last executing test programs: 5m9.69577783s ago: executing program 3 (id=3694): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000c80)={{0x80, 0x80}, 'port1\x00', 0xc8, 0x10, 0x0, 0x6, 0x0, 0x4000, 0x0, 0xbf, 0x4}) 5m9.480221993s ago: executing program 3 (id=3696): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) 5m9.095316059s ago: executing program 3 (id=3703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m9.01152774s ago: executing program 3 (id=3704): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$eJzs3U1oHGUfAPD/zGbffuV90xfeF1R6KCpUKN0k/dDqqb2KhUIPghcNm20o2WRLNtEm5JDei9iDqPRSb3rwqHjwIF48Cp68KJ6FYoNC04OuzH6kabJJk5pkbeb3g9mdZ57Z/T/PzP5ndx5m2ABy62j2kEY8HREXk4iBFXV90a482lpvaXG+fH9xvpxEo3Hp1ySSiLi3OF/urJ+0nw9FxEJEPBUR3xQjjqdr49Zn58ZHqtXKVLs8OD1xdbA+O3fiysTIWGWsMnnqpZfPnD19Zvjk8MqX3W+sLBW31tcbP91898Z3r96++elnRxbK748kcS7623Ur+7GdWtukGOdWLT+9E8F6KOl1A3gshXaeZ6n0/xiIQjvru2kM7GrTgB3W2BfRAHIqkf+QU53fAdn5b2fazd8fd863TkCyuEvtqVXT1xqbiP3Nc5ODvyUPnZlk55uHd7Oh7EkL1yNiqK9v7ec/aX/+Ht/QdjSQHfX1+daOWrv/0+XjT3Q5/vR3xk7/ps7xb2nN8e9B/MI6x7+Lm4zxxxs/f7Ru/OsRz3SNnyzHT7rETyPirU3Gv/X6l2fXq2t8HHEsusfvSDYeHx68fKVaGWo9do3x1bEjr2zU/4PrxG+N2e5vfs102/5dhrW7+uLbz59d2CD+C89tvP+7bf8DEfHeJuP/994nr61Xd+d6cjf7FbDV/Z9EMW53f8tk9WDwi+eO/rjJpgIAAAAAAAAAAFuQNq9lS9LS8nyalkqte3j/FwfTaq0+ffxybWZytHXN2+Eopp0rrQZa5SQrD7evx+2UT64qnyq0AxYONMulcq062uO+AwAAAAAAAAAAAAAAAAAAwD/FoVX3//9eaN7/v/rvqoG9av2//Ab2OvkP+fVw/ic9awew+3z/Q2415D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74uKFC9nUuL84X87Ko32zM+O1t0+MVurjpYmZcqlcm7paGqvVxqqVUrk28aj3S2q1q0MxOXNtcLpSnx6sz869OVGbmez8p2iluOM9AgAAAAAAAAAAAAAAAAAAgCdPf3NK0lJEpM35NC2VIv4dEYeTSC5fqVaGIuI/EfFDobgvKw/3utEAAAAAAAAAAAAAAAAAAACwx9Rn58ZHqtXKVE5m+rayckQsbG8zsnfc8quK7X211aDZa3q+wc08oTO9PS4BAAAAAAAAAAAAAAAAAEAePbjp99Hrfh8HIuLP3WgWAAAAAAAAAAAAAAAAAAAA5Ez6SxIR2XRs4Pn+1bX/SpYKzeeIeOfWpQ+ujUxPTw1ny+8uL5/+sL385CbCJa2nhW3vB/AonTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQH12bnykWq1M7eBMr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dj+CgAA//8+jtaV") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0) 5m8.707706146s ago: executing program 3 (id=3708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000043c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() 5m7.314467639s ago: executing program 0 (id=3724): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) 5m7.314396449s ago: executing program 3 (id=3725): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500420002"], 0x18}}, 0x0) 5m7.061153273s ago: executing program 32 (id=3725): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500420002"], 0x18}}, 0x0) 5m7.045558113s ago: executing program 0 (id=3727): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fallocate(r0, 0x0, 0x2, 0xffffffffffffffe9) 5m6.899498756s ago: executing program 0 (id=3729): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x1008800, &(0x7f00000000c0)=ANY=[], 0x1, 0x1ef, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x80) 5m6.338203435s ago: executing program 0 (id=3734): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0) 5m5.731107705s ago: executing program 0 (id=3740): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 5m3.983463194s ago: executing program 0 (id=3762): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a01100000088080ffb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 5m3.66035097s ago: executing program 33 (id=3762): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a01100000088080ffb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.737252338s ago: executing program 6 (id=8284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x150, 0x150, 0x0, 0x0, 0x238, 0x238, 0x206, 0x238, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e22, 0x4e21], [0x4e20, 0x4e23], 0x4, 0x4, 0x40, 0x18}}, @common=@hl={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x7, 'snmp\x00', {0x32}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 3.467428882s ago: executing program 6 (id=8291): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4610, &(0x7f00000001c0)) 3.248347126s ago: executing program 6 (id=8296): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000083, &(0x7f0000000080)={[{@nouuid}, {@swalloc}, {@lazytime}, {@nogrpid}, {@gquota}, {@nouuid}, {@pquota}, {@usrquota}, {@nogrpid}]}, 0x1, 0x97b0, &(0x7f0000012f40)="$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") mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc020, 0x0) 2.614707576s ago: executing program 5 (id=8306): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x20e, &(0x7f0000000380)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000053c0)='./file2\x00', &(0x7f0000005400), 0x6000) 2.39021478s ago: executing program 5 (id=8308): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x44, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0xe) 2.031911815s ago: executing program 5 (id=8312): r0 = socket(0x28, 0x5, 0x0) sendto$packet(r0, 0x0, 0x0, 0x61093a7babfd20f, 0x0, 0x0) 1.720715621s ago: executing program 5 (id=8318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) 1.602262503s ago: executing program 5 (id=8321): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000da60000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.407399656s ago: executing program 1 (id=8323): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3000000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5d8, &(0x7f00000006c0)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0xde3) 1.407194366s ago: executing program 5 (id=8324): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x8000000000000000, 0x1013, 0x7fff, 0xb3, 0x1000000fffb, 0x0, 0x0, 0x0, 0x1}) 1.274816688s ago: executing program 4 (id=8326): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) 1.274065238s ago: executing program 2 (id=8336): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) 1.272053268s ago: executing program 6 (id=8327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000001900010000000000000000001c140000fe03000100000000840013000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000090000000000000000000c00090005000001", @ANYRES32=0x0, @ANYBLOB="08000100000000000800010000000e"], 0xd4}}, 0x0) 1.078047781s ago: executing program 2 (id=8328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000e4020000000100000600000000060015000200000018001680040001"], 0x3c}}, 0x0) 1.077667932s ago: executing program 4 (id=8329): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @null, @bpq0, 0xffff, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x400003, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 970.442443ms ago: executing program 1 (id=8330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0xae03, 0x20) 860.863325ms ago: executing program 2 (id=8331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 795.499136ms ago: executing program 4 (id=8332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @private0}]}, 0x44}}, 0x0) 750.843907ms ago: executing program 1 (id=8333): r0 = syz_open_dev$radio(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x1}) 670.585208ms ago: executing program 4 (id=8334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 670.267008ms ago: executing program 2 (id=8335): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, 0xff, 0x0, 'vlan1\x00', 'sit0\x00', {0xff}, {0xff}, 0x84, 0x1, 0x8}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0xf, [0x6, 0x11, 0x1, 0x1a, 0x22, 0x36, 0xa, 0x39, 0x3d, 0x3, 0x32, 0x2b, 0xd, 0x34, 0x34, 0x26], 0x2, 0x4, 0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x7fffff7f, 0xffffff00, 'veth0_vlan\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x5e, 0x2, 0x69}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb3eed7c25ddbad11, 0x5, 0x800, 0x1, 'snmp\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 539.55983ms ago: executing program 1 (id=8337): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)='ex:a3\x02 r\\\x85\x85\x00\xf5\xc8N\a\xa4\xe5e\x95j\x90/-\xbe\xa1O\xfb\xefy\x93\xab\xbd\x8a{\x93\xb6\x16\xf2Z\x00\x00\x00\x00\x00\x00\x00\x05\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00') 492.210801ms ago: executing program 4 (id=8338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x8, 0x4) 433.050462ms ago: executing program 2 (id=8339): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 360.819173ms ago: executing program 6 (id=8340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000100)) 360.642104ms ago: executing program 1 (id=8341): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 195.439216ms ago: executing program 4 (id=8342): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc050211e, &(0x7f0000000540)) 195.176406ms ago: executing program 2 (id=8343): syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x680081e, &(0x7f0000000040)=ANY=[], 0xb, 0x233, &(0x7f0000000880)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x8000008) 169.433466ms ago: executing program 1 (id=8344): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) semop(0x0, 0x0, 0x0) 0s ago: executing program 6 (id=8345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008"], 0xcc}}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 620.495570][T19911] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6579'. [ 620.505320][T19909] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6578'. [ 620.936089][ T4422] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 621.145107][ T4422] usb 2-1: Using ep0 maxpacket: 32 [ 621.152050][ T4422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.187861][ T4422] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 621.216085][ T4422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.243199][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 621.264290][ T4422] usb 2-1: Product: syz [ 621.268509][ T4422] usb 2-1: Manufacturer: syz [ 621.283846][ T4422] usb 2-1: SerialNumber: syz [ 621.292822][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 621.308966][ T4422] usb 2-1: config 0 descriptor?? [ 621.345359][ T4422] cdc_ether 2-1:0.0: skipping garbage [ 621.349904][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.352795][ T4422] usb 2-1: bad CDC descriptors [ 621.372761][ T4422] usb 2-1: unsupported MDLM descriptors [ 621.374711][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.576713][ T7795] usb 2-1: USB disconnect, device number 58 [ 621.623606][T19959] netlink: 'syz.5.6605': attribute type 1 has an invalid length. [ 621.646025][T19959] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6605'. [ 621.675463][T19963] loop6: detected capacity change from 0 to 128 [ 621.734216][T19963] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 621.772373][T19963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.830221][T19963] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 621.851502][T19963] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 621.870754][T19965] loop4: detected capacity change from 0 to 1024 [ 621.938554][T19969] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6609'. [ 622.019201][T19965] hfsplus: request for non-existent node 768 in B*Tree [ 622.050549][T19965] hfsplus: request for non-existent node 768 in B*Tree [ 622.238531][T18648] hfsplus: b-tree write err: -5, ino 4 [ 622.390609][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 622.413746][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 622.428944][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.437582][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.503786][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.532066][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 622.551377][T19987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.136791][T19984] loop5: detected capacity change from 0 to 32768 [ 623.167817][T19984] [ 623.167817][T19984] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.167817][T19984] [ 623.266967][T19984] __jfs_setxattr: xattr_size = 243, new_size = 337 [ 623.609627][T20022] netlink: 'syz.1.6636': attribute type 21 has an invalid length. [ 623.622320][T20022] netlink: 'syz.1.6636': attribute type 1 has an invalid length. [ 623.635914][T20022] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6636'. [ 623.954953][T18645] [ 623.954953][T18645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.954953][T18645] [ 624.039920][T18645] [ 624.039920][T18645] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.039920][T18645] [ 624.075402][ T107] [ 624.075402][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.075402][ T107] [ 624.160153][T13036] [ 624.160153][T13036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.160153][T13036] [ 624.191198][T13036] [ 624.191198][T13036] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.191198][T13036] [ 624.528791][T20048] loop2: detected capacity change from 0 to 64 [ 624.547661][T20050] netlink: 'syz.4.6649': attribute type 10 has an invalid length. [ 624.590057][T20050] team0: Device hsr_slave_0 failed to register rx_handler [ 624.718740][T20030] loop1: detected capacity change from 0 to 32768 [ 624.863054][T20030] XFS (loop1): Mounting V5 Filesystem [ 625.083523][T20030] XFS (loop1): Ending clean mount [ 625.105277][T20030] XFS (loop1): Quotacheck needed: Please wait. [ 625.211894][T20030] XFS (loop1): Quotacheck: Done. [ 625.354261][ T4249] XFS (loop1): Unmounting Filesystem [ 626.830451][T20150] loop6: detected capacity change from 0 to 1024 [ 626.849338][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6694'. [ 626.876690][T20152] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 626.906849][T20152] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 627.030987][T18648] hfsplus: b-tree write err: -5, ino 4 [ 627.124558][T20158] loop5: detected capacity change from 0 to 1024 [ 627.219949][T20158] hfsplus: request for non-existent node 768 in B*Tree [ 627.274000][T20158] hfsplus: request for non-existent node 768 in B*Tree [ 627.385243][ T62] hfsplus: b-tree write err: -5, ino 4 [ 627.718001][T20176] loop4: detected capacity change from 0 to 256 [ 627.720064][T20146] loop1: detected capacity change from 0 to 32768 [ 627.758380][T20178] device netdevsim0 entered promiscuous mode [ 627.816104][T20176] FAT-fs (loop4): Directory bread(block 64) failed [ 627.846286][T20156] loop2: detected capacity change from 0 to 32768 [ 627.850658][T20176] FAT-fs (loop4): Directory bread(block 65) failed [ 627.860443][T20146] XFS (loop1): Mounting V5 Filesystem [ 627.866644][T20176] FAT-fs (loop4): Directory bread(block 66) failed [ 627.875514][T20178] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 627.906613][T20176] FAT-fs (loop4): Directory bread(block 67) failed [ 627.913832][T20176] FAT-fs (loop4): Directory bread(block 68) failed [ 627.920815][T20176] FAT-fs (loop4): Directory bread(block 69) failed [ 627.927656][T20176] FAT-fs (loop4): Directory bread(block 70) failed [ 627.935142][T20176] FAT-fs (loop4): Directory bread(block 71) failed [ 627.942014][T20176] FAT-fs (loop4): Directory bread(block 72) failed [ 627.948675][T20176] FAT-fs (loop4): Directory bread(block 73) failed [ 627.978287][T20156] jfs_strtoUCS: char2uni returned -22. [ 628.025788][T20156] charset = ascii, char = 0xc5 [ 628.087747][T20146] XFS (loop1): Ending clean mount [ 628.291651][ T4249] XFS (loop1): Unmounting Filesystem [ 628.411263][T20198] loop6: detected capacity change from 0 to 256 [ 628.783708][T20210] netlink: 'syz.6.6717': attribute type 10 has an invalid length. [ 628.851786][T20210] team0: Device hsr_slave_0 failed to register rx_handler [ 629.189071][T20217] loop5: detected capacity change from 0 to 4096 [ 629.226920][T20217] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 629.628123][T20237] fuse: Bad value for 'fd' [ 629.875255][T20245] loop1: detected capacity change from 0 to 1024 [ 629.942803][ T4422] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 629.964613][T20221] loop2: detected capacity change from 0 to 32768 [ 629.967646][T20245] hfsplus: request for non-existent node 768 in B*Tree [ 629.997455][T20221] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6725 (20221) [ 630.015680][T20221] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 630.035142][T20221] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 630.041274][T20245] hfsplus: request for non-existent node 768 in B*Tree [ 630.052000][T20221] BTRFS info (device loop2): use no compression [ 630.060498][T20221] BTRFS info (device loop2): setting nodatasum [ 630.070654][T20221] BTRFS info (device loop2): enabling auto defrag [ 630.079241][T20221] BTRFS info (device loop2): turning on sync discard [ 630.094901][T20221] BTRFS info (device loop2): allowing degraded mounts [ 630.121861][ T7790] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 630.126818][ T4422] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 630.132563][T20221] BTRFS info (device loop2): turning off discard [ 630.148523][ T4422] usb 7-1: config 8 has no interface number 0 [ 630.154226][T20221] BTRFS info (device loop2): setting datasum [ 630.172469][ T4422] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 630.179060][T20221] BTRFS info (device loop2): using free space tree [ 630.209412][ T4422] usb 7-1: config 8 interface 177 has no altsetting 0 [ 630.216263][ T4422] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 630.268691][ T4422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.299116][T20239] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 630.307364][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 630.321983][ T7790] usb 6-1: Using ep0 maxpacket: 8 [ 630.342020][ T7790] usb 6-1: config 0 has an invalid interface number: 6 but max is 2 [ 630.351773][ T7790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.362972][ T7790] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 630.372367][ T7790] usb 6-1: config 0 has no interface number 1 [ 630.378548][ T7790] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 630.389011][ T7790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.404578][ T7790] usb 6-1: config 0 descriptor?? [ 630.411717][ T7790] usb 6-1: unknown number of interfaces: 2 [ 630.531609][ T4422] usb 7-1: string descriptor 0 read error: -71 [ 630.541743][ C0] ir_toy 7-1:8.177: out urb status: -71 [ 630.555296][T20221] BTRFS info (device loop2): enabling ssd optimizations [ 630.642013][ T7] usb 6-1: USB disconnect, device number 13 [ 630.754480][ T4258] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 630.784110][T20283] loop1: detected capacity change from 0 to 22 [ 630.803758][T20283] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 630.855162][T20283] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 631.036668][ T4422] ir_toy 7-1:8.177: could not write reset command: -110 [ 631.048485][ T4422] ir_toy: probe of 7-1:8.177 failed with error -110 [ 631.082109][ T4422] usb 7-1: USB disconnect, device number 15 [ 631.203050][T20290] loop4: detected capacity change from 0 to 512 [ 631.350209][T20290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 631.352810][T20296] loop1: detected capacity change from 0 to 512 [ 631.479532][T20301] netlink: 'syz.5.6753': attribute type 10 has an invalid length. [ 631.521454][T20290] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 631.620643][T20296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 631.631992][T20290] EXT4-fs (loop4): 1 truncate cleaned up [ 631.644771][T20301] team0: Device hsr_slave_0 failed to register rx_handler [ 631.662339][T20290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 631.665711][T20296] ext4 filesystem being mounted at /1296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 631.686073][T20312] netlink: 'syz.6.6757': attribute type 11 has an invalid length. [ 631.881399][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 631.974214][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 632.020147][T20319] loop5: detected capacity change from 0 to 64 [ 632.066902][T20322] loop2: detected capacity change from 0 to 256 [ 632.288473][T20328] loop4: detected capacity change from 0 to 16 [ 632.352912][T20328] erofs: (device loop4): mounted with root inode @ nid 36. [ 632.741022][T20342] loop5: detected capacity change from 0 to 4096 [ 633.030166][T20358] loop1: detected capacity change from 0 to 64 [ 633.541697][T20378] loop6: detected capacity change from 0 to 512 [ 633.630049][ T26] audit: type=1326 audit(1750787627.887:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.6795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53938e929 code=0x7ffc0000 [ 633.660311][ T26] audit: type=1326 audit(1750787627.919:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.6795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd53938e929 code=0x7ffc0000 [ 633.684044][ T26] audit: type=1326 audit(1750787627.919:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.4.6795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53938e929 code=0x7ffc0000 [ 633.692171][T20378] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 633.729098][T20378] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.963655][T13135] EXT4-fs (loop6): unmounting filesystem. [ 633.998279][T20397] loop4: detected capacity change from 0 to 8192 [ 634.009940][T20397] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 634.023675][T20397] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 634.033390][T20397] REISERFS (device loop4): using ordered data mode [ 634.049048][T20397] reiserfs: using flush barriers [ 634.055874][T20400] Option ' ' to dns_resolver key: bad/missing value [ 634.071926][T20397] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 634.113650][T20397] REISERFS (device loop4): checking transaction log (loop4) [ 634.124150][ T4255] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 634.298352][T20397] REISERFS (device loop4): Using tea hash to sort names [ 634.307727][T20407] loop6: detected capacity change from 0 to 2048 [ 634.320437][T20397] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 634.331845][ T4255] usb 6-1: Using ep0 maxpacket: 8 [ 634.344140][ T4255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.362070][ T4255] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 634.397175][ T4255] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 634.429521][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.457867][ T4255] usb 6-1: Product: syz [ 634.467613][ T4255] usb 6-1: Manufacturer: syz [ 634.482226][ T4255] usb 6-1: SerialNumber: syz [ 634.503927][ T4255] usb 6-1: config 0 descriptor?? [ 634.618570][T20416] loop2: detected capacity change from 0 to 512 [ 634.679671][T20416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 634.739324][T20418] loop1: detected capacity change from 0 to 256 [ 634.781918][T20416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 634.794711][T20418] FAT-fs (loop1): Directory bread(block 64) failed [ 634.818715][T20418] FAT-fs (loop1): Directory bread(block 65) failed [ 634.839181][T20418] FAT-fs (loop1): Directory bread(block 66) failed [ 634.859581][ T26] audit: type=1326 audit(1750787629.168:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20419 comm="syz.6.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 634.865807][T20418] FAT-fs (loop1): Directory bread(block 67) failed [ 634.889257][T20418] FAT-fs (loop1): Directory bread(block 68) failed [ 634.896050][T20418] FAT-fs (loop1): Directory bread(block 69) failed [ 634.902651][T20418] FAT-fs (loop1): Directory bread(block 70) failed [ 634.909480][T20418] FAT-fs (loop1): Directory bread(block 71) failed [ 634.916192][T20418] FAT-fs (loop1): Directory bread(block 72) failed [ 634.922794][T20418] FAT-fs (loop1): Directory bread(block 73) failed [ 634.923227][T20416] EXT4-fs (loop2): 1 truncate cleaned up [ 634.936472][ T26] audit: type=1326 audit(1750787629.168:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20419 comm="syz.6.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 634.958802][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.965212][ T26] audit: type=1326 audit(1750787629.199:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20419 comm="syz.6.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 635.005870][ T26] audit: type=1326 audit(1750787629.199:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20419 comm="syz.6.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 635.023355][ T4255] usb 6-1: USB disconnect, device number 14 [ 635.038877][T20416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 635.162987][ T26] audit: type=1326 audit(1750787629.199:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20419 comm="syz.6.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 635.229781][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 635.420125][T20434] netlink: 372 bytes leftover after parsing attributes in process `syz.6.6816'. [ 635.451579][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6817'. [ 635.640632][T20445] netlink: 'syz.4.6822': attribute type 1 has an invalid length. [ 635.648415][T20445] netlink: 'syz.4.6822': attribute type 2 has an invalid length. [ 635.719105][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6822'. [ 635.943501][T20459] tmpfs: Bad value for 'mpol' [ 636.189854][T20468] loop5: detected capacity change from 0 to 1024 [ 636.218327][T20468] EXT4-fs: Ignoring removed bh option [ 636.333445][T20468] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 636.464701][T20462] loop1: detected capacity change from 0 to 32768 [ 636.520057][T13036] EXT4-fs (loop5): unmounting filesystem. [ 637.304899][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6849'. [ 637.602036][T20520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 637.609632][T20520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 637.692583][T20523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6858'. [ 637.898087][T20530] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6862'. [ 638.073953][T20537] [U] ^C [ 638.272360][T20515] loop6: detected capacity change from 0 to 32768 [ 638.327069][T20515] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11 [ 638.541835][T20552] loop2: detected capacity change from 0 to 1764 [ 638.599198][T20550] loop5: detected capacity change from 0 to 4096 [ 638.637210][T20552] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 638.659924][ T4329] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11 [ 638.841512][ T7] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 638.865616][T13036] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 638.902017][T13036] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 638.969127][T20566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6880'. [ 639.024820][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 639.034615][ T7] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 639.071193][ T7] usb 7-1: config 179 has no interface number 0 [ 639.120299][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 639.168012][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 639.203111][T20573] loop1: detected capacity change from 0 to 64 [ 639.218834][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 639.268155][ T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 639.322858][ T7] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 639.365381][ T7] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 639.399243][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.421468][T20556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 639.683077][T20556] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 639.689654][T20556] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 639.729487][T20556] vhci_hcd vhci_hcd.0: Device attached [ 639.757406][ T4255] usb 7-1: USB disconnect, device number 16 [ 639.757519][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 639.773540][T20587] vhci_hcd: connection closed [ 639.773920][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 639.795152][T18642] vhci_hcd: stop threads [ 639.799537][T18642] vhci_hcd: release socket [ 639.813487][T18642] vhci_hcd: disconnect device [ 639.860346][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6892'. [ 639.869962][T20593] netlink: 'syz.4.6892': attribute type 1 has an invalid length. [ 639.878249][T20593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6892'. [ 640.027953][T20568] loop5: detected capacity change from 0 to 32768 [ 640.150005][T20568] XFS (loop5): Mounting V5 Filesystem [ 640.188536][T20608] loop4: detected capacity change from 0 to 256 [ 640.234456][T20568] XFS (loop5): Ending clean mount [ 640.237920][T20608] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 640.262618][T20568] XFS (loop5): Quotacheck needed: Please wait. [ 640.431058][T20568] XFS (loop5): Quotacheck: Done. [ 640.620230][ C1] sd 0:0:1:0: [sda] tag#4894 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 640.630737][ C1] sd 0:0:1:0: [sda] tag#4894 CDB: Read(6) 08 1e df d0 ec f7 [ 640.654560][T13036] XFS (loop5): Unmounting Filesystem [ 641.164914][T20644] syz.1.6915 (20644): /proc/20643/oom_adj is deprecated, please use /proc/20643/oom_score_adj instead. [ 641.486148][T20654] loop6: detected capacity change from 0 to 1764 [ 641.829856][T20636] loop2: detected capacity change from 0 to 32768 [ 642.051034][T20683] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 642.140377][T20683] overlayfs: conflicting options: userxattr,redirect_dir=off [ 642.426963][T20693] ntfs3: nbd6: try to read out of volume at offset 0x0 [ 642.839558][T20711] loop1: detected capacity change from 0 to 4096 [ 642.846649][T20715] xt_TCPMSS: Only works on TCP SYN packets [ 642.883086][T20711] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 642.929328][ T7789] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 642.929797][T20711] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 643.035079][T20717] loop4: detected capacity change from 0 to 4096 [ 643.084823][T20717] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 643.148886][ T7789] usb 6-1: Using ep0 maxpacket: 8 [ 643.155708][ T7789] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 643.189939][T20717] ntfs3: loop4: failed to convert "c46c" to maccenteuro [ 643.193824][ T7789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.266628][ T7789] usb 6-1: config 0 has no interface number 0 [ 643.296999][ T7789] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 643.346409][ T7789] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 643.375479][ T7789] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.417941][ T7789] usb 6-1: config 0 interface 52 has no altsetting 0 [ 643.455342][ T7789] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 643.493710][ T7789] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 643.515901][ T7789] usb 6-1: Product: syz [ 643.520235][ T7789] usb 6-1: Manufacturer: syz [ 643.532723][ T7789] usb 6-1: SerialNumber: syz [ 643.561611][ T7789] usb 6-1: config 0 descriptor?? [ 643.690178][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 643.748861][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 643.753653][T20744] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6961'. [ 643.755517][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 643.793263][T20744] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6961'. [ 643.823007][T20746] loop4: detected capacity change from 0 to 64 [ 643.867869][T20746] Trying to free block not in datazone [ 644.003160][ T7789] usb 6-1: USB disconnect, device number 15 [ 644.090652][T20740] infiniband syz2: set active [ 644.095580][ T4298] vxcan1 speed is unknown, defaulting to 1000 [ 644.118847][T20740] infiniband syz2: added vxcan1 [ 644.205326][T20759] wlan1: mtu less than device minimum [ 644.212225][T20759] team0: Device wlan1 failed to change mtu [ 644.256538][T20740] RDS/IB: syz2: added [ 644.335263][T20740] smc: adding ib device syz2 with port count 1 [ 644.348457][T20740] smc: ib device syz2 port 1 has pnetid [ 644.371997][ T7789] vxcan1 speed is unknown, defaulting to 1000 [ 644.384934][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 644.490390][T20769] loop4: detected capacity change from 0 to 64 [ 644.750661][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 644.838037][T20781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6979'. [ 645.120676][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 645.461632][T20806] loop6: detected capacity change from 0 to 8 [ 645.478816][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 645.800846][T20815] loop5: detected capacity change from 0 to 1764 [ 645.824282][T20740] vxcan1 speed is unknown, defaulting to 1000 [ 645.875036][T20815] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 646.050976][ T26] audit: type=1400 audit(1750787640.911:112): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=20826 comm="syz.1.7002" [ 646.380941][T20831] loop1: detected capacity change from 0 to 4096 [ 646.437919][T20831] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 646.483580][T20831] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 646.536886][T20831] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 646.594752][T20831] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 646.632485][T20850] loop5: detected capacity change from 0 to 64 [ 646.653664][T20831] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 646.714242][T20831] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 646.744261][T20831] ntfs: volume version 3.1. [ 646.832613][T20831] ntfs: (device loop1): ntfs_read_locked_inode(): Directory index is corrupt. [ 646.860836][T20831] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 647.017132][T20858] wlan1: mtu less than device minimum [ 647.045270][T20858] team0: Device wlan1 failed to change mtu [ 647.269299][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7024'. [ 647.517289][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7029'. [ 647.541729][ T4298] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 647.743206][ T4298] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 647.760630][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.799764][ T4298] usb 3-1: config 0 descriptor?? [ 647.865446][T20903] loop4: detected capacity change from 0 to 256 [ 648.192329][ T4298] usb 3-1: Cannot set MAC address [ 648.197509][ T4298] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 648.226966][ T4298] usb 3-1: USB disconnect, device number 81 [ 648.539857][T20895] loop5: detected capacity change from 0 to 32768 [ 648.567269][T20895] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 648.572703][T20920] loop1: detected capacity change from 0 to 4096 [ 648.624547][T20920] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 648.768486][T20920] ntfs: volume version 3.1. [ 648.869858][ T4329] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 648.880946][T20929] cgroup: Name too long [ 648.937487][ T4298] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 649.036481][T20912] loop6: detected capacity change from 0 to 32768 [ 649.141384][T20912] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 649.167805][T20912] (syz.6.7042,20912,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 649.180968][ T4298] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 649.189476][ T4298] usb 5-1: config 0 has no interface number 0 [ 649.192557][T20933] loop5: detected capacity change from 0 to 4096 [ 649.267438][ T4298] usb 5-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 649.308228][T20933] ntfs: volume version 3.1. [ 649.325806][ T4298] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 649.374312][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.378324][T13135] ocfs2: Unmounting device (7,6) on (node local) [ 649.393747][ T4298] usb 5-1: Product: syz [ 649.424310][ T4298] usb 5-1: Manufacturer: syz [ 649.456605][ T4298] usb 5-1: SerialNumber: syz [ 649.502284][ T4298] usb 5-1: config 0 descriptor?? [ 649.728518][ T4298] usb 5-1: USB disconnect, device number 84 [ 649.817426][T20954] loop6: detected capacity change from 0 to 764 [ 650.060262][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7066'. [ 650.171399][ T4255] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 650.326650][T20975] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 650.400268][ T4255] usb 6-1: Using ep0 maxpacket: 32 [ 650.407340][ T4255] usb 6-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 650.417448][T20976] loop1: detected capacity change from 0 to 4096 [ 650.437290][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.451995][T20976] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 650.489352][ T4255] usb 6-1: config 0 descriptor?? [ 650.500821][ T4255] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 650.537499][T20976] ntfs3: loop1: failed to convert "c46c" to maciceland [ 650.883988][ T4255] gspca_sunplus: reg_w_riv err -71 [ 650.892179][ T4255] sunplus: probe of 6-1:0.0 failed with error -71 [ 650.924237][ T4255] usb 6-1: USB disconnect, device number 16 [ 651.089776][T20999] loop4: detected capacity change from 0 to 4096 [ 651.135664][T20999] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 651.248883][T20999] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 651.255992][T20999] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 651.298109][T21009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7088'. [ 651.317529][T20999] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 651.411167][ T4347] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 651.465400][ T4251] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 651.936094][ T7] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 651.962322][T21036] rdma_rxe: rxe_register_device failed with error -23 [ 651.999629][T21036] rdma_rxe: failed to add vxcan1 [ 652.059787][T21038] netlink: 'syz.2.7113': attribute type 2 has an invalid length. [ 652.078862][T21038] netlink: 'syz.2.7113': attribute type 1 has an invalid length. [ 652.129582][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 652.151033][ T7] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 652.189463][ T7] usb 6-1: config 0 has no interface number 0 [ 652.198732][T21043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7104'. [ 652.210606][ T7] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 652.224555][T21014] loop1: detected capacity change from 0 to 32768 [ 652.238255][ T7] usb 6-1: config 0 interface 244 has no altsetting 0 [ 652.265787][ T7] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 652.292263][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.334837][ T7] usb 6-1: Product: syz [ 652.339077][ T7] usb 6-1: Manufacturer: syz [ 652.343692][ T7] usb 6-1: SerialNumber: syz [ 652.375272][ T7] usb 6-1: config 0 descriptor?? [ 652.384876][ T7] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 652.387456][T21014] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 652.434464][T21014] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 652.494072][T21014] BTRFS info (device loop1): force zlib compression, level 3 [ 652.511989][T21014] BTRFS info (device loop1): force clearing of disk cache [ 652.534841][T21014] BTRFS info (device loop1): setting nodatasum [ 652.554584][T21014] BTRFS info (device loop1): allowing degraded mounts [ 652.591390][ T7] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 652.599993][T21014] BTRFS info (device loop1): enabling disk space caching [ 652.617346][T21014] BTRFS info (device loop1): disk space caching is enabled [ 652.629716][ T7] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 652.651001][ T7] snd_usb_toneport: probe of 6-1:0.244 failed with error -22 [ 652.852315][ T7] usb 6-1: USB disconnect, device number 17 [ 652.947664][T21014] BTRFS info (device loop1): rebuilding free space tree [ 653.022523][T21014] BTRFS info (device loop1): disabling free space tree [ 653.059045][T21014] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 653.078611][T21014] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 653.225472][T21014] BTRFS warning (device loop1): can't clear the compat:0 feature bit while mounted [ 653.317464][T21093] loop2: detected capacity change from 0 to 8 [ 653.403232][ T4249] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 653.436609][T21093] SQUASHFS error: Failed to read block 0x1ec: -5 [ 653.463787][T21093] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 653.639125][T21100] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 654.068157][T21116] loop4: detected capacity change from 0 to 256 [ 654.151393][T21116] exfat: Deprecated parameter 'utf8' [ 654.207162][T21116] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 654.383779][ T4294] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 654.545070][T21129] x_tables: duplicate underflow at hook 2 [ 654.564296][ T4294] usb 6-1: Using ep0 maxpacket: 32 [ 654.586105][ T4294] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 654.615132][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.644830][ T4294] usb 6-1: config 0 descriptor?? [ 654.693443][ T4294] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 654.809557][T21137] netlink: 'syz.1.7143': attribute type 1 has an invalid length. [ 654.839266][T21139] x_tables: duplicate underflow at hook 1 [ 654.969238][T21113] loop6: detected capacity change from 0 to 32768 [ 655.051906][T21113] XFS (loop6): Mounting V5 Filesystem [ 655.063640][ T4294] gspca_nw80x: reg_r err -71 [ 655.080390][ T4294] nw80x: probe of 6-1:0.0 failed with error -71 [ 655.102411][ T4294] usb 6-1: USB disconnect, device number 18 [ 655.227643][T21113] XFS (loop6): Ending clean mount [ 655.257475][T21113] XFS (loop6): Quotacheck needed: Please wait. [ 655.350736][T21113] XFS (loop6): Quotacheck: Done. [ 655.538978][T13135] XFS (loop6): Unmounting Filesystem [ 655.634658][T21173] netlink: 'syz.1.7155': attribute type 1 has an invalid length. [ 655.766312][T21175] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 656.141636][T21189] loop2: detected capacity change from 0 to 128 [ 656.193950][T21189] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 656.204342][T21193] netlink: 'syz.6.7157': attribute type 10 has an invalid length. [ 656.225978][T21189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.243968][T21193] device team_slave_0 left promiscuous mode [ 656.265015][T21193] device team_slave_1 left promiscuous mode [ 656.343901][T21193] bond0: (slave team0): Releasing backup interface [ 656.423707][T21193] team0: Cannot enslave team device to itself [ 656.779896][T21181] loop1: detected capacity change from 0 to 32768 [ 656.836290][T21181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7161 (21181) [ 656.899333][T21181] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 656.942189][T21181] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 656.953741][T21181] BTRFS info (device loop1): using free space tree [ 657.146298][T21202] loop2: detected capacity change from 0 to 32768 [ 657.189881][T21229] loop6: detected capacity change from 0 to 16 [ 657.205610][T21202] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.7170 (21202) [ 657.205760][T21229] erofs: (device loop6): mounted with root inode @ nid 36. [ 657.276927][T21229] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 657.287786][T21229] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 657.308663][T21229] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 657.325938][T21202] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 657.367918][T21202] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 657.407649][T21181] BTRFS info (device loop1): enabling ssd optimizations [ 657.423063][T21229] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 657.438536][T21229] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 657.452197][T21202] BTRFS info (device loop2): force zlib compression, level 3 [ 657.466199][T21202] BTRFS info (device loop2): force clearing of disk cache [ 657.503447][T21202] BTRFS info (device loop2): setting nodatasum [ 657.556500][T21202] BTRFS info (device loop2): allowing degraded mounts [ 657.568901][T21240] loop4: detected capacity change from 0 to 8 [ 657.611797][T21202] BTRFS info (device loop2): enabling disk space caching [ 657.624279][T21240] SQUASHFS error: Failed to read block 0x738: -5 [ 657.659114][ T4249] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 657.669871][T21202] BTRFS info (device loop2): disk space caching is enabled [ 657.674264][T21240] SQUASHFS error: Unable to read metadata cache entry [736] [ 658.088362][T21202] BTRFS info (device loop2): rebuilding free space tree [ 658.204731][T21202] BTRFS info (device loop2): disabling free space tree [ 658.211787][T21202] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 658.244528][T21202] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 658.250672][T21274] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7190'. [ 658.484119][T21202] BTRFS warning (device loop2): can't clear the compat:0 feature bit while mounted [ 658.584133][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7192'. [ 658.633855][ T4258] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 658.924795][T21293] loop1: detected capacity change from 0 to 2048 [ 659.020168][T21293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 659.854149][T21327] loop6: detected capacity change from 0 to 1024 [ 659.916176][T21327] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 659.997145][T21327] hfsplus: filesystem is marked journaled, leaving read-only. [ 660.112417][T21335] loop2: detected capacity change from 0 to 1024 [ 660.315073][T21343] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7222'. [ 660.324779][ T5933] hfsplus: b-tree write err: -5, ino 4 [ 660.330516][T21345] netlink: 'syz.4.7223': attribute type 7 has an invalid length. [ 660.330538][T21345] netlink: 'syz.4.7223': attribute type 8 has an invalid length. [ 661.082793][T21380] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7240'. [ 661.102922][T21380] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7240'. [ 661.136034][T21380] netlink: 'syz.5.7240': attribute type 5 has an invalid length. [ 661.147635][T21380] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7240'. [ 661.380819][T21395] loop1: detected capacity change from 0 to 64 [ 661.629616][T21398] loop5: detected capacity change from 0 to 4096 [ 661.681664][T21398] __ntfs_error: 9 callbacks suppressed [ 661.681681][T21398] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 661.744642][T21398] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 661.801494][T21398] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 661.856079][T21398] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 661.944271][T21398] ntfs: volume version 3.1. [ 661.956767][T21398] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 661.978046][T21398] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 662.005418][T21398] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 662.139473][T21398] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 662.192905][T21398] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 662.198682][T21419] loop6: detected capacity change from 0 to 4096 [ 662.306497][T21419] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 662.325101][T21428] loop4: detected capacity change from 0 to 64 [ 662.462097][T21419] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz.6.7260: directory missing '..' [ 662.694478][T13135] EXT4-fs (loop6): unmounting filesystem. [ 662.758347][T21417] loop1: detected capacity change from 0 to 32768 [ 662.835181][T21417] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 662.879567][T21440] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.7268'. [ 662.880065][T21443] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 662.910823][T21445] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7269'. [ 662.931693][T21417] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 663.036716][T21417] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 663.151020][T21417] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 663.232305][T21417] OCFS2: File system is now read-only. [ 663.250417][T21455] loop4: detected capacity change from 0 to 512 [ 663.262225][T21417] (syz.1.7258,21417,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 663.296195][T21417] (syz.1.7258,21417,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 663.313886][T21417] (syz.1.7258,21417,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 663.332696][T21417] (syz.1.7258,21417,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 663.350457][T21417] (syz.1.7258,21417,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 663.358680][T21417] (syz.1.7258,21417,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 663.382992][T21455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 663.417123][T21455] ext4 filesystem being mounted at /1534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.434780][T21457] loop6: detected capacity change from 0 to 2048 [ 663.443899][T21417] (syz.1.7258,21417,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 663.452105][T21417] (syz.1.7258,21417,0):ocfs2_mknod:385 ERROR: status = -30 [ 663.459837][T21417] (syz.1.7258,21417,0):ocfs2_mknod:502 ERROR: status = -30 [ 663.467549][T21417] (syz.1.7258,21417,0):ocfs2_create:676 ERROR: status = -30 [ 663.478114][T21457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.506945][T21435] loop5: detected capacity change from 0 to 32768 [ 663.536349][T21455] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 663.603608][T21435] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.7267 (21435) [ 663.617381][T21455] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.7275: Failed to acquire dquot type 0 [ 663.662343][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 663.701034][T21435] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 663.722262][T21435] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 663.748483][T21435] BTRFS info (device loop5): force zlib compression, level 3 [ 663.815014][T21435] BTRFS info (device loop5): force clearing of disk cache [ 663.845672][T21464] tmpfs: Bad value for 'mpol' [ 663.850946][T21435] BTRFS info (device loop5): setting nodatasum [ 663.859351][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 663.860754][T21468] program syz.6.7280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.885414][T21435] BTRFS info (device loop5): allowing degraded mounts [ 663.892263][T21435] BTRFS info (device loop5): enabling disk space caching [ 663.989073][T21435] BTRFS info (device loop5): disk space caching is enabled [ 664.521439][T21435] BTRFS info (device loop5): rebuilding free space tree [ 664.595606][T21435] BTRFS info (device loop5): disabling free space tree [ 664.612647][T21435] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 664.639481][T21435] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 664.767829][T21435] BTRFS warning (device loop5): can't clear the compat:0 feature bit while mounted [ 664.785115][T21511] netlink: 'syz.2.7291': attribute type 10 has an invalid length. [ 664.872896][T21511] team0: Device bond0 is already an upper device of the team interface [ 664.948342][T13036] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 665.081204][T21479] loop6: detected capacity change from 0 to 32768 [ 665.155081][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.161523][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.488424][T21479] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 665.688433][T13135] ocfs2: Unmounting device (7,6) on (node local) [ 666.003150][T21543] ubi31: attaching mtd0 [ 666.040074][T21543] ubi31: scanning is finished [ 666.044820][T21543] ubi31: empty MTD device detected [ 666.307367][T21543] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 666.333307][T21543] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 666.361508][T21543] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 666.438799][T21543] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 666.460125][T21543] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 666.482479][T21543] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 666.530504][T21543] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2333284893 [ 666.568236][T21566] bridge0: port 3(macvlan0) entered blocking state [ 666.574344][T21543] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 666.575109][T21566] bridge0: port 3(macvlan0) entered disabled state [ 666.627906][T21554] ubi31: background thread "ubi_bgt31d" started, PID 21554 [ 666.649428][T21566] device macvlan0 entered promiscuous mode [ 666.810951][ T4294] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 667.020012][ T4294] usb 7-1: Using ep0 maxpacket: 32 [ 667.026925][ T4294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.048258][ T4294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.075884][ T4294] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.119690][ T4294] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 667.130758][ T4294] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 667.140145][ T4294] usb 7-1: Product: syz [ 667.144798][ T4294] usb 7-1: Manufacturer: syz [ 667.149415][ T4294] usb 7-1: SerialNumber: syz [ 667.175206][ T4294] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input35 [ 667.273178][T21560] loop1: detected capacity change from 0 to 32768 [ 667.312916][T21586] device batadv1 entered promiscuous mode [ 667.362184][ T4294] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 667.412120][T21595] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7329'. [ 667.421386][ T7] usb 7-1: USB disconnect, device number 17 [ 667.421435][T21560] XFS (loop1): Mounting V5 Filesystem [ 667.467577][ T7] appletouch 7-1:1.0: input: appletouch disconnected [ 667.571700][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 667.578907][ T4294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 667.588395][T21560] XFS (loop1): Ending clean mount [ 667.591931][ T4294] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 667.604028][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7331'. [ 667.624488][T21560] XFS (loop1): Quotacheck needed: Please wait. [ 667.633738][ T4294] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 667.678547][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.700341][T21560] XFS (loop1): Quotacheck: Done. [ 667.708508][ T4294] usb 3-1: Product: syz [ 667.712729][ T4294] usb 3-1: Manufacturer: syz [ 667.768669][ T4249] XFS (loop1): Unmounting Filesystem [ 667.768797][ T4294] usb 3-1: SerialNumber: syz [ 668.015431][ T4294] usb 3-1: Limiting number of CPorts to U8_MAX [ 668.025338][ T4294] usb 3-1: Not enough endpoints found in device, aborting! [ 668.090969][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7337'. [ 668.133890][T21615] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7337'. [ 668.238442][ T4424] usb 3-1: USB disconnect, device number 82 [ 668.322803][T21619] loop4: detected capacity change from 0 to 2048 [ 668.390159][T21619] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 668.399480][T21619] UDF-fs: Scanning with blocksize 512 failed [ 668.444489][T21619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.718310][T21625] loop6: detected capacity change from 0 to 32768 [ 669.170280][T21643] loop2: detected capacity change from 0 to 8192 [ 669.243376][T21643] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 669.277775][T21643] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 669.314665][T21643] REISERFS (device loop2): using ordered data mode [ 669.327611][T21643] reiserfs: using flush barriers [ 669.376796][T21643] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 669.439130][T21643] REISERFS (device loop2): checking transaction log (loop2) [ 669.516594][T21643] REISERFS (device loop2): Using r5 hash to sort names [ 669.530472][T21643] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 669.580353][T21643] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 669.916508][T21666] SET target dimension over the limit! [ 669.930992][T21668] netlink: 'syz.2.7362': attribute type 30 has an invalid length. [ 669.958565][T21670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7364'. [ 670.182417][T21676] netlink: 'syz.2.7366': attribute type 12 has an invalid length. [ 670.211430][T21676] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7366'. [ 670.689269][T21664] loop4: detected capacity change from 0 to 32768 [ 670.818752][T21664] XFS (loop4): Mounting V5 Filesystem [ 670.919223][T21664] XFS (loop4): Ending clean mount [ 670.928665][T21664] XFS (loop4): Quotacheck needed: Please wait. [ 671.203947][T21664] XFS (loop4): Quotacheck: Done. [ 671.399210][ T4251] XFS (loop4): Unmounting Filesystem [ 671.697177][T21725] loop6: detected capacity change from 0 to 256 [ 671.827137][T21706] loop2: detected capacity change from 0 to 32768 [ 671.972853][T21706] XFS (loop2): Mounting V5 Filesystem [ 672.135163][T21706] XFS (loop2): Ending clean mount [ 672.173654][T21706] XFS (loop2): Quotacheck needed: Please wait. [ 672.175271][T21740] loop5: detected capacity change from 0 to 1024 [ 672.231395][T18642] hfsplus: b-tree write err: -5, ino 4 [ 672.267930][T21706] XFS (loop2): Quotacheck: Done. [ 672.420688][T21746] overlayfs: missing 'lowerdir' [ 672.452921][ T4258] XFS (loop2): Unmounting Filesystem [ 672.593727][T21750] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7396'. [ 672.713587][T21754] netlink: 'syz.5.7398': attribute type 10 has an invalid length. [ 672.834431][T21754] team0: Device bond0 is already an upper device of the team interface [ 673.000054][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7401'. [ 673.256150][T21771] netlink: 'syz.5.7406': attribute type 10 has an invalid length. [ 673.295920][T21771] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7406'. [ 673.324006][T21771] device team0 entered promiscuous mode [ 673.352923][T21771] device team_slave_0 entered promiscuous mode [ 673.371249][T21771] device team_slave_1 entered promiscuous mode [ 673.397706][T21771] device wlan1 entered promiscuous mode [ 673.429060][T21771] bond0: (slave team0): Releasing backup interface [ 673.469648][T21771] bridge0: port 3(team0) entered blocking state [ 673.496605][T21771] bridge0: port 3(team0) entered disabled state [ 673.846649][T21798] netlink: 'syz.6.7418': attribute type 2 has an invalid length. [ 673.903548][T21803] loop5: detected capacity change from 0 to 256 [ 673.980573][T21803] FAT-fs (loop5): Directory bread(block 64) failed [ 674.016635][T21803] FAT-fs (loop5): Directory bread(block 65) failed [ 674.056959][T21803] FAT-fs (loop5): Directory bread(block 66) failed [ 674.070572][T21803] FAT-fs (loop5): Directory bread(block 67) failed [ 674.107902][T21803] FAT-fs (loop5): Directory bread(block 68) failed [ 674.127366][T21803] FAT-fs (loop5): Directory bread(block 69) failed [ 674.172840][T21803] FAT-fs (loop5): Directory bread(block 70) failed [ 674.194702][T21803] FAT-fs (loop5): Directory bread(block 71) failed [ 674.220562][T21803] FAT-fs (loop5): Directory bread(block 72) failed [ 674.260824][T21803] FAT-fs (loop5): Directory bread(block 73) failed [ 674.371816][T21803] FAT-fs (loop5): Filesystem has been set read-only [ 674.425368][T21811] loop6: detected capacity change from 0 to 4096 [ 674.441270][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 674.441288][ T26] audit: type=1800 audit(1750787670.703:113): pid=21803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7420" name="cpu.stat" dev="loop5" ino=1048684 res=0 errno=0 [ 674.470305][T21811] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 674.481399][T21814] loop2: detected capacity change from 0 to 8 [ 674.499409][T21803] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006c61) [ 674.534028][T21814] cramfs: Error -3 while decompressing! [ 674.538239][ T4350] udevd[4350]: incorrect cramfs checksum on /dev/loop2 [ 674.543763][T21814] cramfs: ffffffff96b50568(26)->ffff888051c69000(4096) [ 674.573555][T21814] cramfs: Error -3 while decompressing! [ 674.574063][T21811] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 674.593412][T21814] cramfs: ffffffff96b50582(26)->ffff88804e05a000(4096) [ 674.598085][T21793] loop4: detected capacity change from 0 to 32768 [ 674.613287][T21814] cramfs: Error -3 while decompressing! [ 674.624474][T21811] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 674.639808][T21814] cramfs: ffffffff96b5059c(16)->ffff88804e05b000(4096) [ 674.660921][T21793] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 674.675540][ T4350] udevd[4350]: incorrect cramfs checksum on /dev/loop2 [ 674.697924][T21811] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 674.706650][T21814] cramfs: Error -3 while decompressing! [ 674.740249][T21814] cramfs: ffffffff96b50568(26)->ffff888051c69000(4096) [ 674.985132][T21801] loop1: detected capacity change from 0 to 32768 [ 675.011070][T21801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7419 (21801) [ 675.067225][ T5070] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 675.085160][T21801] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 675.139249][T21801] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 675.185761][T21801] BTRFS info (device loop1): force clearing of disk cache [ 675.213825][T21801] BTRFS info (device loop1): enabling auto defrag [ 675.242900][ T7792] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 675.250829][T21801] BTRFS info (device loop1): max_inline at 0 [ 675.272046][T21801] BTRFS info (device loop1): enabling disk space caching [ 675.279133][T21801] BTRFS info (device loop1): disk space caching is enabled [ 675.286348][T21830] loop6: detected capacity change from 0 to 512 [ 675.330766][T21830] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 675.445174][ T7792] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 675.445896][T21830] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.7434: corrupted in-inode xattr [ 675.458747][ T7792] usb 5-1: config 0 has no interface number 0 [ 675.497644][T21830] EXT4-fs (loop6): Remounting filesystem read-only [ 675.507480][T21830] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.7434: couldn't read orphan inode 15 (err -117) [ 675.532780][ T7792] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 675.535411][ T26] audit: type=1326 audit(1750787671.857:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24d98e929 code=0x7ffc0000 [ 675.562609][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.564682][T21830] EXT4-fs (loop6): Remounting filesystem read-only [ 675.608432][ T7792] usb 5-1: Product: syz [ 675.612695][ T7792] usb 5-1: Manufacturer: syz [ 675.621222][T21830] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 675.623249][ T7792] usb 5-1: SerialNumber: syz [ 675.646683][ T7792] usb 5-1: config 0 descriptor?? [ 675.652615][ T26] audit: type=1326 audit(1750787671.857:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24d98e929 code=0x7ffc0000 [ 675.661428][T21801] BTRFS info (device loop1): enabling ssd optimizations [ 675.741391][T21801] BTRFS info (device loop1): rebuilding free space tree [ 675.755465][ T26] audit: type=1326 audit(1750787671.920:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa24d98e929 code=0x7ffc0000 [ 675.780122][ T26] audit: type=1326 audit(1750787671.920:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24d98e929 code=0x7ffc0000 [ 675.791855][T13135] EXT4-fs (loop6): unmounting filesystem. [ 675.802519][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.803709][ T26] audit: type=1326 audit(1750787671.920:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21842 comm="syz.5.7436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24d98e929 code=0x7ffc0000 [ 675.837389][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.844208][T21801] BTRFS info (device loop1): disabling free space tree [ 675.851166][T21801] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 675.910125][T21801] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 676.196854][ T7792] usb 5-1: USB disconnect, device number 85 [ 676.208594][ T7792] f81534a_ctrl 5-1:0.194: failed to set register 0x116: -19 [ 676.219171][ T4249] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 676.237873][ T7792] f81534a_ctrl 5-1:0.194: failed to enable ports: -19 [ 676.452364][T21877] loop5: detected capacity change from 0 to 8 [ 676.524025][T21877] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.622470][T21875] loop6: detected capacity change from 0 to 4096 [ 676.634396][T21877] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.652953][T21875] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 676.670698][T21877] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.681076][T21877] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.706690][T21877] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.716307][T21875] ntfs3: loop6: Failed to load $Extend. [ 676.737063][ T26] audit: type=1800 audit(1750787673.117:119): pid=21877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7447" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 676.756668][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.232969][T21898] x_tables: ip_tables: osf match: only valid for protocol 6 [ 677.534082][T21914] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 677.720057][ T26] audit: type=1326 audit(1750787674.145:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.1.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3698e929 code=0x7ffc0000 [ 677.742458][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.799052][ T26] audit: type=1326 audit(1750787674.145:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.1.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3698e929 code=0x7ffc0000 [ 677.821528][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.887112][ T26] audit: type=1326 audit(1750787674.177:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.1.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7ffa3698e929 code=0x7ffc0000 [ 678.302098][T21947] netlink: 'syz.2.7481': attribute type 10 has an invalid length. [ 678.331168][T21947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7481'. [ 678.353979][T21947] device team0 entered promiscuous mode [ 678.370986][T21947] device team_slave_0 entered promiscuous mode [ 678.390429][T21947] device team_slave_1 entered promiscuous mode [ 678.401286][T21952] loop4: detected capacity change from 0 to 1024 [ 678.408317][T21947] bond0: (slave team0): Releasing backup interface [ 678.449352][T21947] bridge0: port 4(team0) entered blocking state [ 678.465167][T21947] bridge0: port 4(team0) entered disabled state [ 678.482223][T21948] netlink: 'syz.1.7482': attribute type 24 has an invalid length. [ 678.666914][T21956] loop5: detected capacity change from 0 to 1024 [ 678.748347][T21924] loop6: detected capacity change from 0 to 32768 [ 678.834560][T21956] hfsplus: extend alloc file! (8192,512,16777721) [ 678.871069][T21924] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.920380][T21965] loop4: detected capacity change from 0 to 256 [ 678.949802][T21924] lbmIODone: I/O error in JFS log [ 678.955884][T21924] *** Log Format Error ! *** [ 678.992784][T21924] lmLogInit: exit(-22) [ 679.021342][T21924] lmLogOpen: exit(-22) [ 679.412575][T21982] netlink: 'syz.5.7499': attribute type 1 has an invalid length. [ 679.835614][T21999] UBIFS error (pid: 21999): cannot open "(null)", error -22 [ 680.252155][T21993] loop5: detected capacity change from 0 to 32768 [ 680.273155][ T7792] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 680.335445][T21993] __jfs_setxattr: xattr_size = 74, new_size = 12053 [ 680.455377][ T7792] usb 5-1: Using ep0 maxpacket: 8 [ 680.467192][ T7792] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 680.519441][ T7792] usb 5-1: config 0 interface 0 has no altsetting 0 [ 680.543541][ T7792] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 680.575348][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.603645][ T7792] usb 5-1: Product: syz [ 680.622358][ T7792] usb 5-1: Manufacturer: syz [ 680.636510][ T7792] usb 5-1: SerialNumber: syz [ 680.647942][ T7792] usb 5-1: config 0 descriptor?? [ 680.677338][ T7792] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 680.860969][ T7792] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 680.880455][ T7792] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 680.941402][T22029] netlink: 'syz.6.7521': attribute type 10 has an invalid length. [ 680.975661][T22029] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7521'. [ 680.992815][T22032] loop5: detected capacity change from 0 to 1024 [ 681.000429][T22029] device team0 entered promiscuous mode [ 681.006164][T22033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7524'. [ 681.038522][T22029] device team_slave_0 entered promiscuous mode [ 681.064440][ T7792] usb 5-1: USB disconnect, device number 86 [ 681.072449][T22029] device team_slave_1 entered promiscuous mode [ 681.107645][T22029] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.127656][T22029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 681.397368][T22044] loop6: detected capacity change from 0 to 1024 [ 681.464342][T22044] hfsplus: extend alloc file! (8192,512,16777721) [ 681.665481][ T4716] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 681.864961][ T4716] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 681.884993][ T4716] usb 6-1: config 220 has an invalid descriptor of length 127, skipping remainder of the config [ 681.926405][ T4716] usb 6-1: config 220 has no interface number 2 [ 681.943800][ T4716] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 681.947528][T22063] loop6: detected capacity change from 0 to 512 [ 681.970047][T22065] netlink: 'syz.1.7540': attribute type 10 has an invalid length. [ 681.979717][T22063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 681.988469][ T4716] usb 6-1: config 220 interface 0 has no altsetting 0 [ 681.995690][T22065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7540'. [ 682.011438][ T4716] usb 6-1: config 220 interface 76 has no altsetting 0 [ 682.020761][T22063] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 682.027973][T22065] device team0 entered promiscuous mode [ 682.033016][T22063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 682.034303][ T4716] usb 6-1: config 220 interface 1 has no altsetting 0 [ 682.052627][T22063] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 682.056574][T22065] device wlan1 entered promiscuous mode [ 682.062465][T22063] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 682.085517][T22065] bond0: (slave team0): Releasing backup interface [ 682.094010][ T4716] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 682.122144][ T4716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.137489][T22063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 682.149475][ T4716] usb 6-1: Product: syz [ 682.169315][ T4716] usb 6-1: Manufacturer: syz [ 682.179993][ T4716] usb 6-1: SerialNumber: syz [ 682.204556][T22063] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 682.219974][T22070] netlink: 'syz.2.7542': attribute type 1 has an invalid length. [ 682.235008][T22070] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7542'. [ 682.244846][T22065] bridge0: port 3(team0) entered blocking state [ 682.267475][T22065] bridge0: port 3(team0) entered disabled state [ 682.301120][T13135] EXT4-fs (loop6): unmounting filesystem. [ 682.380352][ T7791] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 682.445469][ T4716] usb 6-1: selecting invalid altsetting 0 [ 682.459495][ T4716] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 682.476206][ T4716] usb 6-1: No valid video chain found. [ 682.521295][ T4716] usb 6-1: selecting invalid altsetting 0 [ 682.529043][ T4716] usbtest: probe of 6-1:220.1 failed with error -22 [ 682.557172][T22078] loop6: detected capacity change from 0 to 512 [ 682.559721][ T4716] usb 6-1: USB disconnect, device number 19 [ 682.586141][T22078] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 682.603352][T22078] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 682.603793][ T7791] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 682.642605][T22078] EXT4-fs (loop6): group descriptors corrupted! [ 682.674656][ T7791] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 682.694276][ T7791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.732157][ T7791] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 682.756046][ T7791] usb 5-1: No valid video chain found. [ 682.931113][ T4294] usb 5-1: USB disconnect, device number 87 [ 683.359209][T22100] loop6: detected capacity change from 0 to 64 [ 683.425305][T22102] loop2: detected capacity change from 0 to 512 [ 683.533323][T22102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 683.572241][T22102] ext4 filesystem being mounted at /1533/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.764907][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 683.840569][T22107] loop6: detected capacity change from 0 to 32768 [ 683.887572][T22107] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 683.900511][ T4260] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 683.911805][ T4260] CPU: 0 PID: 4260 Comm: kworker/u5:3 Not tainted 6.1.141-syzkaller #0 [ 683.920078][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.930154][ T4260] Workqueue: hci4 hci_rx_work [ 683.934865][ T4260] Call Trace: [ 683.938151][ T4260] [ 683.941091][ T4260] dump_stack_lvl+0x168/0x22e [ 683.945818][ T4260] ? show_regs_print_info+0x12/0x12 [ 683.951047][ T4260] ? load_image+0x3b0/0x3b0 [ 683.955583][ T4260] sysfs_create_dir_ns+0x252/0x280 [ 683.960720][ T4260] ? hci_rx_work+0x3eb/0xd40 [ 683.965335][ T4260] ? sysfs_warn_dup+0xa0/0xa0 [ 683.970032][ T4260] ? do_raw_spin_unlock+0x11d/0x230 [ 683.975239][ T4260] kobject_add_internal+0x6b8/0xc80 [ 683.980436][ T4260] kobject_add+0x152/0x210 [ 683.984853][ T4260] ? kobject_init+0x1d0/0x1d0 [ 683.989535][ T4260] ? klist_children_get+0x50/0x50 [ 683.994558][ T4260] ? get_device_parent+0x121/0x3f0 [ 683.999684][ T4260] device_add+0x483/0xfb0 [ 684.004032][ T4260] ? kmem_cache_free+0xf7/0x290 [ 684.008917][ T4260] hci_conn_add_sysfs+0xd1/0x1e0 [ 684.013878][ T4260] le_conn_complete_evt+0xd1d/0x1320 [ 684.019178][ T4260] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 684.025420][ T4260] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 684.031057][ T4260] ? skb_pull_data+0xf7/0x200 [ 684.035735][ T4260] hci_le_enh_conn_complete_evt+0x185/0x460 [ 684.041625][ T4260] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 684.048044][ T4260] ? hci_remote_host_features_evt+0x270/0x270 [ 684.054116][ T4260] hci_event_packet+0x791/0x1210 [ 684.059062][ T4260] ? bis_list+0x280/0x280 [ 684.063387][ T4260] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 684.069282][ T4260] ? kcov_remote_start+0x4c7/0x7e0 [ 684.074394][ T4260] ? lec_tx_timeout+0xc0/0x1c0 [ 684.079160][ T4260] ? hci_send_to_monitor+0x9c/0x4a0 [ 684.084358][ T4260] hci_rx_work+0x3eb/0xd40 [ 684.088769][ T4260] ? _raw_spin_unlock+0x40/0x40 [ 684.093620][ T4260] ? process_one_work+0x7a1/0x1160 [ 684.098722][ T4260] process_one_work+0x898/0x1160 [ 684.103663][ T4260] ? worker_detach_from_pool+0x240/0x240 [ 684.109291][ T4260] ? _raw_spin_lock_irq+0xab/0xe0 [ 684.114312][ T4260] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 684.119683][ T4260] ? kthread_data+0x4b/0xc0 [ 684.124186][ T4260] worker_thread+0xaa2/0x1250 [ 684.128878][ T4260] kthread+0x29d/0x330 [ 684.132948][ T4260] ? worker_clr_flags+0x1a0/0x1a0 [ 684.137967][ T4260] ? kthread_blkcg+0xd0/0xd0 [ 684.142559][ T4260] ret_from_fork+0x1f/0x30 [ 684.146981][ T4260] [ 684.150678][ T4260] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 684.160556][T22092] loop5: detected capacity change from 0 to 32768 [ 684.163980][ T4260] Bluetooth: hci4: failed to register connection device [ 684.231866][T22116] dlm: Unknown command passed to DLM device : 0 [ 684.231866][T22116] [ 684.464513][T22092] XFS (loop5): Mounting V5 Filesystem [ 684.629454][T22092] XFS (loop5): Ending clean mount [ 684.671976][ T4350] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 684.687605][T22092] XFS (loop5): Quotacheck needed: Please wait. [ 684.693146][T22140] loop1: detected capacity change from 0 to 512 [ 684.766432][T22140] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 684.797443][T22140] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 684.838091][T22140] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 684.848680][T22092] XFS (loop5): Quotacheck: Done. [ 684.906460][T22140] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 684.984041][T22140] System zones: 0-2, 18-18, 34-35 [ 684.988246][T13036] XFS (loop5): Unmounting Filesystem [ 685.037747][T22140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 685.203187][ T4260] Bluetooth: hci2: command 0x0405 tx timeout [ 685.336044][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 685.452754][T22162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7582'. [ 685.627225][T22166] loop4: detected capacity change from 0 to 1024 [ 685.729106][T22166] EXT4-fs (loop4): orphan cleanup on readonly fs [ 685.823385][T22175] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7589'. [ 685.863282][T22166] EXT4-fs (loop4): 1 truncate cleaned up [ 685.917571][T22166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 686.082683][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 686.266641][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7599'. [ 686.796183][T22222] loop2: detected capacity change from 0 to 64 [ 687.065979][T22231] loop6: detected capacity change from 0 to 1024 [ 687.192661][ T7792] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 687.236417][T18645] hfsplus: b-tree write err: -5, ino 4 [ 687.299968][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7619'. [ 687.372068][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 687.372083][ T26] audit: type=1326 audit(1750787684.272:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22245 comm="syz.2.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 687.411209][ T7792] usb 6-1: Using ep0 maxpacket: 16 [ 687.418016][ T7792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 687.452270][ T7792] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 687.504971][ T26] audit: type=1326 audit(1750787684.272:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22245 comm="syz.2.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 687.510203][ T7792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.527917][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7623'. [ 687.577352][ T7792] usb 6-1: Product: syz [ 687.578472][ T26] audit: type=1326 audit(1750787684.366:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22245 comm="syz.2.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 687.591461][ T7792] usb 6-1: Manufacturer: syz [ 687.614473][T22252] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 687.638208][T22252] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 687.649808][ T7792] usb 6-1: SerialNumber: syz [ 687.669890][ T7792] usb 6-1: config 0 descriptor?? [ 687.678226][ T26] audit: type=1326 audit(1750787684.366:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22245 comm="syz.2.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 687.688960][ T7792] hub 6-1:0.0: bad descriptor, ignoring hub [ 687.730413][ T7792] hub: probe of 6-1:0.0 failed with error -5 [ 687.759479][ T7792] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 687.805808][ T26] audit: type=1326 audit(1750787684.366:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22245 comm="syz.2.7621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 688.009094][T22266] loop2: detected capacity change from 0 to 256 [ 688.025952][T22268] xt_limit: Overflow, try lower: 65536/2147483648 [ 688.076419][T22266] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 688.174850][T22266] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 688.180286][T22272] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.332325][T22270] loop6: detected capacity change from 0 to 4096 [ 688.361131][T22270] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 688.406527][T22278] loop1: detected capacity change from 0 to 256 [ 688.431856][T22270] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 688.470759][T22270] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 688.510515][T22270] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 688.555572][T22270] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 688.605127][T22270] ntfs: volume version 3.1. [ 688.618056][T22278] FAT-fs (loop1): Directory bread(block 64) failed [ 688.629444][T22284] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 688.647881][T22278] FAT-fs (loop1): Directory bread(block 65) failed [ 688.664580][T22278] FAT-fs (loop1): Directory bread(block 66) failed [ 688.688713][T22278] FAT-fs (loop1): Directory bread(block 67) failed [ 688.697916][T22284] overlayfs: overlapping lowerdir path [ 688.735622][T22278] FAT-fs (loop1): Directory bread(block 68) failed [ 688.775563][T22278] FAT-fs (loop1): Directory bread(block 69) failed [ 688.782777][T22278] FAT-fs (loop1): Directory bread(block 70) failed [ 688.805625][T22278] FAT-fs (loop1): Directory bread(block 71) failed [ 688.850929][T22278] FAT-fs (loop1): Directory bread(block 72) failed [ 688.879531][T22278] FAT-fs (loop1): Directory bread(block 73) failed [ 689.155811][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7647'. [ 689.423908][ T7792] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 689.633520][ T7792] usb 3-1: Using ep0 maxpacket: 16 [ 689.647746][ T7792] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 689.696922][ T7792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.715191][ T7792] usb 3-1: Product: syz [ 689.725099][ T7792] usb 3-1: Manufacturer: syz [ 689.734965][ T7792] usb 3-1: SerialNumber: syz [ 689.754556][ T7792] r8152-cfgselector 3-1: config 0 descriptor?? [ 689.887543][T22334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7665'. [ 689.923762][T22334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7665'. [ 689.981606][T22336] device ip6gretap1 entered promiscuous mode [ 690.148912][T22344] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7669'. [ 690.171632][ T7792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 690.193879][ T7792] r8152-cfgselector 3-1: bad CDC descriptors [ 690.221572][ T7792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 690.247100][ T7792] r8152-cfgselector 3-1: USB disconnect, device number 83 [ 690.474997][T22358] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7677'. [ 690.531260][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7678'. [ 691.013538][T22386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7691'. [ 691.058604][T22386] unsupported nlmsg_type 40 [ 691.377399][T22402] loop2: detected capacity change from 0 to 256 [ 691.452636][T22402] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 691.689469][T22412] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 691.709713][T22414] loop2: detected capacity change from 0 to 256 [ 691.769014][T22414] FAT-fs (loop2): Directory bread(block 64) failed [ 691.795584][T22414] FAT-fs (loop2): Directory bread(block 65) failed [ 691.812353][T22414] FAT-fs (loop2): Directory bread(block 66) failed [ 691.830797][T22414] FAT-fs (loop2): Directory bread(block 67) failed [ 691.865862][T22414] FAT-fs (loop2): Directory bread(block 68) failed [ 691.872597][T22414] FAT-fs (loop2): Directory bread(block 69) failed [ 691.886921][T22414] FAT-fs (loop2): Directory bread(block 70) failed [ 691.898746][T22414] FAT-fs (loop2): Directory bread(block 71) failed [ 691.934047][T22414] FAT-fs (loop2): Directory bread(block 72) failed [ 691.953970][T22414] FAT-fs (loop2): Directory bread(block 73) failed [ 692.419618][ T4260] Bluetooth: hci4: unexpected cc 0x0c5b length: 5 > 1 [ 692.479494][ T4716] usb 6-1: USB disconnect, device number 20 [ 692.488844][T22446] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 692.557416][T22446] overlayfs: overlapping lowerdir path [ 693.085608][T22470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7732'. [ 693.129363][T22470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7732'. [ 693.254886][T22449] loop4: detected capacity change from 0 to 32768 [ 693.299906][T22449] JBD2: Ignoring recovery information on journal [ 693.320217][ T4716] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 693.371088][T22449] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 693.417125][T22480] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 693.433766][T22480] overlayfs: overlapping lowerdir path [ 693.508450][ T4716] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 693.527824][ T4716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.566523][ T4716] usb 3-1: Product: syz [ 693.570828][ T4716] usb 3-1: Manufacturer: syz [ 693.589188][T22460] loop1: detected capacity change from 0 to 32768 [ 693.595865][ T4716] usb 3-1: SerialNumber: syz [ 693.619048][ T4716] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 693.629651][T22460] (syz.1.7728,22460,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 693.648757][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 693.689784][ T4715] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 693.756136][T22460] (syz.1.7728,22460,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 693.856834][T22460] JBD2: Ignoring recovery information on journal [ 693.886632][ C1] usb 3-1: ath9k_htc: invalid pkt_len (ffa5) [ 694.028606][T22460] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 694.045822][T22488] block device autoloading is deprecated and will be removed. [ 694.113369][ T7792] usb 3-1: USB disconnect, device number 84 [ 694.132303][T22460] ocfs2: Unmounting device (7,1) on (node local) [ 694.222864][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7746'. [ 694.252506][T22498] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7746'. [ 694.272287][T22498] netlink: 'syz.5.7746': attribute type 3 has an invalid length. [ 694.283350][T22498] netlink: 'syz.5.7746': attribute type 2 has an invalid length. [ 694.291178][T22498] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7746'. [ 694.411336][T22505] loop4: detected capacity change from 0 to 64 [ 694.472699][T22508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7750'. [ 694.649620][T22511] loop6: detected capacity change from 0 to 1024 [ 694.740092][ T4715] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 694.747453][ T4715] ath9k_htc: Failed to initialize the device [ 694.751223][T22516] loop5: detected capacity change from 0 to 1764 [ 694.782586][ T7792] usb 3-1: ath9k_htc: USB layer deinitialized [ 695.008011][T22527] overlayfs: missing 'workdir' [ 695.022092][T22528] loop2: detected capacity change from 0 to 1024 [ 695.386031][T22544] netlink: 'syz.4.7768': attribute type 2 has an invalid length. [ 695.630180][T22552] loop4: detected capacity change from 0 to 1024 [ 695.787771][T22561] loop5: detected capacity change from 0 to 256 [ 695.850409][T22561] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 696.085907][T22573] loop1: detected capacity change from 0 to 256 [ 696.092964][T22573] exfat: Deprecated parameter 'namecase' [ 696.101337][T22576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7783'. [ 696.105851][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 696.105864][ T26] audit: type=1326 audit(1750787693.444:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 696.169538][T22573] exfat: Deprecated parameter 'utf8' [ 696.237136][T22573] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 696.273165][ T26] audit: type=1326 audit(1750787693.485:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 696.358797][T22583] loop4: detected capacity change from 0 to 8 [ 696.394967][ T26] audit: type=1326 audit(1750787693.485:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 696.502708][ T26] audit: type=1326 audit(1750787693.485:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 696.581685][ T26] audit: type=1326 audit(1750787693.485:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.2.7784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e318e929 code=0x7ffc0000 [ 696.769646][T22597] xt_nfacct: accounting object `syz0' does not exists [ 697.284130][T22617] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 697.284164][ T4300] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 697.294976][T22586] loop2: detected capacity change from 0 to 32768 [ 697.390737][T22586] jfs_mkdir: dtInsert returned -EIO [ 697.420052][T22586] ERROR: (device loop2): jfs_mkdir: [ 697.420052][T22586] [ 697.456017][T22586] ERROR: (device loop2): remounting filesystem as read-only [ 697.482043][T22624] xt_l2tp: v2 doesn't support IP mode [ 697.493918][ T4300] usb 5-1: Using ep0 maxpacket: 16 [ 697.500819][ T4300] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 697.551065][ T4300] usb 5-1: config 0 has no interface number 0 [ 697.557218][ T4300] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.601478][T22627] loop5: detected capacity change from 0 to 256 [ 697.620872][ T4300] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 697.657286][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 697.689794][T22627] FAT-fs (loop5): Directory bread(block 64) failed [ 697.696484][ T4300] usb 5-1: Product: syz [ 697.700699][ T4300] usb 5-1: SerialNumber: syz [ 697.718011][T22627] FAT-fs (loop5): Directory bread(block 65) failed [ 697.733212][ T4300] usb 5-1: config 0 descriptor?? [ 697.759161][ T4300] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input38 [ 697.770016][T22627] FAT-fs (loop5): Directory bread(block 66) failed [ 697.776575][T22627] FAT-fs (loop5): Directory bread(block 67) failed [ 697.837093][T22627] FAT-fs (loop5): Directory bread(block 68) failed [ 697.852957][T22627] FAT-fs (loop5): Directory bread(block 69) failed [ 697.892678][T22627] FAT-fs (loop5): Directory bread(block 70) failed [ 697.920778][T22636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7814'. [ 697.937005][T22627] FAT-fs (loop5): Directory bread(block 71) failed [ 697.954382][ T7792] usb 5-1: USB disconnect, device number 88 [ 697.954854][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 697.967640][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 697.979127][ T7792] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 697.980920][T22627] FAT-fs (loop5): Directory bread(block 72) failed [ 698.011054][T22627] FAT-fs (loop5): Directory bread(block 73) failed [ 698.212419][T22642] loop1: detected capacity change from 0 to 164 [ 698.291151][T22642] rock: directory entry would overflow storage [ 698.306456][T22642] rock: sig=0x66, size=4, remaining=3 [ 698.589397][ T4294] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 698.638181][T22656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7823'. [ 698.675857][T22660] tmpfs: Bad value for 'mpol' [ 698.777788][ T4294] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 698.807799][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.843593][ T4294] usb 2-1: config 0 descriptor?? [ 698.864673][ T4294] usb 2-1: selecting invalid altsetting 1 [ 698.891579][ T4294] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 698.974815][ T4329] udevd[4329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.001712][T22675] netlink: 'syz.6.7831': attribute type 9 has an invalid length. [ 699.028025][T22675] netlink: 'syz.6.7831': attribute type 7 has an invalid length. [ 699.035822][T22675] netlink: 'syz.6.7831': attribute type 8 has an invalid length. [ 699.056345][ T4294] usb 2-1: USB disconnect, device number 59 [ 699.094905][T22675] netlink: 'syz.6.7831': attribute type 13 has an invalid length. [ 699.440918][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7838'. [ 699.490906][T22693] loop2: detected capacity change from 0 to 256 [ 699.613527][T22696] device netdevsim0 entered promiscuous mode [ 699.650362][T22696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 699.733619][ T7792] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 699.924209][ T7792] usb 5-1: Using ep0 maxpacket: 16 [ 699.940187][ T7792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 699.983220][ T7792] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 700.015059][ T7792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.024276][ T7792] usb 5-1: Product: syz [ 700.034038][ T7792] usb 5-1: Manufacturer: syz [ 700.053509][ T7792] usb 5-1: SerialNumber: syz [ 700.060605][T22713] loop1: detected capacity change from 0 to 256 [ 700.077391][ T7792] usb 5-1: config 0 descriptor?? [ 700.089389][ T7792] hub 5-1:0.0: bad descriptor, ignoring hub [ 700.117378][ T7792] hub: probe of 5-1:0.0 failed with error -5 [ 700.130021][ T7792] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 700.155216][T22713] FAT-fs (loop1): Directory bread(block 64) failed [ 700.165863][T22713] FAT-fs (loop1): Directory bread(block 65) failed [ 700.221654][T22713] FAT-fs (loop1): Directory bread(block 66) failed [ 700.228238][T22713] FAT-fs (loop1): Directory bread(block 67) failed [ 700.278850][T22713] FAT-fs (loop1): Directory bread(block 68) failed [ 700.285435][T22713] FAT-fs (loop1): Directory bread(block 69) failed [ 700.322418][T22713] FAT-fs (loop1): Directory bread(block 70) failed [ 700.332138][T22713] FAT-fs (loop1): Directory bread(block 71) failed [ 700.354107][T22713] FAT-fs (loop1): Directory bread(block 72) failed [ 700.360692][T22713] FAT-fs (loop1): Directory bread(block 73) failed [ 700.686525][ T7] usb 5-1: USB disconnect, device number 89 [ 700.697731][T22727] loop5: detected capacity change from 0 to 4096 [ 700.736131][T22727] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 700.868146][T22727] ntfs3: loop5: failed to convert "c46c" to cp874 [ 701.256462][T22717] loop2: detected capacity change from 0 to 40427 [ 701.302747][T22746] netlink: 212168 bytes leftover after parsing attributes in process `syz.6.7867'. [ 701.333365][T22750] loop5: detected capacity change from 0 to 256 [ 701.350790][T22717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 701.529466][T22717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 701.605799][T22746] syz.6.7867 (22746) used greatest stack depth: 18176 bytes left [ 701.943780][T22743] loop1: detected capacity change from 0 to 32768 [ 702.006253][T22743] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 702.067753][ T4294] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 702.081325][T22743] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 702.143929][ T7] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 702.179721][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 702.239298][ T4294] usb 7-1: Using ep0 maxpacket: 16 [ 702.252623][ T4294] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 702.281421][ T4294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.322096][ T4294] usb 7-1: config 0 descriptor?? [ 702.327303][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 702.338317][ T7] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 702.372235][ T4294] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 702.381376][ T7] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 702.414774][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 702.444234][ T7] usb 5-1: config 1 has no interface number 0 [ 702.456955][ T7] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 702.459925][T22757] loop5: detected capacity change from 0 to 32768 [ 702.481035][T22774] loop2: detected capacity change from 0 to 4096 [ 702.486552][ T7] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 702.526827][T22757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.7871 (22757) [ 702.542611][T22774] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 702.569331][T22774] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 702.593453][ T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 702.629125][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.631799][T22774] ntfs: (device loop2): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 702.687495][T22774] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 702.703833][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 702.715984][T22774] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 702.742506][T22774] ntfs: volume version 3.1. [ 702.760436][ T4294] gspca_sonixj: reg_r err -71 [ 702.768698][ T4294] sonixj: probe of 7-1:0.0 failed with error -71 [ 702.805774][ T4294] usb 7-1: USB disconnect, device number 18 [ 702.843975][T22757] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.864144][T22757] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 702.883433][T22757] BTRFS info (device loop5): using free space tree [ 702.895313][ T7] snd_usb_pod 5-1:1.1: invalid control EP [ 702.904007][ T7] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 702.917279][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 702.947432][ T7] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 703.109237][ T7] usb 5-1: USB disconnect, device number 90 [ 703.222490][T22757] BTRFS info (device loop5): enabling ssd optimizations [ 703.369274][T13036] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 703.444741][T22812] kAFS: unparsable volume name [ 703.484814][ T4350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (4350) [ 703.929644][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7895'. [ 704.193514][T22838] xt_cgroup: path and classid specified [ 704.206710][T22834] loop2: detected capacity change from 0 to 4096 [ 704.249952][T22834] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 704.440263][T22834] ntfs3: loop2: failed to convert "c46c" to macgreek [ 704.829131][T22862] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.7910'. [ 704.892658][T22862] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.7910'. [ 704.952545][T22868] delete_channel: no stack [ 705.097496][T22872] sctp: [Deprecated]: syz.4.7914 (pid 22872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.097496][T22872] Use struct sctp_sack_info instead [ 705.339837][T22876] loop6: detected capacity change from 0 to 4096 [ 705.393710][T22876] NILFS (loop6): invalid segment: Checksum error in segment payload [ 705.421346][T22876] NILFS (loop6): trying rollback from an earlier position [ 705.465633][T22876] NILFS (loop6): norecovery option specified, skipping roll-forward recovery [ 705.523877][T22876] NILFS (loop6): couldn't remount because the filesystem is in an incomplete recovery state [ 705.674813][T22864] loop1: detected capacity change from 0 to 32768 [ 705.718809][T22864] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7912 (22864) [ 705.793651][T22864] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 705.802132][ T52] block nbd4: Attempted send on invalid socket [ 705.810126][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.825690][T22864] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 705.840389][T22864] BTRFS info (device loop1): force clearing of disk cache [ 705.949054][T22864] BTRFS info (device loop1): setting nodatasum [ 705.955319][T22864] BTRFS info (device loop1): allowing degraded mounts [ 705.984663][T22864] BTRFS info (device loop1): use zlib compression, level 3 [ 706.003589][T22864] BTRFS info (device loop1): using free space tree [ 706.063680][T22900] xt_ecn: cannot match TCP bits for non-tcp packets [ 706.230165][T22884] loop5: detected capacity change from 0 to 32768 [ 706.243593][T22884] (syz.5.7921,22884,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 706.258885][T22884] (syz.5.7921,22884,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 706.350913][T22919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7932'. [ 706.374053][T22884] JBD2: Ignoring recovery information on journal [ 706.378364][T22919] tc_dump_action: action bad kind [ 706.409313][T22864] BTRFS info (device loop1): enabling ssd optimizations [ 706.536115][T22899] loop4: detected capacity change from 0 to 32768 [ 706.620781][ T4249] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 706.621915][T22884] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 706.736233][T22884] ocfs2: Unmounting device (7,5) on (node local) [ 706.841145][T22936] loop2: detected capacity change from 0 to 2048 [ 707.028840][T22936] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.210363][T22899] XFS (loop4): Mounting V5 Filesystem [ 707.307949][T22899] XFS (loop4): Ending clean mount [ 707.377117][T22899] XFS (loop4): Quotacheck needed: Please wait. [ 707.416181][T22956] loop1: detected capacity change from 0 to 256 [ 707.426705][ T26] audit: type=1326 audit(1750787705.323:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22954 comm="syz.6.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 707.534608][ T26] audit: type=1326 audit(1750787705.354:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22954 comm="syz.6.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 707.579131][T22899] XFS (loop4): Quotacheck: Done. [ 707.599975][T22956] FAT-fs (loop1): Directory bread(block 64) failed [ 707.632722][T22956] FAT-fs (loop1): Directory bread(block 65) failed [ 707.668025][T22956] FAT-fs (loop1): Directory bread(block 66) failed [ 707.694716][ T26] audit: type=1326 audit(1750787705.354:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22954 comm="syz.6.7942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a4f8e929 code=0x7ffc0000 [ 707.723785][T22956] FAT-fs (loop1): Directory bread(block 67) failed [ 707.733637][T22956] FAT-fs (loop1): Directory bread(block 68) failed [ 707.755614][T22956] FAT-fs (loop1): Directory bread(block 69) failed [ 707.803431][T22956] FAT-fs (loop1): Directory bread(block 70) failed [ 707.845177][T22956] FAT-fs (loop1): Directory bread(block 71) failed [ 707.870353][ T4251] XFS (loop4): Unmounting Filesystem [ 707.876248][T22956] FAT-fs (loop1): Directory bread(block 72) failed [ 707.899288][T22956] FAT-fs (loop1): Directory bread(block 73) failed [ 707.960793][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7947'. [ 708.063706][T22968] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7948'. [ 708.329293][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7951'. [ 708.354519][T22975] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7951'. [ 708.402169][T22975] netlink: 'syz.2.7951': attribute type 1 has an invalid length. [ 708.629605][T22987] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.7956'. [ 708.948303][T23002] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7961'. [ 709.262452][ T128] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 709.333709][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7970'. [ 709.376606][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7970'. [ 709.445653][ T128] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 709.496394][ T128] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.531002][ T128] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 709.573451][ T128] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 709.592132][ T128] usb 5-1: Product: syz [ 709.604956][T23029] loop6: detected capacity change from 0 to 4096 [ 709.605725][ T128] usb 5-1: Manufacturer: syz [ 709.639469][ T128] hub 5-1:4.0: USB hub found [ 709.707271][T23036] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.829681][ T128] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 710.143896][ T128] usb 5-1: USB disconnect, device number 92 [ 710.236795][T23051] loop6: detected capacity change from 0 to 4096 [ 710.258106][T23051] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 710.274955][T23054] loop1: detected capacity change from 0 to 4096 [ 710.310254][T23054] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 710.350530][T23054] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 710.384061][T23054] ntfs: (device loop1): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 710.413335][T23054] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 710.444063][ T7] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 710.461468][T23054] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 710.488357][T23054] ntfs: volume version 3.1. [ 710.653848][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 710.666303][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 710.696518][T23064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7992'. [ 710.715821][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 710.760722][T23067] xt_hashlimit: size too large, truncated to 1048576 [ 710.764279][ T7] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 710.782147][T23067] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 710.799597][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.808026][ T7] usb 3-1: Product: syz [ 710.816078][ T7] usb 3-1: Manufacturer: syz [ 710.824122][ T7] usb 3-1: SerialNumber: syz [ 710.865042][ T7] usb 3-1: config 0 descriptor?? [ 711.117229][T23082] netlink: 'syz.1.8001': attribute type 1 has an invalid length. [ 711.288536][ T7791] usb 3-1: USB disconnect, device number 85 [ 711.335720][T23091] loop1: detected capacity change from 0 to 256 [ 711.380805][T23093] trusted_key: encrypted_key: master key parameter '*' is invalid [ 711.774895][T23111] overlayfs: empty lowerdir [ 711.951784][T23116] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8017'. [ 711.973951][T23116] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8017'. [ 712.202741][T23126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8022'. [ 712.281538][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8024'. [ 712.318883][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8024'. [ 712.347539][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8024'. [ 712.534466][T23136] loop2: detected capacity change from 0 to 2048 [ 712.582936][T23136] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 712.623618][T23139] loop1: detected capacity change from 0 to 4096 [ 712.640657][T23136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.670101][T23143] loop5: detected capacity change from 0 to 2048 [ 712.704613][T23143] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 712.744210][T23143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.753818][T23139] ntfs: volume version 3.1. [ 713.493608][T23177] xt_cgroup: invalid path, errno=-2 [ 713.625664][T23183] loop1: detected capacity change from 0 to 256 [ 713.712858][ T4296] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 713.726288][T23187] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 713.884099][T23195] netlink: 'syz.4.8056': attribute type 1 has an invalid length. [ 713.916629][ T4296] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 713.938001][ T4296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.964693][ T4296] usb 7-1: Product: syz [ 713.972211][ T4296] usb 7-1: Manufacturer: syz [ 713.982416][ T4296] usb 7-1: SerialNumber: syz [ 714.009925][ T4296] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 714.071499][ T4296] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 714.338740][T23212] tmpfs: Bad value for 'mpol' [ 714.496887][ T4299] usb 7-1: USB disconnect, device number 19 [ 714.716516][T23228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8072'. [ 714.752557][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 714.771549][T23230] cgroup: Unexpected value for 'cpuset_v2_mode' [ 714.786319][T23228] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8072'. [ 715.085124][ T4296] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 715.092184][ T4296] ath9k_htc: Failed to initialize the device [ 715.122689][ T4299] usb 7-1: ath9k_htc: USB layer deinitialized [ 715.423741][T23258] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8086'. [ 715.598339][T23266] loop1: detected capacity change from 0 to 256 [ 715.663834][T23268] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 715.686346][T23266] FAT-fs (loop1): Directory bread(block 64) failed [ 715.706506][T23266] FAT-fs (loop1): Directory bread(block 65) failed [ 715.713174][T23266] FAT-fs (loop1): Directory bread(block 66) failed [ 715.761402][T23266] FAT-fs (loop1): Directory bread(block 67) failed [ 715.789773][T23266] FAT-fs (loop1): Directory bread(block 68) failed [ 715.828552][T23266] FAT-fs (loop1): Directory bread(block 69) failed [ 715.835544][T23266] FAT-fs (loop1): Directory bread(block 70) failed [ 715.916079][T23266] FAT-fs (loop1): Directory bread(block 71) failed [ 715.937906][T23266] FAT-fs (loop1): Directory bread(block 72) failed [ 715.980620][T23266] FAT-fs (loop1): Directory bread(block 73) failed [ 716.945307][T23329] __nla_validate_parse: 1 callbacks suppressed [ 716.945326][T23329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8120'. [ 717.409384][T23347] program syz.1.8130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.715464][T23323] loop5: detected capacity change from 0 to 32768 [ 717.805231][T23361] loop4: detected capacity change from 0 to 1024 [ 718.068126][T18645] hfsplus: b-tree write err: -5, ino 4 [ 718.242973][T23380] tmpfs: Bad value for 'mpol' [ 718.742333][T23402] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 718.742333][T23402] z,@qJ#"h/.W1ȱnNC"C<+`#k' [ 719.056998][T23415] loop6: detected capacity change from 0 to 2048 [ 719.066507][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8166'. [ 719.134771][T23415] loop6: p2 < > [ 719.152270][ T3623] loop6: p2 < > [ 719.290411][ T4329] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 719.565981][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 720.049569][T22830] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 720.206614][T23439] loop2: detected capacity change from 0 to 32768 [ 720.231079][T23439] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.8175 (23439) [ 720.250267][T22830] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 720.262320][T23439] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 720.284183][T22830] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.300136][T23439] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 720.322472][T23465] loop6: detected capacity change from 0 to 64 [ 720.327488][T22830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.341883][T23439] BTRFS info (device loop2): force zlib compression, level 3 [ 720.353772][T23439] BTRFS info (device loop2): force clearing of disk cache [ 720.361715][T23439] BTRFS info (device loop2): setting nodatasum [ 720.383167][T22830] usb 2-1: Product: syz [ 720.396300][T22830] usb 2-1: Manufacturer: syz [ 720.403453][T23439] BTRFS info (device loop2): allowing degraded mounts [ 720.410308][T23439] BTRFS info (device loop2): disabling tree log [ 720.410702][T22830] usb 2-1: SerialNumber: syz [ 720.449652][T23439] BTRFS info (device loop2): using free space tree [ 720.464450][T22830] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 720.543328][T22830] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 720.746733][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 720.746999][T23439] BTRFS info (device loop2): enabling ssd optimizations [ 720.798574][T23439] BTRFS info (device loop2): rebuilding free space tree [ 720.967915][ T4296] usb 2-1: USB disconnect, device number 60 [ 720.977499][ T4303] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 721.023883][ T4258] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 721.038777][T23499] loop4: detected capacity change from 0 to 64 [ 721.185084][ T4303] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 721.202995][ T4303] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.217983][ T4303] usb 7-1: config 0 descriptor?? [ 721.253779][ T4303] cp210x 7-1:0.0: cp210x converter detected [ 721.433079][ T4303] usb 7-1: cp210x converter now attached to ttyUSB0 [ 721.564444][T22830] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 721.573692][T22830] ath9k_htc: Failed to initialize the device [ 721.591737][ T4296] usb 2-1: ath9k_htc: USB layer deinitialized [ 721.629571][ T128] usb 7-1: USB disconnect, device number 20 [ 721.646024][ T128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 721.665151][ T128] cp210x 7-1:0.0: device disconnected [ 721.812452][ T4303] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 721.978214][T23527] netlink: 'syz.1.8211': attribute type 1 has an invalid length. [ 721.986986][T23527] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8211'. [ 721.993626][ T4303] usb 6-1: Using ep0 maxpacket: 16 [ 722.011308][ T4303] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 722.030012][ T4303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.062116][ T4303] usb 6-1: config 0 descriptor?? [ 722.081026][ T4303] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 722.264451][ T4303] usb 6-1: Detected FT232B [ 722.461664][ T4303] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 722.489780][ T4303] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 722.523482][ T4303] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 722.574884][ T4303] usb 6-1: USB disconnect, device number 21 [ 722.601597][T23550] syz.2.8220 (23550): drop_caches: 0 [ 722.613678][ T4303] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 722.639534][ T4303] ftdi_sio 6-1:0.0: device disconnected [ 723.122516][T23568] loop1: detected capacity change from 0 to 4096 [ 723.149143][T23568] EXT4-fs: Ignoring removed mblk_io_submit option [ 723.162259][T23576] netlink: 'syz.5.8234': attribute type 1 has an invalid length. [ 723.178257][T23568] EXT4-fs (loop1): Test dummy encryption mode enabled [ 723.222804][T23576] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.8234'. [ 723.262066][T23568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 723.365580][ T4299] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 723.419781][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 723.498572][T23586] netlink: 'syz.2.8238': attribute type 29 has an invalid length. [ 723.530316][T23586] netlink: 'syz.2.8238': attribute type 29 has an invalid length. [ 723.567397][ T4299] usb 7-1: config 0 has no interfaces? [ 723.581543][ T4299] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 723.582638][T23592] netlink: 'syz.4.8241': attribute type 3 has an invalid length. [ 723.599646][ T4299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.625225][ T4299] usb 7-1: Product: syz [ 723.638101][ T4299] usb 7-1: Manufacturer: syz [ 723.657331][ T4299] usb 7-1: SerialNumber: syz [ 723.674105][ T4299] r8152-cfgselector 7-1: config 0 descriptor?? [ 723.680214][T23592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.711203][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.717559][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.909295][ T4299] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 724.105989][ T4299] usb 7-1: USB disconnect, device number 21 [ 724.301237][T23624] Unknown options in mask 5 [ 724.422523][T23629] netlink: 960 bytes leftover after parsing attributes in process `syz.1.8258'. [ 724.439556][ T26] audit: type=1107 audit(1750787723.173:138): pid=23626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L<5' [ 724.932032][T23655] netlink: 404 bytes leftover after parsing attributes in process `syz.2.8271'. [ 724.963197][T23655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8271'. [ 725.028241][T23655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8271'. [ 725.063296][T23655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8271'. [ 725.167411][T23665] netlink: 'syz.6.8277': attribute type 9 has an invalid length. [ 725.294129][T23671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8280'. [ 726.100315][ T4299] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 726.211667][T23716] libceph: resolve '4..' (ret=-3): failed [ 726.219454][T23719] device geneve4 entered promiscuous mode [ 726.300679][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 726.315940][ T4299] usb 3-1: unable to get BOS descriptor or descriptor too short [ 726.333327][ T4299] usb 3-1: config 4 interface 0 has no altsetting 0 [ 726.356312][ T4299] usb 3-1: string descriptor 0 read error: -22 [ 726.376148][ T4299] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 726.377774][T23722] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 726.377774][T23722] program syz.1.8304 not setting count and/or reply_len properly [ 726.399599][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.442099][ T4299] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 726.464167][ T4299] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 726.494514][ T4299] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 726.517907][ T4299] usb 3-1: media controller created [ 726.556528][ T4299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 726.592680][T23729] loop5: detected capacity change from 0 to 64 [ 726.818040][T23704] loop6: detected capacity change from 0 to 32768 [ 726.868979][T23735] loop5: detected capacity change from 0 to 8 [ 727.062719][T22830] usb 3-1: USB disconnect, device number 86 [ 727.098662][T23704] XFS (loop6): Mounting V5 Filesystem [ 727.213979][ T7791] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 727.248172][ T7791] XFS (loop6): Unmount and run xfs_repair [ 727.262928][ T7791] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 727.301549][ T7791] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 727.310467][ T7791] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 727.348998][ T7791] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 727.357900][ T7791] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 727.408658][ T7791] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 727.431673][ T7791] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 727.472712][ T7791] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 727.481613][ T7791] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 727.544590][T23704] XFS (loop6): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 727.565184][T23704] XFS (loop6): Error -117 reserving per-AG metadata reserve pool. [ 727.575214][T23767] netlink: 'syz.4.8319': attribute type 1 has an invalid length. [ 727.590315][T23704] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 727.622237][T23767] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8319'. [ 727.678059][T23704] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 727.703006][T23704] XFS (loop6): Ending clean mount [ 727.708450][T23704] XFS (loop6): Failed to initialize disk quotas. [ 727.770292][T23704] XFS (loop6): Error -5 reserving per-AG metadata reserve pool. [ 727.820263][T23776] loop1: detected capacity change from 0 to 1024 [ 727.878292][T13135] XFS (loop6): Unmounting Filesystem [ 728.135797][T23785] netlink: 'syz.2.8328': attribute type 1 has an invalid length. [ 728.378934][T23793] netlink: 'syz.4.8332': attribute type 3 has an invalid length. [ 728.613036][T23801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8327'. [ 728.774555][T23779] loop5: detected capacity change from 0 to 32768 [ 728.820030][T23779] (syz.5.8324,23779,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 728.870334][T23779] (syz.5.8324,23779,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 728.957599][T23779] JBD2: Ignoring recovery information on journal [ 729.112900][T23779] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 729.166126][T23819] loop2: detected capacity change from 0 to 64 [ 729.224880][T23779] [ 729.227253][T23779] ====================================================== [ 729.234275][T23779] WARNING: possible circular locking dependency detected [ 729.241320][T23779] 6.1.141-syzkaller #0 Not tainted [ 729.246440][T23779] ------------------------------------------------------ [ 729.253466][T23779] syz.5.8324/23779 is trying to acquire lock: [ 729.259549][T23779] ffff88802859c650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x66e/0xb10 [ 729.268990][T23779] [ 729.268990][T23779] but task is already holding lock: [ 729.276361][T23779] ffff8880553ca2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 729.287250][T23779] [ 729.287250][T23779] which lock already depends on the new lock. [ 729.287250][T23779] [ 729.297643][T23779] [ 729.297643][T23779] the existing dependency chain (in reverse order) is: [ 729.306641][T23779] [ 729.306641][T23779] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 729.315546][T23779] down_write+0x36/0x60 [ 729.320230][T23779] ocfs2_lock_global_qf+0x1e5/0x270 [ 729.325949][T23779] ocfs2_acquire_dquot+0x2a0/0xb10 [ 729.331575][T23779] dqget+0x778/0xeb0 [ 729.335981][T23779] dquot_set_dqblk+0x27/0xf90 [ 729.341168][T23779] quota_setquota+0x4ac/0x530 [ 729.346354][T23779] __se_sys_quotactl+0x295/0x6b0 [ 729.351801][T23779] do_syscall_64+0x4c/0xa0 [ 729.356729][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.363134][T23779] [ 729.363134][T23779] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 729.373640][T23779] down_write+0x36/0x60 [ 729.378313][T23779] ocfs2_lock_global_qf+0x1c7/0x270 [ 729.384023][T23779] ocfs2_acquire_dquot+0x2a0/0xb10 [ 729.389645][T23779] dqget+0x778/0xeb0 [ 729.394050][T23779] dquot_set_dqblk+0x27/0xf90 [ 729.399236][T23779] quota_setquota+0x4ac/0x530 [ 729.404424][T23779] __se_sys_quotactl+0x295/0x6b0 [ 729.409872][T23779] do_syscall_64+0x4c/0xa0 [ 729.414800][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.421209][T23779] [ 729.421209][T23779] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 729.428845][T23779] __mutex_lock+0x120/0xaf0 [ 729.433861][T23779] dquot_commit+0x5a/0x410 [ 729.438787][T23779] ext4_write_dquot+0x1f0/0x360 [ 729.444328][T23779] mark_all_dquot_dirty+0xf9/0x400 [ 729.449953][T23779] __dquot_free_space+0x7ec/0xbc0 [ 729.455507][T23779] ext4_free_blocks+0x1bab/0x2640 [ 729.461047][T23779] ext4_ext_remove_space+0x1f0d/0x4490 [ 729.467107][T23779] ext4_ext_truncate+0x211/0x370 [ 729.472556][T23779] ext4_truncate+0xa0b/0x1230 [ 729.477740][T23779] ext4_evict_inode+0xb35/0x1100 [ 729.483184][T23779] evict+0x485/0x870 [ 729.487591][T23779] vfs_rmdir+0x397/0x4d0 [ 729.492347][T23779] do_rmdir+0x288/0x5e0 [ 729.497012][T23779] __x64_sys_unlinkat+0xc0/0xe0 [ 729.502377][T23779] do_syscall_64+0x4c/0xa0 [ 729.507497][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.513926][T23779] [ 729.513926][T23779] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 729.521570][T23779] down_write+0x36/0x60 [ 729.526251][T23779] ext4_truncate+0x987/0x1230 [ 729.531437][T23779] ext4_setattr+0x10cb/0x19f0 [ 729.536627][T23779] notify_change+0xc74/0xf40 [ 729.541729][T23779] do_truncate+0x197/0x220 [ 729.546655][T23779] do_sys_ftruncate+0x312/0x3c0 [ 729.552043][T23779] do_syscall_64+0x4c/0xa0 [ 729.556969][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.563379][T23779] [ 729.563379][T23779] -> #2 (jbd2_handle){++++}-{0:0}: [ 729.570667][T23779] start_this_handle+0x1f49/0x2150 [ 729.576290][T23779] jbd2__journal_start+0x2b7/0x5a0 [ 729.581907][T23779] jbd2_journal_start+0x26/0x30 [ 729.587263][T23779] ocfs2_start_trans+0x372/0x6c0 [ 729.592709][T23779] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 729.598939][T23779] ocfs2_dismount_volume+0x1fc/0x930 [ 729.604735][T23779] generic_shutdown_super+0x130/0x340 [ 729.610621][T23779] kill_block_super+0x7c/0xe0 [ 729.615813][T23779] deactivate_locked_super+0x93/0xf0 [ 729.621615][T23779] cleanup_mnt+0x463/0x4f0 [ 729.626552][T23779] task_work_run+0x1ca/0x250 [ 729.631657][T23779] exit_to_user_mode_loop+0xe6/0x110 [ 729.637460][T23779] exit_to_user_mode_prepare+0xb1/0x140 [ 729.643519][T23779] syscall_exit_to_user_mode+0x16/0x40 [ 729.649494][T23779] do_syscall_64+0x58/0xa0 [ 729.654461][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.660869][T23779] [ 729.660869][T23779] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 729.669377][T23779] down_read+0x42/0x2d0 [ 729.674042][T23779] ocfs2_start_trans+0x366/0x6c0 [ 729.679494][T23779] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 729.685723][T23779] ocfs2_dismount_volume+0x1fc/0x930 [ 729.691519][T23779] generic_shutdown_super+0x130/0x340 [ 729.697400][T23779] kill_block_super+0x7c/0xe0 [ 729.702587][T23779] deactivate_locked_super+0x93/0xf0 [ 729.708387][T23779] cleanup_mnt+0x463/0x4f0 [ 729.713315][T23779] task_work_run+0x1ca/0x250 [ 729.718417][T23779] exit_to_user_mode_loop+0xe6/0x110 [ 729.724212][T23779] exit_to_user_mode_prepare+0xb1/0x140 [ 729.730272][T23779] syscall_exit_to_user_mode+0x16/0x40 [ 729.736239][T23779] do_syscall_64+0x58/0xa0 [ 729.741170][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.747578][T23779] [ 729.747578][T23779] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 729.755048][T23779] __lock_acquire+0x2cf8/0x7c50 [ 729.760413][T23779] lock_acquire+0x1b4/0x490 [ 729.765429][T23779] ocfs2_start_trans+0x267/0x6c0 [ 729.770884][T23779] ocfs2_acquire_dquot+0x66e/0xb10 [ 729.776505][T23779] dqget+0x778/0xeb0 [ 729.780909][T23779] dquot_set_dqblk+0x27/0xf90 [ 729.786097][T23779] quota_setquota+0x4ac/0x530 [ 729.791287][T23779] __se_sys_quotactl+0x295/0x6b0 [ 729.796735][T23779] do_syscall_64+0x4c/0xa0 [ 729.801663][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.808071][T23779] [ 729.808071][T23779] other info that might help us debug this: [ 729.808071][T23779] [ 729.818286][T23779] Chain exists of: [ 729.818286][T23779] sb_internal#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 729.818286][T23779] [ 729.835229][T23779] Possible unsafe locking scenario: [ 729.835229][T23779] [ 729.842664][T23779] CPU0 CPU1 [ 729.848013][T23779] ---- ---- [ 729.853364][T23779] lock(&ocfs2_quota_ip_alloc_sem_key); [ 729.858986][T23779] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 729.868783][T23779] lock(&ocfs2_quota_ip_alloc_sem_key); [ 729.876924][T23779] lock(sb_internal#2); [ 729.881157][T23779] [ 729.881157][T23779] *** DEADLOCK *** [ 729.881157][T23779] [ 729.889287][T23779] 4 locks held by syz.5.8324/23779: [ 729.894470][T23779] #0: ffff88802859c0e0 (&type->s_umount_key#56){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 729.904651][T23779] #1: ffff88805079a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 729.914653][T23779] #2: ffff8880553ca648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 729.927611][T23779] #3: ffff8880553ca2e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 729.938914][T23779] [ 729.938914][T23779] stack backtrace: [ 729.944787][T23779] CPU: 0 PID: 23779 Comm: syz.5.8324 Not tainted 6.1.141-syzkaller #0 [ 729.952929][T23779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.962969][T23779] Call Trace: [ 729.966237][T23779] [ 729.969155][T23779] dump_stack_lvl+0x168/0x22e [ 729.973825][T23779] ? load_image+0x3b0/0x3b0 [ 729.978318][T23779] ? show_regs_print_info+0x12/0x12 [ 729.983511][T23779] ? print_circular_bug+0x12b/0x1a0 [ 729.988707][T23779] check_noncircular+0x274/0x310 [ 729.993641][T23779] ? add_chain_block+0x940/0x940 [ 729.998587][T23779] ? lockdep_lock+0xdc/0x1e0 [ 730.003180][T23779] ? mark_lock+0x94/0x320 [ 730.007522][T23779] ? _find_first_zero_bit+0xcf/0x100 [ 730.012802][T23779] __lock_acquire+0x2cf8/0x7c50 [ 730.017654][T23779] ? verify_lock_unused+0x140/0x140 [ 730.022846][T23779] ? verify_lock_unused+0x140/0x140 [ 730.028037][T23779] ? mark_lock+0x94/0x320 [ 730.032356][T23779] ? verify_lock_unused+0x140/0x140 [ 730.037544][T23779] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 730.043521][T23779] lock_acquire+0x1b4/0x490 [ 730.048017][T23779] ? ocfs2_acquire_dquot+0x66e/0xb10 [ 730.053296][T23779] ? __might_sleep+0xd0/0xd0 [ 730.057885][T23779] ? do_raw_spin_lock+0x11d/0x280 [ 730.062903][T23779] ? read_lock_is_recursive+0x10/0x10 [ 730.068268][T23779] ? __rwlock_init+0x140/0x140 [ 730.073031][T23779] ? do_raw_spin_unlock+0x11d/0x230 [ 730.078223][T23779] ocfs2_start_trans+0x267/0x6c0 [ 730.083151][T23779] ? ocfs2_acquire_dquot+0x66e/0xb10 [ 730.088444][T23779] ? ocfs2_recovery_exit+0x50/0x50 [ 730.093542][T23779] ? do_raw_spin_unlock+0x11d/0x230 [ 730.098822][T23779] ? _raw_spin_unlock+0x24/0x40 [ 730.103663][T23779] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 730.108943][T23779] ocfs2_acquire_dquot+0x66e/0xb10 [ 730.114048][T23779] ? from_kgid+0x159/0x680 [ 730.118461][T23779] ? ocfs2_destroy_dquot+0x40/0x40 [ 730.123562][T23779] dqget+0x778/0xeb0 [ 730.127454][T23779] dquot_set_dqblk+0x27/0xf90 [ 730.132125][T23779] quota_setquota+0x4ac/0x530 [ 730.136793][T23779] ? quota_getnextquota+0x450/0x450 [ 730.141985][T23779] ? bpf_lsm_capable+0x5/0x10 [ 730.146657][T23779] ? do_quotactl+0x4f3/0x710 [ 730.151239][T23779] __se_sys_quotactl+0x295/0x6b0 [ 730.156169][T23779] ? __x64_sys_quotactl+0xa0/0xa0 [ 730.161193][T23779] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 730.167176][T23779] ? lock_chain_count+0x20/0x20 [ 730.172022][T23779] ? lockdep_hardirqs_on+0x94/0x140 [ 730.177209][T23779] do_syscall_64+0x4c/0xa0 [ 730.181622][T23779] ? clear_bhb_loop+0x60/0xb0 [ 730.186286][T23779] ? clear_bhb_loop+0x60/0xb0 [ 730.190953][T23779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.196841][T23779] RIP: 0033:0x7fa24d98e929 [ 730.201246][T23779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.220845][T23779] RSP: 002b:00007fa24e780038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 730.229255][T23779] RAX: ffffffffffffffda RBX: 00007fa24dbb5fa0 RCX: 00007fa24d98e929 [ 730.237231][T23779] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000801 [ 730.245211][T23779] RBP: 00007fa24da10b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.253177][T23779] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 730.261141][T23779] R13: 0000000000000000 R14: 00007fa24dbb5fa0 R15: 00007ffd457bf128 [ 730.269109][T23779] [ 730.310644][T23823] netlink: 'syz.6.8345': attribute type 11 has an invalid length. [ 730.328883][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8345'. [ 730.340289][T23825] xt_policy: neither incoming nor outgoing policy selected [ 730.404598][T13036] ocfs2: Unmounting device (7,5) on (node local) [ 730.874426][ T4260] Bluetooth: hci2: command 0x0405 tx timeout