last executing test programs: 2.31926288s ago: executing program 0 (id=9324): r0 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x138) 2.219711652s ago: executing program 4 (id=9325): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x257, &(0x7f00000012c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.014402026s ago: executing program 4 (id=9327): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x228, 0x0, 0xa, 0x9a000000, 0xf8, 0x0, 0x190, 0x1f0, 0x1f0, 0x190, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'vxcan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_vlan\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 1.916557657s ago: executing program 4 (id=9329): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d888f1d1c4e5ad85ce4966d", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d68143be79a8614b52dd4b9657ce940be783c334d2a000"/185}]}, 0xe0}], 0x1}, 0x0) 1.8108554s ago: executing program 0 (id=9331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000305000000002200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c002300c30000000000000005002a00"], 0x48}}, 0x0) 1.715675301s ago: executing program 1 (id=9333): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4000000, @private0}}}, 0x88) 1.604776504s ago: executing program 0 (id=9334): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) 1.604454054s ago: executing program 1 (id=9335): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x5385, 0x1000000000000) 1.433101254s ago: executing program 1 (id=9337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.432881254s ago: executing program 0 (id=9338): r0 = socket(0x28, 0x5, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x28, 0x0, {0x0, @random="000000010100", 'dvmrp0\x00'}}, 0x1e) 1.247114755s ago: executing program 0 (id=9341): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x18, 0x1411, 0x101, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) 1.246437706s ago: executing program 4 (id=9350): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000}, 0x80, 0x0, 0x20}}) 1.228864517s ago: executing program 1 (id=9342): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0xffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.090893753s ago: executing program 4 (id=9344): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x50424752, 0x0, @stepwise}) 1.049403618s ago: executing program 0 (id=9345): syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904"], 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 1.028511561s ago: executing program 1 (id=9346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@allocspi={0x150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x33}, @in=@loopback}, 0x0, 0xef88}, [@migrate={0x50, 0x11, [{@in=@private, @in=@private, @in=@multicast1, @in6=@private0}]}, @etimer_thresh={0x8}]}, 0x150}}, 0x0) 911.389215ms ago: executing program 4 (id=9349): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 871.936789ms ago: executing program 1 (id=9351): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000280)={[{@gid}, {@discard_size={'discard', 0x3d, 0x9}}, {@gid}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp866'}, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@grpquota}, {@usrquota}, {@uid}, {@quota}, {@gid}, {@noquota}, {@errors_remount}, {@gid}, {@noquota}], [{@subj_type={'subj_type', 0x3d, '+-]{.&Q.'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$.+[**@(*(.'}}, {@measure}]}, 0x5, 0x60ea, &(0x7f000000c4c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 770.817001ms ago: executing program 3 (id=9352): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) 717.395007ms ago: executing program 2 (id=9353): r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000028c0)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='v', 0x1}], 0x1, &(0x7f00000000c0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x20}], 0x1, 0x0) 598.587801ms ago: executing program 3 (id=9354): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) 598.356101ms ago: executing program 2 (id=9355): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x0, 0x1, 0x2, "037b08fa235d63f5e4b022c8f4240e776300657d06604ecfd2bedd37c1cfdba3", 0x38414262}) 503.022972ms ago: executing program 3 (id=9356): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000}, 0x80, 0x0, 0x20}}) 474.303335ms ago: executing program 2 (id=9357): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4000000, @private0}}}, 0x88) 398.287664ms ago: executing program 2 (id=9358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x4800) 330.212222ms ago: executing program 3 (id=9359): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 203.642007ms ago: executing program 2 (id=9360): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 70.453633ms ago: executing program 3 (id=9361): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@allocspi={0x150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x33}, @in=@loopback}, 0x0, 0xef88}, [@migrate={0x50, 0x11, [{@in=@private, @in=@private, @in=@multicast1, @in6=@private0}]}, @etimer_thresh={0x8}]}, 0x150}}, 0x0) 44.310276ms ago: executing program 2 (id=9362): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) 0s ago: executing program 3 (id=9363): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x5, 0xbc, 0xca, 0x20, 0x3823, 0x1, 0x3eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x98, 0xdc, 0x4a, 0x0, [], [{{0x9, 0x5, 0xa87ce3a5ab857d85, 0x0, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 05.709906][T22589] XFS (loop1): Quotacheck needed: Please wait. [ 905.768869][T22631] EXT4-fs (loop4): 1 truncate cleaned up [ 905.774582][T22631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 905.814123][T22589] XFS (loop1): Quotacheck: Done. [ 905.861375][T22631] CIFS mount error: No usable UNC path provided in device string! [ 905.861375][T22631] [ 905.904612][T22631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 905.933085][ T4523] XFS (loop1): Unmounting Filesystem [ 906.081248][ T4524] EXT4-fs (loop4): unmounting filesystem. [ 906.335303][T22655] loop0: detected capacity change from 0 to 1024 [ 906.411063][T22655] hfsplus: bad catalog entry type [ 906.510632][ T11] hfsplus: b-tree write err: -5, ino 4 [ 906.898952][ T4504] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 907.049481][T22647] loop2: detected capacity change from 0 to 32768 [ 907.060369][T22647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7903 (22647) [ 907.100335][T22647] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 907.139513][T22647] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 907.167180][T22647] BTRFS info (device loop2): using free space tree [ 907.208992][T15818] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 907.439499][T22647] BTRFS info (device loop2): enabling ssd optimizations [ 907.476195][T15818] usb 4-1: Using ep0 maxpacket: 8 [ 907.516779][T22705] loop1: detected capacity change from 0 to 1024 [ 907.529563][ T4504] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 907.549537][ T4504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.560781][T22671] loop0: detected capacity change from 0 to 32768 [ 907.567686][ T4504] usb 5-1: Product: syz [ 907.584015][T22671] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 907.588782][ T4504] usb 5-1: Manufacturer: syz [ 907.603099][T22671] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 907.604817][ T4522] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 907.610912][T15818] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 907.620593][ T4504] usb 5-1: SerialNumber: syz [ 907.644350][T22705] hfsplus: bad catalog entry type [ 907.669000][T15818] usb 4-1: config 0 has no interface number 1 [ 907.675770][T15818] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 907.697546][T15818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 907.704791][T22671] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 907.709760][T15818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 907.718407][ T4504] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 907.738661][T15495] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 907.746822][T15495] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 907.815898][T15495] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 907.827054][T15495] gfs2: fsid=syz:syz.0: jid=0: Done [ 907.836103][T22671] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 907.844003][ T46] hfsplus: b-tree write err: -5, ino 4 [ 907.903933][T15818] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 907.913050][T15818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.940239][T15818] usb 4-1: Product: syz [ 907.961178][T15818] usb 4-1: Manufacturer: syz [ 907.965844][T15818] usb 4-1: SerialNumber: syz [ 908.003354][T22707] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 908.066282][T15818] usb 4-1: config 0 descriptor?? [ 908.135425][T15818] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 908.207468][T22709] loop2: detected capacity change from 0 to 1764 [ 908.334439][T15818] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 908.344701][ T2307] pvrusb2: Invalid read control endpoint [ 908.382368][ T2307] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 908.387766][T15818] usb 4-1: USB disconnect, device number 102 [ 908.413469][ T2307] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 908.433438][ T4506] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 908.500016][T22719] x_tables: ip_tables: osf match: only valid for protocol 6 [ 908.505913][T22717] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7927'. [ 908.870420][ T14] usb 5-1: USB disconnect, device number 91 [ 909.475514][T22757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7946'. [ 909.562085][ T4506] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 909.588525][ T4506] ath9k_htc: Failed to initialize the device [ 909.604387][ T14] usb 5-1: ath9k_htc: USB layer deinitialized [ 909.648532][T22763] __vm_enough_memory: pid: 22763, comm: syz.2.7949, no enough memory for the allocation [ 909.684475][T22731] loop1: detected capacity change from 0 to 40427 [ 909.709696][T22731] F2FS-fs (loop1): invalid crc value [ 909.739326][T22731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 909.862192][T22731] F2FS-fs (loop1): recover fsync data on readonly fs [ 909.892744][T22731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 909.959301][T22731] F2FS-fs (loop1): Corrupted max_depth of 3: 1025 [ 909.986730][T22731] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 910.356131][T22787] loop4: detected capacity change from 0 to 2048 [ 910.457343][T22787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.465283][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7963'. [ 910.705525][ T1042] block nbd2: Attempted send on invalid socket [ 910.711818][ T1042] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 910.919960][T22808] loop0: detected capacity change from 0 to 1764 [ 911.381427][T22831] loop4: detected capacity change from 0 to 16 [ 911.416492][T22831] erofs: (device loop4): mounted with root inode @ nid 36. [ 911.449960][T22836] libceph: resolve '0' (ret=-3): failed [ 911.940157][T22856] ALSA: mixer_oss: invalid OSS volume 'üÃÿ%—ˆ†å' [ 912.280776][T22875] netlink: 'syz.1.8003': attribute type 1 has an invalid length. [ 912.417493][T22878] loop0: detected capacity change from 0 to 512 [ 912.486071][T22878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 912.564034][T22878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8004: bg 0: block 248: padding at end of block bitmap is not set [ 912.612273][T22895] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8012'. [ 912.682901][T22878] Quota error (device loop0): write_blk: dquota write failed [ 912.690403][T22878] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 912.751618][T22899] ieee802154 phy0 wpan0: encryption failed: -22 [ 912.779742][T22878] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.8004: Failed to acquire dquot type 1 [ 912.809368][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8015'. [ 912.820186][T22878] EXT4-fs (loop0): 1 truncate cleaned up [ 912.844222][T22878] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 912.864312][T22878] ext4 filesystem being mounted at /1639/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 912.899212][T22878] EXT4-fs: Cannot change quota options when quota turned on [ 913.020660][ T4518] EXT4-fs (loop0): unmounting filesystem. [ 913.314655][T22921] kAFS: unable to lookup cell '' [ 913.813964][T22946] netlink: 'syz.2.8038': attribute type 13 has an invalid length. [ 913.888488][T22946] gretap0: refused to change device tx_queue_len [ 913.895660][T22949] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8039'. [ 913.910882][T22946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 914.271004][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8047'. [ 914.313192][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8047'. [ 914.363186][T22965] netlink: 'syz.3.8047': attribute type 4 has an invalid length. [ 914.404332][T22973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8051'. [ 914.660625][T22985] loop2: detected capacity change from 0 to 1024 [ 914.768568][T22981] loop0: detected capacity change from 0 to 4096 [ 914.880717][T22993] loop1: detected capacity change from 0 to 64 [ 914.923611][T22990] loop4: detected capacity change from 0 to 2048 [ 914.956055][T22993] minix filesystem being mounted at /1577/bus supports timestamps until 2106-02-07 (0xffffffff) [ 915.008631][T22997] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 915.029685][T22990] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=32784, name_len=0 [ 915.085221][T22990] Remounting filesystem read-only [ 915.292985][T23006] device ipip0 entered promiscuous mode [ 915.685185][T23020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8073'. [ 915.716777][T23020] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 915.733528][T23010] loop3: detected capacity change from 0 to 8192 [ 915.750130][T23020] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 915.761001][T23020] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 915.804619][T23010] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 915.810034][T23020] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 915.825745][T23017] loop0: detected capacity change from 0 to 4096 [ 915.846902][T23010] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 915.856440][T23010] REISERFS (device loop3): using ordered data mode [ 915.863139][T23010] reiserfs: using flush barriers [ 915.875089][T23010] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 915.875134][T23017] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 915.893430][T23010] REISERFS (device loop3): checking transaction log (loop3) [ 915.928563][T23010] REISERFS (device loop3): Using r5 hash to sort names [ 915.938423][T23010] REISERFS (device loop3): using 3.5.x disk format [ 915.945577][T23010] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 915.955129][T23010] reiserfs filesystem being mounted at /1530/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 915.996517][T23017] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 916.034477][T23017] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 916.071383][T23017] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 916.110095][T23017] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 916.167972][T23017] ntfs: volume version 3.1. [ 916.180547][T23017] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 916.226703][T23017] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 916.289493][T23017] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 916.478924][T23003] loop1: detected capacity change from 0 to 32768 [ 916.491044][T23003] XFS: noikeep mount option is deprecated. [ 916.602182][T23003] XFS (loop1): Mounting V5 Filesystem [ 916.763546][T23057] 9pnet: Found fid 0 not clunked [ 916.801379][T23003] XFS (loop1): Ending clean mount [ 916.837173][T23003] XFS (loop1): Quotacheck needed: Please wait. [ 916.956115][T23003] XFS (loop1): Quotacheck: Done. [ 917.115330][ T4523] XFS (loop1): Unmounting Filesystem [ 917.297542][T23077] loop4: detected capacity change from 0 to 512 [ 917.340681][T23077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 917.476297][T23077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 917.524703][T23077] ext4 filesystem being mounted at /1455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.588134][T23077] EXT4-fs: Cannot specify journal on remount [ 917.682327][ T4524] EXT4-fs (loop4): unmounting filesystem. [ 917.973585][T23104] loop1: detected capacity change from 0 to 736 [ 918.214521][T23115] loop3: detected capacity change from 0 to 512 [ 918.246581][T23117] loop2: detected capacity change from 0 to 64 [ 918.271145][T23117] minix filesystem being mounted at /1654/bus supports timestamps until 2106-02-07 (0xffffffff) [ 918.306013][T23115] EXT4-fs (loop3): Test dummy encryption mode enabled [ 918.337072][T23117] syz.2.8116: attempt to access beyond end of device [ 918.337072][T23117] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 918.374880][T23117] Buffer I/O error on dev loop2, logical block 512, async page read [ 918.388811][T23115] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 918.410458][T23117] syz.2.8116: attempt to access beyond end of device [ 918.410458][T23117] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 918.435910][T23115] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.8115: inline data xattr refers to an external xattr inode [ 918.531388][T23117] Buffer I/O error on dev loop2, logical block 56576, async page read [ 918.565047][T23115] EXT4-fs (loop3): Remounting filesystem read-only [ 918.571697][T23115] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8115: couldn't read orphan inode 12 (err -117) [ 918.623301][T23115] EXT4-fs (loop3): Remounting filesystem read-only [ 918.642406][T23115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 918.660543][T23136] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 918.680596][T23136] overlayfs: overlapping lowerdir path [ 919.063178][T23115] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 919.076260][T23115] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.8115: Directory hole found for htree leaf block 0 [ 919.122235][T23115] EXT4-fs (loop3): Remounting filesystem read-only [ 919.129169][T21648] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 919.167664][T23157] loop2: detected capacity change from 0 to 1024 [ 919.198853][ T4530] EXT4-fs (loop3): unmounting filesystem. [ 919.336759][T23161] loop3: detected capacity change from 0 to 8 [ 919.393204][T23161] SQUASHFS error: lzo decompression failed, data probably corrupt [ 919.423979][T23161] SQUASHFS error: Failed to read block 0x1c0: -5 [ 919.438768][T23161] SQUASHFS error: Unable to read metadata cache entry [1be] [ 919.514025][T21648] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 919.534906][T21648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.568030][T21648] usb 1-1: config 0 descriptor?? [ 919.612400][T21648] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 919.911285][T23179] netlink: 'syz.2.8145': attribute type 6 has an invalid length. [ 920.053414][T23185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8149'. [ 920.080437][T21648] gspca_sn9c2028: read1 error -71 [ 920.101905][T21648] gspca_sn9c2028: read1 error -71 [ 920.107059][T21648] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 920.129498][T21648] usb 1-1: USB disconnect, device number 79 [ 920.302617][T23152] loop4: detected capacity change from 0 to 40427 [ 920.362425][T23152] F2FS-fs (loop4): invalid crc value [ 920.397987][T23152] F2FS-fs (loop4): Found nat_bits in checkpoint [ 920.518894][T23152] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 920.587449][T23197] netlink: 'syz.1.8153': attribute type 26 has an invalid length. [ 920.587679][T23202] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 920.749599][T23204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8157'. [ 920.786045][T23204] netlink: 'syz.1.8157': attribute type 2 has an invalid length. [ 921.009903][T23211] libceph: resolve '40.' (ret=-3): failed [ 921.308990][T23230] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8168'. [ 921.336470][T23230] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8168'. [ 921.511185][T23240] loop2: detected capacity change from 0 to 512 [ 921.543978][T23242] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 921.652361][T23240] EXT4-fs (loop2): Test dummy encryption mode enabled [ 921.680557][T23240] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 921.721121][T23240] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.8171: inline data xattr refers to an external xattr inode [ 921.764388][T23240] EXT4-fs (loop2): Remounting filesystem read-only [ 921.774748][T23240] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8171: couldn't read orphan inode 12 (err -117) [ 921.853292][T23240] EXT4-fs (loop2): Remounting filesystem read-only [ 921.860236][T23240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 921.895418][T23240] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.8171: Directory hole found for htree leaf block 0 [ 921.934506][T23240] EXT4-fs (loop2): Remounting filesystem read-only [ 922.050097][ T4522] EXT4-fs (loop2): unmounting filesystem. [ 922.206117][T23262] set match dimension is over the limit! [ 922.332452][T23268] xt_HMARK: spi-set and port-set can't be combined [ 922.396010][T23272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8188'. [ 922.588767][T23239] loop4: detected capacity change from 0 to 32768 [ 922.596007][T23280] loop2: detected capacity change from 0 to 256 [ 922.616261][T23239] jfs filesystem being mounted at /1465/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 922.649792][T23280] vfat filesystem being mounted at /1667/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 922.666718][T23239] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 922.741626][T23284] loop0: detected capacity change from 0 to 1024 [ 922.770346][T23284] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 922.868590][T23288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8197'. [ 922.887612][T23284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 922.898556][T23288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8197'. [ 922.938457][T23284] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.8194: corrupted in-inode xattr [ 923.133840][ T4518] EXT4-fs (loop0): unmounting filesystem. [ 923.467136][T23315] netlink: 'syz.0.8208': attribute type 6 has an invalid length. [ 923.611710][T23319] loop0: detected capacity change from 0 to 4096 [ 923.629752][T23319] __ntfs_error: 8 callbacks suppressed [ 923.629770][T23319] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 923.631516][T21648] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 923.635258][T23319] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 923.670063][T23319] ntfs: (device loop0): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 923.690721][T23319] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 923.704630][T23319] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 923.716003][ T5636] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 923.716851][T23319] ntfs: volume version 3.1. [ 924.100300][ T5636] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 924.108658][ T5636] usb 5-1: config 4 has no interface number 0 [ 924.201154][T21648] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 924.211539][T21648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.220237][T21648] usb 2-1: Product: syz [ 924.224604][T21648] usb 2-1: Manufacturer: syz [ 924.230330][T21648] usb 2-1: SerialNumber: syz [ 924.245464][T21648] r8152-cfgselector 2-1: config 0 descriptor?? [ 924.292899][ T5636] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 924.303379][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.315948][ T5636] usb 5-1: Product: syz [ 924.320332][ T5636] usb 5-1: Manufacturer: syz [ 924.325400][ T5636] usb 5-1: SerialNumber: syz [ 924.380609][ T5636] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 924.419713][ T26] audit: type=1326 audit(6860727757.893:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.0.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 924.442791][ T26] audit: type=1326 audit(6860727757.893:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.0.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 924.465096][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.472015][ T26] audit: type=1326 audit(6860727757.893:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.0.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 924.477347][T23343] loop0: detected capacity change from 0 to 2048 [ 924.500895][ T26] audit: type=1326 audit(6860727757.893:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.0.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f011697e753 code=0x7ffc0000 [ 924.500944][ T26] audit: type=1326 audit(6860727757.893:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23342 comm="syz.0.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f011697d1ff code=0x7ffc0000 [ 924.524793][T23321] orangefs_mount: mount request failed with -4 [ 924.624472][ T5636] vp7045: USB control message 'out' went wrong. [ 924.641839][ T5636] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 924.654751][ T5636] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 924.675993][ T5636] usb 5-1: USB disconnect, device number 92 [ 924.795022][T21648] r8152-cfgselector 2-1: Unknown version 0x0000 [ 924.816814][T21648] r8152-cfgselector 2-1: USB disconnect, device number 95 [ 924.946680][T23357] xt_ecn: cannot match TCP bits for non-tcp packets [ 925.080665][T23363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8231'. [ 925.767149][T23391] netlink: 'syz.3.8246': attribute type 2 has an invalid length. [ 925.780778][T23395] netlink: 'syz.0.8248': attribute type 1 has an invalid length. [ 926.308229][T23415] loop0: detected capacity change from 0 to 256 [ 926.319265][T23419] netlink: 'syz.3.8260': attribute type 1 has an invalid length. [ 926.358018][T23415] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 926.422280][T23415] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 926.481894][T23415] exfat filesystem being mounted at /1700/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 926.535856][T23381] loop1: detected capacity change from 0 to 32768 [ 926.565730][T23381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8241 (23381) [ 926.665329][T23381] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 926.690437][T23381] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 926.690503][T23381] BTRFS info (device loop1): using free space tree [ 926.965246][T23381] BTRFS info (device loop1): enabling ssd optimizations [ 927.091007][T23453] ip6t_srh: unknown srh match flags FDC7 [ 927.222306][ T4523] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.617956][T23448] loop3: detected capacity change from 0 to 32768 [ 927.658729][T23448] JBD2: Ignoring recovery information on journal [ 927.756242][ T4502] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 927.769439][T23448] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 927.911593][ T4530] ocfs2: Unmounting device (7,3) on (node local) [ 927.971716][T23475] netlink: 'syz.0.8278': attribute type 30 has an invalid length. [ 928.085636][T23477] IPVS: length: 215 != 24 [ 928.184281][ T4502] usb 3-1: config 0 has no interfaces? [ 928.355067][ T4502] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 928.391474][ T4502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.423133][ T4502] usb 3-1: Product: syz [ 928.430318][ T4502] usb 3-1: Manufacturer: syz [ 928.459855][ T4502] usb 3-1: SerialNumber: syz [ 928.489337][T23470] loop1: detected capacity change from 0 to 32768 [ 928.489597][ T4502] r8152-cfgselector 3-1: config 0 descriptor?? [ 928.520560][T23470] jfs filesystem being mounted at /1610/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 928.563638][T23470] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 928.563638][T23470] [ 928.665994][ T4562] read_mapping_page failed! [ 928.678911][ T4562] ERROR: (device loop1): txCommit: [ 928.678911][ T4562] [ 928.698980][ T4562] jfs_write_inode: jfs_commit_inode failed! [ 928.798891][ T4502] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 929.020795][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8289'. [ 929.023462][ T4502] usb 3-1: USB disconnect, device number 88 [ 929.047534][T23499] tmpfs: Bad value for 'mpol' [ 929.357881][T23481] loop3: detected capacity change from 0 to 40427 [ 929.401339][T23481] F2FS-fs (loop3): invalid crc value [ 929.440913][T23481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 929.572528][T23481] F2FS-fs (loop3): recover fsync data on readonly fs [ 929.615009][T23481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 929.680978][T23481] F2FS-fs (loop3): Corrupted max_depth of 3: 1025 [ 929.690278][T23481] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 929.990608][T15495] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 930.170300][T23544] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 930.271579][T15495] usb 3-1: Using ep0 maxpacket: 32 [ 930.397017][T15495] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 930.412924][T15495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.438718][T15495] usb 3-1: config 0 descriptor?? [ 930.728520][T15495] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 930.757846][T15495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 930.802806][T23567] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 930.821924][T15495] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 930.834623][T15495] usb 3-1: media controller created [ 930.881036][T15495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.889888][T23570] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8323'. [ 930.964402][T15495] az6027: usb out operation failed. (-71) [ 930.997218][T15495] az6027: usb out operation failed. (-71) [ 931.003212][T15495] stb0899_attach: Driver disabled by Kconfig [ 931.035686][T15495] az6027: no front-end attached [ 931.035686][T15495] [ 931.081140][T15495] az6027: usb out operation failed. (-71) [ 931.086930][T15495] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 931.122160][T15495] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input93 [ 931.165774][T15495] dvb-usb: schedule remote query interval to 400 msecs. [ 931.194862][T15495] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 931.230777][T15495] usb 3-1: USB disconnect, device number 89 [ 931.319777][T15495] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 931.487354][T23588] netlink: 'syz.4.8332': attribute type 12 has an invalid length. [ 931.508815][T23588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8332'. [ 931.586616][T23548] loop0: detected capacity change from 0 to 40427 [ 931.639241][T23548] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 931.647041][T23548] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 931.673651][T23548] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 931.697634][T23592] loop3: detected capacity change from 0 to 4096 [ 931.724637][T23548] F2FS-fs (loop0): Found nat_bits in checkpoint [ 931.748976][T23592] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 931.861018][T23548] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 931.872961][T23548] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 931.956170][ T4530] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 932.000888][ T4530] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 932.007458][ T4530] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 932.507328][T15495] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 932.770149][T15495] usb 3-1: Using ep0 maxpacket: 16 [ 932.909233][T15495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.931271][T15495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.980249][T15495] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 933.037898][T15495] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 933.058687][T15495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.076093][T15495] usb 3-1: config 0 descriptor?? [ 933.092413][T23652] ebt_limit: overflow, try lower: 570423552/2483027968 [ 933.147534][T15495] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input94 [ 933.170900][ T3606] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.184250][ T3606] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.239835][ T3606] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.263460][ T3606] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.305163][ T3606] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.351777][ T7840] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.395428][T23614] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.422060][T23663] loop4: detected capacity change from 0 to 256 [ 933.445022][T23665] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 933.469560][ T3606] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 933.503625][ T5636] usb 3-1: USB disconnect, device number 90 [ 933.526140][T23663] FAT-fs (loop4): Directory bread(block 64) failed [ 933.535724][T23663] FAT-fs (loop4): Directory bread(block 65) failed [ 933.561355][T23663] FAT-fs (loop4): Directory bread(block 66) failed [ 933.586248][T23663] FAT-fs (loop4): Directory bread(block 67) failed [ 933.615135][T23663] FAT-fs (loop4): Directory bread(block 68) failed [ 933.621727][T23663] FAT-fs (loop4): Directory bread(block 69) failed [ 933.690697][T23663] FAT-fs (loop4): Directory bread(block 70) failed [ 933.697294][T23663] FAT-fs (loop4): Directory bread(block 71) failed [ 933.704060][T23663] FAT-fs (loop4): Directory bread(block 72) failed [ 933.710625][T23663] FAT-fs (loop4): Directory bread(block 73) failed [ 933.946247][ T4240] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 934.234714][ T4240] usb 1-1: Using ep0 maxpacket: 8 [ 934.327087][T23701] ax25_connect(): syz.2.8387 uses autobind, please contact jreuter@yaina.de [ 934.331026][ T5636] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 934.384600][ T4240] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 934.405757][ T4240] usb 1-1: config 0 has no interface number 1 [ 934.411948][ T4240] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 934.457787][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 934.501453][ T4240] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 934.561613][T23709] loop2: detected capacity change from 0 to 1024 [ 934.621508][ T5636] usb 5-1: Using ep0 maxpacket: 16 [ 934.705206][ T4240] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 934.723853][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.741328][ T4240] usb 1-1: Product: syz [ 934.746048][ T4240] usb 1-1: Manufacturer: syz [ 934.751940][ T4240] usb 1-1: SerialNumber: syz [ 934.759060][ T4240] usb 1-1: config 0 descriptor?? [ 934.759109][ T5636] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 934.783155][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.797558][ T5636] usb 5-1: config 0 descriptor?? [ 934.829932][ T4240] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 934.857065][ T5636] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 935.060940][ T4240] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 935.104107][ T4240] usb 1-1: USB disconnect, device number 80 [ 935.115674][ T4240] pvrusb2: Device being rendered inoperable [ 935.151390][ T4240] pvrusb2: Device being rendered inoperable [ 935.317894][ T5636] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 935.329177][ T5636] sq905c 5-1:0.0: Reading version command failed [ 935.335608][ T5636] sq905c: probe of 5-1:0.0 failed with error -71 [ 935.361896][ T5636] usb 5-1: USB disconnect, device number 93 [ 935.422299][T23743] netlink: 'syz.3.8406': attribute type 2 has an invalid length. [ 935.430103][T23743] netlink: 'syz.3.8406': attribute type 1 has an invalid length. [ 935.443537][T23743] netlink: 'syz.3.8406': attribute type 1 has an invalid length. [ 935.504313][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 935.504333][ T26] audit: type=1800 audit(923.805:118): pid=23733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.8404" name="/newroot/1701/file0" dev="tmpfs" ino=8906 res=0 errno=0 [ 935.816433][T23758] loop3: detected capacity change from 0 to 512 [ 935.887708][T23758] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 935.951124][T23758] System zones: 0-2, 18-18, 34-34 [ 935.986064][T23758] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.8412: bg 0: block 248: padding at end of block bitmap is not set [ 936.080071][T23758] Quota error (device loop3): write_blk: dquota write failed [ 936.094931][T23758] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 936.109697][T23768] loop4: detected capacity change from 0 to 1764 [ 936.137709][T23758] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.8412: Failed to acquire dquot type 1 [ 936.161165][T23758] EXT4-fs (loop3): 1 truncate cleaned up [ 936.167027][T23758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 936.223848][T23768] cgroup: none used incorrectly [ 936.227121][T23758] Quota error (device loop3): write_blk: dquota write failed [ 936.261121][T23758] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 936.291851][T23758] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.8412: Failed to acquire dquot type 1 [ 936.454849][ T4530] EXT4-fs (loop3): unmounting filesystem. [ 936.481785][T23750] loop2: detected capacity change from 0 to 40427 [ 936.482657][T23775] device ipip0 entered promiscuous mode [ 936.513914][T23750] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 936.521431][T23750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 936.530497][ T46] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 936.546579][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6824: comm kworker/u4:3: Failed to release dquot type 1 [ 936.625694][T23750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 936.662851][T23783] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (31) [ 936.803109][T23750] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 936.815686][T23750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 936.842028][T23790] loop3: detected capacity change from 0 to 512 [ 936.856643][T23790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 936.936464][T23790] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.8424: bg 0: block 248: padding at end of block bitmap is not set [ 936.971869][ T5636] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 936.983997][T23790] Quota error (device loop3): write_blk: dquota write failed [ 937.014906][T23790] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 937.025335][T23790] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.8424: Failed to acquire dquot type 1 [ 937.047329][T23790] EXT4-fs (loop3): 1 truncate cleaned up [ 937.053675][T23790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 937.135128][T23790] EXT4-fs: Cannot change quota options when quota turned on [ 937.206539][ T4530] EXT4-fs (loop3): unmounting filesystem. [ 937.228067][ T5636] usb 5-1: Using ep0 maxpacket: 8 [ 937.356494][ T5636] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 937.364640][ T5636] usb 5-1: config 0 has no interface number 1 [ 937.399192][ T5636] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 937.427129][ T5636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 937.494306][ T5636] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 937.626068][T23778] loop0: detected capacity change from 0 to 32768 [ 937.650085][T23778] XFS: noikeep mount option is deprecated. [ 937.672424][T23778] XFS: attr2 mount option is deprecated. [ 937.688015][ T5636] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 937.702027][ T5636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.716358][ T5636] usb 5-1: Product: syz [ 937.752061][ T5636] usb 5-1: Manufacturer: syz [ 937.756719][ T5636] usb 5-1: SerialNumber: syz [ 937.774479][ T5636] usb 5-1: config 0 descriptor?? [ 937.818423][ T5636] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 937.825916][T23778] XFS (loop0): Mounting V5 Filesystem [ 938.049816][ T5636] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 938.099827][T23778] XFS (loop0): Ending clean mount [ 938.113930][ T5636] usb 5-1: USB disconnect, device number 94 [ 938.124247][ T5636] pvrusb2: Device being rendered inoperable [ 938.164745][ T5636] pvrusb2: Device being rendered inoperable [ 938.192435][T23778] XFS (loop0): Quotacheck needed: Please wait. [ 938.271944][T23778] XFS (loop0): Quotacheck: Done. [ 938.350746][T15495] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 938.439936][ T4518] XFS (loop0): Unmounting Filesystem [ 938.476986][T23824] loop2: detected capacity change from 0 to 32768 [ 938.507104][T23824] JBD2: Ignoring recovery information on journal [ 938.539952][T23824] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 938.635936][T23839] 9pnet: Found fid 0 not clunked [ 938.701427][ T4522] ocfs2: Unmounting device (7,2) on (node local) [ 938.852600][T23845] netlink: 121244 bytes leftover after parsing attributes in process `syz.3.8446'. [ 938.917690][T15495] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 938.948412][T15495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.971108][T15495] usb 2-1: Product: syz [ 938.975324][T15495] usb 2-1: Manufacturer: syz [ 938.979941][T15495] usb 2-1: SerialNumber: syz [ 939.023692][T23853] loop2: detected capacity change from 0 to 512 [ 939.046510][T15495] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 939.105551][T23853] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 939.121251][T23853] System zones: 0-2, 18-18, 34-34 [ 939.148548][T23853] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8449: bg 0: block 248: padding at end of block bitmap is not set [ 939.198399][T23853] Quota error (device loop2): write_blk: dquota write failed [ 939.224648][T23853] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 939.253820][T23853] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.8449: Failed to acquire dquot type 1 [ 939.318469][T23853] EXT4-fs (loop2): 1 truncate cleaned up [ 939.342960][T23853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 939.380584][T23853] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.8449: Failed to acquire dquot type 1 [ 939.403673][T23862] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 939.422985][ T4522] EXT4-fs (loop2): unmounting filesystem. [ 939.441447][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6824: comm kworker/u4:2: Failed to release dquot type 1 [ 939.453430][T23862] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 939.523898][T23864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8455'. [ 939.560648][T23848] loop4: detected capacity change from 0 to 40427 [ 939.596392][T23848] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 939.631629][T23848] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 939.676596][T23848] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 939.688196][T23848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 939.699556][T15495] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 939.780351][T23848] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 939.791646][T23848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 939.943518][ T4502] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 940.198447][ T4240] usb 2-1: USB disconnect, device number 96 [ 940.204636][ T4502] usb 3-1: Using ep0 maxpacket: 8 [ 940.339421][ T4502] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 940.349883][ T4502] usb 3-1: config 0 has no interface number 1 [ 940.356029][ T4502] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 940.392546][ T4502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 940.419507][ T4502] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 940.441269][T23888] 9pnet: Found fid 0 not clunked [ 940.528705][T23894] openvswitch: netlink: EtherType 0 is less than min 600 [ 940.639058][ T4502] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 940.648197][ T4502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.656293][ T4502] usb 3-1: Product: syz [ 940.660529][ T4502] usb 3-1: Manufacturer: syz [ 940.665144][ T4502] usb 3-1: SerialNumber: syz [ 940.672113][ T4502] usb 3-1: config 0 descriptor?? [ 940.714900][ T4502] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 940.862983][T15495] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 940.870029][T15495] ath9k_htc: Failed to initialize the device [ 940.906272][ T4240] usb 2-1: ath9k_htc: USB layer deinitialized [ 940.968837][ T4502] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 941.004093][ T4502] usb 3-1: USB disconnect, device number 91 [ 941.024266][ T4502] pvrusb2: Device being rendered inoperable [ 941.031842][ T4502] pvrusb2: Device being rendered inoperable [ 941.136292][T23908] misc userio: Invalid payload size [ 941.555730][T23921] loop4: detected capacity change from 0 to 512 [ 941.649899][T23921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 941.672733][T23921] System zones: 0-2, 18-18, 34-34 [ 941.719651][T23921] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.8479: bg 0: block 248: padding at end of block bitmap is not set [ 941.746274][T23900] loop1: detected capacity change from 0 to 40427 [ 941.806457][T23900] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 941.830709][T23921] __quota_error: 3 callbacks suppressed [ 941.830727][T23921] Quota error (device loop4): write_blk: dquota write failed [ 941.851339][T23900] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 941.863660][T23921] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 941.890673][T23900] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 941.894445][T23921] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.8479: Failed to acquire dquot type 1 [ 941.947858][T23900] F2FS-fs (loop1): Found nat_bits in checkpoint [ 941.955980][T23921] EXT4-fs (loop4): 1 truncate cleaned up [ 941.970252][T23921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 941.995209][T23935] loop2: detected capacity change from 0 to 736 [ 942.021802][T23921] Quota error (device loop4): write_blk: dquota write failed [ 942.029750][T23921] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 942.042876][T23921] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.8479: Failed to acquire dquot type 1 [ 942.043269][T23928] loop0: detected capacity change from 0 to 32768 [ 942.121126][T23900] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 942.131796][T23900] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 942.137609][T23928] JBD2: Ignoring recovery information on journal [ 942.149390][ T4524] EXT4-fs (loop4): unmounting filesystem. [ 942.185830][ T34] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 942.211288][ T34] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:2: Failed to release dquot type 1 [ 942.251749][T23928] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 942.273602][T23940] netlink: 'syz.2.8487': attribute type 1 has an invalid length. [ 942.354390][T23942] sctp: [Deprecated]: syz.4.8486 (pid 23942) Use of int in maxseg socket option. [ 942.354390][T23942] Use struct sctp_assoc_value instead [ 942.453477][ T4518] ocfs2: Unmounting device (7,0) on (node local) [ 943.013844][T23954] loop2: detected capacity change from 0 to 4096 [ 943.042095][T23960] loop0: detected capacity change from 0 to 512 [ 943.067395][T23954] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 943.073462][T23964] misc userio: Invalid payload size [ 943.107281][T23954] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 943.135515][T23954] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 943.182896][T23954] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 943.190824][T23960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 943.203123][T23954] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 943.222371][T23954] ntfs: volume version 3.1. [ 943.241373][T23960] System zones: 0-2, 18-18, 34-34 [ 943.302957][T23960] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8497: bg 0: block 248: padding at end of block bitmap is not set [ 943.382907][T23972] loop1: detected capacity change from 0 to 8 [ 943.441830][T23972] SQUASHFS error: lzo decompression failed, data probably corrupt [ 943.445380][T23960] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.8497: Failed to acquire dquot type 1 [ 943.464892][T23960] EXT4-fs (loop0): 1 truncate cleaned up [ 943.471009][T23960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 943.480393][T23972] SQUASHFS error: Failed to read block 0x1c0: -5 [ 943.480414][T23972] SQUASHFS error: Unable to read metadata cache entry [1be] [ 943.516660][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 943.523011][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.562461][T23960] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.8497: Failed to acquire dquot type 1 [ 943.669699][ T4518] EXT4-fs (loop0): unmounting filesystem. [ 943.676156][ T6718] EXT4-fs error (device loop0): ext4_release_dquot:6824: comm kworker/u4:7: Failed to release dquot type 1 [ 943.768432][T23978] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 943.819521][T23978] overlayfs: overlapping lowerdir path [ 944.197885][T23970] loop4: detected capacity change from 0 to 40427 [ 944.209350][T23996] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 944.226519][T23970] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 944.240279][T23970] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 944.270848][T23996] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 944.290226][T24000] libceph: resolve '40.' (ret=-3): failed [ 944.319282][T23970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 944.472982][T23970] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 944.519132][T23970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 944.819207][T24020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8523'. [ 944.837412][T24020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8523'. [ 945.092782][T24026] libceph: resolve '40.' (ret=-3): failed [ 945.454492][T23998] loop1: detected capacity change from 0 to 32768 [ 945.504312][T23998] XFS: noikeep mount option is deprecated. [ 945.510206][T23998] XFS: attr2 mount option is deprecated. [ 945.649461][T24043] loop3: detected capacity change from 0 to 4096 [ 945.662236][T23998] XFS (loop1): Mounting V5 Filesystem [ 945.667483][T24043] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 945.888674][T23998] XFS (loop1): Ending clean mount [ 945.905435][T23998] XFS (loop1): Quotacheck needed: Please wait. [ 945.964157][T23998] XFS (loop1): Quotacheck: Done. [ 946.041128][T24072] xt_HMARK: spi-set and port-set can't be combined [ 946.203442][ T4523] XFS (loop1): Unmounting Filesystem [ 946.321672][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8550'. [ 946.346433][T24081] loop2: detected capacity change from 0 to 1024 [ 946.395140][T24081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 946.437827][T24081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 946.473452][T24081] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.8560: corrupted in-inode xattr [ 946.538459][ T4522] EXT4-fs (loop2): unmounting filesystem. [ 946.826249][T24082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8549'. [ 946.991088][T24100] loop1: detected capacity change from 0 to 512 [ 947.080116][T24100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 947.097585][T24100] System zones: 0-2, 18-18, 34-34 [ 947.119539][T24100] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8553: bg 0: block 248: padding at end of block bitmap is not set [ 947.146818][T24098] loop0: detected capacity change from 0 to 4096 [ 947.219119][T24100] __quota_error: 17 callbacks suppressed [ 947.219137][T24100] Quota error (device loop1): write_blk: dquota write failed [ 947.257828][T24100] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 947.296043][T24100] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.8553: Failed to acquire dquot type 1 [ 947.318606][T24100] EXT4-fs (loop1): 1 truncate cleaned up [ 947.338479][T24100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 947.372300][T24098] Cannot load nls cp8 [ 947.394147][T24100] Quota error (device loop1): write_blk: dquota write failed [ 947.413341][T24100] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 947.466922][T24100] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.8553: Failed to acquire dquot type 1 [ 947.590301][ T4523] EXT4-fs (loop1): unmounting filesystem. [ 947.627300][ T6718] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 947.653938][ T6718] EXT4-fs error (device loop1): ext4_release_dquot:6824: comm kworker/u4:7: Failed to release dquot type 1 [ 947.668875][T24098] 9pnet: Could not find request transport: xen [ 947.806969][T24115] netlink: 'syz.2.8557': attribute type 6 has an invalid length. [ 947.976038][T24127] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 947.997063][T24127] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 948.138356][T24132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8562'. [ 949.096608][T24124] loop3: detected capacity change from 0 to 32768 [ 949.159897][T24124] XFS: noikeep mount option is deprecated. [ 949.165768][T24124] XFS: attr2 mount option is deprecated. [ 949.373405][T24184] loop1: detected capacity change from 0 to 4096 [ 949.390658][T24184] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 949.408985][T24124] XFS (loop3): Mounting V5 Filesystem [ 949.546760][ T26] audit: type=1400 audit(936.947:120): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=E1355F172F2F26 pid=24196 comm="syz.2.8587" [ 949.596563][T24124] XFS (loop3): Ending clean mount [ 949.609380][T24124] XFS (loop3): Quotacheck needed: Please wait. [ 949.792870][T24124] XFS (loop3): Quotacheck: Done. [ 949.963482][T24209] netlink: 'syz.2.8594': attribute type 1 has an invalid length. [ 950.062369][ T4530] XFS (loop3): Unmounting Filesystem [ 950.187570][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8597'. [ 950.650002][T24227] loop2: detected capacity change from 0 to 4096 [ 950.694691][T24227] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 950.707438][T24197] loop4: detected capacity change from 0 to 32768 [ 950.736556][T24197] XFS: noikeep mount option is deprecated. [ 950.808219][T24240] loop1: detected capacity change from 0 to 256 [ 950.833741][T24197] XFS (loop4): Mounting V5 Filesystem [ 950.865838][T24249] ip6t_srh: unknown srh match flags FDC7 [ 950.963695][T24197] XFS (loop4): Ending clean mount [ 950.971050][T24197] XFS (loop4): Quotacheck needed: Please wait. [ 951.073074][T24197] XFS (loop4): Quotacheck: Done. [ 951.256680][ T4524] XFS (loop4): Unmounting Filesystem [ 951.826861][T24273] loop1: detected capacity change from 0 to 2048 [ 951.853465][T24273] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 951.923147][T24273] syz.1.8615: attempt to access beyond end of device [ 951.923147][T24273] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 951.937453][T24275] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 952.047829][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8596'. [ 952.072804][T24282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8611'. [ 952.481005][ T26] audit: type=1326 audit(939.679:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.0.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 952.497946][T24260] loop2: detected capacity change from 0 to 32768 [ 952.525567][T24292] loop4: detected capacity change from 0 to 4096 [ 952.543769][T24260] XFS: noikeep mount option is deprecated. [ 952.560148][T24292] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 952.585783][T24260] XFS: attr2 mount option is deprecated. [ 952.606340][ T26] audit: type=1326 audit(939.716:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.0.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 952.708288][T24260] XFS (loop2): Mounting V5 Filesystem [ 952.714654][ T26] audit: type=1326 audit(939.716:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.0.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 952.852708][T24260] XFS (loop2): Ending clean mount [ 952.874912][ T26] audit: type=1326 audit(939.716:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24296 comm="syz.0.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 952.912746][T24260] XFS (loop2): Quotacheck needed: Please wait. [ 953.045481][T24260] XFS (loop2): Quotacheck: Done. [ 953.282049][ T4522] XFS (loop2): Unmounting Filesystem [ 953.705159][T24351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8642'. [ 954.487535][T24349] loop4: detected capacity change from 0 to 32768 [ 954.558107][T24349] JBD2: Ignoring recovery information on journal [ 954.639530][T24349] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 954.793881][ T26] audit: type=1326 audit(941.849:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.8647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523537e719 code=0x7ffc0000 [ 954.825420][ T4524] ocfs2: Unmounting device (7,4) on (node local) [ 954.909560][ T26] audit: type=1326 audit(941.849:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.8647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f523537e719 code=0x7ffc0000 [ 955.041801][ T26] audit: type=1326 audit(941.849:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.8647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523537e719 code=0x7ffc0000 [ 955.151996][ T26] audit: type=1326 audit(941.849:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24385 comm="syz.1.8647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523537e719 code=0x7ffc0000 [ 955.273990][ T5636] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 955.440701][T24412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.615019][T24416] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8660'. [ 955.675944][ T5636] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 955.690853][ T5636] usb 3-1: config 4 has no interface number 0 [ 955.877411][ T5636] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 955.894451][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.913509][ T5636] usb 3-1: Product: syz [ 955.924327][ T5636] usb 3-1: Manufacturer: syz [ 955.935166][ T5636] usb 3-1: SerialNumber: syz [ 956.024666][ T5636] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 956.257562][ T5636] vp7045: USB control message 'out' went wrong. [ 956.263944][ T5636] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 956.300462][ T5636] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 956.315595][ T5636] usb 3-1: USB disconnect, device number 92 [ 956.543862][T24445] loop3: detected capacity change from 0 to 256 [ 956.565386][T24445] exfat: Deprecated parameter 'utf8' [ 956.597342][T24445] exfat: Deprecated parameter 'utf8' [ 956.615225][T24405] loop4: detected capacity change from 0 to 32768 [ 956.628793][T24445] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 956.666157][T24405] XFS: noikeep mount option is deprecated. [ 956.672043][T24405] XFS: attr2 mount option is deprecated. [ 956.853196][T24405] XFS (loop4): Mounting V5 Filesystem [ 956.923816][T24467] netlink: 'syz.1.8681': attribute type 1 has an invalid length. [ 957.017247][T24405] XFS (loop4): Ending clean mount [ 957.036781][T24471] netlink: 'syz.1.8683': attribute type 12 has an invalid length. [ 957.075531][T24405] XFS (loop4): Quotacheck needed: Please wait. [ 957.090107][T24471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8683'. [ 957.187927][T24405] XFS (loop4): Quotacheck: Done. [ 957.370686][ T4524] XFS (loop4): Unmounting Filesystem [ 957.411105][T24486] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 957.412020][T24484] program syz.1.8689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 957.671686][T24494] loop1: detected capacity change from 0 to 256 [ 957.678700][T24494] exfat: Deprecated parameter 'utf8' [ 957.741513][T24494] exfat: Deprecated parameter 'utf8' [ 957.793100][T24494] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 958.129693][T24509] loop4: detected capacity change from 0 to 164 [ 958.166200][T24509] Unsupported NM flag settings (8) [ 958.247280][T24514] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 958.448932][ T4500] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 958.671062][T24498] loop2: detected capacity change from 0 to 32768 [ 958.711874][T24528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.727477][ T4500] usb 1-1: Using ep0 maxpacket: 16 [ 958.741012][T24498] JBD2: Ignoring recovery information on journal [ 958.835072][T24498] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 958.865956][ T4500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.887196][ T4500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.915975][ T4500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.961543][ T4500] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 959.001560][ T4500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.028102][ T4500] usb 1-1: config 0 descriptor?? [ 959.046428][ T4522] ocfs2: Unmounting device (7,2) on (node local) [ 959.082885][ T4500] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input95 [ 959.132273][ T3606] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 959.234110][ T3606] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 959.268328][ T7840] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 959.316952][T24520] loop1: detected capacity change from 0 to 32768 [ 959.337958][ T3606] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 959.355565][T24510] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 959.380696][ T3606] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 959.394901][ T5636] usb 1-1: USB disconnect, device number 81 [ 959.400238][T24520] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 959.400238][T24520] [ 959.459735][T24520] ERROR: (device loop1): remounting filesystem as read-only [ 959.481350][T24520] ERROR: (device loop1): jfs_rename: [ 959.481350][T24520] [ 959.598980][ T4523] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 959.598980][ T4523] [ 959.899590][T24561] loop4: detected capacity change from 0 to 1024 [ 960.049588][T24563] loop3: detected capacity change from 0 to 1764 [ 960.122556][T24563] cgroup: none used incorrectly [ 960.489848][T24584] loop0: detected capacity change from 0 to 256 [ 960.514935][T24584] FAT-fs (loop0): Directory bread(block 64) failed [ 960.521528][T24584] FAT-fs (loop0): Directory bread(block 65) failed [ 960.548896][T24584] FAT-fs (loop0): Directory bread(block 66) failed [ 960.570103][T24584] FAT-fs (loop0): Directory bread(block 67) failed [ 960.591596][T24584] FAT-fs (loop0): Directory bread(block 68) failed [ 960.621576][T24584] FAT-fs (loop0): Directory bread(block 69) failed [ 960.637249][T24584] FAT-fs (loop0): Directory bread(block 70) failed [ 960.677951][T24584] FAT-fs (loop0): Directory bread(block 71) failed [ 960.702249][T24584] FAT-fs (loop0): Directory bread(block 72) failed [ 960.720303][T24584] FAT-fs (loop0): Directory bread(block 73) failed [ 961.002432][T24600] loop2: detected capacity change from 0 to 164 [ 961.067040][T24600] Unsupported NM flag settings (8) [ 961.171264][T24605] loop0: detected capacity change from 0 to 2048 [ 961.280060][T24611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8750'. [ 961.283495][T24610] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 961.318184][T24605] CPU: 0 PID: 24605 Comm: syz.0.8747 Not tainted 6.1.114-syzkaller #0 [ 961.326910][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 961.337011][T24605] Call Trace: [ 961.340327][T24605] [ 961.343297][T24605] dump_stack_lvl+0x1e3/0x2cb [ 961.348020][T24605] ? nf_tcp_handle_invalid+0x642/0x642 [ 961.353541][T24605] nilfs_btree_do_lookup+0xb61/0xcd0 [ 961.358900][T24605] ? nilfs_btree_gather_data+0x690/0x690 [ 961.364578][T24605] ? rcu_is_watching+0x11/0xb0 [ 961.369375][T24605] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 961.375231][T24605] nilfs_btree_lookup_contig+0x2b1/0xfc0 [ 961.380931][T24605] ? down_read+0x825/0xa30 [ 961.385401][T24605] ? nilfs_btree_lookup+0x1d0/0x1d0 [ 961.390644][T24605] ? __down_common+0x8b0/0x8b0 [ 961.395457][T24605] ? lockdep_softirqs_off+0x420/0x420 [ 961.400886][T24605] nilfs_bmap_lookup_contig+0x87/0x160 [ 961.406394][T24605] nilfs_get_block+0x241/0x8e0 [ 961.411228][T24605] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 961.416663][T24605] ? attach_page_private+0x110/0x300 [ 961.421998][T24605] ? do_raw_spin_unlock+0x137/0x8a0 [ 961.427244][T24605] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 961.432673][T24605] block_truncate_page+0x3b5/0x6f0 [ 961.437832][T24605] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 961.443253][T24605] nilfs_truncate+0x27c/0x500 [ 961.448000][T24605] ? nilfs_write_failed+0x90/0x90 [ 961.453080][T24605] ? truncate_setsize+0xcb/0xf0 [ 961.457983][T24605] nilfs_setattr+0x216/0x2c0 [ 961.462619][T24605] ? nilfs_clear_inode+0x2b0/0x2b0 [ 961.467796][T24605] ? is_bad_inode+0x9/0x40 [ 961.472268][T24605] ? rwsem_write_trylock+0x166/0x210 [ 961.477599][T24605] ? bpf_lsm_inode_setattr+0x5/0x10 [ 961.482861][T24605] ? nilfs_clear_inode+0x2b0/0x2b0 [ 961.488036][T24605] notify_change+0xce3/0xfc0 [ 961.492676][T24605] do_truncate+0x21c/0x300 [ 961.492812][T24573] loop4: detected capacity change from 0 to 32768 [ 961.497120][T24605] ? put_page_bootmem+0x2e0/0x2e0 [ 961.497233][T24605] ? bpf_lsm_path_truncate+0x5/0x10 [ 961.497264][T24605] vfs_truncate+0x2dd/0x3a0 [ 961.497304][T24605] do_sys_truncate+0xda/0x190 [ 961.523180][T24605] ? break_lease+0xd0/0xd0 [ 961.527656][T24605] ? syscall_enter_from_user_mode+0x2e/0x230 [ 961.533689][T24605] ? lockdep_hardirqs_on+0x94/0x130 [ 961.538936][T24605] ? syscall_enter_from_user_mode+0x2e/0x230 [ 961.544985][T24605] do_syscall_64+0x3b/0xb0 [ 961.549448][T24605] ? clear_bhb_loop+0x45/0xa0 [ 961.554168][T24605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 961.560111][T24605] RIP: 0033:0x7f011697e719 [ 961.564556][T24605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.584197][T24605] RSP: 002b:00007f011783b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 961.592668][T24605] RAX: ffffffffffffffda RBX: 00007f0116b35f80 RCX: 00007f011697e719 [ 961.600685][T24605] RDX: 0000000000000000 RSI: 0000000000000592 RDI: 0000000020001380 [ 961.608700][T24605] RBP: 00007f01169f12be R08: 0000000000000000 R09: 0000000000000000 [ 961.616719][T24605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.624737][T24605] R13: 0000000000000000 R14: 00007f0116b35f80 R15: 00007ffef03d2db8 [ 961.632776][T24605] [ 961.652582][T24605] NILFS (loop0): btree level mismatch (ino=16): 1 != 7 [ 961.659737][T24605] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 961.714145][T24605] Remounting filesystem read-only [ 961.718291][T24573] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 961.718291][T24573] [ 961.738268][T24605] CPU: 0 PID: 24605 Comm: syz.0.8747 Not tainted 6.1.114-syzkaller #0 [ 961.746578][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 961.756676][T24605] Call Trace: [ 961.759979][T24605] [ 961.762932][T24605] dump_stack_lvl+0x1e3/0x2cb [ 961.767653][T24605] ? nf_tcp_handle_invalid+0x642/0x642 [ 961.773237][T24605] ? slab_post_alloc_hook+0x71/0x3a0 [ 961.778574][T24605] ? rcu_is_watching+0x11/0xb0 [ 961.783378][T24605] ? kmem_cache_alloc+0x13a/0x2d0 [ 961.788443][T24605] ? nilfs_btree_last_key+0x52/0x720 [ 961.793780][T24605] nilfs_btree_last_key+0x5a4/0x720 [ 961.799039][T24605] nilfs_bmap_last_key+0x6d/0x120 [ 961.804108][T24605] nilfs_truncate_bmap+0x125/0x3c0 [ 961.809443][T24605] ? do_raw_spin_unlock+0x137/0x8a0 [ 961.814695][T24605] ? nilfs_update_inode+0x1e0/0x1e0 [ 961.819947][T24605] ? block_truncate_page+0x5e1/0x6f0 [ 961.825274][T24605] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 961.830703][T24605] nilfs_truncate+0x28b/0x500 [ 961.837941][T24605] ? nilfs_write_failed+0x90/0x90 [ 961.838036][T24605] ? truncate_setsize+0xcb/0xf0 [ 961.838066][T24605] nilfs_setattr+0x216/0x2c0 [ 961.838100][T24605] ? nilfs_clear_inode+0x2b0/0x2b0 [ 961.838134][T24605] ? is_bad_inode+0x9/0x40 [ 961.838158][T24605] ? rwsem_write_trylock+0x166/0x210 [ 961.838188][T24605] ? bpf_lsm_inode_setattr+0x5/0x10 [ 961.845833][T24573] ERROR: (device loop4): remounting filesystem as read-only [ 961.848069][T24605] ? nilfs_clear_inode+0x2b0/0x2b0 [ 961.848110][T24605] notify_change+0xce3/0xfc0 [ 961.855615][T24573] ERROR: (device loop4): jfs_rename: [ 961.855615][T24573] [ 961.857812][T24605] do_truncate+0x21c/0x300 [ 961.901795][T24605] ? put_page_bootmem+0x2e0/0x2e0 [ 961.906917][T24605] ? bpf_lsm_path_truncate+0x5/0x10 [ 961.906953][T24605] vfs_truncate+0x2dd/0x3a0 [ 961.906992][T24605] do_sys_truncate+0xda/0x190 [ 961.907024][T24605] ? break_lease+0xd0/0xd0 [ 961.907056][T24605] ? syscall_enter_from_user_mode+0x2e/0x230 [ 961.907086][T24605] ? lockdep_hardirqs_on+0x94/0x130 [ 961.907116][T24605] ? syscall_enter_from_user_mode+0x2e/0x230 [ 961.907149][T24605] do_syscall_64+0x3b/0xb0 [ 961.907169][T24605] ? clear_bhb_loop+0x45/0xa0 [ 961.907192][T24605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 961.907223][T24605] RIP: 0033:0x7f011697e719 [ 961.907245][T24605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.907265][T24605] RSP: 002b:00007f011783b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 961.907293][T24605] RAX: ffffffffffffffda RBX: 00007f0116b35f80 RCX: 00007f011697e719 [ 961.907310][T24605] RDX: 0000000000000000 RSI: 0000000000000592 RDI: 0000000020001380 [ 961.907323][T24605] RBP: 00007f01169f12be R08: 0000000000000000 R09: 0000000000000000 [ 961.907339][T24605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.907352][T24605] R13: 0000000000000000 R14: 00007f0116b35f80 R15: 00007ffef03d2db8 [ 961.907386][T24605] [ 961.915946][ T4524] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 961.915946][ T4524] [ 962.046896][T24605] NILFS (loop0): btree level mismatch (ino=16): 1 != 7 [ 962.046945][T24605] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 962.047028][T24605] NILFS (loop0): error -5 truncating bmap (ino=16) [ 962.306237][ T4518] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 962.306397][ T4518] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 962.306418][ T4518] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 962.306438][ T4518] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 962.306456][ T4518] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 962.306697][ T4518] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 962.369863][T24637] loop4: detected capacity change from 0 to 1024 [ 962.394026][ T5636] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 962.670682][T24647] loop1: detected capacity change from 0 to 256 [ 962.773466][ T5636] usb 3-1: Using ep0 maxpacket: 8 [ 963.080121][ T5636] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 963.126849][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.146119][ T5636] usb 3-1: Product: syz [ 963.150342][ T5636] usb 3-1: Manufacturer: syz [ 963.163445][ T5636] usb 3-1: SerialNumber: syz [ 963.178718][ T5636] usb 3-1: config 0 descriptor?? [ 963.230341][ T5636] gspca_main: sq930x-2.14.0 probing 2770:930c [ 963.520483][T24686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8786'. [ 963.708840][ T5636] gspca_sq930x: ucbus_write failed -71 [ 963.714417][ T5636] sq930x: probe of 3-1:0.0 failed with error -71 [ 963.745655][ T5636] usb 3-1: USB disconnect, device number 93 [ 964.092444][T24711] overlayfs: failed to resolve './file0': -2 [ 964.194852][T24714] loop1: detected capacity change from 0 to 1024 [ 964.248750][T24714] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 964.263137][T24714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 964.267443][T24722] loop0: detected capacity change from 0 to 64 [ 964.276445][T24714] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=2 [ 964.295176][T24714] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 964.310692][T24714] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 964.336945][T24714] EXT4-fs (loop1): 1 truncate cleaned up [ 964.363930][T24714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 964.400657][T24725] loop2: detected capacity change from 0 to 2048 [ 964.458073][T24727] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.472608][T24725] CPU: 0 PID: 24725 Comm: syz.2.8803 Not tainted 6.1.114-syzkaller #0 [ 964.480833][T24725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.490907][T24725] Call Trace: [ 964.494198][T24725] [ 964.497151][T24725] dump_stack_lvl+0x1e3/0x2cb [ 964.501850][T24725] ? nf_tcp_handle_invalid+0x642/0x642 [ 964.507346][T24725] nilfs_btree_do_lookup+0xb61/0xcd0 [ 964.512669][T24725] ? nilfs_btree_gather_data+0x690/0x690 [ 964.518322][T24725] ? rcu_is_watching+0x11/0xb0 [ 964.523112][T24725] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 964.528955][T24725] nilfs_btree_lookup_contig+0x2b1/0xfc0 [ 964.534637][T24725] ? down_read+0x825/0xa30 [ 964.539083][T24725] ? nilfs_btree_lookup+0x1d0/0x1d0 [ 964.544308][T24725] ? __down_common+0x8b0/0x8b0 [ 964.549104][T24725] ? lockdep_softirqs_off+0x420/0x420 [ 964.554502][T24725] nilfs_bmap_lookup_contig+0x87/0x160 [ 964.559982][T24725] nilfs_get_block+0x241/0x8e0 [ 964.564775][T24725] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 964.570170][T24725] ? attach_page_private+0x110/0x300 [ 964.575478][T24725] ? do_raw_spin_unlock+0x137/0x8a0 [ 964.580693][T24725] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 964.586083][T24725] block_truncate_page+0x3b5/0x6f0 [ 964.591214][T24725] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 964.596611][T24725] nilfs_truncate+0x27c/0x500 [ 964.601315][T24725] ? nilfs_write_failed+0x90/0x90 [ 964.606373][T24725] ? truncate_setsize+0xcb/0xf0 [ 964.611243][T24725] nilfs_setattr+0x216/0x2c0 [ 964.615858][T24725] ? nilfs_clear_inode+0x2b0/0x2b0 [ 964.620993][T24725] ? is_bad_inode+0x9/0x40 [ 964.625422][T24725] ? rwsem_write_trylock+0x166/0x210 [ 964.630727][T24725] ? bpf_lsm_inode_setattr+0x5/0x10 [ 964.635939][T24725] ? nilfs_clear_inode+0x2b0/0x2b0 [ 964.641074][T24725] notify_change+0xce3/0xfc0 [ 964.645692][T24725] do_truncate+0x21c/0x300 [ 964.650138][T24725] ? put_page_bootmem+0x2e0/0x2e0 [ 964.655211][T24725] ? bpf_lsm_path_truncate+0x5/0x10 [ 964.660428][T24725] vfs_truncate+0x2dd/0x3a0 [ 964.664955][T24725] do_sys_truncate+0xda/0x190 [ 964.669649][T24725] ? break_lease+0xd0/0xd0 [ 964.674085][T24725] ? syscall_enter_from_user_mode+0x2e/0x230 [ 964.680084][T24725] ? lockdep_hardirqs_on+0x94/0x130 [ 964.685354][T24725] ? syscall_enter_from_user_mode+0x2e/0x230 [ 964.691359][T24725] do_syscall_64+0x3b/0xb0 [ 964.695795][T24725] ? clear_bhb_loop+0x45/0xa0 [ 964.700484][T24725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 964.706395][T24725] RIP: 0033:0x7f197df7e719 [ 964.710822][T24725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.730447][T24725] RSP: 002b:00007f197ddff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 964.738878][T24725] RAX: ffffffffffffffda RBX: 00007f197e135f80 RCX: 00007f197df7e719 [ 964.746865][T24725] RDX: 0000000000000000 RSI: 0000000000000592 RDI: 0000000020001380 [ 964.754846][T24725] RBP: 00007f197dff12be R08: 0000000000000000 R09: 0000000000000000 [ 964.762829][T24725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.770810][T24725] R13: 0000000000000000 R14: 00007f197e135f80 R15: 00007ffc2f639738 [ 964.778809][T24725] [ 964.785789][T24725] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 964.792835][T24725] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 964.804411][T24725] Remounting filesystem read-only [ 964.809591][T24725] CPU: 1 PID: 24725 Comm: syz.2.8803 Not tainted 6.1.114-syzkaller #0 [ 964.817788][T24725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.827884][T24725] Call Trace: [ 964.831194][T24725] [ 964.834155][T24725] dump_stack_lvl+0x1e3/0x2cb [ 964.838879][T24725] ? nf_tcp_handle_invalid+0x642/0x642 [ 964.844382][T24725] ? slab_post_alloc_hook+0x71/0x3a0 [ 964.849725][T24725] ? rcu_is_watching+0x11/0xb0 [ 964.854532][T24725] ? kmem_cache_alloc+0x13a/0x2d0 [ 964.859599][T24725] ? nilfs_btree_last_key+0x52/0x720 [ 964.864929][T24725] nilfs_btree_last_key+0x5a4/0x720 [ 964.870185][T24725] nilfs_bmap_last_key+0x6d/0x120 [ 964.875257][T24725] nilfs_truncate_bmap+0x125/0x3c0 [ 964.880419][T24725] ? do_raw_spin_unlock+0x137/0x8a0 [ 964.885685][T24725] ? nilfs_update_inode+0x1e0/0x1e0 [ 964.890935][T24725] ? block_truncate_page+0x5e1/0x6f0 [ 964.896275][T24725] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 964.901702][T24725] nilfs_truncate+0x28b/0x500 [ 964.906447][T24725] ? nilfs_write_failed+0x90/0x90 [ 964.911531][T24725] ? truncate_setsize+0xcb/0xf0 [ 964.916436][T24725] nilfs_setattr+0x216/0x2c0 [ 964.921070][T24725] ? nilfs_clear_inode+0x2b0/0x2b0 [ 964.926222][T24725] ? is_bad_inode+0x9/0x40 [ 964.930668][T24725] ? rwsem_write_trylock+0x166/0x210 [ 964.935974][T24725] ? bpf_lsm_inode_setattr+0x5/0x10 [ 964.941190][T24725] ? nilfs_clear_inode+0x2b0/0x2b0 [ 964.946324][T24725] notify_change+0xce3/0xfc0 [ 964.950937][T24725] do_truncate+0x21c/0x300 [ 964.955374][T24725] ? put_page_bootmem+0x2e0/0x2e0 [ 964.960424][T24725] ? bpf_lsm_path_truncate+0x5/0x10 [ 964.965632][T24725] vfs_truncate+0x2dd/0x3a0 [ 964.970183][T24725] do_sys_truncate+0xda/0x190 [ 964.974877][T24725] ? break_lease+0xd0/0xd0 [ 964.979313][T24725] ? syscall_enter_from_user_mode+0x2e/0x230 [ 964.985312][T24725] ? lockdep_hardirqs_on+0x94/0x130 [ 964.990526][T24725] ? syscall_enter_from_user_mode+0x2e/0x230 [ 964.996531][T24725] do_syscall_64+0x3b/0xb0 [ 965.000966][T24725] ? clear_bhb_loop+0x45/0xa0 [ 965.005659][T24725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.011577][T24725] RIP: 0033:0x7f197df7e719 [ 965.016011][T24725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.035634][T24725] RSP: 002b:00007f197ddff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 965.044067][T24725] RAX: ffffffffffffffda RBX: 00007f197e135f80 RCX: 00007f197df7e719 [ 965.052065][T24725] RDX: 0000000000000000 RSI: 0000000000000592 RDI: 0000000020001380 [ 965.060050][T24725] RBP: 00007f197dff12be R08: 0000000000000000 R09: 0000000000000000 [ 965.068036][T24725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.076020][T24725] R13: 0000000000000000 R14: 00007f197e135f80 R15: 00007ffc2f639738 [ 965.084021][T24725] [ 965.102602][ T4523] EXT4-fs (loop1): unmounting filesystem. [ 965.107799][T24725] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 965.122022][T24725] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 965.132795][T24725] NILFS (loop2): error -5 truncating bmap (ino=16) [ 965.291867][ T4522] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 965.298894][ T4522] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 965.312511][ T4522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 965.339182][ T4522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 965.364957][ T4522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 965.375878][ T4522] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 965.408161][T24738] loop0: detected capacity change from 0 to 1024 [ 965.643220][T24746] loop1: detected capacity change from 0 to 512 [ 965.723186][T24751] loop2: detected capacity change from 0 to 1024 [ 965.735481][T24746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 965.765832][T24751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 965.783506][T24746] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz.1.8812: corrupted xattr block 33 [ 965.838776][ T4522] EXT4-fs (loop2): unmounting filesystem. [ 965.879097][ T4500] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 965.922153][ T4523] EXT4-fs (loop1): unmounting filesystem. [ 966.050797][T24763] loop3: detected capacity change from 0 to 2048 [ 966.129435][T24767] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 966.163768][T24763] CPU: 1 PID: 24763 Comm: syz.3.8820 Not tainted 6.1.114-syzkaller #0 [ 966.171999][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 966.182094][T24763] Call Trace: [ 966.185404][T24763] [ 966.188359][T24763] dump_stack_lvl+0x1e3/0x2cb [ 966.193082][T24763] ? nf_tcp_handle_invalid+0x642/0x642 [ 966.198608][T24763] nilfs_btree_do_lookup+0xb61/0xcd0 [ 966.203954][T24763] ? nilfs_btree_gather_data+0x690/0x690 [ 966.209621][T24763] ? rcu_is_watching+0x11/0xb0 [ 966.214415][T24763] ? nilfs_btree_lookup_contig+0x153/0xfc0 [ 966.220260][T24763] nilfs_btree_lookup_contig+0x2b1/0xfc0 [ 966.225945][T24763] ? down_read+0x825/0xa30 [ 966.230412][T24763] ? nilfs_btree_lookup+0x1d0/0x1d0 [ 966.235654][T24763] ? __down_common+0x8b0/0x8b0 [ 966.240462][T24763] ? lockdep_softirqs_off+0x420/0x420 [ 966.245982][T24763] nilfs_bmap_lookup_contig+0x87/0x160 [ 966.251487][T24763] nilfs_get_block+0x241/0x8e0 [ 966.256310][T24763] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 966.261735][T24763] ? attach_page_private+0x110/0x300 [ 966.267070][T24763] ? do_raw_spin_unlock+0x137/0x8a0 [ 966.272316][T24763] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 966.277737][T24763] block_truncate_page+0x3b5/0x6f0 [ 966.282895][T24763] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 966.288322][T24763] nilfs_truncate+0x27c/0x500 [ 966.293051][T24763] ? nilfs_write_failed+0x90/0x90 [ 966.298126][T24763] ? truncate_setsize+0xcb/0xf0 [ 966.303018][T24763] nilfs_setattr+0x216/0x2c0 [ 966.307665][T24763] ? nilfs_clear_inode+0x2b0/0x2b0 [ 966.312831][T24763] ? is_bad_inode+0x9/0x40 [ 966.317290][T24763] ? rwsem_write_trylock+0x166/0x210 [ 966.322617][T24763] ? bpf_lsm_inode_setattr+0x5/0x10 [ 966.327854][T24763] ? nilfs_clear_inode+0x2b0/0x2b0 [ 966.333013][T24763] notify_change+0xce3/0xfc0 [ 966.337653][T24763] do_truncate+0x21c/0x300 [ 966.342121][T24763] ? put_page_bootmem+0x2e0/0x2e0 [ 966.347215][T24763] ? bpf_lsm_path_truncate+0x5/0x10 [ 966.352458][T24763] vfs_truncate+0x2dd/0x3a0 [ 966.357017][T24763] do_sys_truncate+0xda/0x190 [ 966.361734][T24763] ? break_lease+0xd0/0xd0 [ 966.366206][T24763] ? syscall_enter_from_user_mode+0x2e/0x230 [ 966.372227][T24763] ? lockdep_hardirqs_on+0x94/0x130 [ 966.377469][T24763] ? syscall_enter_from_user_mode+0x2e/0x230 [ 966.383510][T24763] do_syscall_64+0x3b/0xb0 [ 966.387958][T24763] ? clear_bhb_loop+0x45/0xa0 [ 966.392677][T24763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.398626][T24763] RIP: 0033:0x7feb8b77e719 [ 966.403080][T24763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.422746][T24763] RSP: 002b:00007feb8b5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 966.431203][T24763] RAX: ffffffffffffffda RBX: 00007feb8b935f80 RCX: 00007feb8b77e719 [ 966.439211][T24763] RDX: 0000000000000000 RSI: 0000000000000592 RDI: 0000000020001380 [ 966.447228][T24763] RBP: 00007feb8b7f12be R08: 0000000000000000 R09: 0000000000000000 [ 966.455230][T24763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.463239][T24763] R13: 0000000000000000 R14: 00007feb8b935f80 R15: 00007fff051aa968 [ 966.471276][T24763] [ 966.670339][ T4500] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 966.687771][T24768] loop2: detected capacity change from 0 to 32768 [ 966.699776][T24763] NILFS (loop3): btree level mismatch (ino=16): 1 != 7 [ 966.717253][ T4500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.723552][T24763] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 966.727209][ T4500] usb 5-1: Product: syz [ 966.744267][ T4500] usb 5-1: Manufacturer: syz [ 966.761172][T24763] Remounting filesystem read-only [ 966.770299][T24780] loop1: detected capacity change from 0 to 1024 [ 966.777384][T24763] CPU: 1 PID: 24763 Comm: syz.3.8820 Not tainted 6.1.114-syzkaller #0 [ 966.784119][ T4500] usb 5-1: SerialNumber: syz [ 966.785562][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 966.796053][T24768] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 966.796053][T24768] [ 966.800199][T24763] Call Trace: [ 966.800211][T24763] [ 966.800221][T24763] dump_stack_lvl+0x1e3/0x2cb [ 966.800252][T24763] ? nf_tcp_handle_invalid+0x642/0x642 [ 966.814590][T24768] ERROR: (device loop2): remounting filesystem as read-only [ 966.817056][T24763] ? slab_post_alloc_hook+0x71/0x3a0 [ 966.822780][T24768] ERROR: (device loop2): jfs_rename: [ 966.822780][T24768] [ 966.827198][T24763] ? rcu_is_watching+0x11/0xb0 [ 966.848375][ T4500] usb 5-1: config 0 descriptor?? [ 966.852055][T24763] ? kmem_cache_alloc+0x13a/0x2d0 [ 966.852090][T24763] ? nilfs_btree_last_key+0x52/0x720 [ 966.852125][T24763] nilfs_btree_last_key+0x5a4/0x720 [ 966.852165][T24763] nilfs_bmap_last_key+0x6d/0x120 [ 966.852195][T24763] nilfs_truncate_bmap+0x125/0x3c0 [ 966.852226][T24763] ? do_raw_spin_unlock+0x137/0x8a0 [ 966.852260][T24763] ? nilfs_update_inode+0x1e0/0x1e0 [ 966.893408][T24763] ? block_truncate_page+0x5e1/0x6f0 [ 966.898751][T24763] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 966.904172][T24763] nilfs_truncate+0x28b/0x500 [ 966.908916][T24763] ? nilfs_write_failed+0x90/0x90 [ 966.914005][T24763] ? truncate_setsize+0xcb/0xf0 [ 966.918903][T24763] nilfs_setattr+0x216/0x2c0 [ 966.920488][T24780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 966.923521][T24763] ? nilfs_clear_inode+0x2b0/0x2b0 [ 966.937515][T24763] ? is_bad_inode+0x9/0x40 [ 966.941972][T24763] ? rwsem_write_trylock+0x166/0x210 [ 966.947309][T24763] ? bpf_lsm_inode_setattr+0x5/0x10 [ 966.950591][ T4500] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 966.952538][T24763] ? nilfs_clear_inode+0x2b0/0x2b0 [ 966.963828][T24763] notify_change+0xce3/0xfc0 [ 966.968464][T24763] do_truncate+0x21c/0x300 [ 966.972929][T24763] ? put_page_bootmem+0x2e0/0x2e0 [ 966.978012][T24763] ? bpf_lsm_path_truncate+0x5/0x10 [ 966.983263][T24763] vfs_truncate+0x2dd/0x3a0 [ 966.987816][T24763] do_sys_truncate+0xda/0x190 [ 966.992542][T24763] ? break_lease+0xd0/0xd0 [ 966.997002][T24763] ? syscall_enter_from_user_mode+0x2e/0x230 [ 967.003027][T24763] ? lockdep_hardirqs_on+0x94/0x130 [ 967.008262][T24763] ? syscall_enter_from_user_mode+0x2e/0x230 [ 967.014255][T24763] do_syscall_64+0x3b/0xb0 [ 967.018686][T24763] ? clear_bhb_loop+0x45/0xa0 [ 967.023389][T24763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.029296][T24763] RIP: 0033:0x7feb8b77e719 [ 967.033723][T24763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.053336][T24763] RSP: 002b:00007feb8b5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 967.061767][T24763] RAX: ffffffffffffffda RBX: 00007feb8b935f80 RCX: 00007feb8b77e719 [ 967.069761][T24763] RDX: 0000000000000000 RSI: 0000000000000592 RDI: 0000000020001380 [ 967.077738][T24763] RBP: 00007feb8b7f12be R08: 0000000000000000 R09: 0000000000000000 [ 967.085712][T24763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.093680][T24763] R13: 0000000000000000 R14: 00007feb8b935f80 R15: 00007fff051aa968 [ 967.101666][T24763] [ 967.108407][ T4522] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 967.108407][ T4522] [ 967.119047][T24763] NILFS (loop3): btree level mismatch (ino=16): 1 != 7 [ 967.125966][T24763] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 967.144190][ T4523] EXT4-fs (loop1): unmounting filesystem. [ 967.145249][T24763] NILFS (loop3): error -5 truncating bmap (ino=16) [ 967.250562][T24784] loop1: detected capacity change from 0 to 22 [ 967.282774][T24784] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 967.291867][ T4530] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 967.298912][ T4530] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 967.310112][T24784] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 967.318306][ T4530] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 967.354211][ T4530] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 967.388690][ T4530] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 967.417845][ T4530] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 967.427286][ T4500] gspca_sunplus: reg_w_riv err -71 [ 967.433004][ T4500] sunplus: probe of 5-1:0.0 failed with error -71 [ 967.482619][ T4500] usb 5-1: USB disconnect, device number 95 [ 967.522672][T24788] tmpfs: Bad value for 'mpol' [ 967.617187][T24792] loop2: detected capacity change from 0 to 1024 [ 967.669553][T24792] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 967.679994][T24792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 967.688631][T24792] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=2 [ 967.699135][T24792] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 967.714243][T24792] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 967.733249][T24792] EXT4-fs (loop2): 1 truncate cleaned up [ 967.749009][T24792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 967.779003][T24799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8834'. [ 967.904141][ T4522] EXT4-fs (loop2): unmounting filesystem. [ 967.934787][T24794] infiniband syz2: set active [ 967.974301][T24794] infiniband syz2: added veth0_vlan [ 968.085835][T24794] RDS/IB: syz2: added [ 968.092867][T24794] smc: adding ib device syz2 with port count 1 [ 968.138667][T24794] smc: ib device syz2 port 1 has pnetid [ 968.318311][T24819] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 968.694654][T24834] ieee802154 phy0 wpan0: encryption failed: -22 [ 969.251421][T24856] loop0: detected capacity change from 0 to 8 [ 969.778782][T24867] loop0: detected capacity change from 0 to 1024 [ 969.886419][T24840] loop4: detected capacity change from 0 to 32768 [ 969.920639][T24867] syz.0.8866: attempt to access beyond end of device [ 969.920639][T24867] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 970.831458][T24894] loop0: detected capacity change from 0 to 4096 [ 970.908467][T24906] trusted_key: encrypted_key: master key parameter '' is invalid [ 970.918400][T24894] ntfs: volume version 3.1. [ 971.260714][T24920] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20001 [ 971.362015][T24926] rdma_rxe: rxe creation allowed on top of a real device only [ 971.384958][T24925] loop4: detected capacity change from 0 to 256 [ 971.903486][T24940] loop1: detected capacity change from 0 to 4096 [ 971.990591][T24940] ntfs: volume version 3.1. [ 972.139177][T24954] netlink: 'syz.0.8911': attribute type 3 has an invalid length. [ 972.181516][T24956] rdma_rxe: rxe creation allowed on top of a real device only [ 972.192522][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8911'. [ 972.225691][T24958] loop3: detected capacity change from 0 to 256 [ 972.473492][T24966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8915'. [ 972.893582][T24983] loop1: detected capacity change from 0 to 1024 [ 973.199724][T24988] loop4: detected capacity change from 0 to 4096 [ 973.252439][T24988] ntfs: volume version 3.1. [ 973.489003][T25009] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8939'. [ 973.552007][T25011] loop4: detected capacity change from 0 to 256 [ 973.647664][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8941'. [ 973.658578][T25011] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcd43d30d, utbl_chksum : 0xe619d30d) [ 973.701146][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8941'. [ 973.752787][T25011] syz.4.8937: attempt to access beyond end of device [ 973.752787][T25011] loop4: rw=524288, sector=34359738496, nr_sectors = 1 limit=256 [ 973.842081][T25011] syz.4.8937: attempt to access beyond end of device [ 973.842081][T25011] loop4: rw=0, sector=34359738496, nr_sectors = 1 limit=256 [ 973.903617][ T26] audit: type=1800 audit(959.724:129): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8937" name="file1" dev="loop4" ino=1048684 res=0 errno=0 [ 974.095938][T25029] loop3: detected capacity change from 0 to 1024 [ 974.188184][T25036] netlink: 'syz.4.8949': attribute type 3 has an invalid length. [ 974.209876][T25029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 974.231399][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8949'. [ 974.339376][ T4530] EXT4-fs (loop3): unmounting filesystem. [ 974.530783][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8955'. [ 974.559749][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8955'. [ 974.617881][T25004] loop1: detected capacity change from 0 to 32768 [ 974.820246][T25004] XFS (loop1): Mounting V5 Filesystem [ 975.026732][T25004] XFS (loop1): Ending clean mount [ 975.180198][ T4523] XFS (loop1): Unmounting Filesystem [ 975.524341][T25097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.763062][ T26] audit: type=1326 audit(961.463:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.0.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 975.839370][ T26] audit: type=1326 audit(961.463:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.0.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 975.907301][ T26] audit: type=1326 audit(961.482:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.0.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 975.997070][ T26] audit: type=1326 audit(961.482:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.0.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 976.045101][ T26] audit: type=1326 audit(961.482:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.0.8981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011697e719 code=0x7ffc0000 [ 976.156293][T25117] loop3: detected capacity change from 0 to 256 [ 976.305453][T25122] rdma_rxe: rxe_register_device failed with error -23 [ 976.348211][T25122] rdma_rxe: failed to add veth0_vlan [ 976.357418][ T2307] pvrusb2: request_firmware fatal error with code=-110 [ 976.364360][ T2307] pvrusb2: Failure uploading firmware1 [ 976.384807][ T2307] pvrusb2: Device initialization was not successful. [ 976.397894][T25084] loop2: detected capacity change from 0 to 32768 [ 976.412243][ T2307] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 976.442629][T25084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8968 (25084) [ 976.473352][ T2307] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 976.508399][T25084] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 976.541455][T25084] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 976.558589][T15818] pvrusb2: Device being rendered inoperable [ 976.564800][ T2307] pvrusb2: Failed to submit write-control URB status=-19 [ 976.593778][T25084] BTRFS info (device loop2): using free space tree [ 976.602306][ T2307] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 976.611497][ T2307] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 976.657795][T25132] loop4: detected capacity change from 0 to 1024 [ 976.684914][T25142] loop1: detected capacity change from 0 to 16 [ 976.706117][T25142] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 976.727668][T25132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 977.008030][T25084] BTRFS info (device loop2): enabling ssd optimizations [ 977.176660][ T4522] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 977.223672][T25169] loop4: detected capacity change from 0 to 256 [ 977.423147][T25176] loop3: detected capacity change from 0 to 256 [ 977.489213][T25176] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 977.524975][T25176] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 977.562206][T25176] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 977.583595][T25176] UDF-fs: Scanning with blocksize 512 failed [ 977.628417][T25176] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 977.673095][T25176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 978.952672][T25196] loop4: detected capacity change from 0 to 32768 [ 978.990913][T25196] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9015 (25196) [ 979.041521][T25220] loop3: detected capacity change from 0 to 2048 [ 979.052762][T25196] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 979.064646][T25220] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 979.081797][T25196] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 979.090849][T25224] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 979.119784][T25196] BTRFS info (device loop4): using free space tree [ 979.140096][T25224] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 979.383973][T25248] loop3: detected capacity change from 0 to 64 [ 979.488048][T25196] BTRFS info (device loop4): enabling ssd optimizations [ 979.562716][T25262] loop2: detected capacity change from 0 to 128 [ 979.622661][T25264] loop1: detected capacity change from 0 to 256 [ 979.648469][ T4524] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 979.654435][T25264] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 979.710998][T25262] qnx6: superblock #1 checksum error [ 979.718723][T25264] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 979.773503][T25264] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 979.787749][T25264] UDF-fs: Scanning with blocksize 512 failed [ 979.832570][T25264] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 979.895264][T25264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 980.089758][ T5647] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 980.306910][T25272] loop1: detected capacity change from 0 to 2048 [ 980.350770][T25272] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 980.567227][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9042'. [ 980.652193][T25260] loop0: detected capacity change from 0 to 32768 [ 980.707751][T25260] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.9040 (25260) [ 980.768336][T25260] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 980.792467][T25290] loop4: detected capacity change from 0 to 64 [ 980.825248][T25260] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 980.874700][T25260] BTRFS info (device loop0): force zlib compression, level 3 [ 980.889933][T25260] BTRFS info (device loop0): force clearing of disk cache [ 980.914324][T25260] BTRFS info (device loop0): setting nodatasum [ 980.921490][ T7840] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 980.944973][T25260] BTRFS info (device loop0): use zlib compression, level 3 [ 980.966791][T25296] netlink: 'syz.2.9057': attribute type 10 has an invalid length. [ 980.995645][T25260] BTRFS info (device loop0): allowing degraded mounts [ 981.002490][T25260] BTRFS info (device loop0): enabling disk space caching [ 981.059693][T25260] BTRFS info (device loop0): disk space caching is enabled [ 981.068581][T25297] loop3: detected capacity change from 0 to 2048 [ 981.141633][T25304] loop2: detected capacity change from 0 to 1024 [ 981.155953][T25304] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 981.182645][T25297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 981.202361][T25304] EXT4-fs (loop2): orphan cleanup on readonly fs [ 981.215325][T25297] cgroup: name respecified [ 981.240277][T25304] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.9059: Invalid inode table block 0 in block_group 0 [ 981.306279][T25304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 981.375843][T25304] EXT4-fs error (device loop2): ext4_quota_write:7196: inode #3: comm syz.2.9059: mark_inode_dirty error [ 981.447060][ T4530] EXT4-fs (loop3): unmounting filesystem. [ 981.449118][T25304] Quota error (device loop2): write_blk: dquota write failed [ 981.467478][T25304] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 981.476240][T25260] BTRFS info (device loop0): enabling ssd optimizations [ 981.492725][T25260] BTRFS info (device loop0): rebuilding free space tree [ 981.502766][T25304] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.9059: Failed to acquire dquot type 0 [ 981.530940][T25260] BTRFS info (device loop0): disabling free space tree [ 981.537910][T25260] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 981.571058][T25304] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.9059: Invalid inode table block 0 in block_group 0 [ 981.594159][T25260] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 981.604531][T25304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 981.632417][T25304] EXT4-fs error (device loop2): ext4_ext_truncate:4453: inode #15: comm syz.2.9059: mark_inode_dirty error [ 981.669131][T25304] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.9059: Invalid inode table block 0 in block_group 0 [ 981.701270][T25304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 981.721886][T25304] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 981.765183][T25304] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.9059: Invalid inode table block 0 in block_group 0 [ 981.797433][T25304] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 981.823465][T25304] EXT4-fs error (device loop2): ext4_truncate:4311: inode #15: comm syz.2.9059: mark_inode_dirty error [ 981.860851][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9064'. [ 981.881514][T25260] BTRFS info (device loop0): balance: start -f -susage=18446744073709551615,vrange=5..4294967296 [ 981.925600][T25304] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 981.945897][T25304] EXT4-fs (loop2): 1 truncate cleaned up [ 981.982458][T25304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 982.018517][T25260] BTRFS info (device loop0): relocating block group 1048576 flags system [ 982.076873][T25304] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (60729!=0) [ 982.235309][ T4522] EXT4-fs (loop2): unmounting filesystem. [ 982.254009][T25260] BTRFS info (device loop0): balance: ended with status: 0 [ 982.396384][T25326] loop4: detected capacity change from 0 to 32768 [ 982.419833][ T4518] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 982.937511][T25355] loop0: detected capacity change from 0 to 256 [ 983.013528][T25355] FAT-fs (loop0): Directory bread(block 64) failed [ 983.035891][T25355] FAT-fs (loop0): Directory bread(block 65) failed [ 983.057969][T25355] FAT-fs (loop0): Directory bread(block 66) failed [ 983.071882][T25355] FAT-fs (loop0): Directory bread(block 67) failed [ 983.098564][T25355] FAT-fs (loop0): Directory bread(block 68) failed [ 983.133610][T25355] FAT-fs (loop0): Directory bread(block 69) failed [ 983.157653][T25355] FAT-fs (loop0): Directory bread(block 70) failed [ 983.178331][T25355] FAT-fs (loop0): Directory bread(block 71) failed [ 983.209663][T25355] FAT-fs (loop0): Directory bread(block 72) failed [ 983.223848][T25355] FAT-fs (loop0): Directory bread(block 73) failed [ 983.959790][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9091'. [ 984.542545][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9105'. [ 984.662565][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9107'. [ 984.860231][T18131] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 985.121993][T18131] usb 2-1: Using ep0 maxpacket: 16 [ 985.217205][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9120'. [ 985.395665][T25462] x_tables: duplicate entry at hook 3 [ 985.656783][T18131] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 985.665905][T18131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.700569][T18131] usb 2-1: Product: syz [ 985.704787][T18131] usb 2-1: Manufacturer: syz [ 985.709421][T18131] usb 2-1: SerialNumber: syz [ 985.722175][T18131] r8152-cfgselector 2-1: config 0 descriptor?? [ 985.802634][T25474] overlayfs: missing 'workdir' [ 986.064516][T25480] loop4: detected capacity change from 0 to 1024 [ 986.113407][T25480] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 986.122901][T25480] EXT4-fs (loop4): orphan cleanup on readonly fs [ 986.142686][T25480] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.9134: Invalid inode table block 0 in block_group 0 [ 986.166736][T25480] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 986.184194][T25480] EXT4-fs error (device loop4): ext4_quota_write:7196: inode #3: comm syz.4.9134: mark_inode_dirty error [ 986.218208][T25480] Quota error (device loop4): write_blk: dquota write failed [ 986.234057][T18131] r8152-cfgselector 2-1: Unknown version 0x0000 [ 986.240490][T18131] r8152-cfgselector 2-1: bad CDC descriptors [ 986.250221][T25480] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 986.281766][T25480] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.9134: Failed to acquire dquot type 0 [ 986.298118][T18131] r8152-cfgselector 2-1: Unknown version 0x0000 [ 986.312771][T18131] r8152-cfgselector 2-1: USB disconnect, device number 97 [ 986.333060][T25480] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.9134: Invalid inode table block 0 in block_group 0 [ 986.406516][T25480] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 986.427898][T25480] EXT4-fs error (device loop4): ext4_ext_truncate:4453: inode #15: comm syz.4.9134: mark_inode_dirty error [ 986.479880][T25480] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.9134: Invalid inode table block 0 in block_group 0 [ 986.507975][T25480] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 986.541552][T25480] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 986.568685][T25468] loop3: detected capacity change from 0 to 32768 [ 986.588032][T25480] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.9134: Invalid inode table block 0 in block_group 0 [ 986.610092][T25480] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 986.623158][T25468] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 986.627365][T25499] overlayfs: missing 'workdir' [ 986.656417][ T3621] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 986.665470][T25480] EXT4-fs error (device loop4): ext4_truncate:4311: inode #15: comm syz.4.9134: mark_inode_dirty error [ 986.707413][T25480] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 986.727854][T25480] EXT4-fs (loop4): 1 truncate cleaned up [ 986.744217][T25480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 986.808249][T25480] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (60729!=0) [ 986.830207][T25503] loop2: detected capacity change from 0 to 2048 [ 986.873124][T25503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 986.932666][ T4524] EXT4-fs (loop4): unmounting filesystem. [ 987.033222][T25511] SET target dimension over the limit! [ 987.244846][T15495] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 987.655980][T15495] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 987.666761][T15495] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.698542][T15495] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 987.714202][T15495] usb 1-1: config 1 has no interface number 1 [ 987.760600][T25537] loop1: detected capacity change from 0 to 256 [ 987.823689][T25537] FAT-fs (loop1): Directory bread(block 64) failed [ 987.830601][T25537] FAT-fs (loop1): Directory bread(block 65) failed [ 987.837709][T25537] FAT-fs (loop1): Directory bread(block 66) failed [ 987.844348][T25537] FAT-fs (loop1): Directory bread(block 67) failed [ 987.851652][T25537] FAT-fs (loop1): Directory bread(block 68) failed [ 987.860799][T25537] FAT-fs (loop1): Directory bread(block 69) failed [ 987.867487][T25537] FAT-fs (loop1): Directory bread(block 70) failed [ 987.874155][T25537] FAT-fs (loop1): Directory bread(block 71) failed [ 987.880957][T25537] FAT-fs (loop1): Directory bread(block 72) failed [ 987.887490][T25537] FAT-fs (loop1): Directory bread(block 73) failed [ 987.987319][T15495] usb 1-1: string descriptor 0 read error: -22 [ 987.993741][T15495] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.004354][T15495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.270732][T25545] loop1: detected capacity change from 0 to 256 [ 988.544782][T18131] usb 1-1: USB disconnect, device number 82 [ 988.914651][T25563] loop2: detected capacity change from 0 to 256 [ 988.937470][T25563] FAT-fs (loop2): Directory bread(block 64) failed [ 988.947833][T25563] FAT-fs (loop2): Directory bread(block 65) failed [ 988.957380][T25563] FAT-fs (loop2): Directory bread(block 66) failed [ 988.967927][T25563] FAT-fs (loop2): Directory bread(block 67) failed [ 988.977392][T25563] FAT-fs (loop2): Directory bread(block 68) failed [ 988.988059][T25563] FAT-fs (loop2): Directory bread(block 69) failed [ 988.998405][T25563] FAT-fs (loop2): Directory bread(block 70) failed [ 989.008875][T25563] FAT-fs (loop2): Directory bread(block 71) failed [ 989.016256][T25563] FAT-fs (loop2): Directory bread(block 72) failed [ 989.023122][T25563] FAT-fs (loop2): Directory bread(block 73) failed [ 989.421014][T25553] loop1: detected capacity change from 0 to 32768 [ 989.483456][T25553] Dev loop1 Sun disklabel: Csum bad, label corrupted [ 989.497326][ T3621] Dev loop1 Sun disklabel: Csum bad, label corrupted [ 989.804162][T25587] loop2: detected capacity change from 0 to 2048 [ 989.878467][T25587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.910757][T25571] loop4: detected capacity change from 0 to 32768 [ 989.930019][T25571] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.9177 (25571) [ 989.947693][T25571] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 989.958602][T25571] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 989.970540][T25571] BTRFS info (device loop4): force zlib compression, level 3 [ 989.982817][T25571] BTRFS info (device loop4): force clearing of disk cache [ 989.990725][T25571] BTRFS info (device loop4): setting nodatasum [ 990.042573][T25571] BTRFS info (device loop4): use zlib compression, level 3 [ 990.050896][T25571] BTRFS info (device loop4): allowing degraded mounts [ 990.071805][T25571] BTRFS info (device loop4): enabling disk space caching [ 990.082848][T25571] BTRFS info (device loop4): disk space caching is enabled [ 990.230429][T25605] loop0: detected capacity change from 0 to 256 [ 990.346801][T25571] BTRFS info (device loop4): enabling ssd optimizations [ 990.355199][T25571] BTRFS info (device loop4): rebuilding free space tree [ 990.392694][T14033] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 990.401449][T25571] BTRFS info (device loop4): disabling free space tree [ 990.415568][T25571] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 990.463444][T25571] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 990.551590][T25571] BTRFS info (device loop4): balance: start -f -susage=18446744073709551615,vrange=5..4294967296 [ 990.591444][T25571] BTRFS info (device loop4): relocating block group 1048576 flags system [ 990.642437][T25571] BTRFS info (device loop4): balance: ended with status: 0 [ 990.755569][ T4524] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 990.788408][T14033] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 990.797558][T14033] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.849877][T14033] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 990.871588][T14033] usb 3-1: config 1 has no interface number 1 [ 991.110030][T25632] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 991.129649][T25630] loop1: detected capacity change from 0 to 2048 [ 991.151077][T14033] usb 3-1: string descriptor 0 read error: -22 [ 991.157531][T14033] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 991.166997][T14033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.211666][T25630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 991.659231][T18131] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 991.727088][T14033] usb 3-1: USB disconnect, device number 94 [ 991.963961][T18131] usb 1-1: Using ep0 maxpacket: 16 [ 992.120241][T18131] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 992.133229][T25666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9214'. [ 992.145746][T25666] openvswitch: netlink: Flow key attr not present in new flow. [ 992.148298][T18131] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 992.183218][T18131] usb 1-1: config 0 interface 0 has no altsetting 0 [ 992.343349][T25652] loop1: detected capacity change from 0 to 32768 [ 992.381268][T18131] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 992.407987][T25652] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9206 (25652) [ 992.420705][T18131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.444847][T18131] usb 1-1: Product: syz [ 992.470669][T18131] usb 1-1: Manufacturer: syz [ 992.470939][T25652] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 992.496534][T18131] usb 1-1: SerialNumber: syz [ 992.510692][T18131] usb 1-1: config 0 descriptor?? [ 992.541413][T25652] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 992.572413][T25652] BTRFS info (device loop1): force zlib compression, level 3 [ 992.583208][T25652] BTRFS info (device loop1): force clearing of disk cache [ 992.615547][T25652] BTRFS info (device loop1): setting nodatasum [ 992.623838][T25681] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9222'. [ 992.637154][T25652] BTRFS info (device loop1): use zlib compression, level 3 [ 992.658712][T25652] BTRFS info (device loop1): allowing degraded mounts [ 992.681452][T25652] BTRFS info (device loop1): enabling disk space caching [ 992.688589][T25652] BTRFS info (device loop1): disk space caching is enabled [ 992.795900][T18131] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input96 [ 992.942253][T25705] loop2: detected capacity change from 0 to 256 [ 992.989064][T25705] FAT-fs (loop2): Directory bread(block 64) failed [ 992.995950][T25705] FAT-fs (loop2): Directory bread(block 65) failed [ 993.002862][T25705] FAT-fs (loop2): Directory bread(block 66) failed [ 993.009629][T25705] FAT-fs (loop2): Directory bread(block 67) failed [ 993.021424][T25705] FAT-fs (loop2): Directory bread(block 68) failed [ 993.042026][T14033] usb 1-1: USB disconnect, device number 83 [ 993.042950][T25652] BTRFS info (device loop1): enabling ssd optimizations [ 993.097834][T25705] FAT-fs (loop2): Directory bread(block 69) failed [ 993.105018][T25652] BTRFS info (device loop1): rebuilding free space tree [ 993.112453][T25705] FAT-fs (loop2): Directory bread(block 70) failed [ 993.127547][T25705] FAT-fs (loop2): Directory bread(block 71) failed [ 993.134535][T25705] FAT-fs (loop2): Directory bread(block 72) failed [ 993.144738][T25705] FAT-fs (loop2): Directory bread(block 73) failed [ 993.151581][T25652] BTRFS info (device loop1): disabling free space tree [ 993.158699][T25652] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 993.168999][T25652] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 993.267946][T25652] BTRFS info (device loop1): balance: start -f -susage=18446744073709551615,vrange=5..4294967296 [ 993.321013][T25652] BTRFS info (device loop1): relocating block group 1048576 flags system [ 993.398435][T25652] BTRFS info (device loop1): balance: ended with status: 0 [ 993.586457][T25721] loop2: detected capacity change from 0 to 2048 [ 993.593260][ T4523] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 993.612397][T25723] loop4: detected capacity change from 0 to 16 [ 993.630181][T25721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.645320][T25723] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 994.485365][T25749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 994.628512][T25757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.824734][T25766] netlink: 'syz.0.9254': attribute type 7 has an invalid length. [ 994.857146][T25766] netlink: 'syz.0.9254': attribute type 5 has an invalid length. [ 994.865959][T25766] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9254'. [ 995.412381][T25792] loop4: detected capacity change from 0 to 256 [ 995.440096][T25792] exfat: Deprecated parameter 'namecase' [ 995.490175][T25792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 996.142708][T25779] loop2: detected capacity change from 0 to 32768 [ 996.220478][T25779] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 996.420615][ T4522] ocfs2: Unmounting device (7,2) on (node local) [ 996.536659][T25836] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.9287'. [ 997.389221][T25876] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9304'. [ 997.682794][T25889] netlink: 'syz.0.9311': attribute type 21 has an invalid length. [ 997.706647][T25889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9311'. [ 998.323014][T25875] loop2: detected capacity change from 0 to 32768 [ 998.419819][T25922] loop4: detected capacity change from 0 to 256 [ 998.438688][T25922] FAT-fs (loop4): bogus logical sector size 0 [ 998.446258][T25922] FAT-fs (loop4): Can't find a valid FAT filesystem [ 998.456366][T25875] XFS (loop2): Mounting V5 Filesystem [ 998.554779][T25875] XFS (loop2): Ending clean mount [ 998.582131][T25875] XFS (loop2): Quotacheck needed: Please wait. [ 998.667508][T25931] xt_TCPMSS: Only works on TCP SYN packets [ 998.684265][T25875] XFS (loop2): Quotacheck: Done. [ 998.833431][ T4522] XFS (loop2): Unmounting Filesystem [ 999.469729][T25963] xt_TCPMSS: Only works on TCP SYN packets [ 999.610401][T25966] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9332'. [ 999.983101][T14033] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1000.238618][T14033] usb 1-1: Using ep0 maxpacket: 8 [ 1000.354340][T25997] netlink: 'syz.3.9359': attribute type 11 has an invalid length. [ 1000.370384][T14033] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 1000.388303][T25997] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9359'. [ 1000.388448][T14033] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.437171][T14033] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1000.473742][T14033] usb 1-1: config 0 has no interface number 1 [ 1000.485385][T14033] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1000.516428][T14033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.551741][T14033] usb 1-1: config 0 descriptor?? [ 1000.592925][T14033] usb 1-1: unknown number of interfaces: 2 [ 1000.679468][T25976] loop4: detected capacity change from 0 to 32768 [ 1000.713255][T25982] loop1: detected capacity change from 0 to 32768 [ 1000.757835][T25976] JBD2: Ignoring recovery information on journal [ 1000.801955][T25976] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1000.833695][T12755] usb 1-1: USB disconnect, device number 84 [ 1000.879784][T25976] [ 1000.882163][T25976] ====================================================== [ 1000.889194][T25976] WARNING: possible circular locking dependency detected [ 1000.896227][T25976] 6.1.114-syzkaller #0 Not tainted [ 1000.901349][T25976] ------------------------------------------------------ [ 1000.908381][T25976] syz.4.9349/25976 is trying to acquire lock: [ 1000.914474][T25976] ffff888053eac650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_setattr+0xd99/0x1f80 [ 1000.923503][T25976] [ 1000.923503][T25976] but task is already holding lock: [ 1000.930887][T25976] ffff8880722c5be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd87/0x1f80 [ 1000.941197][T25976] [ 1000.941197][T25976] which lock already depends on the new lock. [ 1000.941197][T25976] [ 1000.951597][T25976] [ 1000.951597][T25976] the existing dependency chain (in reverse order) is: [ 1000.960619][T25976] [ 1000.960619][T25976] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1000.969409][T25976] lock_acquire+0x1f8/0x5a0 [ 1000.974443][T25976] down_write+0x36/0x60 [ 1000.979120][T25976] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 1000.985619][T25976] ocfs2_xattr_set+0xa4b/0x1930 [ 1000.990996][T25976] ocfs2_set_acl+0x4cb/0x570 [ 1000.996108][T25976] ocfs2_iop_set_acl+0x252/0x3c0 [ 1001.001564][T25976] posix_acl_xattr_set+0x37b/0x3e0 [ 1001.007195][T25976] __vfs_removexattr+0x3ce/0x410 [ 1001.012659][T25976] __vfs_removexattr_locked+0x1fe/0x410 [ 1001.018738][T25976] vfs_removexattr+0xff/0x2a0 [ 1001.023939][T25976] path_removexattr+0x22a/0x320 [ 1001.029310][T25976] __x64_sys_lremovexattr+0x59/0x70 [ 1001.035030][T25976] do_syscall_64+0x3b/0xb0 [ 1001.039970][T25976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.046395][T25976] [ 1001.046395][T25976] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1001.054207][T25976] lock_acquire+0x1f8/0x5a0 [ 1001.059234][T25976] down_read+0xad/0xa30 [ 1001.063934][T25976] ocfs2_init_acl+0x398/0x930 [ 1001.069132][T25976] ocfs2_mknod+0x1f75/0x2e20 [ 1001.074239][T25976] vfs_mknod+0x444/0x4d0 [ 1001.079018][T25976] do_mknodat+0x3f8/0x5a0 [ 1001.083867][T25976] __x64_sys_mknodat+0xa5/0xc0 [ 1001.089147][T25976] do_syscall_64+0x3b/0xb0 [ 1001.094085][T25976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.100519][T25976] [ 1001.100519][T25976] -> #2 (jbd2_handle){++++}-{0:0}: [ 1001.107812][T25976] lock_acquire+0x1f8/0x5a0 [ 1001.112837][T25976] start_this_handle+0x1f71/0x21b0 [ 1001.118466][T25976] jbd2__journal_start+0x2d1/0x5c0 [ 1001.124092][T25976] jbd2_journal_start+0x25/0x30 [ 1001.129459][T25976] ocfs2_start_trans+0x3c0/0x6f0 [ 1001.134912][T25976] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 1001.141157][T25976] ocfs2_dismount_volume+0x1fb/0x960 [ 1001.146963][T25976] generic_shutdown_super+0x130/0x340 [ 1001.152855][T25976] kill_block_super+0x7a/0xe0 [ 1001.158072][T25976] deactivate_locked_super+0xa0/0x110 [ 1001.163981][T25976] cleanup_mnt+0x490/0x520 [ 1001.168936][T25976] task_work_run+0x246/0x300 [ 1001.174070][T25976] exit_to_user_mode_loop+0xde/0x100 [ 1001.179884][T25976] exit_to_user_mode_prepare+0xb1/0x140 [ 1001.185957][T25976] syscall_exit_to_user_mode+0x60/0x270 [ 1001.192017][T25976] do_syscall_64+0x47/0xb0 [ 1001.196946][T25976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.203368][T25976] [ 1001.203368][T25976] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1001.211884][T25976] lock_acquire+0x1f8/0x5a0 [ 1001.216930][T25976] down_read+0xad/0xa30 [ 1001.221602][T25976] ocfs2_start_trans+0x3b5/0x6f0 [ 1001.227063][T25976] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 1001.233310][T25976] ocfs2_dismount_volume+0x1fb/0x960 [ 1001.239134][T25976] generic_shutdown_super+0x130/0x340 [ 1001.245051][T25976] kill_block_super+0x7a/0xe0 [ 1001.250271][T25976] deactivate_locked_super+0xa0/0x110 [ 1001.256160][T25976] cleanup_mnt+0x490/0x520 [ 1001.261096][T25976] task_work_run+0x246/0x300 [ 1001.266206][T25976] exit_to_user_mode_loop+0xde/0x100 [ 1001.272011][T25976] exit_to_user_mode_prepare+0xb1/0x140 [ 1001.278074][T25976] syscall_exit_to_user_mode+0x60/0x270 [ 1001.284135][T25976] do_syscall_64+0x47/0xb0 [ 1001.289064][T25976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.295480][T25976] [ 1001.295480][T25976] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 1001.302952][T25976] validate_chain+0x1661/0x5950 [ 1001.308322][T25976] __lock_acquire+0x125b/0x1f80 [ 1001.313696][T25976] lock_acquire+0x1f8/0x5a0 [ 1001.318721][T25976] ocfs2_start_trans+0x2b0/0x6f0 [ 1001.324195][T25976] ocfs2_setattr+0xd99/0x1f80 [ 1001.329403][T25976] notify_change+0xce3/0xfc0 [ 1001.334523][T25976] chmod_common+0x2a7/0x4b0 [ 1001.339555][T25976] __x64_sys_fchmodat+0x117/0x1a0 [ 1001.345116][T25976] do_syscall_64+0x3b/0xb0 [ 1001.350054][T25976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.356466][T25976] [ 1001.356466][T25976] other info that might help us debug this: [ 1001.356466][T25976] [ 1001.366681][T25976] Chain exists of: [ 1001.366681][T25976] sb_internal#3 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 1001.366681][T25976] [ 1001.380846][T25976] Possible unsafe locking scenario: [ 1001.380846][T25976] [ 1001.388286][T25976] CPU0 CPU1 [ 1001.393665][T25976] ---- ---- [ 1001.399052][T25976] lock(&ocfs2_file_ip_alloc_sem_key); [ 1001.404599][T25976] lock(&oi->ip_xattr_sem); [ 1001.411704][T25976] lock(&ocfs2_file_ip_alloc_sem_key); [ 1001.419770][T25976] lock(sb_internal#3); [ 1001.424014][T25976] [ 1001.424014][T25976] *** DEADLOCK *** [ 1001.424014][T25976] [ 1001.432159][T25976] 3 locks held by syz.4.9349/25976: [ 1001.437345][T25976] #0: ffff888053eac460 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 1001.446580][T25976] #1: ffff8880722c5f48 (&type->i_mutex_dir_key#23){+.+.}-{3:3}, at: chmod_common+0x1b7/0x4b0 [ 1001.456892][T25976] #2: ffff8880722c5be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd87/0x1f80 [ 1001.467584][T25976] [ 1001.467584][T25976] stack backtrace: [ 1001.473461][T25976] CPU: 0 PID: 25976 Comm: syz.4.9349 Not tainted 6.1.114-syzkaller #0 [ 1001.481611][T25976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1001.491684][T25976] Call Trace: [ 1001.494970][T25976] [ 1001.497901][T25976] dump_stack_lvl+0x1e3/0x2cb [ 1001.502587][T25976] ? nf_tcp_handle_invalid+0x642/0x642 [ 1001.508045][T25976] ? print_circular_bug+0x12b/0x1a0 [ 1001.513246][T25976] check_noncircular+0x2fa/0x3b0 [ 1001.518199][T25976] ? add_chain_block+0x850/0x850 [ 1001.523143][T25976] ? lockdep_lock+0x11f/0x2a0 [ 1001.527820][T25976] ? add_lock_to_list+0x1de/0x2e0 [ 1001.532843][T25976] ? _find_first_zero_bit+0xd0/0x100 [ 1001.538129][T25976] validate_chain+0x1661/0x5950 [ 1001.542997][T25976] ? reacquire_held_locks+0x660/0x660 [ 1001.548384][T25976] ? look_up_lock_class+0x77/0x140 [ 1001.553500][T25976] ? register_lock_class+0x100/0x990 [ 1001.558796][T25976] ? mark_lock+0x9a/0x340 [ 1001.563139][T25976] ? is_dynamic_key+0x260/0x260 [ 1001.568004][T25976] ? mark_lock+0x9a/0x340 [ 1001.572349][T25976] __lock_acquire+0x125b/0x1f80 [ 1001.577231][T25976] lock_acquire+0x1f8/0x5a0 [ 1001.581740][T25976] ? ocfs2_setattr+0xd99/0x1f80 [ 1001.586590][T25976] ? read_lock_is_recursive+0x10/0x10 [ 1001.591979][T25976] ? __lock_acquire+0x1f80/0x1f80 [ 1001.597014][T25976] ? __might_sleep+0xb0/0xb0 [ 1001.601618][T25976] ? do_raw_spin_unlock+0x137/0x8a0 [ 1001.606823][T25976] ocfs2_start_trans+0x2b0/0x6f0 [ 1001.611777][T25976] ? ocfs2_setattr+0xd99/0x1f80 [ 1001.616626][T25976] ? ocfs2_recovery_exit+0x280/0x280 [ 1001.621911][T25976] ? setattr_prepare+0x1e0/0xc20 [ 1001.626881][T25976] ocfs2_setattr+0xd99/0x1f80 [ 1001.631562][T25976] ? ocfs2_extend_allocation+0x1d00/0x1d00 [ 1001.637375][T25976] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 1001.643620][T25976] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 1001.649532][T25976] ? current_time+0x1ba/0x300 [ 1001.654222][T25976] ? atime_needs_update+0x7b0/0x7b0 [ 1001.659419][T25976] ? common_perm_cond+0x31b/0x3f0 [ 1001.664444][T25976] ? bpf_lsm_inode_setattr+0x5/0x10 [ 1001.669635][T25976] ? ocfs2_extend_allocation+0x1d00/0x1d00 [ 1001.675446][T25976] notify_change+0xce3/0xfc0 [ 1001.680042][T25976] chmod_common+0x2a7/0x4b0 [ 1001.684556][T25976] ? __ia32_sys_chroot+0x40/0x40 [ 1001.689493][T25976] ? kasan_quarantine_put+0xd4/0x220 [ 1001.694772][T25976] ? lockdep_hardirqs_on+0x94/0x130 [ 1001.699967][T25976] ? user_path_at_empty+0x48/0x60 [ 1001.705005][T25976] __x64_sys_fchmodat+0x117/0x1a0 [ 1001.710030][T25976] ? __ia32_sys_fchmod+0x150/0x150 [ 1001.715149][T25976] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1001.721140][T25976] ? lockdep_hardirqs_on+0x94/0x130 [ 1001.726344][T25976] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1001.732337][T25976] do_syscall_64+0x3b/0xb0 [ 1001.736767][T25976] ? clear_bhb_loop+0x45/0xa0 [ 1001.741435][T25976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.747343][T25976] RIP: 0033:0x7f517bb7e719 [ 1001.751745][T25976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.771344][T25976] RSP: 002b:00007f517c92f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 1001.779752][T25976] RAX: ffffffffffffffda RBX: 00007f517bd35f80 RCX: 00007f517bb7e719 [ 1001.787715][T25976] RDX: 00000000fffffed3 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1001.795680][T25976] RBP: 00007f517bbf12be R08: 0000000000000000 R09: 0000000000000000 [ 1001.803645][T25976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.811626][T25976] R13: 0000000000000000 R14: 00007f517bd35f80 R15: 00007fff76df98e8 [ 1001.819595][T25976] [ 1001.859916][ T4524] ocfs2: Unmounting device (7,4) on (node local) [ 1009.199285][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1009.205582][ T1276] ieee802154 phy1 wpan1: encryption failed: -22