x04\xc4\xa4\xe3\xce\xcc\x1a\xc7\xc4\xa5\xa0M\x02Z)\bok\xd4\x14y\xfe^\a\xe0\xadK;y\xef\xa5A\x1a\x9dfM\xd2\xe3C\xd6\xf1F\x04\xea\'0\xbfN<\xf4\xf6\x93\xb1\xe2o\xef\xa8[\x1a\x01\x00\x01\x00\x00\x00\x00\x00a\x14\xf6\x1dX\x9el\xb1\xd0\xca\x04\x15R\x04K\x18\xc1\xdb\x8fim\x80#\xf4b~\xce\x92\xfa\x816Pb\xb3\xc8\xee\xe0\xea\xf6E\x80\xcdpdV\x8a\x8e\x84\xaf\x94pi\xbf\x9fh\x0f_kp\x12\xdd\r\xdf*\xbbz\x9e\xf0v\x15R\xf1\xc5\xa8p\xf2\xc1\xe4\xa9!\xb5\\\\(ZpX_\xc8C\x04\xa0\x02\xe3s\x81\x82\xf4/0J\x99\x9b\x1c:\xf6\x98Q\x92#\xccx\xa4\xd2\xdax\x04\x91]\x94', 0x0) 3.047543764s ago: executing program 0 (id=6885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x6, 0x0, 0x0) 2.747960698s ago: executing program 0 (id=6890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20000000) 2.520174729s ago: executing program 0 (id=6895): r0 = semget$private(0x0, 0x3, 0x401) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 2.351314735s ago: executing program 6 (id=6898): r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) 2.299445671s ago: executing program 0 (id=6900): r0 = syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 2.06339146s ago: executing program 6 (id=6904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.873930965s ago: executing program 3 (id=6906): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@nullb, 0x0, 0x0) 1.85904445s ago: executing program 1 (id=6907): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 1.661158047s ago: executing program 6 (id=6909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x3c, 0x25, 0x1, 0x0, 0x0, {}, [{0x8}, {0x7}, {0x8}]}, 0x3c}}, 0x0) 1.634865287s ago: executing program 1 (id=6910): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x393b, 0x1) 1.467934762s ago: executing program 3 (id=6912): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ff, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 1.299574999s ago: executing program 5 (id=6914): r0 = socket(0x1d, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x6e4ec31f63395e91, 0x0, 0x0) 1.290926591s ago: executing program 1 (id=6916): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) 1.244586771s ago: executing program 6 (id=6917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 1.127450071s ago: executing program 3 (id=6918): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) 1.125239009s ago: executing program 4 (id=6919): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000005c0)=0x11b4, 0x4) 1.109000246s ago: executing program 5 (id=6920): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x24, 0x301, 0x0, 0x80, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.044737561s ago: executing program 1 (id=6921): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fanotify_init(0x1, 0x101000) 905.691865ms ago: executing program 3 (id=6922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 905.60343ms ago: executing program 4 (id=6923): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 898.529053ms ago: executing program 6 (id=6934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 868.020145ms ago: executing program 5 (id=6924): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002000000000000000000100033000203"], 0xa0}}, 0x0) 843.180204ms ago: executing program 1 (id=6925): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 690.867793ms ago: executing program 6 (id=6926): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)=ANY=[@ANYBLOB='acl,heartbeat=none,inode64,localalloc=00000\x00\x000000000001714,acl,localflocks,coherency=full,noacl,\x00'], 0x1, 0x4450, &(0x7f0000008900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 690.770702ms ago: executing program 4 (id=6927): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x6) 636.998063ms ago: executing program 3 (id=6928): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 535.480564ms ago: executing program 1 (id=6929): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 512.418975ms ago: executing program 5 (id=6930): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x57, 0x7, 0xc, 0x9, 0x4000000, 0x8100}) 441.71379ms ago: executing program 4 (id=6931): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x9, 0x0) 288.742051ms ago: executing program 3 (id=6932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 287.926171ms ago: executing program 5 (id=6933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, 0x0) 171.45078ms ago: executing program 4 (id=6935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="06ff03076844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 109.641138ms ago: executing program 5 (id=6936): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') 0s ago: executing program 4 (id=6937): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xd4, 0x30, 0x51b, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="140d0382a66c"}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x5c, 0x2, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x4, 0x30000005, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd4}}, 0x0) kernel console output (not intermixed with test programs): ] usb 4-1: USB disconnect, device number 18 [ 534.143947][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 534.170434][ T6005] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 534.189199][ T6005] keyspan 4-1:0.133: device disconnected [ 534.204292][ T5939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.250032][T18031] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 534.265709][ T5939] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 534.281529][T17989] loop6: detected capacity change from 0 to 32768 [ 534.331086][ T5939] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.368185][T17989] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.382611][ T5939] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.439702][ T5939] usb 2-1: config 1 interface 1 has no altsetting 0 [ 534.455030][ T5939] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.482355][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.510648][ T5939] usb 2-1: Product: syz [ 534.514984][ T5939] usb 2-1: Manufacturer: syz [ 534.519591][ T5939] usb 2-1: SerialNumber: syz [ 534.556294][ T5844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.640496][T17989] XFS (loop6): Ending clean mount [ 534.733569][T17989] XFS (loop6): Quotacheck needed: Please wait. [ 534.846590][ T5939] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 534.878682][ T5939] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 534.892759][T17989] XFS (loop6): Quotacheck: Done. [ 534.901821][ T5939] usb 2-1: 2:1 : invalid channels 0 [ 535.007830][ T5939] usb 2-1: USB disconnect, device number 26 [ 535.157740][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.270229][ T9194] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 535.690888][T18068] loop3: detected capacity change from 0 to 1024 [ 535.825646][T18070] veth3: entered promiscuous mode [ 535.983382][ T12] hfsplus: b-tree write err: -5, ino 4 [ 536.150075][ T30] audit: type=1326 audit(765.102:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.3.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 536.232238][T18084] loop4: detected capacity change from 0 to 256 [ 536.248980][ T30] audit: type=1326 audit(765.102:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.3.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 536.342143][ T30] audit: type=1326 audit(765.102:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.3.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 536.418656][ T30] audit: type=1326 audit(765.102:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18080 comm="syz.3.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 536.692604][ T5840] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 536.876690][ T5840] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 536.899091][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.920506][ T5840] usb 7-1: Product: syz [ 536.937953][ T5840] usb 7-1: Manufacturer: syz [ 536.964758][ T5840] usb 7-1: SerialNumber: syz [ 536.993721][ T5840] usb 7-1: config 0 descriptor?? [ 537.010987][ T5840] ch341 7-1:0.0: ch341-uart converter detected [ 537.234892][ T5840] usb 7-1: failed to receive control message: -71 [ 537.241430][ T5840] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 537.271998][T18117] loop0: detected capacity change from 0 to 512 [ 537.312948][ T5840] usb 7-1: USB disconnect, device number 18 [ 537.323737][T18117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 537.357435][ T5840] ch341 7-1:0.0: device disconnected [ 537.419257][T18117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.607214][T18117] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 537.644026][T18117] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 537.676347][T18117] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.5175: Failed to acquire dquot type 1 [ 537.886556][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.392765][ T6005] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 538.518222][T18157] loop1: detected capacity change from 0 to 2048 [ 538.558399][ T6005] usb 4-1: Using ep0 maxpacket: 8 [ 538.570844][ T6005] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 538.619730][ T6005] usb 4-1: config 0 has no interface number 0 [ 538.640032][ T6005] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 538.644669][T18157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.651141][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.669771][ T6005] usb 4-1: Product: syz [ 538.674215][ T6005] usb 4-1: Manufacturer: syz [ 538.679185][ T6005] usb 4-1: SerialNumber: syz [ 538.688383][ T6005] usb 4-1: config 0 descriptor?? [ 538.706334][ T6005] as10x_usb: device has been detected [ 538.712909][ T6005] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 538.739321][ T6005] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 538.757002][ T6005] as10x_usb: error during firmware upload part1 [ 538.764237][ T6005] Registered device PCTV Systems picoStick (74e) [ 538.809462][T18157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 538.902466][T18129] loop5: detected capacity change from 0 to 32768 [ 538.954895][T18168] comedi comedi0: pcl726: I/O port conflict (0x3,16) [ 539.023392][ T5939] usb 4-1: USB disconnect, device number 19 [ 539.046467][T18129] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 539.100412][ T5939] Unregistered device PCTV Systems picoStick (74e) [ 539.143201][ T5939] as10x_usb: device has been disconnected [ 539.159851][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.354371][T18129] XFS (loop5): Ending clean mount [ 539.369811][T18186] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5205'. [ 539.514155][ T5853] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 539.854213][T18196] loop1: detected capacity change from 0 to 2048 [ 539.876759][T18199] loop3: detected capacity change from 0 to 256 [ 539.903811][T18199] exfat: Deprecated parameter 'namecase' [ 539.910793][T18196] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504 [ 540.000935][T18196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.046140][T18199] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 540.255546][T18199] fuse: Bad value for 'fd' [ 540.723522][T18216] loop0: detected capacity change from 0 to 2048 [ 540.773073][T18221] loop5: detected capacity change from 0 to 256 [ 540.817089][T18221] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 540.894862][T18221] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 541.005702][ T5897] loop0: p1 < > p3 [ 541.034872][ T5897] loop0: p3 size 134217728 extends beyond EOD, truncated [ 541.081667][T18216] loop0: p1 < > p3 [ 541.088039][T18216] loop0: p3 size 134217728 extends beyond EOD, truncated [ 541.277671][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 541.294371][ T8625] udevd[8625]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 541.326966][T18237] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5225'. [ 541.369991][T18233] loop6: detected capacity change from 0 to 2048 [ 541.392110][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 541.420069][T18233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.486937][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 541.519090][ T6025] udevd[6025]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 541.568741][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 541.603116][ T9] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 541.631677][ T9] usb 2-1: config 0 has no interface number 0 [ 541.657881][ T9] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 541.695567][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.725621][ T9] usb 2-1: Product: syz [ 541.742262][ T9] usb 2-1: Manufacturer: syz [ 541.751625][ T9] usb 2-1: SerialNumber: syz [ 541.786568][ T9] usb 2-1: config 0 descriptor?? [ 541.839661][ T9] as10x_usb: device has been detected [ 541.875704][ T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 541.957511][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 542.005369][ T9] as10x_usb: error during firmware upload part1 [ 542.028478][ T9] Registered device PCTV Systems picoStick (74e) [ 542.166177][ T5939] usb 2-1: USB disconnect, device number 27 [ 542.242156][ T5939] Unregistered device PCTV Systems picoStick (74e) [ 542.280949][ T5939] as10x_usb: device has been disconnected [ 542.296502][T18252] IPv6: Can't replace route, no match found [ 542.763635][T18236] loop3: detected capacity change from 0 to 32768 [ 542.778173][T18236] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5227 (18236) [ 542.826712][T18236] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 542.859901][T18264] loop6: detected capacity change from 0 to 64 [ 542.866577][T18236] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 543.163428][T18236] BTRFS info (device loop3): enabling ssd optimizations [ 543.222719][T18236] BTRFS info (device loop3): enabling free space tree [ 543.582989][ T5847] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.606887][T18249] loop4: detected capacity change from 0 to 32768 [ 543.647086][ T30] audit: type=1326 audit(772.602:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18297 comm="syz.6.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 543.701071][ T30] audit: type=1326 audit(772.642:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18297 comm="syz.6.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 543.763391][T18249] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 543.765687][ T30] audit: type=1326 audit(772.642:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18297 comm="syz.6.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 543.794234][ T30] audit: type=1326 audit(772.642:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18297 comm="syz.6.5249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 543.985210][T18308] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 544.027561][T18249] XFS (loop4): Ending clean mount [ 544.074921][T18249] XFS (loop4): Quotacheck needed: Please wait. [ 544.151027][T18249] XFS (loop4): Quotacheck: Done. [ 544.489198][ T5844] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 544.503616][T18319] loop3: detected capacity change from 0 to 512 [ 544.539795][T18319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.640287][T18293] loop1: detected capacity change from 0 to 32768 [ 544.704898][T18319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.792174][T18323] loop0: detected capacity change from 0 to 4096 [ 544.821013][T18293] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 544.866744][T18319] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 544.887275][T18319] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 544.982762][T18319] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.5254: Failed to acquire dquot type 1 [ 545.021356][T18293] XFS (loop1): Ending clean mount [ 545.398266][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.441433][ T5835] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 545.593258][T18344] loop6: detected capacity change from 0 to 1024 [ 545.888356][ T1096] hfsplus: b-tree write err: -5, ino 4 [ 546.582849][T18375] netlink: 'syz.6.5277': attribute type 4 has an invalid length. [ 547.034677][ T5912] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 547.218579][ T5912] usb 6-1: not running at top speed; connect to a high speed hub [ 547.248577][ T5912] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 547.284677][ T5912] usb 6-1: config 95 has no interface number 0 [ 547.290911][ T5912] usb 6-1: config 95 interface 1 has no altsetting 0 [ 547.343147][ T5912] usb 6-1: string descriptor 0 read error: -22 [ 547.359870][ T5912] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 547.400666][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.956802][ T6005] usb 6-1: USB disconnect, device number 22 [ 548.634684][T18451] IPv6: Can't replace route, no match found [ 548.760698][T18455] loop1: detected capacity change from 0 to 164 [ 548.806221][T18457] loop5: detected capacity change from 0 to 64 [ 548.855204][T18455] Unsupported NM flag settings (240) [ 548.874633][T18457] Trying to free block not in datazone [ 548.899691][T18457] Trying to free block not in datazone [ 548.924884][T18457] Trying to free block not in datazone [ 548.975176][T18457] Trying to free block not in datazone [ 548.996312][T18457] Trying to free block not in datazone [ 549.020997][T18457] minix_free_block (loop5:6): bit already cleared [ 549.054891][T18457] Trying to free block not in datazone [ 549.060502][T18457] Trying to free block not in datazone [ 549.516792][T18477] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5328'. [ 549.582366][T18477] batadv_slave_1: entered promiscuous mode [ 549.643708][T18437] loop6: detected capacity change from 0 to 32768 [ 549.711565][T18437] (syz.6.5307,18437,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.810759][T18437] (syz.6.5307,18437,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.944174][T18496] loop3: detected capacity change from 0 to 256 [ 549.989614][T18437] JBD2: Ignoring recovery information on journal [ 550.248603][T18437] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 550.502009][T18518] netlink: 45 bytes leftover after parsing attributes in process `syz.4.5341'. [ 550.643379][ T9194] ocfs2: Unmounting device (7,6) on (node local) [ 550.880103][T18534] Lens A: ================= START STATUS ================= [ 550.951858][T18534] Lens A: Focus, Absolute: 0 [ 550.980733][T18534] Lens A: ================== END STATUS ================== [ 551.326038][T18551] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 551.540862][T18506] loop0: detected capacity change from 0 to 32768 [ 551.623714][T18506] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 551.623714][T18506] [ 551.656384][T18506] ERROR: (device loop0): remounting filesystem as read-only [ 551.717236][T18506] jfs_lookup: dtSearch returned -5 [ 551.729282][T18523] loop3: detected capacity change from 0 to 32768 [ 551.791175][T18523] (syz.3.5340,18523,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 551.837082][T18569] loop5: detected capacity change from 0 to 512 [ 551.863823][T18523] (syz.3.5340,18523,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 551.919397][T18569] EXT4-fs: Ignoring removed orlov option [ 551.963085][T18523] JBD2: Ignoring recovery information on journal [ 552.337114][T18523] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 552.384933][T18569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.445725][T18596] loop6: detected capacity change from 0 to 4096 [ 552.689129][ T5853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.882859][ T5847] ocfs2: Unmounting device (7,3) on (node local) [ 552.972591][ T30] audit: type=1326 audit(781.912:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18607 comm="syz.5.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 553.070085][ T30] audit: type=1326 audit(781.912:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18607 comm="syz.5.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 553.200421][ T30] audit: type=1326 audit(781.922:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18607 comm="syz.5.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 553.295336][ T30] audit: type=1326 audit(781.922:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18607 comm="syz.5.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 553.386650][ T30] audit: type=1326 audit(781.922:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18607 comm="syz.5.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 553.558450][T18637] loop1: detected capacity change from 0 to 16 [ 553.603087][T18637] erofs (device loop1): mounted with root inode @ nid 36. [ 553.660426][T18637] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 553.768265][T18637] erofs (device loop1): failed to decompress -46 in[60, 4036] out[1851] [ 553.807655][T18637] erofs (device loop1): read error -117 @ 43 of nid 36 [ 554.345399][T18682] loop5: detected capacity change from 0 to 64 [ 554.351974][T18681] loop1: detected capacity change from 0 to 16 [ 554.376028][T18682] hfs: filesystem is marked locked, mounting read-only. [ 554.392350][T18681] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 554.406830][T18682] hfs: filesystem is marked locked, leaving read-only. [ 554.556019][T18689] netlink: 'syz.6.5387': attribute type 21 has an invalid length. [ 554.595781][T18689] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5387'. [ 554.942702][T18714] loop6: detected capacity change from 0 to 256 [ 555.109124][T18714] FAT-fs (loop6): Directory bread(block 64) failed [ 555.125751][T18724] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5396'. [ 555.137697][T18714] FAT-fs (loop6): Directory bread(block 65) failed [ 555.177780][T18714] FAT-fs (loop6): Directory bread(block 66) failed [ 555.218135][T18714] FAT-fs (loop6): Directory bread(block 67) failed [ 555.265788][T18714] FAT-fs (loop6): Directory bread(block 68) failed [ 555.303954][T18714] FAT-fs (loop6): Directory bread(block 69) failed [ 555.331017][T18714] FAT-fs (loop6): Directory bread(block 70) failed [ 555.362903][T18714] FAT-fs (loop6): Directory bread(block 71) failed [ 555.369551][T18714] FAT-fs (loop6): Directory bread(block 72) failed [ 555.437989][T18714] FAT-fs (loop6): Directory bread(block 73) failed [ 556.026013][T18703] loop5: detected capacity change from 0 to 32768 [ 556.078256][T18703] ERROR: (device loop5): diRead: i_ino != di_number [ 556.078256][T18703] [ 556.691225][T18730] loop1: detected capacity change from 0 to 32768 [ 556.742655][T18730] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 556.956077][T18730] XFS (loop1): Ending clean mount [ 556.981101][T18730] XFS (loop1): Quotacheck needed: Please wait. [ 557.080819][T18730] XFS (loop1): Quotacheck: Done. [ 557.177914][T18760] loop4: detected capacity change from 0 to 32768 [ 557.232175][T18760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5407 (18760) [ 557.280810][ T5835] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 557.296149][T18813] IPv6: sit1: Disabled Multicast RS [ 557.323789][T18760] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.370819][T18760] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 557.715081][T18760] BTRFS info (device loop4): enabling ssd optimizations [ 557.798461][T18760] BTRFS info (device loop4): enabling free space tree [ 558.046454][T18777] loop0: detected capacity change from 0 to 32768 [ 558.149332][T18777] jfs_mkdir: dtInsert returned -EIO [ 558.205019][T18777] ERROR: (device loop0): txAbort: [ 558.205019][T18777] [ 558.212938][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 558.337232][T18777] ERROR: (device loop0): remounting filesystem as read-only [ 559.204702][ T5840] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 559.283737][T18916] netlink: 'syz.4.5443': attribute type 10 has an invalid length. [ 559.402623][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 559.447258][ T5840] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 559.472786][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 559.518824][ T5840] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.577591][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.593355][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5445'. [ 559.620188][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5445'. [ 559.632604][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 559.672213][ T5840] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 559.680978][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 559.693523][ T5840] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.722756][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.739566][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 559.758971][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 559.802717][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 559.832830][ T5840] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 559.840287][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 559.902742][ T5840] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.941812][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.996330][ T5840] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 560.067963][ T5840] usb 4-1: string descriptor 0 read error: -22 [ 560.090654][ T5840] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 560.128911][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.179801][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5453'. [ 560.185069][ T5840] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 560.538974][ T5912] usb 4-1: USB disconnect, device number 20 [ 560.839816][T18923] loop0: detected capacity change from 0 to 32768 [ 560.916158][T18923] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 561.040410][T18923] XFS (loop0): Ending clean mount [ 561.074858][T18964] loop1: detected capacity change from 0 to 32768 [ 561.110251][T18923] XFS (loop0): Quotacheck needed: Please wait. [ 561.118814][T18964] (syz.1.5456,18964,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 561.161937][T18964] (syz.1.5456,18964,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 561.230822][T18923] XFS (loop0): Quotacheck: Done. [ 561.265602][T18964] (syz.1.5456,18964,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0x9310c58c. Applying ECC. [ 561.302723][T18964] (syz.1.5456,18964,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xcfdff595, computed 0x391b0aa9 [ 561.359669][ T5848] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 561.422281][T18964] (syz.1.5456,18964,0):ocfs2_validate_inode_block:1457 ERROR: Checksum failed for dinode 27 [ 561.473014][T18964] (syz.1.5456,18964,1):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 561.481414][T18964] (syz.1.5456,18964,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 561.540134][T18964] (syz.1.5456,18964,0):ocfs2_init_local_system_inodes:495 ERROR: status=-22, sysfile=8, slot=0 [ 561.579150][T19023] __vm_enough_memory: pid: 19023, comm: syz.3.5468, bytes: 4503599627366400 not enough memory for the allocation [ 561.643438][T18964] (syz.1.5456,18964,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 561.652359][T18964] (syz.1.5456,18964,1):ocfs2_mount_volume:1758 ERROR: status = -22 [ 561.713040][T18964] (syz.1.5456,18964,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 561.792197][T19033] dlm: no locking on control device [ 562.054296][T19041] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5473'. [ 562.385675][T19057] netlink: 'syz.4.5479': attribute type 2 has an invalid length. [ 562.426662][T19057] netlink: 'syz.4.5479': attribute type 11 has an invalid length. [ 562.453587][T19057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5479'. [ 562.461148][T19063] loop1: detected capacity change from 0 to 256 [ 562.578838][T19063] FAT-fs (loop1): Directory bread(block 64) failed [ 562.598209][T19063] FAT-fs (loop1): Directory bread(block 65) failed [ 562.631348][T19063] FAT-fs (loop1): Directory bread(block 66) failed [ 562.666771][T19063] FAT-fs (loop1): Directory bread(block 67) failed [ 562.714289][T19063] FAT-fs (loop1): Directory bread(block 68) failed [ 562.720870][T19063] FAT-fs (loop1): Directory bread(block 69) failed [ 562.738118][T19075] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 562.748872][ T134] bond0: (slave bond_slave_0): interface is now down [ 562.767128][ T134] bond0: (slave bond_slave_1): interface is now down [ 562.788334][T19063] FAT-fs (loop1): Directory bread(block 70) failed [ 562.802046][ T134] bond0: now running without any active interface! [ 562.810179][T19063] FAT-fs (loop1): Directory bread(block 71) failed [ 562.837341][T19063] FAT-fs (loop1): Directory bread(block 72) failed [ 562.865443][T19063] FAT-fs (loop1): Directory bread(block 73) failed [ 563.484103][T19115] dlm: no locking on control device [ 563.494413][T19100] loop0: detected capacity change from 0 to 4096 [ 563.543075][T19100] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 563.705179][T19100] ntfs3(loop0): ino=19, mi_enum_attr [ 563.816661][T19100] ntfs3(loop0): failed to convert "c46c" to cp866 [ 563.855328][T19130] loop1: detected capacity change from 0 to 1024 [ 563.862327][T19100] ntfs3(loop0): ino=20, mi_enum_attr [ 563.880839][T19130] EXT4-fs: Ignoring removed bh option [ 563.925827][T19130] EXT4-fs: inline encryption not supported [ 563.969717][T19131] loop3: detected capacity change from 0 to 4096 [ 563.971740][T19130] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 564.041301][T19130] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 564.126739][T19144] netlink: 'syz.4.5503': attribute type 30 has an invalid length. [ 564.171814][T19131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.199435][T19130] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.5500: lblock 2 mapped to illegal pblock 2 (length 1) [ 564.267126][T19130] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 564.332642][T19130] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.5500: lblock 0 mapped to illegal pblock 48 (length 1) [ 564.353304][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5506'. [ 564.420725][T19130] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 564.455230][T19130] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.5500: Failed to acquire dquot type 0 [ 564.481587][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.502055][T19158] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 564.510026][T19130] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 564.586087][T19130] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.5500: mark_inode_dirty error [ 564.657132][T19130] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 564.684177][T19130] EXT4-fs (loop1): 1 orphan inode deleted [ 564.702800][ T36] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 564.726974][T19130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.764233][ T36] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 564.793081][ T36] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 564.985388][ T36] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm kworker/u8:2: lblock 2 mapped to illegal pblock 2 (length 1) [ 565.066852][ T36] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 565.087090][ T36] EXT4-fs error (device loop1): ext4_write_dquot:6923: comm kworker/u8:2: Failed to commit dquot type 0 [ 565.118982][ T36] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 565.179764][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.213598][ T5835] EXT4-fs error (device loop1): __ext4_get_inode_loc:4831: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 565.271017][ T5835] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 565.292989][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5521'. [ 565.300840][ T5835] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 565.888583][T19228] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5531'. [ 565.928459][T19233] loop5: detected capacity change from 0 to 64 [ 566.006201][T19239] QAT: failed to copy from user cfg_data. [ 566.411808][T19264] netlink: 'syz.6.5541': attribute type 1 has an invalid length. [ 566.441585][T19264] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5541'. [ 566.758126][T19284] netlink: 'syz.6.5547': attribute type 30 has an invalid length. [ 566.879880][T19284] bond2: option arp_missed_max: invalid value (0) [ 566.929877][T19284] bond2: option arp_missed_max: allowed values 1 - 255 [ 566.986733][T19284] bond2 (unregistering): Released all slaves [ 567.451816][T19380] loop1: detected capacity change from 0 to 1024 [ 567.497882][T19380] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 567.546793][T19380] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.5558: lblock 1 mapped to illegal pblock 1 (length 1) [ 567.603890][T19380] Quota error (device loop1): write_blk: dquota write failed [ 567.611340][T19380] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 567.628010][T19390] loop4: detected capacity change from 0 to 24 [ 567.669168][T19380] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.5558: Failed to acquire dquot type 0 [ 567.737357][T19380] EXT4-fs error (device loop1): ext4_free_blocks:6705: comm syz.1.5558: Freeing blocks not in datazone - block = 0, count = 4096 [ 567.787305][T19380] EXT4-fs error (device loop1): ext4_read_inode_bitmap:138: comm syz.1.5558: Invalid inode bitmap blk 0 in block_group 0 [ 567.807758][ T36] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 567.869033][T19380] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 567.870195][ T36] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 567.902894][T19380] EXT4-fs (loop1): 1 orphan inode deleted [ 567.910711][T19380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.922885][ T36] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 567.979761][T19407] netlink: 'syz.5.5566': attribute type 2 has an invalid length. [ 568.013806][T19407] netlink: 'syz.5.5566': attribute type 8 has an invalid length. [ 568.052045][T19407] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5566'. [ 568.075977][T19413] netlink: 'syz.3.5568': attribute type 1 has an invalid length. [ 568.089454][T19413] netlink: 'syz.3.5568': attribute type 11 has an invalid length. [ 568.110424][T19413] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5568'. [ 568.222096][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.259850][ T36] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 568.293111][ T36] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 568.321950][ T36] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 568.372923][T19424] loop6: detected capacity change from 0 to 512 [ 568.433113][T19424] EXT4-fs (loop6): orphan cleanup on readonly fs [ 568.465633][T19424] EXT4-fs error (device loop6): ext4_quota_enable:7136: inode #15: comm syz.6.5573: iget: bad i_size value: 360287970189639690 [ 568.543297][T19424] EXT4-fs error (device loop6): ext4_quota_enable:7138: comm syz.6.5573: Bad quota inode: 15, type: 2 [ 568.559897][T19424] EXT4-fs warning (device loop6): ext4_enable_quotas:7176: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 568.592562][T19424] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 568.601382][T19424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 568.715900][T19442] loop3: detected capacity change from 0 to 4096 [ 568.726251][T19442] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 568.831270][ T9194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.072459][ T30] audit: type=1326 audit(798.022:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19465 comm="syz.6.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 569.452119][T19491] kAFS: Can only specify source 'none' with -o dyn [ 569.472617][T15803] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 569.649551][T15803] usb 6-1: Using ep0 maxpacket: 16 [ 569.673169][T15803] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 569.738705][T19501] loop1: detected capacity change from 0 to 16 [ 569.795160][T15803] usb 6-1: string descriptor 0 read error: -71 [ 569.801501][T15803] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 569.819044][T19501] erofs (device loop1): mounted with root inode @ nid 36. [ 569.837646][T15803] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 569.872081][T19501] erofs (device loop1): inconsistent algorithmtype 0 for nid 36 [ 569.902630][T19501] erofs (device loop1): inconsistent algorithmtype 0 for nid 36 [ 569.903850][T15803] usb 6-1: rejected 8 configurations due to insufficient available bus power [ 569.929796][T19501] erofs (device loop1): read error -117 @ 72 of nid 36 [ 569.951582][T15803] usb 6-1: no configuration chosen from 8 choices [ 570.006511][T15803] usb 6-1: USB disconnect, device number 23 [ 570.116292][T19527] netlink: 'syz.4.5599': attribute type 17 has an invalid length. [ 570.165843][T19527] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5599'. [ 570.214031][T19527] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 570.261187][T19536] loop0: detected capacity change from 0 to 16 [ 570.291598][T19536] erofs (device loop0): mounted with root inode @ nid 36. [ 570.392702][T19537] loop1: detected capacity change from 0 to 2048 [ 570.439982][T19537] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 570.452390][T19545] loop3: detected capacity change from 0 to 512 [ 570.524922][T19545] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 570.545841][T19537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.286217][T19648] loop6: detected capacity change from 0 to 128 [ 572.338973][T19653] loop4: detected capacity change from 0 to 16 [ 572.380254][T19648] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.432711][T19653] erofs (device loop4): mounted with root inode @ nid 36. [ 572.489862][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.496410][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.514174][T19653] erofs (device loop4): per-inode big pcluster without sb feature for nid 36 [ 572.578130][T19653] erofs (device loop4): per-inode big pcluster without sb feature for nid 36 [ 572.637804][T19653] erofs (device loop4): read error -117 @ 43 of nid 36 [ 572.706499][ T9194] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.994523][T19679] loop5: detected capacity change from 0 to 2048 [ 573.018224][T19679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.095302][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 573.095326][ T30] audit: type=1800 audit(802.042:2054): pid=19679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5645" name="file1" dev="loop5" ino=1367 res=0 errno=0 [ 573.142653][T19697] overlayfs: missing 'lowerdir' [ 573.508944][T19712] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.5655' sets config #0 [ 573.809812][T19725] loop1: detected capacity change from 0 to 1764 [ 574.101383][T19743] loop4: detected capacity change from 0 to 128 [ 574.175453][T19743] FAT-fs (loop4): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 574.233909][T19743] FAT-fs (loop4): Directory bread(block 162) failed [ 574.254472][T19743] FAT-fs (loop4): Directory bread(block 163) failed [ 574.268080][T19743] FAT-fs (loop4): Directory bread(block 164) failed [ 574.293165][T19743] FAT-fs (loop4): Directory bread(block 165) failed [ 574.327485][T19743] FAT-fs (loop4): Directory bread(block 166) failed [ 574.372818][T19743] FAT-fs (loop4): Directory bread(block 167) failed [ 574.388004][T19743] FAT-fs (loop4): Directory bread(block 168) failed [ 574.412728][ T5840] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 574.452970][T19743] FAT-fs (loop4): Directory bread(block 169) failed [ 574.519760][T19743] FAT-fs (loop4): Directory bread(block 162) failed [ 574.553099][T19743] FAT-fs (loop4): Directory bread(block 163) failed [ 574.572221][T19743] syz.4.5665: attempt to access beyond end of device [ 574.572221][T19743] loop4: rw=3, sector=210, nr_sectors = 6 limit=128 [ 574.595572][ T5840] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 574.619347][ T5840] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 574.655397][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.663715][T19743] syz.4.5665: attempt to access beyond end of device [ 574.663715][T19743] loop4: rw=2051, sector=216, nr_sectors = 2 limit=128 [ 574.731970][ T5840] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 574.783083][ T1152] FAT-fs (loop4): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 575.087289][T19737] loop3: detected capacity change from 0 to 32768 [ 575.096156][T19791] loop0: detected capacity change from 0 to 1024 [ 575.115791][T19737] btrfs: Deprecated parameter 'usebackuproot' [ 575.121897][T19737] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 575.165281][T19791] fuse: Bad value for 'fd' [ 575.182068][T19737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5661 (19737) [ 575.317733][T19737] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 575.387923][T19737] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 575.419335][T19737] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 575.429496][ T36] hfsplus: b-tree write err: -5, ino 4 [ 575.497795][T19844] loop4: detected capacity change from 0 to 256 [ 575.546172][T19844] exfat: Deprecated parameter 'namecase' [ 575.579741][T19844] exfat: Deprecated parameter 'namecase' [ 575.716972][T19737] BTRFS info (device loop3): rebuilding free space tree [ 575.730224][T19844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 575.758178][T19737] BTRFS info (device loop3): disabling free space tree [ 575.782655][ T5840] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 575.803743][T19737] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 575.825869][T19872] blktrace: Concurrent blktraces are not allowed on loop4 [ 575.858475][T19737] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 575.942946][T19737] BTRFS info (device loop3): enabling ssd optimizations [ 575.972305][T19737] BTRFS info (device loop3): turning on flush-on-commit [ 575.992770][ T5840] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 576.004753][T19737] BTRFS info (device loop3): enabling disk space caching [ 576.032288][T19737] BTRFS info (device loop3): force clearing of disk cache [ 576.062578][ T5840] stv0680 6-1:4.0: last error: 86, command = 0x70 [ 576.067863][T19737] BTRFS info (device loop3): trying to use backup root at mount time [ 576.112360][ T5840] usb 6-1: USB disconnect, device number 24 [ 576.132583][T19737] BTRFS info (device loop3): force zlib compression, level 3 [ 576.604971][ T5847] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 576.637977][T19908] nft_compat: unsupported protocol 5 [ 577.096931][T19927] cgroup: No subsys list or none specified [ 577.555064][T19952] loop4: detected capacity change from 0 to 1024 [ 577.585953][T19946] loop6: detected capacity change from 0 to 2048 [ 577.631872][T19952] fuse: Bad value for 'fd' [ 577.717865][T19946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.116189][ T9194] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.494848][T19996] loop3: detected capacity change from 0 to 2048 [ 578.567745][T20009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.778665][T20017] program syz.4.5726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.116162][T20037] loop4: detected capacity change from 0 to 64 [ 579.194692][T20042] netlink: 'syz.1.5734': attribute type 1 has an invalid length. [ 579.217700][T20042] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5734'. [ 579.289159][T20049] loop0: detected capacity change from 0 to 1024 [ 579.322029][T20049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.380752][T20049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.465160][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 579.685491][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 579.694936][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.696521][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 579.735544][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.787769][ T9] usb 7-1: Product: syz [ 579.792004][ T9] usb 7-1: Manufacturer: syz [ 579.816971][ T9] usb 7-1: SerialNumber: syz [ 579.858580][ T9] usb 7-1: config 0 descriptor?? [ 579.890428][ T9] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 579.916245][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5746'. [ 579.942762][T20087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5744'. [ 580.119255][ T9] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 580.162000][ T9] usb 7-1: USB disconnect, device number 19 [ 580.446694][T20123] netlink: 'syz.4.5754': attribute type 9 has an invalid length. [ 580.601195][T20131] netlink: 'syz.1.5757': attribute type 16 has an invalid length. [ 580.617023][T20131] netlink: 'syz.1.5757': attribute type 3 has an invalid length. [ 580.641053][T20131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5757'. [ 580.685705][T20137] loop3: detected capacity change from 0 to 512 [ 580.813181][T20137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.991929][T20137] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 581.046422][T20137] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 581.088319][T20137] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.5759: Failed to acquire dquot type 0 [ 581.191065][T20159] loop1: detected capacity change from 0 to 164 [ 581.199449][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5765'. [ 581.220538][T20162] loop6: detected capacity change from 0 to 256 [ 581.233185][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5765'. [ 581.298494][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.313785][T20159] rock: directory entry would overflow storage [ 581.319994][T20159] rock: sig=0x66, size=4, remaining=3 [ 581.378852][T20159] rock: directory entry would overflow storage [ 581.392765][T20159] rock: sig=0x66, size=4, remaining=3 [ 581.639171][T20180] netlink: 'syz.4.5769': attribute type 21 has an invalid length. [ 581.672885][T20180] netlink: 'syz.4.5769': attribute type 6 has an invalid length. [ 581.680650][T20180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5769'. [ 581.682315][T20128] loop5: detected capacity change from 0 to 32768 [ 581.736288][T20128] btrfs: Deprecated parameter 'usebackuproot' [ 581.760479][T20183] i2c i2c-0: Invalid block write size 253 [ 581.770267][T20128] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 581.813616][T20128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5756 (20128) [ 581.885253][T20128] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.918082][T20128] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 581.962909][T20128] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 582.184877][T20128] BTRFS info (device loop5): rebuilding free space tree [ 582.273492][T20128] BTRFS info (device loop5): disabling free space tree [ 582.294773][T20128] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 582.356028][T20128] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 582.444682][T20128] BTRFS info (device loop5): enabling ssd optimizations [ 582.451676][T20128] BTRFS info (device loop5): turning on flush-on-commit [ 582.455895][T20230] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5780'. [ 582.498322][T20128] BTRFS info (device loop5): enabling disk space caching [ 582.541299][T20128] BTRFS info (device loop5): force clearing of disk cache [ 582.582597][T20128] BTRFS info (device loop5): trying to use backup root at mount time [ 582.590786][T20128] BTRFS info (device loop5): force zlib compression, level 3 [ 582.849786][T20246] loop6: detected capacity change from 0 to 64 [ 582.962155][T20246] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 583.015317][T20246] hfs: filesystem is marked locked, mounting read-only. [ 583.039630][ T5853] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 583.427110][T20271] xfrm1: entered allmulticast mode [ 583.855656][T20293] loop0: detected capacity change from 0 to 1024 [ 584.550473][T20319] netlink: 'syz.5.5804': attribute type 1 has an invalid length. [ 584.659430][T20265] loop4: detected capacity change from 0 to 32768 [ 584.710211][T20265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5789 (20265) [ 584.774696][T20265] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.812250][T20265] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 584.979630][T20352] netlink: 'syz.5.5810': attribute type 1 has an invalid length. [ 584.989018][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5810'. [ 585.019507][T20265] BTRFS info (device loop4): enabling ssd optimizations [ 585.071774][T20265] BTRFS info (device loop4): enabling free space tree [ 585.089523][T20286] loop3: detected capacity change from 0 to 32768 [ 585.398805][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 586.093174][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5822'. [ 586.642763][ T6005] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 586.824625][ T6005] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 586.833195][ T6005] usb 5-1: config 0 has no interface number 0 [ 586.839320][ T6005] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 586.904474][ T6005] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.934624][ T6005] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 586.948244][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.961934][ T6005] usb 5-1: Product: syz [ 586.994344][ T6005] usb 5-1: Manufacturer: syz [ 586.998988][ T6005] usb 5-1: SerialNumber: syz [ 587.037935][ T6005] usb 5-1: config 0 descriptor?? [ 587.053747][T20415] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 587.069211][ T6005] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 587.114087][ T6005] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 587.376013][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 587.612125][ T5939] usb 5-1: USB disconnect, device number 18 [ 587.643352][ T5939] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 587.704167][ T5939] cyberjack 5-1:0.69: device disconnected [ 587.973615][T20500] loop0: detected capacity change from 0 to 4096 [ 588.016627][T20500] ntfs3(loop0): ino=0, mi_enum_attr [ 588.064571][T20500] ntfs3(loop0): ino=0, mi_enum_attr [ 588.102759][T20500] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 588.140994][ T30] audit: type=1326 audit(817.092:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20519 comm="syz.5.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 588.260495][T20526] netlink: 'syz.1.5856': attribute type 2 has an invalid length. [ 588.272682][ T30] audit: type=1326 audit(817.092:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20519 comm="syz.5.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 588.324761][T20526] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 588.377513][T20526] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 588.403029][ T30] audit: type=1326 audit(817.132:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20519 comm="syz.5.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 588.563412][ T30] audit: type=1326 audit(817.132:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20519 comm="syz.5.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 588.700557][T20539] loop6: detected capacity change from 0 to 128 [ 588.923456][T20554] loop4: detected capacity change from 0 to 1024 [ 589.305977][T20571] netlink: 'syz.3.5869': attribute type 1 has an invalid length. [ 589.593574][T20578] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 589.625880][ T30] audit: type=1326 audit(818.582:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 589.692895][ T30] audit: type=1326 audit(818.582:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 589.795569][ T30] audit: type=1326 audit(818.602:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f897118eec9 code=0x7ffc0000 [ 589.813166][T20590] loop3: detected capacity change from 0 to 2048 [ 589.883337][T20598] netlink: 'syz.1.5877': attribute type 10 has an invalid length. [ 589.921692][ T30] audit: type=1326 audit(818.602:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f897118ef03 code=0x7ffc0000 [ 589.985875][T20590] Alternate GPT is invalid, using primary GPT. [ 589.992285][T20590] loop3: p1 p2 p3 [ 589.992581][ T30] audit: type=1326 audit(818.662:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f897118d97f code=0x7ffc0000 [ 590.038272][ T30] audit: type=1326 audit(818.702:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20587 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f897118ef57 code=0x7ffc0000 [ 590.393205][T20617] netlink: 'syz.3.5881': attribute type 1 has an invalid length. [ 590.794656][T20639] loop1: detected capacity change from 0 to 128 [ 590.848297][T20639] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 590.995770][T20639] __find_get_block_slow() failed. block=288230376151711745, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop1 blocksize: 1024 [ 591.044260][T20639] grow_buffers: requested out-of-range block 288230376151711745 for device loop1 [ 591.053915][T20639] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted [ 591.084932][T20589] loop6: detected capacity change from 0 to 32768 [ 591.094728][T20589] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5874 (20589) [ 591.142194][T20589] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 591.160799][T20589] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 591.268658][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.428069][T20589] BTRFS info (device loop6): enabling ssd optimizations [ 591.452586][T20589] BTRFS info (device loop6): turning on async discard [ 591.459390][T20589] BTRFS info (device loop6): enabling free space tree [ 591.780779][ T9194] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 591.902629][ T5912] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 592.091249][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 592.136257][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 592.157835][T20721] tmpfs: Bad value for 'mpol' [ 592.169775][ T5912] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 592.243230][ T5912] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 592.251375][ T5912] usb 5-1: Product: syz [ 592.266376][ T5912] usb 5-1: Manufacturer: syz [ 592.271002][ T5912] usb 5-1: SerialNumber: syz [ 592.603475][ T5912] usb 5-1: Invalid connection information received from device [ 592.822973][ T6005] usb 5-1: USB disconnect, device number 19 [ 593.469504][T20778] loop1: detected capacity change from 0 to 4096 [ 593.539780][T20778] ntfs3(loop1): ino=3, Correct links count -> 2. [ 593.551602][T20786] netlink: 'syz.6.5924': attribute type 1 has an invalid length. [ 593.780329][T20778] ntfs3: Cannot use different iocharset when remounting! [ 593.916447][T20738] loop3: detected capacity change from 0 to 32768 [ 594.048077][T20738] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 594.250577][T20821] usb usb9: usbfs: process 20821 (syz.6.5933) did not claim interface 0 before use [ 594.265487][T20738] XFS (loop3): Ending clean mount [ 594.353686][T20738] XFS (loop3): Quotacheck needed: Please wait. [ 594.439960][T20837] loop4: detected capacity change from 0 to 16 [ 594.472992][T20738] XFS (loop3): Quotacheck: Done. [ 594.526001][T20837] erofs (device loop4): mounted with root inode @ nid 36. [ 594.710333][ T5847] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 595.776174][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5955'. [ 596.046953][T20905] loop6: detected capacity change from 0 to 4096 [ 596.048086][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 596.048108][ T30] audit: type=1326 audit(825.002:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.4.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b38eec9 code=0x7ffc0000 [ 596.121416][T20905] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 596.209043][ T30] audit: type=1326 audit(825.002:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.4.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b38eec9 code=0x7ffc0000 [ 596.257421][T20905] ntfs3(loop6): ino=19, mi_enum_attr [ 596.281273][T20869] loop1: detected capacity change from 0 to 32768 [ 596.293122][T20905] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 596.320168][ T30] audit: type=1326 audit(825.042:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.4.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1c5b38eec9 code=0x7ffc0000 [ 596.442666][T20905] ntfs3(loop6): failed to convert "c46c" to euc-jp [ 596.457944][ T30] audit: type=1326 audit(825.042:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.4.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b38eec9 code=0x7ffc0000 [ 596.488481][T20905] ntfs3(loop6): ino=20, mi_enum_attr [ 596.582926][ T30] audit: type=1326 audit(825.042:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20914 comm="syz.4.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b38eec9 code=0x7ffc0000 [ 596.604799][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.036714][T20949] vivid-001: disconnect [ 597.059899][T20945] vivid-001: reconnect [ 597.174550][T20956] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.5971'. [ 597.754482][T20985] loop1: detected capacity change from 0 to 8 [ 597.863639][T20985] SQUASHFS error: Failed to read block 0x2fc: -5 [ 597.870022][T20985] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 597.892722][T20985] SQUASHFS error: Unable to read directory block [247:26] [ 598.562732][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 598.743125][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 598.768208][ T5912] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 598.791334][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.832730][ T5912] usb 4-1: Product: syz [ 598.836941][ T5912] usb 4-1: Manufacturer: syz [ 598.914664][ T5912] usb 4-1: SerialNumber: syz [ 598.927616][ T5912] usb 4-1: config 0 descriptor?? [ 599.204829][ T30] audit: type=1326 audit(828.162:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269378eec9 code=0x7ffc0000 [ 599.233033][ T5912] usb_8dev 4-1:0.0 can0: sending command message failed [ 599.240480][ T5912] usb_8dev 4-1:0.0 can0: can't get firmware version [ 599.312917][ T30] audit: type=1326 audit(828.182:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269378eec9 code=0x7ffc0000 [ 599.391398][ T30] audit: type=1326 audit(828.202:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f269378eec9 code=0x7ffc0000 [ 599.447637][ T5912] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 599.488290][ T30] audit: type=1326 audit(828.202:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269378eec9 code=0x7ffc0000 [ 599.525727][ T5912] usb 4-1: USB disconnect, device number 21 [ 599.569914][ T30] audit: type=1326 audit(828.202:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21062 comm="syz.0.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269378eec9 code=0x7ffc0000 [ 599.651211][T21090] bond3 (unregistering): Released all slaves [ 599.816601][T21161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6010'. [ 599.871704][T21034] loop4: detected capacity change from 0 to 32768 [ 600.169698][T21179] loop0: detected capacity change from 0 to 16 [ 600.731943][T21197] loop4: detected capacity change from 0 to 4096 [ 600.792731][T21197] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 600.856073][T21179] erofs (device loop0): mounted with root inode @ nid 36. [ 601.033605][T21197] ntfs3(loop4): ino=b, mi_enum_attr [ 601.072549][T21197] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 601.083150][T21197] ntfs3(loop4): Failed to load $Extend (-22). [ 601.099826][T21197] ntfs3(loop4): Failed to initialize $Extend. [ 601.581545][T21242] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 601.786850][T21253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 601.832761][T21253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 602.198242][T21275] bpf: Bad value for 'mode' [ 602.430100][T21288] loop5: detected capacity change from 0 to 64 [ 602.523390][T21288] Trying to free block not in datazone [ 602.528965][T21288] Trying to free block not in datazone [ 602.552682][T21288] Trying to free block not in datazone [ 602.572675][T21288] Trying to free block not in datazone [ 602.601443][T21288] minix_free_block (loop5:6): bit already cleared [ 602.622675][T21288] Trying to free block not in datazone [ 602.675439][T21288] Trying to free block not in datazone [ 602.852807][T21312] netlink: 'syz.6.6056': attribute type 2 has an invalid length. [ 603.212281][T21331] loop3: detected capacity change from 0 to 1024 [ 603.472712][ T6005] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 603.664718][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 603.706781][ T6005] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 603.753746][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.792410][ T6005] usb 5-1: Product: syz [ 603.802938][ T6005] usb 5-1: Manufacturer: syz [ 603.823607][ T6005] usb 5-1: SerialNumber: syz [ 603.851915][ T6005] usb 5-1: config 0 descriptor?? [ 603.884455][ T6005] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 603.898605][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6072'. [ 603.932050][T21371] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6072'. [ 603.951527][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6072'. [ 603.974801][T21371] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6072'. [ 604.002922][T21371] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6072'. [ 604.269001][T21390] ptrace attach of "./syz-executor exec"[5853] was attempted by ""[21390] [ 604.281110][ T6005] gspca_sonixj: reg_r err -71 [ 604.290380][ T6005] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 604.393878][ T6005] usb 5-1: USB disconnect, device number 20 [ 604.559033][T21329] loop0: detected capacity change from 0 to 32768 [ 604.622356][T21329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6060 (21329) [ 604.685633][T21329] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 604.723037][T21329] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 604.903359][T21329] BTRFS info (device loop0): enabling ssd optimizations [ 604.933109][T21329] BTRFS info (device loop0): enabling free space tree [ 605.331092][ T5848] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 605.513712][T21462] loop4: detected capacity change from 0 to 128 [ 605.546254][T21462] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 605.746600][ T5844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 606.522799][ T6005] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 606.724811][ T6005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.752593][ T6005] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 606.802432][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.845863][ T6005] usb 2-1: config 0 descriptor?? [ 606.899944][T21525] loop3: detected capacity change from 0 to 4096 [ 606.917660][T21525] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 607.259475][T21474] loop6: detected capacity change from 0 to 32768 [ 607.292021][T21546] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.296416][ T6005] ath6kl: Failed to read usb control message: -71 [ 607.336093][ T6005] ath6kl: Unable to read the bmi data from the device: -71 [ 607.352703][ T6005] ath6kl: Unable to recv target info: -71 [ 607.355219][T21474] jfs_strtoUCS: char2uni returned -22. [ 607.392646][T21474] charset = cp936, char = 0xd4 [ 607.393890][ T6005] ath6kl: Failed to init ath6kl core: -71 [ 607.433631][ T6005] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 607.485690][ T6005] usb 2-1: USB disconnect, device number 28 [ 607.770115][T21569] netlink: 'syz.6.6121': attribute type 33 has an invalid length. [ 607.797830][T21569] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6121'. [ 608.944025][T21565] loop5: detected capacity change from 0 to 32768 [ 609.001439][T21565] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6120 (21565) [ 609.117951][T21565] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.179559][T21565] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 609.465916][T21565] BTRFS info (device loop5): enabling ssd optimizations [ 609.515369][T21565] BTRFS info (device loop5): enabling free space tree [ 609.651675][T21656] loop3: detected capacity change from 0 to 1764 [ 609.773698][ T5853] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.829306][T21656] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 609.880786][T21595] loop6: detected capacity change from 0 to 32768 [ 609.994186][T21595] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 610.275630][T21595] XFS (loop6): Ending clean mount [ 610.305990][T21595] XFS (loop6): Quotacheck needed: Please wait. [ 610.480283][T21595] XFS (loop6): Quotacheck: Done. [ 610.808907][ T9194] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 611.000480][T21713] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 611.367418][T21726] netlink: get zone limit has 8 unknown bytes [ 611.627581][T21666] loop0: detected capacity change from 0 to 32768 [ 611.728398][T21666] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 611.861957][T21760] loop4: detected capacity change from 0 to 512 [ 611.872074][T21760] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 611.958801][T21760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.011240][T21666] XFS (loop0): Ending clean mount [ 612.060341][T21666] XFS (loop0): Quotacheck needed: Please wait. [ 612.159000][T21760] Quota error (device loop4): do_check_range: Getting block 2052 out of range 1-5 [ 612.172430][T21666] XFS (loop0): Quotacheck: Done. [ 612.222192][T21760] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 612.277763][T21760] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.6168: Failed to acquire dquot type 1 [ 612.587955][ T5848] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 612.661206][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.082871][T21815] loop1: detected capacity change from 0 to 64 [ 613.179680][T21823] loop4: detected capacity change from 0 to 256 [ 613.384224][T21823] FAT-fs (loop4): Directory bread(block 64) failed [ 613.390804][T21823] FAT-fs (loop4): Directory bread(block 65) failed [ 613.462682][T21823] FAT-fs (loop4): Directory bread(block 66) failed [ 613.495127][T21823] FAT-fs (loop4): Directory bread(block 67) failed [ 613.501901][T21823] FAT-fs (loop4): Directory bread(block 68) failed [ 613.544218][T21823] FAT-fs (loop4): Directory bread(block 69) failed [ 613.550872][T21823] FAT-fs (loop4): Directory bread(block 70) failed [ 613.598982][T21823] FAT-fs (loop4): Directory bread(block 71) failed [ 613.632233][T21823] FAT-fs (loop4): Directory bread(block 72) failed [ 613.688064][T21823] FAT-fs (loop4): Directory bread(block 73) failed [ 613.904014][T21859] netlink: 'syz.6.6196': attribute type 58 has an invalid length. [ 614.175071][T21869] macvtap0: entered promiscuous mode [ 614.245269][T21873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6199'. [ 614.262798][T21876] netlink: 'syz.1.6201': attribute type 10 has an invalid length. [ 614.318246][T21876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6201'. [ 614.370570][T21876] team0: entered promiscuous mode [ 614.415725][T21876] team_slave_0: entered promiscuous mode [ 614.452839][T21876] team_slave_1: entered promiscuous mode [ 614.469345][T21876] team0: entered allmulticast mode [ 614.483017][T21876] team_slave_0: entered allmulticast mode [ 614.535348][T21876] team_slave_1: entered allmulticast mode [ 614.574894][T21876] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.597883][T21876] bridge0: port 3(team0) entered blocking state [ 614.609745][T21876] bridge0: port 3(team0) entered disabled state [ 614.637545][T21876] bridge0: port 3(team0) entered blocking state [ 614.643991][T21876] bridge0: port 3(team0) entered listening state [ 614.655322][T21892] loop4: detected capacity change from 0 to 1024 [ 614.782727][ T6005] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 614.861695][T21847] loop3: detected capacity change from 0 to 32768 [ 614.963295][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 615.029235][T21847] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 615.038894][ T6005] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 615.059685][ T6005] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 615.069714][T21913] bond0: Error: Cannot enslave bond to itself. [ 615.074321][ T6005] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 615.087356][ T6005] usb 6-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 615.100699][ T6005] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 615.177135][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.262893][ T6005] usb 6-1: Product: syz [ 615.267116][ T6005] usb 6-1: Manufacturer: syz [ 615.271728][ T6005] usb 6-1: SerialNumber: syz [ 615.427190][ T6005] hso 6-1:6.0: Can't find BULK OUT endpoint [ 615.508913][T21944] syz.1.6219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 615.766533][ T5912] usb 6-1: USB disconnect, device number 25 [ 615.780881][T21847] XFS (loop3): Ending clean mount [ 615.798705][T21847] XFS (loop3): Quotacheck needed: Please wait. [ 615.889292][T21847] XFS (loop3): Quotacheck: Done. [ 616.042827][T21973] loop0: detected capacity change from 0 to 16 [ 616.102713][T21973] erofs (device loop0): mounted with root inode @ nid 36. [ 616.161746][ T5847] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 616.174954][T21973] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 616.220335][T21973] erofs (device loop0): read error -117 @ 43 of nid 36 [ 616.486106][T21996] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6232'. [ 616.525990][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6232'. [ 616.813866][T22010] loop4: detected capacity change from 0 to 1024 [ 616.920113][T22019] netlink: 'syz.5.6239': attribute type 9 has an invalid length. [ 616.948584][T22019] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6239'. [ 617.365044][T22042] loop5: detected capacity change from 0 to 2048 [ 617.474786][T22042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.607081][T22042] cifs: Unknown parameter 'norecovery' [ 617.863601][ T5853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.885977][T22075] netlink: 'syz.3.6254': attribute type 10 has an invalid length. [ 617.968515][T22075] veth0_macvtap: left promiscuous mode [ 617.996674][T22075] batman_adv: batadv0: Adding interface: macvtap0 [ 618.022903][T22075] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.043594][T22087] netlink: 'syz.4.6259': attribute type 3 has an invalid length. [ 618.062266][T22085] loop6: detected capacity change from 0 to 2048 [ 618.102533][T22087] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6259'. [ 618.123221][T22075] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 618.180984][T22085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.288643][T22095] netlink: 'syz.1.6260': attribute type 11 has an invalid length. [ 618.310505][ T30] audit: type=1800 audit(847.262:2101): pid=22085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6258" name="file1" dev="loop6" ino=1367 res=0 errno=0 [ 618.316716][T22098] loop0: detected capacity change from 0 to 8 [ 618.414859][T22098] Page size > filesystem block size (11). This is currently not supported! [ 618.609285][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6263'. [ 618.700150][T22123] netlink: 'syz.0.6267': attribute type 1 has an invalid length. [ 618.712962][ T6005] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 618.727546][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6267'. [ 618.843694][T22120] loop6: detected capacity change from 0 to 4096 [ 618.885579][ T6005] usb 4-1: Using ep0 maxpacket: 32 [ 618.900489][ T6005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.923327][ T6005] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 618.950193][ T6005] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 618.990584][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.004682][T22120] ntfs3(loop6): ino=b, mi_enum_attr [ 619.029998][ T6005] usb 4-1: Product: syz [ 619.050993][ T6005] usb 4-1: Manufacturer: syz [ 619.052573][T22120] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 619.074170][ T6005] usb 4-1: SerialNumber: syz [ 619.112439][T22120] ntfs3(loop6): Failed to load $Extend (-22). [ 619.145958][T22120] ntfs3(loop6): Failed to initialize $Extend. [ 619.338901][ T6005] usb 4-1: Invalid number of CPorts: 0 [ 619.364913][ T6005] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 619.585174][T22158] loop4: detected capacity change from 0 to 2048 [ 619.607686][ T5840] usb 4-1: USB disconnect, device number 22 [ 619.671094][T22175] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 619.724410][T22158] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=64511, name_len=255 [ 619.765037][T22158] Remounting filesystem read-only [ 620.330365][T22207] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 620.731865][T22228] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 620.939968][T22276] loop4: detected capacity change from 0 to 512 [ 621.182222][T22276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.189955][T22290] netlink: 'syz.5.6306': attribute type 10 has an invalid length. [ 621.293796][T22290] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.303525][T22290] bond0: (slave team0): Enslaving as an active interface with an up link [ 621.537335][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.548263][T22308] loop0: detected capacity change from 0 to 16 [ 621.616856][T22308] erofs (device loop0): mounted with root inode @ nid 36. [ 621.693342][T22308] erofs (device loop0): failed to read inode meta block (nid: 18446744071562067967): -117 [ 622.499062][T22360] loop5: detected capacity change from 0 to 164 [ 622.571755][T22360] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 622.730884][T22300] loop6: detected capacity change from 0 to 32768 [ 622.775426][T22300] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6308 (22300) [ 622.872612][ T5840] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 622.880425][T22300] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 622.927108][T22300] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 623.043370][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 623.051723][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 623.065504][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.073109][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6332'. [ 623.099532][ T5840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.110700][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 623.130896][ T5840] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 623.141616][T22300] BTRFS info (device loop6): enabling ssd optimizations [ 623.152708][T22300] BTRFS info (device loop6): enabling free space tree [ 623.162999][ T5840] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 623.172079][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.195697][ T5840] usb 2-1: config 0 descriptor?? [ 623.207035][T22366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.590200][T22424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6337'. [ 623.632989][T22424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6337'. [ 623.761584][ T52] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 623.763405][ T6005] usb 2-1: USB disconnect, device number 29 [ 623.793956][ T9194] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 624.003082][ T5912] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 624.196253][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.232342][ T5912] usb 6-1: config 0 has no interface number 0 [ 624.249056][ T5912] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 624.291525][ T5912] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 624.321911][ T5912] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 624.361636][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.378872][ T5912] usb 6-1: config 0 descriptor?? [ 624.438817][ T5912] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 624.476869][T22462] loop0: detected capacity change from 0 to 4096 [ 624.578464][T22462] ntfs3(loop0): ino=b, mi_enum_attr [ 624.585807][T22473] loop4: detected capacity change from 0 to 1764 [ 624.631786][T22462] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 624.664349][T22462] ntfs3(loop0): Failed to load $Extend (-22). [ 624.693153][T22428] iowarrior 6-1:0.1: Error -90 while submitting URB [ 624.703997][T22462] ntfs3(loop0): Failed to initialize $Extend. [ 624.742044][ T6005] usb 6-1: USB disconnect, device number 26 [ 624.890112][T22498] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6351'. [ 624.945221][T22498] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6351'. [ 624.945256][T22498] netlink: 19 bytes leftover after parsing attributes in process `syz.6.6351'. [ 625.170365][T22512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6355'. [ 625.210917][T22512] netlink: 'syz.1.6355': attribute type 1 has an invalid length. [ 625.444256][T22521] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6359'. [ 625.992673][ T5912] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 626.057766][T22564] siw: device registration error -23 [ 626.080552][T22563] loop5: detected capacity change from 0 to 1024 [ 626.111258][T22563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.198400][ T5912] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 626.213779][T22563] EXT4-fs error (device loop5): ext4_get_first_dir_block:3552: inode #11: comm syz.5.6370: directory missing '..' [ 626.241096][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.308189][ T5912] usb 4-1: Product: syz [ 626.312410][ T5912] usb 4-1: Manufacturer: syz [ 626.342629][ T5912] usb 4-1: SerialNumber: syz [ 626.381875][ T5912] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 626.416643][ T5939] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.508125][ T5853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.107162][T22603] loop6: detected capacity change from 0 to 256 [ 627.808916][T22525] loop4: detected capacity change from 0 to 40427 [ 627.929182][T22525] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (0, 24) [ 628.012744][T22525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 628.057550][T22525] F2FS-fs (loop4): build fault injection rate: 3 [ 628.142030][T22525] F2FS-fs (loop4): build fault injection type: 0x77fd1 [ 628.224353][T22525] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x1b20/0x9ca0 [ 628.451032][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6389'. [ 629.089715][T22651] tc_dump_action: action bad kind [ 629.387396][T22643] loop1: detected capacity change from 0 to 4096 [ 629.597435][T22643] ntfs3(loop1): ino=b, mi_enum_attr [ 629.616470][T22659] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6397'. [ 629.629788][ T5912] usb 4-1: USB disconnect, device number 23 [ 629.643506][ T5939] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 629.650576][ T5939] ath9k_htc: Failed to initialize the device [ 629.673335][T22643] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 629.674087][ T5912] usb 4-1: ath9k_htc: USB layer deinitialized [ 629.745979][T22643] ntfs3(loop1): Failed to load $Extend (-22). [ 629.762708][T22643] ntfs3(loop1): Failed to initialize $Extend. [ 629.790742][T22666] loop0: detected capacity change from 0 to 64 [ 629.848756][T22673] loop5: detected capacity change from 0 to 1024 [ 630.022698][T22665] loop4: detected capacity change from 0 to 4096 [ 630.055114][T22665] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 630.085317][ C0] bridge0: port 3(team0) entered learning state [ 630.189152][T22665] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 630.217880][T22665] ntfs3(loop4): mft corrupted [ 630.239600][T22665] ntfs3(loop4): Failed to load $Extend (-22). [ 630.278879][T22665] ntfs3(loop4): Failed to initialize $Extend. [ 630.324618][T22702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6407'. [ 630.382900][T22665] ntfs3(loop4): ino=1e, mi_enum_attr [ 630.397459][T22706] loop1: detected capacity change from 0 to 64 [ 630.405878][T22665] ntfs3(loop4): ino=1e, mi_enum_attr [ 631.376484][T22760] loop5: detected capacity change from 0 to 256 [ 631.458071][T22764] netlink: 'syz.4.6421': attribute type 1 has an invalid length. [ 631.472964][ T5912] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 631.657736][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 631.697572][ T5912] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 631.724836][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.758820][ T5912] usb 7-1: Product: syz [ 631.795715][ T5912] usb 7-1: Manufacturer: syz [ 631.810553][ T5912] usb 7-1: SerialNumber: syz [ 631.870528][ T5912] r8152-cfgselector 7-1: Unknown version 0x0000 [ 631.882602][ T5912] r8152-cfgselector 7-1: config 0 descriptor?? [ 631.890833][T22773] loop1: detected capacity change from 0 to 4096 [ 631.931431][T22773] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 632.001783][T22773] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 632.041479][T22773] ntfs3(loop1): mft corrupted [ 632.095451][T22773] ntfs3(loop1): Failed to load $Extend (-22). [ 632.142572][T22773] ntfs3(loop1): Failed to initialize $Extend. [ 632.294464][T22773] ntfs3(loop1): ino=1e, mi_enum_attr [ 632.331824][T22773] ntfs3(loop1): ino=1e, mi_enum_attr [ 632.379941][ T9] r8152-cfgselector 7-1: USB disconnect, device number 20 [ 632.531991][T22817] binder: 22814:22817 ioctl c0306201 200000000380 returned -14 [ 633.560860][T22874] loop5: detected capacity change from 0 to 164 [ 633.584873][T22874] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 633.680762][T22874] isofs: Unable to find the ".." directory for NFS. [ 633.929238][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.935890][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.097987][T22932] netlink: 'syz.0.6458': attribute type 46 has an invalid length. [ 634.225756][ T30] audit: type=1326 audit(863.182:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22939 comm="syz.1.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f618eec9 code=0x7ffc0000 [ 634.317524][ T30] audit: type=1326 audit(863.182:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22939 comm="syz.1.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f618eec9 code=0x7ffc0000 [ 634.413738][ T30] audit: type=1326 audit(863.212:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22939 comm="syz.1.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fd5f618eec9 code=0x7ffc0000 [ 634.470847][ T30] audit: type=1326 audit(863.212:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22939 comm="syz.1.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f618eec9 code=0x7ffc0000 [ 634.509100][T22946] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 634.539234][T22946] block device autoloading is deprecated and will be removed. [ 634.887386][T22960] bond3 (unregistering): Released all slaves [ 635.363052][T23062] loop6: detected capacity change from 0 to 256 [ 635.432039][T23066] loop1: detected capacity change from 0 to 256 [ 635.468764][T23066] exfat: Deprecated parameter 'utf8' [ 635.500647][T23066] exfat: Deprecated parameter 'utf8' [ 635.510582][T23062] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 635.548928][T23066] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 636.009530][T23100] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6491'. [ 636.042260][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6491'. [ 636.081667][T23104] comedi comedi0: pcl711: a I/O base address must be specified [ 636.131009][T23100] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6491'. [ 636.198753][T23100] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6491'. [ 636.241394][T23100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6491'. [ 636.611654][T23123] loop5: detected capacity change from 0 to 512 [ 636.704492][T23123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.828460][T23069] loop4: detected capacity change from 0 to 32768 [ 636.866795][T23069] JBD2: Ignoring recovery information on journal [ 636.978065][T23069] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 637.006970][T23135] loop3: detected capacity change from 0 to 2048 [ 637.049870][ T5853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.060053][T23069] OCFS2: ERROR (device loop4): ocfs2_xattr_find_entry: corrupted xattr entries [ 637.060121][T23069] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 637.089759][T23135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.139969][T23069] OCFS2: File system is now read-only. [ 637.166248][T23069] (syz.4.6483,23069,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 637.214784][T23069] (syz.4.6483,23069,0):ocfs2_mknod:337 ERROR: status = -117 [ 637.267867][T23069] (syz.4.6483,23069,0):ocfs2_mknod:505 ERROR: status = -117 [ 637.310594][T23069] (syz.4.6483,23069,0):ocfs2_create:678 ERROR: status = -117 [ 637.552896][ T5844] ocfs2: Unmounting device (7,4) on (node local) [ 637.702680][T23174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6510'. [ 638.069801][T23194] netlink: 'syz.1.6516': attribute type 5 has an invalid length. [ 638.273291][T23198] loop6: detected capacity change from 0 to 1024 [ 638.399151][ T30] audit: type=1800 audit(867.342:2106): pid=23198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6518" name="bus" dev="loop6" ino=26 res=0 errno=0 [ 638.575336][ T1096] hfsplus: b-tree write err: -5, ino 4 [ 638.692713][T23221] netlink: 'syz.3.6526': attribute type 11 has an invalid length. [ 638.861548][T23219] loop5: detected capacity change from 0 to 4096 [ 639.030078][T23219] ntfs3(loop5): ino=1a, mi_enum_attr [ 639.072984][T23242] overlayfs: cannot append lower layer [ 639.082624][T23219] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 639.189671][T23245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.252599][ T9] lo speed is unknown, defaulting to 1000 [ 639.258373][ T9] syz0: Port: 1 Link DOWN [ 639.351343][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6535'. [ 639.889638][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6544'. [ 640.219550][T23232] loop6: detected capacity change from 0 to 32768 [ 640.373032][T23232] ERROR: (device loop6): diAllocAG: nfreeinos = 0, but iag on freelist [ 640.373032][T23232] [ 640.434474][T23232] ialloc: diAlloc returned -5! [ 640.567162][T23310] loop3: detected capacity change from 0 to 256 [ 640.905122][T23313] loop1: detected capacity change from 0 to 4096 [ 641.151088][T23313] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 641.348239][ T30] audit: type=1326 audit(870.302:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 641.384061][T23346] QAT: Invalid ioctl 21531 [ 641.432598][ T30] audit: type=1326 audit(870.352:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 641.544706][ T30] audit: type=1326 audit(870.362:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 641.654915][ T30] audit: type=1326 audit(870.362:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 641.731795][ T30] audit: type=1326 audit(870.362:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3138eec9 code=0x7ffc0000 [ 642.782642][ T5939] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 642.977739][ T5939] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 643.005562][ T5939] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 643.030885][ T5939] usb 7-1: config 0 has no interface number 0 [ 643.057125][ T5939] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.099818][ T5939] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 643.160879][ T5939] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 643.179286][ T5939] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 643.199596][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.260180][ T5939] usb 7-1: config 0 descriptor?? [ 643.284212][T23407] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 643.332868][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 643.523547][ T9] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.553915][ T9] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 643.568894][ T9] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 643.578929][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.725616][ T5939] usb 7-1: USB disconnect, device number 21 [ 643.797252][T23492] tmpfs: Bad value for 'mpol' [ 643.812640][ T9] usb 4-1: string descriptor 0 read error: -71 [ 643.983976][ T9] usb 4-1: USB disconnect, device number 24 [ 644.079367][ T8625] udevd[8625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.264551][ T6005] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 644.304960][ T5840] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 644.432621][ T6005] usb 6-1: Using ep0 maxpacket: 8 [ 644.454588][ T6005] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 644.475126][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 644.492335][ T6005] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 644.512062][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.534997][ T6005] usb 6-1: Product: syz [ 644.541545][ T6005] usb 6-1: Manufacturer: syz [ 644.541643][T23546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6615'. [ 644.549371][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 644.572556][ T6005] usb 6-1: SerialNumber: syz [ 644.588654][ T6005] usb 6-1: config 0 descriptor?? [ 644.604738][ T6005] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 644.614055][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 644.643603][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 644.691671][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.735697][ T5840] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 644.748705][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.777341][ T5840] usb 5-1: Product: syz [ 644.787433][ T5840] usb 5-1: Manufacturer: syz [ 644.818801][ T5840] usb 5-1: SerialNumber: syz [ 644.849589][ T5840] usb 5-1: config 0 descriptor?? [ 645.005301][ T5840] rc_core: IR keymap rc-imon-rsc not found [ 645.011329][ T5840] Registered IR keymap rc-empty [ 645.020719][ T6005] gspca_zc3xx: reg_r err -71 [ 645.032431][ T6005] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 645.057470][ T5840] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 645.058775][ T5939] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 645.084748][ T6005] usb 6-1: USB disconnect, device number 27 [ 645.108252][ T5840] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 645.189726][ T5840] usb 5-1: USB disconnect, device number 21 [ 645.303719][ T5939] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 645.342698][ T5939] usb 7-1: config 0 has no interface number 0 [ 645.352871][ T5939] usb 7-1: config 0 interface 122 has no altsetting 0 [ 645.377830][ T5939] usb 7-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 645.417591][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.436062][ T5939] usb 7-1: Product: syz [ 645.442783][ C0] bridge0: port 3(team0) entered forwarding state [ 645.443501][ T5939] usb 7-1: Manufacturer: syz [ 645.449254][ C0] bridge0: topology change detected, propagating [ 645.464142][ T5939] usb 7-1: SerialNumber: syz [ 645.473444][T23604] loop3: detected capacity change from 0 to 128 [ 645.497024][ T5939] usb 7-1: config 0 descriptor?? [ 645.523260][T23604] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.828521][ T5847] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 645.884960][T23558] loop1: detected capacity change from 0 to 40427 [ 645.980338][ T5939] usb 7-1: USB disconnect, device number 22 [ 645.988515][ T5939] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 646.008666][T23558] F2FS-fs (loop1): build fault injection rate: 771 [ 646.046428][T23558] F2FS-fs (loop1): invalid crc value [ 646.275722][ T5840] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 646.375085][T23558] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 646.409248][T23657] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 646.418505][T23558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 646.454635][T23661] loop0: detected capacity change from 0 to 22 [ 646.488269][ T5840] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 646.498456][T23661] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 646.517661][T23661] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 646.530125][ T5840] usb 4-1: config 0 has no interface number 0 [ 646.556306][ T5840] usb 4-1: config 0 interface 13 has no altsetting 0 [ 646.613239][ T5840] usb 4-1: string descriptor 0 read error: -22 [ 646.630244][ T5840] usb 4-1: New USB device found, idVendor=19d2, idProduct=0049, bcdDevice=5a.26 [ 646.684771][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.717246][ T5840] usb 4-1: config 0 descriptor?? [ 646.760349][ T5840] usb 4-1: bad CDC descriptors [ 646.941147][ T5840] usb 4-1: USB disconnect, device number 25 [ 647.201490][T23691] loop0: detected capacity change from 0 to 4096 [ 647.244823][T23691] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 647.315027][T23691] ntfs3(loop0): ino=19, mi_enum_attr [ 647.355291][T23691] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 647.365355][T23709] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6645'. [ 647.409971][T23700] loop5: detected capacity change from 0 to 4096 [ 647.463932][T23691] ntfs3(loop0): failed to convert "c46c" to cp862 [ 647.487087][T23691] ntfs3(loop0): ino=20, mi_enum_attr [ 647.598714][T23700] ntfs3(loop5): ino=5, "/" indx_read [ 647.623108][T23700] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 647.649567][T23714] netlink: 'syz.6.6646': attribute type 10 has an invalid length. [ 647.707959][T23714] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 647.764461][T23714] bridge0: port 4(netdevsim0) entered blocking state [ 647.792843][T23714] bridge0: port 4(netdevsim0) entered disabled state [ 647.807948][T23714] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 647.865853][T23714] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 648.319824][T23748] loop3: detected capacity change from 0 to 16 [ 648.355809][T23748] erofs (device loop3): mounted with root inode @ nid 36. [ 648.772976][T23769] loop1: detected capacity change from 0 to 256 [ 648.817909][T23769] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 648.853854][T23777] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6665'. [ 648.867453][T23769] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 648.892426][T23777] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6665'. [ 648.923206][T23769] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 648.944191][T23779] usb usb8: usbfs: process 23779 (syz.3.6664) did not claim interface 0 before use [ 648.950648][T23777] netlink: 'syz.6.6665': attribute type 6 has an invalid length. [ 648.978270][T23769] exFAT-fs (loop1): failed to load alloc-bitmap [ 648.979259][T23783] loop5: detected capacity change from 0 to 256 [ 648.987205][T23777] netlink: 'syz.6.6665': attribute type 5 has an invalid length. [ 649.009998][T23769] exFAT-fs (loop1): failed to recognize exfat type [ 649.049374][T23777] netlink: 43 bytes leftover after parsing attributes in process `syz.6.6665'. [ 649.102094][T23783] FAT-fs (loop5): Directory bread(block 64) failed [ 649.142727][T23783] FAT-fs (loop5): Directory bread(block 65) failed [ 649.149377][T23783] FAT-fs (loop5): Directory bread(block 66) failed [ 649.208874][T23783] FAT-fs (loop5): Directory bread(block 67) failed [ 649.239510][T23783] FAT-fs (loop5): Directory bread(block 68) failed [ 649.281999][T23783] FAT-fs (loop5): Directory bread(block 69) failed [ 649.323255][T23783] FAT-fs (loop5): Directory bread(block 70) failed [ 649.352999][T23783] FAT-fs (loop5): Directory bread(block 71) failed [ 649.362916][T23800] loop3: detected capacity change from 0 to 128 [ 649.380105][T23783] FAT-fs (loop5): Directory bread(block 72) failed [ 649.419596][T23800] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 649.433274][T23783] FAT-fs (loop5): Directory bread(block 73) failed [ 649.522710][T23800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.598366][ T30] audit: type=1800 audit(878.542:2112): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6666" name="cpu.stat" dev="loop5" ino=1048696 res=0 errno=0 [ 649.801247][T23821] netlink: 'syz.6.6677': attribute type 1 has an invalid length. [ 650.065111][T23839] netlink: 'syz.3.6680': attribute type 1 has an invalid length. [ 650.129827][T23841] loop6: detected capacity change from 0 to 256 [ 650.302927][ T5939] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 650.472724][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 650.493766][ T5939] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 650.510776][ T5939] usb 6-1: config 179 has no interface number 0 [ 650.541994][ T5939] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 650.582541][ T5939] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 650.623866][ T5939] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 650.680651][ T5939] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 650.743143][ T5939] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 650.763853][ T5939] usb 6-1: config 179 interface 65 has no altsetting 0 [ 650.792597][ T5939] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 650.801662][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.993137][ T5939] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input36 [ 651.073034][ T5191] input input36: unable to receive magic message: -110 [ 651.167919][ T5191] input input36: unable to receive magic message: -32 [ 651.217114][T23894] loop6: detected capacity change from 0 to 2048 [ 651.227208][ T5191] input input36: unable to receive magic message: -32 [ 651.278892][T23894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.315499][ T6005] usb 6-1: USB disconnect, device number 28 [ 651.315511][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 651.315657][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 651.392597][ T5912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 651.547954][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 651.579182][ T5912] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 651.620135][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.658027][ T5912] usb 4-1: Product: syz [ 651.672630][ T5912] usb 4-1: Manufacturer: syz [ 651.677258][ T5912] usb 4-1: SerialNumber: syz [ 651.715794][ T5912] usb 4-1: config 0 descriptor?? [ 651.864354][T23939] netlink: 'syz.4.6703': attribute type 1 has an invalid length. [ 651.872197][T23939] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6703'. [ 651.929174][T23943] loop6: detected capacity change from 0 to 256 [ 651.936097][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6703'. [ 651.962164][ T5912] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 651.993810][ T5912] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 652.042140][ T5912] usb 4-1: USB disconnect, device number 26 [ 652.074036][T23943] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 652.418165][T23975] loop6: detected capacity change from 0 to 256 [ 653.133762][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6720'. [ 653.207144][T24011] bridge4: entered promiscuous mode [ 653.471170][T24035] loop4: detected capacity change from 0 to 8 [ 653.530070][T24035] cramfs: empty filesystem [ 653.595568][ T8625] udevd[8625]: incorrect cramfs checksum on /dev/loop4 [ 653.662562][T24046] tmpfs: Bad value for 'mpol' [ 653.707196][ T5910] udevd[5910]: incorrect cramfs checksum on /dev/loop4 [ 653.788565][T24050] loop3: detected capacity change from 0 to 512 [ 653.835043][T24050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.921315][T23985] loop5: detected capacity change from 0 to 32768 [ 653.981924][T24050] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.6730: invalid block [ 654.087279][T24050] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.6730: invalid indirect mapped block 4294967295 (level 1) [ 654.117131][T24033] loop1: detected capacity change from 0 to 32768 [ 654.130741][T23985] JBD2: Ignoring recovery information on journal [ 654.162846][T24050] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.6730: invalid indirect mapped block 4294967295 (level 1) [ 654.165776][T24033] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 654.190368][T24033] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 654.244143][T23985] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 654.283208][T24033] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 654.387785][T24050] EXT4-fs (loop3): 2 truncates cleaned up [ 654.463294][T24050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.500770][T23985] OCFS2: ERROR (device loop5): ocfs2_xattr_find_entry: corrupted xattr entries [ 654.500811][T23985] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 654.582755][T23985] OCFS2: File system is now read-only. [ 654.610770][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 654.617536][T23985] (syz.5.6713,23985,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 654.672703][T23985] (syz.5.6713,23985,1):ocfs2_mknod:337 ERROR: status = -117 [ 654.702951][T23985] (syz.5.6713,23985,1):ocfs2_mknod:505 ERROR: status = -117 [ 654.752752][T23985] (syz.5.6713,23985,1):ocfs2_create:678 ERROR: status = -117 [ 654.784298][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.987763][ T5853] ocfs2: Unmounting device (7,5) on (node local) [ 655.267946][T24119] loop6: detected capacity change from 0 to 256 [ 655.389464][T24119] FAT-fs (loop6): Directory bread(block 64) failed [ 655.393040][T24123] loop0: detected capacity change from 0 to 256 [ 655.443094][T24119] FAT-fs (loop6): Directory bread(block 65) failed [ 655.465775][T24119] FAT-fs (loop6): Directory bread(block 66) failed [ 655.502643][T24119] FAT-fs (loop6): Directory bread(block 67) failed [ 655.509299][T24119] FAT-fs (loop6): Directory bread(block 68) failed [ 655.548363][T24131] loop1: detected capacity change from 0 to 64 [ 655.582936][T24119] FAT-fs (loop6): Directory bread(block 69) failed [ 655.591712][T24119] FAT-fs (loop6): Directory bread(block 70) failed [ 655.649472][T24119] FAT-fs (loop6): Directory bread(block 71) failed [ 655.672692][T24135] sctp: [Deprecated]: syz.4.6751 (pid 24135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.672692][T24135] Use struct sctp_sack_info instead [ 655.693139][T24119] FAT-fs (loop6): Directory bread(block 72) failed [ 655.754943][T24119] FAT-fs (loop6): Directory bread(block 73) failed [ 655.791030][T24137] netlink: 'syz.0.6752': attribute type 13 has an invalid length. [ 656.019850][T24146] syz.4.6754 (24146): /proc/24144/oom_adj is deprecated, please use /proc/24144/oom_score_adj instead. [ 656.144557][T24151] loop0: detected capacity change from 0 to 164 [ 656.344951][ T5848] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 656.398324][ T5848] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 657.417097][T24206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6770'. [ 657.440604][T24150] loop1: detected capacity change from 0 to 32768 [ 657.466210][T24150] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6753 (24150) [ 657.472763][T24207] comedi comedi0: dac02: a I/O base address must be specified [ 657.566501][T24150] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 657.638015][T24150] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 657.986097][T24150] BTRFS info (device loop1): enabling ssd optimizations [ 658.002615][T24150] BTRFS info (device loop1): enabling free space tree [ 658.255751][T24252] loop5: detected capacity change from 0 to 1764 [ 658.296406][ T5835] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 658.334024][T24174] loop0: detected capacity change from 0 to 32768 [ 658.404762][T24174] JBD2: Ignoring recovery information on journal [ 658.613218][T24174] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 658.768726][T24174] OCFS2: ERROR (device loop0): ocfs2_xattr_find_entry: corrupted xattr entries [ 658.768765][T24174] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 658.912016][T24174] OCFS2: File system is now read-only. [ 658.960949][T24174] (syz.0.6757,24174,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 659.008379][T24174] (syz.0.6757,24174,1):ocfs2_mknod:337 ERROR: status = -117 [ 659.083908][T24174] (syz.0.6757,24174,1):ocfs2_mknod:505 ERROR: status = -117 [ 659.091276][T24174] (syz.0.6757,24174,1):ocfs2_create:678 ERROR: status = -117 [ 659.192316][T24202] loop4: detected capacity change from 0 to 32768 [ 659.223647][T24286] loop3: detected capacity change from 0 to 512 [ 659.256450][T24286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 659.320491][T24286] EXT4-fs (loop3): 1 truncate cleaned up [ 659.345190][T24286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.389221][ T5848] ocfs2: Unmounting device (7,0) on (node local) [ 659.468321][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.397448][T24327] loop5: detected capacity change from 0 to 4096 [ 660.404593][ T5840] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 660.433773][T24327] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 660.506819][T24327] ntfs3(loop5): ino=19, mi_enum_attr [ 660.526081][T24327] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 660.564956][T24284] loop1: detected capacity change from 0 to 32768 [ 660.566155][ T5840] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 660.614286][ T5840] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 660.666631][ T5840] usb 5-1: config 220 has no interface number 2 [ 660.686727][T24284] JBD2: Ignoring recovery information on journal [ 660.689557][ T5840] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 660.706596][ T5840] usb 5-1: config 220 interface 0 has no altsetting 0 [ 660.713585][ T5840] usb 5-1: config 220 interface 76 has no altsetting 0 [ 660.720547][ T5840] usb 5-1: config 220 interface 1 has no altsetting 0 [ 660.740344][ T5840] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 660.749781][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.764224][ T5840] usb 5-1: Product: syz [ 660.768469][ T5840] usb 5-1: Manufacturer: syz [ 660.774653][ T5840] usb 5-1: SerialNumber: syz [ 660.793419][T24341] loop0: detected capacity change from 0 to 4096 [ 660.905239][T24341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.920525][T24284] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 660.983079][T24341] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.6796: invalid fast symlink length 131109 [ 661.033499][ T5840] usb 5-1: selecting invalid altsetting 0 [ 661.039757][ T5840] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 661.100204][ T5840] uvcvideo 5-1:220.0: No valid video chain found. [ 661.116271][T24284] OCFS2: ERROR (device loop1): ocfs2_validate_gd_parent: Group descriptor #32 has bit count of 1024 [ 661.159765][T24284] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 661.184749][ T5840] usb 5-1: selecting invalid altsetting 0 [ 661.184791][ T5840] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 661.208833][ T5840] usb 5-1: USB disconnect, device number 22 [ 661.258895][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.264299][T24284] OCFS2: File system is now read-only. [ 661.264379][T24284] (syz.1.6782,24284,0):ocfs2_search_chain:1817 ERROR: status = -30 [ 661.264424][T24284] (syz.1.6782,24284,0):ocfs2_search_chain:1940 ERROR: status = -30 [ 661.264467][T24284] (syz.1.6782,24284,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 661.264510][T24284] (syz.1.6782,24284,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 661.264553][T24284] (syz.1.6782,24284,0):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 661.264594][T24284] (syz.1.6782,24284,0):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 661.264636][T24284] (syz.1.6782,24284,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -30 [ 661.264677][T24284] (syz.1.6782,24284,0):ocfs2_block_group_alloc:711 ERROR: status = -30 [ 661.264766][T24284] (syz.1.6782,24284,0):ocfs2_block_group_alloc:764 ERROR: status = -30 [ 661.264842][T24284] (syz.1.6782,24284,0):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30 [ 661.264882][T24284] (syz.1.6782,24284,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30 [ 661.264922][T24284] (syz.1.6782,24284,0):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30 [ 661.264981][T24284] (syz.1.6782,24284,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30 [ 661.265052][T24284] (syz.1.6782,24284,0):ocfs2_expand_inline_dir:2847 ERROR: status = -30 [ 661.265092][T24284] (syz.1.6782,24284,0):ocfs2_extend_dir:3211 ERROR: status = -30 [ 661.265131][T24284] (syz.1.6782,24284,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30 [ 661.265180][T24284] (syz.1.6782,24284,0):ocfs2_symlink:1879 ERROR: status = -30 [ 661.265220][T24284] (syz.1.6782,24284,0):ocfs2_symlink:2080 ERROR: status = -30 [ 661.405439][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 661.594387][T24388] loop1: detected capacity change from 0 to 512 [ 662.149052][T24388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.265247][T24418] netlink: 'syz.3.6815': attribute type 12 has an invalid length. [ 662.424514][T24426] loop4: detected capacity change from 0 to 256 [ 662.483926][T24426] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 662.497987][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.517804][T24430] netlink: 'syz.6.6817': attribute type 1 has an invalid length. [ 662.543921][T24430] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6817'. [ 663.082991][T24458] tmpfs: Bad value for 'mpol' [ 663.475677][T24478] netlink: 'syz.1.6832': attribute type 2 has an invalid length. [ 663.523837][T24484] loop6: detected capacity change from 0 to 16 [ 663.531392][T24483] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 663.583309][T24484] erofs (device loop6): mounted with root inode @ nid 36. [ 663.583303][ T6005] kernel write not supported for file /2026/clear_refs (pid: 6005 comm: kworker/0:7) [ 663.670324][T24484] syz.6.6833: attempt to access beyond end of device [ 663.670324][T24484] loop6: rw=524288, sector=34359738360, nr_sectors = 32 limit=16 [ 663.716124][T24484] syz.6.6833: attempt to access beyond end of device [ 663.716124][T24484] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 663.789209][ T30] audit: type=1800 audit(892.742:2113): pid=24484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6833" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 663.808371][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.728495][T24552] loop3: detected capacity change from 0 to 64 [ 665.385252][T24582] loop6: detected capacity change from 0 to 2048 [ 665.399180][ T30] audit: type=1326 audit(894.352:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 665.513137][ T30] audit: type=1326 audit(894.372:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 665.514226][T24595] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 665.586531][ T30] audit: type=1326 audit(894.372:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 665.608423][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.624104][ T30] audit: type=1326 audit(894.372:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24588 comm="syz.5.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa8f8eec9 code=0x7ffc0000 [ 665.945382][T24602] loop5: detected capacity change from 0 to 4096 [ 666.022344][T24602] ntfs3(loop5): ino=3, Correct links count -> 2. [ 666.151313][T24622] sctp: [Deprecated]: syz.6.6874 (pid 24622) Use of int in max_burst socket option deprecated. [ 666.151313][T24622] Use struct sctp_assoc_value instead [ 666.180312][T24625] loop4: detected capacity change from 0 to 16 [ 666.263009][T24625] erofs (device loop4): mounted with root inode @ nid 36. [ 667.815983][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6915'. [ 667.835019][T24714] vlan0: entered promiscuous mode [ 668.023899][T24726] XFS (nullb0): Invalid superblock magic number [ 668.263568][T24739] netlink: 'syz.6.6909': attribute type 11 has an invalid length. [ 668.357618][T24745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.261509][T24830] loop3: detected capacity change from 0 to 64 [ 669.727652][ T12] [ 669.730026][ T12] ====================================================== [ 669.737036][ T12] WARNING: possible circular locking dependency detected [ 669.744050][ T12] syzkaller #0 Not tainted [ 669.748463][ T12] ------------------------------------------------------ [ 669.755490][ T12] kworker/u8:0/12 is trying to acquire lock: [ 669.761468][ T12] ffff888054983b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa5/0xcd0 [ 669.772217][ T12] [ 669.772217][ T12] but task is already holding lock: [ 669.779589][ T12] ffff8880794300b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x310 [ 669.789165][ T12] [ 669.789165][ T12] which lock already depends on the new lock. [ 669.789165][ T12] [ 669.799562][ T12] [ 669.799562][ T12] the existing dependency chain (in reverse order) is: [ 669.808919][ T12] [ 669.808919][ T12] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 669.817048][ T12] __mutex_lock+0x193/0x1060 [ 669.822272][ T12] hfs_find_init+0x19c/0x310 [ 669.827412][ T12] hfs_ext_read_extent+0x19b/0x9e0 [ 669.833054][ T12] hfs_extend_file+0x519/0xcd0 [ 669.838343][ T12] hfs_bmap_reserve+0x2ab/0x3a0 [ 669.843712][ T12] hfs_cat_create+0x32c/0x960 [ 669.848908][ T12] hfs_create+0x6b/0xf0 [ 669.853584][ T12] lookup_open.isra.0+0x11d3/0x1580 [ 669.859316][ T12] path_openat+0x893/0x2cb0 [ 669.864360][ T12] do_filp_open+0x20b/0x470 [ 669.869377][ T12] do_sys_openat2+0x11b/0x1d0 [ 669.874577][ T12] __x64_sys_open+0x153/0x1e0 [ 669.879779][ T12] do_syscall_64+0xcd/0x4e0 [ 669.884810][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.891222][ T12] [ 669.891222][ T12] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 669.900445][ T12] __lock_acquire+0x12a6/0x1ce0 [ 669.905820][ T12] lock_acquire+0x179/0x350 [ 669.910846][ T12] __mutex_lock+0x193/0x1060 [ 669.915963][ T12] hfs_extend_file+0xa5/0xcd0 [ 669.921167][ T12] hfs_bmap_reserve+0x2ab/0x3a0 [ 669.926538][ T12] __hfs_ext_write_extent+0x3cf/0x520 [ 669.932437][ T12] hfs_ext_write_extent+0x1b5/0x1f0 [ 669.938165][ T12] hfs_write_inode+0xcc/0xab0 [ 669.943373][ T12] __writeback_single_inode+0xb3e/0xfb0 [ 669.949450][ T12] writeback_sb_inodes+0x60d/0xfa0 [ 669.955095][ T12] wb_writeback+0x419/0xb70 [ 669.960137][ T12] wb_workfn+0x14d/0xbe0 [ 669.964914][ T12] process_one_work+0x9cf/0x1b70 [ 669.970383][ T12] worker_thread+0x6c8/0xf10 [ 669.975503][ T12] kthread+0x3c5/0x780 [ 669.980095][ T12] ret_from_fork+0x56d/0x730 [ 669.985211][ T12] ret_from_fork_asm+0x1a/0x30 [ 669.990514][ T12] [ 669.990514][ T12] other info that might help us debug this: [ 669.990514][ T12] [ 670.000726][ T12] Possible unsafe locking scenario: [ 670.000726][ T12] [ 670.008167][ T12] CPU0 CPU1 [ 670.013518][ T12] ---- ---- [ 670.018876][ T12] lock(&tree->tree_lock#2/1); [ 670.023748][ T12] lock(&HFS_I(tree->inode)->extents_lock); [ 670.032248][ T12] lock(&tree->tree_lock#2/1); [ 670.039727][ T12] lock(&HFS_I(tree->inode)->extents_lock); [ 670.045707][ T12] [ 670.045707][ T12] *** DEADLOCK *** [ 670.045707][ T12] [ 670.053833][ T12] 3 locks held by kworker/u8:0/12: [ 670.058932][ T12] #0: ffff88801ead3148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 670.069678][ T12] #1: ffffc90000117d10 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 670.081552][ T12] #2: ffff8880794300b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x19c/0x310 [ 670.091549][ T12] [ 670.091549][ T12] stack backtrace: [ 670.097429][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 670.097469][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.097492][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 670.097546][ T12] Call Trace: [ 670.097558][ T12] [ 670.097571][ T12] dump_stack_lvl+0x116/0x1f0 [ 670.097615][ T12] print_circular_bug+0x275/0x350 [ 670.097651][ T12] check_noncircular+0x14c/0x170 [ 670.097691][ T12] __lock_acquire+0x12a6/0x1ce0 [ 670.097735][ T12] lock_acquire+0x179/0x350 [ 670.097769][ T12] ? hfs_extend_file+0xa5/0xcd0 [ 670.097809][ T12] ? __pfx___might_resched+0x10/0x10 [ 670.097857][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.097900][ T12] ? hfs_extend_file+0xa5/0xcd0 [ 670.097936][ T12] __mutex_lock+0x193/0x1060 [ 670.097977][ T12] ? hfs_extend_file+0xa5/0xcd0 [ 670.098013][ T12] ? __lock_acquire+0x107f/0x1ce0 [ 670.098053][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 670.098101][ T12] ? __pfx___might_resched+0x10/0x10 [ 670.098149][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.098195][ T12] ? rcu_is_watching+0x12/0xc0 [ 670.098247][ T12] ? hfs_extend_file+0xa5/0xcd0 [ 670.098283][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.098323][ T12] hfs_extend_file+0xa5/0xcd0 [ 670.098363][ T12] ? __pfx_hfs_extend_file+0x10/0x10 [ 670.098400][ T12] ? hfs_brec_find+0x4dc/0x650 [ 670.098456][ T12] hfs_bmap_reserve+0x2ab/0x3a0 [ 670.098488][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.098533][ T12] __hfs_ext_write_extent+0x3cf/0x520 [ 670.098572][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.098614][ T12] hfs_ext_write_extent+0x1b5/0x1f0 [ 670.098653][ T12] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 670.098696][ T12] ? blk_finish_plug+0x16/0xa0 [ 670.098726][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.098765][ T12] ? mpage_writepages+0x159/0x1c0 [ 670.098813][ T12] ? __pfx_mpage_writepages+0x10/0x10 [ 670.098864][ T12] hfs_write_inode+0xcc/0xab0 [ 670.098906][ T12] ? __pfx_hfs_write_inode+0x10/0x10 [ 670.098947][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 670.098985][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099024][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 670.099067][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099112][ T12] __writeback_single_inode+0xb3e/0xfb0 [ 670.099161][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 670.099205][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099244][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 670.099287][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099329][ T12] writeback_sb_inodes+0x60d/0xfa0 [ 670.099382][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 670.099427][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 670.099497][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099536][ T12] ? rcu_is_watching+0x12/0xc0 [ 670.099583][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099622][ T12] ? queue_io+0x3f6/0x520 [ 670.099660][ T12] wb_writeback+0x419/0xb70 [ 670.099707][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 670.099748][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099793][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.099831][ T12] ? mark_held_locks+0x49/0x80 [ 670.099869][ T12] wb_workfn+0x14d/0xbe0 [ 670.099914][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 670.099952][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 670.099998][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.100039][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.100080][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.100119][ T12] ? rcu_is_watching+0x12/0xc0 [ 670.100175][ T12] process_one_work+0x9cf/0x1b70 [ 670.100225][ T12] ? __pfx_process_one_work+0x10/0x10 [ 670.100268][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.100312][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.100351][ T12] ? assign_work+0x1a0/0x250 [ 670.100390][ T12] worker_thread+0x6c8/0xf10 [ 670.100441][ T12] ? __pfx_worker_thread+0x10/0x10 [ 670.100482][ T12] kthread+0x3c5/0x780 [ 670.100521][ T12] ? __pfx_kthread+0x10/0x10 [ 670.100558][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.100597][ T12] ? rcu_is_watching+0x12/0xc0 [ 670.100645][ T12] ? __pfx_kthread+0x10/0x10 [ 670.100683][ T12] ret_from_fork+0x56d/0x730 [ 670.100717][ T12] ? __pfx_kthread+0x10/0x10 [ 670.100755][ T12] ret_from_fork_asm+0x1a/0x30 [ 670.100811][ T12] [ 670.595485][T24828] loop6: detected capacity change from 0 to 32768 [ 670.614499][ T12] hfs: new node 0 already hashed? [ 670.620563][ T12] ------------[ cut here ]------------ [ 670.626136][ T12] WARNING: CPU: 1 PID: 12 at fs/hfs/bnode.c:520 hfs_bnode_create+0x14c/0x5e0 [ 670.634957][ T12] Modules linked in: [ 670.638949][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 670.648322][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.658426][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 670.664496][ T12] RIP: 0010:hfs_bnode_create+0x14c/0x5e0 [ 670.670150][ T12] Code: e9 18 ff 45 39 fc 75 9e e8 e1 ee 18 ff 4c 89 f7 e8 49 ed af 08 e8 d4 ee 18 ff 44 89 e6 48 c7 c7 20 c5 8a 8b e8 35 91 f7 fe 90 <0f> 0b 90 e8 bc ee 18 ff 48 89 d8 48 83 c4 28 5b 5d 41 5c 41 5d 41 [ 670.680429][T24828] JBD2: Ignoring recovery information on journal [ 670.690155][ T12] RSP: 0018:ffffc90000117080 EFLAGS: 00010286 [ 670.703144][ T12] RAX: 000000000000001f RBX: ffff888042fb8700 RCX: ffffffff8199c7a9 [ 670.711131][ T12] RDX: 0000000000000000 RSI: ffffffff819a42d6 RDI: 0000000000000005 [ 670.719559][ T12] RBP: ffff888079430000 R08: 0000000000000005 R09: 0000000000000000 [ 670.727781][ T12] R10: 0000000080000000 R11: 77656e203a736668 R12: 0000000000000000 [ 670.736098][ T12] R13: dffffc0000000000 R14: ffff8880794300e0 R15: 0000000000000000 [ 670.744447][ T12] FS: 0000000000000000(0000) GS:ffff888124f6a000(0000) knlGS:0000000000000000 [ 670.753691][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.760290][ T12] CR2: 00007f1c31371880 CR3: 000000006ad9a000 CR4: 0000000000350ef0 [ 670.768538][ T12] Call Trace: [ 670.771819][ T12] [ 670.775029][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.780694][ T12] ? hfs_bnode_put+0x20c/0x460 [ 670.786196][ T12] hfs_bmap_alloc+0x7d7/0x960 [ 670.790901][ T12] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 670.796449][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.802110][ T12] ? hfs_bnode_read.part.0+0x16b/0x5d0 [ 670.807861][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.813821][ T12] ? const_folio_flags+0x5b/0x100 [ 670.818880][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.825537][T24828] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 670.834891][ T12] ? folio_mark_accessed+0xc1/0xc00 [ 670.840135][ T12] hfs_btree_inc_height.isra.0+0xff/0x820 [ 670.846220][ T12] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 670.852834][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.858498][ T12] ? _raw_spin_unlock+0x28/0x50 [ 670.863605][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.869261][ T12] ? hfs_bnode_put+0x20c/0x460 [ 670.874360][ T12] hfs_brec_insert+0x8b1/0xc40 [ 670.879168][ T12] ? __pfx_hfs_brec_insert+0x10/0x10 [ 670.885012][ T12] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 670.888394][T24828] OCFS2: ERROR (device loop6): ocfs2_xattr_find_entry: corrupted xattr entries [ 670.890054][ T12] __hfs_ext_write_extent+0x3fa/0x520 [ 670.892338][T24828] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 670.899339][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.917016][T24828] OCFS2: File system is now read-only. [ 670.920453][ T12] hfs_ext_write_extent+0x1b5/0x1f0 [ 670.932110][ T12] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 670.933292][T24828] (syz.6.6926,24828,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 670.938211][ T12] ? blk_finish_plug+0x16/0xa0 [ 670.946617][T24828] (syz.6.6926,24828,0):ocfs2_mknod:337 ERROR: status = -117 [ 670.951059][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 670.958709][T24828] (syz.6.6926,24828,0):ocfs2_mknod:505 ERROR: status = -117 [ 670.964474][ T12] ? mpage_writepages+0x159/0x1c0 [ 670.972022][T24828] (syz.6.6926,24828,0):ocfs2_create:678 ERROR: status = -117 [ 670.976901][ T12] ? __pfx_mpage_writepages+0x10/0x10 [ 670.989682][ T12] hfs_write_inode+0xcc/0xab0 [ 670.994676][ T12] ? __pfx_hfs_write_inode+0x10/0x10 [ 671.000363][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 671.005660][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.011314][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 671.016513][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.022187][ T12] __writeback_single_inode+0xb3e/0xfb0 [ 671.027808][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 671.033941][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.039599][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 671.044839][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.050582][ T12] writeback_sb_inodes+0x60d/0xfa0 [ 671.055758][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 671.061426][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 671.066687][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.072342][ T12] ? rcu_is_watching+0x12/0xc0 [ 671.077159][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.082833][ T12] ? queue_io+0x3f6/0x520 [ 671.087187][ T12] wb_writeback+0x419/0xb70 [ 671.091702][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 671.096771][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.102433][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.108113][ T12] ? mark_held_locks+0x49/0x80 [ 671.112955][ T12] wb_workfn+0x14d/0xbe0 [ 671.117236][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 671.123181][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 671.127981][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.133678][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.139337][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.145008][ T12] ? rcu_is_watching+0x12/0xc0 [ 671.149809][ T12] process_one_work+0x9cf/0x1b70 [ 671.154800][ T12] ? __pfx_process_one_work+0x10/0x10 [ 671.160199][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.165869][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.171523][ T12] ? assign_work+0x1a0/0x250 [ 671.176164][ T12] worker_thread+0x6c8/0xf10 [ 671.180798][ T12] ? __pfx_worker_thread+0x10/0x10 [ 671.185963][ T12] kthread+0x3c5/0x780 [ 671.190053][ T12] ? __pfx_kthread+0x10/0x10 [ 671.194686][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.200341][ T12] ? rcu_is_watching+0x12/0xc0 [ 671.205149][ T12] ? __pfx_kthread+0x10/0x10 [ 671.209759][ T12] ret_from_fork+0x56d/0x730 [ 671.214430][ T12] ? __pfx_kthread+0x10/0x10 [ 671.219044][ T12] ret_from_fork_asm+0x1a/0x30 [ 671.223870][ T12] [ 671.226894][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 671.234165][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 671.243456][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.253510][ T12] Workqueue: writeback wb_workfn (flush-7:3) [ 671.259525][ T12] Call Trace: [ 671.262795][ T12] [ 671.265719][ T12] dump_stack_lvl+0x3d/0x1f0 [ 671.270324][ T12] vpanic+0x640/0x6f0 [ 671.274311][ T12] ? hfs_bnode_create+0x14c/0x5e0 [ 671.279352][ T12] panic+0xca/0xd0 [ 671.283075][ T12] ? __pfx_panic+0x10/0x10 [ 671.287502][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 671.292621][ T12] check_panic_on_warn+0xab/0xb0 [ 671.297565][ T12] __warn+0xf6/0x3c0 [ 671.301461][ T12] ? hfs_bnode_create+0x14c/0x5e0 [ 671.306489][ T12] report_bug+0x3c3/0x580 [ 671.310828][ T12] ? hfs_bnode_create+0x14c/0x5e0 [ 671.315862][ T12] handle_bug+0x184/0x210 [ 671.320220][ T12] exc_invalid_op+0x17/0x50 [ 671.324740][ T12] asm_exc_invalid_op+0x1a/0x20 [ 671.329594][ T12] RIP: 0010:hfs_bnode_create+0x14c/0x5e0 [ 671.335233][ T12] Code: e9 18 ff 45 39 fc 75 9e e8 e1 ee 18 ff 4c 89 f7 e8 49 ed af 08 e8 d4 ee 18 ff 44 89 e6 48 c7 c7 20 c5 8a 8b e8 35 91 f7 fe 90 <0f> 0b 90 e8 bc ee 18 ff 48 89 d8 48 83 c4 28 5b 5d 41 5c 41 5d 41 [ 671.354850][ T12] RSP: 0018:ffffc90000117080 EFLAGS: 00010286 [ 671.360918][ T12] RAX: 000000000000001f RBX: ffff888042fb8700 RCX: ffffffff8199c7a9 [ 671.368886][ T12] RDX: 0000000000000000 RSI: ffffffff819a42d6 RDI: 0000000000000005 [ 671.376853][ T12] RBP: ffff888079430000 R08: 0000000000000005 R09: 0000000000000000 [ 671.384821][ T12] R10: 0000000080000000 R11: 77656e203a736668 R12: 0000000000000000 [ 671.392803][ T12] R13: dffffc0000000000 R14: ffff8880794300e0 R15: 0000000000000000 [ 671.400778][ T12] ? __wake_up_klogd.part.0+0x99/0xf0 [ 671.406166][ T12] ? vprintk_emit+0x1e6/0x680 [ 671.410867][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.416513][ T12] ? hfs_bnode_put+0x20c/0x460 [ 671.421289][ T12] hfs_bmap_alloc+0x7d7/0x960 [ 671.425978][ T12] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 671.431185][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.436827][ T12] ? hfs_bnode_read.part.0+0x16b/0x5d0 [ 671.442311][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.447953][ T12] ? const_folio_flags+0x5b/0x100 [ 671.452997][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.458639][ T12] ? folio_mark_accessed+0xc1/0xc00 [ 671.463863][ T12] hfs_btree_inc_height.isra.0+0xff/0x820 [ 671.469590][ T12] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 671.475924][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.481570][ T12] ? _raw_spin_unlock+0x28/0x50 [ 671.486426][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.492067][ T12] ? hfs_bnode_put+0x20c/0x460 [ 671.496834][ T12] hfs_brec_insert+0x8b1/0xc40 [ 671.501611][ T12] ? __pfx_hfs_brec_insert+0x10/0x10 [ 671.506910][ T12] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 671.511944][ T12] __hfs_ext_write_extent+0x3fa/0x520 [ 671.517326][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.522972][ T12] hfs_ext_write_extent+0x1b5/0x1f0 [ 671.528183][ T12] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 671.533934][ T12] ? blk_finish_plug+0x16/0xa0 [ 671.538717][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.544364][ T12] ? mpage_writepages+0x159/0x1c0 [ 671.549412][ T12] ? __pfx_mpage_writepages+0x10/0x10 [ 671.554813][ T12] hfs_write_inode+0xcc/0xab0 [ 671.559514][ T12] ? __pfx_hfs_write_inode+0x10/0x10 [ 671.564809][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 671.569760][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.575403][ T12] ? __lock_acquire+0xb97/0x1ce0 [ 671.580357][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.586006][ T12] __writeback_single_inode+0xb3e/0xfb0 [ 671.591572][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 671.597655][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.603297][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 671.608508][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.614168][ T12] writeback_sb_inodes+0x60d/0xfa0 [ 671.619323][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 671.624974][ T12] ? do_raw_spin_unlock+0x172/0x230 [ 671.630216][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.635859][ T12] ? rcu_is_watching+0x12/0xc0 [ 671.640646][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.646292][ T12] ? queue_io+0x3f6/0x520 [ 671.650635][ T12] wb_writeback+0x419/0xb70 [ 671.655157][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 671.660201][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.665849][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.671675][ T12] ? mark_held_locks+0x49/0x80 [ 671.676454][ T12] wb_workfn+0x14d/0xbe0 [ 671.680723][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 671.686539][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 671.691323][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.696969][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.702617][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.708261][ T12] ? rcu_is_watching+0x12/0xc0 [ 671.713047][ T12] process_one_work+0x9cf/0x1b70 [ 671.718011][ T12] ? __pfx_process_one_work+0x10/0x10 [ 671.723398][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.729049][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.734691][ T12] ? assign_work+0x1a0/0x250 [ 671.739310][ T12] worker_thread+0x6c8/0xf10 [ 671.743940][ T12] ? __pfx_worker_thread+0x10/0x10 [ 671.749083][ T12] kthread+0x3c5/0x780 [ 671.753162][ T12] ? __pfx_kthread+0x10/0x10 [ 671.757763][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 671.763414][ T12] ? rcu_is_watching+0x12/0xc0 [ 671.768202][ T12] ? __pfx_kthread+0x10/0x10 [ 671.772796][ T12] ret_from_fork+0x56d/0x730 [ 671.777388][ T12] ? __pfx_kthread+0x10/0x10 [ 671.781987][ T12] ret_from_fork_asm+0x1a/0x30 [ 671.786777][ T12] [ 671.789998][ T12] Kernel Offset: disabled [ 671.794312][ T12] Rebooting in 86400 seconds..